Commit Graph

7444 Commits

Author SHA1 Message Date
Pierangelo Masarati
b86467e0f8 cleanup previous commit (thanks to Hallvard) 2005-08-30 10:36:24 +00:00
Hallvard Furuseth
27831fcde5 Include "fd=.." in Statslog message "TLS established" 2005-08-29 23:34:42 +00:00
Howard Chu
3fc2e1388a ITS#3983 fix connection_client_stop, must reset sockbuf 2005-08-29 23:05:32 +00:00
Pierangelo Masarati
7cf72ec000 log UNDEFINED/PROXIED attributeDescription insertion 2005-08-29 10:49:20 +00:00
Pierangelo Masarati
bac1aea2a5 fix previous commit 2005-08-29 09:48:07 +00:00
Pierangelo Masarati
7a85e25402 prettify matchedDN 2005-08-28 14:50:41 +00:00
Howard Chu
ba881c5e6f In ordered_value_sort, allow zero-length ordered values.
In check_vals, log msg when ordered_value_sort fails.
2005-08-28 10:23:10 +00:00
Howard Chu
f8a97897ad More for ITS#3937, pick up pre-set ldap_syslog values. 2005-08-28 07:15:11 +00:00
Howard Chu
055c1abbdc ITS#3937 add config_syslog var to track state of loglevel directive,
copy to ldap_syslog when in SLAP_SERVER_MODE
2005-08-28 07:11:10 +00:00
Howard Chu
ba268441bc ITS#3937 tone down informational debug msgs 2005-08-28 07:02:53 +00:00
Howard Chu
975de9aa5b Consolidate a few more init calls into slap_init(). Fixes ITS#3962,
unintentional changed default of TLSVerifyClient.
2005-08-28 03:25:16 +00:00
Pierangelo Masarati
39998dfe8d prettify matchedDN; fix memory handling 2005-08-27 19:21:43 +00:00
Pierangelo Masarati
97600bf23c prettify matchedDN; return response code 2005-08-27 19:20:31 +00:00
Howard Chu
b265c37c9b Additional log msg for config tree processing failures 2005-08-27 10:51:08 +00:00
Howard Chu
29731c1850 Partially revert rev 1.31, must detect send_search errors to propagate
errors up when reading config DB.
2005-08-27 10:15:22 +00:00
Howard Chu
a5739b28b3 More for ITS#3900 - olcDefaultSearchBase doesn't belong in root entry 2005-08-27 09:40:06 +00:00
Howard Chu
528acf7504 Finish control implementation 2005-08-27 01:21:51 +00:00
Howard Chu
12beb27e46 Fix typos in error messages 2005-08-27 01:18:47 +00:00
Hallvard Furuseth
f17ffeb925 Rename label "leave" to "done".
Tru64 5.1 alpha's <pthread.h> turns "leave" into an exception handling keyword.
2005-08-26 22:23:27 +00:00
Hallvard Furuseth
a1a9507295 Remove unused variable 2005-08-26 21:42:48 +00:00
Pierangelo Masarati
8e3adc2428 fix uninitialized, signedness and other issues (ITS#3854) 2005-08-26 16:52:51 +00:00
Pierangelo Masarati
421f09435d refine last commit (let "proxied" attrs be registered in between the request and the response...); silence misc signedness warnings 2005-08-26 14:43:15 +00:00
Luke Howard
06600b9a1d fix slapi_sdn_isempty() logic 2005-08-26 10:46:56 +00:00
Howard Chu
e641222b10 More for ITS#3854 2005-08-26 03:35:42 +00:00
Howard Chu
7e92728db9 Fix another leaked environment. 2005-08-26 02:35:32 +00:00
Hallvard Furuseth
45d60c21dd slapi_rdn_set_<sdn/rdn>: Void functions, so return nothing - not even void. 2005-08-26 02:26:50 +00:00
Howard Chu
6a4839bd23 Windows mod compatibility 2005-08-26 02:21:07 +00:00
Howard Chu
4cc7efdadc Revert ITS#3577 patch, breaks Windows build and not needed in RE23. 2005-08-26 02:20:45 +00:00
Howard Chu
5a03f7611f Fix for Windows mod compatibility, imported symbols cannot be used as
constant initializers.
2005-08-26 02:17:13 +00:00
Howard Chu
d7122627fa Leave pwdPolicySubEntry user-modifiable for now 2005-08-26 00:19:08 +00:00
Pierangelo Masarati
6cb8b14435 allow undefined attrs to be "proxied" (ITS#3959) 2005-08-25 21:14:26 +00:00
Kurt Zeilenga
f07015dad2 Update build tools based upon OPENLDAP_AC work 2005-08-25 20:09:26 +00:00
Pierangelo Masarati
afaf426231 need stricter sanity checks... 2005-08-25 08:57:08 +00:00
Pierangelo Masarati
b90daf83f9 honor onerr on bind 2005-08-25 08:55:55 +00:00
Howard Chu
f6be095299 Don't do anything if this is a syncrepl response. 2005-08-25 06:56:09 +00:00
Howard Chu
143a1cdae1 Must close env before removing it. 2005-08-25 03:00:29 +00:00
Howard Chu
5903ebc1b5 Config fixes 2005-08-24 08:32:03 +00:00
Luke Howard
