Hallvard Furuseth
b2f79aa42e
Initialize and destroy lc_lai.lai_mutex
2006-04-02 23:47:13 +00:00
Hallvard Furuseth
581c1ff6c7
Cast ctype.h char arguments to unsigned char
2006-04-01 23:44:42 +00:00
Pierangelo Masarati
02966c3d1c
fix handling of expired connections (ITS#4429; need to look at back-meta as well)
2006-03-29 01:26:42 +00:00
Pierangelo Masarati
bacd1f170f
leave existing controls in place if proxyAuthz is not required by idassert (ITS#4457)
2006-03-28 21:45:54 +00:00
Pierangelo Masarati
e673b4d9ad
propagate pretty DN (ITS#4456)
2006-03-28 19:20:01 +00:00
Pierangelo Masarati
0a465343fb
cleanup
2006-03-27 00:31:38 +00:00
Pierangelo Masarati
1418b2c5b1
fix previous commit: actually free the connection in case of failed bind
2006-03-25 01:12:27 +00:00
Pierangelo Masarati
fd5208c18f
destroy bind connection after failed bind (ITS#4428)
2006-03-25 00:33:42 +00:00
Pierangelo Masarati
00073c8cac
fix operational attrs return with chain overlay (ITS#4431); misc cleanup
2006-03-24 22:49:51 +00:00
Pierangelo Masarati
3160c03dab
cleanup previous commit
2006-03-23 23:01:14 +00:00
Pierangelo Masarati
3437406a0b
honor "chase-referrals no" (ITS#4447)
2006-03-23 21:01:19 +00:00
Pierangelo Masarati
3861c47316
queue implicit binds (ITS#4409)
2006-03-03 16:27:00 +00:00
Pierangelo Masarati
fa72882808
fix error message
2006-02-16 01:10:45 +00:00
Kurt Zeilenga
cbc11c9233
unifdef -DLDAP_NULL_IS_NULL
2006-02-14 23:18:12 +00:00
Pierangelo Masarati
f4c578cb31
delete all conns cached for a single client->proxy connection (partially addresses ITS#4387)
2006-02-06 21:39:56 +00:00
Pierangelo Masarati
f0d6ac3e0b
debug cleanup
2006-02-04 15:50:22 +00:00
Pierangelo Masarati
54aefe30f7
implement proxy long-lived connection TTL
2006-02-01 23:10:12 +00:00
Pierangelo Masarati
e393f47465
allow slapo-chain to be instantiated without any specific config statement...
2006-01-13 10:41:54 +00:00
Pierangelo Masarati
7124ec615e
make sure appropriate limits are in place (ITS#4336)
2006-01-12 22:48:02 +00:00
Pierangelo Masarati
7038044c91
in abnormal cases, error may be sent twice
2006-01-11 15:32:34 +00:00
Pierangelo Masarati
0dce854ce4
complete fix to back-ldap (ITS#4315?); not sure dobind should actually be treated as a bind...
2006-01-11 12:11:59 +00:00
Pierangelo Masarati
7368ffb77a
don't idassert anon2anon (ITS#4321)
2006-01-10 13:17:31 +00:00
Pierangelo Masarati
f3c2c7ba48
use slab memory for proxyauthz
2006-01-09 20:00:51 +00:00
Pierangelo Masarati
543c588772
don't send error with back-meta
2006-01-09 15:13:29 +00:00
Pierangelo Masarati
6995603a3d
refine fix to ITS#4315; apply it to back-meta as well
2006-01-09 14:20:37 +00:00
Howard Chu
8538223def
TS#4315 fix prev commit, spinning in ldap_back_dobind
2006-01-09 09:37:52 +00:00
Howard Chu
2b39a26150
ITS#4315 fix bind concurrency issue
2006-01-09 09:14:53 +00:00
Pierangelo Masarati
18beda81a0
allow proxying of dynamic objects (irrespective of the support provided to dynamic objects)
2006-01-06 16:33:14 +00:00
Pierangelo Masarati
62497187c7
cleanup
2006-01-06 16:31:07 +00:00
Kurt Zeilenga
acbb5cf689
Happy new year!
