1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
# Copyright (c) 1998-2004 Graham Barr <gbarr@pobox.com>. All rights reserved.
# This program is free software; you can redistribute it and/or
# modify it under the same terms as Perl itself.
package Net::LDAP::Bind;
use strict;
use Net::LDAP qw(LDAP_SASL_BIND_IN_PROGRESS LDAP_DECODING_ERROR LDAP_SUCCESS
LDAP_LOCAL_ERROR);
use Net::LDAP::Message;
our $VERSION = '1.05';
our @ISA = qw(Net::LDAP::Message);
sub _sasl_info {
my $self = shift;
@{$self}{qw(dn saslctrl sasl)} = @_;
}
sub decode {
my $self = shift;
my $result = shift;
my $bind = $result->{protocolOp}{bindResponse}
or $self->set_error(LDAP_DECODING_ERROR, 'LDAP decode error')
and return;
my $sasl = $self->{sasl};
my $ldap = $self->parent;
my $resp;
if ($bind->{resultCode} == LDAP_SASL_BIND_IN_PROGRESS or
($bind->{resultCode} == LDAP_SUCCESS and $bind->{serverSaslCreds})) {
$sasl or $self->set_error(LDAP_LOCAL_ERROR, 'no sasl object'), return;
($resp) = $sasl->client_step($bind->{serverSaslCreds})
or $self->set_error(LDAP_DECODING_ERROR, 'LDAP decode error'), return;
}
# Put the new layer over the raw socket, to get rid of any old layer,
# but only if we will be using a new layer. If we rebind but don't
# negotiate a new security layer, the old layer remains in place.
if ($sasl and $bind->{resultCode} == LDAP_SUCCESS) {
$sasl->property('ssf', 0) if !$sasl->property('ssf');
$ldap->{net_ldap_socket} = $sasl->securesocket($ldap->{net_ldap_rawsocket})
if ($sasl->property('ssf'));
}
return $self->SUPER::decode($result)
unless $bind->{resultCode} == LDAP_SASL_BIND_IN_PROGRESS;
# tell our LDAP client to forget us as this message has now completed
# all communications with the server
$ldap->_forgetmesg($self);
$self->{mesgid} = Net::LDAP::Message->NewMesgID(); # Get a new message ID
$self->encode(
bindRequest => {
version => $ldap->version,
name => $self->{dn},
authentication => {
sasl => {
mechanism => $sasl->mechanism,
credentials => $resp
}
},
control => $self->{saslcontrol}
});
$ldap->_sendmesg($self);
}
1;
|
