vanitasvitae
/
Smack
mirror of https://github.com/vanitasvitae/Smack.git
1
0
Fork 0
Code Issues Releases Wiki Activity
Smack/core/src/main/java/org/jivesoftware/smack/sasl
History
Florian Schmaus a7ec0338bc Don't set SASL authid parameter to username (SMACK-371) 
RFC4616 states that if the authorization identity (authzid) parameter is
null, then it is derived from the authentication
identity (authcid). Smack currently sets both, authzid and authcid, to
the username, resulting in auth attempts of

userid\0userid\0password

instead of

userid\0password

Which are different users on most systems (e.g. Kerberos).

We now set only SASLMechanism.authenticationId to username. The
authenticate(String, CallbackHandler) method does now not longer receive
the username, as it's send by the CallbackHandler.
 		2014-03-09 14:59:45 +01:00
..
SASLAnonymous.java Normalize newlines to '\n' 2014-02-17 23:58:40 +01:00
SASLCramMD5Mechanism.java Normalize newlines to '\n' 2014-02-17 23:58:40 +01:00
SASLDigestMD5Mechanism.java Normalize newlines to '\n' 2014-02-17 23:58:40 +01:00
SASLExternalMechanism.java Normalize newlines to '\n' 2014-02-17 23:58:40 +01:00
SASLGSSAPIMechanism.java Don't set SASL authid parameter to username (SMACK-371) 2014-03-09 14:59:45 +01:00
SASLMechanism.java Don't set SASL authid parameter to username (SMACK-371) 2014-03-09 14:59:45 +01:00
SASLPlainMechanism.java Normalize newlines to '\n' 2014-02-17 23:58:40 +01:00
package.html Migrate from Ant to Gradle (SMACK-265) 2014-02-14 18:46:33 +01:00