Clément "KPTN" OUDOT

Hello @dipusone, sorry for this late reply. Your message is very clear, but I don't understand why configuring `$who_change_password = "user"` is not enough?

Hello, I tried to test these changes on a server where I can reproduce the issue. Here is the patch I applied on 2.1 branch: ``` diff --git a/src/main/java/org/lsc/jndi/ActiveDirectoryDstService.java b/src/main/java/org/lsc/jndi/ActiveDirectoryDstService.java...

Fixed by #267

@soisik We should revert this change and try to follow @rouazana recommandation (put generated java file in target, or at least in src/generated)

We don't use Moose to have a lighter memory use, but I can maybe give a try. Why do you say it's intended? Seems to work well on recent Perl.

Sadly, the bug occurs only in mod_perl, with MPM worker, with quite old Perl version (5.10). It works well on the same system with MPM prefork. I can reproduce the...

We will have a look. We should check if there is no impact switching to 8.2.

I see that PHP 8.1.14 was released: https://www.php.net/archive/2023.php#2023-01-05-1 It is maybe enough to solve security issues?

@jul-fls could you give the link to ANSSI report / CVE?

Thanks. There is not much information in it, we can't know if we use a component/class impacted. Anyway, we'll provide an updated version when releasing 1.5.3