Kurt Zeilenga
|
da9732a766
|
fix -ULDAP_DEVEL compile
|
2005-06-03 21:52:54 +00:00 |
|
Pierangelo Masarati
|
47daec07d5
|
fix previous commit :)
|
2005-05-25 12:05:39 +00:00 |
|
Pierangelo Masarati
|
1b9c9577c2
|
invalidate cached connections if URI changed
|
2005-05-25 11:54:19 +00:00 |
|
Pierangelo Masarati
|
672c39024e
|
further fixing of back-ldap config; added enum_to_verb call to ease mapping enumerations to strings...
|
2005-05-23 14:14:34 +00:00 |
|
Pierangelo Masarati
|
a7f44159c1
|
complete back-config support, including chain overlay; passes all tests; HEADS-UP: few syntax changes (essentially backwards compatible)
|
2005-05-23 07:25:00 +00:00 |
|
Pierangelo Masarati
|
da2a26d19f
|
first round of back-config support; need to #define LDAP_BACK_BCONFIG; no support for rewrite and so, still stuff to fix. Doesn't pass most of the tests
|
2005-05-21 19:07:14 +00:00 |
|
Pierangelo Masarati
|
be53e82650
|
fix entry DN free
|
2005-05-21 14:53:05 +00:00 |
|
Pierangelo Masarati
|
96773427db
|
don't bother about slap_dummy_bv
|
2005-05-13 09:06:28 +00:00 |
|
Pierangelo Masarati
|
1001d062d3
|
consistently rename function
|
2005-05-05 18:11:35 +00:00 |
|
Pierangelo Masarati
|
8ad34dc76b
|
fix previous commit: don't loop on undefined; return success with no data in case of undefined filter
|
2005-05-05 12:01:12 +00:00 |
|
Pierangelo Masarati
|
7f61a2739a
|
fix support for absoluteFilters
|
2005-05-05 11:19:11 +00:00 |
|
Pierangelo Masarati
|
d30933af36
|
fix previous commit
|
2005-05-05 00:31:11 +00:00 |
|
Pierangelo Masarati
|
f0122ce3fc
|
move discover function to frontend
|
2005-05-05 00:22:43 +00:00 |
|
Pierangelo Masarati
|
c80eb34888
|
honor T-F filters (ITS#3706) and some cleanup
|
2005-05-05 00:07:17 +00:00 |
|
Pierangelo Masarati
|
4199f4577a
|
if for any reason ldap_search_ext() fails (e.g. ITS#3706) don't wait for results
|
2005-05-04 23:16:56 +00:00 |
|
Pierangelo Masarati
|
471f4772a0
|
cleanup connection locking
|
2005-04-21 00:49:35 +00:00 |
|
Pierangelo Masarati
|
a141e3badf
|
enable use of asynchronous call to StartTLS
|
2005-04-16 02:56:46 +00:00 |
|
Pierangelo Masarati
|
5affbfa428
|
add SASL bind for acl-authc; use slap_bindconf
|
2005-04-10 23:44:06 +00:00 |
|
Howard Chu
|
38cf26c95a
|
Fix typo
|
2005-03-14 19:23:42 +00:00 |
|
Howard Chu
|
4e2dccf147
|
Fix prev commit, make sure to only send result once
|
2005-03-04 06:25:10 +00:00 |
|
Howard Chu
|
379a620217
|
Fix ITS#3537 (need to repeat this fix for the other operations too.)
|
2005-03-04 06:20:37 +00:00 |
|
Pierangelo Masarati
|
edfbbeb653
|
clarify comment
|
2005-02-19 16:55:14 +00:00 |
|
Pierangelo Masarati
|
f8b463d0bc
|
use asynchronous StartTLS
|
2005-02-19 16:14:22 +00:00 |
|
Howard Chu
|
beaeb5ed5c
|
Fix if HAVE_TLS is missing
|
2005-02-18 04:20:56 +00:00 |
|
Howard Chu
|
ee42df4cea
|
Always return SLAPD_ABANDON in response to op->o_abandon being set.
