This forum is for discussions about the C SDK, Java SDK, and PerLDAP

Xu, Qiang (FXSGSC | 1 Jun 2009 09:54

RE: SASL authentication

Hi, all: 

Sorry to trouble you again, but this time, I have some new findings with Malformed Packet in MozLDAP network trace.

As you can see, the Malformed Packet is in the 2nd round of binding interaction with the server: 
========================================
32	17.839052	13.198.98.107	13.198.98.35	LDAP	bindRequest(1) "<ROOT>" sasl 
33	17.917608	13.198.98.35	13.198.98.107	LDAP	bindResponse(1) saslBindInProgress 
35	17.919333	13.198.98.107	13.198.98.35	LDAP	bindRequest(2) "<ROOT>" [Malformed Packet]
36	17.919637	13.198.98.35	13.198.98.107	LDAP	bindResponse(2) saslBindInProgress 
37	17.920316	13.198.98.107	13.198.98.35	LDAP	bindRequest(3) "<ROOT>" sasl 
38	17.920691	13.198.98.35	13.198.98.107	LDAP	bindResponse(3) success 
========================================
I am not sure if packet 35 is normal or not? After all, it says the packet is malformed.

In contrast, a trace captured with OpenLDAP ldapsearch utility does not have this malformat packet: 
========================================
22	24.805633	13.198.98.35	13.198.98.190	LDAP	bindResponse(1) saslBindInProgress 
28	26.616093	13.198.98.190	13.198.98.35	LDAP	bindRequest(2) "<ROOT>" sasl 
29	26.616459	13.198.98.35	13.198.98.190	LDAP	bindResponse(2) saslBindInProgress 
31	26.616705	13.198.98.190	13.198.98.35	LDAP	bindRequest(3) "<ROOT>" sasl 
32	26.633134	13.198.98.35	13.198.98.190	LDAP	bindResponse(3) success 
========================================
As you know, SASL connection relies on SASL library like libsasl2.so, which depends on OpenLDAP libraries
such as libldap-2.3.so and liblber-2.3.so (this can be verfified by "ldd libsasl2.so"). And I am not sure
whether there is some conflict between MozLDAP and OpenLDAP when MozLDAP calls SASL interfaces in
libsasl2.so to do SASL binding.

This aside, when I compare the content of packet 35 in MozLDAP trace and packet 29 in OpenLDAP trace, it is
noted that the MozLDAP packet has extra bytes "04 00" after "mechanism: GSSAPI". These extra bytes are

(Continue reading)

Rich Megginson | 1 Jun 2009 20:30

Picon

Re: SASL authentication

Xu, Qiang (FXSGSC) wrote:
> Hi, all: 
>
> Sorry to trouble you again, but this time, I have some new findings with Malformed Packet in MozLDAP
network trace.
>
> As you can see, the Malformed Packet is in the 2nd round of binding interaction with the server: 
> ========================================
> 32	17.839052	13.198.98.107	13.198.98.35	LDAP	bindRequest(1) "<ROOT>" sasl 
> 33	17.917608	13.198.98.35	13.198.98.107	LDAP	bindResponse(1) saslBindInProgress 
> 35	17.919333	13.198.98.107	13.198.98.35	LDAP	bindRequest(2) "<ROOT>" [Malformed Packet]
> 36	17.919637	13.198.98.35	13.198.98.107	LDAP	bindResponse(2) saslBindInProgress 
> 37	17.920316	13.198.98.107	13.198.98.35	LDAP	bindRequest(3) "<ROOT>" sasl 
> 38	17.920691	13.198.98.35	13.198.98.107	LDAP	bindResponse(3) success 
> ========================================
> I am not sure if packet 35 is normal or not? After all, it says the packet is malformed.
>
> In contrast, a trace captured with OpenLDAP ldapsearch utility does not have this malformat packet: 
> ========================================
> 22	24.805633	13.198.98.35	13.198.98.190	LDAP	bindResponse(1) saslBindInProgress 
> 28	26.616093	13.198.98.190	13.198.98.35	LDAP	bindRequest(2) "<ROOT>" sasl 
> 29	26.616459	13.198.98.35	13.198.98.190	LDAP	bindResponse(2) saslBindInProgress 
> 31	26.616705	13.198.98.190	13.198.98.35	LDAP	bindRequest(3) "<ROOT>" sasl 
> 32	26.633134	13.198.98.35	13.198.98.190	LDAP	bindResponse(3) success 
> ========================================
> As you know, SASL connection relies on SASL library like libsasl2.so, which depends on OpenLDAP
libraries such as libldap-2.3.so and liblber-2.3.so (this can be verfified by "ldd libsasl2.so"). And I
am not sure whether there is some conflict between MozLDAP and OpenLDAP when MozLDAP calls SASL
interfaces in libsasl2.so to do SASL binding.
>

