Commit Graph

426 Commits

Author SHA1 Message Date
Pierangelo Masarati
cd2e651c26 ITS#3469: C99 compliance 2005-01-08 11:25:11 +00:00
Pierangelo Masarati
4d8267595f retry on ldap_result() with a timeout 2005-01-08 09:19:51 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Pierangelo Masarati
8ec78171d3 trim comment 2005-01-01 16:14:40 +00:00
Pierangelo Masarati
5a920206dd more cleanup 2004-12-11 18:36:31 +00:00
Pierangelo Masarati
fefa59059d minor cleanup 2004-12-08 19:11:27 +00:00
Pierangelo Masarati
6e12819387 allow undefined schema items to be returned by back-ldap and remapped by the rwm overlay 2004-12-01 21:47:13 +00:00
Pierangelo Masarati
6b1c641bc1 warn users of the need to use the rwm overlay 2004-11-29 12:40:36 +00:00
Pierangelo Masarati
6eec000889 improve diagnostics 2004-11-17 17:55:44 +00:00
Pierangelo Masarati
b29bf83e7e remove back-*/external.h 2004-11-15 19:45:49 +00:00
Pierangelo Masarati
2d5ec082dd cleanup 2004-11-15 14:17:08 +00:00
Pierangelo Masarati
ee4c10d5d0 allow backends to automatically install overlays; issue warnings in case of duplicates (fixes ITS#3395 for cases (1.a), (1.b) and (2) simultaneously) 2004-11-15 10:28:33 +00:00
Pierangelo Masarati
9c550e7235 first step towards removing back-*/external.h 2004-11-13 18:52:44 +00:00
Pierangelo Masarati
cd35386935 fix ITS#3391 2004-11-13 18:40:16 +00:00
Pierangelo Masarati
db4f223c66 improve overlay helpers 2004-11-13 17:20:24 +00:00
Pierangelo Masarati
363fdcd951 no longer required (moved to rwm overlay) 2004-11-13 14:50:34 +00:00
Pierangelo Masarati
f176935a58 remove rewrite stuff -- now delegted to rwm overlay 2004-11-13 14:43:30 +00:00
Pierangelo Masarati
dd367a2b78 make sure we're comparing the same database 2004-11-11 13:12:34 +00:00
Pierangelo Masarati
79f744f30b rework static backend initialization 2004-11-11 00:39:19 +00:00
Pierangelo Masarati
f06f2a6aec fix ITS#3350 (rewrite/remap will be replaced by the rwm overlay) 2004-11-10 09:56:55 +00:00
Pierangelo Masarati
b349604352 fix ITS#3387 2004-11-10 09:45:02 +00:00
Howard Chu
374cd32eb6 Add a retry for entry_get too. (oops) 2004-10-07 02:55:51 +00:00
Howard Chu
7e87f54716 Revert ITS#3353 patch, it needs to be reworked. 2004-10-06 05:51:38 +00:00
Howard Chu
bbe986b94e Add a retry for failed connections 2004-10-01 12:00:41 +00:00
Howard Chu
55f12a7eee Add a retry for failed connections 2004-10-01 11:16:38 +00:00
Howard Chu
fda3d6260e ITS#3353 consolidate slapd globals into a single struct 2004-10-01 07:33:16 +00:00
Kurt Zeilenga
d611a4b49a unifdef -UNEW_LOGGING 2004-09-04 04:54:28 +00:00
Pierangelo Masarati
809e623cd9 add paged results support to back-ldap 2004-08-24 09:19:33 +00:00
Howard Chu
f2ee179c3f ITS#3291 delay use of slap_known_controls until all configuration is done 2004-08-19 12:10:22 +00:00
Pierangelo Masarati
cc60b5ce76 cleanup previous fix; maybe the advanced url parsing funcs should go in some ldap_pvt.h header? 2004-07-26 08:31:01 +00:00
Pierangelo Masarati
9f6f5491fe slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay 2004-07-25 23:16:40 +00:00
Pierangelo Masarati
cd7540feee cleanup URI parsing/checking (fixes ITS#3253) 2004-07-24 11:17:03 +00:00
Pierangelo Masarati
