Commit Graph

166 Commits

Author SHA1 Message Date
Howard Chu
6a86f5178f ITS#3278 use correct connection for sasl_install() 2005-05-13 05:22:08 +00:00
Kurt Zeilenga
3e800f20bd <limits.h> cleanup && ITS#3643 2005-04-10 19:32:14 +00:00
Howard Chu
eca819d866 ITS#3643 limits.h, INT_MAX 2005-04-09 06:41:39 +00:00
Howard Chu
89210b7100 Added ldap_pvt_sasl_secprops_unparse, slap_sasl_secprops_unparse 2005-03-01 11:42:31 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Kurt Zeilenga
d611a4b49a unifdef -UNEW_LOGGING 2004-09-04 04:54:28 +00:00
Luke Howard
842fe3091a ITS#3298 - ldap_sasl_int_bind() refers to incorrect Sockbuf when called
from within a rebind function.
2004-08-24 05:14:07 +00:00
Kurt Zeilenga
b6bd7296ac cleanup last commit, add commit 2004-06-30 22:36:47 +00:00
Kurt Zeilenga
03ec37823c Avoid high-level retry on low-level error as that implies a
re-sasl_encode() of the input.  sasl_encode() may be stateful.
2004-06-30 22:30:09 +00:00
Jong Hyuk Choi
3fb0648079 revert the ITS#3139 change for now 2004-06-30 17:51:06 +00:00
Kurt Zeilenga
1ded030427 fix last commit 2004-06-29 17:48:19 +00:00
Kurt Zeilenga
a593343aa5 ITS#3212: sasl_encode/decode type conflict fix 2004-06-29 17:46:30 +00:00
Howard Chu
cc4d5c10df ITS#3123 make sure ldap_int_sasl_mutex is init'd before it is used 2004-05-21 10:53:30 +00:00
Howard Chu
9da35acf44 Fix ITS#3139, empty output buffer when sb_sasl_write fails 2004-05-14 08:03:25 +00:00
Howard Chu
e5d1b3134c Fix for ITS#1181 from Mark Adamson @ CMU.edu 2004-05-06 23:58:13 +00:00
Kurt Zeilenga
1634811465 Use BER_BVNULL 2004-04-07 01:11:32 +00:00
Howard Chu
c558bd49bc ITS#2992 Windows fixes from Alexey Melnikov 2004-03-05 12:24:06 +00:00
Howard Chu
6cedc94c63 ITS#2944, #2956 - revert maxbuf patch from ITS#2184
Still need to think about interoperability with other versions, vendors...
2004-02-24 16:25:39 +00:00
Howard Chu
02a6301f22 ITS#2926 from igor@ipass.net, slightly modified 2004-01-24 03:33:44 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Howard Chu
dc19332bb9 Don't init SASL library until we actually want a SASL session 2003-12-03 01:59:33 +00:00
Kurt Zeilenga
159de0f135 Updated notices and acknowledgements 2003-11-26 07:16:36 +00:00
Howard Chu
838c2d774e Fix GSSAPI connections to localhost 2003-11-10 20:58:29 +00:00
Howard Chu
11453007c2 ITS#2770 - delete bogus maxbuf checks on sasl_read 2003-10-16 18:56:02 +00:00
Hallvard Furuseth
bdac96f929 #include <ac/unistd.h>, to get geteuid() and getegid(). 2003-09-29 14:04:48 +00:00
Howard Chu
8f3d3cf3c9 Revert rev 1.90 ITS#2484 patch; Cyrus 1.5 is no longer supported. 2003-09-20 00:33:42 +00:00
Howard Chu
1881ae872f ITS#2729 fix typos 2003-09-19 00:49:33 +00:00
Howard Chu
6f632af413 ITS#2484, set sasl_maxbuf to SASL_MAX_BUFF_SIZE if it was negotiated
as zero.
