| Wed, 17 Apr 2024 16:47:38 +0100 |
Matthew Wild |
mod_saslauth: Log when tls-exporter is NOT supported, as well as when it is
|
file |
diff |
annotate
|
| Tue, 05 Dec 2023 11:39:11 +0000 |
Matthew Wild |
mod_saslauth: Fire event per SASL step
|
file |
diff |
annotate
|
| Fri, 01 Dec 2023 23:43:18 +0100 |
Kim Alvefur |
mod_saslauth: Fire event at start of authentication attempt
|
file |
diff |
annotate
|
| Thu, 30 Nov 2023 11:22:40 +0000 |
Matthew Wild |
mod_saslauth: Allow plugins to override return SASL condition/text
|
file |
diff |
annotate
|
| Thu, 26 Oct 2023 18:30:47 +0100 |
Matthew Wild |
mod_saslauth: Clear 'auto' from endpoint hash var, it's not a real hash (thanks tmolitor)
|
file |
diff |
annotate
|
| Thu, 26 Oct 2023 15:14:39 +0100 |
Matthew Wild |
mod_saslauth, mod_c2s: Disable tls-server-end-point channel binding by default
|
file |
diff |
annotate
|
| Thu, 26 Oct 2023 14:40:48 +0100 |
Matthew Wild |
mod_saslauth: Fix traceback in tls-server-end-point channel binding
|
file |
diff |
annotate
|
| Tue, 24 Oct 2023 09:24:01 +0100 |
Matthew Wild |
mod_saslauth: Actively close cert file after reading
|
file |
diff |
annotate
|
| Tue, 24 Oct 2023 09:23:31 +0100 |
Matthew Wild |
mod_saslauth: Fix read format string (thanks tmolitor)
|
file |
diff |
annotate
|
| Sun, 23 Oct 2022 02:49:05 +0200 |
Kim Alvefur |
mod_saslauth: Get correct 'tls-server-end-point' with new LuaSec API
|
file |
diff |
annotate
|
| Tue, 29 Jun 2021 00:22:36 +0200 |
Kim Alvefur |
mod_saslauth: Derive hash from certificate per tls-server-end-point
|
file |
diff |
annotate
|
| Mon, 07 Dec 2020 19:53:26 +0100 |
Kim Alvefur |
mod_saslauth: Support tls-server-end-point via manually specified hash
|
file |
diff |
annotate
|
| Fri, 24 Mar 2023 13:15:28 +0100 |
Kim Alvefur |
plugins: Prefix module imports with prosody namespace
|
file |
diff |
annotate
|
| Wed, 01 Mar 2023 12:56:08 +0000 |
Matthew Wild |
mod_saslauth: Support for SASL handlers forcing a specific resource
|
file |
diff |
annotate
|
| Wed, 21 Sep 2022 15:00:06 +0100 |
Matthew Wild |
mod_saslauth: Put <sasl-channel-binding> in stream:features per XEP-0440 0.4.0
|
file |
diff |
annotate
|
| Sat, 03 Sep 2022 21:25:51 +0100 |
Matthew Wild |
mod_saslauth: Fix incorrect variable name introduced in 27a4a7e64831
|
file |
diff |
annotate
|
| Sat, 03 Sep 2022 21:19:00 +0100 |
Matthew Wild |
mod_saslauth: Only announce bind feature if no resource yet bound
|
file |
diff |
annotate
|
| Wed, 15 Jun 2022 11:47:39 +0100 |
Matthew Wild |
mod_saslauth: Rename field from 'scope'->'role'
|
file |
diff |
annotate
|
| Wed, 01 Jun 2022 15:06:59 +0200 |
Kim Alvefur |
mod_saslauth: Implement RFC 9266 'tls-exporter' channel binding (#1760)
|
file |
diff |
annotate
|
| Sun, 06 Dec 2020 22:04:43 +0100 |
Kim Alvefur |
mod_saslauth: Advertise channel bindings via XEP-0440
|
file |
diff |
annotate
|
| Wed, 27 Apr 2022 17:44:14 +0200 |
Jonas Schäfer |
net: isolate LuaSec-specifics
