util.sasl_cyrus: If available, use a c14n callback for interoperability with bad clients.

Wed, 17 Mar 2010 15:29:14 -0700

author
Paul Aurich <paul@darkrain42.org>
date
Wed, 17 Mar 2010 15:29:14 -0700
changeset 2899
6e57f5e0cc91
parent 2898
da70c26fe61b
child 2900
5b8411968a05
child 2901
5f3ccf7dd3f1

util.sasl_cyrus: If available, use a c14n callback for interoperability with bad clients.

Specifically, clients that specify an authzid 'user@domain.com' and authcid 'user'.

util/sasl_cyrus.lua file | annotate | diff | comparison | revisions
--- a/util/sasl_cyrus.lua	Wed Mar 17 15:29:14 2010 -0700
+++ b/util/sasl_cyrus.lua	Wed Mar 17 15:29:14 2010 -0700
@@ -53,6 +53,16 @@
 	sasl_i.realm = realm;
 	sasl_i.service_name = service_name;
 	sasl_i.cyrus = cyrussasl.server_new(service_name, nil, realm, nil, nil)
+
+	if cyrussasl.set_canon_cb then
+		local c14n_cb = function (user)
+			local node = s_match(user, "^([^@]+)");
+			log("debug", "Canonicalizing username %s to %s", user, node)
+			return node
+		end
+		cyrussasl.set_canon_cb(sasl_i.cyrus, c14n_cb);
+	end
+
 	if sasl_i.cyrus == 0 then
 		log("error", "got NULL return value from server_new")
 		return nil;

mercurial