CVS log for libraries/libldap/sasl.c

Up to [OpenLDAP] / libraries / libldap

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Happy New Year

More for prev commit. What about ldap_pvt_sasl_getmechs() ?

Add ldap_sasl_interactive_bind()

ITS#6672 mutex cleanup

ITS#6639 set sock err to EAGAIN on partial write

happy belated New Year

Fix prev commit, s/errno/err/g

For prev commit, check for EINTR/EAGAIN/EWOULDBLOCK

ITS#6327, #6334 take ret=-1/EINTR into account

Cleanup prev commit

ITS#6327 fix sb_sasl_generic_write retval for partial writes

Update copyright notices

Cleanup unused defs

ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups

Happy New Year (belated)

ITS#5263 fix return code from parse_sasl_bind_result()

Handle timeouts from ldap_result()

ITS#4799 remove kerberos / kbind references

happy new year

Misc LDAPbis comment update
Remove unnecessary ISOC notices

unifdef -DLDAP_NULL_IS_NULL

Happy new year!

use macros instead of numbers...

don't malloc empty strings for matched, error

Read LDAPResult.resultCode & ModifyRequest.modification.operation
and send SortResult.sortResult as BER ENUMERATED, not BER INTEGER.

libldap: ldap_parse_extended_result, try_read1msg, build_result_ber,
ldap_parse_sasl_bind_result.  slapd: do_modify, send_ldap_controls.

Happy New Year!

unifdef -UNEW_LOGGING

typo in comment

Happy new year

Updated notices and acknowledgements

didn't compile without cyrus-sasl

ITS#2717, use default SASL_MECH if none was provided.

Note that the mech stored in the void *defaults structure is useless
because we can't look inside the structure, and the mech list is needed
as input to the SASL library, before any callbacks are called. It seems
the mech doesn't belong in the *defaults struct, and/or it should be
visible and not opaque.

Fix lock release bug
Fix logging messages (thanks Kent)

Add Internet Society copyright notices

Don't use default binddn when password is empty

More for re-entrant LDAP* handles. Works much better.

unifdef -DLDAP_NOCACHE

ITS#2267: SASL empty cred fix

Happy new year

Fix ITS#2200, must send non-NULL cred even if it's zero-length.

Coverted LDAP_LOG macro to use subsystem ID int values instead of string values

Consistently don't check for NULL session handle and other pointers.
Application is responsible for providing valid session pointers.

Added LDAP_LOG Messages

Update copyright statements

stdlib.h should be included as <ac/stdlib.h>

More CLDAP tweaks, to differentiate between real LDAPv2 CLDAP and "other"
LDAP/UDP messages. Slapd marks received CLDAP messages as LDAP_VERSION2.
The client library can generate CLDAP queries if -Protocol 2 is chosen,
otherwise not. LDAPv2 CLDAP cannot query the slapd rootDSE, gets no reply.

Resurrection/rewrite of CLDAP (RFC1798 Connectionless LDAP).

Compile with -DLDAP_CONNECTIONLESS to use this code.
For slapd, use "-h cldap://" to listen on UDP.
For ldapsearch, use "-H cldap://" to query on UDP.
Client-side support is very minimal:
  no automatic timeout/retries
  no basedn wildcard expansion on results
  no support for specifying multiple servers at once.

Make some additional UTF8 public
Remove lint

Check for critical client controls.

new rebind proc
new SASL locking

Return more appropriate result codes than LDAP_UNAVAILABLE
upon failures.

Don't send optional cred if empty

ITS#647 from Paul R. Turgyan <pturgyan@umich.edu>
When calling ldap_search looking for "supportedSASLMechanisms",
a NULL string should be passed to ldap_search and not a NULL pointer.

Expose sasl flags to -lldap (so they can be quiet)
Fix interactive and automatic modes.  Quiet needs work.

First cut SASL "interactive" and "quiet" modes (default is "automatic")

Rework SASL command line arguments.  Default is now to authenticate
using best available mechanism.  (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.

Update SASL code to reuse context through life of session.
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters

Added -llber 'N' ber_printf format which inserts a NULL if
an internal flag set.  Used for SEQUENCE testing.  Flag must
be set using debugger.  Modified ber_printf to use new format
were needed for extensibility testing.

Added first cut -lldap support for extended responses.
Modified ldapsearch(1) to handle v3 search references when not
chasing.  Also added extended/unsolicited notification handling
and extended partial response handling.  Changes include a
number of LDIF enhancements.

Fixed getpassphrase() returns NULL bugs

Misc code cleanup.

Use LDAP_VFREE and friends.  Other misc code cleanup.

remove lint

ITS#537: lber io rewrite from Gambor Gombas.
Copyright 2000 Gábor Gombás. All rights reserved.
This is free software. You may redistribute and use it under the same
terms as OpenLDAP itself.

