Howard Chu
b886c2ad8a
ITS#5937 fix ancient IPv6 typo
2009-02-10 13:27:22 +00:00
Pierangelo Masarati
2b95e7d288
partially addresses an issue with ITS#5931
2009-02-10 12:44:12 +00:00
Howard Chu
80c6ea52ea
ITS#5853 restructure wait4msg / try_read1msg again. Consolidate
...
the two try_read1msg cases into one, bump refcnts to prevent
lconn's from being freed prematurely.
2009-02-10 09:51:31 +00:00
Howard Chu
fbf42baefa
ITS#5934 fix NULL pointer deref
2009-02-09 21:14:46 +00:00
Howard Chu
4bc8cb6336
ITS#5928 hide all ldap_pvt_tls APIs when !HAVE_TLS
2009-02-08 03:25:48 +00:00
Howard Chu
bc486f123d
Fix spinner in prev commit
2009-02-05 10:07:20 +00:00
Howard Chu
d0515c4017
ITS#5922 with namespace changes
2009-02-05 09:38:07 +00:00
Howard Chu
ff8838aa28
ITS#5920 restore old HAS_TLS test
2009-02-04 08:56:04 +00:00
Howard Chu
2b08e96b53
ITS#5916 - externally callable functions are ldap_pvt, not ldap_int.
2009-02-02 21:14:34 +00:00
Pierangelo Masarati
0ded1f16d5
Allow alias dereferencing in search C API; use new API in proxy backends (ITS#5916)
2009-01-31 10:27:07 +00:00
Hallvard Furuseth
ff08c4194c
Cleanup - macroize magic constant (ITS#5909)
2009-01-30 14:14:22 +00:00
Howard Chu
7aa5ae49ca
Modular TLS
2009-01-27 01:01:41 +00:00
Howard Chu
08905d6792
ITS#5789 again
2009-01-26 21:08:55 +00:00
Howard Chu
f59ce2b9a1
ITS#5462 add randfile support for gcrypt 1.4
2009-01-26 03:41:27 +00:00
Howard Chu
2558951251
ITS#5887 add native support for cipher suites for GnuTLS >= 2.2.0
2009-01-26 03:21:16 +00:00
Howard Chu
f9fd0f0cc4
ITS#5655 for new structure
2009-01-26 02:16:46 +00:00
Howard Chu
4dff3e6807
Switch to using modular TLS code, single-implementation version
2009-01-26 02:06:45 +00:00
Howard Chu
988fb232d2
ITS#5896 don't return immediately on Intermediate responses
2009-01-24 07:18:35 +00:00
Howard Chu
cf1558659b
ITS#5655 TLS_PROTOCOL_MIN from Philip Guenther
2009-01-24 03:34:49 +00:00
Kurt Zeilenga
4af9eb9715
Update copyright notices
2009-01-22 00:40:04 +00:00
Ralf Haferkamp
af79710c4d
Fixed typo
2008-12-12 10:08:07 +00:00
Pierangelo Masarati
7681642bcf
fix LDAP deref control response; fix tool response handling; add lutil_memcopy() for API uniformity (more about ITS#5768)
2008-12-11 23:17:08 +00:00
Ralf Haferkamp
5977f20127
Avoid locking up slapd when paused during shutdown (ITS#5841), reverting
...
r1.81
2008-12-09 10:57:15 +00:00
Howard Chu
187efdad6c
ITS#5849 free peer cert after retrieving DN
2008-12-05 09:00:24 +00:00
Howard Chu
5a8954f9de
ITS#5768 - add deref.
