Commit Graph

472 Commits

Author SHA1 Message Date
Howard Chu
8bac3b4ff7 Pass result berval to lutil_passwd_hash instead of returning it. 2004-03-02 21:59:24 +00:00
Howard Chu
9c6428b29e Deleted Kerberos and Netscape support 2004-02-26 03:10:53 +00:00
Howard Chu
77dc2c479f ITS#2899 NS-MTA-MD5 password len is exactly 64 bytes. 2004-01-25 10:39:32 +00:00
Kurt Zeilenga
c3674e92f9 Fix text == NULL bugs in last commit 2004-01-09 04:48:40 +00:00
Kurt Zeilenga
c8408d3c6a ITS#2906: report invalid userPassword schemes, clarify documentation 2004-01-09 04:11:57 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Howard Chu
39eb55b5f4 ITS#2869 fix decode length checks again 2003-12-11 13:24:06 +00:00
Luke Howard
98481ec449 Use gmtime_r() if HAVE_GMTIME_R is defined (need to add autoconf check) 2003-12-06 05:48:29 +00:00
Hallvard Furuseth
51f1b8ccd7 Avoid /* inside comments. 2003-11-29 17:29:44 +00:00
Kurt Zeilenga
74c7e200b3 From liblavl 2003-11-26 22:32:36 +00:00
Kurt Zeilenga
2c21fdcecb move AVL routines into -llutil
update misc notices
2003-11-26 04:17:25 +00:00
Kurt Zeilenga
e3a4c4ec9c Notice/Acknowledge updates 2003-11-26 02:58:56 +00:00
Kurt Zeilenga
6c0f8a7cc3 Move LDIF routines liblutil 2003-11-25 23:19:47 +00:00
Kurt Zeilenga
327880b984 Notice updates 2003-11-25 23:17:08 +00:00
Pierangelo Masarati
88e8caf3e1 fix tricky signed/unsigned comparison (ITS#2835) 2003-11-22 16:06:38 +00:00
Kurt Zeilenga
72cfae7264 Update csn format. Format now more inconsistent from the inconsistent
LDUP specifications.  Once LDUP agrees on the format (let's hope they
choose GSER), this will need to be updated.
2003-11-18 22:10:12 +00:00
Kurt Zeilenga
3a8b3d9c1a Fix SLAPD_NS_MTA_MD5 compile bug (ITS#2773) 2003-10-17 04:40:16 +00:00
Kurt Zeilenga
990346d0c8 ITS#2566: apply patch provided by Norbert to fix lmhash problems
- chk_lanman did not free result from hash_lanman
- copied code to generate hash from hash_lanman to chk_lanman,
  this skips prepending "{LANMAN}"
- downcase stored password hash to ensure hex characters [a-f]
  have the same case
2003-08-09 19:18:28 +00:00
Kurt Zeilenga
863a076919 ITS#2662: NS_MTA-MD5 hash check fix 2003-08-09 18:47:16 +00:00
Kurt Zeilenga
da3caafa7a comment cleanup 2003-07-30 11:20:56 +00:00
Hallvard Furuseth
ca2a43b7b2 Handle !HAVE_LONG_LONG 2003-06-28 19:55:30 +00:00
Kurt Zeilenga
15fa161b8f ITS#2562: add missing arg to hash_lanman 2003-06-01 23:32:47 +00:00
Howard Chu
62cc5d2f39 Fix lutil_localtime for EBCDIC 2003-05-29 06:15:03 +00:00
Kurt Zeilenga
e8144158f3 Add/Update various copyright notices 2003-05-25 03:31:21 +00:00
Pierangelo Masarati
0b5691f122 cleanup previous commit; update header 2003-05-15 01:18:45 +00:00
Pierangelo Masarati
c7ce39c788 add local generalized time generator 2003-05-15 01:03:38 +00:00
Kurt Zeilenga
5d2b493ff3 Blind fix for NGROUPS Tru64 5.1 bug (ITS#2485) 2003-05-05 17:29:26 +00:00
Hallvard Furuseth
5ee9264465 Fix assignment of <char/int>* to unsigned <char/int>* and vice versa. 2003-05-02 13:29:28 +00:00
Howard Chu
7e2273b30e Added errmsg arg to lutil_passwd_{check,hash} functions 2003-04-30 07:52:05 +00:00
Hallvard Furuseth
b0b82abb3a #include "ldap_pvt.h", to get ldap_charray_free() and ldap_charray_add(). 2003-04-29 14:46:54 +00:00
Kurt Zeilenga
02c992a132 mark more translatable strings 2003-04-06 06:47:31 +00:00
Howard Chu
2ee7488d0b ITS#2423 - make the lib that allocates SASL prompt results responsible
for freeing them.
