auth

Jan 25, 2025

Changes in this version

+ type ContextData struct

+ Password string

+ Username string

type SASLAuth

+ EnableLogin bool

May 29, 2023

Changes in this version

type SASLAuth

+ AuthMap module.Table

+ AuthNormalize authz.NormalizeFunc

Jul 1, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 23, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 23, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Mar 6, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Feb 16, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Oct 11, 2021 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Sep 22, 2021 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0378: MD5 hash support in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Aug 9, 2021 GO-2022-0306 +3 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2022-0378: MD5 hash support in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Changes in this version

+ var ErrInvalidAuthCred = errors.New("auth: invalid credentials")

Apr 11, 2021 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Dec 13, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Nov 21, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Oct 23, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Aug 23, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jul 24, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 18, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 2, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

May 31, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

May 14, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Mar 26, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Changes in this version

+ var ErrUnsupportedMech = errors.New("Unsupported SASL mechanism")

+ type FailingSASLServ struct

+ Err error

+ func (s FailingSASLServ) Next([]byte) ([]byte, bool, error)

+ type SASLAuth struct

+ Log log.Logger

+ OnlyFirstID bool

+ Plain []module.PlainAuth

+ func (s *SASLAuth) AddProvider(m *config.Map, node config.Node) error

+ func (s *SASLAuth) AuthPlain(username, password string) error

+ func (s *SASLAuth) CreateSASL(mech string, remoteAddr net.Addr, successCb func(identity string) error) sasl.Server

+ func (s *SASLAuth) SASLMechanisms() []string

Feb 23, 2020 GO-2022-0306 +1 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

Feb 22, 2020 GO-2022-0306 +1 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

Changes in this version

+ func CheckDomainAuth(username string, perDomain bool, allowedDomains []string) (loginName string, allowed bool)