2006-01-03 23:11:52 +00:00
Pierangelo Masarati
c67c99e3bd
clarify generated password issue
2006-01-02 16:20:39 +00:00
Pierangelo Masarati
fc358465d7
allow generic exops to slip thru
2006-01-02 08:19:35 +00:00
Pierangelo Masarati
8c2ceeb605
don't idassert anonymous unless explicitly configured (ITS#4272)
2005-12-20 20:43:14 +00:00
Pierangelo Masarati
96dd70da28
fix memory handling
2005-12-16 16:19:17 +00:00
Pierangelo Masarati
4538422dc9
better handling of internal operations
2005-12-15 13:47:25 +00:00
Pierangelo Masarati
430aff35bb
assume operations with version set to 0 are internal, and use LDAPv3
2005-12-15 11:39:46 +00:00
Pierangelo Masarati
fcda57e90f
use macros instead of numbers...
2005-12-13 20:11:26 +00:00
Pierangelo Masarati
1b42fde372
implement (per-target) per-conn proxy-side idle-timeout (ITS#4115); revitalize (per-target) network-timeout in back-meta; fix issue with connection initialization error in ldap_back_retry(); cleanup configuration of back-ldap
2005-12-07 17:35:02 +00:00
Pierangelo Masarati
2ea72234aa
return more appropriate error code
2005-12-06 20:04:52 +00:00
Pierangelo Masarati
52a827466a
fix previous commit
2005-11-28 10:38:01 +00:00
Pierangelo Masarati
4fe032e9be
add very preliminary support for <draft-sermersheim-ldap-distproc>
2005-11-27 23:23:59 +00:00
Pierangelo Masarati
26a83119fd
cleanup
2005-11-27 23:19:17 +00:00
Pierangelo Masarati
1e01082e10
s/chain-cache-uris/chain-cache-uri/
2005-11-27 23:18:47 +00:00
Pierangelo Masarati
b3c8a976ec
use LDAP_SIZELIMIT_EXCEEDED; rework the return values of slap_send_search_entry(); silence a few warnings
2005-11-25 22:17:24 +00:00
Pierangelo Masarati
ea83f6a669
check sizelimit in frontend (ITS#4213)
2005-11-25 00:28:33 +00:00
Pierangelo Masarati
d34fffcaf9
use lutil_ato*() whenever appropriate
2005-11-24 01:10:05 +00:00
Hallvard Furuseth
6b93c656a1
Fix olcChainConfig definition when !LDAP_CONTROL_X_CHAINING_BEHAVIOR
2005-11-23 10:49:47 +00:00
Pierangelo Masarati
64156a68b2
fix dumb var initialization
2005-11-20 19:55:07 +00:00
Pierangelo Masarati
4c92090e87
fix compilation when the chaining control is undefined
2005-11-20 19:28:03 +00:00
Pierangelo Masarati
4852bf8a58
don't care about empty matched/text #ifdef LDAP_NULL_IS_NULL
2005-11-20 01:59:26 +00:00
Pierangelo Masarati
754e59543d
cleanup
2005-11-20 01:39:19 +00:00
Pierangelo Masarati
fbb31b58a1
yet another fix to previous commit
2005-11-20 00:29:35 +00:00
Pierangelo Masarati
b85b28275f
fix previous commit
2005-11-20 00:08:50 +00:00
Pierangelo Masarati
d71a3add92
fix typo in write timeouts argnumbers
2005-11-19 23:23:18 +00:00
Pierangelo Masarati
5bd95600de
allow the chain overlay and the underlying databases to be loaded via back-config
2005-11-19 23:22:50 +00:00
Pierangelo Masarati
39d721504a
plug one-time leaks
2005-11-19 18:44:54 +00:00
Pierangelo Masarati
6d7689b7e3
check we don't exceed userland with config param bits
2005-11-19 18:01:28 +00:00
Pierangelo Masarati
3e7fd464dc
streamline back-ldap/slapo-chain configuration; add the possibility to cache non-configured, anonymous referral URIs
2005-11-19 17:48:33 +00:00
Pierangelo Masarati
7fa4b159bf
fix dangling resources issue in slapd-ldap; completely rework slapo-chain to fix the resource leak/concurrency issue; add support for multiple well-known URIs to set credentials for, and deal with unknown URIs anonymously; similar reworking and cleanup for slapd-meta
2005-11-19 15:00:50 +00:00
Pierangelo Masarati
dd2afd3e3e
refine previous commit...
2005-11-16 14:20:45 +00:00
Pierangelo Masarati
917b77fff1
fix matched handling of slapd-ldap/slapo-chain (ITS#4176)
2005-11-16 14:17:19 +00:00
Pierangelo Masarati
78bd3bf6a3
handle LDAPv2 when returning timelimit; silence warning
2005-11-11 09:54:07 +00:00
Pierangelo Masarati
93abd4c616
cannot happen...