|
2005-02-18 00:37:40 +00:00 |
|
Pierangelo Masarati
|
b43fb2bdfc
|
allow stacking of a default chaining control when chasing further referrals; fix referral return memory allocation on direct search
|
2005-02-06 22:12:02 +00:00 |
|
Pierangelo Masarati
|
046b40cbe3
|
provisions for configuring a desired chaining policy via the chaining behavior control
|
2005-02-05 18:21:14 +00:00 |
|
Pierangelo Masarati
|
e50092878d
|
temporarily revert to synchronous start tls
|
2005-02-05 17:33:22 +00:00 |
|
Pierangelo Masarati
|
43138aa500
|
use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup
|
2005-02-05 15:55:02 +00:00 |
|
Howard Chu
|
122cdf4549
|
In ldap_back_bind, don't send success result, frontend does it
|
2005-02-01 00:19:45 +00:00 |
|
Pierangelo Masarati
|
cfc77f0a0a
|
make referrals chasing optional (default is to chase them)
|
2005-01-30 22:56:59 +00:00 |
|
Pierangelo Masarati
|
8cc2aa9372
|
implement hook; cleanup
|
2005-01-30 22:05:46 +00:00 |
|
Pierangelo Masarati
|
4304dfc9a2
|
allow referrals in result (may happen); propagate chaining errors
|
2005-01-28 01:43:49 +00:00 |
|
Kurt Zeilenga
|
e826914a88
|
Less kludgy willing-to-perform check for recognized and appropriate
global controls
|
2005-01-27 06:45:20 +00:00 |
|
Pierangelo Masarati
|
3dd2f4150b
|
allow proxyAuthz of users authenticated via SASL
|
2005-01-26 20:01:02 +00:00 |
|
Pierangelo Masarati
|
e047657f06
|
remove overoptimistic assertion
|
2005-01-26 10:27:38 +00:00 |
|
Pierangelo Masarati
|
e2fe9e394a
|
fix controls run-time registered by global overlays (kludge non longer required?)
|
2005-01-26 08:04:19 +00:00 |
|
Pierangelo Masarati
|
5b193c218f
|
fix dynamically registered controls check; NOTE: controls registered by global overlays don't work yet; better leave Kurt's kludge in place right now
|
2005-01-25 19:39:56 +00:00 |
|
Pierangelo Masarati
|
6239b70081
|
cleanup previous commit
|
2005-01-25 17:14:19 +00:00 |
|
Pierangelo Masarati
|
c6a1f24186
|
add support for Chaining Behavior control (<draft-sermersheim-ldap-chaining>, a work in progress)
|
2005-01-25 16:11:26 +00:00 |
|
Pierangelo Masarati
|
c6b6d2a5ec
|
StartTLS (ITS#3507) + chain overlay fixes and improvements
|
2005-01-24 09:38:11 +00:00 |
|
Pierangelo Masarati
|
ae0f47b063
|
improve parsing of acl-authcDN/acl-passwd
|
2005-01-22 18:48:03 +00:00 |
|
Pierangelo Masarati
|
1d919d35a5
|
remove #ifdef's for identity assertion
|
2005-01-20 09:04:37 +00:00 |
|
Pierangelo Masarati
|
90cc75f1a1
|
cleanup; add proxyAuthz capability
|
2005-01-19 22:59:25 +00:00 |
|
Pierangelo Masarati
|
5f178fd3d1
|
use idassert for proxyAuthz with the chain overlay
|
2005-01-19 19:11:35 +00:00 |
|
Pierangelo Masarati
|
7348603a53
|
fix ITS#3484
|
2005-01-12 23:22:56 +00:00 |
|
Pierangelo Masarati
|
4e6fd44213
|
the fixes to ITS#3475 make the referrals callback no longer required
|
2005-01-12 21:02:23 +00:00 |
|
Pierangelo Masarati
|
83d1e22b8c
|
don't malloc if proxyAuthz is the only control
|
2005-01-11 00:37:22 +00:00 |
|
Pierangelo Masarati
|
41d7c03e8b
|
clear out the error
|
2005-01-09 23:30:19 +00:00 |
|
Pierangelo Masarati
|
154ae48d69
|
put back chain overlay into back-ldap
|
2005-01-09 21:26:32 +00:00 |
|
Pierangelo Masarati
|
cd2e651c26
|
ITS#3469: C99 compliance
|
2005-01-08 11:25:11 +00:00 |
|
Pierangelo Masarati
|
4d8267595f
|
retry on ldap_result() with a timeout
|
2005-01-08 09:19:51 +00:00 |
|
Kurt Zeilenga
|
dc0eacd40b
|
Happy New Year!