a7b55f4f44 assert administrative identity instead of the required one if doing auth check in non-caching mode 2004-07-23 00:11:05 +00:00
Pierangelo Masarati
07f010a01f fix previous fix 2004-07-22 23:03:04 +00:00
Pierangelo Masarati
b94d5e17e2 rework op/rs structures to deal with opeartional attributes 2004-07-18 21:44:29 +00:00
Hallvard Furuseth
af5ab4f196 Add missing format argument for 'unhandled idassert-method' error message. 2004-07-18 07:16:34 +00:00
Pierangelo Masarati
81d89ddd63 validate/pretty before normalizing... (ITS#3218) 2004-07-06 22:02:52 +00:00
Pierangelo Masarati
277d921945 clear shared connections when ldap_result fails with -1 (typically, remote server is down); fixes ITS#3217 2004-07-04 23:35:18 +00:00
Pierangelo Masarati
1f70ad82f2 clean up unnecessary checks; don't use SASL native authz if authz ID is not static, because back-ldap pools connections... 2004-06-21 00:57:12 +00:00
Pierangelo Masarati
eca48b6f20 not sure that cyrus-sasl doesn't honor empty authz; need to check 2004-06-20 23:21:40 +00:00
Pierangelo Masarati
5bfb9fd590 make authz mode selection fully manual, plus more cleanup 2004-06-20 22:42:36 +00:00
Pierangelo Masarati
176e5542bb fix erroneous logging 2004-06-20 22:42:04 +00:00
Pierangelo Masarati
5d843b2b13 detect mechs that are known to perform native authz 2004-06-19 18:32:55 +00:00
Pierangelo Masarati
f34b11760a allow a hidden parameter to instruct the proxy that the SASL mech can do native authz; will disappear as soon as I can detect it automnatically 2004-06-19 18:18:26 +00:00
Pierangelo Masarati
e6065fb20d li->be didn't work; since it seems to be unnecessary, it's been removed; please check 2004-06-19 15:16:51 +00:00
Pierangelo Masarati
d1b692ceb4 clarify no limits in (internal) searches 2004-06-12 11:33:21 +00:00
Jong Hyuk Choi
f60f2d5048 Fix typo 2004-06-08 02:52:59 +00:00
Howard Chu
7488f557cd Fix entry_get, only check mapped attr if attr was provided 2004-05-25 04:54:32 +00:00
Pierangelo Masarati
a18e199e0d more on identity assertion 2004-05-22 17:26:02 +00:00
Howard Chu
a11553c212 Always normalize entries (ITS#3152, ITS#3144) 2004-05-19 23:19:24 +00:00
Pierangelo Masarati
cdebc4d376 more on idassert: SASL bind/authz 2004-05-15 10:11:10 +00:00
Pierangelo Masarati
8b954144d6 reflect Kurt's comments on ID assertion 2004-05-14 10:01:22 +00:00
Pierangelo Masarati
3b38676dd3 complete idassert options 2004-05-13 22:12:46 +00:00
Pierangelo Masarati
66ddf62922 add idassert code (undocumented yet) 2004-05-13 20:25:53 +00:00
Pierangelo Masarati
d40e5a365a fix DN_SEPARATOR() and clarify its use 2004-05-07 09:03:05 +00:00
Pierangelo Masarati
b34cf02488 more on fixing escaped semicolon in normalized DN 2004-05-07 02:18:08 +00:00
Luke Howard
22f425c1f3 Fix warning in assignment 2004-04-15 02:37:40 +00:00
Luke Howard
12949734bd Fix warning in assignment 2004-04-15 02:36:23 +00:00
Pierangelo Masarati
c0c24cfec5 first round of SHADOW flags/isupdate test unification 2004-04-10 10:00:58 +00:00
Kurt Zeilenga
c7f0438044 bvalue cleanup 2004-04-08 06:49:17 +00:00
Howard Chu
8c6fe48806 More dynamic/static cleanup 2004-04-08 05:58:54 +00:00
Howard Chu
f2e1df3ef7 Consolidated static/dynamic backend switches 2004-04-08 05:56:23 +00:00
Jong Hyuk Choi
1c1b2bb6ee updatedn fix for syncrepl 2004-04-07 17:32:37 +00:00
