diff options
| author | Greg Hudson <ghudson@mit.edu> | 2014-06-16 12:41:03 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2014-07-19 16:34:57 -0400 |
| commit | e94082d8c923cff454c1bc53b377ba394a3cec3c (patch) | |
| tree | 48d699005c206e08cc0a7b5d66411923b1ad02a7 /src/include | |
| parent | 89b3b6b80d4812722e8d3b02e2134ccf5d1360c2 (diff) | |
| download | krb5-e94082d8c923cff454c1bc53b377ba394a3cec3c.zip krb5-e94082d8c923cff454c1bc53b377ba394a3cec3c.tar.gz krb5-e94082d8c923cff454c1bc53b377ba394a3cec3c.tar.bz2 | |
Add SASL support to LDAP KDB module
Add variables for the SASL mechanism, authcid, authzid, and realm. If
a SASL mechanism is set, perform an interactive bind with that
mechanism. If <sasl/sasl.h> is found at build time, provide the
authcid, authzid, and realm in the interaction function, and provide a
SASL secret read from the service password file (under the authcid) if
we found one.
Based on a patch from Zoran Pericic <zpericic@netst.org>.
ticket: 7944 (new)
Diffstat (limited to 'src/include')
| -rw-r--r-- | src/include/k5-int.h | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/include/k5-int.h b/src/include/k5-int.h index 38846eb..d9cb5a4 100644 --- a/src/include/k5-int.h +++ b/src/include/k5-int.h @@ -239,7 +239,15 @@ typedef unsigned char u_char; #define KRB5_CONF_KRB524_SERVER "krb524_server" #define KRB5_CONF_LDAP_CONNS_PER_SERVER "ldap_conns_per_server" #define KRB5_CONF_LDAP_KADMIND_DN "ldap_kadmind_dn" +#define KRB5_CONF_LDAP_KADMIND_SASL_AUTHCID "ldap_kadmind_sasl_authcid" +#define KRB5_CONF_LDAP_KADMIND_SASL_AUTHZID "ldap_kadmind_sasl_authzid" +#define KRB5_CONF_LDAP_KADMIND_SASL_MECH "ldap_kadmind_sasl_mech" +#define KRB5_CONF_LDAP_KADMIND_SASL_REALM "ldap_kadmind_sasl_realm" #define KRB5_CONF_LDAP_KDC_DN "ldap_kdc_dn" +#define KRB5_CONF_LDAP_KDC_SASL_AUTHCID "ldap_kdc_sasl_authcid" +#define KRB5_CONF_LDAP_KDC_SASL_AUTHZID "ldap_kdc_sasl_authzid" +#define KRB5_CONF_LDAP_KDC_SASL_MECH "ldap_kdc_sasl_mech" +#define KRB5_CONF_LDAP_KDC_SASL_REALM "ldap_kdc_sasl_realm" #define KRB5_CONF_LDAP_KERBEROS_CONTAINER_DN "ldap_kerberos_container_dn" #define KRB5_CONF_LDAP_SERVERS "ldap_servers" #define KRB5_CONF_LDAP_SERVICE_PASSWORD_FILE "ldap_service_password_file" |