Commit graph

15 commits

Author SHA1 Message Date
Michael Aldridge d74308280b internal/ldap: Reply with the result type a request expects
An LDAP client only accepts the result that pairs with the request it
sent, and silently ignores anything else. Unrouted operations were
answered with a generic result, which encodes with the wrong tag, so a
search with an unexpected base DN (for example the empty base that
ldapsearch uses when -b is omitted) left the client waiting forever
instead of reporting an error.

Every failure path now terminates the request with the matching result
type, panics included, so a single wrapper covers all operations rather
than one responder per operation. NetAuth calls carry a 30s deadline
because the gRPC client dials lazily and applies none of its own, and
refused operations and failed authentication are logged, which is what
an operator needs when a client appears to hang.

💘 Generated with Crush

Assisted-by: Crush:qwen38_flash_next_mtp
2026-11-02 19:59:04 -06:00
Michael Aldridge a33df9fd7e Switch to the maintained vjeantet LDAP server fork 2026-11-01 22:17:59 -06:00
Michael Aldridge 0233e68ad7 internal/ldap: Only fetch group membership when it was requested 2026-11-01 19:26:04 -06:00
Michael Aldridge e88df02eff internal/ldap: Require a bind before serving searches 2026-11-01 18:50:00 -06:00
Michael Aldridge 69798ffe7a internal/ldap: Log unsupported search filters 2021-10-16 18:01:02 -05:00
Michael Aldridge 44d8cee507 internal/ldap: Correctly handle multi-valued attributes 2020-11-08 19:33:21 -08:00
Michael Aldridge 1b2e59b9be internal/ldap: Support more LDAP filters 2020-11-08 16:45:07 -08:00
Michael Aldridge c4dd12c378 internal/ldap: Fix search equivalence translation 2020-08-25 18:58:56 -07:00
Michael Aldridge 1c55b7d328 main: Allow serving TLS connections 2020-08-23 19:35:21 -07:00
Michael Aldridge 3c3d6979bc internal/ldap: Improve search debugging 2020-08-23 15:11:14 -07:00
Michael Aldridge 792f53e2da internal/ldap: Implement search for groups 2020-08-23 00:50:43 -07:00
Michael Aldridge 2cf2849cea internal/ldap: Implement search for entities 2020-08-23 00:17:03 -07:00
Michael Aldridge 2b8ce28a83 internal/ldap: Remove unused search function 2020-08-22 20:50:38 -07:00
Michael Aldridge 83e78da739 internal/ldap: Handle bind 2020-08-22 20:49:54 -07:00
Michael Aldridge b3783dffb5 internal/ldap: Initial boilerplate 2020-08-21 00:03:53 -07:00