Commit Graph

119 Commits

Author SHA1 Message Date
Kurt Zeilenga
8de258d2e2 Patch: 'ldapmodify -y file' reads password from file (ITS#2031)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
            ================
Adapted by Kurt Zeilenga for inclusion in OpenLDAP.  My comments are
marked with enclosed with square brackets (e.g. [Kurt's comment] below.
            ================

If I run ldapmodify & co from a script, I don't want to use '-W password'
because the password shows up in the output of 'ps' for everyone,
and I can't pipe the password to 'ldapmodify -w' because -w uses
getpassphrase() which reads from the tty instead of stdin.
So I added '-y file' which reads the password from file.  The programs
exit if the file cannot be read.

[Complete contents of file is used as password.  Use:
	echo -n "secret" > password
to create a file with "secret" as the password.  The -n avoids
adding a newline (which would invalidate the password).  Note
that echo is a builtin and hence its arguments are not visible
to 'ps'.]

I changed ldapmodify, ldapmodrdn, ldapdelete, ldapsearch, ldapcompare.
I did not bother to change ldappasswd and ldapwhoami, because they
prompt for many passwords.  [I fixed up ldapwhoami.]

Rerun autoconf after applying this patch. [Done.]

Note:  I do not know if Windows NT has fstat(), so I set HAVE_FSTAT to
undef in portable.nt.  (fstat() is used to warn if the file is publicly
readable or writeable.)  [I used fstat() to set the buffer size to
read.]

[Note: using the contents of a file extends the tools to support
passwords which could not normally be provided using getpassphrase()
or via the command line.]

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
[Kurt D. Zeilenga <kurt@openldap.org>, Aug 2002.]
2002-08-24 05:47:17 +00:00
Pierangelo Masarati
3996936bf7 remove warnings 2002-08-09 13:50:29 +00:00
Howard Chu
dcba22cc05 ITS#1956, bvalp declaration 2002-08-03 09:15:17 +00:00
Howard Chu
d8929296b8 Use lutil_progname, #include <lutil.h> to get it. 2002-07-27 00:06:27 +00:00
Kurt Zeilenga
f5e209138b snprintf cleanup 2002-07-23 18:31:42 +00:00
Kurt Zeilenga
fe86a81e25 VLV clean 2002-06-09 06:12:24 +00:00
Kurt Zeilenga
dd1e003fcb Add matched values command line support (ITS#1811).
Adapted .Sahalayev@pgr.salford.ac.uk's submission.
Needs to be extended to support comma separated list of options
	for other controls and such.

---
Copyright 2002, Mikhail Sahalaev, All rights reserved.
This software is not subject to any license of University Of
Salford.

Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice
is preserved.
2002-06-02 04:15:38 +00:00
Howard Chu
deee7442b4 Fix ITS#1649, a filter constructed from a BUFSIZ input line combined with
an argv[] filtpattern will be larger than BUFSIZ.
2002-03-18 16:16:47 +00:00
Kurt Zeilenga
0e2af54a3f Update copyright statements 2002-01-04 21:17:25 +00:00
Howard Chu
c0dbedca50 from jon@symas.com; include ldap_log.h for proper declarations, remove
unused variable
2001-12-17 22:37:47 +00:00
Howard Chu
82eca519ae More from Jon Leichter @ Symas - platform-independent TMPDIR usage 2001-12-07 02:22:07 +00:00
Kurt Zeilenga
97db0eb716 Don't ignore attribute list when -S is specified. 2001-09-04 06:06:44 +00:00
Kurt Zeilenga
0c13c5bbdd Use parens for clarity 2001-08-28 00:35:34 +00:00
Kurt Zeilenga
fe2361b855 Don't say "version: 2" 2001-06-21 20:32:04 +00:00
Kurt Zeilenga
44bef574c8 Updated pthread test and usage (avoid pthread_detach if possible)
don't use tmpnam()
2001-06-09 01:05:35 +00:00
Kurt Zeilenga
39d364c710 Fix filter printing 2001-05-18 00:27:08 +00:00
Kurt Zeilenga
383391b460 detect and use fcntl (for BSD/OS)
detect inet_ntop (for MacOSX)
2001-05-03 05:53:34 +00:00
Kurt Zeilenga
3ea33ebd12 Add LDAP version to comment 2001-03-15 04:10:17 +00:00
Kurt Zeilenga
6b822b67ef Validate timelimit argument 2001-01-23 20:51:14 +00:00
Kurt Zeilenga
b873db292c Rename timelimit to timeout where it refers to the time out not the time limit. 2001-01-23 20:38:19 +00:00
Kurt Zeilenga
111dd4cc97 Move -V to -F so that -V can be used for version information 2001-01-19 04:55:38 +00:00
Kurt Zeilenga
867ed1c7c8 use "authcid" instead of "username". 2001-01-18 08:04:56 +00:00
Kurt Zeilenga
ed9bacc1a6 Change start tls warning message 2001-01-16 04:32:13 +00:00
Kurt Zeilenga
ba37cbc233 Fix passwd clearing bug 2000-11-06 15:53:02 +00:00
Kurt Zeilenga
b4368db948 Remove commented out (logging) code 2000-10-17 20:44:34 +00:00
Kurt Zeilenga
a43392cd42 return default to no logging 2000-10-17 20:43:33 +00:00
Kurt Zeilenga
9e1458724b Use LDAP_VERSION3 instead of 3 2000-10-13 18:30:24 +00:00
Gary Williams
fd4b8ba0cd example client using new logging 2000-10-12 20:13:20 +00:00
Kurt Zeilenga
5a32ff0603 Add missing 'static'... (ITS#823,825,828)
as reported by Jeff Earickson <jaearick@colby.edu>
other suggestions to be separately reviewed
2000-10-11 23:42:53 +00:00
Kurt Zeilenga
3d47cb33c1 Fix spelling error 2000-09-19 20:47:22 +00:00
Ben Collins
bca61801a1 Fix fprintf\'s, missing `prog\' argument 2000-09-15 02:48:10 +00:00
Kurt Zeilenga
e366aefffc Fix ldap_init/initialize error checking 2000-09-13 21:49:31 +00:00
Kurt Zeilenga
8d2c074a80 Fix -R processing 2000-09-07 01:15:52 +00:00
Kurt Zeilenga
fb6590f8db Add -H to usage 2000-09-05 18:52:10 +00:00
Kurt Zeilenga
0e920e9d29 Back out last change 2000-08-31 20:53:12 +00:00
Kurt Zeilenga
78f6d75586 Fix URI 2000-08-31 20:52:14 +00:00
Kurt Zeilenga
f6a1c05b68 Add missing fprintf param 2000-08-25 23:51:10 +00:00
Kurt Zeilenga
ef3fb24f39 Fix typo which escaped my obviously flawed midnight test
(I must have been dreamed that the 'make test' completed
successfully)
2000-08-25 23:46:09 +00:00
Kurt Zeilenga
e97cdfb7a9 Add support of "-H uri" 2000-08-25 05:31:29 +00:00
Randy Kunkee
45ef1d2c90 Clean up lint. 2000-08-23 22:49:44 +00:00
Kurt Zeilenga
fc6c7fefcc Fix empty AND/OR search list bug 2000-07-27 23:08:48 +00:00
Kurt Zeilenga
0f5c87a41c Clean up usage() 2000-07-17 21:54:20 +00:00
Kurt Zeilenga
6393523ffa Expose sasl flags to -lldap (so they can be quiet)
Fix interactive and automatic modes.  Quiet needs work.
2000-07-17 21:23:59 +00:00
Kurt Zeilenga
95eea5accc First cut SASL "interactive" and "quiet" modes (default is "automatic") 2000-07-17 00:56:29 +00:00
Kurt Zeilenga
1e562b0d1f Make it all work. 2000-07-16 00:14:08 +00:00
Kurt Zeilenga
4d45c61600 Cleanup previous commit 2000-07-15 23:34:27 +00:00
Kurt Zeilenga
d2b05a3858 Rework SASL command line arguments. Default is now to authenticate
using best available mechanism.  (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.
2000-07-15 23:25:46 +00:00
Kurt Zeilenga
5fc22599e2 Update SASL code to reuse context through life of session.
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters
2000-07-13 22:54:38 +00:00
Kurt Zeilenga
04bfb7efe4 Add missing EOL 2000-07-05 23:11:37 +00:00
Kurt Zeilenga
20e6dcec3b Improved but still broken client tools. 2000-07-04 21:49:00 +00:00