[Date Prev][Date Next] [Chronological] [Thread] [Top]

liblutil/passwd.c:chk_sasl() problems (ITS#1720)



Full_Name: Hallvard B. Furuseth
Version: HEAD (2002-04-02)
OS: Linux
URL: http://folk.uio.no/hbf/OpenLDAP/sasl.txt
Submission from: (NULL) (158.36.148.34)


chk_sasl() calls
   sasl_checkpass(... passwd, passwd_len, cred, cred_len ...)
though the manpage says the order of argument is
   sasl_checkpass(... user, userlen, pass, passlen ...)
If 'passwd' is 'pass', presumably 'cred' is 'user', so the order
of the passwd and cred arguments should be reversed.  Has this
function been tested with sasl?  I don't know anything about sasl
myself.

Also, passwd.c only works with sasl version 1.  Here is a patch to
make it compile with version 2 as well.  I did not touch the order
of the arguments; I leave that to the author of this routine.