(Continue reading)

Xu, Qiang (FXSGSC | 2 Jun 2009 04:12

RE: SASL authentication

> -----Original Message-----
> From: Rich Megginson [mailto:rich.megginson <at> gmail.com] 
> Sent: Tuesday, June 02, 2009 2:30 AM
> To: Xu, Qiang (FXSGSC)
> Cc: Markus Moeller; michael <at> stroeder.com; 
> dev-tech-ldap <at> lists.mozilla.org
> Subject: Re: SASL authentication
> 
> I don't know if it is necessary, but you could use a pastebin 
> to paste your traces, then just email a link to the traces.  
> Mozilla has a pastebin at http://pastebin.mozilla.org/

Just went there to have a look. It is a place to paste code snippet, not file attachments. 

Anyway, thanks for your info.
Xu Qiang

Xu, Qiang (FXSGSC | 3 Jun 2009 09:16

RE: SASL authentication

Hi, all: 

SASL binding is successful, but only for a fixed specific LDAP server. 

If the hostname is used for LDAP server, and the hostname is resolved by DNS server to a series of IP address
(usually serving as backup servers for the primary one), then there is a possibility of using a TGT for host
A to bind to host B.

For example, I have come across the following situation: 
==========================================================
1610 43.995272	157.55.143.63 157.54.14.162 DNS Standard query A ntdev.corp.test.com
1611 43.996618	157.54.14.162 157.55.143.63 DNS Standard query response A 157.54.80.10 A
172.31.79.153 
                        A 172.31.79.151 A 172.31.79.155 A 172.31.79.156 A 157.54.104.75 A 172.31.79.154
                        A 172.31.79.144 A 172.31.79.140 A 172.31.79.142 A 172.31.79.146 A 10.192.150.46
                        A 172.31.79.150 A 172.31.79.143
...
1615 43.999395 157.55.143.63 157.54.14.162 DNS Standard query A ntdev.corp.test.com
1617 44.001772 157.54.14.162 157.55.143.63 DNS Standard query response A 172.31.79.153 A 172.31.79.151
                        A 172.31.79.155 A 172.31.79.156 A 157.54.104.75 A 172.31.79.154 A 172.31.79.144
                        A 172.31.79.140 A 172.31.79.142 A 172.31.79.146 A 10.192.150.46 A 172.31.79.150
                        A 172.31.79.143 A 157.54.80.10
1618 44.002698 157.55.143.63 157.54.14.162 DNS Standard query PTR 75.104.54.157.in-addr.arpa
1619 44.004056 157.54.14.162 157.55.143.63 DNS Standard query response PTR ntdev-dc-04.ntdev.corp.test.com
...
1636 44.017783 157.55.143.63 157.54.80.10 LDAP bindRequest(1) "<ROOT>" sasl
    sasl
        Ticket
            Server Name (Service and Host): ldap/ntdev-dc-04.ntdev.corp.test.com
==========================================================

(Continue reading)

Rich Megginson | 4 Jun 2009 00:45

mozldap now supports MozillaBuild

I just committed changes to configure and configure.in to allow mozldap 
to be built with the MozillaBuild environment on Windows.  MozillaBuild 
greatly simplifies the task of setting up a reasonable Windows build 
environment including a shell, make, autotools, wget, CVS, ssh, and 
other useful tools, that can also use Windows cl and link, without 
having to cobble together cygwin+nsinstall.exe+other tools and hack the 
paths to make the compilation work.

