mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2024-12-27 03:20:22 +08:00
Code Issues Packages Projects Releases Wiki Activity
2,306 Commits 38 Branches 307 Tags 74 MiB
375995be50
Commit Graph

569 Commits

Author SHA1 Message Date
Julio Sánchez Fernández
e892ebfc5e Some content for tls_verify_cb where parts of our policy should 
be implemented.

The rest of this change mostly contains random ideas taken from
mod_ssl.  The purpose is to get the repository in sync with the
code I am testing.  I still can't manage to make Netscape send
its certificate to slapd, though it works with Apache/mod_ssl
(with the same certificates).  Trying s_client against both
does not shed any light.  If anyone manages to make it work,
please let us know.
 1999-07-20 18:31:53 +00:00
Julio Sánchez Fernández
463a7ec91d We were freeing lud_dn when when lud_host was meant, leading to 
arena corruption.
 1999-07-20 11:11:57 +00:00
Kurt Zeilenga
543aafd991 Implement RFC2255 URL format. 1999-07-19 19:32:47 +00:00
Kurt Zeilenga
d2487f9219 s/time(0)/time(NULL)/ 1999-07-19 19:28:21 +00:00
Hallvard Furuseth
cde93a6e06 make ldap.ld_lberoptions unsigned, like berelement.ber_options 1999-07-18 01:20:45 +00:00
Kurt Zeilenga
12f481d657 Import patches mistakenly applied to OPENLDAP_DEVEL_REFERRALS. 
ldap_modify: delete of last attribute value should delete attribute (ITS#229)
thr_nt: use sleep to yield
 1999-07-18 00:33:30 +00:00
Hallvard Furuseth
5ab862aee7 Pass socklen_t* instead of int* to getsockopt, accept, getpeername, recvfrom 1999-07-16 18:43:10 +00:00
Julio Sánchez Fernández
85acec922f We were not remembering the allocated SSL thing in the Sockbuf. 
Set flags without relying on errno (this change may be gratuitous
or wrong).
 1999-07-16 15:46:15 +00:00
Kurt Zeilenga
73276e84ae Import experimental referral implementation from OPENLDAP_DEVEL_REFERRALS. 
Includes support for update referral for each replicated backend.
	Reworked replication test to use update referral.
Includes major rewrite of response encoding codes (result.c).
Includes reworked alias support and eliminates old suffix alias codes
(can be emulated using named alias).
Includes (untested) support for the Manage DSA IT control.
Works in LDAPv2 world.  Still testing in LDAPv3 world.
Added default referral (test009) test.
 1999-07-16 02:45:46 +00:00
Julio Sánchez Fernández
7a64fcf7b3 Set ciphers from slapd.conf. 
More error checking and reporting.
Slowly getting there, SSL_accept succeeds now, but connection breaks
immediately after that (my glue logic with slapd is broken).
 1999-07-15 21:03:47 +00:00
Kurt Zeilenga
c7425738bb Add missing arg to Debug macro call 1999-07-15 20:00:05 +00:00
Julio Sánchez Fernández
41de66a0b2 New routine tls_report_error to analyze errors from OpenSSL 
Change temporarily the default protocol from TLSv1 to SSLv3 with
fallback to SSLv2.  This seems necessary for slapd to accept connections
from Netscape.
Try to set the cipher list in the default context.  Does not semm to
work yet.
 1999-07-15 14:59:09 +00:00
Hallvard Furuseth
5bcdf362f3 Remove duplicate 'static' 1999-07-14 23:28:56 +00:00
Kurt Zeilenga
cbb5553b03 Newer versions of OpenSSL install headers in $prefix/include/openssl... 1999-07-14 00:03:52 +00:00
Julio Sánchez Fernández
509fdc1e6d Deal with sb_trans_needs_read and sb_trans_needs_write 1999-07-13 19:40:10 +00:00
Julio Sánchez Fernández
eeec88a8c4 Add a couple of control flags to sockbufs and macros to test them. 1999-07-13 19:38:01 +00:00
Julio Sánchez Fernández
710f697fb7 Get and set TLS options 1999-07-13 19:34:07 +00:00
Julio Sánchez Fernández
70fe83b1d2 First version with TLS. Untested. 1999-07-13 19:32:51 +00:00
Julio Sánchez Fernández
43fba8fcb1 First version with TLS. Untested. 1999-07-13 19:30:41 +00:00
Julio Sánchez Fernández
97a681910e Options for TLS 1999-07-13 19:29:19 +00:00
Julio Sánchez Fernández
739466b85d Add tls.c 
Add use of TLS_LIBS so that test tools compile
 1999-07-13 19:27:33 +00:00
Julio Sánchez Fernández
7482777a7c Add tls.c 
Add use of TLS_LIBS so that test tools compile
 1999-07-13 19:25:10 +00:00
Julio Sánchez Fernández
8f4f94d415 First version of TLS glue for SSLeay/OpenSSL originally written by 
Bart Hartgers.  Untested.
 1999-07-13 19:11:53 +00:00
