[Bug 50572] New: LDAP_AUTH_NEGOTIATE login fails as authorization user is used instead of authentication user
https://bugs.winehq.org/show_bug.cgi?id=50572 Bug ID: 50572 Summary: LDAP_AUTH_NEGOTIATE login fails as authorization user is used instead of authentication user Product: Wine Version: 6.0 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wldap32 Assignee: wine-bugs(a)winehq.org Reporter: damjan.jov(a)gmail.com Distribution: --- In the "ldapsearch" command line tool, "-X" is the authorization user and "-U" is the authentication user. For a server using LDAP_AUTH_NEGOTIATE, it must have the authentication user - supplying only the authorization user always fails: $ ldapsearch -h HOSTNAME -v -X USERNAME -W ldap_initialize( ldap://HOSTNAME ) Enter LDAP Password: SASL/DIGEST-MD5 authentication started ldap_sasl_interactive_bind_s: Invalid credentials (49) <===================== additional info: 8009030C: LdapErr: DSID-0C09055F, comment: AcceptSecurityContext error, data 52e, v23f0 Changing the "-X" to "-U", it successfully logs in. If both "-X" and "-U" are present, it also successfully logs in. In dlls/wldap32/bind.c, in the callback function sasl_interact(), Wine supplies its username to SASL_CB_USER which is like "-X", so login always fails the same way. If I change it to supply the username to SASL_CB_AUTHNAME (like "-U"), login succeeds. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=50572 Damjan Jovanovic <damjan.jov(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |patch --- Comment #1 from Damjan Jovanovic <damjan.jov(a)gmail.com> --- Patch sent: https://source.winehq.org/patches/data/198804 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=50572 --- Comment #2 from Hans Leidekker <hans(a)meelstraat.net> --- This may be fixed, the username is supplied to SASL_CB_AUTHNAME now. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=50572 Hans Leidekker <hans@meelstraat.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #3 from Hans Leidekker <hans@meelstraat.net> --- Assuming fixed. Reopen if you can still reproduce. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=50572 Alexandre Julliard <julliard@winehq.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #4 from Alexandre Julliard <julliard@winehq.org> --- Closing bugs fixed in 11.17. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (2)
-
WineHQ Bugzilla -
WineHQ Bugzilla