2008-11-25 04:43:38 +00:00
Howard Chu
a6933cae27
Fix prev commit
2008-11-21 05:15:20 +00:00
Howard Chu
86b5de38be
ITS#5812 add SASL_NOCANON / -N option
2008-11-21 03:30:15 +00:00
Howard Chu
0bd6ce1062
ITS#4750 only read LDAP_CONF_FILE if geteuid() != getuid()
2008-11-21 02:15:47 +00:00
Pierangelo Masarati
2eeefd4985
check for bogus params to an LDAP routine (ITS#5817)
2008-11-18 16:27:50 +00:00
Hallvard Furuseth
c7002ffed5
ITS#5815: Fix typo "#elif defined( MAXHOSTNAMELEN".
2008-11-16 22:52:56 +00:00
Howard Chu
36124c715a
ITS#5789 GNUtls - allow CN matches against IP addresses
2008-11-04 11:21:52 +00:00
Howard Chu
24078323e2
ITS#5739 fix for ITS#4879 was too eager about IPv6 detection
2008-11-03 15:44:49 +00:00
Hallvard Furuseth
8690650121
ITS#4467: Fix ptr += snprintf buffer overflow tests (made out-of-range ptr).
...
Also avoid a buf[BUFSIZ] initialization.
2008-10-24 13:11:10 +00:00
Pierangelo Masarati
6bedf74c41
tag optional stuff
2008-10-22 23:38:09 +00:00
Pierangelo Masarati
91e14ca638
add support for (experimental) dereference control (ITS#5768); need to re-run autoconf (and autoheader?)
2008-10-22 22:19:49 +00:00
Pierangelo Masarati
2b95616768
missing $OpenLDAP$ header
2008-10-22 21:57:28 +00:00
Hallvard Furuseth
677a11ad26
ITS#5748: tavl_find3(NULL,,,) returned undefined data
2008-10-22 19:39:42 +00:00
Ralf Haferkamp
e8c1147b77
reset ld->ld_errno to avoid returning error codes of previously API calls (ITS#5762)
2008-10-21 16:17:41 +00:00
Hallvard Furuseth
08852acb80
Warning cleanup: signed meets unsigned, remove assert(unsigned >= 0).
2008-10-17 23:24:48 +00:00
Hallvard Furuseth
b464a790b8
Fix Debug(%d, scred->bv_len or -1) -> Debug(%ld, (long) scred->bv_len or -1L).
...
Cast sasl_encode() arg from unsigned char* to char*.
Warning cleanup: signed meets unsigned.
2008-10-17 20:46:44 +00:00
Hallvard Furuseth
1c85cf3c88
Warning cleanup: signed meets unsigned. ber_flatten2() returns -1 on
...
error, not LBER_ERROR.
2008-10-13 08:44:54 +00:00
Hallvard Furuseth
03a729673c
Warning cleanup: signed meets unsigned.
2008-10-13 08:13:27 +00:00
Howard Chu
9078381252
Cleanup unused defs
2008-10-09 11:33:49 +00:00
Howard Chu
4294664aad
ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
...
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups
2008-10-09 11:10:28 +00:00
Howard Chu
f7484f78e6
ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
...
