From d5136156ba19df5ed6ccd4683868c6010f9cde4f Mon Sep 17 00:00:00 2001 From: "gabi.beyo" Date: Thu, 11 Apr 2019 15:07:21 +0300 Subject: [PATCH] disable special authentication modes. Support Simle Authentication mode only --- README.md | 8 +------- .../src/main/java/com/imperva/ddc/core/Driver.java | 1 - .../ddc-core-properties/communication.properties | 4 +--- 3 files changed, 2 insertions(+), 11 deletions(-) diff --git a/README.md b/README.md index fc909be..97f9528 100644 --- a/README.md +++ b/README.md @@ -470,13 +470,7 @@ DDC enables querying Directory Servers in secured mode by just setting the setSe By default, DDC ignores all standard certificates validations, in order to change this behaviour set the following flag: ignore.ssl.cert.chain.exception=true to **false**. ##### Authentication Mode -DDC enables setting a default authentication mode. The default mode is set to GSSAPI, in order to change this behaviour set the following flag: authentication.mechanism=GSSAPI to any of the following supported modes: -- CRAM-MD5 -- DIGEST-MD5 -- GSSAPI -- PLAIN -- NTLM -- GSS-SPNEGO +DDC supports Simple Authentication mode only ##### Connection Timeout DDC enables setting a default timeout to DDC's queries. The default timeout value is set to 5000 seconds, in order to change this behaviour set the following flag connection.timeout=5000 to a different timeout value. diff --git a/source/ddc-core/src/main/java/com/imperva/ddc/core/Driver.java b/source/ddc-core/src/main/java/com/imperva/ddc/core/Driver.java index fc8e7e7..85cef7f 100644 --- a/source/ddc-core/src/main/java/com/imperva/ddc/core/Driver.java +++ b/source/ddc-core/src/main/java/com/imperva/ddc/core/Driver.java @@ -139,7 +139,6 @@ private LdapConnection getLdapConnection(Endpoint endpoint, DestinationType dest ((LdapNetworkConnection) connection).getConfig().setTimeout(timeout); } BindRequest bindRequest = new BindRequestImpl(); - bindRequest.setSaslMechanism(DDCProperties.getInstance().getProperty("authentication.mechanism").toUpperCase());//* SupportedSaslMechanisms.PLAIN bindRequest.setCredentials(password); bindRequest.setSimple(true); if (accountNameType == AccountNameType.DOMAIN_USERNAME) diff --git a/source/ddc-core/src/main/resources/ddc-core-properties/communication.properties b/source/ddc-core/src/main/resources/ddc-core-properties/communication.properties index 99b4fb8..4743ad6 100644 --- a/source/ddc-core/src/main/resources/ddc-core-properties/communication.properties +++ b/source/ddc-core/src/main/resources/ddc-core-properties/communication.properties @@ -1,4 +1,2 @@ ignore.ssl.cert.chain.exception=false -connection.timeout=5000 -# Supported values:CRAM-MD5,DIGEST-MD5,GSSAPI,PLAIN,NTLM,GSS-SPNEGO -authentication.mechanism=GSSAPI \ No newline at end of file +connection.timeout=5000 \ No newline at end of file