mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-15 03:01:09 +08:00
403f4479bc
Replace old Id as needed (back-tcl). Leave updating of contribWare to contributors (for now).
96 lines
1.8 KiB
C
96 lines
1.8 KiB
C
/* $OpenLDAP$ */
|
|
/*
|
|
* Copyright 1998-1999 The OpenLDAP Foundation, All Rights Reserved.
|
|
* COPYING RESTRICTIONS APPLY, see COPYRIGHT file
|
|
*/
|
|
|
|
#include "portable.h"
|
|
|
|
#include <ac/stdlib.h>
|
|
#include <stdio.h>
|
|
|
|
#include "slap.h"
|
|
#include "proto-slap.h"
|
|
|
|
#include <lber.h>
|
|
#include <ldap_log.h>
|
|
|
|
char **supportedSASLMechanisms = NULL;
|
|
|
|
#ifdef HAVE_CYRUS_SASL
|
|
static sasl_callback_t callbacks[] = {
|
|
{ SASL_CB_LIST_END, NULL, NULL }
|
|
};
|
|
|
|
int sasl_init( void )
|
|
{
|
|
int rc;
|
|
char *mechs;
|
|
sasl_conn_t *server = NULL;
|
|
|
|
rc = sasl_server_init( callbacks, "slapd" );
|
|
|
|
if( rc != SASL_OK ) {
|
|
Debug( LDAP_DEBUG_ANY, "sasl_server_init failed\n",
|
|
0, 0, 0 );
|
|
return -1;
|
|
}
|
|
|
|
rc = sasl_server_new( "ldap", NULL, NULL, NULL,
|
|
SASL_SECURITY_LAYER,
|
|
&server );
|
|
|
|
if( rc != SASL_OK ) {
|
|
Debug( LDAP_DEBUG_ANY, "sasl_server_new failed\n",
|
|
0, 0, 0 );
|
|
return -1;
|
|
}
|
|
|
|
#ifdef RESTRICT_SASL
|
|
{
|
|
sasl_security_properties_t secprops;
|
|
memset(&secprops, 0, sizeof(secprops));
|
|
secprops.security_flags = SASL_SEC_NOPLAINTEXT | SASL_SEC_NOANONYMOUS;
|
|
secprops.property_names = NULL;
|
|
secprops.property_values = NULL;
|
|
|
|
rc = sasl_setprop( server, SASL_SEC_PROPS, &secprops );
|
|
|
|
if( rc != SASL_OK ) {
|
|
Debug( LDAP_DEBUG_ANY, "sasl_setprop failed\n",
|
|
0, 0, 0 );
|
|
return -1;
|
|
}
|
|
}
|
|
#endif
|
|
|
|
rc = sasl_listmech( server, NULL, NULL, ",", NULL,
|
|
&mechs, NULL, NULL);
|
|
|
|
if( rc != SASL_OK ) {
|
|
Debug( LDAP_DEBUG_ANY, "sasl_listmech failed: %d\n",
|
|
rc, 0, 0 );
|
|
return -1;
|
|
}
|
|
|
|
Debug( LDAP_DEBUG_TRACE, "SASL mechanisms: %s\n",
|
|
mechs, 0, 0 );
|
|
|
|
supportedSASLMechanisms = str2charray( mechs, "," );
|
|
sasl_dispose( &server );
|
|
|
|
return 0;
|
|
}
|
|
|
|
int sasl_destroy( void )
|
|
{
|
|
charray_free( supportedSASLMechanisms );
|
|
return 0;
|
|
}
|
|
|
|
#else
|
|
/* no SASL support */
|
|
int sasl_init( void ) { return 0; }
|
|
int sasl_destroy( void ) { return 0; }
|
|
#endif
|