Howard Chu
0e8c2d5a54
Tweak privateKey schema
...
We're using PKCS#8 syntax, drop the OpenLDAP syntax OID.
Rename attribute accordingly.
Tweak validator to accept encrypted keys.
2018-12-18 21:27:24 +00:00
Quanah Gibson-Mount
4e23cfc4a9
ITS#8286 - Additional fixes
...
Fix incorrect matching rules for olcTLSCertificateKey and olcDbCryptKey
Fix SYNTAX for olcRootPW to be octetString
2018-12-18 21:05:09 +00:00
Quanah Gibson-Mount
71a5d7cc0f
Fix integerMatch to booleanMatch
2018-12-18 19:26:37 +00:00
Quanah Gibson-Mount
3add82a3bb
ITS#8286 -- Add matching rules for attributes
...
Add matching rules for all cases where it was missing. Cleanup
incorrect types for a few attributes as well. Fix network-timeout
handling in back-ldap/meta/asyncmeta.
2018-12-18 19:14:06 +00:00
Howard Chu
a4fddc7b11
ITS#8932 check rdnNormalize success
2018-11-09 21:16:10 +00:00
Nadezhda Ivanova
33876e22d6
ITS#8859 Allow backends which do not need a database to work
2018-10-19 13:08:09 +01:00
Nadezhda Ivanova
d10fc664f7
ITS#8859 Enable backend configuration
2018-10-19 13:08:09 +01:00
Ondřej Kuzník
1f2caff7b9
ITS#8859 Record the correct RDN
2018-10-19 13:08:09 +01:00
Ondřej Kuzník
0f4d656a57
ITS#8849 Use server pause facility during config changes
2018-10-19 13:08:09 +01:00
Quanah Gibson-Mount
59e9ff6243
Happy New Year
2018-03-22 15:35:24 +00:00
Emmanuel Lécharny
77408ac781
ITS#8153 - olcTimeLimit should be Single Value
2017-10-11 14:31:51 -07:00
Howard Chu
f33c7d1ee6
Fixup for ;binary config attrs
...
Use the plain attributeDescription when searching config tables
2017-04-09 20:29:47 +01:00
Howard Chu
c9ccdf8554
Fixup pause handling, silence warnings
...
Don't try to resume the pool if pausing failed.
2017-04-09 15:41:16 +01:00
Howard Chu
7b41feed83
Support setting cacert/cert/key directly in cn=config entry
2017-04-09 14:51:25 +01:00
Howard Chu
2012795d3b
Add config support for binary values
...
Use base64 for .conf files, straight binary for back-config
2017-04-09 02:26:41 +01:00
Ondřej Kuzník
53c6c9d16b
ITS#8574 - Deal with rDN correctly
...
This fixes issues with values that need escaping in the rDN when an
incorrect value would be passed to the handler and back-ldif.
2017-03-08 15:32:17 -08:00
Quanah Gibson-Mount
1df85d3427
Happy New Year!
2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
6c4d6c880b
Happy New Year!
2016-01-29 13:32:05 -06:00
Howard Chu
291b6a1a22
ITS#8215 fix cd9980c48b
...
Wrong function signature
2015-10-27 11:46:08 +00:00
Ondřej Kuzník
cd9980c48b
ITS#8215 Add config tool delete support
2015-10-25 09:04:40 +00:00
Ryan Tandy
3b90232022
ITS#8150 let check_name_index handle frontend
...
The fix for ITS#7016 only adjusted the frontend entry's DN, but not the
naming attribute in the entry. check_name_index knows how to do both.
2015-05-20 23:36:42 +01:00
Howard Chu
d7bf6fcaae
ITS#8108 silence rootdn check on hidden backends
...
select_backend() skips hidden backends so it fails to match the
rootdn of a database that has been hidden. rootpw tries to see
if the rootdn matches the current backend but the check fails
when hidden. Ignore this check on hidden backends since one
cannot Bind to a hidden backend anyway.
2015-04-23 05:58:50 +01:00
Quanah Gibson-Mount
1705fa7e55
Happy New Year
2015-02-11 15:36:57 -06:00
Howard Chu
e861305d50
Minor cleanup (coverity)
2015-01-14 11:30:33 +00:00
Howard Chu
4f66cfa1b4
ITS#7935 partially revert prev patch
...
