Kurt Zeilenga
3c598e89fb
Happy new year
2004-01-01 19:15:16 +00:00
Luke Howard
c03a70955d
Make defaulted backend available to ACL plugin pblock
2004-01-01 09:42:44 +00:00
Luke Howard
03e5db818f
Fix ACL plugin bug - return value of ACL plugins was being ignored
2004-01-01 06:33:18 +00:00
Luke Howard
f289d6b7f0
Fix assertion failure if acl_check_modlist() called where op->o_bd == NULL.
...
Behavior now matches access_allowed() - the first backend is used. The
code needs review, I have not tested it.
2003-12-30 03:50:14 +00:00
Luke Howard
0549d46adf
Don't require slapi to be in the path - always include slapi/slapi.h
2003-12-28 04:17:48 +00:00
Pierangelo Masarati
f2a9089e4d
cleanup most of the -pedantic warnings (ITS#2884) and other small fixes
2003-12-17 20:55:46 +00:00
Luke Howard
516fd0ff50
First round of SLAPI cleanups - use slapi_int_XXX for internal functions
...
(slapi_x_XXX is still reserved for exported functions that are not part
of the SLAPI specification)
2003-12-16 15:49:31 +00:00
Pierangelo Masarati
ee34f3fb64
add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication
2003-12-16 00:49:10 +00:00
Kurt Zeilenga
4e15a84452
Updated notices
2003-11-27 01:17:14 +00:00
Howard Chu
01f7a7466b
SLAPI fix - no-op when slapi_plugins_used == 0
2003-10-24 05:58:42 +00:00
Howard Chu
1240c70ff4
ITS#2497, implement value-level ACLs:
...
access to attr=foo val.regex=bar.*
2003-09-20 03:23:10 +00:00
Howard Chu
94e88c3700
ITS#2679 don't use cached ACL state from different attribute
2003-09-16 22:03:26 +00:00
Kurt Zeilenga
a1b9d3148e
subtree ACI patch from Ralf
2003-09-09 18:37:31 +00:00
Luke Howard
0edb270b9e
Support for ACL plugins
2003-08-31 08:17:21 +00:00
Howard Chu
dc41a6b37e
ITS#2529 null DN in log
2003-05-22 09:22:41 +00:00
Kurt Zeilenga
231f8464d1
cleanup
2003-04-29 21:14:12 +00:00
Kurt Zeilenga
5cd994ed21
remove dnNormalize2
...
replace calls to dnNormalize2 with calls to dnNormalize
2003-04-29 18:28:14 +00:00
Luke Howard
86a18c2ea2
Don't pollute op->o_bd in access_allowed()
2003-04-18 04:57:15 +00:00
Pierangelo Masarati
194528d689
fix ACI per-thread memory management
2003-04-12 17:42:51 +00:00
Howard Chu
280fc819cf
Memory context tweaks for Bind
2003-04-12 06:56:42 +00:00
Howard Chu
ece7452b05
More memory context tweaks
2003-04-11 01:29:28 +00:00
Kurt Zeilenga
c75be97ae9
#ifdef -DSLAP_NVALUES
2003-04-05 03:35:16 +00:00
Pierangelo Masarati
df29552130
fix new API leftover
2003-04-03 21:17:44 +00:00
Howard Chu
e8c58b4e7f
Major API change - (SLAP_OP_BLOCKS) All request parameters are
...
consolidated into the Operation structure. All reply parameters
are consolidated into the new SlapReply structure. Most operations
now have identical call signatures... Changes are not #ifdef'd,
revert to -r NO_SLAP_OP_BLOCKS if necessary to back out.
2003-03-30 09:03:54 +00:00
Howard Chu
5ad51b6150
SLAP_NVALUES tweaks - after input, a_nvals is always populated. If there is
...
no normalizer, a_nvals = a_vals.