2003-04-06 00:47:55 +00:00
Howard Chu
62f7394f8c Fix up lutil_passwd stuff to avoid struct berval definition 2003-03-12 23:07:09 +00:00
Howard Chu
bbad1de8e1 Added lutil_passwd_init, _destroy, _add for dynamically adding passwd
schemes. Declarations in lutil.h require lutil.h never be included before
lber.h, always after.
2003-03-11 05:58:53 +00:00
Howard Chu
c20d1840ba Blind fix, delete obsolete files cache.c, authpasswd.c 2003-03-07 21:10:02 +00:00
Kurt Zeilenga
e20f94c9f9 fix initializer 2003-03-04 21:49:21 +00:00
Howard Chu
3b01c9a99e Cleanup slapd-specific NT service support 2003-03-03 11:46:05 +00:00
Howard Chu
6e8adce9d9 Fix previous commit, eventlog path was wrong 2003-03-03 07:30:12 +00:00
Howard Chu
a0d397d056 Default is_NT_Service to no 2003-03-03 06:43:12 +00:00
Kurt Zeilenga
fe4f355328 Add acc_rights detection (needs testing) 2003-03-02 21:46:40 +00:00
Kurt Zeilenga
206b071e7f Add check of <sys/uio.h> and include as needed for struct iovec. 2003-03-02 21:21:36 +00:00
Howard Chu
50280bcfed Interoperability fix for sendmsg/recvmsg with access rights 2003-03-02 07:46:33 +00:00
Kurt Zeilenga
81d2b2bb65 Don't send extra messages, will cause interoperability problems
with versions not built to receive these extra messages.
Likewise in reverse.
2003-03-01 19:47:04 +00:00
Kurt Zeilenga
c3a43e2c4f Round 2 2003-02-21 19:27:54 +00:00
Kurt Zeilenga
182f6e20c3 Add a safety value 2003-02-21 18:51:27 +00:00
Kurt Zeilenga
9e984beded ITS#2325 fix: properly freeing prompts->results 2003-02-21 18:39:26 +00:00
Kurt Zeilenga
99dbcc5d4c Not yet implemented. 2003-02-09 08:21:10 +00:00
Hallvard Furuseth
65d76d7db4 Change lutil_detach() to not close the descriptors before dup2(), try to
open /dev/null and then / in read-only mode if opening /dev/null failed,
and skip the dup2()s as well if open() failed.
2003-01-30 22:44:53 +00:00
Kurt Zeilenga
03b35cc621 ITS#2159: don't crash on malformed userPassword 2003-01-20 23:46:35 +00:00
Hallvard Furuseth
6a51371fc5 Silence gcc warnings (signed vs. unsigned, implicit declarations, unused vars). 2003-01-19 15:03:25 +00:00
Kurt Zeilenga
6939c53170 Happy new year 2003-01-03 20:20:47 +00:00
Howard Chu
e42209dd77 Fix previous commit, fstat arg was wrong. 2002-12-11 10:58:02 +00:00
Howard Chu
1363d4bf1a Fix prev commit - require passed descriptor to be a pipe (FIFO) and
require it to only be accessible by its owner, otherwise ignore it.
2002-12-04 20:50:19 +00:00
Howard Chu
d7c0a19aab Added check for sendmsg(). Added hack to use BSD sendmsg()/recvmsg() to
propagate peer creds if no explicit PEERCRED facility exists. Works
on Solaris 8.