2003-09-14 05:19:45 +00:00
Howard Chu
10811b6f51 Clarify/standardize library version mismatch error messages 2003-09-12 00:54:21 +00:00
Howard Chu
d449772875 ITS#2548 must dup sasl_errdetail msgs 2003-05-24 01:05:11 +00:00
Hallvard Furuseth
5ee9264465 Fix assignment of <char/int>* to unsigned <char/int>* and vice versa. 2003-05-02 13:29:28 +00:00
Howard Chu
0e8b176d1f Fix prev commit 2003-05-01 09:50:40 +00:00
Howard Chu
46e2b97757 ITS#2424 use two SASL contexts per session to conform to RFC 2222 2003-05-01 04:11:57 +00:00
Howard Chu
4b73446ab5 ITS#2424 reset SASL on an existing connection 2003-04-30 15:38:32 +00:00
Howard Chu
1d2951bb5a For ITS#2424, move all SASL session management to ldap_int_sasl_bind. 2003-04-30 14:13:58 +00:00
Howard Chu
20c8128d27 ITS#2475 delete bogus SASL2 call 2003-04-30 08:08:08 +00:00
Howard Chu
2ee7488d0b ITS#2423 - make the lib that allocates SASL prompt results responsible
for freeing them.
2003-04-06 00:47:55 +00:00
Kurt Zeilenga
4daeff0ef4 Add a few comments to the ITS#2325 fix 2003-02-21 19:39:09 +00:00
Kurt Zeilenga
c3a43e2c4f Round 2 2003-02-21 19:27:54 +00:00
Kurt Zeilenga
eb161745a4 A little cleanup of last 2 commits 2003-02-21 18:42:15 +00:00
Kurt Zeilenga
ed91ab4cbe Forgot to remove one prompts free 2003-02-21 18:41:05 +00:00
Kurt Zeilenga
9e984beded ITS#2325 fix: properly freeing prompts->results 2003-02-21 18:39:26 +00:00
Kurt Zeilenga
bc0cc3272c Whoops. (I'm reconsidering whether or not to accept the ITS#2325.) 2003-02-21 17:48:03 +00:00
Kurt Zeilenga
3fb4ae2abd Revert last commit 2003-02-21 17:46:11 +00:00
Kurt Zeilenga
2c939f7196 Back out interact free() fixes. Will fix properly in next commit. 2003-02-21 17:11:46 +00:00
Pierangelo Masarati
1b13edfa54 I suggest the coder(s) of the cyrus stuff to check out the prompt stuff 2003-02-07 09:58:21 +00:00
Pierangelo Masarati
6c32533d02 according to sasl documentation, prompts is filled only if SASL_INTERACT is returned 2003-02-07 09:55:00 +00:00
Kurt Zeilenga
6939c53170 Happy new year 2003-01-03 20:20:47 +00:00
Howard Chu
464292b50c Remove unneeded sasl_ssf param from ldap_int_sasl_open(),
it's set by ldap_int_sasl_external().
2002-12-18 03:09:52 +00:00
Howard Chu
1702d408bf ITS#2184 maxbuf tweaks from Larry Greenfield @ CMU 2002-11-27 03:51:46 +00:00
Howard Chu
3099d89d9e Don't use sasl_set_alloc on Cyrus 2, it manages all of its memory
internally and we don't want to get in the way.
2002-09-02 22:25:26 +00:00
Howard Chu
d11b134709 Fix large SASL reads. Use EAGAIN instead of EWOULDBLOCK (was right the
first time after all. see read(2) and write(2)...)
2002-08-30 10:11:54 +00:00
Pierangelo Masarati
864f05497e allow different solutions to debug sasl shutdown 2002-08-29 17:45:12 +00:00
Pierangelo Masarati
c2efb8788b when shutting down a server with open connections (back-{ldap,meta}),
the backend attempts a ldap_unbind() that results in calling
ldap_pvt_sasl_mutex_lock() with a NULL argument, causing a SIGSEGV.
