version 1.1.4.8, 2001/06/25 04:56:08
|
version 1.50, 2003/05/22 14:21:14
|
Line 1
|
Line 1
|
/* $OpenLDAP: pkg/ldap/libraries/libldap/sasl.c,v 1.1.4.7 2000/10/11 02:29:13 kurt Exp $ */ |
/* $OpenLDAP: pkg/ldap/libraries/libldap/sasl.c,v 1.49 2003/02/13 22:02:31 hyc Exp $ */ |
/* |
/* |
* Copyright 1998-2000 The OpenLDAP Foundation, All Rights Reserved. |
* Copyright 1998-2003 The OpenLDAP Foundation, All Rights Reserved. |
* COPYING RESTRICTIONS APPLY, see COPYRIGHT file |
* COPYING RESTRICTIONS APPLY, see COPYRIGHT file |
*/ |
*/ |
|
|
Line 27
|
Line 27
|
|
|
#include "portable.h" |
#include "portable.h" |
|
|
#include <stdlib.h> |
|
#include <stdio.h> |
#include <stdio.h> |
|
|
#include <ac/socket.h> |
#include <ac/socket.h> |
|
#include <ac/stdlib.h> |
#include <ac/string.h> |
#include <ac/string.h> |
#include <ac/time.h> |
#include <ac/time.h> |
#include <ac/errno.h> |
#include <ac/errno.h> |
Line 60 ldap_sasl_bind(
|
Line 60 ldap_sasl_bind(
|
{ |
{ |
BerElement *ber; |
BerElement *ber; |
int rc; |
int rc; |
|
ber_int_t id; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG ( TRANSPORT, ENTRY, "ldap_sasl_bind\n", 0, 0, 0 ); |
|
#else |
Debug( LDAP_DEBUG_TRACE, "ldap_sasl_bind\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_TRACE, "ldap_sasl_bind\n", 0, 0, 0 ); |
|
#endif |
|
|
assert( ld != NULL ); |
assert( ld != NULL ); |
assert( LDAP_VALID( ld ) ); |
assert( LDAP_VALID( ld ) ); |
assert( msgidp != NULL ); |
assert( msgidp != NULL ); |
|
|
if( msgidp == NULL ) { |
/* check client controls */ |
ld->ld_errno = LDAP_PARAM_ERROR; |
rc = ldap_int_client_controls( ld, cctrls ); |
return ld->ld_errno; |
if( rc != LDAP_SUCCESS ) return rc; |
} |
|
|
|
if( mechanism == LDAP_SASL_SIMPLE ) { |
if( mechanism == LDAP_SASL_SIMPLE ) { |
if( dn == NULL && cred != NULL ) { |
if( dn == NULL && cred != NULL && cred->bv_len ) { |
/* use default binddn */ |
/* use default binddn */ |
dn = ld->ld_defbinddn; |
dn = ld->ld_defbinddn; |
} |
} |
Line 93 ldap_sasl_bind(
|
Line 97 ldap_sasl_bind(
|
return ld->ld_errno; |
return ld->ld_errno; |
} |
} |
|
|
assert( BER_VALID( ber ) ); |
assert( LBER_VALID( ber ) ); |
|
|
|
LDAP_NEXT_MSGID( ld, id ); |
if( mechanism == LDAP_SASL_SIMPLE ) { |
if( mechanism == LDAP_SASL_SIMPLE ) { |
/* simple bind */ |
/* simple bind */ |
rc = ber_printf( ber, "{it{istON}" /*}*/, |
rc = ber_printf( ber, "{it{istON}" /*}*/, |
++ld->ld_msgid, LDAP_REQ_BIND, |
id, LDAP_REQ_BIND, |
ld->ld_version, dn, LDAP_AUTH_SIMPLE, |
ld->ld_version, dn, LDAP_AUTH_SIMPLE, |
cred ); |
cred ); |
|
|
} else if ( cred == NULL || !cred->bv_len ) { |
} else if ( cred == NULL || cred->bv_val == NULL ) { |
/* SASL bind w/o creditials */ |
/* SASL bind w/o creditials */ |
rc = ber_printf( ber, "{it{ist{sN}N}" /*}*/, |
