Howard Chu
03ee55d725
Revert "ITS#8752 ppolicy: don't call same cleanup twice"
...
This reverts commit 1c963f4739
.
Revert "ITS#8752 make sure all cleanups are called in overlay_op_walk"
This reverts commit b0ad788b8a
.
2017-10-13 18:47:25 +01:00
Howard Chu
1c963f4739
ITS#8752 ppolicy: don't call same cleanup twice
...
fallout from b0ad788b8a
2017-10-13 17:39:37 +01:00
Josh Soref
10566c8be3
ITS#8605 - spelling fixes
...
* javascript
* kernel
* ldap
* length
* macros
* maintained
* manager
* matching
* maximum
* mechanism
* memory
* method
* mimic
* minimum
* modifiable
* modifiers
* modifying
* multiple
* necessary
* normalized
* objectclass
* occurrence
* occurring
* offered
* operation
* original
* overridden
* parameter
* permanent
* preemptively
* printable
* protocol
* provider
* really
* redistribution
* referenced
* refresh
* regardless
* registered
* request
* reserved
* resource
* response
* sanity
* separated
* setconcurrency
* should
* specially
* specifies
* structure
* structures
* subordinates
* substitution
* succeed
* successful
* successfully
* sudoers
* sufficient
* superiors
* supported
* synchronization
* terminated
* they're
* through
* traffic
* transparent
* unsigned
* unsupported
* version
* absence
* achieves
* adamson
* additional
* address
* against
* appropriate
* architecture
* associated
* async
* attribute
* authentication
* authorized
* auxiliary
* available
* begin
* beginning
* buffered
* canonical
* certificate
* charray
* check
* class
* compatibility
* compilation
* component
* configurable
* configuration
* configure
* conjunction
* constraints
* constructor
* contained
* containing
* continued
* control
* convenience
* correspond
* credentials
* cyrillic
* database
* definitions
* deloldrdn
* dereferencing
* destroy
* distinguish
* documentation
* emmanuel
* enabled
* entry
* enumerated
* everything
* exhaustive
* existence
* existing
* explicitly
* extract
* fallthru
* fashion
* february
* finally
* function
* generically
* groupname
* happened
* implementation
* including
* initialization
* initializes
* insensitive
* instantiated
* instantiation
* integral
* internal
* iterate
2017-10-11 14:39:38 -07:00
Quanah Gibson-Mount
1df85d3427
Happy New Year!
2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
6c4d6c880b
Happy New Year!
2016-01-29 13:32:05 -06:00
Howard Chu
3a305253a0
ITS#8327 fix ppolicy_get_default
...
pwdMaxRecordedFailure must never be zero
2015-12-03 00:58:33 +00:00
Ryan Tandy
1b7a5871c2
ITS#8234 revert to default policy on failure
2015-09-01 19:19:57 -07:00
Ryan Tandy
572ad2b037
ITS#7537 release entry on failure
2015-09-01 18:56:19 -07:00
Howard Chu
e5b9bdd8c5
ITS#8185 missing schema reference
2015-08-15 00:56:50 +01:00
Howard Chu
b0950f4d44
Fix copy/paste error in prev commit
2015-08-14 15:33:32 +01:00
Howard Chu
af27b7032e
ITS#8185 add pwdMaxRecordedFailure
...
Limit the number of pwdFailureTime stamps to record, regardless
of lockout settings.
2015-08-14 15:19:46 +01:00
Howard Chu
624c1fac8b
ITS#8184 avoid redundant mod ops
...
If multiple ppolicy overlays are present on a glued tree, they all
attempt to update the policy operational attributes in response to
password-related activities. The redundant mod ops will cause the
entire op to fail. Check for these ops before inserting new ones.
2015-07-10 14:04:29 +01:00
Quanah Gibson-Mount
1705fa7e55
Happy New Year
2015-02-11 15:36:57 -06:00
Howard Chu
fccca0ead9
Minor cleanup (coverity)
2015-01-14 16:59:54 +00:00
Quanah Gibson-Mount
db564ab516
Silence compiler warning by adding explicit return 0 to ppolicy_db_destroy
2014-10-03 15:35:39 -05:00
Howard Chu
d8e280e87c
ITS#7906 more cleanup
...
db_open/close were not symmetric with init/destroy
2014-08-11 13:48:29 -07:00
Howard Chu
8b89b45615
ITS#7906 minor cleanup
...
rename ppolicy_close -> ppolicy_db_close for consistency
2014-08-05 19:37:28 -07:00
Howard Chu
08792a77fd
ITS#7906 better fix
...
don't free pwcons unless we're actually destroying this DB
2014-08-05 19:36:30 -07:00
Howard Chu
05402c396d
ITS#7906 fix ppolicy_connection_destroy
...