2002-12-04 16:03:02 +00:00
Kurt Zeilenga
eb41333e4c Use getpeereid(3) where available else use *_PEERCRED replacment function 2002-12-04 06:17:32 +00:00
Kurt Zeilenga
93046479ae better check of snprintf result 2002-10-11 02:51:09 +00:00
Kurt Zeilenga
ba6d2c5cc0 ITS#1502: fix NS-MTA-MD5 typo 2002-09-24 21:21:35 +00:00
Howard Chu
890d4b9449 Moved stdio replacements from liblutil lutil_* to liblber ber_pvt_*. 2002-09-10 00:47:32 +00:00
Kurt Zeilenga
007b618d99 Should resolve ITS#2071 2002-09-07 18:27:57 +00:00
Kurt Zeilenga
11761fa6ca Add NT-MTA-MD5 Support.
Based, in part, from ITS#1502 submission from John Morrissey.

Copyright 2001, John Morrissey (jwm at horde dot net), All rights reserved.
This is free software; you can redistribute and use it under the same terms
as OpenLDAP itself.
2002-09-07 01:51:12 +00:00
Howard Chu
4d8a2e2815 Remove dependencies on HAVE_VSNPRINTF, use replacement in liblutil/stdio.c
if needed. Same check for snprintf.
2002-09-06 20:54:22 +00:00
Pierangelo Masarati
bcf7b47079 silence warnings 2002-08-31 10:54:58 +00:00
Pierangelo Masarati
aea52e5bc9 define macros for appropriate sizing of lutil buffers 2002-08-31 10:48:02 +00:00
Kurt Zeilenga
2de5c33ba7 Add manageDsaIt/NOOP control support to every tool.
Update NT build.
2002-08-29 21:52:45 +00:00
Kurt Zeilenga
8de258d2e2 Patch: 'ldapmodify -y file' reads password from file (ITS#2031)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
            ================
Adapted by Kurt Zeilenga for inclusion in OpenLDAP.  My comments are
marked with enclosed with square brackets (e.g. [Kurt's comment] below.
            ================

If I run ldapmodify & co from a script, I don't want to use '-W password'
because the password shows up in the output of 'ps' for everyone,
and I can't pipe the password to 'ldapmodify -w' because -w uses
getpassphrase() which reads from the tty instead of stdin.
So I added '-y file' which reads the password from file.  The programs
exit if the file cannot be read.

[Complete contents of file is used as password.  Use:
	echo -n "secret" > password
to create a file with "secret" as the password.  The -n avoids
adding a newline (which would invalidate the password).  Note
that echo is a builtin and hence its arguments are not visible
to 'ps'.]

I changed ldapmodify, ldapmodrdn, ldapdelete, ldapsearch, ldapcompare.
I did not bother to change ldappasswd and ldapwhoami, because they
prompt for many passwords.  [I fixed up ldapwhoami.]

Rerun autoconf after applying this patch. [Done.]

Note:  I do not know if Windows NT has fstat(), so I set HAVE_FSTAT to
undef in portable.nt.  (fstat() is used to warn if the file is publicly
readable or writeable.)  [I used fstat() to set the buffer size to
read.]

[Note: using the contents of a file extends the tools to support
passwords which could not normally be provided using getpassphrase()
or via the command line.]

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
[Kurt D. Zeilenga <kurt@openldap.org>, Aug 2002.]
2002-08-24 05:47:17 +00:00
Jong Hyuk Choi
b81122d441 Slapadd is changed to include Operational Attributes (entryUUID, entryCSN,
creatorsName, modifiersName, createTimestamp, modifyTimestamp) when it adds
from ldif file. Month field in time format in entryCSN is changed to 1~12.
