Commit Graph

435 Commits

Author SHA1 Message Date
Luke Howard
ffe20229dc Move most of SLAPI frontend into overlay 2005-07-21 16:35:20 +00:00
Luke Howard
0bf8a366a5 SLAPI cleanups 2005-07-21 08:39:37 +00:00
Luke Howard
0acd5d97bd Check op->o_bd != NULL 2005-07-19 08:40:26 +00:00
Hallvard Furuseth
81ecb0b153 assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL). 2005-07-18 06:22:33 +00:00
Howard Chu
5d2ba11ad9 ITS#3847 silence warnings 2005-07-11 12:11:15 +00:00
Pierangelo Masarati
f7541b5e8d cleanup 2005-06-19 22:43:45 +00:00
Howard Chu
f84fc983fd ITS#3774 delete backend/overlay structures after a failed add 2005-06-13 22:49:01 +00:00
Kurt Zeilenga
31727f0f4d Additional manageDIT changes.
Now require be_isroot() instead of "manage".
2005-05-13 21:09:26 +00:00
Kurt Zeilenga
cfb3f81582 Control cleanup 2005-05-13 02:34:16 +00:00
Howard Chu
55585110bf ITS#3608 - ignore unavailable non-critical controls 2005-05-13 01:35:20 +00:00
Howard Chu
6a2d53f396 In backend_group, return LDAP_COMPARE_FALSE if attr exists but value is
not matched, instead of LDAP_NO_SUCH_ATTRIBUTE
2005-05-04 06:28:27 +00:00
Howard Chu
b5ef8ea6f4 More modify support. ACL editing works. 2005-04-19 16:39:48 +00:00
Pierangelo Masarati
f6d136a99a fix overlay access control; cleanup 2005-04-18 09:16:26 +00:00
Pierangelo Masarati
a6f8cd07f6 partially revert previous commit (ITS#3652) 2005-04-13 01:03:46 +00:00
Pierangelo Masarati
a85603c10b more on ITS#3652 2005-04-12 22:38:54 +00:00
Pierangelo Masarati
15016154b6 add ACL hook to overlays 2005-04-12 00:24:04 +00:00
Pierangelo Masarati
f43f7b1bfb cleanup listener permissions 2005-04-04 10:42:50 +00:00
Howard Chu
5a66d7de66 Fix prev commit 2005-03-24 06:06:40 +00:00
Howard Chu
0076b40c32 Convert backendInfo/backendDB to STAILQs 2005-03-24 05:13:31 +00:00
Howard Chu
2da2336ac6 Reorganiza SLAPD_CRYPT and SLAPD_SPASSWD support for better reentrancy 2005-03-18 06:06:38 +00:00
Howard Chu
b06eea3d99 Delete unused syncrepl_pool 2005-02-11 10:20:16 +00:00
Pierangelo Masarati
d503b5a5b7 make frontend-generated attrs available to backend's hook 2005-01-31 00:14:00 +00:00
Pierangelo Masarati
7cd731ec56 "ultimate" fix of glued databases controls checking; other minor fixes 2005-01-30 22:02:37 +00:00
Pierangelo Masarati
4f9b916b61 now works 2005-01-29 22:04:34 +00:00
Pierangelo Masarati
ff89b2c14c looks a little better (but test033 doesn't work any more; disabling) 2005-01-29 19:04:06 +00:00
Pierangelo Masarati
cd797f8089 avoid cycling twice in the control list 2005-01-29 18:16:38 +00:00
Pierangelo Masarati
d0b804c439 use direct access instead of string comparison to check supported controls 2005-01-29 17:58:48 +00:00
Kurt Zeilenga
1ff692274a Removed control old kludge code 2005-01-27 23:06:57 +00:00
Pierangelo Masarati
4d5068630c cleanup 2005-01-27 08:55:13 +00:00
Kurt Zeilenga
e826914a88 Less kludgy willing-to-perform check for recognized and appropriate
global controls
2005-01-27 06:45:20 +00:00
Pierangelo Masarati
362766b316 move compare to frontend (disabled by default, only invoked if backend doesn't provide hook); honor ITS#3472 (disclose access check); fix ITS#3521 as well (check access to hasSubordinates); fix a problem in backend_attribute() with operational attrs; add backend_access() helper 2005-01-26 23:19:48 +00:00
Kurt Zeilenga
ab455a5ec7 Place control availability kludge behind
#ifdef SLAP_CONTROL_AVAILABILITY_KLUDGE
for now.  Me think its still needed (at least for FRONTEND controls).
