Matthew Wild
cfa4181982
mod_saslauth: Pass through any auth scope from the SASL handler to sessionmanager.make_authenticated()
2020-02-05 17:56:44 +00:00
Kim Alvefur
9589da30b6
mod_saslauth: Set a nicer bounce error explaining SASL EXTERNAL failures
...
Better than the previous string concatenation of SASL failure condition
and optional text sent by the remote server.
Would be nice to have a text per condition, other than the probably most
common 'not-authorized'.
2019-12-07 22:55:51 +01:00
Kim Alvefur
0de6ce740e
mod_saslauth: Collect SASL EXTERNAL failures into an util.error object
...
Will be easier than that concatenated string to extract info out of for
use elsewhere.
2019-12-07 22:51:43 +01:00
Kim Alvefur
4053cdb848
mod_saslauth: Advertise correct set of mechanisms
...
Mistakenly iterates over the set of all supported mechanisms instead of
the one without insecure mechanisms if the connection is insecure.
Not a problem if c2s_require_encryption is true
Introduced in 56a0f68b7797
2019-12-02 16:00:16 +01:00
Kim Alvefur
4d28443876
mod_saslauth: Demote "no SASL mechanisms" error back to warning
...
This gets printed before TLS if c2s_require_encryption = false,
in which case it is just annoying.
2019-10-15 23:38:29 +02:00
Kim Alvefur
57a86c0b0c
mod_saslauth: Improve logging of why no SASL mechanisms were offered
2019-10-15 22:05:51 +02:00
Kim Alvefur
668089d57c
mod_saslauth: Use the power of Set Theory to mange sets of SASL mechanisms
...
This makes sets of excluded mechanisms easily available for use later.
2019-10-15 21:58:10 +02:00
Kim Alvefur
a375a34332
mod_saslauth: Log (debug) messages about channel binding
2019-10-15 21:37:19 +02:00
Kim Alvefur
8eb15f32e1
mod_saslauth: Remove useless debug log line
...
Fairly useless to only log half of SASL messages.
Use mod_stanza_debug instead to get the full exchange.
2019-10-13 00:33:35 +02:00
Kim Alvefur
bf566284b1
mod_saslauth: Remove commented-out debug log line
2019-10-13 00:32:58 +02:00
Kim Alvefur
40b1e3e0ed
plugins: Remove tostring call from logging
...
Taken care of by loggingmanager now
Mass-rewrite using lua pattern like `tostring%b()`
2019-07-30 02:29:36 +02:00
Kim Alvefur
f65c017ee1
Fix various spelling mistakes [codespell]
2019-05-03 20:54:24 +02:00
Kim Alvefur
4fd11623dd
mod_saslauth: Improve log message when no SASL mechanisms offered (thanks hexa)
2018-11-24 02:24:48 +01:00
Kim Alvefur
c1157eb0ae
mod_saslauth: Ignore unused argument [luacheck]
2018-02-04 01:05:06 +01:00
Kim Alvefur
e1542aa2ee
mod_saslauth: Use renamed API for hooking non-stanzas
2018-02-04 01:03:44 +01:00
Kim Alvefur
e925f5a34a
mod_saslauth: Pass SASL EXTERNAL failure reason on to be used in error bounces
2018-02-04 01:01:50 +01:00
Kim Alvefur
477f77e250
mod_saslauth: Close connection if no fallback kicks in on SASL EXTERNAL failure
2018-02-04 00:58:38 +01:00
Kim Alvefur
5a07b39c7f
Backed out changeset 89c42aff8510: The problem in ejabberd has reportedly been resolved and this change causes more problems than it solves ( fixes #1006 )
2018-02-04 01:13:27 +01:00
Kim Alvefur
2d4c94e612
mod_saslauth: Log which mechanisms are offered
2017-12-21 10:15:47 +01:00
Kim Alvefur
3e4952567c
mod_saslauth: Remove unused argument [luacheck]
2017-04-01 22:34:15 +02:00
Kim Alvefur
66618bf09c
mod_saslauth: Fix typoed variable name [luacheck]
2017-03-06 16:05:24 +01:00
Kim Alvefur
7e3a83a35b
mod_saslauth: Switch to hook_tag from hook_stanza which was renamed in 2087d42f1e77
2017-03-06 15:56:12 +01:00