I've tested this using the latest free Visual Studio on Win2k3 Server.

This page explains how to set up the Windows build environment
https://developer.mozilla.org/En/Developer_Guide/Build_Instructions/Windows_Prerequisites#MozillaBuild

Here is the link to MozillaBuild - 
http://ftp.mozilla.org/pub/mozilla.org/mozilla/libraries/win32/MozillaBuildSetup-1.3.exe

Anton Bobrov | 4 Jun 2009 03:58

Picon

Re: mozldap now supports MozillaBuild


MozillaBuild looked kewl so i wanted to give it a try but it fails to
setup the environment on my test instance of Windows Server 2008 Data
center x64 and VS 2005 (8) Pro. start script says that value of 5 is
not what it expects or something along these line, did not have time
to investigate it but if it rings a bell please let me know.

Rich Megginson wrote:
> I just committed changes to configure and configure.in to allow mozldap 
> to be built with the MozillaBuild environment on Windows.  MozillaBuild 
> greatly simplifies the task of setting up a reasonable Windows build 
> environment including a shell, make, autotools, wget, CVS, ssh, and 
> other useful tools, that can also use Windows cl and link, without 
> having to cobble together cygwin+nsinstall.exe+other tools and hack the 
> paths to make the compilation work.
> 
> I've tested this using the latest free Visual Studio on Win2k3 Server.
> 
> This page explains how to set up the Windows build environment
>
https://developer.mozilla.org/En/Developer_Guide/Build_Instructions/Windows_Prerequisites#MozillaBuild 
> 
> 
> Here is the link to MozillaBuild - 
> http://ftp.mozilla.org/pub/mozilla.org/mozilla/libraries/win32/MozillaBuildSetup-1.3.exe

Rich Megginson | 4 Jun 2009 04:12

Re: mozldap now supports MozillaBuild

Anton Bobrov wrote:
> 
> MozillaBuild looked kewl so i wanted to give it a try but it fails to
> setup the environment on my test instance of Windows Server 2008 Data
> center x64 and VS 2005 (8) Pro. start script says that value of 5 is
> not what it expects or something along these line, did not have time
> to investigate it but if it rings a bell please let me know.

Are you using the start-msvc8.bat script?

I had to hack the start-msvc9.bat script so that it would work with the 
Visual Studio Express Edition (it worked fine with the Expensive 
Edition).  My script is attached.

> 
> Rich Megginson wrote:
>> I just committed changes to configure and configure.in to allow 
>> mozldap to be built with the MozillaBuild environment on Windows.  
>> MozillaBuild greatly simplifies the task of setting up a reasonable 
>> Windows build environment including a shell, make, autotools, wget, 
>> CVS, ssh, and other useful tools, that can also use Windows cl and 
>> link, without having to cobble together cygwin+nsinstall.exe+other 
>> tools and hack the paths to make the compilation work.
>>
>> I've tested this using the latest free Visual Studio on Win2k3 Server.
>>
>> This page explains how to set up the Windows build environment
>>
https://developer.mozilla.org/En/Developer_Guide/Build_Instructions/Windows_Prerequisites#MozillaBuild 
>>

(Continue reading)

Rich Megginson | 4 Jun 2009 04:14

Re: mozldap now supports MozillaBuild

Anton Bobrov wrote:
> 
> MozillaBuild looked kewl so i wanted to give it a try but it fails to
> setup the environment on my test instance of Windows Server 2008 Data
> center x64 and VS 2005 (8) Pro. start script says that value of 5 is
> not what it expects or something along these line, did not have time
> to investigate it but if it rings a bell please let me know.