2005-01-26 19:46:12 +00:00
Pierangelo Masarati
5ec9684894 controls can be added in two passes (e.g. by backends that actually inherit their controls from someone else) 2005-01-26 10:28:37 +00:00
Pierangelo Masarati
9e6d64a0ad move supported controls listing at backend startup; allow supported controls to be set/mucked in between 2005-01-26 09:53:29 +00:00
Pierangelo Masarati
5b193c218f fix dynamically registered controls check; NOTE: controls registered by global overlays don't work yet; better leave Kurt's kludge in place right now 2005-01-25 19:39:56 +00:00
Kurt Zeilenga
0bd2dafd53 More proper criticality handling. Implementation is a kludge. 2005-01-25 18:30:55 +00:00
Kurt Zeilenga
d68041ce50 Revert part of last (two) commits. Need additional infrastructure first. 2005-01-25 18:09:59 +00:00
Kurt Zeilenga
82d5ca4d4e Remove redundant note. 2005-01-25 17:40:39 +00:00
Kurt Zeilenga
dd75979100 Prelim unavailableCriticalExtension v. unwillingToPerform fix (ITS#3308) 2005-01-25 16:52:16 +00:00
Pierangelo Masarati
066829a870 fix previous commit 2005-01-22 12:27:45 +00:00
Pierangelo Masarati
f0943f79ec fix previous commit 2005-01-21 15:05:15 +00:00
Pierangelo Masarati
4f23e2e470 cleanup 2005-01-19 23:52:51 +00:00
Pierangelo Masarati
7d306eaadb try to collect operational attributes as well 2005-01-19 22:58:56 +00:00
Howard Chu
f845c573b0 Single consumer context per database 2005-01-13 21:15:50 +00:00
Howard Chu
bf27ba977b Deleted syncrepl updatedn 2005-01-13 18:51:29 +00:00
Kurt Zeilenga
7dc0b02fc9 Replace backend.h with backends.c, generated by config.status. 2005-01-09 08:42:44 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Howard Chu
b3dfae907f Remove obsolete comment 2004-12-17 10:24:54 +00:00
Howard Chu
fc9b1b7aca Delete unused be_context_csn, cleanup pending csn entry 2004-12-06 23:17:58 +00:00
Howard Chu
30a6f4d24d Better fix for ITS#3365, manage back-bdb's read locks so frontend/etc.
don't need to worry about them.
2004-12-05 02:00:19 +00:00
Howard Chu
5c8fd8bf11 Rename syncrepl_rq to slapd_rq, move to daemon.c 2004-12-03 16:49:23 +00:00
Howard Chu
f83b55b2a2 Avoid segfault if backend_destroy is called before frontendDB is created 2004-12-02 08:59:02 +00:00
Howard Chu
d3ced75fe7 Add SLAP_DBFLAG_OVERLAY 2004-11-27 11:45:54 +00:00
Howard Chu
584d5355b8 Fix overlay aux_operational, add contextCSN as operational attribute
of suffix entry
2004-11-27 08:30:44 +00:00
Pierangelo Masarati
91f2a8bc46 remove backed-out code from previous commit 2004-11-11 09:43:15 +00:00
Pierangelo Masarati
79f744f30b rework static backend initialization 2004-11-11 00:39:19 +00:00
Pierangelo Masarati
0e83717e80 fix return code; fix test (please review) 2004-11-11 00:32:47 +00:00
Howard Chu
0c9c90a3e9 ITS#3365 - fix leaking bdb locks when evaluating dynamic groups 2004-10-27 14:52:18 +00:00
Howard Chu
7e87f54716 Revert ITS#3353 patch, it needs to be reworked. 2004-10-06 05:51:38 +00:00
Howard Chu
fda3d6260e ITS#3353 consolidate slapd globals into a single struct 2004-10-01 07:33:16 +00:00
Pierangelo Masarati
c2c27c6839 fix csne destroy 2004-09-27 08:11:04 +00:00
Jong Hyuk Choi
292c568f36 a fix to prev commit 2004-09-25 03:21:30 +00:00
Jong Hyuk Choi
e4d199d7bb A follow-on commit to the previous @oc support change to use anlist 2004-09-23 19:23:17 +00:00
Jong Hyuk Choi
5c0581b184 Modified @oc supprot code to the share anlist routines; Revised anlist routines 2004-09-23 02:48:14 +00:00
Jong Hyuk Choi
98dc97bcb9 memory leak fixes 2004-09-11 02:02:09 +00:00
Kurt Zeilenga
094bc99b83 Initial entryDN implementation.