2002-08-21 00:11:32 +00:00
Howard Chu
4c69827b15 ITS#2016 possibly better macro test for this fix 2002-08-10 00:32:25 +00:00
Howard Chu
66d9bf404b ITS#2016 Don't include <openssl/des.h> if we're also including <krb.h>. 2002-08-10 00:22:52 +00:00
Howard Chu
6226684204 Eliminate an unnecessary malloc/free 2002-08-07 00:47:57 +00:00
Howard Chu
155c16484b Moved slap_strcopy, slap_strncopy to lutil_strcopy, lutil_strncopy
Added lutil_gentime, moved lutil_vsnprintf to stdio.c
2002-07-27 00:25:16 +00:00
Kurt Zeilenga
e6460769ab Misc sprintf/snprintf cleanup 2002-07-23 18:26:33 +00:00
Howard Chu
1a8d570c08 Added vsnprintf, snprintf implementations. 2002-07-19 17:33:14 +00:00
Julius Enarusai
a6730db3e9 debug.c file moved from liblutil to liblber due to changes in LDAP_LOG macro and global variable ldap_logvels 2002-07-11 23:26:34 +00:00
Julius Enarusai
6107ba67d2 Coverted LDAP_LOG macro to use subsystem ID int values instead of string values 2002-07-11 20:33:24 +00:00
Kurt Zeilenga
7592a9b9c7 make sure we don't test against stored values starting with "{" 2002-07-10 22:04:14 +00:00
Kurt Zeilenga
56bbe05490 Add {CLEARTEXT} password-hash support 2002-06-12 00:43:34 +00:00
Kurt Zeilenga
131470685f /dev/urandom re-read(2) loop 2002-06-03 16:43:57 +00:00
Kurt Zeilenga
c3a59a6407 Remove sys/uio.h include 2002-05-15 05:53:10 +00:00
Howard Chu
b2e731a3e0 Win32 fix from Kervin Pierre 2002-05-11 18:15:07 +00:00
Howard Chu
9979d200db Fleshed out debug2syslog 2002-05-10 17:48:54 +00:00
Howard Chu
491d2ae5b9 ITS#1720 chk_sasl for Cyrus SASL 2 2002-04-16 04:05:51 +00:00
Howard Chu
bb17493d31 ITS#1732 signed/unsigned fixes 2002-04-11 08:47:37 +00:00
Pierangelo Masarati
4a8ab5dbf2 Mostly based on patches provided by Hallvard B. Furuseth
ITS#1677 - cast away const warnings
ITS#1678 - unsigned char args to ctype funcs
ITS#1682 - don't redefine ldap_debug
ITS#1683 - uninitialized vars
ITS#1703 - ldo_debug initialization
ITS#1705 - unsigned testing
ITS#1706 - socklen_t args
ITS#1719 - back-tcl update (other cleanups/fixes/improvements; yet untested)
ITS#1724 - integerNormalize/integerFilter/integerIndexer bugs
ITS#1725 - libdes not required

Implement back-null (/dev/null style backend)
Cleanup some misc warnings ("%lu" format, unused/uninitialized vars,
        ambiguous operator precedence)

Kurt, please regenerate configure
2002-04-08 09:43:22 +00:00
Kurt Zeilenga
a9cf0f5c08 Add uuid_to_str() detection. 2002-02-11 20:17:08 +00:00
Howard Chu
a916535a27 Fix #include of sasl.h 2002-02-11 09:39:15 +00:00
Kurt Zeilenga
b315d8af34 Update Cyrus SASL detection to always look for <sasl.h> regardless
of version and then try -lsasl2 and -lsasl.  Make SASL code
conditional on SASL_VERSION_MAJOR, not HAVE_CYRUS_SASL.
2002-02-10 17:51:19 +00:00
Howard Chu
8a4e92b259 Support for Cyrus SASLv2. Untested. 2002-02-10 14:27:23 +00:00
Howard Chu
914f33fc9a Cleanup lint 2002-01-11 06:56:24 +00:00
Kurt Zeilenga
c80d93f2bb Start of new operational attribute framework 2002-01-10 00:17:21 +00:00
Kurt Zeilenga
0e2af54a3f Update copyright statements 2002-01-04 21:17:25 +00:00
Kurt Zeilenga
763c0de59b Rework filter code
Misc cleanup / lint removal
2002-01-02 17:06:56 +00:00
Kurt Zeilenga
883196d348 Clean up some symbol scoping 2001-12-24 06:36:44 +00:00
Kurt Zeilenga
de857a1152 Misc cleanup 2001-12-19 21:23:49 +00:00
Howard Chu
773b3aff16 more cleanup from jon@symas.com 2001-12-18 04:52:55 +00:00
Howard Chu
3d4c9a7284 Fix typo in previous commit 2001-12-18 02:55:38 +00:00
