Howard Chu
1702d408bf
ITS#2184 maxbuf tweaks from Larry Greenfield @ CMU
2002-11-27 03:51:46 +00:00
Howard Chu
3099d89d9e
Don't use sasl_set_alloc on Cyrus 2, it manages all of its memory
...
internally and we don't want to get in the way.
2002-09-02 22:25:26 +00:00
Howard Chu
d11b134709
Fix large SASL reads. Use EAGAIN instead of EWOULDBLOCK (was right the
...
first time after all. see read(2) and write(2)...)
2002-08-30 10:11:54 +00:00
Pierangelo Masarati
864f05497e
allow different solutions to debug sasl shutdown
2002-08-29 17:45:12 +00:00
Pierangelo Masarati
c2efb8788b
when shutting down a server with open connections (back-{ldap,meta}),
...
the backend attempts a ldap_unbind() that results in calling
ldap_pvt_sasl_mutex_lock() with a NULL argument, causing a SIGSEGV.
I added a few assert() to catch this (I wonder if this might
be related to ITS#1982 "kill -INT corrupts database").
2002-08-29 16:03:38 +00:00
Howard Chu
1dd1c375bb
Fix previous commit - use EWOULDBLOCK instead of EAGAIN
2002-08-29 13:38:36 +00:00
Howard Chu
010dbff2cc
Fix ITS#1983, in sb_sasl_write, set errno = EAGAIN to tell upper layers to
...
retry partial writes
2002-08-29 10:12:35 +00:00
Howard Chu
5ec4ef6e59
Added no-op for SASL_VERSION_MAJOR < 2
2002-08-28 08:35:38 +00:00
Howard Chu
3cb7a09eb0
Added check for Cyrus SASL sasl_version()
2002-08-28 07:12:22 +00:00
Julius Enarusai
6107ba67d2
Coverted LDAP_LOG macro to use subsystem ID int values instead of string values
2002-07-11 20:33:24 +00:00
Howard Chu
07ffaeaac8
ITS#1924 use GENERAL_NAMES_free instead of ext_free.
2002-07-05 21:59:02 +00:00
Howard Chu
8101798791
Better SASL_MAXBUF fix
2002-06-07 03:40:16 +00:00
Howard Chu
353f627aa4
Eliminate SASL client session_callbacks. Since proc was always NULL they
...
never did anything anyway.
2002-06-06 01:44:38 +00:00
Howard Chu
2ca4b0ebfc
ITS#1806, Cyrus 1 doesn't give back our callbacks pointer, must stash it
...
ourselves.
2002-05-06 23:56:35 +00:00
Howard Chu
ae3a80eb09
Fix in 1.50 applies to Cyrus 1 as well as Cyrus 2.
2002-05-05 19:15:29 +00:00
Howard Chu
6c1a786d6c
Fix previous commit, wrong if condition
2002-05-03 13:07:42 +00:00
Howard Chu
ed871b997c
Break up large SASL writes into units of SASL maxoutbuf size.
2002-05-03 13:04:55 +00:00
Howard Chu
931c4eb35f
For Cyrus 2, cannot free session_callbacks in ldap_int_sasl_open, must
...
wait until ldap_int_sasl_close because SASL doesn't copy our structure,
it uses it directly.
2002-05-03 12:10:47 +00:00
Howard Chu
315ac06912
Fix warnings from sasl_errdetail
2002-04-18 12:20:55 +00:00
Howard Chu
98a416b584
Additional error reporting for Cyrus SASL 2. Attempt to get SASL-EXTERNAL
...
working ifor Cyrus 2. (Both GSSAPI and EXTERNAL are broken at the moment.)
2002-04-18 00:48:36 +00:00
Kurt Zeilenga
709ce4fa6c
Re: Patch: ctype functions require 'unsigned char' args (ITS#1678)
...
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
================
Here are fixes for more places where the argument to ctype.h functions
should be in the range of `unsigned char'.
Explanation of the last patch (to schema_init.c:bvcasechr()):
TOLOWER() and TOUPPER() return values in the range of `unsigned char',
but bvcasechr() then compares those values with a plain `char'. So I
convert the return values from TOLOWER()/TOUPPER() to `char' first.
Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-15 20:42:42 +00:00
Julius Enarusai
3ab1ea7300
Added LDAP_LOG messages
2002-03-27 19:12:18 +00:00
Kurt Zeilenga
defed68e82
Fix typo
2002-02-11 18:18:34 +00:00
Howard Chu
a916535a27
Fix #include of sasl.h
2002-02-11 09:39:15 +00:00
Kurt Zeilenga
d23c559646
Don't use 'shtool mkln' as ln(1) replacement.
...
Allow both <sasl/sasl.h> and <sasl.h>
2002-02-11 08:28:51 +00:00
Kurt Zeilenga
b315d8af34
Update Cyrus SASL detection to always look for <sasl.h> regardless
...
of version and then try -lsasl2 and -lsasl. Make SASL code
conditional on SASL_VERSION_MAJOR, not HAVE_CYRUS_SASL.
2002-02-10 17:51:19 +00:00
Howard Chu
8a4e92b259
Support for Cyrus SASLv2. Untested.
2002-02-10 14:27:23 +00:00
Kurt Zeilenga
0c36372134
Some memory allocation cleanup.
2002-01-06 02:18:37 +00:00
Kurt Zeilenga
0e2af54a3f
Update copyright statements
2002-01-04 21:17:25 +00:00
Kurt Zeilenga
763c0de59b
Rework filter code
...
