[Kolab-devel] [issue479] resource manager doesn't work for normal users

[Bernhard Herzog]

New submission from Bernhard Herzog <bh at intevation.de>:

The resource manager doesn't work for normal users.  I gave the calendar user
(email calendar at domain.tld) write access to the default calendar folder and set
the policy to "Manual if conflicts".  When I send an invitation to the user, the
mail comes back with an error message.  The resmgr.log shows:

October 20 17:51:25 resmgr.php[29249]: Error: (IMAP) Too many login failures 
October 20 17:51:25 resmgr.php[29249]: Error: (IMAP) Login failed:
authentication failure 

Turns out the password for the calendar user has a trailing newline in LDAP
which is not there in resmgr.conf.

When I fix the password resmgr.php gets a little further but fails when trying
to retrieve the fblist, but haven't investigated why yet.  Possible clue is the
decryption error:

October 20 18:03:04 resmgr.php[29621]: Error decrypting password:
error:0407106B:rsa routines:RSA_padding_check_PKCS1_type_2:block type is not 02 
October 20 18:03:04 resmgr.php[29621]: Error decrypting password:
error:04065072:rsa routines:RSA_EAY_PRIVATE_DECRYPT:padding check failed 

For users the resmgr should not expect there to be an encrypted password in the
user's ldap entry and use the calendar credentials instead.  The calendar user's
password could perhaps be stored encrypted, though.

----------
assignedto: steffen
messages: 2526
nosy: bh, steffen
priority: bug
status: unread
title: resource manager doesn't work for normal users
topic: proko2, server
________________________________________________
Kolab issue tracker <kolab-issues at intevation.de>
<https://intevation.de/roundup/kolab/issue479>
________________________________________________