a99305da41 Allow slapi_sdn_get_parent() to work if only normalized DN is available 2005-08-24 05:11:58 +00:00
Howard Chu
fc1c7d9987 Fix typo in numeric-descend 2005-08-24 02:26:55 +00:00
Howard Chu
c9c1ee10b3 Add LDAP_CONTROL_VALSORT 2005-08-24 02:07:43 +00:00
Howard Chu
6b63e25bc2 Check for numeric syntaxes 2005-08-24 01:52:05 +00:00
Howard Chu
7dde9e0b33 Tweak prev commit, use BER_BVZERO 2005-08-24 01:36:16 +00:00
Howard Chu
c947cfd66a Fix uninit'd var, check for single-valued attrs 2005-08-24 01:34:49 +00:00
Pierangelo Masarati
c33124e698 make sure a_nvals are as many as a_vals (helps tracking other issues...) 2005-08-23 23:56:47 +00:00
Pierangelo Masarati
ac1488b50d workaround ITS#3965; if anybody has a better solution... 2005-08-23 22:54:07 +00:00
Howard Chu
ef220ac1ef Updated for draft 09, allow MANAGE for operational attrs. 2005-08-23 19:37:16 +00:00
Pierangelo Masarati
40c0d3bfa3 harmonize back-ldbm and back-bdb handling of searchBase disclose access; fixes ITS#3964, ITS#3963 still open 2005-08-23 17:38:50 +00:00
Pierangelo Masarati
fb3424f17d fix use of uninitialized var 2005-08-23 13:02:53 +00:00
Howard Chu
02f52030b0 More for valsort 2005-08-23 10:44:36 +00:00
Howard Chu
57722288f1 Add valsort 2005-08-23 08:52:01 +00:00
Howard Chu
225275407d Add sorted values overlay 2005-08-23 08:47:38 +00:00
Howard Chu
1f78e2b831 ITS#3961 better fix - provide a context for the main thread. The context
must be reset by the caller to clear out temp allocations etc.
2005-08-23 04:12:57 +00:00
Howard Chu
468112e2ba ITS#3961 provide ldap_pvt_thread_pool_fake_context_init/destroy, don't
use arbitrary context pointers.
2005-08-23 03:25:21 +00:00
Pierangelo Masarati
075220dd7e need some minimal timeout otherwise strange issues occur 2005-08-22 18:14:41 +00:00
Pierangelo Masarati
0717a598b6 fix ACIs; few issues remain (e.g. disclose) 2005-08-22 17:59:47 +00:00
Pierangelo Masarati
849ecbcf1f allow options in dynacl configuration 2005-08-22 16:28:50 +00:00
Pierangelo Masarati
4bc8197dcb further ACI factoring out & confinement 2005-08-22 16:03:35 +00:00
Pierangelo Masarati
d4ec31f677 fix cleanup on error 2005-08-22 16:01:16 +00:00
Pierangelo Masarati
65f07479ac fix previous commit 2005-08-22 10:46:57 +00:00
Pierangelo Masarati
de90dbbc52 mutex-protect "undefined" attribute descriptions/objectClasses addition (ITS#3958) 2005-08-22 09:46:17 +00:00
Pierangelo Masarati
a3554aad3a log the right string 2005-08-22 09:42:51 +00:00
Pierangelo Masarati
ec1042b19e allow a minimal timeout in compares 2005-08-22 09:42:26 +00:00
Pierangelo Masarati
150bcfcbcb moved to contrib/slapd-overlays/allop 2005-08-22 09:12:21 +00:00
Hallvard Furuseth
94747c50db SLAP_OP_* enums are always used. Delete #ifdef SLAPD_MONITOR around definition. 2005-08-21 00:00:09 +00:00
Pierangelo Masarati
5b7f996566 cleanup 2005-08-20 19:50:59 +00:00
Pierangelo Masarati
919781ea45 fix referral logging @STATS2 2005-08-20 19:20:53 +00:00
Pierangelo Masarati
c8ef609ea1 fix (and partially revert) last commit 2005-08-20 19:05:10 +00:00
Pierangelo Masarati
00b5d8c1bc allow objectClass checking including sups 2005-08-20 19:01:53 +00:00
Pierangelo Masarati
15d1b4d5dd cleanup locking 2005-08-20 19:00:56 +00:00
Pierangelo Masarati
6bae592866 cleanup objectclass inheritance; don't proceed if initial lookup resulted in a hit with "success" errcode and the base is search; either the filter doesn't match, or the same action is taken twice 2005-08-20 18:00:40 +00:00
Pierangelo Masarati
f227a96053 more for the allop overlay 2005-08-20 11:53:31 +00:00
Pierangelo Masarati
95f65ff352 all-operational overlay: allows to configure part of te DIT so that requests
with requested attribute lists empty or containing "*" are expanded
to contain "+" as well, so that all operational attributes are returned.
This may be required to work around dumb clients that interrogate
the rootDSE requesting "*" and expecting operational attributes to be
returned as well.  To make it a bit more generic, it can be configured
to do the same for an arbitrary search described by an URI.  For example,

