LDAP draft-wahl-ldap-session

[Michael Ströder]

Arran Cudbard-Bell wrote:
> 
>> On 29 Jun 2015, at 04:56, Michael Ströder <michael at stroeder.com> wrote:
>>
>> But now for checking the password there is no Session Tracking Control sent
>> along with the bind request (conn=1044, err=49 is ok because I deliberately
>> used a wrong password):
> 
>        int ldap_bind(LDAP *ld, const char *who, const char *cred,
>               int method);
> 
>        int ldap_bind_s(LDAP *ld, const char *who, const char *cred,
>               int method);
> 
>        int ldap_simple_bind(LDAP *ld, const char *who, const char *passwd);
> 
>        int ldap_simple_bind_s(LDAP *ld, const char *who, const char *passwd);
> 
>        int ldap_sasl_bind(LDAP *ld, const char *dn, const char *mechanism,
>               struct berval *cred, LDAPControl *sctrls[],
>               LDAPControl *cctrls[], int *msgidp);
> 
> 
> Because there's no libldap bind function which takes client or server controls,
> ug I guess we should set them on the handle and then remove them again.

Despite its misleading name you can also send simple bind requests with
ldap_sasl_bind() which has arguments for controls. AFAICS that's what libldap
does internally and this is was also python-ldap does.

Ciao, Michael.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4272 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20150629/52934ede/attachment-0001.bin>