Commit 3954d6fd authored by Patrick Monnerat's avatar Patrick Monnerat
Browse files

KNOWN_BUGS: openldap hangs. TODO: binary SASL.

parent bbe08a7e
Loading
Loading
Loading
Loading
+25 −0
Original line number Diff line number Diff line
@@ -76,6 +76,9 @@ problems may have been fixed or changed somewhat since this was written!
 11.1 Curl leaks .onion hostnames in DNS
 11.2 error buffer not set if connection to multiple addresses fails

 12. LDAP and OpenLDAP
 12.1 OpenLDAP hangs after returning results

==============================================================================

1. HTTP
@@ -423,3 +426,25 @@ problems may have been fixed or changed somewhat since this was written!
 only. But you only have IPv4 connectivity. libcurl will correctly fail with
 CURLE_COULDNT_CONNECT. But the error buffer set by CURLOPT_ERRORBUFFER
 remains empty. Issue: https://github.com/curl/curl/issues/544


12. LDAP and OpenLDAP

12.1 OpenLDAP hangs after returning results

 By configuration defaults, openldap automatically chase referrals on
 secondary socket descriptors. The OpenLDAP backend is asynchronous and thus
 should monitor all socket descriptors involved. Currently, these secondary
 descriptors are not monitored, causing openldap library to never receive
 data from them.

 As a temporary workaround, disable referrals chasing by configuration.

 The fix is not easy: proper automatic referrals chasing requires a
 synchronous bind callback and monitoring an arbitrary number of socket
 descriptors for a single easy handle (currently limited to 5).

 Generic LDAP is synchronous: OK.

 See https://github.com/curl/curl/issues/622 and
     https://curl.haxx.se/mail/lib-2016-01/0101.html
+5 −0
Original line number Diff line number Diff line
@@ -112,6 +112,7 @@
 16. SASL
 16.1 Other authentication mechanisms
 16.2 Add QOP support to GSSAPI authentication
 16.3 Support binary messages (i.e.: non-base64)

 17. Command line tool
 17.1 sync
@@ -668,6 +669,10 @@ that doesn't exist on the server, just like --ftp-create-dirs.
 with integrity protection) and auth-conf (Authentication with integrity and
 privacy protection).

16.3 Support binary messages (i.e.: non-base64)

  Mandatory to support LDAP SASL authentication.

17. Command line tool

17.1 sync