Commit graph

184 commits

Author SHA1 Message Date
Kim Alvefur
5a07b39c7f Backed out changeset 89c42aff8510: The problem in ejabberd has reportedly been resolved and this change causes more problems than it solves (fixes #1006) 2018-02-04 01:13:27 +01:00
Kim Alvefur
2d4c94e612 mod_saslauth: Log which mechanisms are offered 2017-12-21 10:15:47 +01:00
Kim Alvefur
3e4952567c mod_saslauth: Remove unused argument [luacheck] 2017-04-01 22:34:15 +02:00
Kim Alvefur
66618bf09c mod_saslauth: Fix typoed variable name [luacheck] 2017-03-06 16:05:24 +01:00
Kim Alvefur
7e3a83a35b mod_saslauth: Switch to hook_tag from hook_stanza which was renamed in 2087d42f1e77 2017-03-06 15:56:12 +01:00
Kim Alvefur
962ba79613 Merge 0.9->0.10 2017-03-02 15:21:07 +01:00
Kim Alvefur
d471c7b124 mod_saslauth: Log SASL failure reason 2017-03-02 15:17:32 +01:00
Kim Alvefur
7a2ed1a9ed mod_saslauth: Ignore shadowing of logger [luacheck] 2017-02-15 23:04:44 +01:00
Kim Alvefur
bb3a3dfe97 mod_saslauth: Improve logging as to why when SASL is not offered 2017-02-15 23:00:03 +01:00
Kim Alvefur
39639a7c38 mod_saslauth: Cache logger in local for less typing 2017-02-15 22:59:19 +01:00
Kim Alvefur
e701756ba9 core.sessionmanager, mod_saslauth: Introduce intermediate session type for authenticated but unbound sessions so that resource binding is not treated as a normal stanza 2016-12-13 18:15:17 +01:00
Kim Alvefur
94c745e8e8 mod_saslauth: Disable DIGEST-MD5 by default (closes #515) 2016-03-18 11:51:58 +01:00
Kim Alvefur
8e786f387d mod_saslauth: Make it easier to support multiple channel binding methonds 2014-11-19 14:45:20 +01:00
Kim Alvefur
2ab66e784a mod_saslauth: Break out tls-unique channel binding callback so it is instantiated once 2014-11-19 14:44:41 +01:00
Kim Alvefur
b47d9adc40 mod_saslauth: Keep sasl_handler in a local variable 2014-11-19 14:37:45 +01:00
Kim Alvefur
9722fc8c01 mod_saslauth: Better name for config option 2014-10-21 16:41:28 +02:00
Kim Alvefur
1386a2c85d mod_saslauth: Make it possible to disable certain mechanisms 2014-10-21 14:38:40 +02:00
Kim Alvefur
83b74ac626 mod_saslauth: Add LOGIN to mechanisms not allowed over unencrypted connections as it may be offered by 3rd party authentication plugins 2014-10-21 14:37:05 +02:00
Kim Alvefur
73979a83fd mod_saslauth: Use a configurable set of mechanisms to not allow over unencrypted connections 2014-10-21 14:35:32 +02:00
Kim Alvefur
371d996a7d mod_saslauth: Log warning if no SASL mechanisms were offered 2014-10-21 12:57:56 +02:00
Kim Alvefur
bf13e6d88e mod_saslauth: Use type-specific config option getters 2014-10-21 12:56:19 +02:00
Kim Alvefur
ac43c71ec2 mod_legacyauth, mod_saslauth, mod_tls: Pass require_encryption as default option to s2s_require_encryption so the later overrides the former 2014-10-21 12:49:03 +02:00
Kim Alvefur
6aec6e8425 mod_saslauth: Fix encoding of missing vs empty SASL reply messages 2014-09-23 19:46:29 +02:00
Kim Alvefur
092f833cfc mod_saslauth: Stricter SASL EXTERNAL handling more in line with XEP-0178 2014-09-23 19:29:14 +02:00
Kim Alvefur
d33c824d1f mod_dialback, mod_saslauth: Remove broken fallback to dialback on SASL EXTERNAL failure 2014-09-23 14:23:01 +02:00
