[ 
https://issues.apache.org/jira/browse/DIRSERVER-2347?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17345014#comment-17345014
 ] 

Emmanuel Lécharny commented on DIRSERVER-2347:
----------------------------------------------

The extended response is:

{noformat}
30 10 
  02 01 04 
  78 0b 
  0a 01 00
  04 00 
  04 00 
  8b 02  <--- this...
    30 00
{noformat}

and

{noformat}
        ExtendedResponse ::= [APPLICATION 24] SEQUENCE {
                COMPONENTS OF LDAPResult,
                responseName     [10] LDAPOID OPTIONAL,
                response         [11] OCTET STRING OPTIONAL } <<--- This is the 
last 8B 02 30 00
{noformat}

* 8B encocdes for response [11]
* 02 is the length of the OCTET STRING (2 bytes)
* now we should have 04 instead of 30.

I will investigate.

> Incorrect Password Modify response (extended response)
> ------------------------------------------------------
>
>                 Key: DIRSERVER-2347
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-2347
>             Project: Directory ApacheDS
>          Issue Type: Bug
>          Components: asn1, changepw
>    Affects Versions: 2.0.0.AM26
>            Reporter: Oleksandr Andreiev
>            Priority: Major
>         Attachments: 2021-05-14_09-00.png
>
>
> Hello,
> I'm using ApacheDS as LDAP Server along with Linux PAM.
> When I try to change user's password via `passwd` ApacheDS actually changes 
> it, but sends some extra bytes with ExtendedResp packet. Because these bytes 
> an extra `pam_ldap` library cannot parse it and generates an decoding error.
> The same issue is described here:
>  [https://lists.arthurdejong.org/nss-pam-ldapd-users/2019/msg00030.html]
> Is there a way to handle it or probably some workaround?
> Regards,
> Oleksandr



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to