8a368a6 Ticket #47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind

Authored and Committed by nhosoi 5 years ago
    Ticket #47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
    
    Description: SASL_CB_PROXY_POLICY callback is not needed since we
    don't support the case authid and authzid do not match.  This patch
    gets rid of the callback function ids_sasl_proxy_policy.
    
    https://fedorahosted.org/389/ticket/47739
    
    Reviewed by nkinder@redhat.com (Thank you, Nathan!!)
    (cherry picked from commit 76acff12a86110d4165f94e2cba13ef5c7ebc38a)
    (cherry picked from commit 9bc2b46b7c7ee4c975d04b041f73a5992906b07c)
    (cherry picked from commit d2063c889feeba122e12f152e2e2c98aed4eb442)
    (cherry picked from commit 614d72196e696395d5bc0a6d62f8be9d4ee41c5b)
    
        
file modified
+0 -33