Commit Graph
4 Commits
Author SHA1 Message Date
Chris F Ravenscroft 34c5f9b3cb Harden LDAP control decoding against malformed BER input (#6)
* Harden LDAP control decoding against malformed BER input

Change DecodeControl to return (Control, error) and validate control structure and value types instead of relying on unchecked access.
Handle decode failures on both server and client paths, returning protocol errors for bad request controls and surfacing response decode errors.

* fix: top-level recover() and fix missing TLSConfig check

* chore: verify fix
2026-07-18 13:29:43 -07:00
Chris F Ravenscroft 297568ea5d feat: extensible match filters proxying (#5)
* feat: extensible match filters proxying
2026-01-18 15:55:48 -08:00
Chris F Ravenscroft 53c26f3f5e feat: support paging (#3) 2024-03-23 17:03:53 -07:00
b9bf4d1baf Start tls by @shipperizer (#1)
* switch nmcclain/asn1-ber to go-asn1-ber/and1-ber.
This newer package has ben updated with tests, and looks to actually be supported.
It is also is a forked version of nmcclain/asn1-ber, so supports the same API.

* no need to print errors if client disconnects early and unexpectedly

* added in Close method on server to avoid a race condition

* test ssl certs are untrusted, ldapsearch needs to be told to allow untrusted certs

* Extra time.Wait causes the test to fail

* removed singaling with a custom quit chanel

* feat: support StartTLS in server

* lint: fmt and imports

* feat: rename library to be used by glauth

* chore: renamed packages

---------

Co-authored-by: Daniel Barney <daniel@thoughtplot.io>
Co-authored-by: Mark Rushakoff <mark@influxdata.com>
Co-authored-by: shipperizer <alexcabb@gmail.com>
2023-12-10 14:58:23 -08:00