Kurt Zeilenga
44725e7303 use BER_BVNULL 2004-04-07 04:11:43 +00:00
Pierangelo Masarati
a11dc61e05 rework be_isupdate accordingly to be_isroot 2004-04-06 09:42:40 +00:00
Pierangelo Masarati
e17be551a4 fix previous commit 2004-04-06 08:47:59 +00:00
Pierangelo Masarati
0f867b9577 revert erroneous commit; cure the test the right way 2004-04-05 23:47:17 +00:00
Kurt Zeilenga
9a64fdb991 use SLAP_DBFLAGS instead of be->be_flags 2004-04-05 23:42:59 +00:00
Pierangelo Masarati
6a1dd9a1cd exploit new frontend API 2 protocol error mapping; use urldesc... 2004-04-05 17:36:53 +00:00
Pierangelo Masarati
fa3baaeae9 overlays reworking 2004-03-18 18:59:46 +00:00
Pierangelo Masarati
66ee9b2d73 carefully check the URI 2004-03-17 22:36:47 +00:00
Pierangelo Masarati
ec6a663820 reset SlapReply flags 2004-03-17 11:50:15 +00:00
Pierangelo Masarati
246fa41c96 "searchFilter" by default must be empty 2004-03-10 21:53:39 +00:00
Pierangelo Masarati
65b49dd312 add "searchFilterAttrDN" rewrite context, and allow filterstring rewrite 2004-03-10 21:11:14 +00:00
Pierangelo Masarati
091246c6fd move limits evaluation to frontend 2004-03-08 18:12:45 +00:00
Pierangelo Masarati
5c6ec10f48 massage normalized DN when either is fine 2004-03-06 16:49:08 +00:00
Pierangelo Masarati
2b393962fc fix continuation of ITS#2999 2004-03-06 09:33:24 +00:00
Howard Chu
b480d7c9ff Added pwdexop request structure to avoid redundant parsing 2004-02-29 19:04:34 +00:00
Pierangelo Masarati
d015b9583c handle filter computed in a more granular way (ITS#2977) 2004-02-28 16:05:59 +00:00
Pierangelo Masarati
4e57108991 allow search limits based on groups (ITS#2967) 2004-02-18 16:40:36 +00:00
Pierangelo Masarati
1ac20b1f02 improve previous commit 2004-02-17 13:34:51 +00:00
Pierangelo Masarati
cb3d538ea3 allow no-user-modification propagations if back-ldap is used for replication (i.e. updatedn is defined) 2004-02-17 12:39:42 +00:00
Howard Chu
8a55795fbe ITS#2888 fix back-ldap to check result of send_search_entry.
Make sure sizelimit errors are propagated.
2004-02-13 02:44:13 +00:00
Pierangelo Masarati
d65f402058 improve fix to ITS#2923; note that suffix massaging is inherently flawed, because comperisons should always occur on Normalized DN, while massaging can also occur on Pretty DN, but there is no guarantee they have the same length or any length-based comparison can work; so in any case, we should pass the Normalized DN and, if the Pretty DN is present, massage it as well accordingly 2004-01-17 12:25:46 +00:00
Pierangelo Masarati
2c049ebb42 fix ITS#2923 2004-01-17 11:48:14 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Pierangelo Masarati
529a03df53 use dedicated admin identity to proxyAuthz 2003-12-13 10:57:42 +00:00
Howard Chu
b011c51390 Clean up entry initialization 2003-12-13 02:00:07 +00:00
Kurt Zeilenga
fbba83b20f notices and acknowledgements 2003-12-08 17:41:40 +00:00
Howard Chu
0690f79a5a Cleanup unknown config directive handling. 2003-12-07 07:07:00 +00:00
Howard Chu
c59e89de2f Clear ocflags 2003-12-06 14:39:07 +00:00
Howard Chu
2d07fc4f3b ITS#2740 - link librewrite statically into back-ldap when it's built
as a module. Since back-meta also depends on back-ldap, this fixes
both at once.
