Skip to content

Instantly share code, notes, and snippets.

@ipcjk
Created May 16, 2020 16:10
Show Gist options
  • Save ipcjk/443edc3ca08c55729a0e9611c3f81ccd to your computer and use it in GitHub Desktop.
Save ipcjk/443edc3ca08c55729a0e9611c3f81ccd to your computer and use it in GitHub Desktop.
ipsec-tools racoon patch against ldap / active directory null authentication from 2009
diff -crB ipsec-tools-0.8-alpha20090422/src/racoon/isakmp_xauth.c joerg/ipsec-tools-0.8-alpha20090422/src/racoon/isakmp_xauth.c
*** ipsec-tools-0.8-alpha20090422/src/racoon/isakmp_xauth.c 2009-06-02 08:08:09.000000000 +0200
--- joerg/ipsec-tools-0.8-alpha20090422/src/racoon/isakmp_xauth.c 2009-06-02 08:08:18.000000000 +0200
***************
*** 893,898 ****
--- 893,905 ----
atlist[1] = NULL;
atlist[2] = NULL;
+ /* deny empty login */
+ if(strlen(usr) == 0 || strlen(pwd) == 0)
+ {
+ goto ldap_end;
+ }
+
+
/* build our initialization url */
tmplen = strlen("ldap://:") + 17;
tmplen += strlen(xauth_ldap_config.host->v);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment