Commit Graph

172 Commits (cedbb60261a7debbc7e2ebc2fbfcc88025ca58b7)

Author SHA1 Message Date
Kim Alvefur e56d4ee7d7 mod_saslauth: Only do c2s SASL on normal VirtualHosts 12 years ago
Kim Alvefur 47389e6d48 mod_saslauth: Make it easier to support multiple channel binding methonds 11 years ago
Kim Alvefur 1f45df5a0b mod_saslauth: Break out tls-unique channel binding callback so it is instantiated once 11 years ago
Kim Alvefur 1b91a0bea9 mod_saslauth: Keep sasl_handler in a local variable 11 years ago
Kim Alvefur a0d0ea03e1 mod_saslauth: Better name for config option 11 years ago
Kim Alvefur 4311fcb52b mod_saslauth: Make it possible to disable certain mechanisms 11 years ago
Kim Alvefur 6376aa6d6f mod_saslauth: Add LOGIN to mechanisms not allowed over unencrypted connections as it may be offered by 3rd party authentication plugins 11 years ago
Kim Alvefur ff80cb0e82 mod_saslauth: Use a configurable set of mechanisms to not allow over unencrypted connections 11 years ago
Kim Alvefur 00cb511e2e mod_saslauth: Log warning if no SASL mechanisms were offered 11 years ago
Kim Alvefur 82f50a2122 mod_saslauth: Use type-specific config option getters 11 years ago
Kim Alvefur fbd277b5c8 mod_legacyauth, mod_saslauth, mod_tls: Pass require_encryption as default option to s2s_require_encryption so the later overrides the former 11 years ago
Kim Alvefur 3e8095f150 mod_saslauth: Fix encoding of missing vs empty SASL reply messages 11 years ago
Kim Alvefur 1e623068a5 mod_saslauth: Stricter SASL EXTERNAL handling more in line with XEP-0178 11 years ago
Kim Alvefur 9f3cbaeefa mod_dialback, mod_saslauth: Remove broken fallback to dialback on SASL EXTERNAL failure 11 years ago
Kim Alvefur f56c435f18 mod_lastactivity, mod_legacyauth, mod_presence, mod_saslauth, mod_tls: Use the newer stanza:get_child APIs and optimize away some table lookups 12 years ago
Kim Alvefur 528a8215a5 mod_saslauth: Make sure sasl handler has add_cb_handler (fixes #392) 12 years ago
Kim Alvefur 913e2225b5 mod_saslauth: Collect data for channel binding only if we know for sure that the stream is encrypted 12 years ago
Florian Zeitz 4b618a8727 Remove all trailing whitespace 13 years ago
Matthew Wild 1bc6b89299 mod_saslauth, mod_compression: Fix some cases where open_stream() was not being passed to/from (see df3c78221f26 and issue #338) 13 years ago
Matthew Wild f068e80993 s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event 13 years ago
Kim Alvefur 04b647a6e8 mod_s2s, mod_saslauth, mod_compression: Refactor to have common code for opening streams 13 years ago
Matthew Wild 2429531070 mod_saslauth: Pass session to usermanager.get_sasl_handler() 14 years ago
Matthew Wild dac1c0e9d3 mod_saslauth: Remove unused declaration of xmlns_stanzas 14 years ago
Kim Alvefur bf9e4a5cab mod_saslauth: Remove useless import of, and call to nodeprep. 14 years ago
Kim Alvefur 1df83a1632 mod_saslauth: Fire authentication-failure if make_authenticated() failed. 14 years ago
Kim Alvefur f672faa016 mod_saslauth: Move authentication-success event to after session has been made authenticated. 14 years ago
Paul Aurich ce7b4401a5 mod_saslauth: "" ~= nil (thanks, Zash!) 14 years ago
Waqas Hussain f0a3554f80 mod_saslauth: Never send empty <mechanisms/>, for real this time. 14 years ago
Waqas Hussain 8e3a23d8fd mod_saslauth: Never send empty <mechanisms/>. 14 years ago
Matthew Wild b17dbe08c5 mod_saslauth: Fire authentication-success and authentication-failure events (thanks scitor) 15 years ago
Tobias Markmann d07446041f mod_saslauth: Check whether LuaSec supports getpeerfinished() binding. 15 years ago
Tobias Markmann a1c646ad48 mod_saslauth: Add channel binding handler for tls-unique channel binding. 15 years ago
Tobias Markmann 3dc5c26703 mod_saslauth: Set secure socket as SASL object user data for secure sessions. 15 years ago
Waqas Hussain 1a6f60183c mod_saslauth: Remove special handling for SASL ANONYMOUS, and let mod_auth_anonymous handle it. 15 years ago
Waqas Hussain aa144af70e util.sasl.*, mod_auth_*, mod_saslauth: Pass SASL handler as first parameter to SASL profile callbacks. 15 years ago
Matthew Wild e9fff01f56 mod_saslauth: Handle session bind requests to the host, fixes OneTeam login 15 years ago
Kim Alvefur 49298b499e core.s2smanager, mod_console, mod_saslauth, util.certverification: rename util.certverification to util.x509 15 years ago
Waqas Hussain 55d5f1ffe3 mod_saslauth: Remove special handling for SASL ANONYMOUS, and let mod_auth_anonymous handle it. 15 years ago
Waqas Hussain 1865c2454b util.sasl.*, mod_auth_*, mod_saslauth: Pass SASL handler as first parameter to SASL profile callbacks. 15 years ago
Matthew Wild 819fefe58e mod_saslauth: Handle session bind requests to the host, fixes OneTeam login 15 years ago
Paul Aurich ef8bc026b4 s2s: SASL EXTERNAL 15 years ago
Waqas Hussain 5f992383c5 mod_saslauth: Allow restarting SASL negotiation from scratch. 15 years ago
Waqas Hussain f5e1cfc3b6 mod_saslauth: Separated processing of <auth/> and <response/> elements, and return proper error on out-of-order <response/> elements. 15 years ago
Waqas Hussain 3b185b580e mod_saslauth: Moved SASL mechanism selection and CDATA handling into separate functions. 15 years ago
Waqas Hussain 42756c02be mod_saslauth: Handle SASL <abort/> properly. 15 years ago
Waqas Hussain 747e485a9d mod_saslauth: Updated to use the new events API. 15 years ago
Waqas Hussain 159b5aed6f mod_saslauth: Improved logging a bit. 15 years ago
Waqas Hussain 2e66b95ef0 mod_saslauth: Updated to use the new events API. 15 years ago
Waqas Hussain 373662e4a6 mod_saslauth, mod_auth_cyrus, util.sasl_cyrus: Moved cyrus account provisioning check out of mod_saslauth. 16 years ago
Waqas Hussain 5207cd874e mod_saslauth: Get rid of the sasl_backend option (use auth modules instead). 16 years ago