2003-12-04 10:50:36 +00:00
Kurt Zeilenga
ed369e02af Don't search for proxy authz control unnecessarily.
Add note regarding control use with the Bind operation.
2003-12-01 21:49:52 +00:00
Pierangelo Masarati
cdb11fc5eb add administrative bind and proxyAuthz control to enable bound operations in distributed directories (need to manually #define LDAP_BACK_PROXY_AUTHZ and patches from ITS#2851 and ITS#2852) 2003-12-01 08:04:51 +00:00
Pierangelo Masarati
2c68cb41f6 this memory will be freed by free() 2003-12-01 08:01:31 +00:00
Hallvard Furuseth
51f1b8ccd7 Avoid /* inside comments. 2003-11-29 17:29:44 +00:00
Kurt Zeilenga
a3d8cda201 notices and acknowledges 2003-11-27 06:35:14 +00:00
Kurt Zeilenga
e3a4c4ec9c Notice/Acknowledge updates 2003-11-26 02:58:56 +00:00
Pierangelo Masarati
a3deda8026 fix a number of mem leaks; add destroy code; HEADS-UP: API change in rewrite_info_delete() 2003-11-14 18:39:18 +00:00
Howard Chu
20902a2be3 Fix segfault if entry_get is called with NULL attribute 2003-09-20 07:48:57 +00:00
Howard Chu
aa3b69eb32 ITS#2440 unmunge init_module names 2003-06-12 22:25:20 +00:00
Howard Chu
9c47359912 Bind fixes for chaining 2003-06-11 22:35:31 +00:00
Howard Chu
4c5de987cd Fix config, chaining 2003-06-11 06:32:24 +00:00
Howard Chu
09d05a57c2 More overlay tweaks. Added LDAP chaining overlay. 2003-06-11 04:36:35 +00:00
Kurt Zeilenga
16af7fdd4c Hide experimental controls and extended operations 2003-05-31 20:19:02 +00:00
Kurt Zeilenga
7ca24a8591 Another round of minor copyright updates 2003-05-25 03:56:57 +00:00
Hallvard Furuseth
6362a51fe8 Printf %p expects a void pointer.
Other pointers may have different representation.
2003-05-22 22:00:54 +00:00
Howard Chu
b7351c66bc ITS#2511 use %p to log pointer values 2003-05-14 13:54:15 +00:00
Hallvard Furuseth
c5d60fc043 ctrls[] was initialized with which non-constants. 2003-05-02 13:26:25 +00:00
Kurt Zeilenga
5cd994ed21 remove dnNormalize2
replace calls to dnNormalize2 with calls to dnNormalize
2003-04-29 18:28:14 +00:00
Kurt Zeilenga
eebc51b9bf remove dnPretty
rename dnPretty2 to dnPretty
2003-04-29 18:13:10 +00:00
Hallvard Furuseth
9d9ac9e4d9 #include <ac/string.h>, to get memset() and strlen(). 2003-04-29 15:02:01 +00:00
Pierangelo Masarati
629885a269 use SLAP_PTRCMP 2003-04-18 17:16:48 +00:00
Pierangelo Masarati
6bcbe9ad31 reset passwords before freeindg them 2003-04-18 10:02:43 +00:00
Howard Chu
d7a1eb0ea2 Fix AVL comparisons 2003-04-17 04:36:42 +00:00
Howard Chu
423ad06fa6 Revert previous, committed by mistake 2003-04-11 04:28:26 +00:00
Luke Howard
f26a0e0db0 Don't pass NULL DN to rewrite_session(), causes assertion failure
(Howard might like to check that this is the correct fix)
2003-04-11 04:23:21 +00:00
Howard Chu
ece7452b05 More memory context tweaks 2003-04-11 01:29:28 +00:00
Pierangelo Masarati
b4dbfb570a cleanup 2003-04-08 13:22:12 +00:00
Pierangelo Masarati
51c658babd fix typo 2003-04-07 21:06:06 +00:00
Howard Chu
91bb1bd980 schema checks 2003-04-07 20:16:56 +00:00
Howard Chu
cd76391078 Fix !ENABLE_REWRITE 2003-04-07 19:48:10 +00:00
Howard Chu
3c704f4d14 Fix returncode checks 2003-04-07 19:47:31 +00:00
Pierangelo Masarati
eed02aea22 need a second function because of different free() routines 2003-04-07 17:51:42 +00:00
Pierangelo Masarati
243311d56a move to more appropriate file ... 2003-04-07 17:18:42 +00:00
Pierangelo Masarati
6dbd7341f9 use berval 2003-04-07 17:07:52 +00:00
Pierangelo Masarati
96e1632d4a default remapping from target to server aliases searchResult 2003-04-07 16:59:56 +00:00
Pierangelo Masarati
93abccdee3 group rewrite/map stuff in one structure and optimize more function calls 2003-04-07 16:52:59 +00:00
Pierangelo Masarati
77c4389f55 use rewrite info instead of ldapinfo for reusability in back-meta; will change soon 2003-04-07 12:53:00 +00:00
Howard Chu
c823f9a995 Use individual addAttrDN, compareAttrDN, modifyAttrDN, searchAttrDN contexts
instead of re-using other contexts.
