Issue 5369 - GSSAPI support for client library
Summary: GSSAPI support for client library
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: contrib (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-02-11 09:09 UTC by mimir@samba.org
Modified: 2021-04-01 16:25 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description mimir@samba.org 2008-02-11 09:09:02 UTC
Full_Name: Rafal Szczesniak
Version: HEAD
OS: GNU/Linux
URL: http://www.samba.org/~mimir/gssapi-head.diff
Submission from: (NULL) (12.104.75.4)


OpenLDAP client libraries do not implement convenient mechanisms for interfacing
to MS Active Directory with minimum necessary configuration. Also, SASL
implementation is tightly connected with Cyrus SASL libs. Submitted patch
modifies the library to provide more generic SASL layer used both by Cyrus SASL
and contributed GSSAPI mechanism. The GSSAPI itself is limited to Kerberos 5, at
the moment, but the goal is to provide complete SASL layer for easy connecting
to MS servers.

Comment 1 Kurt Zeilenga 2008-02-11 15:02:11 UTC
changed notes
changed state Open to Suspended
moved from Incoming to Contrib
Comment 2 Kurt Zeilenga 2008-02-11 15:02:57 UTC
changed notes
Comment 3 Kurt Zeilenga 2008-02-11 17:06:19 UTC
On Feb 11, 2008, at 1:09 AM, mimir@samba.org wrote:

> Full_Name: Rafal Szczesniak
> Version: HEAD
> OS: GNU/Linux
> URL: http://www.samba.org/~mimir/gssapi-head.diff

The submitted patch file does not contain (at the top of the file, not  
as part of the diffs) the required notices.  Please review http://www.openldap.org/devel/contributing.html 
  and insert appropriate notices.  Also, please don't include in the  
diffs derived files (e.g., configure).

-- Kurt

Comment 4 mimir@samba.org 2008-02-11 20:26:15 UTC
Kurt,

On Mon, Feb 11, 2008 at 09:06:19AM -0800, Kurt Zeilenga wrote:
> On Feb 11, 2008, at 1:09 AM, mimir@samba.org wrote:
>
>> Full_Name: Rafal Szczesniak
>> Version: HEAD
>> OS: GNU/Linux
>> URL: http://www.samba.org/~mimir/gssapi-head.diff
>
> The submitted patch file does not contain (at the top of the file, not  
> as part of the diffs) the required notices.

I'm sorry about that. I was submitting it late yesterday and must have missed
that. I'll update the diff and let you know soon.

> Please review 
> http://www.openldap.org/devel/contributing.html and insert appropriate 
> notices.  Also, please don't include in the diffs derived files (e.g., 
> configure).

Of course. My mistake.


cheers,
-- 
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewisesoftware.com

Comment 5 mimir@samba.org 2008-02-14 19:13:06 UTC
Kurt,

On Mon, Feb 11, 2008 at 09:06:19AM -0800, Kurt Zeilenga wrote:
>> Full_Name: Rafal Szczesniak
>> Version: HEAD
>> OS: GNU/Linux
>> URL: http://www.samba.org/~mimir/gssapi-head.diff
>
> The submitted patch file does not contain (at the top of the file, not  
> as part of the diffs) the required notices.  Please review 
> http://www.openldap.org/devel/contributing.html and insert appropriate 
> notices.  Also, please don't include in the diffs derived files (e.g., 
> configure).

I've updated the patch file with necessary changes. Please take a look
if it's fine now.


cheers,
-- 
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewisesoftware.com

Comment 6 Kurt Zeilenga 2008-02-15 06:26:27 UTC
You've only included one of the two required statements.  You need  
also need to include either a copyright + license statement, or a  
public domain release statement.  -- Kurt

On Feb 14, 2008, at 9:12 AM, mimir@samba.org wrote:

>
> --OgqxwSJOaUobr8KG
> Content-Type: text/plain; charset=iso-8859-2
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
> Kurt,
>
> On Mon, Feb 11, 2008 at 09:06:19AM -0800, Kurt Zeilenga wrote:
>>> Full_Name: Rafal Szczesniak
>>> Version: HEAD
>>> OS: GNU/Linux
>>> URL: http://www.samba.org/~mimir/gssapi-head.diff
>>
>> The submitted patch file does not contain (at the top of the file,  
>> not =
> =20
>> as part of the diffs) the required notices.  Please review=20
>> http://www.openldap.org/devel/contributing.html and insert  
>> appropriate=20
>> notices.  Also, please don't include in the diffs derived files  
>> (e.g.,=20
>> configure).
>
> I've updated the patch file with necessary changes. Please take a look
> if it's fine now.
>
>
> cheers,
> --=20
> Rafal Szczesniak
> Samba Team member   http://www.samba.org
> Likewise Software   http://www.likewisesoftware.com
>
>
> --OgqxwSJOaUobr8KG
> Content-Type: application/pgp-signature; name="signature.asc"
> Content-Description: Digital signature
> Content-Disposition: inline
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFHtJLCHvdfyv3qiKkRArL0AJ9ZazJE3LUduZb3A8rz21KheW/EYQCfQt8z
> F7AnIDF5EkJ7ssDwHStryEo=
> =tIVf
> -----END PGP SIGNATURE-----
>
> --OgqxwSJOaUobr8KG--
>
>

Comment 7 Kurt Zeilenga 2008-02-15 19:28:56 UTC
I note that the patch appears to be incomplete.  No gssapi.c included.

-- Kurt

On Feb 14, 2008, at 8:26 PM, kurt@openldap.org wrote:

> You've only included one of the two required statements.  You need
> also need to include either a copyright + license statement, or a
> public domain release statement.  -- Kurt
>
> On Feb 14, 2008, at 9:12 AM, mimir@samba.org wrote:
>
>>
>> --OgqxwSJOaUobr8KG
>> Content-Type: text/plain; charset=iso-8859-2
>> Content-Disposition: inline
>> Content-Transfer-Encoding: quoted-printable
>>
>> Kurt,
>>
>> On Mon, Feb 11, 2008 at 09:06:19AM -0800, Kurt Zeilenga wrote:
>>>> Full_Name: Rafal Szczesniak
>>>> Version: HEAD
>>>> OS: GNU/Linux
>>>> URL: http://www.samba.org/~mimir/gssapi-head.diff
>>>
>>> The submitted patch file does not contain (at the top of the file,
>>> not =
>> =20
>>> as part of the diffs) the required notices.  Please review=20
>>> http://www.openldap.org/devel/contributing.html and insert
>>> appropriate=20
>>> notices.  Also, please don't include in the diffs derived files
>>> (e.g.,=20
>>> configure).
>>
>> I've updated the patch file with necessary changes. Please take a  
>> look
>> if it's fine now.
>>
>>
>> cheers,
>> --=20
>> Rafal Szczesniak
>> Samba Team member   http://www.samba.org
>> Likewise Software   http://www.likewisesoftware.com
>>
>>
>> --OgqxwSJOaUobr8KG
>> Content-Type: application/pgp-signature; name="signature.asc"
>> Content-Description: Digital signature
>> Content-Disposition: inline
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v1.4.6 (GNU/Linux)
>>
>> iD8DBQFHtJLCHvdfyv3qiKkRArL0AJ9ZazJE3LUduZb3A8rz21KheW/EYQCfQt8z
>> F7AnIDF5EkJ7ssDwHStryEo=
>> =tIVf
>> -----END PGP SIGNATURE-----
>>
>> --OgqxwSJOaUobr8KG--
>>
>>
>
>

Comment 8 Kurt Zeilenga 2008-02-18 04:23:38 UTC
changed notes
Comment 9 Kurt Zeilenga 2008-02-18 04:23:53 UTC
changed notes
Comment 10 mimir@samba.org 2008-03-03 21:38:05 UTC
On Fri, Feb 15, 2008 at 09:28:56AM -1000, Kurt Zeilenga wrote:
> I note that the patch appears to be incomplete.  No gssapi.c included.

