Commit Graph

842 Commits

Author SHA1 Message Date
Kurt Zeilenga
23af2c36e2 ITS#8675 - Fix tools to not continue on TLS error
The spec says that upon StartTLS 'success', both TLS communications is
established on the octet following the Start TLS response (and the
request)... and that once one starts TLS communications, one can never
go back to LDAP without TLS. So if there's a TLS failure (whether as
part of TLS nego or later), LDAP communications cannot be continued
(without TLS).

Only ignoring LDAP errors (rc > 0) ensures that if TLS negotiation
fails, we don't attempt to send LDAP operations without TLS.
2020-03-26 18:45:00 +00:00
Ondřej Kuzník
ad2e6b3a4a ITS#8983 Fix compiler warning 2020-01-28 12:41:57 +00:00
Ondřej Kuzník
a9896e87f4 ITS#9145 Fix type signature 2020-01-28 12:41:57 +00:00
Ondřej Kuzník
341a79d88c Check transaction identifier is returned 2020-01-28 12:41:50 +00:00
Ondřej Kuzník
76c43165ea Remove LDAP_X_TXN and rename accordingly 2020-01-28 12:09:09 +00:00
Quanah Gibson-Mount
f6ad222e41 Happy New Year! 2020-01-09 16:50:21 +00:00
Ondřej Kuzník
eaabe336f3 ITS#9145 Do not add controls to cancel/abandon 2020-01-03 10:51:28 +00:00
Howard Chu
06d289f985 ITS#8983 Add draft Persistent Search 2019-02-25 15:19:33 +00:00
Ondřej Kuzník
117dcbc54d Silence compiler warnings 2019-02-19 10:28:08 +00:00
Quanah Gibson-Mount
b45a6a7dc7 Happy New Year! 2019-01-14 18:46:16 +00:00
Quanah Gibson-Mount
fb35befa9a Fixes windows build with new MS AD sync Add CLIENT_LIBS for libraries required to build the clients. 2019-01-02 15:44:20 +00:00
Thorsten Glaser
e0a7049ee5 ITS#8890 fix benign typos
No functional impact
2018-12-18 22:56:18 +00:00
Howard Chu
18e0bcb7de Add MS AD persistent search ctrl 2018-12-13 05:44:46 -08:00
Howard Chu
932edf8f43 Use base64 to input DirSync cookie 2018-12-03 03:26:18 -08:00
Howard Chu
a9bfce1292 Add some MS AD controls 2018-11-17 18:33:41 -08:00
Ondřej Kuzník
c7ef49c8ce ITS#8116 Fix handling of syncinfo intermediate message 2018-10-30 10:19:59 +00:00
Ondřej Kuzník
3004e4cabd ITS#8116 Outline SyncInfo intermediate response 2018-10-19 13:08:09 +01:00
Ondřej Kuzník
8a259e3df1 ITS#8573 allow all libldap options in tools -o option 2018-06-14 16:19:10 +01:00
Quanah Gibson-Mount
59e9ff6243 Happy New Year 2018-03-22 15:35:24 +00:00
Josh Soref
10566c8be3 ITS#8605 - spelling fixes
* javascript
* kernel
* ldap
* length
* macros
* maintained
* manager
* matching
* maximum
* mechanism
* memory
* method
* mimic
* minimum
* modifiable
* modifiers
* modifying
* multiple
* necessary
* normalized
* objectclass
* occurrence
* occurring
* offered
* operation
* original
* overridden
* parameter
* permanent
* preemptively
* printable
* protocol
* provider
* really
* redistribution
* referenced
* refresh
* regardless
* registered
* request
* reserved
* resource
* response
* sanity
* separated
* setconcurrency
* should
* specially
* specifies
* structure
* structures
* subordinates
* substitution
* succeed
* successful
* successfully
* sudoers
* sufficient
* superiors
* supported
* synchronization
* terminated
* they're
* through
* traffic
* transparent
* unsigned
* unsupported
* version
* absence
* achieves
* adamson
* additional
* address
* against
* appropriate
* architecture
* associated
* async
* attribute
* authentication
* authorized
* auxiliary
* available
* begin
* beginning
* buffered
* canonical
* certificate
* charray
* check
* class
* compatibility
* compilation
* component
* configurable
* configuration
* configure
* conjunction
* constraints
* constructor
* contained
* containing
* continued
* control
* convenience
* correspond
* credentials
* cyrillic
* database
* definitions
* deloldrdn
* dereferencing
* destroy
* distinguish
* documentation
* emmanuel
* enabled
* entry
* enumerated
* everything
* exhaustive
* existence
* existing
* explicitly
* extract
* fallthru
* fashion
* february
* finally
* function
* generically
* groupname
* happened
* implementation
* including
* initialization
* initializes
* insensitive
* instantiated
* instantiation
* integral
* internal
* iterate
2017-10-11 14:39:38 -07:00
Quanah Gibson-Mount
1df85d3427 Happy New Year! 2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
6c4d6c880b Happy New Year! 2016-01-29 13:32:05 -06:00
Thomas Cort
590378edca ITS#8118 dosearch: flush stdout
The LDIF output wasn't being explicitly flushed. In certain scenarios,
such as piping the output of a persistent ldapsearch to node.js v0.12
on Mac OS X 10.10.3, the output is unavailable to the process
consuming the search results until the stdio buffer fills (8192 bytes
for example). This can leave the tail end of persistent search results
in the buffer for a long time (until enough output has accumulated).

