ozten/sasl-browserid — Issue #4: larger key breaking sasl library
Author: ozten
Created: 2011-11-02 16:04:59+00:00
State: open

We currently send the assertion in the CB_AUTHNAME field. The latest assertions in production are larger than the max allowed for this field and are causing SASL_BUFOVER to be returned when we try to canonicalize the authname.

result = params->canon_user(params->utils->conn, browser_assertion, 0,
SASL_CU_AUTHZID, oparams);

This causes the server plugin to quit early and auth to fail.

Areas to explore:
* User different fields
* Figure out max lengths
* Make a multi-step protocol based on max output length
* ???