|
file |
diff |
annotate
|
| Thu, 10 Feb 2022 19:54:14 +0000 |
Matthew Wild |
usermanager, mod_saslauth: Default to internal_hashed if no auth module specified
|
file |
diff |
annotate
|
| Sat, 25 Dec 2021 16:23:40 +0100 |
Kim Alvefur |
various: Require encryption by default for real
|
file |
diff |
annotate
|
| Wed, 21 Apr 2021 17:11:58 +0200 |
Jonas Schäfer |
s2s et al.: Add counters for connection state transitions
|
file |
diff |
annotate
|
| Sat, 10 Apr 2021 16:45:44 +0200 |
Kim Alvefur |
Merge 0.11->trunk
|
file |
diff |
annotate
|
| Thu, 18 Mar 2021 16:16:54 +0100 |
Kim Alvefur |
mod_saslauth: Use a defined SASL error
0.11
|
file |
diff |
annotate
|
| Thu, 18 Mar 2021 16:17:45 +0100 |
Kim Alvefur |
mod_saslauth: Improve code style
0.11
|
file |
diff |
annotate
|
| Thu, 18 Mar 2021 14:30:47 +0100 |
tmolitor |
mod_saslauth: Don't throw errors in async code when connections are gone
0.11
|
file |
diff |
annotate
|
| Mon, 23 Nov 2020 21:56:26 +0100 |
Kim Alvefur |
Merge 0.11->trunk
|
file |
diff |
annotate
|
| Mon, 23 Nov 2020 21:52:46 +0100 |
Kim Alvefur |
mod_saslauth: Only advertise channel binding if a finished message is available
0.11
|
file |
diff |
annotate
|
| Mon, 23 Nov 2020 21:42:52 +0100 |
Kim Alvefur |
mod_saslauth: Disable 'tls-unique' channel binding with TLS 1.3 (closes #1542)
0.11
|
file |
diff |
annotate
|
| Wed, 05 Feb 2020 17:56:44 +0000 |
Matthew Wild |
mod_saslauth: Pass through any auth scope from the SASL handler to sessionmanager.make_authenticated()
|
file |
diff |
annotate
|
| Sat, 07 Dec 2019 22:55:51 +0100 |
Kim Alvefur |
mod_saslauth: Set a nicer bounce error explaining SASL EXTERNAL failures
|
file |
diff |
annotate
|
| Sat, 07 Dec 2019 22:51:43 +0100 |
Kim Alvefur |
mod_saslauth: Collect SASL EXTERNAL failures into an util.error object
|
file |
diff |
annotate
|
| Mon, 02 Dec 2019 16:00:16 +0100 |
Kim Alvefur |
mod_saslauth: Advertise correct set of mechanisms
|
file |
diff |
annotate
|
| Tue, 15 Oct 2019 23:38:29 +0200 |
Kim Alvefur |
mod_saslauth: Demote "no SASL mechanisms" error back to warning
|
file |
diff |
annotate
|
| Tue, 15 Oct 2019 22:05:51 +0200 |
Kim Alvefur |
mod_saslauth: Improve logging of why no SASL mechanisms were offered
|
file |
diff |
annotate
|
| Tue, 15 Oct 2019 21:58:10 +0200 |
Kim Alvefur |
mod_saslauth: Use the power of Set Theory to mange sets of SASL mechanisms
|
file |
diff |
annotate
|
| Tue, 15 Oct 2019 21:37:19 +0200 |
Kim Alvefur |
mod_saslauth: Log (debug) messages about channel binding
|
file |
diff |
annotate
|
| Sun, 13 Oct 2019 00:33:35 +0200 |
Kim Alvefur |
mod_saslauth: Remove useless debug log line
|
file |
diff |
annotate
|
| Sun, 13 Oct 2019 00:32:58 +0200 |
Kim Alvefur |
mod_saslauth: Remove commented-out debug log line
|
file |
diff |
annotate
|
| Tue, 30 Jul 2019 02:29:36 +0200 |
Kim Alvefur |
plugins: Remove tostring call from logging
|
file |
diff |
annotate
|
