The LdapRelay class helps Mechanism relay SASL challenges and responses to and from an LDAP server. If the LDAP server accepts the authentication, then the user is accepted as an Archiveopteryx user.
The LdapRelay state machine contains the following states:
Working: The LDAP server still hasn't answered.
BindFailed: We should reject this authentication.
BindSucceeded: We should accept this authentication.
The implementation is based on RFC 4511.
Constructs an LdapRelay to verify whatever mechanism needs.
Sends a single bind request.
This private helper sets the state and logs error.
Parses the response the server sends, which has to be a bind response.
Reacts to incoming packets from the LDAP server, changes the object's state, and eventually notifies the Mechanism. e is as for Connection::react().
Returns the address of the LDAP server used.
Returns the relay object's current state.
This private helper sets the state and logs.
Sends an unbind request.
This web page based on source code belonging to The Archiveopteryx Developers. All rights reserved.