overlay		allop
allop-URI	ldap:///??sub

before any database instantiation causes all searches to return "*","+"
when ors_attrs is NULL or countains "*".
2005-08-20 11:48:13 +00:00
Pierangelo Masarati
fdfcf0406e need an AUXILIARY objectClass to play with some special error codes (need to update man page as well)... 2005-08-20 11:31:51 +00:00
Pierangelo Masarati
e5d302e84f normalize/pretty attributes when possible 2005-08-20 11:31:07 +00:00
Kurt Zeilenga
6f99b15ee0 Clarify second all user attrs comment 2005-08-20 07:00:16 +00:00
Kurt Zeilenga
5beeb04346 Clarify attribute comment 2005-08-20 06:58:22 +00:00
Pierangelo Masarati
725423ef4f couldn't slapcat with ACIs in slapd.conf :) 2005-08-19 00:30:10 +00:00
Pierangelo Masarati
3356017b93 complete ACI syntax exploitation 2005-08-19 00:25:18 +00:00
Pierangelo Masarati
9c02a32b7c more about matchedDN in back-meta (ITS#3944) 2005-08-18 14:55:28 +00:00
Pierangelo Masarati
ef38cc9501 cleanup 2005-08-18 12:50:48 +00:00
Pierangelo Masarati
66c173deb9 a bit redundant, but works around ITS#3951 2005-08-18 12:14:07 +00:00
Pierangelo Masarati
11211d0dae strip entryDN from search entries; frontend will reattach it :( 2005-08-18 11:26:29 +00:00
Pierangelo Masarati
e066ec210e merge sml_managing into sml_flags (SLAP_MOD_MANAGING) 2005-08-18 08:48:10 +00:00
Pierangelo Masarati
9487629061 zero out sml_managing any time a Modifications is built (use calloc?) 2005-08-18 08:12:26 +00:00
Howard Chu
315c4a3b72 ITS#3946 reset lockout status at beginning of all Binds 2005-08-18 07:05:56 +00:00
Luke Howard
2ff5c27f63 Check for NULL in be_match()
Use be_match() in backend.c operational processing
2005-08-18 04:34:04 +00:00
Luke Howard
53a15b6820 Use be_match() instead of testing pointer equivalence 2005-08-18 04:12:54 +00:00
Luke Howard
6cf14a777a Add be_match() macro: one cannot always compare BackendDB pointer
values in order to test equivalence, because the overlay engine
may have reset the backend pointer to a temporary copy on the stack.

So, we test pointer equivalence of the BackendDB itself, then of
be_nsuffix -- this macro can be updated if necessary.
2005-08-18 04:12:04 +00:00
Pierangelo Masarati
ef7421b87d more on manage access level 2005-08-18 02:25:10 +00:00
Pierangelo Masarati
add1add854 condition compile dynacl 2005-08-17 22:41:30 +00:00
Pierangelo Masarati
b2284183f9 more on manage 2005-08-17 22:06:46 +00:00
Pierangelo Masarati
965d00a1dd allow to manage entryUUID; allow to manage noUserMod attrs during add 2005-08-17 20:53:39 +00:00
Pierangelo Masarati
557f5eb2ca allow noUserMod attrs write proxying when manageDIT is set (still to work in frontend for add) 2005-08-17 19:40:02 +00:00
Pierangelo Masarati
5873048347 fix return code (prevents clean usage of back-ldap for internal searchs) 2005-08-17 19:38:36 +00:00
Pierangelo Masarati
ec49990d51 ACIs almost entirely factored out of slapd
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Howard Chu
d247840d6b ITS#3946 use connection_destroy hook to reset lockouts instead of unbind 2005-08-17 16:42:22 +00:00
Pierangelo Masarati
69c6cd5365 fix small issues with dynacl and ACI in general 2005-08-17 14:44:41 +00:00
Pierangelo Masarati
99ea177e05 implement overlapping targets enhancement (ITS#3711) 2005-08-17 08:34:49 +00:00
Pierangelo Masarati
76f52279ef fix "matched" return and return code (ITS#3944) 2005-08-17 08:25:48 +00:00
Pierangelo Masarati
24befe380c fix resources release issue 2005-08-17 08:25:10 +00:00