| Fri, 03 May 2019 20:54:24 +0200 |
Kim Alvefur |
Fix various spelling mistakes [codespell]
|
file |
diff |
annotate
|
| Sat, 24 Nov 2018 02:24:48 +0100 |
Kim Alvefur |
mod_saslauth: Improve log message when no SASL mechanisms offered (thanks hexa)
|
file |
diff |
annotate
|
| Sun, 04 Feb 2018 01:05:06 +0100 |
Kim Alvefur |
mod_saslauth: Ignore unused argument [luacheck]
|
file |
diff |
annotate
|
| Sun, 04 Feb 2018 01:03:44 +0100 |
Kim Alvefur |
mod_saslauth: Use renamed API for hooking non-stanzas
|
file |
diff |
annotate
|
| Sun, 04 Feb 2018 01:01:50 +0100 |
Kim Alvefur |
mod_saslauth: Pass SASL EXTERNAL failure reason on to be used in error bounces
|
file |
diff |
annotate
|
| Sun, 04 Feb 2018 00:58:38 +0100 |
Kim Alvefur |
mod_saslauth: Close connection if no fallback kicks in on SASL EXTERNAL failure
|
file |
diff |
annotate
|
| Sun, 04 Feb 2018 01:13:27 +0100 |
Kim Alvefur |
Backed out changeset 89c42aff8510: The problem in ejabberd has reportedly been resolved and this change causes more problems than it solves (fixes #1006)
|
file |
diff |
annotate
|
| Thu, 21 Dec 2017 10:15:47 +0100 |
Kim Alvefur |
mod_saslauth: Log which mechanisms are offered
|
file |
diff |
annotate
|
| Thu, 14 Sep 2017 02:47:40 +0200 |
Kim Alvefur |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Sat, 08 Jul 2017 18:21:45 +0200 |
Kim Alvefur |
mod_saslauth: Use correct varible name (thanks Roi)
|
file |
diff |
annotate
|
| Sat, 01 Apr 2017 22:34:15 +0200 |
Kim Alvefur |
mod_saslauth: Remove unused argument [luacheck]
|
file |
diff |
annotate
|
| Mon, 06 Mar 2017 16:05:24 +0100 |
Kim Alvefur |
mod_saslauth: Fix typoed variable name [luacheck]
|
file |
diff |
annotate
|
| Mon, 06 Mar 2017 15:56:12 +0100 |
Kim Alvefur |
mod_saslauth: Switch to hook_tag from hook_stanza which was renamed in 2087d42f1e77
|
file |
diff |
annotate
|
| Thu, 02 Mar 2017 15:21:07 +0100 |
Kim Alvefur |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Thu, 02 Mar 2017 15:17:32 +0100 |
Kim Alvefur |
mod_saslauth: Log SASL failure reason
|
file |
diff |
annotate
|
| Wed, 15 Feb 2017 23:04:44 +0100 |
Kim Alvefur |
mod_saslauth: Ignore shadowing of logger [luacheck]
|
file |
diff |
annotate
|
| Wed, 15 Feb 2017 23:00:03 +0100 |
Kim Alvefur |
mod_saslauth: Improve logging as to why when SASL is not offered
|
file |
diff |
annotate
|
| Wed, 15 Feb 2017 22:59:19 +0100 |
Kim Alvefur |
mod_saslauth: Cache logger in local for less typing
|
file |
diff |
annotate
|
| Tue, 13 Dec 2016 18:15:17 +0100 |
Kim Alvefur |
core.sessionmanager, mod_saslauth: Introduce intermediate session type for authenticated but unbound sessions so that resource binding is not treated as a normal stanza
|
file |
diff |
annotate
|
| Fri, 18 Mar 2016 11:51:58 +0100 |
Kim Alvefur |
mod_saslauth: Disable DIGEST-MD5 by default (closes #515)
|
file |
diff |
annotate
|
| Wed, 19 Nov 2014 14:45:20 +0100 |
Kim Alvefur |
mod_saslauth: Make it easier to support multiple channel binding methonds
