Howard Chu
6a86f5178f
ITS#3278 use correct connection for sasl_install()
2005-05-13 05:22:08 +00:00
Kurt Zeilenga
3e800f20bd
<limits.h> cleanup && ITS#3643
2005-04-10 19:32:14 +00:00
Howard Chu
eca819d866
ITS#3643 limits.h, INT_MAX
2005-04-09 06:41:39 +00:00
Howard Chu
89210b7100
Added ldap_pvt_sasl_secprops_unparse, slap_sasl_secprops_unparse
2005-03-01 11:42:31 +00:00
Kurt Zeilenga
dc0eacd40b
Happy New Year!
2005-01-01 20:49:32 +00:00
Kurt Zeilenga
d611a4b49a
unifdef -UNEW_LOGGING
2004-09-04 04:54:28 +00:00
Luke Howard
842fe3091a
ITS#3298 - ldap_sasl_int_bind() refers to incorrect Sockbuf when called
...
from within a rebind function.
2004-08-24 05:14:07 +00:00
Kurt Zeilenga
b6bd7296ac
cleanup last commit, add commit
2004-06-30 22:36:47 +00:00
Kurt Zeilenga
03ec37823c
Avoid high-level retry on low-level error as that implies a
...
re-sasl_encode() of the input. sasl_encode() may be stateful.
2004-06-30 22:30:09 +00:00
Jong Hyuk Choi
3fb0648079
revert the ITS#3139 change for now
2004-06-30 17:51:06 +00:00
Kurt Zeilenga
1ded030427
fix last commit
2004-06-29 17:48:19 +00:00
Kurt Zeilenga
a593343aa5
ITS#3212: sasl_encode/decode type conflict fix
2004-06-29 17:46:30 +00:00
Howard Chu
cc4d5c10df
ITS#3123 make sure ldap_int_sasl_mutex is init'd before it is used
2004-05-21 10:53:30 +00:00
Howard Chu
9da35acf44
Fix ITS#3139, empty output buffer when sb_sasl_write fails
2004-05-14 08:03:25 +00:00
Howard Chu
e5d1b3134c
Fix for ITS#1181 from Mark Adamson @ CMU.edu
2004-05-06 23:58:13 +00:00
Kurt Zeilenga
1634811465
Use BER_BVNULL
2004-04-07 01:11:32 +00:00
Howard Chu
c558bd49bc
ITS#2992 Windows fixes from Alexey Melnikov
2004-03-05 12:24:06 +00:00
Howard Chu
6cedc94c63
ITS#2944, #2956 - revert maxbuf patch from ITS#2184
...
Still need to think about interoperability with other versions, vendors...
2004-02-24 16:25:39 +00:00
Howard Chu
02a6301f22
ITS#2926 from igor@ipass.net, slightly modified
2004-01-24 03:33:44 +00:00
Kurt Zeilenga
3c598e89fb
Happy new year
2004-01-01 19:15:16 +00:00
Howard Chu
dc19332bb9
Don't init SASL library until we actually want a SASL session
2003-12-03 01:59:33 +00:00
Kurt Zeilenga
159de0f135
Updated notices and acknowledgements
2003-11-26 07:16:36 +00:00
Howard Chu
838c2d774e
Fix GSSAPI connections to localhost
2003-11-10 20:58:29 +00:00
Howard Chu
11453007c2
ITS#2770 - delete bogus maxbuf checks on sasl_read
2003-10-16 18:56:02 +00:00
Hallvard Furuseth
bdac96f929
#include <ac/unistd.h>, to get geteuid() and getegid().
2003-09-29 14:04:48 +00:00
Howard Chu
8f3d3cf3c9
Revert rev 1.90 ITS#2484 patch; Cyrus 1.5 is no longer supported.
2003-09-20 00:33:42 +00:00
Howard Chu
1881ae872f
ITS#2729 fix typos
2003-09-19 00:49:33 +00:00
Howard Chu
6f632af413
ITS#2484, set sasl_maxbuf to SASL_MAX_BUFF_SIZE if it was negotiated
...
as zero.
