Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:89058
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: error (pb1.pair.com: domain heigl.org from 195.191.240.18 cause and error)
To: "internals@lists.php.net" <internals@lists.php.net>
References: <3187501.to7rK1FKUl@mcmic-probook>
 <CAEYWF=4too2Uv5fDsB_74VJttDK4J74VhM2Fox_j6nZ-yLnX7A@mail.gmail.com>
 <5638C725.60805@heigl.org> <7F.A7.13519.74609365@pb1.pair.com>
Message-ID: <56390DFD.2050203@heigl.org>
Date: Tue, 3 Nov 2015 20:41:49 +0100
MIME-Version: 1.0
In-Reply-To: <7F.A7.13519.74609365@pb1.pair.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms030800000403020706030608"
Subject: Re: [PHP-DEV] Small regression in PHP-LDAP
From: andreas@heigl.org (Andreas Heigl)

--------------ms030800000403020706030608
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Am 03.11.15 um 20:07 schrieb Andrea Faulds:
> Hi Andreas,
>=20
> Andreas Heigl wrote:
>> +1 on that solution. Just throwing "host:port" onto something doesn't
>> help anyone. Try that with "www.google.com:443" in your favourite
>> browser. Most will give you an error (if it's not port 80). So those
>> people that try it will eventually read the documentation on php.net a=
nd
>> then see that it's not supported.
>=20
> If you give the port number for a non-HTTP TCP application then yes,
> your browser will spit an error back at you, because HTTP is the
> implicit URI scheme. That doesn't mean hostname:port is wrong, it's
> perfectly valid for HTTP. Similarly, I could give my LDAP URI as
> google.com:80 and get an error, but I don't think that's a fault with
> hostname:port.
>=20
> The PHP interpreter itself uses it for HTTP:
>=20
> $ php -S localhost:8000
>=20
> I'm unconvinced.

Hi Andrea.

The documentation mentions two different ways of using ldap_connect:
either with 2 parameters being host and port (from which the port is
optional) or with a single parameter using an LDAP-URI. There is a third
possibility mentioned in one of the comments of passing in a string of
multiple LDAP-URIs separated by a space. But I couldn't find a mention
of "host:port".

As there is an explicit mention of an URI the scheme is mandatory. And
as the scheme is used to differentiate between ldap and ldaps it's a
somewhat different story than the paramteter to phps internal server as
that one ONLY serves http (AFAIK). And it is explicitly stated that the
first version of ldap_connect with two parameters *only* allows
connections via ldap (not ldaps). If you want to use ldaps as scheme you
are required to use the second form with the LDAP-URI. So if someone
passes a single parameter 'host:port' to ldap_connect I'm sure they want
to use ldaps as protocol?

In my eyes the main question is whether we want to support something
that was never intended and nowhere documented just because someone
tried something and by luck didn't break something. I'd consider the
possibility to pass 'host:port' as single parameter to ldap_connect as a
bug and not as a feature. Therefore I'd rather see that bug fixed sooner
than later. And have the documentation point out explicitly that using
'host:port' without a scheme is NOT supported even though it might have
once worked.

Cheers

Andreas
--=20
                                                              ,,,
                                                             (o o)
+---------------------------------------------------------ooO-(_)-Ooo-+
| Andreas Heigl                                                       |
| mailto:andreas@heigl.org                  N 50=C2=B022'59.5" E 08=C2=B0=
23'58" |
| http://andreas.heigl.org                       http://hei.gl/wiFKy7 |
+---------------------------------------------------------------------+
| http://hei.gl/root-ca                                               |
+---------------------------------------------------------------------+



