Mercurial > prosody-modules
annotate mod_lib_ldap/dev/slapd.conf @ 5285:8e1f1eb00b58
mod_sasl2_fast: Fix harmless off-by-one error (invalidates existing tokens!)
Problem:
This was causing the key to become "<token>--cur" instead of the expected
"<token>-cur". As the same key was used by the code to both set and get, it
still worked.
Rationale for change:
Although it worked, it's unintended, inconsistent and messy. It increases the
chances of future bugs due to the unexpected format.
Side-effects of change:
Existing '--cur' entries will not be checked after this change, and therefore
existing FAST clients will fail to authenticate until they attempt password
auth and obtain a new FAST token.
Existing '--cur' entries in storage will not be cleaned up by this commit, but
this is considered a minor issue, and okay for the relatively few FAST
deployments.
author | Matthew Wild <mwild1@gmail.com> |
---|---|
date | Wed, 29 Mar 2023 16:12:15 +0100 |
parents | 1f45cef9e5c7 |
children |
rev | line source |
---|---|
809 | 1 include /etc/openldap/schema/core.schema |
2 # I needed the following two schema definitions for posixGroup; if you don't | |
3 # need it, don't include them | |
4 include /etc/openldap/schema/cosine.schema | |
5 include /etc/openldap/schema/nis.schema | |
822
1f45cef9e5c7
Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents:
809
diff
changeset
|
6 # needed for inetOrgPerson so I can test jpegPhoto |
1f45cef9e5c7
Add avatar data/config for testing
Rob Hoelz <rob@hoelz.ro>
parents:
809
diff
changeset
|
7 include /etc/openldap/schema/inetorgperson.schema |
809 | 8 |
9 pidfile /var/run/openldap/slapd.pid | |
10 argsfile /var/run/openldap/slapd.args | |
11 database bdb | |
12 suffix "dc=example,dc=com" | |
13 rootdn "cn=Manager,dc=example,dc=com" | |
14 rootpw prosody | |
15 directory /var/lib/openldap/openldap-data | |
16 index objectClass eq |