Need to implement filter support (for entryDN and subschemaSubentry).
Fixed hasSubordinate assert() bug in entry filters
2004-09-07 05:00:33 +00:00
Kurt Zeilenga
d611a4b49a unifdef -UNEW_LOGGING 2004-09-04 04:54:28 +00:00
Pierangelo Masarati
a469dc6741 fix previous commit 2004-08-30 07:30:01 +00:00
Kurt Zeilenga
429be3c137 Add FIXME comment regarding improper return of unavailableCriticalExtension
Misc Clean.
2004-08-28 13:45:53 +00:00
Luke Howard
400458c9c5 Don't use SLAPI_TARGET_DN for group plugins - it is required elsewhere 2004-08-26 10:04:08 +00:00
Luke Howard
563f73b81d backend_compute_output_attr() should use actual computed attribute type
returned by the plugin, rather than that requested by backend_attribute(),
for ACL checking.

They should of course be the same but this is the "correct" approach from
both a security and readability perspective
2004-08-26 05:18:33 +00:00
Luke Howard
102cd721ef Extend backend_attribute() to support computed attributes (SLAPI) 2004-08-26 05:02:01 +00:00
Luke Howard
5f6996c8bf Add SLAPI_X_GROUP_TARGET_ENTRY so that group plugin can use target entry 2004-08-26 04:24:29 +00:00
Luke Howard
d45b89823f Support pre-operation and post-operations for backend_group()
This allows computed attribute plugins to also provide their attributes to
the ACL engine, for example
2004-08-25 15:20:19 +00:00
Howard Chu
91033d6552 Reworked fix for ITS#3140 - add access parameter to backend_attribute 2004-08-18 17:14:22 +00:00
Howard Chu
c7313c09b4 More fixes for prev commit 2004-08-18 15:23:37 +00:00
Howard Chu
3081f2df88 Delete unused be_context_csn_mutex 2004-08-18 10:54:58 +00:00
Howard Chu
77ba70be13 Fix ITS#3288: use be_pcl_mutexp instead of be_pcl_mutex 2004-08-18 10:53:34 +00:00
Pierangelo Masarati
cd9a9c628d frontend stuff moved into a database structure, essentially to allow overlays to be processed before database selection; passes all tests (ITS#3080) 2004-07-26 21:26:34 +00:00
Pierangelo Masarati
9f6f5491fe slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay 2004-07-25 23:16:40 +00:00
Pierangelo Masarati
b94d5e17e2 rework op/rs structures to deal with opeartional attributes 2004-07-18 21:44:29 +00:00
Howard Chu
2954a90483 Add backend_startup_one() 2004-07-12 20:27:33 +00:00
Howard Chu
d6c68cdf48 Fix prev commit 2004-07-09 17:44:50 +00:00
Howard Chu
e5ffb0c466 Use previously unused Backend->be_context_csn 2004-07-09 17:27:23 +00:00
Kurt Zeilenga
35cbe6fe84 fix typos in last commit 2004-07-05 21:44:12 +00:00
Kurt Zeilenga
191941c2cf better ssf related error messages
cleanup
2004-07-05 21:41:10 +00:00
Howard Chu
29f24962be Fix uninit'd exopflags 2004-06-26 01:17:24 +00:00
Jong Hyuk Choi
b85ba35ba7 Patch for ITS#3133 2004-05-31 02:01:59 +00:00
Pierangelo Masarati
d40e5a365a fix DN_SEPARATOR() and clarify its use 2004-05-07 09:03:05 +00:00
Pierangelo Masarati
b34cf02488 more on fixing escaped semicolon in normalized DN 2004-05-07 02:18:08 +00:00
Pierangelo Masarati
03c64541d4 add granular op restriction 2004-05-01 17:53:37 +00:00
Pierangelo Masarati
c0c24cfec5 first round of SHADOW flags/isupdate test unification 2004-04-10 10:00:58 +00:00
Howard Chu
f2e1df3ef7 Consolidated static/dynamic backend switches 2004-04-08 05:56:23 +00:00
Jong Hyuk Choi
1c1b2bb6ee updatedn fix for syncrepl 2004-04-07 17:32:37 +00:00
Pierangelo Masarati
a11dc61e05 rework be_isupdate accordingly to be_isroot 2004-04-06 09:42:40 +00:00
Kurt Zeilenga
c7e89d57be swap be_isroot and be_isroot_dn symbols 2004-04-06 01:06:20 +00:00
Pierangelo Masarati
313821118e revert erroneous commit 2004-04-05 23:12:38 +00:00
