Kurt Zeilenga
2c2a54d6d7
Add DNS SRV backend framework (a work in progress).
2000-05-10 18:17:38 +00:00
Howard Chu
f0c4f83ea2
libldap/tls.c: change tls_verify_cb to no longer ignore verification errors.
...
This means a ldaps connection may drop before any LDAP protocol exchange
occurs (due to expired cert, unrecognized CAs, etc.).
Change ldap_pvt_tls_connect to copy any TLS error string to ld_error upon
connection failure, otherwise client just sees "can't contact LDAP server."
slapd/connection.c: add flush/delay when SSL_accept fails, to allow any
TLS alerts we generated to propagate back to the client. (Which will then
be picked up by ldap_pvt_tls_connect on the client...)
2000-05-10 17:07:09 +00:00
Howard Chu
dcad3d9569
Undo slapd/add.c rev 1.54; back-bdb2 and back-ldbm were the only backends
...
that called entry_free() on failure. This change would cause a memory leak
from all the other backends. Instead, remove the entry_free calls in these
two backends and let the frontend take care of it for everyone.
2000-05-10 16:36:46 +00:00
Howard Chu
9842b8fa87
Remove MINGW32 declarations of snprintf and vsnprintf, the new mingw32
...
distributions define them now.
2000-05-10 16:12:38 +00:00
Howard Chu
8a3100e636
Remove declaration of strerror_r, it clashes on AIX and we never use it
...
anyway.
2000-05-10 16:11:38 +00:00
Howard Chu
71a24bb705
Tweak the symlink creation rules for braindead "ln" commands.
2000-05-10 16:10:11 +00:00
Howard Chu
9ce83ce54f
Fix pthread_create test for AIX. AIX deviates from POSIX in that threads
...
are created detached by default. We need to set the thread attributes in
advance, otherwise pthread_detach will fail.
2000-05-10 16:09:26 +00:00
Kurt Zeilenga
056a1e27db
Remove extra --enable-modules flag...
2000-05-10 04:31:42 +00:00
Kurt Zeilenga
f224e69558
Add experimental code to check simple bind passwords
...
against Cyrus SASLdb. Like other cleartext mechanisms,
should be protected from eavesdropping.
2000-05-10 04:29:51 +00:00
Kurt Zeilenga
b9e7d777f1
Update comment concerning stable client development platforms.
2000-05-10 04:28:10 +00:00
Kurt Zeilenga
07826e4d4c
Add IPv6/IPSEC project (volunteers welcomed)
2000-05-09 18:48:03 +00:00
Kurt Zeilenga
d25f52be38
s/cmds/rcpt_cmds/ to avoid conflict with Linux Redhat "prandom".
2000-05-09 17:25:59 +00:00
Kurt Zeilenga
dcc943e528
move default "directory"
2000-05-03 19:01:29 +00:00
Kurt Zeilenga
d0555fffe6
Error handling changes including separation of client v. server
...
SASL to LDAP translation. plus comments and other minor changes
2000-05-03 18:59:58 +00:00
Kurt Zeilenga
2783decefa
update based upon latest changes and thoughts
2000-05-03 18:58:20 +00:00
Kurt Zeilenga
0b3a6786fe
Use (unsigned char) -1 instead of 0xffU.
2000-05-03 18:55:27 +00:00
Kurt Zeilenga
b861be0ffd
Done did hashed password generation (via extend op)
2000-05-03 12:57:05 +00:00
Kurt Zeilenga
014afae269
setting UFN prefix to NULL should clear prefix not cause crash.
2000-05-03 10:45:36 +00:00
Kurt Zeilenga
8c386888fa
Move default LDBM directory from /usr/tmp to $(localstatedir)
2000-05-03 10:07:21 +00:00
Bastiaan Bakker
14418bdff3
Avoid C++ keyword 'new' in header files.
2000-04-30 15:26:51 +00:00
Bastiaan Bakker
873c36f788
Added example 'moduleload' lines to slapd.conf
2000-04-30 15:01:32 +00:00
Randy Kunkee
e5de6c5b0c
Change count test for non-zero reference counts to check for ... non-zero.