Explicitly call flush so that the output is immediately available.
2015-04-29 20:01:03 +01:00
Quanah Gibson-Mount
1705fa7e55 Happy New Year 2015-02-11 15:36:57 -06:00
Howard Chu
a69da18849 plug benign leak (coverity) 2015-01-13 19:59:41 +00:00
Howard Chu
97d6a4fe3e Fix unused fprintf arg (coverity) 2015-01-13 19:23:51 +00:00
Howard Chu
568dc87dbd ITS#7871 more for LDIF wrap
Clients should just use 0 for default wrap, and let libldif
take care of it.
2014-06-13 10:08:07 -07:00
Kurt Zeilenga
5c878c1bf2 Happy new year (belated) 2014-01-25 05:21:25 -08:00
Stef Walter
5c91989477 ITS#7695 Fix ldapsearch regression with CLDAP
Don't try to parse the result of a CLDAP bind request. Since these are
faked, no message is actually returned.
2013-10-10 10:53:27 -07:00
Howard Chu
461db2de1a ITS#7497 fix lineno overflow in ldif_read_record() 2013-01-23 02:19:02 +00:00
Kurt Zeilenga
0fd1bf30b8 Happy New Year 2013-01-02 10:22:57 -08:00
W. Trevor King
5cf4fbc74d ITS#7271 Don't clobber SASL_NOCANON in clients/tools/common.c 2012-05-30 09:39:54 -07:00
Jan Vcelak
4685391f8f ITS#7177 doc updates, further cleanup needed 2012-02-23 15:49:13 -08:00
SATOH Fumiyasu
1542d29a99 ITS#7152 Add missing '>' in tools help message 2012-02-23 14:48:32 -08:00
Hallvard Furuseth
25eb3dc534 ITS#7156 ldapsearch.c: #include <ac/time.h>.
Needed since e080ba6e9d, ITS#7009.
2012-02-07 16:46:39 +01:00
Hallvard Furuseth
b1646fea2f Makefile.in: Cleanup ldvversion.c (ldapvc version) 2012-02-07 16:10:58 +01:00
Kurt Zeilenga
2bbf9804b9 Happy New Year! 2012-01-01 07:10:53 -08:00
Hallvard Furuseth
ef76d419ec ITS#6548,#7092 Unbind,cleanup before client exit.
Gets rid of "(connection lost)" in slapd statslog "closed" message.
2011-11-20 13:52:40 +01:00
Hallvard Furuseth
26d881a93c Fix uninitialized variable in ldapmodify.
Introduced by 3a46af398c.
2011-11-20 13:52:07 +01:00
Pierangelo Masarati
58255ab250 further cleanup of ldapsearch response 2011-08-22 11:19:30 -06:00
Pierangelo Masarati
71eda709c6 referral is a legitimate result 2011-08-22 11:19:30 -06:00
Pierangelo Masarati
72e8a15068 make sure size limits are passed to ldapsearch 2011-08-22 11:19:30 -06:00
Pierangelo Masarati
d75803ed3f use ldap_search_ext(timelimit) instead of ldap_set_option(LDAP_OPT_TIMELIMIT) (related to ITS#7009) 2011-08-11 12:16:01 +02:00
Pierangelo Masarati
e080ba6e9d honor TIMEOUT when appropriate (ITS#7009); also honor timelimit (was broken) 2011-08-10 22:40:49 +02:00
Howard Chu
d76be4828c ITS#6977 fix verbose check in client tools 2011-06-23 17:10:37 -07:00
Howard Chu
3fcf2b163b ITS#6946 fix double-free, broken by 77a7ef0 2011-06-03 19:31:29 -07:00
Pierangelo Masarati
d7a8eff546 check security-related incompatible args (ITS#6849) 2011-03-02 14:14:39 +00:00
Hallvard Furuseth
11e2ac526c Fix last ldapwhoami commit.
Ensure message is initialized before freeing it.
2011-02-02 22:48:12 +00:00
Howard Chu
a7e0c6cd2e ITS#6755 pagedresults loop was accessing a closed FILE*. 2011-02-01 05:24:53 +00:00
Pierangelo Masarati
f4ededc49a do not #ifdef LDAP_CONTROL_AUTHZID_REQUEST; it's standard track 2011-01-08 12:50:11 +00:00