Can't allow special chars in RDN, not all OSs/filesystems support it.
2014-09-09 14:40:11 +01:00
Howard Chu
f88970efc1
ITS#7935 fix schema RDN normalization
2014-09-09 14:35:43 +01:00
Ondřej Kuzník
a773a0cc14
ITS#7894 Let back-config use backend to release entries
2014-07-22 14:49:20 -07:00
Ondrej Kuznik
17e223b896
ITS#7212 rudimentary slapmodify support for back-config
2014-07-08 17:25:58 -07:00
Howard Chu
45ff842542
Plug one-time leaks
2014-06-04 02:23:18 -07:00
Kurt Zeilenga
5c878c1bf2
Happy new year (belated)
2014-01-25 05:21:25 -08:00
Howard Chu
eef667fd49
ITS#7739 fix for empty nested include
2013-11-05 07:34:30 -08:00
Howard Chu
69f810d549
ITS#7685 add missing olcTLSProtocolMin
2013-09-07 10:00:11 -07:00
Howard Chu
e631ce808e
ITS#7595 Add Elliptic Curve support for OpenSSL
2013-09-07 09:47:40 -07:00
Howard Chu
0ef9e6107b
More for threadpool queues
...
Allow dynamic reconfig
2013-09-03 15:06:37 -07:00
Howard Chu
b03ce7af6c
ITS#7676,7677 don't leak libldap err codes
2013-08-30 12:28:17 -07:00
Howard Chu
34f832faee
Multiple queues per threadpool
2013-08-16 19:04:49 -07:00
Howard Chu
115460ae53
ITS#7645 use ldap_pvt_tls_config for TLSProtocolMin
2013-07-29 07:04:03 -07:00
Jan Synacek
95241fae6c
ITS#7611 Fix loglevel2bvarray
2013-05-29 07:31:15 -07:00
Howard Chu
1d252a9236
Disable databases & overlays (experimental)
...
Do not use. backend/overlay code needs to be fixed accordingly.
In particular, code which currently frees configuration in _db_close()
must be changed to free only in _db_destroy().
After restructuring, it must be possible to call _db_close()/_db_open()
multiple times in succession without requiring _db_config() in between.
2013-05-28 13:09:44 -07:00
Howard Chu
8cc61d8dbd
attrdb fixes
2013-04-05 03:03:07 -07:00
Kurt Zeilenga
0fd1bf30b8
Happy New Year
2013-01-02 10:22:57 -08:00
Howard Chu
bbfe587246
Add support for 64 bit index hashing
2012-12-03 18:14:28 -08:00
Howard Chu
fc0563ce53
ITS#7449 fix signedness for index_substr_any_*
...
Of course, no one would ever have any legitimate reason to set these
items to anywhere near such extreme values in the first place.
2012-11-25 19:31:14 -08:00
Howard Chu
edbe111c8c
back-meta shares back-ldap's OIDs
2012-08-18 01:38:28 -07:00
Howard Chu
54de37c0e1
Initial config support for back-meta
...
Currently just a direct replacement of slapd.conf parsing,
no dynamic features yet.
2012-08-17 14:04:48 -07:00
Howard Chu
dc0ef72dff
Cleanup prev commit
2012-03-27 01:53:41 -07:00
Ondrej Kuznik
122faa5bd9
(ITS#6987) Consider only same attribute siblings for Cft_misc.
...
For all other ce_types it holds that each is represented by one
attribute, making ce_type matching for X-ORDERED siblings equivalent to
how back-ldif handles them. Cft_misc is means "all other types", however
no overlay/backend so far has used different attributes as siblings,
triggering the difference in handling between bconfig.c and back-ldif.
2012-03-27 01:53:30 -07:00
Howard Chu
4433b1b8d5
ITS#7205 fix check for existing suffix
2012-03-26 03:35:23 -07:00
Howard Chu
93d3a4104a
ITS#7200 fix regression in b4d403ea31
2012-03-09 13:10:58 -08:00
Howard Chu
b4d403ea31
ITS#7200 enforce check for matching serverID URL
2012-03-08 19:24:09 -08:00