Arne Welzel
6f65b88f1b
Merge remote-tracking branch 'origin/topic/awelzel/ldap-extended-request-response-starttls'
...
* origin/topic/awelzel/ldap-extended-request-response-starttls:
ldap: Add heuristic for wrap tokens
ldap: Ignore ec/rrc for sealed wrap tokens
ldap: Add LDAP sample with SASL-SRP mechanism
ldap: Reintroduce encryption after SASL heuristic
ldap: Fix assuming GSS-SPNEGO for all bindResponses
ldap: Implement extended request/response and StartTLS support
(cherry picked from commit 6a6a5c3d0d
2024-08-30 11:47:08 -07:00
Arne Welzel
cfe47f40a4
Merge remote-tracking branch 'origin/topic/awelzel/spicy-ldap-krb-wrap-tokens'
...
* origin/topic/awelzel/spicy-ldap-krb-wrap-tokens:
ldap: Remove MessageWrapper with magic 0x30 searching
ldap: Harden parsing a bit
ldap: Handle integrity-only KRB wrap tokens
(cherry picked from commit 2ea3a651bd
2024-08-30 11:46:47 -07:00
Arne Welzel
6a6cc7f551
ldap: Fix substring filter parsing and rendering
...
The initial (prefix) and final (suffix) strings are specified individually
with a variable number of "any" matches that can occur between these.
The previous implementation assumed a single string and rendered it
as *<string>*.
Reported and PCAP provided by @martinvanhensbergen, thanks!
Closes zeek/spicy-ldap#27
2024-01-05 16:06:23 +01:00
Benjamin Bannier
d7db52dff6
Integrate spicy-ldap test suite
2023-10-10 09:21:57 +02:00