Howard Chu
d829c02f0b Add checks for mkstemp and mktemp. Tweak utils.c:mkstemp to honor the
HAVE_MKTEMP macro in addition to HAVE_MKSTEMP
2001-12-18 02:54:49 +00:00
Howard Chu
3bdbaf5487 Emulate mkstemp() using mktemp() if mkstemp() is not found by configure 2001-12-18 02:48:20 +00:00
Kurt Zeilenga
c1a257a83f stdlib.h should be included as <ac/stdlib.h> 2001-12-18 01:24:31 +00:00
Howard Chu
e5eb270e6c from jon@symas.com - misc Windows cleanup 2001-12-17 22:42:55 +00:00
Kurt Zeilenga
abd9be4def Remove lint and misc MSVC updates 2001-12-09 02:34:45 +00:00
Howard Chu
0552b1c53f NT updates from jon@symas.com. 2001-12-07 04:03:25 +00:00
Howard Chu
c96f8f168e Minor fixes from jon@symas.com 2001-12-07 03:19:29 +00:00
Kurt Zeilenga
583336caa6 Minor portablility change 2001-12-05 16:55:28 +00:00
Pierangelo Masarati
fb60696ac4 my system does not have the removed headers; however it compiles by adding sys/time.h, is it fine? 2001-12-05 08:51:49 +00:00
Pierangelo Masarati
6568f10b7d my compiler complains about this; does my fix comply with the intended behavior? 2001-12-05 08:49:52 +00:00
Pierangelo Masarati
2a2f5ad8fa minor cleanup 2001-12-05 08:48:53 +00:00
Kurt Zeilenga
86f79b85d8 Add experimental UUID/CSN support (needed for LCUP). 2001-12-05 07:25:25 +00:00
Kurt Zeilenga
268ee5ff4a Add CSN routine. 2001-12-05 06:30:58 +00:00
Kurt Zeilenga
3da9378c3a Set multicast bit 2001-12-05 06:09:22 +00:00
Kurt Zeilenga
8c0de8326f Some minor cleanup... 2001-12-05 06:00:57 +00:00
Kurt Zeilenga
524c139d7c Add UUID code from John E. Schimmel 2001-12-05 05:39:34 +00:00
Kurt Zeilenga
0229b76570 Update utils 2001-10-11 04:01:45 +00:00
Kurt Zeilenga
af8769b06d Reorder includes 2001-09-28 00:34:18 +00:00
Kurt Zeilenga
2b7727882d misc updates, constification, deprecation... 2001-07-23 05:00:39 +00:00
Kurt Zeilenga
11b6d1f284 Misc updates for NT4 2001-06-15 04:16:55 +00:00
Kurt Zeilenga
7ee53eb12e Remove const from salt_format 2001-06-14 02:20:05 +00:00
Kurt Zeilenga
ff993c7ddb Misc updates to password codes / docs 2001-06-13 05:40:24 +00:00
Kurt Zeilenga
8d4c20cd6d Adding crypt(3) salt format (ITS#1202) from Jeff Costlow <j.costlow@f5.com>
with minor changes by committer
---
Copyright 2001, F5 Networks, Inc, All rights reserved.
This software is not subject to any license of F5 Networks.

This is free software; you can redistribute and use it
under the same terms as OpenLDAP itself.
2001-06-13 03:47:17 +00:00
Kurt Zeilenga
44bef574c8 Updated pthread test and usage (avoid pthread_detach if possible)
don't use tmpnam()
2001-06-09 01:05:35 +00:00
Gary Williams
9909448880 fix global level usage (ITS 1143, 1144) 2001-05-11 15:31:34 +00:00
Kurt Zeilenga
9ed2b33e2b optional SHA1 2001-05-02 19:49:44 +00:00
Kurt Zeilenga
7f91ee936f Clean up header inclusion 2001-03-15 03:09:52 +00:00
Gary Williams
36880023b6 fix NT build by moving unistd.h 2001-02-02 16:07:12 +00:00
Kurt Zeilenga
90c9d543a8 Provide extra salt for crypt(3) 2001-01-20 01:15:28 +00:00
Kurt Zeilenga
319a75ef39 Fix LMPASSWD code
Move <ac/unistd.h> and <ac/crypt.h> behind SLAPD_CRYPT
2001-01-18 00:35:09 +00:00
Gary Williams
eade718809 check for global level setting 2001-01-17 17:05:43 +00:00
Mark Valence
a376cb1002 dup() does not work on WinSock sockets. 2000-12-21 22:38:06 +00:00
Mark Adamson
ef2dd4bcb0 ITS#897 Internal connection that is closed on one end and about to
be closed on other end could get reused by a new internal connection.