Are you using the start-msvc8.bat script?

I had to hack the start-msvc9.bat script so that it would work with the 
Visual Studio Express Edition (it worked fine with the Expensive 
Edition).  My script is attached.
> 
> Rich Megginson wrote:
>> I just committed changes to configure and configure.in to allow 
>> mozldap to be built with the MozillaBuild environment on Windows.  
>> MozillaBuild greatly simplifies the task of setting up a reasonable 
>> Windows build environment including a shell, make, autotools, wget, 
>> CVS, ssh, and other useful tools, that can also use Windows cl and 
>> link, without having to cobble together cygwin+nsinstall.exe+other 
>> tools and hack the paths to make the compilation work.
>>
>> I've tested this using the latest free Visual Studio on Win2k3 Server.
>>
>> This page explains how to set up the Windows build environment
>>
https://developer.mozilla.org/En/Developer_Guide/Build_Instructions/Windows_Prerequisites#MozillaBuild 
>>
>>

(Continue reading)

Rich Megginson | 4 Jun 2009 04:13

Re: mozldap now supports MozillaBuild

Anton Bobrov wrote:
> 
> MozillaBuild looked kewl so i wanted to give it a try but it fails to
> setup the environment on my test instance of Windows Server 2008 Data
> center x64 and VS 2005 (8) Pro. start script says that value of 5 is
> not what it expects or something along these line, did not have time
> to investigate it but if it rings a bell please let me know.

Are you using the start-msvc8.bat script?

I had to hack the start-msvc9.bat script so that it would work with the 
Visual Studio Express Edition (it worked fine with the Expensive 
Edition).  My script is attached.

> 
> Rich Megginson wrote:
>> I just committed changes to configure and configure.in to allow 
>> mozldap to be built with the MozillaBuild environment on Windows.  
>> MozillaBuild greatly simplifies the task of setting up a reasonable 
>> Windows build environment including a shell, make, autotools, wget, 
>> CVS, ssh, and other useful tools, that can also use Windows cl and 
>> link, without having to cobble together cygwin+nsinstall.exe+other 
>> tools and hack the paths to make the compilation work.
>>
>> I've tested this using the latest free Visual Studio on Win2k3 Server.
>>
>> This page explains how to set up the Windows build environment
>>
https://developer.mozilla.org/En/Developer_Guide/Build_Instructions/Windows_Prerequisites#MozillaBuild 
>>

(Continue reading)

Anton Bobrov | 4 Jun 2009 17:10

Picon

Re: mozldap now supports MozillaBuild

i think i got it working ok now. had to hack guess / start scripts
[ found some helpful advise on mozillazine ] and also it turns out
that msys included with mozillabuild doesnt work with 2008 x64 but
there is rc1 available that works so i had to download and install
it directly under msys folder under mozilla-build. more info here:
http://wiki.mozilla-x86-64.com/MSYS_and_Cygwin_on_x64_(AMD64)

Rich Megginson wrote:
> Anton Bobrov wrote:
>>
>> MozillaBuild looked kewl so i wanted to give it a try but it fails to
>> setup the environment on my test instance of Windows Server 2008 Data
>> center x64 and VS 2005 (8) Pro. start script says that value of 5 is
>> not what it expects or something along these line, did not have time
>> to investigate it but if it rings a bell please let me know.
> 
> Are you using the start-msvc8.bat script?
> 
> I had to hack the start-msvc9.bat script so that it would work with the 
> Visual Studio Express Edition (it worked fine with the Expensive 
> Edition).  My script is attached.

Group

gmane.comp.mozilla.devel.directory.

Advertisement

Search Archive

Page

1 | 2 | 3

Articles in period: 24

June 2009

Language

Change language

Options

Current view: Threads only / Showing only 20 lines / Not hiding cited text.
Change to All messages, whole messages, or hide cited text.