Pierangelo Masarati
b89c894eff add new isroot_dn helper 2004-04-05 17:30:30 +00:00
Kurt Zeilenga
e323437c6a cleanup for release engineering 2004-03-18 01:06:39 +00:00
Pierangelo Masarati
ba470467af add back-relay (doesn't work yet) 2004-03-17 01:03:21 +00:00
Jong Hyuk Choi
2b77fb424c backend operations check 2004-03-09 20:43:19 +00:00
Howard Chu
fc32304934 sl_malloc tweak 2004-01-15 21:32:58 +00:00
Pierangelo Masarati
fbb72268fb warn if no suffix or no init function are present 2004-01-11 23:56:13 +00:00
Pierangelo Masarati
1a9bc6655d don't segfault if a database doesn't have the suffix 2004-01-11 23:40:33 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Kurt Zeilenga
d44c1d999d clarify meaning of strongAuthRequired 2003-12-30 21:09:01 +00:00
Kurt Zeilenga
fcad25da47 Misc code cleanup 2003-12-29 22:25:43 +00:00
Luke Howard
0549d46adf Don't require slapi to be in the path - always include slapi/slapi.h 2003-12-28 04:17:48 +00:00
Luke Howard
b0416d1140 Cleanup SLAPI namespace 2003-12-28 04:14:19 +00:00
Kurt Zeilenga
271fff13de Sync with HEAD 2003-12-17 17:55:27 +00:00
Luke Howard
516fd0ff50 First round of SLAPI cleanups - use slapi_int_XXX for internal functions
(slapi_x_XXX is still reserved for exported functions that are not part
of the SLAPI specification)
2003-12-16 15:49:31 +00:00
Howard Chu
e85cd1e154 Fix prev commit, use c_authtype 2003-12-13 22:16:03 +00:00
Howard Chu
7fd21ada07 ITS#2764, #2781 revert backend.c patch, just catch the NULL referral
case in extended_op
2003-12-02 03:01:49 +00:00
Kurt Zeilenga
4e15a84452 Updated notices 2003-11-27 01:17:14 +00:00
Jong Hyuk Choi
1fdda703e6 Support multiple sync replication at the consumer :
1) simultaneous operation of multiple active sync replication threads
2) cookie management for individual sync replication thread
   (include rid=%3d to the slapd cookie command line option (-c))
2003-11-26 19:49:47 +00:00
Howard Chu
01f7a7466b SLAPI fix - no-op when slapi_plugins_used == 0 2003-10-24 05:58:42 +00:00
Howard Chu
bd1356f01e ITS#2781 don't worry about missing updateref if SLAPD_MULTIMASTER 2003-10-23 01:50:12 +00:00
Howard Chu
6ad5fd16ca Use tmpmem for group cache, doesn't need cleanup 2003-10-23 01:29:56 +00:00
Howard Chu
102d8159a7 ITS#2779, cache group ACLs per operation instead of per-connection 2003-10-23 01:23:45 +00:00
Kurt Zeilenga
ce4b199485 Syncrepl code cleanup (namely prefix struct field names) 2003-10-22 05:19:30 +00:00
Howard Chu
b6835be962 ITS#2747, Reorganize syncrepl, fix some memleaks. More remain. 2003-10-18 14:13:37 +00:00
Howard Chu
16cde39daa ITS#2743 initialize rc 2003-09-29 19:54:53 +00:00
Howard Chu
bdf86d44a8 ITS#2130 glued subordinates are not referrals, ignore ManageDSAit control 2003-09-29 10:39:41 +00:00
Howard Chu
089a4852d6 ITS#2678 complain if updateref is missing on a slave database 2003-09-22 18:54:08 +00:00
Howard Chu
6da0f1e48e ITS#2573 dynamic group support
moved labeledURI into system schema
  attribute types that inherit from labeledURI may be used in dynamic
    groups e.g. access to * by group/groupOfURLs/memberURL=foo
2003-09-20 08:16:04 +00:00
Jong Hyuk Choi
090ac0a772 unifdef LDAP_SYNC and LDAP_SYNCREPL 2003-08-27 22:16:04 +00:00
Jong Hyuk Choi
660617ae66 Context CSN patch (1)
- currenty works for refreshOnly mode of LDAP Sync
- Context CSN for add / modify is implemented
- code for delete / modrdn / refreshAndPersist will be soon committed
2003-08-23 02:51:33 +00:00
Kurt Zeilenga
b54780f940 Add initial support for modify/increment. No over/under flow detection.
