mirrors/ldap-upstream
2
0
Fork 0
mirror of https://github.com/netauth/ldap.git synced 2026-11-03 11:43:44 -06:00
Code Issues Packages Projects Releases Wiki Activity
50 commits 1 branch 8 tags 219 KiB
Commit graph

27 commits

Author SHA1 Message Date
Michael Aldridge d74308280b internal/ldap: Reply with the result type a request expects 
An LDAP client only accepts the result that pairs with the request it
sent, and silently ignores anything else. Unrouted operations were
answered with a generic result, which encodes with the wrong tag, so a
search with an unexpected base DN (for example the empty base that
ldapsearch uses when -b is omitted) left the client waiting forever
instead of reporting an error.

Every failure path now terminates the request with the matching result
type, panics included, so a single wrapper covers all operations rather
than one responder per operation. NetAuth calls carry a 30s deadline
because the gRPC client dials lazily and applies none of its own, and
refused operations and failed authentication are logged, which is what
an operator needs when a client appears to hang.

💘 Generated with Crush

Assisted-by: Crush:qwen38_flash_next_mtp
 2026-11-02 19:59:04 -06:00
Michael Aldridge a33df9fd7e Switch to the maintained vjeantet LDAP server fork 2026-11-01 22:17:59 -06:00
Michael Aldridge 7c99ae60e5 internal/ldap: Support AND, OR and substring search filters 2026-11-01 19:44:11 -06:00
Michael Aldridge 0233e68ad7 internal/ldap: Only fetch group membership when it was requested 2026-11-01 19:26:04 -06:00
Michael Aldridge 9a270abbf2 internal/ldap: Validate the domain and make SetDomain repeatable 2026-11-01 19:16:29 -06:00
Michael Aldridge efb4904910 internal/ldap: Quote search values to prevent query injection 2026-11-01 18:55:53 -06:00
Michael Aldridge ca0e2434c7 internal/ldap: Stop reporting success for unmatched bind requests 2026-11-01 18:51:09 -06:00
Michael Aldridge e88df02eff internal/ldap: Require a bind before serving searches 2026-11-01 18:50:00 -06:00
Michael Aldridge fea33d115c internal/ldap: Fix double response on anonymous bind 2026-11-01 18:29:16 -06:00
Michael Aldridge 09fe187bce internal/ldap: Recover from panics in request handlers 2026-11-01 18:06:55 -06:00
Michael Aldridge 7e47e45109 internal/ldap: Fix panic on malformed bind DNs 2026-11-01 18:02:56 -06:00
Michael Aldridge 9cc9e6e986 internal/ldap: Add option to bind anonmyously 2022-08-27 17:35:45 -05:00
Michael Aldridge b8cd3bb4bc internal/ldap: use variadic options 2022-08-27 16:46:54 -05:00
Michael Aldridge 1c964cb732 internal/ldap: Improve support for attribute-present filters 2022-08-27 15:51:03 -05:00
Michael Aldridge 69798ffe7a internal/ldap: Log unsupported search filters 2021-10-16 18:01:02 -05:00
Michael Aldridge 44d8cee507 internal/ldap: Correctly handle multi-valued attributes 2020-11-08 19:33:21 -08:00
Michael Aldridge 1b2e59b9be internal/ldap: Support more LDAP filters 2020-11-08 16:45:07 -08:00
Michael Aldridge c4dd12c378 internal/ldap: Fix search equivalence translation 2020-08-25 18:58:56 -07:00
Michael Aldridge 1c55b7d328 main: Allow serving TLS connections 2020-08-23 19:35:21 -07:00
Michael Aldridge 6d4b4de38a main: Handle initialization and shutdown 2020-08-23 15:31:20 -07:00
Michael Aldridge 3c3d6979bc internal/ldap: Improve search debugging 2020-08-23 15:11:14 -07:00
Michael Aldridge 5789f11056 internal/ldap: Synchronize path 2020-08-23 00:52:38 -07:00
Michael Aldridge 792f53e2da internal/ldap: Implement search for groups 2020-08-23 00:50:43 -07:00
Michael Aldridge 2cf2849cea internal/ldap: Implement search for entities 2020-08-23 00:17:03 -07:00
Michael Aldridge 2b8ce28a83 internal/ldap: Remove unused search function 2020-08-22 20:50:38 -07:00
Michael Aldridge 83e78da739 internal/ldap: Handle bind 2020-08-22 20:49:54 -07:00
Michael Aldridge b3783dffb5 internal/ldap: Initial boilerplate 2020-08-21 00:03:53 -07:00