Add SASL support to LDAP

• Key: DIRSERVER-278
• Type: New Feature
• Status: Closed
• Resolution: Fixed
• Priority: Major
• Assignee: Enrique Rodriguez
• Reporter: Enrique Rodriguez
• Affects Version/s: 1.0
• Fix Version/s: 1.5.1

Description

The Java SASL API Programming and Deployment Guide
http://java.sun.com/j2se/1.5.0/docs/guide/security/sasl/sasl-refguide.html

Java interface javax.security.sasl.SaslServer
http://java.sun.com/j2se/1.5.0/docs/api/javax/security/sasl/SaslServer.html

RFC 2222 - Simple Authentication and Security Layer (SASL)
http://www.faqs.org/rfcs/rfc2222.html

RFC 2829 - Authentication Methods for LDAP
http://www.faqs.org/rfcs/rfc2829.html

Comments

[Alex Karasulu]

next release

[Alex Karasulu]

Requires JDK 1.5 to work.

[Alex Karasulu]

Trustin said he'd handle this before 1.0.

[Alex Karasulu]

Moving this over to a 1.1 release.

[Alex Karasulu]

This does not look like it's going to be implemented any time soon. Let's put this off one more release. If it does not get implemented by then we can mark it as something to get to at some (indefinite) release.

[Enrique Rodriguez]

After you deferred this issue, I took a look and was able to get SASL/GSSAPI/Kerberos V5 LDAP Binds working. I still have to modify response messages to carry encrypted payload but based on my experience today this doesn't look like a problem.

If no one minds, I'd like to assign this issue to me and I'd like to reopen DIRSERVER-277 (Add SASL GSSAPI (Kerberos V5) mechanism support) and assign that one to me, as well. Getting it to work was straight-forward but we have several issues to work out w.r.t. the best way to configure this and how we tightly integrate Kerberos as a core authentication mechanism. Also, we need to update the nexus to return supportedSASLMechanisms. Anyway, this still won't be ready for 1.5 but something working can be in trunk shortly.

[Enrique Rodriguez]

We are now on JDK 1.5. Also, this is a key enterprise requirement.

[Emmanuel Lecharny]

Just fixed a version in which we will inject this feature

[Enrique Rodriguez]

Added SASL support (CRAM-MD5, DIGEST-MD5, and GSSAPI) to ApacheDS on revision r541149.

URL: http://svn.apache.org/viewvc?view=rev&rev=541149