2005-11-09 12:58:57 +00:00
Pierangelo Masarati
4cab386d13
backport write operation timeouts from back-meta to back-ldap; minor cleanup & silence warnings
2005-11-06 23:29:10 +00:00
Pierangelo Masarati
1ec4cf7bba
add a giant mutex around the ldapinfo structure to serialize chaining (need to check for deadlocks...)
2005-11-04 01:42:11 +00:00
Pierangelo Masarati
d3a2a42e85
fix previous commit (addresses ITS#4139)
2005-11-03 21:48:46 +00:00
Pierangelo Masarati
2a24cbb5e8
don't leak text/matched
2005-11-03 11:58:06 +00:00
Kurt Zeilenga
ecd86725f2
Update result code to IANA-assigned values
...
Provide some backwards compatibility.
Misc cleanup
2005-11-03 01:27:07 +00:00
Pierangelo Masarati
7146f4e21f
don't leak matchedDN
2005-11-01 16:47:17 +00:00
Pierangelo Masarati
4744733638
don't copy o_ndn into lc_bound_ndn, otherwise we end up in a bind with DN but no password\!
2005-10-14 23:25:57 +00:00
Pierangelo Masarati
37f4e80929
hide unused member (will likely be removed)
2005-09-24 18:46:01 +00:00
Pierangelo Masarati
112be0118e
cleanup states/timeout handling in back-ldap/meta; add connection pooling and defer of pseudoroot bind to back-meta
2005-09-24 18:39:26 +00:00
Pierangelo Masarati
fb3fc81c7e
improved authz_backend detection for internal databases (ITS#4018)
2005-09-10 09:56:29 +00:00
Pierangelo Masarati
866148810e
release resources (ITS#4016)
2005-09-09 02:37:38 +00:00
Pierangelo Masarati
4687de2062
fix typo (ITS#4005)
2005-09-06 15:17:07 +00:00
Pierangelo Masarati
7fd7001fc2
fix old erroneous commit (ITS#4001)
2005-09-04 19:21:39 +00:00
Pierangelo Masarati
bac1aea2a5
fix previous commit
2005-08-29 09:48:07 +00:00
Pierangelo Masarati
97600bf23c
prettify matchedDN; return response code
2005-08-27 19:20:31 +00:00
Howard Chu
5a03f7611f
Fix for Windows mod compatibility, imported symbols cannot be used as
...
constant initializers.
2005-08-26 02:17:13 +00:00
Pierangelo Masarati
6cb8b14435
allow undefined attrs to be "proxied" (ITS#3959)
2005-08-25 21:14:26 +00:00
Pierangelo Masarati
075220dd7e
need some minimal timeout otherwise strange issues occur
2005-08-22 18:14:41 +00:00
Pierangelo Masarati
15d1b4d5dd
cleanup locking
2005-08-20 19:00:56 +00:00
Pierangelo Masarati
11211d0dae
strip entryDN from search entries; frontend will reattach it :(
2005-08-18 11:26:29 +00:00
Pierangelo Masarati
557f5eb2ca
allow noUserMod attrs write proxying when manageDIT is set (still to work in frontend for add)
2005-08-17 19:40:02 +00:00
Pierangelo Masarati
5873048347
fix return code (prevents clean usage of back-ldap for internal searchs)
2005-08-17 19:38:36 +00:00
Pierangelo Masarati
ecd99b83dd
set "matched" as appropriate (ITS#3942)
2005-08-17 08:13:24 +00:00
Hallvard Furuseth
a0b5f5138b
Remove unused label "error_return"
2005-08-16 19:45:50 +00:00
Hallvard Furuseth
9873eb7ab0
Add missing Statslog() statements (loglevel stats/stats2):
...
"ABANDON", "STARTTLS", "CANCEL", "WHOAMI", "PASSMOD", "EXT", "INTERM",
"TLS established", SASL and Extended Response "RESULT".
In Statslog output "conn=xx fd=yy closed", append the reason in
"()" unless client or server closed the connection after Unbind.
Still missing Statslog output from a number of failed requests.
