Kim Alvefur
f1550b900d
mod_saslauth: Use a defined SASL error
2021-03-18 16:16:54 +01:00
Kim Alvefur
139cafdbaf
mod_saslauth: Improve code style
...
This many returns deserve their own line.
`session["sasl_handler"]` style isn't used anywhere else.
2021-03-18 16:17:45 +01:00
tmolitor
a7cc31c6bb
mod_saslauth: Don't throw errors in async code when connections are gone
...
Fixes #1515
2021-03-18 14:30:47 +01:00
Kim Alvefur
15b64ea4ff
mod_saslauth: Only advertise channel binding if a finished message is available
...
In some cases this method returns nothing, unclear why.
2020-11-23 21:52:46 +01:00
Kim Alvefur
b62216fab3
mod_saslauth: Disable 'tls-unique' channel binding with TLS 1.3 ( closes #1542 )
...
The 'tls-unique' channel binding is undefined in TLS 1.3 according to a
single sentence in parenthesis in Apendix C of RFC 8446
This may trigger downgrade protection in clients that were expecting
channel binding to be available.
2020-11-23 21:42:52 +01:00
Kim Alvefur
c1157eb0ae
mod_saslauth: Ignore unused argument [luacheck]
2018-02-04 01:05:06 +01:00
Kim Alvefur
e1542aa2ee
mod_saslauth: Use renamed API for hooking non-stanzas
2018-02-04 01:03:44 +01:00
Kim Alvefur
e925f5a34a
mod_saslauth: Pass SASL EXTERNAL failure reason on to be used in error bounces
2018-02-04 01:01:50 +01:00
Kim Alvefur
477f77e250
mod_saslauth: Close connection if no fallback kicks in on SASL EXTERNAL failure
2018-02-04 00:58:38 +01:00
Kim Alvefur
5a07b39c7f
Backed out changeset 89c42aff8510: The problem in ejabberd has reportedly been resolved and this change causes more problems than it solves ( fixes #1006 )
2018-02-04 01:13:27 +01:00
Kim Alvefur
2d4c94e612
mod_saslauth: Log which mechanisms are offered
2017-12-21 10:15:47 +01:00
Kim Alvefur
3e4952567c
mod_saslauth: Remove unused argument [luacheck]
2017-04-01 22:34:15 +02:00
Kim Alvefur
66618bf09c
mod_saslauth: Fix typoed variable name [luacheck]
2017-03-06 16:05:24 +01:00
Kim Alvefur
7e3a83a35b
mod_saslauth: Switch to hook_tag from hook_stanza which was renamed in 2087d42f1e77
2017-03-06 15:56:12 +01:00
Kim Alvefur
962ba79613
Merge 0.9->0.10
2017-03-02 15:21:07 +01:00
Kim Alvefur
d471c7b124
mod_saslauth: Log SASL failure reason
2017-03-02 15:17:32 +01:00
Kim Alvefur
7a2ed1a9ed
mod_saslauth: Ignore shadowing of logger [luacheck]
2017-02-15 23:04:44 +01:00
Kim Alvefur
bb3a3dfe97
mod_saslauth: Improve logging as to why when SASL is not offered
2017-02-15 23:00:03 +01:00
Kim Alvefur
39639a7c38
mod_saslauth: Cache logger in local for less typing
2017-02-15 22:59:19 +01:00
Kim Alvefur
e701756ba9
core.sessionmanager, mod_saslauth: Introduce intermediate session type for authenticated but unbound sessions so that resource binding is not treated as a normal stanza
2016-12-13 18:15:17 +01:00
Kim Alvefur
94c745e8e8
mod_saslauth: Disable DIGEST-MD5 by default ( closes #515 )
2016-03-18 11:51:58 +01:00
Kim Alvefur
8e786f387d
mod_saslauth: Make it easier to support multiple channel binding methonds
2014-11-19 14:45:20 +01:00
Kim Alvefur
2ab66e784a
mod_saslauth: Break out tls-unique channel binding callback so it is instantiated once
2014-11-19 14:44:41 +01:00
Kim Alvefur
b47d9adc40
mod_saslauth: Keep sasl_handler in a local variable
2014-11-19 14:37:45 +01:00
