Ticket #1484415: ldap_bind.diff

config/main.inc.php.dist

@@ -189 +189 @@
 // in order to enable public ldap search, create a config array
 // like the Verisign example below. if you would like to test, 
 // simply uncomment the Verisign example.
+//
+// To use authenticated LDAP, simply fill in the bind_dn and bind_pass
+// values. You can use the wildcards %u and %p to use the currently
+// authenticated user's username and password. Obviously this means
+// you will run into problems if either credential literally contains
+// that sequence but this is not very likely :)
 /** 
  * example config for Verisign directory
  *

program/include/rcube_ldap.inc

@@ -110 +110 @@
   {
     if (!$this->conn)
       return false;
-    
+
+    $dn = str_replace('%u', $_SESSION['username'], $dn);
+    $pass = str_replace('%p', decrypt_passwd($_SESSION['password']), $pass);
+
     if (@ldap_bind($this->conn, $dn, $pass))
       return true;
     else