2005-08-14 00:14:58 +00:00
Pierangelo Masarati
7b9173d0bb
should compile also when #undef HAVE_TLS
2005-08-12 10:51:39 +00:00
Pierangelo Masarati
a23466f64a
should compile also when #undef HAVE_TLS
2005-08-12 10:49:55 +00:00
Pierangelo Masarati
d10250d9f6
add authzSyntax for authzTo/authzFrom attributes; add X-ORDERED 'VALUES' if support for ordered_value_{validate,pretty,normalize} is present; exploit normalization in slap_parseURI (only #ifdef LDAP_DEVEL)
2005-08-11 23:52:17 +00:00
Pierangelo Masarati
c6e2a69f27
fix tls propagation, including rebind
2005-08-11 16:01:24 +00:00
Pierangelo Masarati
468e03a655
plug more leaks
2005-08-07 12:55:15 +00:00
Pierangelo Masarati
fa27310d77
use trylock only where necessary
2005-08-07 00:35:11 +00:00
Pierangelo Masarati
4ed743cc84
remove unrequired member; address ITS#3913
2005-08-02 22:48:30 +00:00
Pierangelo Masarati
9da3dbf3c8
more fixes to parsing of (deprecated) config directives (ITS#3915)
2005-08-02 22:21:44 +00:00
Pierangelo Masarati
4148ddc31f
save 1 function call...
2005-08-02 08:13:16 +00:00
Pierangelo Masarati
c8a5fd2df2
fix various leaks
2005-08-01 23:32:14 +00:00
Luke Howard
6f0edd6c22
Call slap_mods2entry() in do_add(), so that global overlays (including
...
global SLAPI plugins) have access to op->ora_e.
Note that slap_mods2entry() is still called in fe_op_add() in order to
add any operational attributes.
2005-07-31 04:56:27 +00:00
Pierangelo Masarati
d921f216ac
fix referrals handling (needs work)
2005-07-30 16:25:18 +00:00
Pierangelo Masarati
aace773cb6
more table-driven config cleanup
2005-07-29 01:00:48 +00:00
Hallvard Furuseth
397d7171c0
Silence unused variable warnings with #ifdef LDAP_CONTROL_X_CHAINING_BEHAVIOR
2005-07-27 08:44:11 +00:00
Pierangelo Masarati
111f5fdc5c
more fixes to back-ldap runtime configuration (ITS#3895)
2005-07-26 00:11:11 +00:00
Pierangelo Masarati
a91ebfac79
plug leaks
2005-07-25 20:47:39 +00:00
Pierangelo Masarati
3e84f692aa
there might definitely be concurrency issues, but it's not pooled connections' fault
2005-07-23 22:03:35 +00:00
Pierangelo Masarati
e810105f87
(mostly) reverting previous commit (overconservative)
2005-07-23 22:02:12 +00:00
Pierangelo Masarati
796316bc84
strengthen concurrency protection
2005-07-23 19:39:51 +00:00
Pierangelo Masarati
bea2e5494c
reverse logic (chasing a dangling pointer...)
2005-07-23 19:38:57 +00:00
Hallvard Furuseth
4a57978a4b
'#if 0' out variables used only in #if 0. Fix '#if 0'-ed out counting loops.
2005-07-22 13:21:10 +00:00
Pierangelo Masarati
4be9f57b29
more on leaks & small fixes to unparsing
2005-07-22 03:23:58 +00:00
Pierangelo Masarati
6adfb5dd2f
note an issue
2005-07-22 03:23:26 +00:00
Pierangelo Masarati
1ac6bf4d1d
fix back-ldap unparsing
2005-07-22 02:29:49 +00:00
Pierangelo Masarati
51346cfa68
fix ITS#3862
2005-07-18 21:32:31 +00:00
Hallvard Furuseth
81ecb0b153
assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL).
2005-07-18 06:22:33 +00:00
Hallvard Furuseth
0cc537e6f1
Declare ldap_back_init_cf().
2005-07-17 12:06:09 +00:00
Pierangelo Masarati
681a547e13
fix potential deadlock
2005-07-04 22:41:27 +00:00
Pierangelo Masarati
982981d465
fix potential deadlock; improve idassert in case of authzFrom rules (new flag values); rootdn can always idassert
2005-07-03 23:27:56 +00:00
Pierangelo Masarati
1aaa18b180
more on ITS#3808
2005-06-29 18:16:29 +00:00
Pierangelo Masarati
9e811df052
seems to definitely fix issues related to ITS#3808
2005-06-29 16:38:09 +00:00
Pierangelo Masarati
cbe9c74675
return LDAP_SUCCESS if Start TLS failed but was not critical
2005-06-29 12:38:18 +00:00
Pierangelo Masarati
671b02f748
more on ITS#3808
2005-06-29 12:28:40 +00:00
Pierangelo Masarati
196af0e056
(partial?) fix ITS#3808
2005-06-29 11:44:11 +00:00
Pierangelo Masarati
c7c572f883
fix ITS#3785: do our best to deal with invalid filters...