--------------ms030800000403020706030608
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
BawwggWoMIIDkKADAgECAgMPT+kwDQYJKoZIhvcNAQENBQAweTEQMA4GA1UEChMHUm9vdCBD
QTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNp
Z25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5vcmcwHhcN
MTQwNzIzMDkzMjQ5WhcNMTYwNzIyMDkzMjQ5WjBcMRYwFAYDVQQDEw1BbmRyZWFzIEhlaWds
MSAwHgYJKoZIhvcNAQkBFhFhLmhlaWdsQGhlaWdsLm9yZzEgMB4GCSqGSIb3DQEJARYRYW5k
cmVhc0BoZWlnbC5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6XLcWFLD
vAXgllUikBAU2Rv63m7ZKP+ZU/2HTWDW0BJ2muK7GD3cGZxbKKosO6l6PSqqmLqUJ8G6b/85
iPQmNL5z+LG/+wt/p31SOMAWc5UA7CJAQ9pivUCcV+Yt0LzoxWO5ME2rEZ/ioB2tXMilkJLM
U4f5A9m3YZVSKj3xbM7rIpQEZiK0TrZ4MchTwPMdAwBLBxCoAztcg4Yj4qKd+IQLff0Ldhc5
3tc9b+XT7YzWLY5rQKHE+hKqIAdvYfqqKQZFHBBXptSXUXBeYK5a4UT0fpnMP7toqr/9mLlK
+FvDNeVwSo5I/abiqdek1lH0/xwYy9im8k4SRtLTAp7hAgMBAAGjggFUMIIBUDAMBgNVHRMB
Af8EAjAAMFYGCWCGSAGG+EIBDQRJFkdUbyBnZXQgeW91ciBvd24gY2VydGlmaWNhdGUgZm9y
IEZSRUUgaGVhZCBvdmVyIHRvIGh0dHA6Ly93d3cuQ0FjZXJ0Lm9yZzAOBgNVHQ8BAf8EBAMC
A6gwQAYDVR0lBDkwNwYIKwYBBQUHAwQGCCsGAQUFBwMCBgorBgEEAYI3CgMEBgorBgEEAYI3
CgMDBglghkgBhvhCBAEwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzABhhZodHRwOi8vb2Nz
cC5jYWNlcnQub3JnMDEGA1UdHwQqMCgwJqAkoCKGIGh0dHA6Ly9jcmwuY2FjZXJ0Lm9yZy9y
ZXZva2UuY3JsMC8GA1UdEQQoMCaBEWEuaGVpZ2xAaGVpZ2wub3JngRFhbmRyZWFzQGhlaWds
Lm9yZzANBgkqhkiG9w0BAQ0FAAOCAgEAlG1bUuar9u5ONtedFR7UHp7MNa5Lnu+VzQ6IQAg+
ghXlHdLqU2V2R8BaWCFlaCCkGqX8Od5Z0XpAKfHlfbVMV7vRZBqhnzwe28+QqcI47pzawaBo
DFNjS138orZEOPW88S8JcTsoUfy57U7z/4tSjYwCFKmLFQLLPWt/TzhrPWCgdg5PANSTELnH
YGy5cA66pbGRp9B/ofHOpAxW4mQPGPEcXHZpkkna4034PkPKGyGg24YTqS+0zVPrXiEemKY8
f7vuSnvnHTQc61Ubk091UGI0dUUJeEncEDR1G5uTzTLdk+5/J6O2CA3gpCMjmAdly7p2WzrX
9LEWJ5f+VvkE/NzerPZyOdC1HTRvQAHkpxewyg4u8MHjBhakVXBLzOVSoEOd6ttSvquSyUU/
1hhDuKZaz3kBnGpyhlnY3ZqN7mhF15XcD//C8kKAe6rDF7+asKIQV59GAkyeTSBGFt0eceqQ
bD/gcGWWfPZK6jTLVFvr1eXERLF9MPoA0+JdfpzjfC9shfVfAjLBI97MGKzpXBR8B9GT+ieY
yUM101/vsb6mne6nTtj9cIf74S4T6yEFL5+Oi2JsVDgh0mSKNiFLfZvLFJOfyF2KctGIS1Jv
mjJU8CznFdd7Z9psgoaXk2HwvgJXkfKBCW1RdrzdyXrGVymqEyGVqiG5gZ0iC1ZfFRcxggOx
MIIDrQIBATCBgDB5MRAwDgYDVQQKEwdSb290IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNh
Y2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG
9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZwIDD0/pMA0GCWCGSAFlAwQCAQUAoIICATAYBgkq
hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNTExMDMxOTQxNDlaMC8G
CSqGSIb3DQEJBDEiBCAnm0B7ikQeAsHMQZJmEMcT7P6gQte2CfhbK4xTf67I6jBsBgkqhkiG
9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZI
hvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGRBgkr
BgEEAYI3EAQxgYMwgYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3
dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJ
KoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAw9P6TCBkwYLKoZIhvcNAQkQAgsxgYOg
gYAweTEQMA4GA1UEChMHUm9vdCBDQTEeMBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3Jn
MSIwIAYDVQQDExlDQSBDZXJ0IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJz
dXBwb3J0QGNhY2VydC5vcmcCAw9P6TANBgkqhkiG9w0BAQEFAASCAQBrCiNgUoTGV8ozP7rC
WvrBCIxC1Jh3TdbZmDFryIGb27ab2X+l6wpfkGHHonTZFHXXyMtBA/c9Soov/XKMKsC8NO2b
R9OY5TQ8DwNz8eXjgeWJ7Tj9HmRzWaMFLyEsBYeWUKEbrX/h421MPzDM8qK18rucXtqjDWi0
IeI6HzmXemdlXLlwCXocagbKt1Nbh/EOS9y/cYjysMddAR33ofoWpbsWf2BBISKG2VF4WgLZ
obi8M8GLDK1pfqe2aUEdJydkjKEvAVhYf1efnhebQcwIS2JT8YALDjvCZJSrSXSRM7NNADCX
7aUAIaEC/khgwcePdap9U2lgC/LhgnOQtor4AAAAAAAA
--------------ms030800000403020706030608--