2003-09-14 05:19:45 +00:00
Howard Chu
10811b6f51
Clarify/standardize library version mismatch error messages
2003-09-12 00:54:21 +00:00
Howard Chu
d449772875
ITS#2548 must dup sasl_errdetail msgs
2003-05-24 01:05:11 +00:00
Hallvard Furuseth
5ee9264465
Fix assignment of <char/int>* to unsigned <char/int>* and vice versa.
2003-05-02 13:29:28 +00:00
Howard Chu
0e8b176d1f
Fix prev commit
2003-05-01 09:50:40 +00:00
Howard Chu
46e2b97757
ITS#2424 use two SASL contexts per session to conform to RFC 2222
2003-05-01 04:11:57 +00:00
Howard Chu
4b73446ab5
ITS#2424 reset SASL on an existing connection
2003-04-30 15:38:32 +00:00
Howard Chu
1d2951bb5a
For ITS#2424, move all SASL session management to ldap_int_sasl_bind.
2003-04-30 14:13:58 +00:00
Howard Chu
20c8128d27
ITS#2475 delete bogus SASL2 call
2003-04-30 08:08:08 +00:00
Howard Chu
2ee7488d0b
ITS#2423 - make the lib that allocates SASL prompt results responsible
...
for freeing them.
2003-04-06 00:47:55 +00:00
Kurt Zeilenga
4daeff0ef4
Add a few comments to the ITS#2325 fix
2003-02-21 19:39:09 +00:00
Kurt Zeilenga
c3a43e2c4f
Round 2
2003-02-21 19:27:54 +00:00
Kurt Zeilenga
eb161745a4
A little cleanup of last 2 commits
2003-02-21 18:42:15 +00:00
Kurt Zeilenga
ed91ab4cbe
Forgot to remove one prompts free
2003-02-21 18:41:05 +00:00
Kurt Zeilenga
9e984beded
ITS#2325 fix: properly freeing prompts->results
2003-02-21 18:39:26 +00:00
Kurt Zeilenga
bc0cc3272c
Whoops. (I'm reconsidering whether or not to accept the ITS#2325.)
2003-02-21 17:48:03 +00:00
Kurt Zeilenga
3fb4ae2abd
Revert last commit
2003-02-21 17:46:11 +00:00
Kurt Zeilenga
2c939f7196
Back out interact free() fixes. Will fix properly in next commit.
2003-02-21 17:11:46 +00:00
Pierangelo Masarati
1b13edfa54
I suggest the coder(s) of the cyrus stuff to check out the prompt stuff
2003-02-07 09:58:21 +00:00
Pierangelo Masarati
6c32533d02
according to sasl documentation, prompts is filled only if SASL_INTERACT is returned
2003-02-07 09:55:00 +00:00
Kurt Zeilenga
6939c53170
Happy new year
2003-01-03 20:20:47 +00:00
Howard Chu
464292b50c
Remove unneeded sasl_ssf param from ldap_int_sasl_open(),
...
it's set by ldap_int_sasl_external().
2002-12-18 03:09:52 +00:00
Howard Chu
1702d408bf
ITS#2184 maxbuf tweaks from Larry Greenfield @ CMU
2002-11-27 03:51:46 +00:00
Howard Chu
3099d89d9e
Don't use sasl_set_alloc on Cyrus 2, it manages all of its memory
...
internally and we don't want to get in the way.
2002-09-02 22:25:26 +00:00
Howard Chu
d11b134709
Fix large SASL reads. Use EAGAIN instead of EWOULDBLOCK (was right the
...
first time after all. see read(2) and write(2)...)
2002-08-30 10:11:54 +00:00
Pierangelo Masarati
864f05497e
allow different solutions to debug sasl shutdown
2002-08-29 17:45:12 +00:00
Pierangelo Masarati
c2efb8788b
when shutting down a server with open connections (back-{ldap,meta}),
...
the backend attempts a ldap_unbind() that results in calling
ldap_pvt_sasl_mutex_lock() with a NULL argument, causing a SIGSEGV.