2005-06-16 19:27:03 +00:00
Pierangelo Masarati
e12c4ca230
preemptive time limit check in proxy backends
2005-06-13 19:14:40 +00:00
Kurt Zeilenga
43ffb3f235
Fix -ULDAP_DEVEL build
2005-06-03 22:13:27 +00:00
Kurt Zeilenga
da9732a766
fix -ULDAP_DEVEL compile
2005-06-03 21:52:54 +00:00
Pierangelo Masarati
47daec07d5
fix previous commit :)
2005-05-25 12:05:39 +00:00
Pierangelo Masarati
1b9c9577c2
invalidate cached connections if URI changed
2005-05-25 11:54:19 +00:00
Pierangelo Masarati
672c39024e
further fixing of back-ldap config; added enum_to_verb call to ease mapping enumerations to strings...
2005-05-23 14:14:34 +00:00
Pierangelo Masarati
a7f44159c1
complete back-config support, including chain overlay; passes all tests; HEADS-UP: few syntax changes (essentially backwards compatible)
2005-05-23 07:25:00 +00:00
Pierangelo Masarati
da2a26d19f
first round of back-config support; need to #define LDAP_BACK_BCONFIG; no support for rewrite and so, still stuff to fix. Doesn't pass most of the tests
2005-05-21 19:07:14 +00:00
Pierangelo Masarati
be53e82650
fix entry DN free
2005-05-21 14:53:05 +00:00
Pierangelo Masarati
96773427db
don't bother about slap_dummy_bv
2005-05-13 09:06:28 +00:00
Pierangelo Masarati
1001d062d3
consistently rename function
2005-05-05 18:11:35 +00:00
Pierangelo Masarati
8ad34dc76b
fix previous commit: don't loop on undefined; return success with no data in case of undefined filter
2005-05-05 12:01:12 +00:00
Pierangelo Masarati
7f61a2739a
fix support for absoluteFilters
2005-05-05 11:19:11 +00:00
Pierangelo Masarati
d30933af36
fix previous commit
2005-05-05 00:31:11 +00:00
Pierangelo Masarati
f0122ce3fc
move discover function to frontend
2005-05-05 00:22:43 +00:00
Pierangelo Masarati
c80eb34888
honor T-F filters (ITS#3706) and some cleanup
2005-05-05 00:07:17 +00:00
Pierangelo Masarati
4199f4577a
if for any reason ldap_search_ext() fails (e.g. ITS#3706) don't wait for results
2005-05-04 23:16:56 +00:00
Pierangelo Masarati
471f4772a0
cleanup connection locking
2005-04-21 00:49:35 +00:00
Pierangelo Masarati
a141e3badf
enable use of asynchronous call to StartTLS
2005-04-16 02:56:46 +00:00
Pierangelo Masarati
5affbfa428
add SASL bind for acl-authc; use slap_bindconf
2005-04-10 23:44:06 +00:00
Howard Chu
38cf26c95a
Fix typo
2005-03-14 19:23:42 +00:00
Howard Chu
4e2dccf147
Fix prev commit, make sure to only send result once
2005-03-04 06:25:10 +00:00
Howard Chu
379a620217
Fix ITS#3537 (need to repeat this fix for the other operations too.)
2005-03-04 06:20:37 +00:00
Pierangelo Masarati
edfbbeb653
clarify comment
2005-02-19 16:55:14 +00:00
Pierangelo Masarati
f8b463d0bc
use asynchronous StartTLS
2005-02-19 16:14:22 +00:00
Howard Chu
beaeb5ed5c
Fix if HAVE_TLS is missing
2005-02-18 04:20:56 +00:00
Howard Chu
ee42df4cea
Always return SLAPD_ABANDON in response to op->o_abandon being set.
