129 Commits

Author	SHA1	Message	Date
Pierangelo Masarati	112be0118e	cleanup states/timeout handling in back-ldap/meta; add connection pooling and defer of pseudoroot bind to back-meta	2005-09-24 18:39:26 +00:00
Pierangelo Masarati	fb3fc81c7e	improved authz_backend detection for internal databases (ITS#4018)	2005-09-10 09:56:29 +00:00
Pierangelo Masarati	866148810e	release resources (ITS#4016)	2005-09-09 02:37:38 +00:00
Pierangelo Masarati	075220dd7e	need some minimal timeout otherwise strange issues occur	2005-08-22 18:14:41 +00:00
Pierangelo Masarati	15d1b4d5dd	cleanup locking	2005-08-20 19:00:56 +00:00
Pierangelo Masarati	5873048347	fix return code (prevents clean usage of back-ldap for internal searchs)	2005-08-17 19:38:36 +00:00
Hallvard Furuseth	a0b5f5138b	Remove unused label "error_return"	2005-08-16 19:45:50 +00:00
Pierangelo Masarati	7b9173d0bb	should compile also when #undef HAVE_TLS	2005-08-12 10:51:39 +00:00
Pierangelo Masarati	a23466f64a	should compile also when #undef HAVE_TLS	2005-08-12 10:49:55 +00:00
Pierangelo Masarati	c6e2a69f27	fix tls propagation, including rebind	2005-08-11 16:01:24 +00:00
Pierangelo Masarati	fa27310d77	use trylock only where necessary	2005-08-07 00:35:11 +00:00
Pierangelo Masarati	4ed743cc84	remove unrequired member; address ITS#3913	2005-08-02 22:48:30 +00:00
Pierangelo Masarati	4148ddc31f	save 1 function call...	2005-08-02 08:13:16 +00:00
Pierangelo Masarati	a91ebfac79	plug leaks	2005-07-25 20:47:39 +00:00
Pierangelo Masarati	3e84f692aa	there might definitely be concurrency issues, but it's not pooled connections' fault	2005-07-23 22:03:35 +00:00
Pierangelo Masarati	e810105f87	(mostly) reverting previous commit (overconservative)	2005-07-23 22:02:12 +00:00
Pierangelo Masarati	796316bc84	strengthen concurrency protection	2005-07-23 19:39:51 +00:00
Pierangelo Masarati	6adfb5dd2f	note an issue	2005-07-22 03:23:26 +00:00
Hallvard Furuseth	81ecb0b153	assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL).	2005-07-18 06:22:33 +00:00
Pierangelo Masarati	681a547e13	fix potential deadlock	2005-07-04 22:41:27 +00:00
Pierangelo Masarati	982981d465	fix potential deadlock; improve idassert in case of authzFrom rules (new flag values); rootdn can always idassert	2005-07-03 23:27:56 +00:00
Pierangelo Masarati	1aaa18b180	more on ITS#3808	2005-06-29 18:16:29 +00:00
Pierangelo Masarati	9e811df052	seems to definitely fix issues related to ITS#3808	2005-06-29 16:38:09 +00:00
Pierangelo Masarati	cbe9c74675	return LDAP_SUCCESS if Start TLS failed but was not critical	2005-06-29 12:38:18 +00:00
Pierangelo Masarati	671b02f748	more on ITS#3808	2005-06-29 12:28:40 +00:00
Pierangelo Masarati	196af0e056	(partial?) fix ITS#3808	2005-06-29 11:44:11 +00:00
Pierangelo Masarati	a7f44159c1	complete back-config support, including chain overlay; passes all tests; HEADS-UP: few syntax changes (essentially backwards compatible)	2005-05-23 07:25:00 +00:00
Pierangelo Masarati	471f4772a0	cleanup connection locking	2005-04-21 00:49:35 +00:00
Pierangelo Masarati	a141e3badf	enable use of asynchronous call to StartTLS	2005-04-16 02:56:46 +00:00
Pierangelo Masarati	5affbfa428	add SASL bind for acl-authc; use slap_bindconf	2005-04-10 23:44:06 +00:00
Pierangelo Masarati	edfbbeb653	clarify comment	2005-02-19 16:55:14 +00:00
Pierangelo Masarati	f8b463d0bc	use asynchronous StartTLS	2005-02-19 16:14:22 +00:00
Howard Chu	beaeb5ed5c	Fix if HAVE_TLS is missing	2005-02-18 04:20:56 +00:00
Pierangelo Masarati	e50092878d	temporarily revert to synchronous start tls	2005-02-05 17:33:22 +00:00
Pierangelo Masarati	43138aa500	use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup	2005-02-05 15:55:02 +00:00
Howard Chu	122cdf4549	In ldap_back_bind, don't send success result, frontend does it	2005-02-01 00:19:45 +00:00
Pierangelo Masarati	cfc77f0a0a	make referrals chasing optional (default is to chase them)	2005-01-30 22:56:59 +00:00
Pierangelo Masarati	3dd2f4150b	allow proxyAuthz of users authenticated via SASL	2005-01-26 20:01:02 +00:00
Pierangelo Masarati	c6b6d2a5ec	StartTLS (ITS#3507) + chain overlay fixes and improvements	2005-01-24 09:38:11 +00:00
Pierangelo Masarati	1d919d35a5	remove #ifdef's for identity assertion	2005-01-20 09:04:37 +00:00
Pierangelo Masarati	41d7c03e8b	clear out the error	2005-01-09 23:30:19 +00:00
Pierangelo Masarati	cd2e651c26	ITS#3469: C99 compliance	2005-01-08 11:25:11 +00:00
Pierangelo Masarati	4d8267595f	retry on ldap_result() with a timeout	2005-01-08 09:19:51 +00:00
Kurt Zeilenga	dc0eacd40b	Happy New Year!	2005-01-01 20:49:32 +00:00
Pierangelo Masarati	fefa59059d	minor cleanup	2004-12-08 19:11:27 +00:00
Pierangelo Masarati	f176935a58	remove rewrite stuff -- now delegted to rwm overlay	2004-11-13 14:43:30 +00:00
Pierangelo Masarati	dd367a2b78	make sure we're comparing the same database	2004-11-11 13:12:34 +00:00
Howard Chu	55f12a7eee	Add a retry for failed connections	2004-10-01 11:16:38 +00:00
Kurt Zeilenga	d611a4b49a	unifdef -UNEW_LOGGING	2004-09-04 04:54:28 +00:00
Pierangelo Masarati	a7b55f4f44	assert administrative identity instead of the required one if doing auth check in non-caching mode	2004-07-23 00:11:05 +00:00