Sorry about that. Wrong working dir when generating the patch. I've
uploaded more complete file at http://samba.org/~mimir/head-gssapi.diff
I've also added license notice. Let me know if there's anything else
missing.


cheers,
-- 
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewisesoftware.com

Comment 11 Kurt Zeilenga 2008-03-03 22:50:49 UTC
On Mar 3, 2008, at 1:37 PM, mimir@samba.org wrote:

>
> --zhXaljGHf11kAtnf
> Content-Type: text/plain; charset=iso-8859-2
> Content-Disposition: inline
> Content-Transfer-Encoding: quoted-printable
>
> On Fri, Feb 15, 2008 at 09:28:56AM -1000, Kurt Zeilenga wrote:
>> I note that the patch appears to be incomplete.  No gssapi.c  
>> included.
>
> Sorry about that. Wrong working dir when generating the patch. I've
> uploaded more complete file at http://samba.org/~mimir/head- 
> gssapi.diff
> I've also added license notice. Let me know if there's anything else
> missing.

In your rights statement, you claim this patch is only derived from  
OpenLDAP Software.  Is this correct?  Are there are works from which  
your work is derived?  That is, did you copy any material from any  
other work (e.g., Samba)?  Please document any in the rights statement  
and, when complete, update the ITS (by email reply-all) indicating so.

The rights statement needs to be amended to include a statement that  
the modifications are not subject to Stefan's employer.  And then  
Stefan needs to send a copy of both statements from his email address  
to openldap-its@openldap.org with a subject of "ITS#5369 IPR  
statements" confirming they are correct.  I've cc'ed Stefan on this  
note.

I note my review is limited to IPR issues.  There may well be  
technical issues to address separately from this.  These will be  
handled separately (normally post IPR review).

Regards, Kurt

>
>
>
> cheers,
> --=20
> Rafal Szczesniak
> Samba Team member   http://www.samba.org
> Likewise Software   http://www.likewisesoftware.com
>
>
> --zhXaljGHf11kAtnf
> Content-Type: application/pgp-signature; name="signature.asc"
> Content-Description: Digital signature
> Content-Disposition: inline
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFHzG+9Hvdfyv3qiKkRAmFUAJ9mbHvUFgkz2f/urbdGwbjhSQ6mbQCeMxYZ
> XF5OP4ZaFhwZ5T6rO1FJ4FM=
> =Ii59
> -----END PGP SIGNATURE-----
>
> --zhXaljGHf11kAtnf--
>
>

Comment 12 mimir@samba.org 2008-03-04 09:23:59 UTC
On Mon, Mar 03, 2008 at 02:50:49PM -0800, Kurt Zeilenga wrote:
> On Mar 3, 2008, at 1:37 PM, mimir@samba.org wrote:
> In your rights statement, you claim this patch is only derived from  
> OpenLDAP Software.  Is this correct?  Are there are works from which  
> your work is derived?  That is, did you copy any material from any other 
> work (e.g., Samba)?  Please document any in the rights statement and, 
> when complete, update the ITS (by email reply-all) indicating so.

No, it is purely OpenLDAP work using GSS-API libraries.

> The rights statement needs to be amended to include a statement that the 
> modifications are not subject to Stefan's employer.  And then Stefan 
> needs to send a copy of both statements from his email address to 
> openldap-its@openldap.org with a subject of "ITS#5369 IPR statements" 
> confirming they are correct.  I've cc'ed Stefan on this note.

Thanks. The modifications are not subject to his employer, but thanks for
cc-ing him. Sorry Metze, I should have not forgotten about this.

> I note my review is limited to IPR issues.  There may well be technical 
> issues to address separately from this.  These will be handled separately 
> (normally post IPR review).