Kim Alvefur
8003a40b0a mod_lastactivity, mod_legacyauth, mod_presence, mod_saslauth, mod_tls: Use the newer stanza:get_child APIs and optimize away some table lookups 2014-07-04 22:52:34 +02:00
Kim Alvefur
8c0d996be4 Merge 0.9->0.10 2014-03-25 19:16:38 +01:00
Kim Alvefur
8e115ce876 mod_saslauth: Only do c2s SASL on normal VirtualHosts 2014-03-22 12:41:38 +01:00
Kim Alvefur
4078dc07a2 mod_saslauth: Make sure sasl handler has add_cb_handler (fixes #392) 2014-02-12 19:25:15 +01:00
Kim Alvefur
c89ca6cad5 mod_saslauth: Collect data for channel binding only if we know for sure that the stream is encrypted 2013-10-07 12:56:21 +02:00
Kim Alvefur
3d137b760e Merge Tobias SCRAM-PLUS work 2013-09-22 00:44:20 +02:00
Florian Zeitz
1d833bb807 Remove all trailing whitespace 2013-08-09 17:48:21 +02:00
Matthew Wild
073282787b mod_saslauth, mod_compression: Fix some cases where open_stream() was not being passed to/from (see df3c78221f26 and issue #338) 2013-04-29 10:43:44 +01:00
Matthew Wild
339e74b1b9 s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event 2013-03-22 14:18:23 +00:00
Kim Alvefur
ee9ef878c4 mod_s2s, mod_saslauth, mod_compression: Refactor to have common code for opening streams 2013-03-16 17:46:43 +01:00
Matthew Wild
02dc79e546 mod_saslauth: Pass session to usermanager.get_sasl_handler() 2012-07-04 23:44:13 +01:00
Matthew Wild
ddf88f4b38 mod_saslauth: Remove unused declaration of xmlns_stanzas 2012-04-28 03:05:35 +01:00
Kim Alvefur
621f44b146 mod_saslauth: Remove useless import of, and call to nodeprep. 2012-02-12 15:14:35 +01:00
Kim Alvefur
807c896ee6 mod_saslauth: Fire authentication-failure if make_authenticated() failed. 2012-02-12 15:08:12 +01:00
Kim Alvefur
6eaa0d2b86 mod_saslauth: Move authentication-success event to after session has been made authenticated. 2012-02-12 15:05:31 +01:00
Paul Aurich
03efdf7669 mod_saslauth: "" ~= nil (thanks, Zash!) 2012-01-24 14:57:53 -08:00
Waqas Hussain
afd972f05b mod_saslauth: Never send empty <mechanisms/>, for real this time. 2011-10-13 00:24:09 +05:00
Waqas Hussain
90a5f85bf3 mod_saslauth: Never send empty <mechanisms/>. 2011-10-13 00:10:02 +05:00
Matthew Wild
8114fdc49e mod_saslauth: Fire authentication-success and authentication-failure events (thanks scitor) 2011-08-29 12:01:42 -04:00
Tobias Markmann
d07446041f mod_saslauth: Check whether LuaSec supports getpeerfinished() binding. 2011-01-17 16:50:21 +01:00
Tobias Markmann
a1c646ad48 mod_saslauth: Add channel binding handler for tls-unique channel binding. 2011-01-17 16:50:21 +01:00
Tobias Markmann
3dc5c26703 mod_saslauth: Set secure socket as SASL object user data for secure sessions. 2011-01-17 16:50:21 +01:00
Waqas Hussain
1a6f60183c mod_saslauth: Remove special handling for SASL ANONYMOUS, and let mod_auth_anonymous handle it. 2010-12-28 05:28:15 +05:00
Waqas Hussain
aa144af70e util.sasl.*, mod_auth_*, mod_saslauth: Pass SASL handler as first parameter to SASL profile callbacks. 2010-12-27 19:57:04 +05:00
Matthew Wild
e9fff01f56 mod_saslauth: Handle session bind requests to the host, fixes OneTeam login 2010-12-24 18:54:54 +00:00