Commit Graph

13089 Commits

Author SHA1 Message Date
Pierangelo Masarati
09e167427a note slapo-allop 2005-08-20 18:02:09 +00:00
Pierangelo Masarati
36c9ccdba1 cleanup objectclass inheritance 2005-08-20 18:01:40 +00:00
Pierangelo Masarati
6bae592866 cleanup objectclass inheritance; don't proceed if initial lookup resulted in a hit with "success" errcode and the base is search; either the filter doesn't match, or the same action is taken twice 2005-08-20 18:00:40 +00:00
Pierangelo Masarati
3dd05cdb2d fix SASL numeric secprops parsing (ITS#3955) 2005-08-20 14:22:42 +00:00
Pierangelo Masarati
8d5e1ae2b4 rework acknowledgments 2005-08-20 12:20:58 +00:00
Pierangelo Masarati
43fb9f0e46 allop man page 2005-08-20 12:20:39 +00:00
Pierangelo Masarati
4a3b04966c stuff for slapo-allop configuration 2005-08-20 11:57:01 +00:00
Pierangelo Masarati
f227a96053 more for the allop overlay 2005-08-20 11:53:31 +00:00
Pierangelo Masarati
95f65ff352 all-operational overlay: allows to configure part of te DIT so that requests
with requested attribute lists empty or containing "*" are expanded
to contain "+" as well, so that all operational attributes are returned.
This may be required to work around dumb clients that interrogate
the rootDSE requesting "*" and expecting operational attributes to be
returned as well.  To make it a bit more generic, it can be configured
to do the same for an arbitrary search described by an URI.  For example,

overlay		allop
allop-URI	ldap:///??sub

before any database instantiation causes all searches to return "*","+"
when ors_attrs is NULL or countains "*".
2005-08-20 11:48:13 +00:00
Pierangelo Masarati
9205f4fdb2 reflect recent changes to code 2005-08-20 11:39:08 +00:00
Pierangelo Masarati
fdfcf0406e need an AUXILIARY objectClass to play with some special error codes (need to update man page as well)... 2005-08-20 11:31:51 +00:00
Pierangelo Masarati
e5d302e84f normalize/pretty attributes when possible 2005-08-20 11:31:07 +00:00
Kurt Zeilenga
6f99b15ee0 Clarify second all user attrs comment 2005-08-20 07:00:16 +00:00
Kurt Zeilenga
5beeb04346 Clarify attribute comment 2005-08-20 06:58:22 +00:00
Pierangelo Masarati
dd87b75985 use our default referral; slapd complains about returning 0x0a without a ref 2005-08-19 17:04:12 +00:00
Pierangelo Masarati
52ce57f525 don't try to print NULLs on Solaris... 2005-08-19 15:47:52 +00:00
Pierangelo Masarati
7732236996 plug yet another one-time leak 2005-08-19 15:05:03 +00:00
Pierangelo Masarati
dcf57de6b8 allow to pass timeout arg (tnx to Luca) 2005-08-19 07:27:32 +00:00
Kurt Zeilenga
59e8ac437b Add noop-06 2005-08-19 00:35:49 +00:00
Pierangelo Masarati
725423ef4f couldn't slapcat with ACIs in slapd.conf :) 2005-08-19 00:30:10 +00:00
Pierangelo Masarati
3356017b93 complete ACI syntax exploitation 2005-08-19 00:25:18 +00:00
Pierangelo Masarati
a0e46c6289 allow oidmacros in syntax (e.g. AD) 2005-08-18 23:34:10 +00:00
Pierangelo Masarati
a324dc8050 clear code before calling functions that may modify it 2005-08-18 18:48:02 +00:00
Pierangelo Masarati
9c02a32b7c more about matchedDN in back-meta (ITS#3944) 2005-08-18 14:55:28 +00:00
Pierangelo Masarati
e441f32374 little bit easier to track from inside gdb... 2005-08-18 13:38:59 +00:00
Pierangelo Masarati
ef38cc9501 cleanup 2005-08-18 12:50:48 +00:00
Pierangelo Masarati
66c173deb9 a bit redundant, but works around ITS#3951 2005-08-18 12:14:07 +00:00
Pierangelo Masarati
11211d0dae strip entryDN from search entries; frontend will reattach it :( 2005-08-18 11:26:29 +00:00
Pierangelo Masarati
27267f0f78 add subtree rename test 2005-08-18 10:28:36 +00:00
Pierangelo Masarati
e066ec210e merge sml_managing into sml_flags (SLAP_MOD_MANAGING) 2005-08-18 08:48:10 +00:00
Pierangelo Masarati
9487629061 zero out sml_managing any time a Modifications is built (use calloc?) 2005-08-18 08:12:26 +00:00
Howard Chu
315c4a3b72 ITS#3946 reset lockout status at beginning of all Binds 2005-08-18 07:05:56 +00:00
Luke Howard
2ff5c27f63 Check for NULL in be_match()
Use be_match() in backend.c operational processing
2005-08-18 04:34:04 +00:00
Luke Howard
53a15b6820 Use be_match() instead of testing pointer equivalence 2005-08-18 04:12:54 +00:00
Luke Howard
6cf14a777a Add be_match() macro: one cannot always compare BackendDB pointer
values in order to test equivalence, because the overlay engine
may have reset the backend pointer to a temporary copy on the stack.

So, we test pointer equivalence of the BackendDB itself, then of
be_nsuffix -- this macro can be updated if necessary.
2005-08-18 04:12:04 +00:00
Pierangelo Masarati
ef7421b87d more on manage access level 2005-08-18 02:25:10 +00:00
Pierangelo Masarati
add1add854 condition compile dynacl 2005-08-17 22:41:30 +00:00
Pierangelo Masarati
b2284183f9 more on manage 2005-08-17 22:06:46 +00:00
Hallvard Furuseth
277860fbac veryclean-local: remove testdata instead of data (now a source directory) 2005-08-17 22:05:44 +00:00
Pierangelo Masarati
21fa587db3 improve manage test 2005-08-17 22:04:32 +00:00
Pierangelo Masarati
965d00a1dd allow to manage entryUUID; allow to manage noUserMod attrs during add 2005-08-17 20:53:39 +00:00
Pierangelo Masarati
557f5eb2ca allow noUserMod attrs write proxying when manageDIT is set (still to work in frontend for add) 2005-08-17 19:40:02 +00:00
Pierangelo Masarati
5873048347 fix return code (prevents clean usage of back-ldap for internal searchs) 2005-08-17 19:38:36 +00:00
Pierangelo Masarati
8801a302fa add an example of -a usage (ITS#3930) 2005-08-17 17:39:34 +00:00
Pierangelo Masarati
ec49990d51 ACIs almost entirely factored out of slapd
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Howard Chu
d247840d6b ITS#3946 use connection_destroy hook to reset lockouts instead of unbind 2005-08-17 16:42:22 +00:00
Pierangelo Masarati
a583d1a9e5 fix testers (tnx to Luca) 2005-08-17 16:19:58 +00:00
Pierangelo Masarati
69c6cd5365 fix small issues with dynacl and ACI in general 2005-08-17 14:44:41 +00:00
Pierangelo Masarati
35de807a93 add posixGroup access control via dynacl as an example of how dynacl work 2005-08-17 14:32:27 +00:00
Pierangelo Masarati
99ea177e05 implement overlapping targets enhancement (ITS#3711) 2005-08-17 08:34:49 +00:00