https://bugs.openldap.org/show_bug.cgi?id=9189 Quanah Gibson-Mount <quanah(a)openldap.org&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |TEST --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org&gt; --- Commits: • 3cd50fa8 by Isaac Boukris at 2020-04-23T21:00:39+02:00 ITS#9189 rework sasl-cbinding support Add LDAP_OPT_X_SASL_CBINDING option to define the binding type to use, defaults to "none". Add "tls-endpoint" binding type implementing "tls-server-end-point" from RCF 5929, which is compatible with Windows. Fix "tls-unique" to include the prefix in the bindings as per RFC 5056. • 7b0017ad by Isaac Boukris at 2020-04-23T21:00:39+02:00 ITS#9189 add channel-bindings tests -- You are receiving this mail because: You are on the CC list for the bug.

https://bugs.openldap.org/show_bug.cgi?id=9189 Quanah Gibson-Mount <quanah(a)openldap.org&gt; changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |OL_2_5_REQ -- You are receiving this mail because: You are on the CC list for the bug.

https://bugs.openldap.org/show_bug.cgi?id=9189 --- Comment #5 from Isaac Boukris <iboukris(a)gmail.com&gt; --- IPR Notice: The attached file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Red Hat, Inc. Red Hat, Inc. has not assigned rights and/or interest in this work to any party. I, Isaac Boukris am authorized by Red Hat, Inc., my employer, to release this work under the following terms. Red Hat, Inc. hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugs.openldap.org/show_bug.cgi?id=9189 --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org&gt; --- Commits: • 4cac398b by Isaac Boukris at 2020-04-23T22:28:51+00:00 ITS#9189 - initialize ldo_sasl_cbinding in LDAP_LDO_SASL_NULLARG -- You are receiving this mail because: You are on the CC list for the bug.

https://bugs.openldap.org/show_bug.cgi?id=9189 --- Comment #8 from dpa-openldap(a)aegee.org <dpa-openldap(a)aegee.org&gt; --- At https://github.com/cyrusimap/cyrus-sasl/issues/637 I objected how the interoperability is achieved. RFC 4752 says the GSSAPI SASL mechanism offers no Channel binding. Users of Cyrus SASL, if utilize the API correct, shall be able to offer the SASL mechanisms GS2-KRB5, GS2-KRB5-PLUS and GSSAPI (per RFC 4752 without CB) at the same time. With the adjustments to libsasl/plugins/gssapi.c to get compatible with MS-LDAP-over-TLS, the libsasl2 users are now incompatible with the remaining GSSAPI clients. -- You are receiving this mail because: You are on the CC list for the issue.

https://bugs.openldap.org/show_bug.cgi?id=9189 --- Comment #10 from Quanah Gibson-Mount <quanah(a)openldap.org&gt; --- RE26: • 7dd370aa by Ondřej Kuzník at 2022-02-18T23:19:01+00:00 ITS#9189 Fix typo -- You are receiving this mail because: You are on the CC list for the issue.