2005-02-18 00:37:40 +00:00
Pierangelo Masarati
b43fb2bdfc
allow stacking of a default chaining control when chasing further referrals; fix referral return memory allocation on direct search
2005-02-06 22:12:02 +00:00
Pierangelo Masarati
046b40cbe3
provisions for configuring a desired chaining policy via the chaining behavior control
2005-02-05 18:21:14 +00:00
Pierangelo Masarati
e50092878d
temporarily revert to synchronous start tls
2005-02-05 17:33:22 +00:00
Pierangelo Masarati
43138aa500
use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup
2005-02-05 15:55:02 +00:00
Howard Chu
122cdf4549
In ldap_back_bind, don't send success result, frontend does it
2005-02-01 00:19:45 +00:00
Pierangelo Masarati
cfc77f0a0a
make referrals chasing optional (default is to chase them)
2005-01-30 22:56:59 +00:00
Pierangelo Masarati
8cc2aa9372
implement hook; cleanup
2005-01-30 22:05:46 +00:00
Pierangelo Masarati
4304dfc9a2
allow referrals in result (may happen); propagate chaining errors
2005-01-28 01:43:49 +00:00
Kurt Zeilenga
e826914a88
Less kludgy willing-to-perform check for recognized and appropriate
...
global controls
2005-01-27 06:45:20 +00:00
Pierangelo Masarati
3dd2f4150b
allow proxyAuthz of users authenticated via SASL
2005-01-26 20:01:02 +00:00
Pierangelo Masarati
e047657f06
remove overoptimistic assertion
2005-01-26 10:27:38 +00:00
Pierangelo Masarati
e2fe9e394a
fix controls run-time registered by global overlays (kludge non longer required?)
2005-01-26 08:04:19 +00:00
Pierangelo Masarati
5b193c218f
fix dynamically registered controls check; NOTE: controls registered by global overlays don't work yet; better leave Kurt's kludge in place right now
2005-01-25 19:39:56 +00:00
Pierangelo Masarati
6239b70081
cleanup previous commit
2005-01-25 17:14:19 +00:00
Pierangelo Masarati
c6a1f24186
add support for Chaining Behavior control (<draft-sermersheim-ldap-chaining>, a work in progress)
2005-01-25 16:11:26 +00:00
Pierangelo Masarati
c6b6d2a5ec
StartTLS (ITS#3507) + chain overlay fixes and improvements
2005-01-24 09:38:11 +00:00
Pierangelo Masarati
ae0f47b063
improve parsing of acl-authcDN/acl-passwd
2005-01-22 18:48:03 +00:00
Pierangelo Masarati
1d919d35a5
remove #ifdef's for identity assertion
2005-01-20 09:04:37 +00:00
Pierangelo Masarati
90cc75f1a1
cleanup; add proxyAuthz capability
2005-01-19 22:59:25 +00:00
Pierangelo Masarati
5f178fd3d1
use idassert for proxyAuthz with the chain overlay
2005-01-19 19:11:35 +00:00
Pierangelo Masarati
7348603a53
fix ITS#3484
2005-01-12 23:22:56 +00:00
Pierangelo Masarati
4e6fd44213
the fixes to ITS#3475 make the referrals callback no longer required
2005-01-12 21:02:23 +00:00
Pierangelo Masarati
83d1e22b8c
don't malloc if proxyAuthz is the only control
2005-01-11 00:37:22 +00:00
Pierangelo Masarati
41d7c03e8b
clear out the error
2005-01-09 23:30:19 +00:00
Pierangelo Masarati
154ae48d69
put back chain overlay into back-ldap
2005-01-09 21:26:32 +00:00
Pierangelo Masarati
cd2e651c26
ITS#3469: C99 compliance
2005-01-08 11:25:11 +00:00
Pierangelo Masarati
4d8267595f
retry on ldap_result() with a timeout
2005-01-08 09:19:51 +00:00
Kurt Zeilenga
dc0eacd40b
Happy New Year!