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups
2008-10-09 10:51:28 +00:00
Howard Chu
b2432fdbf2
Add SASL_MECHLIST option to retrieve list of known SASL mechs
2008-10-09 09:28:39 +00:00
Howard Chu
c51252633b
Accept X-starttls for prev commit
2008-10-07 03:13:00 +00:00
Howard Chu
809548c88b
Handle StartTLS in URL extensions
2008-10-07 03:06:44 +00:00
Howard Chu
99186a90e0
Fix prev commit
2008-09-30 22:22:31 +00:00
Howard Chu
721264db13
ITS#5720 fix ldap_utf8_strchr arguments
2008-09-30 05:05:53 +00:00
Ralf Haferkamp
0f4f9c9c13
Avoid "label at end of compound statement" error of newer gcc
2008-09-19 12:58:00 +00:00
Pierangelo Masarati
43ae03fc10
silence warnings
2008-09-16 14:10:02 +00:00
Pierangelo Masarati
548a9f39ba
fix '<hex>'H conversion issue; did not look at decimal yet (ITS#5699)
2008-09-13 18:46:50 +00:00
Howard Chu
178141d7ec
ITS#5668 avoid overflows in Windows microsecond computation
2008-09-11 01:51:02 +00:00
Pierangelo Masarati
4aa9edf03e
cleanup round of memory handling (either check results or use ch_* calls; ITS#5691)
2008-09-09 19:58:47 +00:00
Howard Chu
cc94023c98
ITS#5677 s/TLS_CRL/TLS_CRLFILE/
2008-09-02 22:10:44 +00:00
Howard Chu
0dbeb1d87b
Pass LDAPURLDescs to connect functions instead of host/port
2008-08-15 22:53:47 +00:00
Howard Chu
46049f1d13
Fix prev commit
2008-08-15 10:53:11 +00:00
Howard Chu
baad2b249d
Connect callbacks need error recovery checks
2008-08-15 10:23:29 +00:00
Howard Chu
80d1dba901
Add LDAP_OPT_CONNECT_CB connection callbacks
2008-08-14 04:54:32 +00:00
Howard Chu
a225b02f17
Modular TLS support, proof of concept. tls2.c would replace tls.c,
...
but I'm leaving tls.c intact for now.
2008-08-13 16:18:51 +00:00
Hallvard Furuseth
4028c83c67
ber_decode_oid(): Fix typo in comment
2008-08-06 13:36:53 +00:00
Hallvard Furuseth
4f935126c4
ITS#5604: Normalize lutil_progname(): strip .exe from Windows executable names
2008-07-22 10:16:11 +00:00
Howard Chu
7d479302c0
ITS#5615 return success on Solaris 10
2008-07-15 20:07:36 +00:00
Howard Chu
27fc008761
Protect errno values from Debug
2008-07-02 16:43:51 +00:00
Howard Chu
aebcd93721
ITS#5580: Revert prev commit, failed on byte-at-a-time input. Different
...
approach used here.
2008-07-02 01:33:15 +00:00
Howard Chu
7e4ba700f1
ITS#5585 GnuTLS key strength is in bytes, we expected bits
2008-06-30 23:32:35 +00:00
Howard Chu
14f1138ab5
ITS#5580 fix length decoding, verified with PROTOS
2008-06-27 02:36:41 +00:00
Howard Chu
9ef6cc3cd4
ITS#5577 GnuTLS CRL result >0 is success
2008-06-24 20:14:30 +00:00
Pierangelo Masarati
7e3c9a07e9
add client API for assertion control (ITS#5560)
2008-06-14 17:49:47 +00:00
Howard Chu
99160d7c20
ITS#5542 fix loop iterator
2008-05-30 17:29:47 +00:00
Howard Chu
19d7e565f0
ITS#5318 drop invalid msgids, cleanup msgid logging
2008-05-28 01:19:43 +00:00
Howard Chu
96550c885d
ITS#5518,#5525 cleanup ld_defconn if it was freed
2008-05-23 09:53:42 +00:00
Howard Chu
ce27143ce7
ITS#5519 add missing stubs
2008-05-20 11:23:19 +00:00
Hallvard Furuseth
1fc3f1c130
ITS#5507: Set FD_CLOEXEC (close on exec) flag on LDAP file descriptors
2008-05-15 20:56:41 +00:00
Howard Chu
8810ef26b6
ITS#5458 fix error message for missing closing paren
2008-04-10 18:36:15 +00:00
Hallvard Furuseth
c55a06254f
ITS#5436: make htons() port number unsigned
2008-03-18 21:12:00 +00:00
Hallvard Furuseth
00be565264
ITS#5407 cleanup (make pool_pause & pool_pausecheck wrappers for handle_pause)
2008-03-10 13:21:24 +00:00
Howard Chu
a287573d2d
ITS#5407 more checks for pool pausing
2008-03-08 23:51:07 +00:00
Howard Chu
50cb332390
Use memctx more consistently
2008-03-04 07:24:05 +00:00
Hallvard Furuseth
7859063553
ITS#5364 cleanup
...