2000-04-26 09:24:58 +00:00
Randy Kunkee
75467fb340
Rework order of things to allow restart in oneshot mode.
2000-04-26 09:24:12 +00:00
Kurt Zeilenga
0d1e76246a
Don't depend error handling on exact resultCode.
2000-04-26 09:21:19 +00:00
Kurt Zeilenga
92e2453467
A NULL (empty) SASL mechanism should not result in a protocol error.
2000-04-26 09:20:25 +00:00
Kurt Zeilenga
95092681dd
Clarify error string, add comment
2000-04-26 09:17:54 +00:00
Kurt Zeilenga
459194f347
Fix typo in multbyte tag code
2000-04-26 09:17:05 +00:00
Kurt Zeilenga
b872bf3a91
fix -UHAVE_CYRUS_SASL
2000-04-25 19:28:00 +00:00
Kurt Zeilenga
20351a05cc
SASL: me thinks I got the states okay... now to test.
2000-04-25 18:02:50 +00:00
Kurt Zeilenga
42a20681cc
SASL closer to working from frontend only, need to work through
...
states.
2000-04-25 17:23:54 +00:00
Kurt Zeilenga
55ae3cffd8
SASL code without backend support. Should work with
...
external store, but not yet tested. [Intent is to support
both in same server... may not be doable]
2000-04-25 16:03:17 +00:00
Kurt Zeilenga
5043287a4c
Fix NULL filter bug
2000-04-25 13:52:44 +00:00
Kurt Zeilenga
802ee714e4
Framework for authpasswd. Needs work. Behind #ifdef
2000-04-25 13:28:03 +00:00
Kurt Zeilenga
2e22c55a6c
Fix typo in prev commit
2000-04-25 13:25:55 +00:00
Kurt Zeilenga
6f2a817d9d
bind/sasl cleanup PRIOR TO moving call from backend to frontend
2000-04-25 13:21:42 +00:00
Kurt Zeilenga
0c134a72d6
SCHEMA_NOT_COMPAT changes
2000-04-25 13:21:06 +00:00
Kurt Zeilenga
12e253fc66
entry_schema_check rename
2000-04-25 13:20:05 +00:00
Kurt Zeilenga
01c4e0f03c
LDAP_OPERATIONS_ERROR -> LDAP_OTHER
...
and other error handling changes
2000-04-25 13:18:59 +00:00
Kurt Zeilenga
365d17ca68
entry_schema_check() rename and more (error handling)
2000-04-25 13:15:55 +00:00
Kurt Zeilenga
8b09742e5c
(slightly) better comments
2000-04-25 13:13:42 +00:00
Kurt Zeilenga
f5ab390e08
Update
2000-04-25 13:12:40 +00:00
Kurt Zeilenga
56ebee78fb
return more descriptive error text
2000-04-25 13:12:20 +00:00
Kurt Zeilenga
16937cb91d
remove SASL bind call. Frontend code coming.
2000-04-25 13:10:31 +00:00
Kurt Zeilenga
3bad06d52b
entry_schema_check() rename
2000-04-25 13:07:14 +00:00
Kurt Zeilenga
2dc6185a92
LDAP_OPERATIONS_ERROR -> LDAP_OTHER
...
and other misc changes
2000-04-25 13:06:22 +00:00
Kurt Zeilenga
27a29fddbb
Fix comment
2000-04-25 13:02:42 +00:00
Kurt Zeilenga
627265e301
replace inetOrgPerson I-D with RFC
2000-04-25 11:55:35 +00:00
Kurt Zeilenga
1973c664cc
Fix NULL pointer deref bugs
2000-04-25 10:43:15 +00:00
Kurt Zeilenga
da5673c71a
Apply experimental multibyte tag fix
2000-04-25 10:42:32 +00:00
Kurt Zeilenga
274bf59441
replace ldap_dnssrv_init() with lower level calls
...
ldap_domain2dn()
ldap_domain2hostlist()
and provide prototype to soon-to-be-implemented
ldap_dn2domain().
ldap_dnssrv_init(), if needed, can easily be implemented
using ldap_create(), ldap_set_option() and the above
commands.
2000-04-25 10:38:03 +00:00