I added a few assert() to catch this (I wonder if this might
be related to ITS#1982 "kill -INT corrupts database").
2002-08-29 16:03:38 +00:00
Howard Chu
1dd1c375bb Fix previous commit - use EWOULDBLOCK instead of EAGAIN 2002-08-29 13:38:36 +00:00
Howard Chu
010dbff2cc Fix ITS#1983, in sb_sasl_write, set errno = EAGAIN to tell upper layers to
retry partial writes
2002-08-29 10:12:35 +00:00
Howard Chu
5ec4ef6e59 Added no-op for SASL_VERSION_MAJOR < 2 2002-08-28 08:35:38 +00:00
Howard Chu
3cb7a09eb0 Added check for Cyrus SASL sasl_version() 2002-08-28 07:12:22 +00:00
Julius Enarusai
6107ba67d2 Coverted LDAP_LOG macro to use subsystem ID int values instead of string values 2002-07-11 20:33:24 +00:00
Howard Chu
07ffaeaac8 ITS#1924 use GENERAL_NAMES_free instead of ext_free. 2002-07-05 21:59:02 +00:00
Howard Chu
8101798791 Better SASL_MAXBUF fix 2002-06-07 03:40:16 +00:00
Howard Chu
353f627aa4 Eliminate SASL client session_callbacks. Since proc was always NULL they
never did anything anyway.
2002-06-06 01:44:38 +00:00
Howard Chu
2ca4b0ebfc ITS#1806, Cyrus 1 doesn't give back our callbacks pointer, must stash it
ourselves.
2002-05-06 23:56:35 +00:00
Howard Chu
ae3a80eb09 Fix in 1.50 applies to Cyrus 1 as well as Cyrus 2. 2002-05-05 19:15:29 +00:00
Howard Chu
6c1a786d6c Fix previous commit, wrong if condition 2002-05-03 13:07:42 +00:00
Howard Chu
ed871b997c Break up large SASL writes into units of SASL maxoutbuf size. 2002-05-03 13:04:55 +00:00
Howard Chu
931c4eb35f For Cyrus 2, cannot free session_callbacks in ldap_int_sasl_open, must
wait until ldap_int_sasl_close because SASL doesn't copy our structure,
it uses it directly.
2002-05-03 12:10:47 +00:00
Howard Chu
315ac06912 Fix warnings from sasl_errdetail 2002-04-18 12:20:55 +00:00
Howard Chu
98a416b584 Additional error reporting for Cyrus SASL 2. Attempt to get SASL-EXTERNAL
working ifor Cyrus 2. (Both GSSAPI and EXTERNAL are broken at the moment.)
2002-04-18 00:48:36 +00:00
Kurt Zeilenga
709ce4fa6c Re: Patch: ctype functions require 'unsigned char' args (ITS#1678)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Here are fixes for more places where the argument to ctype.h functions
should be in the range of `unsigned char'.

Explanation of the last patch (to schema_init.c:bvcasechr()):
TOLOWER() and TOUPPER() return values in the range of `unsigned char',
but bvcasechr() then compares those values with a plain `char'.  So I
convert the return values from TOLOWER()/TOUPPER() to `char' first.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-15 20:42:42 +00:00
Julius Enarusai
3ab1ea7300 Added LDAP_LOG messages 2002-03-27 19:12:18 +00:00
Kurt Zeilenga
defed68e82 Fix typo 2002-02-11 18:18:34 +00:00
Howard Chu
a916535a27 Fix #include of sasl.h 2002-02-11 09:39:15 +00:00
Kurt Zeilenga
d23c559646 Don't use 'shtool mkln' as ln(1) replacement.