I added a few assert() to catch this (I wonder if this might
be related to ITS#1982 "kill -INT corrupts database").
2002-08-29 16:03:38 +00:00
Howard Chu
1dd1c375bb
Fix previous commit - use EWOULDBLOCK instead of EAGAIN
2002-08-29 13:38:36 +00:00
Howard Chu
010dbff2cc
Fix ITS#1983, in sb_sasl_write, set errno = EAGAIN to tell upper layers to
...
retry partial writes
2002-08-29 10:12:35 +00:00
Howard Chu
5ec4ef6e59
Added no-op for SASL_VERSION_MAJOR < 2
2002-08-28 08:35:38 +00:00
Howard Chu
3cb7a09eb0
Added check for Cyrus SASL sasl_version()
2002-08-28 07:12:22 +00:00
Julius Enarusai
6107ba67d2
Coverted LDAP_LOG macro to use subsystem ID int values instead of string values
2002-07-11 20:33:24 +00:00
Howard Chu
07ffaeaac8
ITS#1924 use GENERAL_NAMES_free instead of ext_free.
2002-07-05 21:59:02 +00:00
Howard Chu
8101798791
Better SASL_MAXBUF fix
2002-06-07 03:40:16 +00:00
Howard Chu
353f627aa4
Eliminate SASL client session_callbacks. Since proc was always NULL they
...
never did anything anyway.
2002-06-06 01:44:38 +00:00
Howard Chu
2ca4b0ebfc
ITS#1806, Cyrus 1 doesn't give back our callbacks pointer, must stash it
...
ourselves.
2002-05-06 23:56:35 +00:00
Howard Chu
ae3a80eb09
Fix in 1.50 applies to Cyrus 1 as well as Cyrus 2.
2002-05-05 19:15:29 +00:00
Howard Chu
6c1a786d6c
Fix previous commit, wrong if condition
2002-05-03 13:07:42 +00:00
Howard Chu
ed871b997c
Break up large SASL writes into units of SASL maxoutbuf size.
2002-05-03 13:04:55 +00:00
Howard Chu
931c4eb35f
For Cyrus 2, cannot free session_callbacks in ldap_int_sasl_open, must
...
wait until ldap_int_sasl_close because SASL doesn't copy our structure,
it uses it directly.
2002-05-03 12:10:47 +00:00
Howard Chu
315ac06912
Fix warnings from sasl_errdetail
2002-04-18 12:20:55 +00:00
Howard Chu
98a416b584
Additional error reporting for Cyrus SASL 2. Attempt to get SASL-EXTERNAL
...
working ifor Cyrus 2. (Both GSSAPI and EXTERNAL are broken at the moment.)
2002-04-18 00:48:36 +00:00
Kurt Zeilenga
709ce4fa6c
Re: Patch: ctype functions require 'unsigned char' args (ITS#1678)
...
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
================
Here are fixes for more places where the argument to ctype.h functions
should be in the range of `unsigned char'.
Explanation of the last patch (to schema_init.c:bvcasechr()):
TOLOWER() and TOUPPER() return values in the range of `unsigned char',
but bvcasechr() then compares those values with a plain `char'. So I
convert the return values from TOLOWER()/TOUPPER() to `char' first.
Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-15 20:42:42 +00:00
Julius Enarusai
3ab1ea7300
Added LDAP_LOG messages
2002-03-27 19:12:18 +00:00
Kurt Zeilenga
defed68e82
Fix typo
2002-02-11 18:18:34 +00:00
Howard Chu
a916535a27
Fix #include of sasl.h
2002-02-11 09:39:15 +00:00
Kurt Zeilenga
d23c559646
Don't use 'shtool mkln' as ln(1) replacement.
...
Allow both <sasl/sasl.h> and <sasl.h>
2002-02-11 08:28:51 +00:00
Kurt Zeilenga
b315d8af34
Update Cyrus SASL detection to always look for <sasl.h> regardless
...
of version and then try -lsasl2 and -lsasl. Make SASL code
conditional on SASL_VERSION_MAJOR, not HAVE_CYRUS_SASL.
2002-02-10 17:51:19 +00:00
Howard Chu
8a4e92b259
Support for Cyrus SASLv2. Untested.
2002-02-10 14:27:23 +00:00
Kurt Zeilenga
0c36372134
Some memory allocation cleanup.
2002-01-06 02:18:37 +00:00
Kurt Zeilenga
0e2af54a3f
Update copyright statements
2002-01-04 21:17:25 +00:00
Kurt Zeilenga
763c0de59b
Rework filter code
...
Misc cleanup / lint removal
2002-01-02 17:06:56 +00:00
Kurt Zeilenga
a553a03586
More struct berval DNs changes
2001-12-26 23:43:28 +00:00
Kurt Zeilenga
c1a257a83f
stdlib.h should be included as <ac/stdlib.h>
2001-12-18 01:24:31 +00:00
Kurt Zeilenga
ac3e6c8dc5
Plug leaks (ITS#1116)
...
Patch provided by John Morrissey <jwm@horde.net>
2001-11-06 17:05:51 +00:00
Howard Chu
6a59465686
Fix declaration mismatch when CYRUS is not present
2001-09-18 00:37:56 +00:00
Kurt Zeilenga
553d80cedd
Blindly fix TLS/SASL external interaction.
2001-09-09 03:42:26 +00:00
Kurt Zeilenga
c4f5497ac6
move TLS ctx to lconn struct in prep for supporting TLS with referrals
...
need to rework cert check to use per lconn host name
2001-06-25 07:33:42 +00:00
Kurt Zeilenga
5f25c10980
new rebind proc
...
new SASL locking
2001-06-15 00:14:56 +00:00
Kurt Zeilenga
5fe2190603
libldap/cyrus.c's ldap_pvt_sasl_install fix
...
from Mei-Hui Su <mei@ISI.EDU>
2001-03-15 03:14:34 +00:00
Kurt Zeilenga
9e8743215c
Fix another typo
2001-01-22 21:25:06 +00:00
Kurt Zeilenga
1ae1061858
Fix typo
2001-01-22 20:50:07 +00:00
Kurt Zeilenga
a4f4d8be59
Don't use ntohl().
...
Add min/max bufsize check
2001-01-19 04:53:21 +00:00
Kurt Zeilenga
599a610164
Update SASL bufsize checks
2001-01-18 22:18:41 +00:00
Kurt Zeilenga
b7607bf237
ITS#884: GSSAPI interoperabity with ActiveDirectory
...
Improve interoperability when of scred is present but empty.
2000-12-27 19:42:09 +00:00
Kurt Zeilenga
5941625eb7
ITS#889: quick fix
2000-11-20 18:59:42 +00:00
Kurt Zeilenga
511a84bc31
First cut of SASL/EXTERNAL
2000-10-31 23:00:35 +00:00
Kurt Zeilenga
2a6f092422
Add sasl i/o debugging
2000-10-12 23:50:58 +00:00
Kurt Zeilenga
b7b9148c7f
Return more appropriate result codes than LDAP_UNAVAILABLE
...
upon failures.
2000-10-09 22:11:34 +00:00
Kurt Zeilenga
dd733e163a
ITS#791: fix SASL ctx close
2000-09-29 18:27:06 +00:00
Kurt Zeilenga
2b82d4f486
remove lint
...
update bdb codes
2000-09-22 01:40:57 +00:00
Ben Collins
960041de8a
include ac/ctype.h and initialize some variables to avoid compiler warnings
2000-09-15 02:53:55 +00:00
Ben Collins
07ce0a9935
s/got_max_ssf/got_min_ssf/ thinko fix when checking for minssf. In this case, minssf was never set, and would cause maxssh to be set in error
2000-09-13 21:46:11 +00:00