GNOME Bugzilla – Bug 544344
Contact Manager binds to LDAP with simple binding rather than SASL
Last modified: 2021-05-19 11:03:46 UTC
The Contact Manager should use SASL to bind to the LDAP server if any SASL methods are available. Simple binding is just that, simple, requires a password, even if one has a Kerberos credential, and sends that password over the wire in the clear. Very very bad. Other information:
Well, me +1
Well, it seems that, right now, Evolution won't bind at all to the ldap server in anonymous mode. Servers usually want a simple bind for that, so it won't work.
GNOME is going to shut down bugzilla.gnome.org in favor of gitlab.gnome.org. As part of that, we are mass-closing older open tickets in bugzilla.gnome.org which have not seen updates for a longer time (resources are unfortunately quite limited so not every ticket can get handled). If you can still reproduce the situation described in this ticket in a recent and supported software version, then please follow https://wiki.gnome.org/Community/GettingInTouch/BugReportingGuidelines and create a new ticket at https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/ Thank you for your understanding and your help.