Arne Welzel
5a0e2bf771
Merge remote-tracking branch 'origin/topic/awelzel/3919-ldap-logs-missing'
...
* origin/topic/awelzel/3919-ldap-logs-missing:
btest/ldap: Add regression test for #3919
(cherry picked from commit a339cfa4c0
2024-09-23 09:24:52 -07:00
Arne Welzel
95e7c5a63e
Merge remote-tracking branch 'origin/topic/awelzel/3853-ldap-spnego-ntlmssp'
...
* origin/topic/awelzel/3853-ldap-spnego-ntlmssp:
ldap: Recognize SASL+SPNEGO+NTLMSSP
(cherry picked from commit 152bbbd680
2024-09-23 09:23:19 -07:00
Arne Welzel
6f65b88f1b
Merge remote-tracking branch 'origin/topic/awelzel/ldap-extended-request-response-starttls'
...
* origin/topic/awelzel/ldap-extended-request-response-starttls:
ldap: Add heuristic for wrap tokens
ldap: Ignore ec/rrc for sealed wrap tokens
ldap: Add LDAP sample with SASL-SRP mechanism
ldap: Reintroduce encryption after SASL heuristic
ldap: Fix assuming GSS-SPNEGO for all bindResponses
ldap: Implement extended request/response and StartTLS support
(cherry picked from commit 6a6a5c3d0d
2024-08-30 11:47:08 -07:00
Arne Welzel
cfe47f40a4
Merge remote-tracking branch 'origin/topic/awelzel/spicy-ldap-krb-wrap-tokens'
...
* origin/topic/awelzel/spicy-ldap-krb-wrap-tokens:
ldap: Remove MessageWrapper with magic 0x30 searching
ldap: Harden parsing a bit
ldap: Handle integrity-only KRB wrap tokens
(cherry picked from commit 2ea3a651bd
2024-08-30 11:46:47 -07:00
Arne Welzel
6a6cc7f551
ldap: Fix substring filter parsing and rendering
...
The initial (prefix) and final (suffix) strings are specified individually
with a variable number of "any" matches that can occur between these.
The previous implementation assumed a single string and rendered it
as *<string>*.
Reported and PCAP provided by @martinvanhensbergen, thanks!
Closes zeek/spicy-ldap#27
2024-01-05 16:06:23 +01:00
Benjamin Bannier
d7db52dff6
Integrate spicy-ldap test suite
2023-10-10 09:21:57 +02:00