|
file |
diff |
annotate
|
| Wed, 19 Nov 2014 14:44:41 +0100 |
Kim Alvefur |
mod_saslauth: Break out tls-unique channel binding callback so it is instantiated once
|
file |
diff |
annotate
|
| Wed, 19 Nov 2014 14:37:45 +0100 |
Kim Alvefur |
mod_saslauth: Keep sasl_handler in a local variable
|
file |
diff |
annotate
|
| Tue, 21 Oct 2014 16:41:28 +0200 |
Kim Alvefur |
mod_saslauth: Better name for config option
|
file |
diff |
annotate
|
| Tue, 21 Oct 2014 14:38:40 +0200 |
Kim Alvefur |
mod_saslauth: Make it possible to disable certain mechanisms
|
file |
diff |
annotate
|
| Tue, 21 Oct 2014 14:37:05 +0200 |
Kim Alvefur |
mod_saslauth: Add LOGIN to mechanisms not allowed over unencrypted connections as it may be offered by 3rd party authentication plugins
|
file |
diff |
annotate
|
| Tue, 21 Oct 2014 14:35:32 +0200 |
Kim Alvefur |
mod_saslauth: Use a configurable set of mechanisms to not allow over unencrypted connections
|
file |
diff |
annotate
|
| Tue, 21 Oct 2014 12:57:56 +0200 |
Kim Alvefur |
mod_saslauth: Log warning if no SASL mechanisms were offered
|
file |
diff |
annotate
|
| Tue, 21 Oct 2014 12:56:19 +0200 |
Kim Alvefur |
mod_saslauth: Use type-specific config option getters
|
file |
diff |
annotate
|
| Tue, 21 Oct 2014 12:49:03 +0200 |
Kim Alvefur |
mod_legacyauth, mod_saslauth, mod_tls: Pass require_encryption as default option to s2s_require_encryption so the later overrides the former
|
file |
diff |
annotate
|
| Tue, 23 Sep 2014 19:46:29 +0200 |
Kim Alvefur |
mod_saslauth: Fix encoding of missing vs empty SASL reply messages
|
file |
diff |
annotate
|
| Tue, 23 Sep 2014 19:29:14 +0200 |
Kim Alvefur |
mod_saslauth: Stricter SASL EXTERNAL handling more in line with XEP-0178
|
file |
diff |
annotate
|
| Tue, 23 Sep 2014 14:23:01 +0200 |
Kim Alvefur |
mod_dialback, mod_saslauth: Remove broken fallback to dialback on SASL EXTERNAL failure
|
file |
diff |
annotate
|
| Fri, 04 Jul 2014 22:52:34 +0200 |
Kim Alvefur |
mod_lastactivity, mod_legacyauth, mod_presence, mod_saslauth, mod_tls: Use the newer stanza:get_child APIs and optimize away some table lookups
|
file |
diff |
annotate
|
| Tue, 25 Mar 2014 19:16:38 +0100 |
Kim Alvefur |
Merge 0.9->0.10
|
file |
diff |
annotate
|
| Sat, 22 Mar 2014 12:41:38 +0100 |
Kim Alvefur |
mod_saslauth: Only do c2s SASL on normal VirtualHosts
|
file |
diff |
annotate
|
| Wed, 12 Feb 2014 19:25:15 +0100 |
Kim Alvefur |
mod_saslauth: Make sure sasl handler has add_cb_handler (fixes #392)
|
file |
diff |
annotate
|
| Mon, 07 Oct 2013 12:56:21 +0200 |
Kim Alvefur |
mod_saslauth: Collect data for channel binding only if we know for sure that the stream is encrypted
|
file |
diff |
annotate
|
| Sun, 22 Sep 2013 00:44:20 +0200 |
Kim Alvefur |
Merge Tobias SCRAM-PLUS work
|
file |
diff |
annotate
|
| Mon, 17 Jan 2011 16:50:21 +0100 |
Tobias Markmann |
mod_saslauth: Check whether LuaSec supports getpeerfinished() binding.
