Update the server's DIGEST-MD5 SASL mechanism handler so that it provides s...

neil_a_wilson

11.52.2007 3576aae09ea6a0d594c71d27b0edd3f7e2abd157

 opends/src/server/org/opends/server/extensions/DigestMD5SASLMechanismHandler.java

@@ -594,8 +594,23 @@
      {
        responseDigestURI = tokenValue;

        // FIXME -- Add the ability to validate this URI, at least to check the
        // hostname.
        String serverFQDN = config.getServerFqdn();
        if ((serverFQDN != null) && (serverFQDN.length() > 0))
        {
          // If a server FQDN is populated, then we'll use it to validate the
          // digest-uri, which should be in the form "ldap/serverfqdn".
          String expectedDigestURI = "ldap/" + serverFQDN;
          if (! expectedDigestURI.equalsIgnoreCase(responseDigestURI))
          {
            bindOperation.setResultCode(ResultCode.INVALID_CREDENTIALS);

            int    msgID   = MSGID_SASLDIGESTMD5_INVALID_DIGEST_URI;
            String message = getMessage(msgID, responseDigestURI,
                                        expectedDigestURI);
            bindOperation.setAuthFailureReason(msgID, message);
            return;
          }
        }
      }
      else if (tokenName.equals("response"))
      {