Mark Adamson
bf1ee530ea
Implementation of SASL authorization.
2000-09-21 17:32:54 +00:00
Kurt Zeilenga
c9de004a86
Fix logging bug
2000-09-21 16:53:45 +00:00
Kurt Zeilenga
50714d2d48
merge changes from authPassword work which should fix SPASSWD code...
2000-09-20 00:28:57 +00:00
Kurt Zeilenga
a60438c1ce
Add sasl-host option and treat sasl-realm as global only
...
(ie: not backend specific).
2000-08-30 01:44:39 +00:00
Kurt Zeilenga
1c328aa9c7
Minor typedef and other clean ups
2000-08-26 01:14:05 +00:00
Kurt Zeilenga
7b548b4a91
Make settings match manual page.
2000-08-24 01:12:54 +00:00
Kurt Zeilenga
df8c837c80
Fix typos
2000-08-15 23:42:44 +00:00
Kurt Zeilenga
3b03b64b77
Add char* ldap_pvt_get_fqdn(char*) which returns the FQDN of the
...
input. In input==NULL, returns FQDN of local host.
Fixed copy_hostent() uninitialized pointer bug.
Replaced gethostname calls with ldap_pvt_get_fqdn( NULL ) calls.
2000-08-15 01:55:43 +00:00
Kurt Zeilenga
a50f391bb3
Working SASL security layers!
2000-07-28 00:04:07 +00:00
Kurt Zeilenga
9e37451421
Fix typo
2000-07-27 01:10:51 +00:00
Kurt Zeilenga
a71a7cdd98
Rework authorization handling such that authzid u:user gets mapped to
...
authzdn uid=user. Disallow authzid in DN form until we have a
validator.
2000-07-24 23:05:45 +00:00
Kurt Zeilenga
804100b431
Fix sasl end game processing.
2000-07-20 18:39:40 +00:00
Kurt Zeilenga
a8521d3034
Fix mech==NULL bug
2000-07-20 01:04:34 +00:00
Kurt Zeilenga
d2b05a3858
Rework SASL command line arguments. Default is now to authenticate
...
using best available mechanism. (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.
2000-07-15 23:25:46 +00:00
Kurt Zeilenga
a6154d03f2
Misc cleanup
2000-07-15 00:45:31 +00:00
Kurt Zeilenga
5bca08d716
Store sasl callbacks in session handle so that they can properly freed.
2000-07-15 00:01:09 +00:00
Kurt Zeilenga
c8ca70f3ae
Fix callbacks.
2000-07-14 22:00:16 +00:00
Kurt Zeilenga
1e3aa01b7b
Fix SSF reporting.
2000-07-14 20:57:52 +00:00
Kurt Zeilenga
36fb2d9d78
rework SASL callbacks
2000-07-14 20:56:30 +00:00
Kurt Zeilenga
14859793d0
Add logging support
2000-07-14 04:35:36 +00:00
Kurt Zeilenga
5fc22599e2
Update SASL code to reuse context through life of session.
...
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters
2000-07-13 22:54:38 +00:00
Kurt Zeilenga
489fd210df
Change reporting of SASL username
2000-07-06 01:22:42 +00:00
Kurt Zeilenga
51cef9dbed
Return last step output in final response.
...
And some code cleanup.
2000-07-05 21:43:11 +00:00
Kurt Zeilenga
064d6aae65
Reverse SASL mechanism restriction #ifdef
2000-06-26 05:29:37 +00:00
Kurt Zeilenga
a56c161bdb
Misc code cleanup.
2000-06-10 22:39:30 +00:00
Kurt Zeilenga
60802201e3
Const'ification
...
SASL mech removed from backend bind callback (as SASL is managed by frontend)
Changes to some backends are untested (as I don't have all dependent
software install)
2000-05-22 03:46:57 +00:00
Kurt Zeilenga
a1430fdfdb
Rework root dse and other info entry codes to produce entry
...
to caller (do_search) such that info can be used by other
operations (ie: do_compare).
SLAPD_SCHEMA_NOT_COMPAT: Add additional code to support filters (needs work)
2000-05-16 16:22:52 +00:00
Kurt Zeilenga
4e5992c190
Fix unsigned * vs unsigned long * bugs
2000-05-16 04:52:37 +00:00
Kurt Zeilenga
4bc786f34b
Y2k copyright update
2000-05-13 02:47:56 +00:00
Kurt Zeilenga
4fad202b44
hostname needs to be static
2000-05-11 02:41:34 +00:00
Kurt Zeilenga
f224e69558
Add experimental code to check simple bind passwords
...
against Cyrus SASLdb. Like other cleartext mechanisms,
should be protected from eavesdropping.
2000-05-10 04:29:51 +00:00
Kurt Zeilenga
d0555fffe6
Error handling changes including separation of client v. server
...
SASL to LDAP translation. plus comments and other minor changes
2000-05-03 18:59:58 +00:00
Kurt Zeilenga
b872bf3a91
fix -UHAVE_CYRUS_SASL
2000-04-25 19:28:00 +00:00
Kurt Zeilenga
20351a05cc
SASL: me thinks I got the states okay... now to test.
2000-04-25 18:02:50 +00:00
Kurt Zeilenga
42a20681cc
SASL closer to working from frontend only, need to work through
...
states.
2000-04-25 17:23:54 +00:00
Kurt Zeilenga
55ae3cffd8
SASL code without backend support. Should work with
...
external store, but not yet tested. [Intent is to support
both in same server... may not be doable]
2000-04-25 16:03:17 +00:00
Kurt Zeilenga
6f2a817d9d
bind/sasl cleanup PRIOR TO moving call from backend to frontend
2000-04-25 13:21:42 +00:00
Luke Howard
9b4e3b2234
Merged in preliminary support for Cyrus SASL library;
...
support for DCE slash-delimited, left-to-right DNs;
support for a domain socket transport (enable with
--enable-ldapi); and extensions to URL parsing to
support the latter transport.
2000-01-02 01:21:25 +00:00
Kurt Zeilenga
403f4479bc
Add OpenLDAP RCSid to *.[ch] in clients, libraries, and servers.
...
Replace old Id as needed (back-tcl).
Leave updating of contribWare to contributors (for now).
1999-09-08 19:06:24 +00:00
Kurt Zeilenga
9c3ed0310b
Add copyright notices.
1999-08-06 23:07:46 +00:00
Kurt Zeilenga
b67eb8e2be
Don't have time to finish SASL right now... this is a work in progress
...
but is safely tucked away behind --with-cyrus-sasl.
1999-08-04 00:11:22 +00:00
Kurt Zeilenga
354d49fb9a
List supportedSASLmechanisms based upon what sasl_listmech() returns.
1999-08-03 23:23:05 +00:00
Kurt Zeilenga
df8f7cbb9b
s/exit(1)/exit(EXIT_FAILURE)/
...
s/exit(0)/exit(EXIT_SUCCESS)/
add <ac/stdlib.h> where needed and other minor header adjustments
1999-08-03 18:14:24 +00:00
Kurt Zeilenga
f90ed5aef8
Add a little SASL framework and remove old X-DIGEST-MD5 hardcode.
...
This code is not called (yet).
1999-08-03 02:37:42 +00:00