Fix unsigned * vs unsigned long * bugs

Y2k copyright update

Make sure we don't overallocate callbacks

Change negotiated mechanism:
	If application provide one, use it.  If application doesn't
	provide one, use best of server advertised.
Fix SASL/ANONYMOUS (not normally used, but should work)
PLAIN is not currently working... might be local to me as my
Cyrus installation is a bit hosted.

Fix cred passing.

Error handling changes including separation of client v. server
SASL to LDAP translation.  plus comments and other minor changes

ITS#503: Extend ldap tools to support SASL/TLS
Submitted by Gabor Gombas <gombasg@inf.elte.hu>

objectclass=* -> NULL

More fixes and comments

Cyrus SASL uses screwy terms.

correct callback numbering

work args of ldap_negotiated_sasl_bind_s() and provide examples
with authentication id and authorization ids.  Note: this routine
doesn't actually negotiate anything.  It likely should be renamed
ldap_sasl_auth_s() or ldap_sasl_bind_multistep() or something.

Changed (!strcmp(...)==0) to (strcmp(...)==0); obviously
wrong. Fix from adamson@andrew.cmu.edu.

In ldap_pvt_sasl_init() treat subsequent invocations as no-ops, not error.

Initial implementation of Kerberos password verification for
simple bind via:
	{KERBEROS}principal
Code is disabled by default (for security reasons).  Use
--enable-kpasswd to enable.  Behind SLAPD_KPASSWD.
Reworked Kerberos detection and split out KBIND as independent
feature (--disable-kbind) (LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND).
KBIND depends upon detection of KRB4 (or KRB425) support.  Detection,
building with eBones (as distributed with FreeBSD 3.4) okay, but
wasn't able to test as I don't have a K4 KDC handy.
--with-kerberos has a number of detection options... most likely
don't work properly.

Imported <ldap.h> in <ldap_pvt.h> so ldap_pvt_sasl_bind() has necessary
types. Changed const sasl_callback_t * to LDAP_CONST sasl_callback_t *.

Merged in preliminary support for Cyrus SASL library;
support for DCE slash-delimited, left-to-right DNs;
support for a domain socket transport (enable with
--enable-ldapi); and extensions to URL parsing to
support the latter transport.

Add BINDDN user-only directive to .ldaprc
Used only for simple bind when dn == NULL and password != NULL.

Fix == != typo

Fix decoding of sasl bind and extended operation responses.

Add OpenLDAP RCSid to *.[ch] in clients, libraries, and servers.
Replace old Id as needed (back-tcl).
Leave updating of contribWare to contributors (for now).

First cut at SASL routines.

Update copyrights for year 2002

Pull in a variety of bug fixes from HEAD including
	critical client control handling
	tls cert checking
	sasl/tls ref handling
	empty dn handling
Also removed ufn search (normally I would have left it
in but the merge was easier this way).

Cyrus SASL locking

Update TLS and SASL error reporting

Don't send empty cred

Import latest changes from devel

Import latest from devel

Import from devel

Merge latest devel codes into releng 2 branch.
Remove back-perl, back-sql, back-tcl from branch as they have yet
to be updated.
Additional changes are needed prior to release of alpha4.

Merge in all devel changes since 2.0-alpha2.
Move OPENLDAP_REL_ENG_2_MP forward.

Import ITS#2717 SASL_MECH fix from HEAD

    Fixed liblber ber_get_next trickle bug (ITS#2490)
    Fixed ldapsearch -p without -h bug (ITS#2532)
    Fixed slapd option ordering bug (ITS#2217)
    Removed lint
    Documentation
        Misc man page updates

Round 2 of changes from HEAD

Changes
    Updated libldap TLS certificate checking
    Updated client tool argument handling
    Updated test suite
    Updated liblutil detach handling
    Added libldap ldap_whoami routines
    Added liblber ber_flatten2 routine
    Added liblutil passwd sanity checks
    Fixed liblber PROTOS bugs
    Fixed ber_flush debug level
    Fixed libldap NULL cred bug
    Build Environment
        Check back-bdb requirement for BDB 4.1

SASL fixes

mostly new logging

updates from HEAD

Suck in HEAD changes since 2.1alpha

Happy new year!

sync with HEAD

Happy new year

Sync with HEAD

Merge in latest changes from HEAD

Changes from HEAD for beta

Happy new year! (belated)

happy new year

Happy new year!

Sync with HEAD

Sync with HEAD

Sync with HEAD

Add ldap_sasl_interactive_bind()

Happy New Year!

ITS#6672

ITS#6639

happy belated new year

ITS#6327,ITS#6334

Update copyright for next release

ITS#5369

Happy new year! (belated)

ITS#5263

Sync with HEAD for OL 2.4.5

Quick merge: everything from HEAD