It can still run after ppolicy_close has freed the connection table
2014-07-24 17:04:56 -07:00
Paul B. Henson
85d467aca6
ITS#7161 ppolicy pwdFailureTime resolution should be better than 1 second
2014-06-15 13:42:46 -07:00
Kurt Zeilenga
5c878c1bf2
Happy new year (belated)
2014-01-25 05:21:25 -08:00
Kurt Zeilenga
0fd1bf30b8
Happy New Year
2013-01-02 10:22:57 -08:00
Kurt Zeilenga
2bbf9804b9
Happy New Year!
2012-01-01 07:10:53 -08:00
Pierangelo Masarati
bdbdae3e5f
according to draft-behera, this attribute only affects password modifies by self (ITS#7021)
2011-08-20 18:52:54 -06:00
Hallvard Furuseth
fac36dcba7
ITS#6932: Clean up strange asserts & nearby code.
...
Mostly found by Klocwork: Issues #213,298-300,331,342-343,374,390,410.
2011-05-05 15:55:29 +02:00
Kurt Zeilenga
966cef8c9a
Happy New Year
2011-01-05 00:42:37 +00:00
Hallvard Furuseth
50b1c4e1b1
ITS#6620: Don't delete absent pwdChangedTime.
...
Based on patch by Martin Evans.
2010-12-02 12:19:31 +00:00
Howard Chu
21d299e370
More for ITS#6608 - don't replicate ppolicy state changes on replicas
2010-08-04 08:14:59 +00:00
Howard Chu
9434a7d676
ITS#6608 don't update mod opattrs on single-master slaves
2010-07-28 02:43:21 +00:00
Ralf Haferkamp
c4f0c2cc2b
unregister controls when removing syncprov, ppolicy, valsort, chain or
...
sssvlv overlay
2010-07-01 11:51:43 +00:00
Howard Chu
c8c3847103
ITS#6566 use Debug, not fprintf(stderr)
2010-06-02 00:18:32 +00:00
Kurt Zeilenga
3dadeb3efe
happy belated New Year
2010-04-13 22:17:29 +00:00
Howard Chu
eefe62b597
Implement policy checks on compare op
2009-10-15 07:11:39 +00:00
Howard Chu
2d28fe4d4c
ITS#6265 must set orm_no_opattrs
2009-08-20 00:32:28 +00:00
Howard Chu
c29b1a53b2
More for 1.124 - forwarded updates need Relax control since state attrs
...
are no-user-mod.
2009-07-01 07:39:22 +00:00
Howard Chu
8a0b05bfeb
ITS#6084 handle pwdAccountLockedTime values set into the future (i.e.,
...
lame way of setting an expiration date.)
2009-06-30 12:12:53 +00:00
Howard Chu
98ebf1950e
Fix prev commit
2009-06-30 11:54:45 +00:00
Howard Chu
b50f9c7aa9
ITS#6082 return checker module's error message to client
2009-06-30 11:51:13 +00:00
Howard Chu
68246fb76d
Fix check_password with {cleartext} passwords
2009-06-30 11:24:11 +00:00
Howard Chu
1f07d843f1
ITS#6168 actually use pwdLockout setting
2009-06-30 11:04:16 +00:00
Howard Chu
972176a1e0
Add ppolicy_forward_updates: if configured, ppolicy state changes due to
...
Binds are performed using the frontend, to allow them to trigger the
updateref on a consumer, which can then be forwarded by the chain overlay.
Setting is ignored if server is not a consumer.
2009-06-30 10:41:51 +00:00
Kurt Zeilenga
4af9eb9715
Update copyright notices
2009-01-22 00:40:04 +00:00
Pierangelo Masarati
0631c47576
do not allow slapo-ppolicy to be global by now (ITS#5858)
2008-12-20 22:02:06 +00:00
Hallvard Furuseth
dffe8d37fa
ITS#5770: Fix unaligned BerElements: Use BerElementBuffer, not char[size].
2008-10-24 17:52:05 +00:00
Pierangelo Masarati
382bb4de11
save one copy (please review)
2008-10-22 21:58:59 +00:00
Hallvard Furuseth
b6f83f1a25
Warning cleanup: signed meets unsigned. ber_flatten2() returns -1 on
...
error, not LBER_DEFAULT.
2008-10-13 09:17:36 +00:00
Pierangelo Masarati
7cc2acd111
fix previous commit (ITS#5711)
2008-09-27 10:34:52 +00:00
Pierangelo Masarati
a0e3e68a02
allow controls deletion to be deferred; pass response controls back to frontend in extops (ITS#5711)
2008-09-27 10:06:43 +00:00
Howard Chu
f911e0f5d1
ITS#5569 ignore internal ops when validating pwd modify
2008-07-08 19:02:38 +00:00
Ralf Haferkamp
2688180f95
Allow unquoted DNs with whitespaces (ITS#5552)
2008-06-12 21:12:35 +00:00