Allow both <sasl/sasl.h> and <sasl.h>
2002-02-11 08:28:51 +00:00
Kurt Zeilenga
b315d8af34 Update Cyrus SASL detection to always look for <sasl.h> regardless
of version and then try -lsasl2 and -lsasl.  Make SASL code
conditional on SASL_VERSION_MAJOR, not HAVE_CYRUS_SASL.
2002-02-10 17:51:19 +00:00
Howard Chu
8a4e92b259 Support for Cyrus SASLv2. Untested. 2002-02-10 14:27:23 +00:00
Kurt Zeilenga
0c36372134 Some memory allocation cleanup. 2002-01-06 02:18:37 +00:00
Kurt Zeilenga
0e2af54a3f Update copyright statements 2002-01-04 21:17:25 +00:00
Kurt Zeilenga
763c0de59b Rework filter code
Misc cleanup / lint removal
2002-01-02 17:06:56 +00:00
Kurt Zeilenga
a553a03586 More struct berval DNs changes 2001-12-26 23:43:28 +00:00
Kurt Zeilenga
c1a257a83f stdlib.h should be included as <ac/stdlib.h> 2001-12-18 01:24:31 +00:00
Kurt Zeilenga
ac3e6c8dc5 Plug leaks (ITS#1116)
Patch provided by John Morrissey <jwm@horde.net>
2001-11-06 17:05:51 +00:00
Howard Chu
6a59465686 Fix declaration mismatch when CYRUS is not present 2001-09-18 00:37:56 +00:00
Kurt Zeilenga
553d80cedd Blindly fix TLS/SASL external interaction. 2001-09-09 03:42:26 +00:00
Kurt Zeilenga
c4f5497ac6 move TLS ctx to lconn struct in prep for supporting TLS with referrals
need to rework cert check to use per lconn host name
2001-06-25 07:33:42 +00:00
Kurt Zeilenga
5f25c10980 new rebind proc
new SASL locking
2001-06-15 00:14:56 +00:00
Kurt Zeilenga
5fe2190603 libldap/cyrus.c's ldap_pvt_sasl_install fix
from Mei-Hui Su <mei@ISI.EDU>
2001-03-15 03:14:34 +00:00
Kurt Zeilenga
9e8743215c Fix another typo 2001-01-22 21:25:06 +00:00
Kurt Zeilenga
1ae1061858 Fix typo 2001-01-22 20:50:07 +00:00
Kurt Zeilenga
a4f4d8be59 Don't use ntohl().
Add min/max bufsize check
2001-01-19 04:53:21 +00:00
Kurt Zeilenga
599a610164 Update SASL bufsize checks 2001-01-18 22:18:41 +00:00
Kurt Zeilenga
b7607bf237 ITS#884: GSSAPI interoperabity with ActiveDirectory
Improve interoperability when of scred is present but empty.
2000-12-27 19:42:09 +00:00
Kurt Zeilenga
5941625eb7 ITS#889: quick fix 2000-11-20 18:59:42 +00:00
Kurt Zeilenga
511a84bc31 First cut of SASL/EXTERNAL 2000-10-31 23:00:35 +00:00
Kurt Zeilenga
2a6f092422 Add sasl i/o debugging 2000-10-12 23:50:58 +00:00
Kurt Zeilenga
b7b9148c7f Return more appropriate result codes than LDAP_UNAVAILABLE
upon failures.
2000-10-09 22:11:34 +00:00
Kurt Zeilenga
dd733e163a ITS#791: fix SASL ctx close 2000-09-29 18:27:06 +00:00
Kurt Zeilenga
2b82d4f486 remove lint
update bdb codes
2000-09-22 01:40:57 +00:00
Ben Collins
960041de8a include ac/ctype.h and initialize some variables to avoid compiler warnings 2000-09-15 02:53:55 +00:00
Ben Collins
07ce0a9935 s/got_max_ssf/got_min_ssf/ thinko fix when checking for minssf. In this case, minssf was never set, and would cause maxssh to be set in error 2000-09-13 21:46:11 +00:00