rc = ber_printf( ber, "{it{ist{sN}N}" /*}*/, |
++ld->ld_msgid, LDAP_REQ_BIND, |
id, LDAP_REQ_BIND, |
ld->ld_version, dn, LDAP_AUTH_SASL, |
ld->ld_version, dn, LDAP_AUTH_SASL, |
mechanism ); |
mechanism ); |
|
|
} else { |
} else { |
/* SASL bind w/ creditials */ |
/* SASL bind w/ creditials */ |
rc = ber_printf( ber, "{it{ist{sON}N}" /*}*/, |
rc = ber_printf( ber, "{it{ist{sON}N}" /*}*/, |
++ld->ld_msgid, LDAP_REQ_BIND, |
id, LDAP_REQ_BIND, |
ld->ld_version, dn, LDAP_AUTH_SASL, |
ld->ld_version, dn, LDAP_AUTH_SASL, |
mechanism, cred ); |
mechanism, cred ); |
} |
} |
Line 135 ldap_sasl_bind(
|
Line 140 ldap_sasl_bind(
|
return ld->ld_errno; |
return ld->ld_errno; |
} |
} |
|
|
#ifndef LDAP_NOCACHE |
|
if ( ld->ld_cache != NULL ) { |
|
ldap_flush_cache( ld ); |
|
} |
|
#endif /* !LDAP_NOCACHE */ |
|
|
|
/* send the message */ |
/* send the message */ |
*msgidp = ldap_send_initial_request( ld, LDAP_REQ_BIND, dn, ber ); |
*msgidp = ldap_send_initial_request( ld, LDAP_REQ_BIND, dn, ber, id ); |
|
|
if(*msgidp < 0) |
if(*msgidp < 0) |
return ld->ld_errno; |
return ld->ld_errno; |
Line 165 ldap_sasl_bind_s(
|
Line 165 ldap_sasl_bind_s(
|
LDAPMessage *result; |
LDAPMessage *result; |
struct berval *scredp = NULL; |
struct berval *scredp = NULL; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG ( TRANSPORT, ENTRY, "ldap_sasl_bind_s\n", 0, 0, 0 ); |
|
#else |
Debug( LDAP_DEBUG_TRACE, "ldap_sasl_bind_s\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_TRACE, "ldap_sasl_bind_s\n", 0, 0, 0 ); |
|
#endif |
|
|
/* do a quick !LDAPv3 check... ldap_sasl_bind will do the rest. */ |
/* do a quick !LDAPv3 check... ldap_sasl_bind will do the rest. */ |
if( servercredp != NULL ) { |
if( servercredp != NULL ) { |
Line 182 ldap_sasl_bind_s(
|
Line 186 ldap_sasl_bind_s(
|
return( rc ); |
return( rc ); |
} |
} |
|
|
|
#ifdef LDAP_CONNECTIONLESS |
|
if (LDAP_IS_UDP(ld)) { |
|
return( rc ); |
|
} |
|
#endif |
|
|
if ( ldap_result( ld, msgid, 1, NULL, &result ) == -1 ) { |
if ( ldap_result( ld, msgid, 1, NULL, &result ) == -1 ) { |
return( ld->ld_errno ); /* ldap_result sets ld_errno */ |
return( ld->ld_errno ); /* ldap_result sets ld_errno */ |
} |
} |
Line 241 ldap_parse_sasl_bind_result(
|
Line 251 ldap_parse_sasl_bind_result(
|
ber_tag_t tag; |
ber_tag_t tag; |
BerElement *ber; |
BerElement *ber; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG ( TRANSPORT, ENTRY, "ldap_parse_sasl_bind_result\n", 0, 0, 0 ); |
|
#else |
Debug( LDAP_DEBUG_TRACE, "ldap_parse_sasl_bind_result\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_TRACE, "ldap_parse_sasl_bind_result\n", 0, 0, 0 ); |
|
#endif |
|
|
assert( ld != NULL ); |
assert( ld != NULL ); |
assert( LDAP_VALID( ld ) ); |