2003-04-07 11:55:12 +00:00
Howard Chu
8ef3bbb174 Fix prev 2003-04-07 11:50:15 +00:00
Howard Chu
7972ebe66f Fix freeval check 2003-04-07 11:49:40 +00:00
Howard Chu
c4ab31ddc9 Cleanup previous 2003-04-07 11:40:23 +00:00
Howard Chu
c607ed0a6f (SLAP_NVALUES) attr->a_nvals must not be NULL, set equal to a_vals when
not normalizing.
2003-04-07 11:38:45 +00:00
Howard Chu
bb305eee0b Fix matchedDn detection 2003-04-07 10:51:57 +00:00
Howard Chu
df05038f9e Actually free mapped attrval 2003-04-07 10:31:32 +00:00
Howard Chu
68c5f6fa98 Cleanup ENABLE_REWRITE ifdefs, put into a new ldap_back_dn_massage().
All DN attrs are massaged, whether or not ENABLE_REWRITE is defined.
Use "dnAttr" rewriteContext for Add, Compare, & Modify.
Fixed ldap_back_compare.
2003-04-07 10:15:18 +00:00
Pierangelo Masarati
1bae6d28e5 silence warnings 2003-04-05 16:58:36 +00:00
Pierangelo Masarati
1ce560383a map attrs improvement 2003-04-05 16:53:29 +00:00
Pierangelo Masarati
4235da91d4 massage bound dn only if operating on authz backend 2003-04-05 11:31:54 +00:00
Kurt Zeilenga
c75be97ae9 #ifdef -DSLAP_NVALUES 2003-04-05 03:35:16 +00:00
Pierangelo Masarati
f8682550d7 cleanup 2003-04-05 01:25:57 +00:00
Pierangelo Masarati
cb33a9ff44 minor fixes: leaks, dangling pointers, cleaner tag skip
for subschemaSubentry; still having problems with group ACLs ...
2003-04-05 01:20:55 +00:00
Pierangelo Masarati
ab3ab80ecd more args elimination + allow specific messages when mapping client API errors to LDAP_OTHER 2003-04-04 22:20:49 +00:00
Pierangelo Masarati
172e93bfc9 normalize values only if required 2003-04-04 11:03:29 +00:00
Pierangelo Masarati
19dc49180d handle failure or missing attrs 2003-04-04 09:55:56 +00:00
Howard Chu
604ba59196 Fix req DN massaging 2003-04-04 02:05:49 +00:00
Howard Chu
ba0b8d1ac9 Fix prev commit 2003-04-04 01:47:25 +00:00
Howard Chu
6e551b53f4 Mapping fixes, SLAP_NVALUES fixes 2003-04-04 01:01:28 +00:00
Pierangelo Masarati
5598add84e first cut at mapping/rewriting before search (after search it's already handled by ldap_build_entry) 2003-04-04 00:48:54 +00:00