Kim Alvefur
9722fc8c01
mod_saslauth: Better name for config option
2014-10-21 16:41:28 +02:00
Kim Alvefur
1386a2c85d
mod_saslauth: Make it possible to disable certain mechanisms
2014-10-21 14:38:40 +02:00
Kim Alvefur
83b74ac626
mod_saslauth: Add LOGIN to mechanisms not allowed over unencrypted connections as it may be offered by 3rd party authentication plugins
2014-10-21 14:37:05 +02:00
Kim Alvefur
73979a83fd
mod_saslauth: Use a configurable set of mechanisms to not allow over unencrypted connections
2014-10-21 14:35:32 +02:00
Kim Alvefur
371d996a7d
mod_saslauth: Log warning if no SASL mechanisms were offered
2014-10-21 12:57:56 +02:00
Kim Alvefur
bf13e6d88e
mod_saslauth: Use type-specific config option getters
2014-10-21 12:56:19 +02:00
Kim Alvefur
ac43c71ec2
mod_legacyauth, mod_saslauth, mod_tls: Pass require_encryption as default option to s2s_require_encryption so the later overrides the former
2014-10-21 12:49:03 +02:00
Kim Alvefur
6aec6e8425
mod_saslauth: Fix encoding of missing vs empty SASL reply messages
2014-09-23 19:46:29 +02:00
Kim Alvefur
092f833cfc
mod_saslauth: Stricter SASL EXTERNAL handling more in line with XEP-0178
2014-09-23 19:29:14 +02:00
Kim Alvefur
d33c824d1f
mod_dialback, mod_saslauth: Remove broken fallback to dialback on SASL EXTERNAL failure
2014-09-23 14:23:01 +02:00
Kim Alvefur
8003a40b0a
mod_lastactivity, mod_legacyauth, mod_presence, mod_saslauth, mod_tls: Use the newer stanza:get_child APIs and optimize away some table lookups
2014-07-04 22:52:34 +02:00
Kim Alvefur
8c0d996be4
Merge 0.9->0.10
2014-03-25 19:16:38 +01:00
Kim Alvefur
8e115ce876
mod_saslauth: Only do c2s SASL on normal VirtualHosts
2014-03-22 12:41:38 +01:00
Kim Alvefur
4078dc07a2
mod_saslauth: Make sure sasl handler has add_cb_handler ( fixes #392 )
2014-02-12 19:25:15 +01:00
Kim Alvefur
c89ca6cad5
mod_saslauth: Collect data for channel binding only if we know for sure that the stream is encrypted
2013-10-07 12:56:21 +02:00
Kim Alvefur
3d137b760e
Merge Tobias SCRAM-PLUS work
2013-09-22 00:44:20 +02:00
Florian Zeitz
1d833bb807
Remove all trailing whitespace
2013-08-09 17:48:21 +02:00
Matthew Wild
073282787b
mod_saslauth, mod_compression: Fix some cases where open_stream() was not being passed to/from (see df3c78221f26 and issue #338 )
2013-04-29 10:43:44 +01:00
Matthew Wild
339e74b1b9
s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event
2013-03-22 14:18:23 +00:00
Kim Alvefur
ee9ef878c4
mod_s2s, mod_saslauth, mod_compression: Refactor to have common code for opening streams
2013-03-16 17:46:43 +01:00
Matthew Wild
02dc79e546
mod_saslauth: Pass session to usermanager.get_sasl_handler()
2012-07-04 23:44:13 +01:00
Matthew Wild
ddf88f4b38
mod_saslauth: Remove unused declaration of xmlns_stanzas
2012-04-28 03:05:35 +01:00
Kim Alvefur
621f44b146
mod_saslauth: Remove useless import of, and call to nodeprep.
2012-02-12 15:14:35 +01:00
Kim Alvefur
807c896ee6
mod_saslauth: Fire authentication-failure if make_authenticated() failed.
2012-02-12 15:08:12 +01:00
Kim Alvefur
6eaa0d2b86
mod_saslauth: Move authentication-success event to after session has been made authenticated.
2012-02-12 15:05:31 +01:00
Paul Aurich
03efdf7669
mod_saslauth: "" ~= nil (thanks, Zash!)
2012-01-24 14:57:53 -08:00
