Matthew Wild
6839acc859
mod_saslauth: Pass through any auth scope from the SASL handler to sessionmanager.make_authenticated()
6 years ago
Kim Alvefur
65316d3d5a
mod_saslauth: Set a nicer bounce error explaining SASL EXTERNAL failures
...
Better than the previous string concatenation of SASL failure condition
and optional text sent by the remote server.
Would be nice to have a text per condition, other than the probably most
common 'not-authorized'.
7 years ago
Kim Alvefur
0ec577b5df
mod_saslauth: Collect SASL EXTERNAL failures into an util.error object
...
Will be easier than that concatenated string to extract info out of for
use elsewhere.
7 years ago
Kim Alvefur
947c10c689
mod_saslauth: Advertise correct set of mechanisms
...
Mistakenly iterates over the set of all supported mechanisms instead of
the one without insecure mechanisms if the connection is insecure.
Not a problem if c2s_require_encryption is true
Introduced in 56a0f68b7797
7 years ago
Kim Alvefur
7dbc2e2ac3
mod_saslauth: Demote "no SASL mechanisms" error back to warning
...
This gets printed before TLS if c2s_require_encryption = false,
in which case it is just annoying.
7 years ago
Kim Alvefur
6ebae609ca
mod_saslauth: Improve logging of why no SASL mechanisms were offered
7 years ago
Kim Alvefur
2177adab44
mod_saslauth: Use the power of Set Theory to mange sets of SASL mechanisms
...
This makes sets of excluded mechanisms easily available for use later.
7 years ago
Kim Alvefur
96b4d467b9
mod_saslauth: Log (debug) messages about channel binding
7 years ago
Kim Alvefur
354ad54edb
mod_saslauth: Remove useless debug log line
...
Fairly useless to only log half of SASL messages.
Use mod_stanza_debug instead to get the full exchange.
7 years ago
Kim Alvefur
d3b17f865b
mod_saslauth: Remove commented-out debug log line
7 years ago
Kim Alvefur
690c6a4eb2
Fix various spelling mistakes [codespell]
7 years ago
Kim Alvefur
2b8caf8dac
plugins: Remove tostring call from logging
...
Taken care of by loggingmanager now
Mass-rewrite using lua pattern like `tostring%b()`
7 years ago
Kim Alvefur
b3a712fa24
mod_saslauth: Use correct varible name (thanks Roi)
9 years ago
Kim Alvefur
aaa7b42c76
mod_saslauth: Ignore unused argument [luacheck]
8 years ago
Kim Alvefur
1d0cbb646d
mod_saslauth: Use renamed API for hooking non-stanzas
8 years ago
Kim Alvefur
e00503705b
mod_saslauth: Pass SASL EXTERNAL failure reason on to be used in error bounces
8 years ago
Kim Alvefur
0e96df7410
mod_saslauth: Close connection if no fallback kicks in on SASL EXTERNAL failure
8 years ago
Kim Alvefur
9c40b0ab8c
Backed out changeset 89c42aff8510: The problem in ejabberd has reportedly been resolved and this change causes more problems than it solves ( fixes #1006 )
8 years ago
Kim Alvefur
0611c96a56
mod_saslauth: Log which mechanisms are offered
9 years ago
Kim Alvefur
ac4e9ca0cc
mod_saslauth: Remove unused argument [luacheck]
9 years ago
Kim Alvefur
69990587c9
mod_saslauth: Fix typoed variable name [luacheck]
9 years ago
Kim Alvefur
0b66f61fac
mod_saslauth: Switch to hook_tag from hook_stanza which was renamed in 2087d42f1e77
9 years ago
Kim Alvefur
f872ab6695
mod_saslauth: Log SASL failure reason
9 years ago
Kim Alvefur
7d79421b6e
mod_saslauth: Ignore shadowing of logger [luacheck]
9 years ago
Kim Alvefur
bb3cc61b4f
mod_saslauth: Improve logging as to why when SASL is not offered
9 years ago
Kim Alvefur
d6cc41b9ec
mod_saslauth: Cache logger in local for less typing
9 years ago
Kim Alvefur
57db768fd0
core.sessionmanager, mod_saslauth: Introduce intermediate session type for authenticated but unbound sessions so that resource binding is not treated as a normal stanza
10 years ago
Kim Alvefur
a71449a91b
mod_saslauth: Disable DIGEST-MD5 by default ( closes #515 )
10 years ago
Kim Alvefur
47389e6d48
mod_saslauth: Make it easier to support multiple channel binding methonds
12 years ago
Kim Alvefur
1f45df5a0b
mod_saslauth: Break out tls-unique channel binding callback so it is instantiated once
12 years ago
Kim Alvefur
1b91a0bea9
mod_saslauth: Keep sasl_handler in a local variable
12 years ago
Kim Alvefur
a0d0ea03e1
mod_saslauth: Better name for config option
12 years ago
Kim Alvefur
4311fcb52b
mod_saslauth: Make it possible to disable certain mechanisms
12 years ago
Kim Alvefur
6376aa6d6f
mod_saslauth: Add LOGIN to mechanisms not allowed over unencrypted connections as it may be offered by 3rd party authentication plugins
12 years ago
Kim Alvefur
ff80cb0e82
mod_saslauth: Use a configurable set of mechanisms to not allow over unencrypted connections
12 years ago
Kim Alvefur
00cb511e2e
mod_saslauth: Log warning if no SASL mechanisms were offered
12 years ago
Kim Alvefur
82f50a2122
mod_saslauth: Use type-specific config option getters
12 years ago
Kim Alvefur
fbd277b5c8
mod_legacyauth, mod_saslauth, mod_tls: Pass require_encryption as default option to s2s_require_encryption so the later overrides the former
12 years ago
Kim Alvefur
3e8095f150
mod_saslauth: Fix encoding of missing vs empty SASL reply messages
12 years ago
Kim Alvefur
1e623068a5
mod_saslauth: Stricter SASL EXTERNAL handling more in line with XEP-0178
12 years ago
Kim Alvefur
9f3cbaeefa
mod_dialback, mod_saslauth: Remove broken fallback to dialback on SASL EXTERNAL failure
12 years ago
Kim Alvefur
f56c435f18
mod_lastactivity, mod_legacyauth, mod_presence, mod_saslauth, mod_tls: Use the newer stanza:get_child APIs and optimize away some table lookups
12 years ago
Kim Alvefur
e56d4ee7d7
mod_saslauth: Only do c2s SASL on normal VirtualHosts
12 years ago
Kim Alvefur
528a8215a5
mod_saslauth: Make sure sasl handler has add_cb_handler ( fixes #392 )
12 years ago
Kim Alvefur
913e2225b5
mod_saslauth: Collect data for channel binding only if we know for sure that the stream is encrypted
13 years ago
Florian Zeitz
4b618a8727
Remove all trailing whitespace
13 years ago
Matthew Wild
1bc6b89299
mod_saslauth, mod_compression: Fix some cases where open_stream() was not being passed to/from (see df3c78221f26 and issue #338 )
13 years ago
Matthew Wild
f068e80993
s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event
13 years ago
Kim Alvefur
04b647a6e8
mod_s2s, mod_saslauth, mod_compression: Refactor to have common code for opening streams
13 years ago
Kim Alvefur
f8bc921747
mod_saslauth: Improve log message when no SASL mechanisms offered (thanks hexa)
8 years ago