Sure, I understand.


cheers,
-- 
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewisesoftware.com

Comment 13 mimir@samba.org 2008-04-02 10:11:37 UTC
Kurt,

On Mon, Mar 03, 2008 at 02:50:49PM -0800, Kurt Zeilenga wrote:
> In your rights statement, you claim this patch is only derived from  
> OpenLDAP Software.  Is this correct?  Are there are works from which  
> your work is derived?  That is, did you copy any material from any other 
> work (e.g., Samba)?  Please document any in the rights statement and, 
> when complete, update the ITS (by email reply-all) indicating so.
>
> The rights statement needs to be amended to include a statement that the 
> modifications are not subject to Stefan's employer.  And then Stefan 
> needs to send a copy of both statements from his email address to 
> openldap-its@openldap.org with a subject of "ITS#5369 IPR statements" 
> confirming they are correct.  I've cc'ed Stefan on this note.

Have you received Stefan's copyright statement ?


cheers,
-- 
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewisesoftware.com

Comment 14 Kurt Zeilenga 2008-06-25 01:06:07 UTC
changed notes
Comment 15 Kurt Zeilenga 2008-06-25 01:06:35 UTC
changed notes
changed state Suspended to Open
Comment 16 Howard Chu 2008-10-09 08:21:20 UTC
kurt@OpenLDAP.org wrote:
> I note that the patch appears to be incomplete.  No gssapi.c included.

Sorry for the tardy review. The patch is also corrupted (both patches 
actually) and doesn't compile.

Note this section of the patch to cyrus.c:

+static ber_int_t
+sb_sasl_cyrus_encode(
+   struct sb_sasl_generic_data *p,
+   unsigned char *buf,
+   ber_len_t len,
+   Sockbuf_Buf *dst)
+{
+   sasl_conn_t *sasl_context = (sasl_conn_t *)p->ops_private;
+   ber_int_t ret;
+   unsigned tmpsize = dst->buf_size;
+
+   ret = sasl_encode( sasl_context, buf, len,
+              (SASL_CONST char **)&dst->buf_base,
+              &tmpsize );

-   assert( sbiod != NULL );
+   dst->buf_size = tmpsize;
+   dst->buf_end = dst->buf_

The last line appears to be truncated in both versions of the diff.

>
> -- Kurt
>
> On Feb 14, 2008, at 8:26 PM, kurt@openldap.org wrote:
>
>> You've only included one of the two required statements.  You need
>> also need to include either a copyright + license statement, or a
>> public domain release statement.  -- Kurt
>>
>> On Feb 14, 2008, at 9:12 AM, mimir@samba.org wrote:
>>
>>> --OgqxwSJOaUobr8KG
>>> Content-Type: text/plain; charset=iso-8859-2
>>> Content-Disposition: inline
>>> Content-Transfer-Encoding: quoted-printable
>>>
>>> Kurt,
>>>
>>> On Mon, Feb 11, 2008 at 09:06:19AM -0800, Kurt Zeilenga wrote:
>>>>> Full_Name: Rafal Szczesniak
>>>>> Version: HEAD
>>>>> OS: GNU/Linux
>>>>> URL: http://www.samba.org/~mimir/gssapi-head.diff
>>>> The submitted patch file does not contain (at the top of the file,
>>>> not =
>>> =20
>>>> as part of the diffs) the required notices.  Please review=20
>>>> http://www.openldap.org/devel/contributing.html and insert
>>>> appropriate=20
>>>> notices.  Also, please don't include in the diffs derived files
>>>> (e.g.,=20
>>>> configure).
>>> I've updated the patch file with necessary changes. Please take a
>>> look
>>> if it's fine now.
>>>
>>>
>>> cheers,
>>> --=20
>>> Rafal Szczesniak
>>> Samba Team member   http://www.samba.org
>>> Likewise Software   http://www.likewisesoftware.com
>>>

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 17 Howard Chu 2008-10-09 08:53:13 UTC
changed notes
changed state Open to Test
Comment 18 Quanah Gibson-Mount 2008-11-08 00:14:23 UTC
changed notes
changed state Test to Release
Comment 19 Quanah Gibson-Mount 2008-11-24 17:00:55 UTC
changed notes
changed state Release to Closed
Comment 20 OpenLDAP project 2014-08-01 21:03:27 UTC
IPR Okay
Committed to HEAD with minor corrections
Committed to RE24 with minor corrections