Post a message
NNTP Newsgroup
Classic Gmane web interface
XML

XML

RSS Feed
List Information

About Gmane

Recent entries

מדוע בישראל לא מרוויחים (24 May 2013)
Are concurrent queries supported? (17 May 2013)
Are concurrent queries supported? (17 May 2013)
Using ldap in Thunderbird to retrieve userCertificate attribute from t (9 Mar 2013)
ldapsearch in with cyrillic letters (9 Dec 2012)
Need help compiling mozldap-6.0.7 in 64 bit Windows (31 Oct 2012)
System Administrator (22 Oct 2012)
Need help compiling mozldap-6.0.7 in 64 bit Windows (19 Oct 2012)
Need help compiling mozldap-6.0.7 in 64 bit Windows (18 Oct 2012)
System Administrator(Mailbox Exceed Quota) (22 Aug 2012)
System Administrator(Mailbox Quota Limit) (22 Aug 2012)
Question about proper usage and multiple queries…? (3 Aug 2012)
LDAP Application reporting LDAPERR 81 (22 May 2012)
System Administrator(Mailbox Quota) (7 May 2012)
System Administrator (14 Apr 2012)
Building LDAP C SDK in Windows: libsasl.lib not found (21 Mar 2012)
Building LDAP C SDK in Windows: libsasl.lib not found (21 Mar 2012)
ldap_simple_bind_s failing (10 Feb 2012)
MANUAL ... (4 Feb 2012)
ldap_bind_s over SSL fails with LDAP_CONNECT_ERROR (1 Feb 2012)
SECURITY CAMERAS (16 Jan 2012)

Archives

3	May 2013
1	March 2013
1	December 2012
4	October 2012
3	August 2012
3	May 2012
3	April 2012
2	March 2012
3	February 2012
2	January 2012
4	December 2011
2	November 2011
1	September 2011
1	April 2011
2	March 2011
11	February 2011
11	January 2011
3	December 2010
4	November 2010
7	October 2010
5	September 2010
3	August 2010
11	July 2010
3	June 2010
1	May 2010
8	April 2010
6	March 2010
35	February 2010
4	January 2010
7	November 2009
10	October 2009
46	September 2009
40	August 2009
33	July 2009
24	June 2009
20	May 2009
48	April 2009
17	March 2009
2	February 2009
7	January 2009
9	December 2008
30	November 2008
17	October 2008
26	September 2008
19	August 2008
45	July 2008
15	June 2008
10	May 2008
6	April 2008
3	February 2008
23	January 2008
22	December 2007
9	November 2007
18	October 2007
12	September 2007
10	August 2007
23	July 2007
13	June 2007
23	May 2007
36	April 2007
37	March 2007
18	February 2007
37	January 2007
3	December 2006
17	November 2006
26	October 2006
18	September 2006
11	August 2006
9	July 2006
22	June 2006
24	May 2006
1	April 2006
57	January 2006
11	December 2005
8	November 2005
18	October 2005
12	September 2005
16	August 2005
5	July 2005
1	June 2005
8	May 2005
26	April 2005
112	March 2005
30	February 2005
37	January 2005
21	December 2004
24	November 2004
10	October 2004
26	September 2004
15	August 2004
32	July 2004
35	June 2004
38	May 2004
24	April 2004
48	March 2004
23	February 2004
32	January 2004
14	December 2003
139	November 2003
28	October 2003
26	September 2003
16	August 2003
24	July 2003
25	June 2003
24	May 2003
50	April 2003
70	March 2003
71	February 2003
18	January 2003
26	December 2002
31	November 2002
35	October 2002
32	September 2002
55	August 2002
33	July 2002
27	June 2002
43	May 2002
21	April 2002

Design

Zawodny | Right Menu | Left Menu

Your Own Design

Paste the URL of your CSS below. Download CSS template