Misc cleanup / lint removal
2002-01-02 17:06:56 +00:00
Kurt Zeilenga
a553a03586
More struct berval DNs changes
2001-12-26 23:43:28 +00:00
Kurt Zeilenga
c1a257a83f
stdlib.h should be included as <ac/stdlib.h>
2001-12-18 01:24:31 +00:00
Kurt Zeilenga
ac3e6c8dc5
Plug leaks (ITS#1116)
...
Patch provided by John Morrissey <jwm@horde.net>
2001-11-06 17:05:51 +00:00
Howard Chu
6a59465686
Fix declaration mismatch when CYRUS is not present
2001-09-18 00:37:56 +00:00
Kurt Zeilenga
553d80cedd
Blindly fix TLS/SASL external interaction.
2001-09-09 03:42:26 +00:00
Kurt Zeilenga
c4f5497ac6
move TLS ctx to lconn struct in prep for supporting TLS with referrals
...
need to rework cert check to use per lconn host name
2001-06-25 07:33:42 +00:00
Kurt Zeilenga
5f25c10980
new rebind proc
...
new SASL locking
2001-06-15 00:14:56 +00:00
Kurt Zeilenga
5fe2190603
libldap/cyrus.c's ldap_pvt_sasl_install fix
...
from Mei-Hui Su <mei@ISI.EDU>
2001-03-15 03:14:34 +00:00
Kurt Zeilenga
9e8743215c
Fix another typo
2001-01-22 21:25:06 +00:00
Kurt Zeilenga
1ae1061858
Fix typo
2001-01-22 20:50:07 +00:00
Kurt Zeilenga
a4f4d8be59
Don't use ntohl().
...
Add min/max bufsize check
2001-01-19 04:53:21 +00:00
Kurt Zeilenga
599a610164
Update SASL bufsize checks
2001-01-18 22:18:41 +00:00
Kurt Zeilenga
b7607bf237
ITS#884: GSSAPI interoperabity with ActiveDirectory
...
Improve interoperability when of scred is present but empty.
2000-12-27 19:42:09 +00:00
Kurt Zeilenga
5941625eb7
ITS#889: quick fix
2000-11-20 18:59:42 +00:00
Kurt Zeilenga
511a84bc31
First cut of SASL/EXTERNAL
2000-10-31 23:00:35 +00:00
Kurt Zeilenga
2a6f092422
Add sasl i/o debugging
2000-10-12 23:50:58 +00:00
Kurt Zeilenga
b7b9148c7f
Return more appropriate result codes than LDAP_UNAVAILABLE
...
upon failures.
2000-10-09 22:11:34 +00:00
Kurt Zeilenga
dd733e163a
ITS#791: fix SASL ctx close
2000-09-29 18:27:06 +00:00
Kurt Zeilenga
2b82d4f486
remove lint
...
update bdb codes
2000-09-22 01:40:57 +00:00
Ben Collins
960041de8a
include ac/ctype.h and initialize some variables to avoid compiler warnings
2000-09-15 02:53:55 +00:00
Ben Collins
07ce0a9935
s/got_max_ssf/got_min_ssf/ thinko fix when checking for minssf. In this case, minssf was never set, and would cause maxssh to be set in error
2000-09-13 21:46:11 +00:00
Kurt Zeilenga
f22250baaa
Fix a minor leak.
2000-08-14 18:39:43 +00:00
Kurt Zeilenga
a50f391bb3
Working SASL security layers!
2000-07-28 00:04:07 +00:00
Kurt Zeilenga
804100b431
Fix sasl end game processing.
2000-07-20 18:39:40 +00:00
Kurt Zeilenga
5c10406b9e
Fix up SASL interact error checking
2000-07-19 22:53:22 +00:00
Randy Kunkee
f42e510e03
Fix prototype for dummy ldap_int_sasl_bind.
2000-07-19 07:44:06 +00:00
Kurt Zeilenga
9fb680d527
Fix SASL automatic/quiet modes...
2000-07-17 21:36:30 +00:00
Kurt Zeilenga
6393523ffa
Expose sasl flags to -lldap (so they can be quiet)
...
Fix interactive and automatic modes. Quiet needs work.
2000-07-17 21:23:59 +00:00
Kurt Zeilenga
95eea5accc
First cut SASL "interactive" and "quiet" modes (default is "automatic")
2000-07-17 00:56:29 +00:00
Kurt Zeilenga
d2b05a3858
Rework SASL command line arguments. Default is now to authenticate
...
using best available mechanism. (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.
2000-07-15 23:25:46 +00:00
Kurt Zeilenga
bab26b3142
Move some noise about
2000-07-15 01:28:16 +00:00
Kurt Zeilenga
c8ca70f3ae
Fix callbacks.
2000-07-14 22:00:16 +00:00
Kurt Zeilenga
36fb2d9d78
rework SASL callbacks
2000-07-14 20:56:30 +00:00
Kurt Zeilenga
95df143c33
*ssf > 1 should be *ssf > 0
2000-07-14 04:35:13 +00:00
Kurt Zeilenga
a42351c40f
Fix an interaction error on multiple step binds.
...
Add additional notices. Likely need to add a quiet mode.
2000-07-14 00:54:08 +00:00
Kurt Zeilenga
85c2a7a2a8
Update NT build to include recently added SASL sources.
2000-07-13 23:43:24 +00:00
Kurt Zeilenga
5fc22599e2
Update SASL code to reuse context through life of session.
...
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters
2000-07-13 22:54:38 +00:00