|
file |
diff |
annotate
|
| Mon, 17 Jan 2011 16:50:21 +0100 |
Tobias Markmann |
mod_saslauth: Add channel binding handler for tls-unique channel binding.
|
file |
diff |
annotate
|
| Mon, 17 Jan 2011 16:50:21 +0100 |
Tobias Markmann |
mod_saslauth: Set secure socket as SASL object user data for secure sessions.
|
file |
diff |
annotate
|
| Fri, 09 Aug 2013 17:48:21 +0200 |
Florian Zeitz |
Remove all trailing whitespace
|
file |
diff |
annotate
|
| Mon, 29 Apr 2013 10:43:44 +0100 |
Matthew Wild |
mod_saslauth, mod_compression: Fix some cases where open_stream() was not being passed to/from (see df3c78221f26 and issue #338)
|
file |
diff |
annotate
|
| Fri, 22 Mar 2013 14:18:23 +0000 |
Matthew Wild |
s2smanager, mod_s2s, mod_dialback, mod_saslauth: Move s2smanager.make_authenticated() to mod_s2s, and plugins now signal authentication via the s2s-authenticated event
|
file |
diff |
annotate
|
| Sat, 16 Mar 2013 17:46:43 +0100 |
Kim Alvefur |
mod_s2s, mod_saslauth, mod_compression: Refactor to have common code for opening streams
|
file |
diff |
annotate
|
| Wed, 04 Jul 2012 23:44:13 +0100 |
Matthew Wild |
mod_saslauth: Pass session to usermanager.get_sasl_handler()
|
file |
diff |
annotate
|
| Sat, 28 Apr 2012 03:05:35 +0100 |
Matthew Wild |
mod_saslauth: Remove unused declaration of xmlns_stanzas
|
file |
diff |
annotate
|
| Sun, 12 Feb 2012 15:14:35 +0100 |
Kim Alvefur |
mod_saslauth: Remove useless import of, and call to nodeprep.
|
file |
diff |
annotate
|
| Sun, 12 Feb 2012 15:08:12 +0100 |
Kim Alvefur |
mod_saslauth: Fire authentication-failure if make_authenticated() failed.
|
file |
diff |
annotate
|
| Sun, 12 Feb 2012 15:05:31 +0100 |
Kim Alvefur |
mod_saslauth: Move authentication-success event to after session has been made authenticated.
|
file |
diff |
annotate
|
| Tue, 24 Jan 2012 14:57:53 -0800 |
Paul Aurich |
mod_saslauth: "" ~= nil (thanks, Zash!)
|
file |
diff |
annotate
|
| Thu, 13 Oct 2011 00:24:09 +0500 |
Waqas Hussain |
mod_saslauth: Never send empty <mechanisms/>, for real this time.
|
file |
diff |
annotate
|
| Thu, 13 Oct 2011 00:10:02 +0500 |
Waqas Hussain |
mod_saslauth: Never send empty <mechanisms/>.
|
file |
diff |
annotate
|
| Mon, 29 Aug 2011 12:01:42 -0400 |
Matthew Wild |
mod_saslauth: Fire authentication-success and authentication-failure events (thanks scitor)
|
file |
diff |
annotate
|
| Thu, 06 Jan 2011 14:46:59 +0000 |
Matthew Wild |
Merge 0.8->trunk
|
file |
diff |
annotate
|
| Tue, 28 Dec 2010 05:28:15 +0500 |
Waqas Hussain |
mod_saslauth: Remove special handling for SASL ANONYMOUS, and let mod_auth_anonymous handle it.
|
file |
diff |
annotate
|
| Mon, 27 Dec 2010 19:57:04 +0500 |
Waqas Hussain |
util.sasl.*, mod_auth_*, mod_saslauth: Pass SASL handler as first parameter to SASL profile callbacks.
|
file |
diff |
annotate
|
| Fri, 24 Dec 2010 18:54:54 +0000 |
Matthew Wild |
mod_saslauth: Handle session bind requests to the host, fixes OneTeam login
|
file |
diff |
annotate
|
| Tue, 28 Dec 2010 05:28:15 +0500 |
Waqas Hussain |
mod_saslauth: Remove special handling for SASL ANONYMOUS, and let mod_auth_anonymous handle it.