assert( LDAP_VALID( ld ) ); |
assert( res != NULL ); |
assert( res != NULL ); |
|
|
if ( ld == NULL || res == NULL ) { |
|
return LDAP_PARAM_ERROR; |
|
} |
|
|
|
if( servercredp != NULL ) { |
if( servercredp != NULL ) { |
if( ld->ld_version < LDAP_VERSION2 ) { |
if( ld->ld_version < LDAP_VERSION2 ) { |
return LDAP_NOT_SUPPORTED; |
return LDAP_NOT_SUPPORTED; |
Line 354 ldap_pvt_sasl_getmechs ( LDAP *ld, char
|
Line 364 ldap_pvt_sasl_getmechs ( LDAP *ld, char
|
char **values, *mechlist; |
char **values, *mechlist; |
int rc; |
int rc; |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG ( TRANSPORT, ENTRY, "ldap_pvt_sasl_getmech\n", 0, 0, 0 ); |
|
#else |
Debug( LDAP_DEBUG_TRACE, "ldap_pvt_sasl_getmech\n", 0, 0, 0 ); |
Debug( LDAP_DEBUG_TRACE, "ldap_pvt_sasl_getmech\n", 0, 0, 0 ); |
|
#endif |
|
|
rc = ldap_search_s( ld, "", LDAP_SCOPE_BASE, |
rc = ldap_search_s( ld, "", LDAP_SCOPE_BASE, |
NULL, attrs, 0, &res ); |
NULL, attrs, 0, &res ); |
Line 419 ldap_sasl_interactive_bind_s(
|
Line 433 ldap_sasl_interactive_bind_s(
|
#if defined( LDAP_R_COMPILE ) && defined( HAVE_CYRUS_SASL ) |
#if defined( LDAP_R_COMPILE ) && defined( HAVE_CYRUS_SASL ) |
ldap_pvt_thread_mutex_lock( &ldap_int_sasl_mutex ); |
ldap_pvt_thread_mutex_lock( &ldap_int_sasl_mutex ); |
#endif |
#endif |
|
#ifdef LDAP_CONNECTIONLESS |
|
if( LDAP_IS_UDP(ld) ) { |
|
/* Just force it to simple bind, silly to make the user |
|
* ask all the time. No, we don't ever actually bind, but I'll |
|
* let the final bind handler take care of saving the cdn. |
|
*/ |
|
rc = ldap_simple_bind(ld, dn, NULL); |
|
return rc < 0 ? rc : 0; |
|
} else |
|
#endif |
if( mechs == NULL || *mechs == '\0' ) { |
if( mechs == NULL || *mechs == '\0' ) { |
char *smechs; |
char *smechs; |
|
|
Line 429 ldap_sasl_interactive_bind_s(
|
Line 452 ldap_sasl_interactive_bind_s(
|
goto done; |
goto done; |
} |
} |
|
|
|
#ifdef NEW_LOGGING |
|
LDAP_LOG ( TRANSPORT, DETAIL1, |
|
"ldap_interactive_sasl_bind_s: server supports: %s\n", |
|
smechs, 0, 0 ); |
|
#else |
Debug( LDAP_DEBUG_TRACE, |
Debug( LDAP_DEBUG_TRACE, |
"ldap_interactive_sasl_bind_s: server supports: %s\n", |
"ldap_interactive_sasl_bind_s: server supports: %s\n", |
smechs, 0, 0 ); |
smechs, 0, 0 ); |
|
#endif |
|
|
mechs = smechs; |
mechs = smechs; |
|
|
} else { |
} else { |
|
#ifdef NEW_LOGGING |
|
LDAP_LOG ( TRANSPORT, DETAIL1, |
|
"ldap_interactive_sasl_bind_s: user selected: %s\n", mechs, 0, 0 ); |
|
#else |
Debug( LDAP_DEBUG_TRACE, |
Debug( LDAP_DEBUG_TRACE, |
"ldap_interactive_sasl_bind_s: user selected: %s\n", |
"ldap_interactive_sasl_bind_s: user selected: %s\n", |
mechs, 0, 0 ); |
mechs, 0, 0 ); |
|
#endif |
} |
} |
|
|
rc = ldap_int_sasl_bind( ld, dn, mechs, |
rc = ldap_int_sasl_bind( ld, dn, mechs, |