Affected by GO-2022-0306 and 2 other vulnerabilities

GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

auth

package

v0.2.1 Latest Latest Go to latest Published: May 14, 2020 License: MIT Imports: 9 Imported by: 0

Details

This section is empty.

View Source

var (
	ErrUnsupportedMech = errors.New("Unsupported SASL mechanism")
)

func CheckDomainAuth(username string, perDomain bool, allowedDomains []string) (loginName string, allowed bool)

type FailingSASLServ struct{ Err error }

func (s FailingSASLServ) Next([]byte) ([]byte, bool, error)

type SASLAuth struct {
	Log         log.Logger
	OnlyFirstID bool

	Plain []module.PlainAuth
}

SASLAuth is a wrapper that initializes sasl.Server using authenticators that call maddy module objects.

It supports reporting of multiple authorization identities so multiple accounts can be associated with a single set of credentials.

func (s *SASLAuth) AddProvider(m *config.Map, node config.Node) error

AddProvider adds the SASL authentication provider to its mapping by parsing the 'auth' configuration directive.

func (s *SASLAuth) AuthPlain(username, password string) error

func (s *SASLAuth) CreateSASL(mech string, remoteAddr net.Addr, successCb func(identity string) error) sasl.Server

CreateSASL creates the sasl.Server instance for the corresponding mechanism.

func (s *SASLAuth) SASLMechanisms() []string

Path	Synopsis
external
pam
pass_table
plain_separate
shadow shadow package implements utilities for parsing and using shadow password database on Unix systems.	shadow package implements utilities for parsing and using shadow password database on Unix systems.