2003-03-24 01:56:56 +00:00
Howard Chu
3f48cabdde
Fix typo
2003-03-23 15:45:06 +00:00
Kurt Zeilenga
8873006105
SLAP_NVALUES changes
...
and misc cleanup
2003-03-16 18:10:16 +00:00
Kurt Zeilenga
c0477e1532
Fix test006-acls
2003-03-15 23:02:55 +00:00
Kurt Zeilenga
3972e13fc3
NVALUES: fix a couple of value_find_ex() calls
2003-03-15 22:47:17 +00:00
Pierangelo Masarati
bfe6d806d9
(ultimately?) fix ITS#2361
2003-03-11 12:23:20 +00:00
Howard Chu
5c3909f567
ITS#2361, skip sockname, peername, peerdomain, sockurl ACLs if the
...
corresponding conn->field is NULL. (overwrites previous commit.)
2003-03-10 22:28:35 +00:00
Pierangelo Masarati
11c225d40c
check conn->c_listener before use (hack to fix ITS#2361; need to review this part of slapi)
2003-03-10 22:19:32 +00:00
Howard Chu
40454ccec8
Added op->o_is_auth_check; use ACL_AUTH instead of ACL_SEARCH/ACL_READ
...
in access_allowed() if flag is set. Set in sasl/saslauth searches.
2003-03-10 22:07:21 +00:00
Kurt Zeilenga
152829be87
SLAP_NVALUES:
...
schema engine updated (but not schema routines so things don't run yet)
nvalues mostly populated, enough for tests 0-2 to pass
schema routines needs lots of work
modify/mods codes needs lots of work
2003-02-27 01:54:43 +00:00
Pierangelo Masarati
937475efbf
blind fix
2003-02-26 21:45:56 +00:00
Kurt Zeilenga
25886d989a
Change MR flag names and add comments as to what they mean to slap.h
2003-02-26 02:55:28 +00:00
Howard Chu
cbf7b063e3
ITS#2285 string_expand for acl set
2003-01-30 20:59:47 +00:00
Kurt Zeilenga
6939c53170
Happy new year
2003-01-03 20:20:47 +00:00
Pierangelo Masarati
8e74ed4dfc
fix initialization size and silence warning
2002-12-05 11:47:44 +00:00
Howard Chu
b1798f9160
Fix typo in prev commit value_find/_ex
2002-12-04 23:20:22 +00:00
Howard Chu
09679eb715
Added SLAP_MR_VALUE_NORMALIZED_MATCH, avoid redundant normalize when
...
calling value_find with already-normalized DNs
2002-12-04 18:19:46 +00:00
Howard Chu
827ea96e16
ITS#1523 enhanced ACL caching
2002-12-04 02:35:00 +00:00
Kurt Zeilenga
33248a02e1
Code cleanup (no functional changes)
2002-10-01 04:07:55 +00:00
Pierangelo Masarati
857d08ea21
use bvmatch() instead of ber_bvcmp() when testing for match without ordering
2002-09-02 19:39:06 +00:00
Howard Chu
1d7ee4471f
Pass Operation to backend_attribute - should have been doing this all along.
2002-08-24 07:31:14 +00:00
Kurt Zeilenga
f10699865e
consistently reduce string_expand bv_len by 1
2002-08-11 20:26:01 +00:00
Kurt Zeilenga
526d010635
Patch: add OpenLDAPaci #public# access (ITS#2005)
...
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
================
I couldn't find a way for an OpenLDAPaci to grant public access to an
entry, so I added a dnType #public# for that. It is in the position
of subjectDn in the draft, which seems kind of stupid, so I put it
in the position of dnType instead.
Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
2002-08-05 17:53:39 +00:00
Kurt Zeilenga
f8c0481dd4
Patch: ACL #access-id#<invalid-DN> granted access to everyone (ITS#2006)
...
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
================
There is a bug in OpenLDAPaci's "access-id": If the specified DN is
invalid so dnNormalize2() fails, everyone gets access.
This means that e.g. "#access-id#[all]" gives public access, so it
might be considered a feature, but I fixed it anyway:-) I guess that
means the change should be documented in the release notes, though.
See also ITS#2005 (add OpenLDAPaci #public# access).
Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
2002-08-05 17:52:16 +00:00
Kurt Zeilenga
182dcf27e2
clean up curly matching
2002-07-28 07:37:46 +00:00
Kurt Zeilenga
8a3d02bf6b
misc cleanup
2002-07-23 18:35:12 +00:00
