Bug#553165: icedove: offline replication of LDAP address book uses anonymous bind

[Tollef Fog Heen]

Package: icedove
Version: 2.0.0.22-0lenny1
Severity: normal

It seems like the «Download addressbook for offline use» is using
anonymous binds rather than prompting for a password.

Server-side, it looks like:
Oct 29 11:50:05 phaal slapd[17385]: conn=24 fd=23 ACCEPT from IP=78.86.233.73:59038 (IP=0.0.0.0:636)
Oct 29 11:50:05 phaal slapd[17385]: conn=24 fd=23 TLS established tls_ssf=256 ssf=256
Oct 29 11:50:05 phaal slapd[17385]: conn=24 op=0 BIND dn="" method=128
Oct 29 11:50:05 phaal slapd[17385]: conn=24 op=0 RESULT tag=97 err=48 text=anonymous bind disallowed
Oct 29 11:50:05 phaal slapd[17385]: conn=24 op=1 UNBIND
Oct 29 11:50:05 phaal slapd[17385]: conn=24 fd=23 closed

To reproduce, set up slapd with «disallow bind_anon» and then try to
download an address book for offline use.

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (50, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=nb_NO.UTF-8, LC_CTYPE=nb_NO.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages icedove depends on:
ii  debianutils            3.2.1             Miscellaneous utilities specific t
ii  fontconfig             2.6.0-4           generic font configuration library
ii  libatk1.0-0            1.28.0-1          The ATK accessibility toolkit
ii  libc6                  2.9-25            GNU C Library: Shared libraries
ii  libcairo2              1.8.8-2           The Cairo 2D vector graphics libra
ii  libfontconfig1         2.6.0-4           generic font configuration library
ii  libfreetype6           2.3.11-1          FreeType 2 font engine, shared lib
ii  libgcc1                1:4.4.1-4         GCC support library
ii  libglib2.0-0           2.22.2-2          The GLib library of C routines
ii  libgtk2.0-0            2.18.2-1          The GTK+ graphical user interface 
ii  libhunspell-1.2-0      1.2.8-5           spell checker and morphological an
ii  libjpeg62              6b-15             The Independent JPEG Group's JPEG 
ii  libnspr4-0d            4.8-1             NetScape Portable Runtime Library
ii  libnss3-1d             3.12.4-1          Network Security Service libraries
ii  libpango1.0-0          1.26.0-1          Layout and rendering of internatio
ii  libpng12-0             1.2.40-1          PNG library - runtime
ii  libstdc++6             4.4.1-4           The GNU Standard C++ Library v3
ii  libx11-6               2:1.2.2-1         X11 client-side library
ii  libxft2                2.1.13-3          FreeType-based font drawing librar
ii  libxinerama1           2:1.0.3-2         X11 Xinerama extension library
ii  libxrender1            1:0.9.4-2         X Rendering Extension client libra
ii  libxt6                 1:1.0.6-1         X11 toolkit intrinsics library
ii  psmisc                 22.8-1            utilities that use the proc file s
ii  zlib1g                 1:1.2.3.3.dfsg-15 compression library - runtime

icedove recommends no packages.

Versions of packages icedove suggests:
pn  icedove-gnome-support         <none>     (no description available)
ii  latex-xft-fonts               1.6.4-1    TrueType versions of some TeX font
ii  libthai0                      0.1.12-1   Thai language support library

-- no debconf information

-- 
Tollef Fog Heen 
UNIX is user friendly, it's just picky about who its friends are