2000-12-08 23:23:08 +00:00
Kurt Zeilenga
df7804debc ITS#899 LANMAN password contribution from Norbert Klasen 2000-11-22 20:18:50 +00:00
Gary Williams
e809d3e90c get rid of unused structure 2000-10-25 16:48:11 +00:00
Gary Williams
895296fbd3 fix file test 2000-10-18 14:58:34 +00:00
Kurt Zeilenga
c56a27e7e8 Eliminate the need for a buffer. 2000-10-18 02:27:45 +00:00
Kurt Zeilenga
7fad68f7b4 remove lint 2000-10-18 00:29:21 +00:00
Kurt Zeilenga
25522f1399 Remove lint 2000-10-18 00:28:39 +00:00
Gary Williams
5a541e8744 convert string levels to ints 2000-10-17 18:56:24 +00:00
Kurt Zeilenga
bcdd316b86 entropy should be unsigned 2000-10-14 02:14:38 +00:00
Julio Sánchez Fernández
491a63b5d4 Prevent it from crashing. 2000-10-13 20:22:46 +00:00
Gary Williams
d37f3e6ee2 first try at logging improvements 2000-10-12 20:01:12 +00:00
Kurt Zeilenga
abf6bdaeb5 Add hash to project file 2000-09-29 02:59:44 +00:00
Kurt Zeilenga
6949ab9d15 Replace indexing hash with 32-bit FNV-1... should be much faster than MD5 2000-09-22 22:19:46 +00:00
Ben Collins
9fe15dba96 Remove unused var, 'rc' 2000-09-15 14:20:20 +00:00
Ben Collins
5c8d4c88b6 make function match it's decleration 2000-09-15 03:48:27 +00:00
Ben Collins
df4605b8c1 include ac/unistd.h to avoid compiler warnings 2000-09-15 03:11:03 +00:00
Ben Collins
ef1d8662f0 fix formatting 2000-09-15 03:08:05 +00:00
Ben Collins
e717717a8b Error in setting sa_flags (was never set) 2000-09-13 21:49:08 +00:00
Kurt Zeilenga
f319444df0 MIT Kerberos and krb5_free_creds_contents (ITS#715)
fix suggested by Norbert Klasen <klasen@zdv.uni-tuebingen.de>
2000-09-06 18:21:39 +00:00
Kurt Zeilenga
526d1e6981 needs string.h 2000-08-21 16:48:11 +00:00
Kurt Zeilenga
3b03b64b77 Add char* ldap_pvt_get_fqdn(char*) which returns the FQDN of the
input.  In input==NULL, returns FQDN of local host.
Fixed copy_hostent() uninitialized pointer bug.
Replaced gethostname calls with ldap_pvt_get_fqdn( NULL ) calls.
2000-08-15 01:55:43 +00:00
Kurt Zeilenga
5b856458a2 s/SAFEMEMCPY/AC_MEMCPY/
Use AC_FMEMCPY where appropriate (-llber)
2000-07-28 01:07:07 +00:00
Kurt Zeilenga
cd5aed0bbe Use sigaction to set SA_RESTART (if appropriate).
Portability of this code needs to tested.
2000-07-22 00:37:51 +00:00
Kurt Zeilenga
cd3233ceef Clarify comment 2000-07-17 21:45:18 +00:00
Kurt Zeilenga
9fb680d527 Fix SASL automatic/quiet modes... 2000-07-17 21:36:30 +00:00
Kurt Zeilenga
6393523ffa Expose sasl flags to -lldap (so they can be quiet)
Fix interactive and automatic modes.  Quiet needs work.
2000-07-17 21:23:59 +00:00
Kurt Zeilenga
95eea5accc First cut SASL "interactive" and "quiet" modes (default is "automatic") 2000-07-17 00:56:29 +00:00
Kurt Zeilenga
bab26b3142 Move some noise about 2000-07-15 01:28:16 +00:00
Kurt Zeilenga
85c2a7a2a8 Update NT build to include recently added SASL sources. 2000-07-13 23:43:24 +00:00
Kurt Zeilenga
5fc22599e2 Update SASL code to reuse context through life of session.