Currently discovered via a "feature", but should use a control.
Start of a control made, but needs to be better integrated (with
auto use in ldapmodify(1)).
2003-08-07 16:42:40 +00:00
Jong Hyuk Choi
f07179ca61 syncrepl changes
- can handle multiple syncinfo
- ldap_sync_search() added
2003-06-11 17:03:57 +00:00
Howard Chu
ca4892d5e7 ITS#2533 remember which backend fetched the entry 2003-05-22 08:57:13 +00:00
Jong Hyuk Choi
35d1bd68b9 runqueue restructuring 2003-05-07 23:52:08 +00:00
Jong Hyuk Choi
580ae073e1 runqueue update 2003-05-07 22:29:26 +00:00
Jong Hyuk Choi
45776bff04 a runqueue for periodic thread execution (for syncrepl) 2003-05-07 02:06:01 +00:00
Howard Chu
46e2b97757 ITS#2424 use two SASL contexts per session to conform to RFC 2222 2003-05-01 04:11:57 +00:00
Howard Chu
7e2273b30e Added errmsg arg to lutil_passwd_{check,hash} functions 2003-04-30 07:52:05 +00:00
Howard Chu
350b73c2d6 Added back-hdb. Contributed by Howard Chu @ Symas Corp. 2003-04-23 06:54:36 +00:00
Jong Hyuk Choi
86a46c267a OpenLDAP synchronization based replication engine 2003-04-21 14:08:13 +00:00
Howard Chu
3aabc4ed43 doPlugins return code fix 2003-04-14 00:07:48 +00:00
Howard Chu
280fc819cf Memory context tweaks for Bind 2003-04-12 06:56:42 +00:00
Howard Chu
ece7452b05 More memory context tweaks 2003-04-11 01:29:28 +00:00
Kurt Zeilenga
c75be97ae9 #ifdef -DSLAP_NVALUES 2003-04-05 03:35:16 +00:00
Howard Chu
a1437d155e Init entry in be_entry_get_rw 2003-04-04 05:41:25 +00:00
Pierangelo Masarati
8f02ca49b6 cleanup? 2003-04-03 21:18:14 +00:00
Pierangelo Masarati
430077e2ed partially revert previous commit 2003-04-02 23:01:21 +00:00
Pierangelo Masarati
a67b41eb69 fix listener mod handling 2003-04-02 20:27:58 +00:00
Howard Chu
fa9bf23501 Minor cleanup 2003-03-31 07:49:34 +00:00
Howard Chu
e8c58b4e7f Major API change - (SLAP_OP_BLOCKS) All request parameters are
consolidated into the Operation structure. All reply parameters
are consolidated into the new SlapReply structure. Most operations
now have identical call signatures... Changes are not #ifdef'd,
revert to -r NO_SLAP_OP_BLOCKS if necessary to back out.
2003-03-30 09:03:54 +00:00
Howard Chu
99950e4fe4 Deleted BackendInfo->bi_acl_attribute, bi_acl_group.
Replaced with bi_entry_get_rw.
Implemented for back-bdb, back-ldbm, back-ldap.
2003-03-26 11:50:03 +00:00
Pierangelo Masarati
11c225d40c check conn->c_listener before use (hack to fix ITS#2361; need to review this part of slapi) 2003-03-10 22:19:32 +00:00
Pierangelo Masarati
51849d6ecb fix ITS#2343 2003-03-03 22:25:28 +00:00