Kim Alvefur
962ba79613
Merge 0.9->0.10
2017-03-02 15:21:07 +01:00
Kim Alvefur
d471c7b124
mod_saslauth: Log SASL failure reason
2017-03-02 15:17:32 +01:00
Kim Alvefur
7a2ed1a9ed
mod_saslauth: Ignore shadowing of logger [luacheck]
2017-02-15 23:04:44 +01:00
Kim Alvefur
bb3a3dfe97
mod_saslauth: Improve logging as to why when SASL is not offered
2017-02-15 23:00:03 +01:00
Kim Alvefur
39639a7c38
mod_saslauth: Cache logger in local for less typing
2017-02-15 22:59:19 +01:00
Kim Alvefur
e701756ba9
core.sessionmanager, mod_saslauth: Introduce intermediate session type for authenticated but unbound sessions so that resource binding is not treated as a normal stanza
2016-12-13 18:15:17 +01:00
Kim Alvefur
94c745e8e8
mod_saslauth: Disable DIGEST-MD5 by default ( closes #515 )
2016-03-18 11:51:58 +01:00
Kim Alvefur
8e786f387d
mod_saslauth: Make it easier to support multiple channel binding methonds
2014-11-19 14:45:20 +01:00
Kim Alvefur
2ab66e784a
mod_saslauth: Break out tls-unique channel binding callback so it is instantiated once
2014-11-19 14:44:41 +01:00
Kim Alvefur
b47d9adc40
mod_saslauth: Keep sasl_handler in a local variable
2014-11-19 14:37:45 +01:00
Kim Alvefur
9722fc8c01
mod_saslauth: Better name for config option
2014-10-21 16:41:28 +02:00
Kim Alvefur
1386a2c85d
mod_saslauth: Make it possible to disable certain mechanisms
2014-10-21 14:38:40 +02:00
Kim Alvefur
83b74ac626
mod_saslauth: Add LOGIN to mechanisms not allowed over unencrypted connections as it may be offered by 3rd party authentication plugins
2014-10-21 14:37:05 +02:00
Kim Alvefur
73979a83fd
mod_saslauth: Use a configurable set of mechanisms to not allow over unencrypted connections
2014-10-21 14:35:32 +02:00
Kim Alvefur
371d996a7d
mod_saslauth: Log warning if no SASL mechanisms were offered
2014-10-21 12:57:56 +02:00
Kim Alvefur
bf13e6d88e
mod_saslauth: Use type-specific config option getters
2014-10-21 12:56:19 +02:00
Kim Alvefur
ac43c71ec2
mod_legacyauth, mod_saslauth, mod_tls: Pass require_encryption as default option to s2s_require_encryption so the later overrides the former
2014-10-21 12:49:03 +02:00
Kim Alvefur
6aec6e8425
mod_saslauth: Fix encoding of missing vs empty SASL reply messages
2014-09-23 19:46:29 +02:00
Kim Alvefur
092f833cfc
mod_saslauth: Stricter SASL EXTERNAL handling more in line with XEP-0178
2014-09-23 19:29:14 +02:00
Kim Alvefur
d33c824d1f
mod_dialback, mod_saslauth: Remove broken fallback to dialback on SASL EXTERNAL failure
2014-09-23 14:23:01 +02:00
Kim Alvefur
8003a40b0a
mod_lastactivity, mod_legacyauth, mod_presence, mod_saslauth, mod_tls: Use the newer stanza:get_child APIs and optimize away some table lookups
2014-07-04 22:52:34 +02:00
Kim Alvefur
8c0d996be4
Merge 0.9->0.10
2014-03-25 19:16:38 +01:00
Kim Alvefur
8e115ce876
mod_saslauth: Only do c2s SASL on normal VirtualHosts
2014-03-22 12:41:38 +01:00
Kim Alvefur
4078dc07a2
mod_saslauth: Make sure sasl handler has add_cb_handler ( fixes #392 )
2014-02-12 19:25:15 +01:00
Kim Alvefur
c89ca6cad5
mod_saslauth: Collect data for channel binding only if we know for sure that the stream is encrypted
2013-10-07 12:56:21 +02:00
Kim Alvefur
3d137b760e
Merge Tobias SCRAM-PLUS work
2013-09-22 00:44:20 +02:00
Florian Zeitz
1d833bb807
Remove all trailing whitespace
2013-08-09 17:48:21 +02:00
Matthew Wild
073282787b
mod_saslauth, mod_compression: Fix some cases where open_stream() was not being passed to/from (see df3c78221f26 and issue #338 )
2013-04-29 10:43:44 +01:00
