Mercurial > prosody-modules
annotate mod_lib_ldap/dev/slapd.conf @ 5285:8e1f1eb00b58
mod_sasl2_fast: Fix harmless off-by-one error (invalidates existing tokens!)
Problem:
This was causing the key to become "<token>--cur" instead of the expected
"<token>-cur". As the same key was used by the code to both set and get, it
still worked.
Rationale for change:
Although it worked, it's unintended, inconsistent and messy. It increases the
chances of future bugs due to the unexpected format.
Side-effects of change:
Existing '--cur' entries will not be checked after this change, and therefore
existing FAST clients will fail to authenticate until they attempt password
auth and obtain a new FAST token.
Existing '--cur' entries in storage will not be cleaned up by this commit, but
this is considered a minor issue, and okay for the relatively few FAST
deployments.
| author | Matthew Wild <mwild1@gmail.com> |
|---|---|
| date | Wed, 29 Mar 2023 16:12:15 +0100 |
| parents | 1f45cef9e5c7 |
| children |
| rev | line source |
|---|---|
| 809 | 1 include /etc/openldap/schema/core.schema |
| 2 # I needed the following two schema definitions for posixGroup; if you don't | |
| 3 # need it, don't include them | |
| 4 include /etc/openldap/schema/cosine.schema | |
| 5 include /etc/openldap/schema/nis.schema | |
|
822
1f45cef9e5c7
Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents:
809
diff
changeset
|
6 # needed for inetOrgPerson so I can test jpegPhoto |
|
1f45cef9e5c7
Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents:
809
diff
changeset
|
7 include /etc/openldap/schema/inetorgperson.schema |
| 809 | 8 |
| 9 pidfile /var/run/openldap/slapd.pid | |
| 10 argsfile /var/run/openldap/slapd.args | |
| 11 database bdb | |
| 12 suffix "dc=example,dc=com" | |
| 13 rootdn "cn=Manager,dc=example,dc=com" | |
| 14 rootpw prosody | |
| 15 directory /var/lib/openldap/openldap-data | |
| 16 index objectClass eq |
