mreynolds / 389-ds-base

Forked from 389-ds-base 6 years ago
Clone

494e523 Ticket #47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind

Authored and Committed by nhosoi 10 years ago
    Ticket #47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
    
    Description: SASL_CB_PROXY_POLICY callback is not needed since we
    don't support the case authid and authzid do not match.  This patch
    gets rid of the callback function ids_sasl_proxy_policy.
    
    https://fedorahosted.org/389/ticket/47739
    
    Reviewed by nkinder@redhat.com (Thank you, Nathan!!)
    (cherry picked from commit 76acff12a86110d4165f94e2cba13ef5c7ebc38a)
    (cherry picked from commit 9bc2b46b7c7ee4c975d04b041f73a5992906b07c)
    (cherry picked from commit d2063c889feeba122e12f152e2e2c98aed4eb442)
    (cherry picked from commit 614d72196e696395d5bc0a6d62f8be9d4ee41c5b)
    (cherry picked from commit 8a368a62ea22127f95017467a044df57937ed238)
    
        
file modified
+0 -33