[Os-sim-devel] LDAP v2 vs v3

[Branson M. <br...@sa...>]

Hey all,

 I played with OSSIM at Shmoocon, and have installed it in my office and am starting to play with it. I found a small issue you might wanna resolve: the LDAP stuff won't bind to a v3 (OpenLDAP default or OpenDirectory ) server because the default ldap_bind uses v2.  This was simply solved thusly:

ro...@ja... # diff Session.inc Session.inc.orig 
285,288d284
< 
<       #-- handle LDAP v3 binds
<         ldap_set_option($con, LDAP_OPT_PROTOCOL_VERSION, 3);
< 

 I'd recommend adding a config var in the user-auth stuff to allow for v3 binds.  Also .. while stunnel is a way to handle a TLS binding .. might be worth putting the code in to handle ldaps:// vs ldap://. I'd be willing to write that if you'd like it.  If there's someone that handles this area of the codebase.. please ping me and I can write the diffs up for you.  Thanks.

-b 

Branson Matheson
br...@sa...
Office: 757-320-4230 x6010
Cell: 757 560 2647