Fix rev 1.91 patch: Reset ltp_pending_count when flushing ltp_pending_list.
Remove flush_pending_list() again and the now-unnecessary 2nd call to it.
Help the compiler a little.
Move ltp_work_list in case it makes a difference for caching.
Move mutex unlock in pool_destroy() to make concurrency debuggers happier.
2008-02-11 15:49:52 +00:00
Hallvard Furuseth
650aaee3a5
ITS#5364, reduce work with ltp_mutex locked:
...
Negate ltp_open_count when paused, avoids an ltp_pause test in pool_submit().
2008-02-10 18:16:44 +00:00
Hallvard Furuseth
8afd0b05c1
ITS#5364: introduce ltp_work_list, drop 1st ltp_pause loop in pool_wrapper().
2008-02-10 17:55:13 +00:00
Hallvard Furuseth
fe86a1cbe5
ITS#5364: maintain value ltp_vary_open_count
2008-02-10 17:38:32 +00:00
Hallvard Furuseth
ee73fca523
ITS#5364, reduce work with ltp_mutex locked:
...
Replace ltp_state with ltp_finishing. Drop state
LDAP_INT_THREAD_POOL_STOPPING, flush pending list instead.
ltp_max_pending = default value instead of 0, and negative when finishing.
2008-02-10 17:28:20 +00:00
Hallvard Furuseth
6dd87bb83f
ITS#5364, thread pool efficiency:
...
Add ldap_pvt_thread_pool_pausing(): pause check for slapd without locking.
Make counters int instead of long; INT_MAX pending tasks is enough.
Nitpick cleanup: goto failure instead of if() to not-failure in _submit().
2008-02-10 16:15:30 +00:00
Howard Chu
68316527c4
ITS#5341 GnuTLS ciphersuite parsing
2008-02-10 11:58:16 +00:00
Pierangelo Masarati
b0b387e9ed
ITS#5338
2008-01-25 00:00:30 +00:00
Howard Chu
5cf0b5175b
ITS#5324 don't use %n
2008-01-11 06:39:50 +00:00
Hallvard Furuseth
cd63a0c43b
Warning cleanup: function ptr <=> void* at ldap_pvt_thread_pool_<set/get>key()
2008-01-11 06:07:43 +00:00
Hallvard Furuseth
2660518c5d
ldap_int_bisect_find(): Silence harmless "may be used uninitialized" warning
2008-01-10 18:34:40 +00:00
Hallvard Furuseth
ac914f96a0
#include <signal.h> for pthread_kill()
2008-01-10 16:24:07 +00:00
Ralf Haferkamp
5a143df3ce
Corrected memory allocation for cookie (ITS#5315)
2008-01-09 13:28:09 +00:00
Kurt Zeilenga
c890c96d13
Happy New Year (belated)
2008-01-08 00:19:56 +00:00
Pierangelo Masarati
30f401c628
rename ldap_pvt_thread_pool_setkey_x() to ldap_pvt_thread_pool_setkey() (as part of ITS#5309)
2008-01-07 21:35:03 +00:00
Hallvard Furuseth
4a2cda3cff
ITS#5309: complete the addition of ldap_pvt_thread_pool_setkey_x()
2008-01-07 20:04:46 +00:00
Howard Chu
f41322d8ef
Fix prev commit
2008-01-03 08:25:58 +00:00
Pierangelo Masarati
859c6d03c0
fix to ITS#5304
2008-01-02 17:30:40 +00:00
Pierangelo Masarati
622c4d3884
new ldap_pvt_thread_pool_setkey API
2007-12-29 18:14:54 +00:00
Howard Chu
cd673c2ff2
ITS#5300, reject substring filters with empty values
2007-12-29 02:32:22 +00:00