2005-01-01 20:49:32 +00:00
Pierangelo Masarati
8ec78171d3
trim comment
2005-01-01 16:14:40 +00:00
Pierangelo Masarati
5a920206dd
more cleanup
2004-12-11 18:36:31 +00:00
Pierangelo Masarati
fefa59059d
minor cleanup
2004-12-08 19:11:27 +00:00
Pierangelo Masarati
6e12819387
allow undefined schema items to be returned by back-ldap and remapped by the rwm overlay
2004-12-01 21:47:13 +00:00
Pierangelo Masarati
6b1c641bc1
warn users of the need to use the rwm overlay
2004-11-29 12:40:36 +00:00
Pierangelo Masarati
6eec000889
improve diagnostics
2004-11-17 17:55:44 +00:00
Pierangelo Masarati
b29bf83e7e
remove back-*/external.h
2004-11-15 19:45:49 +00:00
Pierangelo Masarati
2d5ec082dd
cleanup
2004-11-15 14:17:08 +00:00
Pierangelo Masarati
ee4c10d5d0
allow backends to automatically install overlays; issue warnings in case of duplicates (fixes ITS#3395 for cases (1.a), (1.b) and (2) simultaneously)
2004-11-15 10:28:33 +00:00
Pierangelo Masarati
9c550e7235
first step towards removing back-*/external.h
2004-11-13 18:52:44 +00:00
Pierangelo Masarati
cd35386935
fix ITS#3391
2004-11-13 18:40:16 +00:00
Pierangelo Masarati
db4f223c66
improve overlay helpers
2004-11-13 17:20:24 +00:00
Pierangelo Masarati
363fdcd951
no longer required (moved to rwm overlay)
2004-11-13 14:50:34 +00:00
Pierangelo Masarati
f176935a58
remove rewrite stuff -- now delegted to rwm overlay
2004-11-13 14:43:30 +00:00
Pierangelo Masarati
dd367a2b78
make sure we're comparing the same database
2004-11-11 13:12:34 +00:00
Pierangelo Masarati
79f744f30b
rework static backend initialization
2004-11-11 00:39:19 +00:00
Pierangelo Masarati
f06f2a6aec
fix ITS#3350 (rewrite/remap will be replaced by the rwm overlay)
2004-11-10 09:56:55 +00:00
Pierangelo Masarati
b349604352
fix ITS#3387
2004-11-10 09:45:02 +00:00
Howard Chu
374cd32eb6
Add a retry for entry_get too. (oops)
2004-10-07 02:55:51 +00:00
Howard Chu
7e87f54716
Revert ITS#3353 patch, it needs to be reworked.
2004-10-06 05:51:38 +00:00
Howard Chu
bbe986b94e
Add a retry for failed connections
2004-10-01 12:00:41 +00:00
Howard Chu
55f12a7eee
Add a retry for failed connections
2004-10-01 11:16:38 +00:00
Howard Chu
fda3d6260e
ITS#3353 consolidate slapd globals into a single struct
2004-10-01 07:33:16 +00:00
Kurt Zeilenga
d611a4b49a
unifdef -UNEW_LOGGING
2004-09-04 04:54:28 +00:00
Pierangelo Masarati
809e623cd9
add paged results support to back-ldap
2004-08-24 09:19:33 +00:00
Howard Chu
f2ee179c3f
ITS#3291 delay use of slap_known_controls until all configuration is done
2004-08-19 12:10:22 +00:00
Pierangelo Masarati
cc60b5ce76
cleanup previous fix; maybe the advanced url parsing funcs should go in some ldap_pvt.h header?
2004-07-26 08:31:01 +00:00
Pierangelo Masarati
9f6f5491fe
slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay
2004-07-25 23:16:40 +00:00
Pierangelo Masarati
cd7540feee
cleanup URI parsing/checking (fixes ITS#3253)
2004-07-24 11:17:03 +00:00
Pierangelo Masarati
a7b55f4f44
assert administrative identity instead of the required one if doing auth check in non-caching mode
2004-07-23 00:11:05 +00:00
Pierangelo Masarati
07f010a01f
fix previous fix
2004-07-22 23:03:04 +00:00
Pierangelo Masarati
b94d5e17e2
rework op/rs structures to deal with opeartional attributes
2004-07-18 21:44:29 +00:00
Hallvard Furuseth
af5ab4f196
Add missing format argument for 'unhandled idassert-method' error message.
2004-07-18 07:16:34 +00:00
Pierangelo Masarati
81d89ddd63
validate/pretty before normalizing... (ITS#3218)
2004-07-06 22:02:52 +00:00
Pierangelo Masarati
277d921945
clear shared connections when ldap_result fails with -1 (typically, remote server is down); fixes ITS#3217
2004-07-04 23:35:18 +00:00
Pierangelo Masarati
1f70ad82f2
clean up unnecessary checks; don't use SASL native authz if authz ID is not static, because back-ldap pools connections...