|
file |
diff |
annotate
|
| Mon, 27 Dec 2010 19:57:04 +0500 |
Waqas Hussain |
util.sasl.*, mod_auth_*, mod_saslauth: Pass SASL handler as first parameter to SASL profile callbacks.
|
file |
diff |
annotate
|
| Fri, 24 Dec 2010 18:54:54 +0000 |
Matthew Wild |
mod_saslauth: Handle session bind requests to the host, fixes OneTeam login
|
file |
diff |
annotate
|
| Sun, 12 Dec 2010 02:03:32 +0100 |
Kim Alvefur |
core.s2smanager, mod_console, mod_saslauth, util.certverification: rename util.certverification to util.x509
|
file |
diff |
annotate
|
| Sun, 21 Nov 2010 21:10:43 -0800 |
Paul Aurich |
s2s: SASL EXTERNAL
|
file |
diff |
annotate
|
| Tue, 02 Nov 2010 22:23:07 +0500 |
Waqas Hussain |
mod_saslauth: Allow restarting SASL negotiation from scratch.
|
file |
diff |
annotate
|
| Tue, 02 Nov 2010 22:05:19 +0500 |
Waqas Hussain |
mod_saslauth: Separated processing of <auth/> and <response/> elements, and return proper error on out-of-order <response/> elements.
|
file |
diff |
annotate
|
| Tue, 02 Nov 2010 21:19:50 +0500 |
Waqas Hussain |
mod_saslauth: Moved SASL mechanism selection and CDATA handling into separate functions.
|
file |
diff |
annotate
|
| Tue, 02 Nov 2010 15:07:25 +0500 |
Waqas Hussain |
mod_saslauth: Handle SASL <abort/> properly.
|
file |
diff |
annotate
|
| Sat, 16 Oct 2010 07:18:01 +0500 |
Waqas Hussain |
mod_saslauth: Updated to use the new events API.
|
file |
diff |
annotate
|
| Sat, 16 Oct 2010 05:16:45 +0500 |
Waqas Hussain |
mod_saslauth: Improved logging a bit.
|
file |
diff |
annotate
|
| Sat, 16 Oct 2010 05:03:00 +0500 |
Waqas Hussain |
mod_saslauth: Updated to use the new events API.
|
file |
diff |
annotate
|
| Mon, 23 Aug 2010 16:54:56 +0500 |
Waqas Hussain |
mod_saslauth, mod_auth_cyrus, util.sasl_cyrus: Moved cyrus account provisioning check out of mod_saslauth.
|
file |
diff |
annotate
|
| Mon, 23 Aug 2010 16:28:06 +0500 |
Waqas Hussain |
mod_saslauth: Get rid of the sasl_backend option (use auth modules instead).
|
file |
diff |
annotate
|
| Mon, 23 Aug 2010 16:22:58 +0500 |
Waqas Hussain |
mod_saslauth: Get rid of most Cyrus SASL related code (use authentication='cyrus' instead).
|
file |
diff |
annotate
|
| Sat, 31 Jul 2010 15:16:15 +0500 |
Waqas Hussain |
mod_saslauth: Fixed a nil global access.
|
file |
diff |
annotate
|
| Sat, 31 Jul 2010 13:55:46 +0500 |
Waqas Hussain |
mod_saslauth: Check for unencrypted PLAIN auth in mod_saslauth instead of the SASL handler (makes it work for Cyrus SASL).
|
file |
diff |
annotate
|
| Sat, 31 Jul 2010 13:49:22 +0500 |
Waqas Hussain |
mod_saslauth: Move mandatory encryption enforcement to before sasl_handler:select().
|
file |
diff |
annotate
|
| Sun, 18 Jul 2010 17:50:38 +0500 |
Waqas Hussain |
mod_saslauth: Got rid of undocumented and useless 'sasl_realm' config option (was only used for anonymous auth, and that didn't make sense).
|
file |
diff |
annotate
|