|
2005-01-01 20:49:32 +00:00 |
|
Pierangelo Masarati
|
8ec78171d3
|
trim comment
|
2005-01-01 16:14:40 +00:00 |
|
Pierangelo Masarati
|
5a920206dd
|
more cleanup
|
2004-12-11 18:36:31 +00:00 |
|
Pierangelo Masarati
|
fefa59059d
|
minor cleanup
|
2004-12-08 19:11:27 +00:00 |
|
Pierangelo Masarati
|
6e12819387
|
allow undefined schema items to be returned by back-ldap and remapped by the rwm overlay
|
2004-12-01 21:47:13 +00:00 |
|
Pierangelo Masarati
|
6b1c641bc1
|
warn users of the need to use the rwm overlay
|
2004-11-29 12:40:36 +00:00 |
|
Pierangelo Masarati
|
6eec000889
|
improve diagnostics
|
2004-11-17 17:55:44 +00:00 |
|
Pierangelo Masarati
|
b29bf83e7e
|
remove back-*/external.h
|
2004-11-15 19:45:49 +00:00 |
|
Pierangelo Masarati
|
2d5ec082dd
|
cleanup
|
2004-11-15 14:17:08 +00:00 |
|
Pierangelo Masarati
|
ee4c10d5d0
|
allow backends to automatically install overlays; issue warnings in case of duplicates (fixes ITS#3395 for cases (1.a), (1.b) and (2) simultaneously)
|
2004-11-15 10:28:33 +00:00 |
|
Pierangelo Masarati
|
9c550e7235
|
first step towards removing back-*/external.h
|
2004-11-13 18:52:44 +00:00 |
|
Pierangelo Masarati
|
cd35386935
|
fix ITS#3391
|
2004-11-13 18:40:16 +00:00 |
|
Pierangelo Masarati
|
db4f223c66
|
improve overlay helpers
|
2004-11-13 17:20:24 +00:00 |
|
Pierangelo Masarati
|
363fdcd951
|
no longer required (moved to rwm overlay)
|
2004-11-13 14:50:34 +00:00 |
|
Pierangelo Masarati
|
f176935a58
|
remove rewrite stuff -- now delegted to rwm overlay
|
2004-11-13 14:43:30 +00:00 |
|
Pierangelo Masarati
|
dd367a2b78
|
make sure we're comparing the same database
|
2004-11-11 13:12:34 +00:00 |
|
Pierangelo Masarati
|
79f744f30b
|
rework static backend initialization
|
2004-11-11 00:39:19 +00:00 |
|
Pierangelo Masarati
|
f06f2a6aec
|
fix ITS#3350 (rewrite/remap will be replaced by the rwm overlay)
|
2004-11-10 09:56:55 +00:00 |
|
Pierangelo Masarati
|
b349604352
|
fix ITS#3387
|
2004-11-10 09:45:02 +00:00 |
|
Howard Chu
|
374cd32eb6
|
Add a retry for entry_get too. (oops)
|
2004-10-07 02:55:51 +00:00 |
|
Howard Chu
|
7e87f54716
|
Revert ITS#3353 patch, it needs to be reworked.
