[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: slapd gets into a spin when using {SASL} password scheme (ITS#3048



> -----Original Message-----
> From: Paul Kranenburg [mailto:pk@cs.few.eur.nl]

> The failure mode reported in this ITS is still present in
> both 2.2.7 and 2.2.8.

Hm... I see. I wasn't testing with a sasl-regexp before.

On further reflection, this callback probably should never have been here in
the first place. I vaguely recall the question arising on -devel a long time
ago but I can't locate the thread at the moment. The sasl_checkpass function
is only called for a plaintext authentication. The only possibility for that
is doing a Simple Bind with {SASL} or doing a SASL Bind with PLAIN. In the
Simple Bind case, we really have nothing to do here. In the SASL Bind case,
the slapd auxprop should take care of it. I think the fix is to delete the
slap_sasl_checkpass function and its associated code.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support