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters
2000-07-13 22:54:38 +00:00
Kurt Zeilenga
e2fa599482 Move old files to the Attic 2000-06-25 22:01:42 +00:00
Kurt Zeilenga
5f20cf1ed5 Modify ldapsearch(1) significantly. Now handles LDAPv3 search
references, extended results, and extended partial results.  LDIF
extended to support these new features and reported version 2.
-L now limits output to LDIFv1 for compatibility reasons.  No
-L is now LDIFv2.  Old alternative form is no longer supported.

Use LDAP_TMPDIR (in ldap_config.h) instead of hardcoded /tmp
Use LDAP_FILE_URI_PREFIX (in ldap_config.h) instead of hardcoded
	file://tmp/
2000-06-25 00:35:17 +00:00
Kurt Zeilenga
9ef1a740c2 Round one of LDAP_F() macro changes. In this round we rename
macros into our namespace and limit use to headers.  A subsequent
round will add macros to separately handle forward declarations
of variables from declaration of function prototypes.  The last
round will add additional macros for declaring actual variables and
functions.
2000-06-18 19:48:07 +00:00
Mark Valence
9c7127cd81 Check if process is installed/running as service on NT beofre trying t
o start it as a service (gets around an annoying pause when starting u
p as a non-service).
2000-06-15 02:21:01 +00:00
Kurt Zeilenga
a56c161bdb Misc code cleanup. 2000-06-10 22:39:30 +00:00
Kurt Zeilenga
4933f894ba Include <lber.h> to use ber_strdup(). (probably should create/use
macros LUTIL_STRDUP and friends).
2000-06-07 18:49:36 +00:00
Kurt Zeilenga
9a8cc65162 Update a few misc docs 2000-06-07 06:33:59 +00:00
Kurt Zeilenga
6ad1c45bd3 Use LDAP_VFREE and friends. Other misc code cleanup. 2000-06-07 05:17:29 +00:00
Kurt Zeilenga
c5765e3827 Use provided macros and comment 2000-06-03 17:24:21 +00:00
Kurt Zeilenga
8045b54124 Use getpassphrase() instead of getpass() if available. 2000-05-19 18:41:26 +00:00
Kurt Zeilenga
3e82a5309b Add missing copyright notices 2000-05-13 02:43:19 +00:00
Kurt Zeilenga
29d9fa20a2 Y2k copyright update 2000-05-13 02:36:07 +00:00
Kurt Zeilenga
69fbf137aa make ntservice error to string routines static
#undef __RETSTR before #define
2000-05-13 00:48:17 +00:00
Howard Chu
3f618bfe03 Fix ambiguous return value in lutil_passwd 2000-05-13 00:10:24 +00:00
Howard Chu
237b00049a Moved GetLastErrorString to ntservice.c. I missed it before, thought it
was unused but it's needed in ntservice.c
2000-05-12 23:53:14 +00:00
Kurt Zeilenga
304a57740a nt_err.c has moved from lutil to lber 2000-05-12 23:37:28 +00:00
Howard Chu
9a79d03e13 Fix previous change to getRegParam, SERVICE_NAME is only known in slapd. 2000-05-12 21:26:30 +00:00
Howard Chu
3dc83998c0 Moved nt_err from liblutil to liblber, renamed WSAGetErrorString to
ber_pvt_wsa_err2string.
2000-05-12 21:16:15 +00:00
Howard Chu
8d2aba12b4 Fix typo in lutil_debug for NT: file -> log_file 2000-05-12 20:01:40 +00:00
Howard Chu
2e5e4c3f20 More fixes for NT support:
liblutil/ntservice.c change registry key path used for non-default
  	service names.