|
2004-10-06 05:51:38 +00:00 |
|
Howard Chu
|
bbe986b94e
|
Add a retry for failed connections
|
2004-10-01 12:00:41 +00:00 |
|
Howard Chu
|
55f12a7eee
|
Add a retry for failed connections
|
2004-10-01 11:16:38 +00:00 |
|
Howard Chu
|
fda3d6260e
|
ITS#3353 consolidate slapd globals into a single struct
|
2004-10-01 07:33:16 +00:00 |
|
Kurt Zeilenga
|
d611a4b49a
|
unifdef -UNEW_LOGGING
|
2004-09-04 04:54:28 +00:00 |
|
Pierangelo Masarati
|
809e623cd9
|
add paged results support to back-ldap
|
2004-08-24 09:19:33 +00:00 |
|
Howard Chu
|
f2ee179c3f
|
ITS#3291 delay use of slap_known_controls until all configuration is done
|
2004-08-19 12:10:22 +00:00 |
|
Pierangelo Masarati
|
cc60b5ce76
|
cleanup previous fix; maybe the advanced url parsing funcs should go in some ldap_pvt.h header?
|
2004-07-26 08:31:01 +00:00 |
|
Pierangelo Masarati
|
9f6f5491fe
|
slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay
|
2004-07-25 23:16:40 +00:00 |
|
Pierangelo Masarati
|
cd7540feee
|
cleanup URI parsing/checking (fixes ITS#3253)
|
2004-07-24 11:17:03 +00:00 |
|
Pierangelo Masarati
|
a7b55f4f44
|
assert administrative identity instead of the required one if doing auth check in non-caching mode
|
2004-07-23 00:11:05 +00:00 |
|
Pierangelo Masarati
|
07f010a01f
|
fix previous fix
|
2004-07-22 23:03:04 +00:00 |
|
Pierangelo Masarati
|
b94d5e17e2
|
rework op/rs structures to deal with opeartional attributes
|
2004-07-18 21:44:29 +00:00 |
|
Hallvard Furuseth
|
af5ab4f196
|
Add missing format argument for 'unhandled idassert-method' error message.
|
2004-07-18 07:16:34 +00:00 |
|
Pierangelo Masarati
|
81d89ddd63
|
validate/pretty before normalizing... (ITS#3218)
|
2004-07-06 22:02:52 +00:00 |
|
Pierangelo Masarati
|
277d921945
|
clear shared connections when ldap_result fails with -1 (typically, remote server is down); fixes ITS#3217
|
2004-07-04 23:35:18 +00:00 |
|
Pierangelo Masarati
|
1f70ad82f2
|
clean up unnecessary checks; don't use SASL native authz if authz ID is not static, because back-ldap pools connections...
|
2004-06-21 00:57:12 +00:00 |
|
Pierangelo Masarati
|
eca48b6f20
|
not sure that cyrus-sasl doesn't honor empty authz; need to check
|
2004-06-20 23:21:40 +00:00 |
|
Pierangelo Masarati
|
5bfb9fd590
|
make authz mode selection fully manual, plus more cleanup
|
2004-06-20 22:42:36 +00:00 |
|
Pierangelo Masarati
|
176e5542bb
|
fix erroneous logging
|
2004-06-20 22:42:04 +00:00 |
|
Pierangelo Masarati
|
5d843b2b13
|
detect mechs that are known to perform native authz
|
2004-06-19 18:32:55 +00:00 |
|
Pierangelo Masarati
|
f34b11760a
|
allow a hidden parameter to instruct the proxy that the SASL mech can do native authz; will disappear as soon as I can detect it automnatically
|
2004-06-19 18:18:26 +00:00 |
|
Pierangelo Masarati
|
e6065fb20d
|
li->be didn't work; since it seems to be unnecessary, it's been removed; please check
|
2004-06-19 15:16:51 +00:00 |
|
Pierangelo Masarati
|
d1b692ceb4
|
clarify no limits in (internal) searches
|
2004-06-12 11:33:21 +00:00 |
|
Jong Hyuk Choi
|
f60f2d5048
|
Fix typo
|
2004-06-08 02:52:59 +00:00 |
|
Howard Chu
|
7488f557cd
|
Fix entry_get, only check mapped attr if attr was provided
|
2004-05-25 04:54:32 +00:00 |
|
Pierangelo Masarati
|
a18e199e0d
|
more on identity assertion
|
2004-05-22 17:26:02 +00:00 |
|
Howard Chu
|
a11553c212
|
Always normalize entries (ITS#3152, ITS#3144)
|
2004-05-19 23:19:24 +00:00 |
|