2004-06-21 00:57:12 +00:00
Pierangelo Masarati
eca48b6f20
not sure that cyrus-sasl doesn't honor empty authz; need to check
2004-06-20 23:21:40 +00:00
Pierangelo Masarati
5bfb9fd590
make authz mode selection fully manual, plus more cleanup
2004-06-20 22:42:36 +00:00
Pierangelo Masarati
176e5542bb
fix erroneous logging
2004-06-20 22:42:04 +00:00
Pierangelo Masarati
5d843b2b13
detect mechs that are known to perform native authz
2004-06-19 18:32:55 +00:00
Pierangelo Masarati
f34b11760a
allow a hidden parameter to instruct the proxy that the SASL mech can do native authz; will disappear as soon as I can detect it automnatically
2004-06-19 18:18:26 +00:00
Pierangelo Masarati
e6065fb20d
li->be didn't work; since it seems to be unnecessary, it's been removed; please check
2004-06-19 15:16:51 +00:00
Pierangelo Masarati
d1b692ceb4
clarify no limits in (internal) searches
2004-06-12 11:33:21 +00:00
Jong Hyuk Choi
f60f2d5048
Fix typo
2004-06-08 02:52:59 +00:00
Howard Chu
7488f557cd
Fix entry_get, only check mapped attr if attr was provided
2004-05-25 04:54:32 +00:00
Pierangelo Masarati
a18e199e0d
more on identity assertion
2004-05-22 17:26:02 +00:00
Howard Chu
a11553c212
Always normalize entries (ITS#3152, ITS#3144)
2004-05-19 23:19:24 +00:00
Pierangelo Masarati
cdebc4d376
more on idassert: SASL bind/authz
2004-05-15 10:11:10 +00:00
Pierangelo Masarati
8b954144d6
reflect Kurt's comments on ID assertion
2004-05-14 10:01:22 +00:00
Pierangelo Masarati
3b38676dd3
complete idassert options
2004-05-13 22:12:46 +00:00
Pierangelo Masarati
66ddf62922
add idassert code (undocumented yet)
2004-05-13 20:25:53 +00:00
Pierangelo Masarati
d40e5a365a
fix DN_SEPARATOR() and clarify its use
2004-05-07 09:03:05 +00:00
Pierangelo Masarati
b34cf02488
more on fixing escaped semicolon in normalized DN
2004-05-07 02:18:08 +00:00
Luke Howard
22f425c1f3
Fix warning in assignment
2004-04-15 02:37:40 +00:00
Luke Howard
12949734bd
Fix warning in assignment
2004-04-15 02:36:23 +00:00
Pierangelo Masarati
c0c24cfec5
first round of SHADOW flags/isupdate test unification
2004-04-10 10:00:58 +00:00
Kurt Zeilenga
c7f0438044
bvalue cleanup
2004-04-08 06:49:17 +00:00
Howard Chu
8c6fe48806
More dynamic/static cleanup
2004-04-08 05:58:54 +00:00
Howard Chu
f2e1df3ef7
Consolidated static/dynamic backend switches
2004-04-08 05:56:23 +00:00
Jong Hyuk Choi
1c1b2bb6ee
updatedn fix for syncrepl
2004-04-07 17:32:37 +00:00
Kurt Zeilenga
44725e7303
use BER_BVNULL
2004-04-07 04:11:43 +00:00
Pierangelo Masarati
a11dc61e05
rework be_isupdate accordingly to be_isroot
2004-04-06 09:42:40 +00:00
Pierangelo Masarati
e17be551a4
fix previous commit
2004-04-06 08:47:59 +00:00
Pierangelo Masarati
0f867b9577
revert erroneous commit; cure the test the right way
2004-04-05 23:47:17 +00:00
Kurt Zeilenga
9a64fdb991
use SLAP_DBFLAGS instead of be->be_flags
2004-04-05 23:42:59 +00:00
Pierangelo Masarati
6a1dd9a1cd
exploit new frontend API 2 protocol error mapping; use urldesc...
2004-04-05 17:36:53 +00:00
Pierangelo Masarati
fa3baaeae9
overlays reworking
2004-03-18 18:59:46 +00:00
Pierangelo Masarati
66ee9b2d73
carefully check the URI
2004-03-17 22:36:47 +00:00
Pierangelo Masarati
ec6a663820
reset SlapReply flags
2004-03-17 11:50:15 +00:00
Pierangelo Masarati
246fa41c96
"searchFilter" by default must be empty
2004-03-10 21:53:39 +00:00
Pierangelo Masarati
65b49dd312
add "searchFilterAttrDN" rewrite context, and allow filterstring rewrite
2004-03-10 21:11:14 +00:00
Pierangelo Masarati
091246c6fd
move limits evaluation to frontend
2004-03-08 18:12:45 +00:00