  slapd/Makefile.in change to generate slapd.syms dynamically
  slapd/daemon.c fix to make NT service ignore SIGBREAK
  slapd/main.c fix to allow NT to retrieve listening url from registry
  slapd/nt_svc.c fix for exported symbols
  slapd/result.c change use of strerror to sock_errstr
  slapd/slapd.syms no longer needed
2000-05-11 20:50:20 +00:00
Howard Chu
7ca81c0a03 Fix one more chk_unix ifdef 2000-05-11 20:00:47 +00:00
Kurt Zeilenga
cdb709fd27 Fix unbalanced #endif 2000-05-11 16:06:41 +00:00
Howard Chu
605832eaa5 Added support for AIX security database:
configure.in: check for AIX security library, set in AUTH_LIBS macro
  top.mk: add AUTH_LIBS macro to SECURITY_LIBS
  portable.h.in: added HAVE_AIX_SECURITY macro (via autoheader)
  passwd.c: use AIX getuserpw in chk_unix. Also fix logic in chk_unix:
  	getpwnam must always succeed for the given user. It is not a
	fatal error if getspnam returns no result for the user: On
	systems that support /etc/shadow, its usage is optional. The
	same logic applies for AIX, SCO/HP SecureWare, etc.
2000-05-11 10:10:53 +00:00
Howard Chu
65d7521be1 Added LBER_OPT_LOG_PRINT_FILE to redirect the output of ber_error_print.
Used mainly on NT since stderr doesn't exist when slapd runs as a service.
2000-05-11 09:39:33 +00:00
Kurt Zeilenga
3553f9aab6 Fix #ifdefs when --disable-crypt 2000-05-10 23:26:42 +00:00
Kurt Zeilenga
f224e69558 Add experimental code to check simple bind passwords
against Cyrus SASLdb.  Like other cleartext mechanisms,
should be protected from eavesdropping.
2000-05-10 04:29:51 +00:00
Kurt Zeilenga
802ee714e4 Framework for authpasswd. Needs work. Behind #ifdef 2000-04-25 13:28:03 +00:00
Kurt Zeilenga
6a4ff3b996 Fix == v != bug 2000-04-19 13:35:43 +00:00
Kurt Zeilenga
4c0be829e1 Fix usage in comment 2000-03-17 02:07:59 +00:00
Kurt Zeilenga
0ba3d75913 Don't chdir("/"). Root may not be writable to daemon.
Only user can select appropriate run directory.  Best left to user.
2000-02-08 04:22:31 +00:00
Kurt Zeilenga
107b22a73c Fix typo 2000-01-25 23:58:44 +00:00
Kurt Zeilenga
5967cc5658 Even more checks around use of crypt(3). 2000-01-17 17:09:33 +00:00
Kurt Zeilenga
c17b89f431 Add additional crypt() sanity checks. 2000-01-17 16:53:15 +00:00
Kurt Zeilenga
10a6e51521 All close and redirect stdin, stdout, stderr. 2000-01-11 08:04:59 +00:00
Kurt Zeilenga
1fb42bf957 Revamp detach code to ensure stdin, stdout, stderr get closed. 2000-01-11 02:20:01 +00:00
Kurt Zeilenga
34fe70cc71 Validate krb5_init_context 2000-01-10 21:37:04 +00:00
Kurt Zeilenga
38f0b890ab Borrowed a bit to literally... s/pop/ldap/ s/popper/slapd/ 2000-01-09 00:20:00 +00:00
Kurt Zeilenga
e988e175a6 Minor fixes. 2000-01-08 18:51:27 +00:00
Kurt Zeilenga
6437785a82 Initial implementation of Kerberos password verification for
simple bind via:
	{KERBEROS}principal
Code is disabled by default (for security reasons).  Use
--enable-kpasswd to enable.  Behind SLAPD_KPASSWD.
Reworked Kerberos detection and split out KBIND as independent
feature (--disable-kbind) (LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND).
KBIND depends upon detection of KRB4 (or KRB425) support.  Detection,
building with eBones (as distributed with FreeBSD 3.4) okay, but
wasn't able to test as I don't have a K4 KDC handy.
--with-kerberos has a number of detection options... most likely
don't work properly.
2000-01-08 18:42:11 +00:00
Kurt Zeilenga
f3a650b8af Add comment about removing HANDSOFF may case alignment problems 1999-12-18 19:51:49 +00:00
Kurt Zeilenga
30411f8402 Add slappasswd to generate rootpw. 1999-12-16 02:18:50 +00:00
Kurt Zeilenga
b1639dadd6 Remove lint
Add copyrights
1999-12-13 04:53:59 +00:00
Kurt Zeilenga
cda19446ef s/generate/hash/ 1999-12-12 05:06:36 +00:00