9 Commits

Author	SHA1	Message	Date
Stefan Metzmacher	29b77a34aa	s3:tldap: add support for [START]TLS ... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-23 23:50:34 +00:00
Stefan Metzmacher	3798dc7aea	s3:tldap: make tldap_gensec_bind_send/recv public ... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-23 23:50:34 +00:00
Stefan Metzmacher	557de8f39e	s3:tldap: store plain and gensec tstream ... Also allow resetting to plain. We now have ld->active as the currently active tstream, which will allow us to add tls support soon. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-23 23:50:34 +00:00
Stefan Metzmacher	3bf3d4d855	s3:tldap: let tldap_gensec_bind_send/recv use gensec_update_send/recv ... We should not use the sync gensec_update() in async code! Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-23 23:50:34 +00:00
Stefan Metzmacher	4b22fa0153	s3:tldap: don't use 'supportedSASLMechanisms' and force 'GSS-SPNEGO' instead ... All active directory dcs support 'GSS-SPNEGO'. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-23 23:50:34 +00:00
Stefan Metzmacher	8c5b522682	s3:tldap: simplify tldap_gensec_bind.h ... We don't need any includes... Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2024-04-23 23:50:34 +00:00
Jeremy Allison	6318615a63	s3: tldap: Make tldap_gensec_bind_send()/tldap_gensec_bind_recv() static. ... Only expose a synchronous tldap_gensec_bind() call, as it can't really be async anyway. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Tue Jun 28 11:19:33 CEST 2016 on sn-devel-144	2016-06-28 11:19:33 +02:00
Jeremy Allison	48569065c8	s3: tldap: Remove asynchronous calls to gensec_update_send()/_recv() as for the spnego backend they're synchronous anyway. ... This should prevent nested event loops, and won't make the code performance worse anyway. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>	2016-06-28 07:27:18 +02:00
Volker Lendecke	d5e77a81da	tldap: Add tldap_gensec_bind ... This enables sasl sign/sealed connections via tldap Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>	2016-04-15 15:32:11 +02:00