Kurt Zeilenga
94d5067b22 Use assert instead of private Assert macro 1999-07-13 18:39:20 +00:00
Hallvard Furuseth
2c27a6abcf Eliminate htonl(unsigned_long_arg), which is wrong on 64-bit OSF1/alpha 1999-07-13 09:41:25 +00:00
Hallvard Furuseth
5f880ae022 Fix LDAP_CONST->const in explode_name(), it failed when LDAP_CONST was empty. 1999-07-13 06:48:35 +00:00
Hallvard Furuseth
fb3b8e5ef1 Fix LDAP_CONNECTIONLESS code rot 1999-07-13 06:39:55 +00:00
Hallvard Furuseth
c4a13efbea Fix NULLxxx -> NULL 1999-07-13 06:37:19 +00:00
Hallvard Furuseth
6eef6bea01 ldap-int.h 1999-07-13 06:27:47 +00:00
Hallvard Furuseth
354702b94e ldap-int.h 1999-07-13 06:21:14 +00:00
Hallvard Furuseth
96e8fafb51 constify use of invalue in <ber/ldap>_set_option() 1999-07-13 05:17:50 +00:00
Hallvard Furuseth
2cc187ffbf constify ldap_int_put_controls, ldap_control_dup, ldap_controls_dup 1999-07-13 05:13:33 +00:00
Hallvard Furuseth
95b64907d3 Fix read_next_searchobj prototype: long*blenp -> ber_len_t*blenp 1999-07-13 05:04:06 +00:00
Hallvard Furuseth
55fa595f56 Add missing newline at EOF 1999-07-13 04:11:49 +00:00
Hallvard Furuseth
2026aa84fa Add bmu_funcp to bmu_align_u 1999-07-13 03:54:42 +00:00
Hallvard Furuseth
e2bfb420d7 Fix use and decl of ber_pvt_assert. Fix ac/stdio.h -> stdio.h. 1999-07-13 03:50:39 +00:00
Kurt Zeilenga
7574b70c6b Add charray (from slapd) to -lldap/-lldap_r (not yet used) 
Add digest md5 codes to -lldap/-lldap_r (work in progress)
 1999-07-07 17:58:21 +00:00
Kurt Zeilenga
4831bb0a75 request value should be optional. 1999-07-07 17:52:06 +00:00
Kurt Zeilenga
a67b08d515 Minor editorial change. 1999-07-07 17:51:39 +00:00
Kurt Zeilenga
522cd72f43 Fix CRITICIAL typo 1999-07-07 17:49:15 +00:00
Julio Sánchez Fernández
c8e37af0ca Removed numerous memory leaks detected by Mark Meredith. 
Make sure the token_val argument to get_token is always initialized
to something, either newly allocated memory or NULL.
 1999-07-02 11:57:07 +00:00
Kurt Zeilenga
ddd0559284 Fairly complete slapd SASL bind parsing... and centralized cleanup code. 
Update error strings and cldap misuse of server error.
 1999-07-01 04:42:01 +00:00
Kurt Zeilenga
9225707a06 Modify lutil_passwd to accept a third argument char** methods to 
specific which methods may be used.  This will facilate development
of a slapd config directive "passwordMethod ..." to specify which
methods should be allowed.
 1999-06-29 22:24:53 +00:00
Kurt Zeilenga
dcc5bdfe7e Log out to stderr, add LDAP_VERSION3 support to bind.c and modrdn.c 1999-06-29 01:02:48 +00:00
Kurt Zeilenga
f4ff5a9299 EXPERIMENTAL: Use sasl bind for simple bind. 
Add sasl.c to libldap_r.dsp.
 1999-06-28 23:24:16 +00:00
Kurt Zeilenga
64d5725662 Allow ctrls argument to be NULL. 1999-06-28 22:47:20 +00:00
Kurt Zeilenga
5045f15b23 EXPERIMENTAL ldap_parse_result() 1999-06-28 22:33:03 +00:00
Kurt Zeilenga
8482d2b488 Provide build support for sasl.c. 1999-06-28 22:30:56 +00:00
Kurt Zeilenga
1fd3c797a8 Validate outvalue after session param. 1999-06-28 22:22:27 +00:00
Kurt Zeilenga
37fceeb662 Minor cleanup of ldap_result(). 1999-06-28 22:20:04 +00:00
Kurt Zeilenga
80e5e3fead First cut at SASL routines. 1999-06-28 22:19:21 +00:00
Kurt Zeilenga
613bf0b077 Return LDAP_BAD_PARAM if res is not EXOP result. 
Skip over referrals that might exist in EXOP result.
 1999-06-28 22:17:38 +00:00
Kurt Zeilenga
1fe082d16c Support both vsnprintf and vsprintf 1999-06-28 22:04:31 +00:00
Kurt Zeilenga
048547a652 modify ber_put_berval to put NULL ostring when bv == NULL or bv->bv_len == 0. 1999-06-28 20:12:30 +00:00
Kurt Zeilenga
5f28509311 detect write() and use HAVE_WRITE instead of 
!defined( DOS ) && !defined( MACOS )
Add detection for read & recv/send for later use.
 1999-06-28 04:11:41 +00:00
Kurt Zeilenga
dcf9209ae3 *** empty log message *** 1999-06-28 04:05:53 +00:00
Kurt Zeilenga
ab10099fc1 Added support for "userPassword: {UNIX}uid". getpwnam("uid") is 
used to fetch the pw_passwd which is than passwd to crypt().
getspnam() is used instead of getpwnam() when available.
Added configration detection of pw_passwd, shadow.h, getpwnam()
and getspnam().
 1999-06-26 20:52:59 +00:00
Kurt Zeilenga
61c5f7a2ca Add debug to nt project, remove lint. 1999-06-21 22:59:23 +00:00
Kurt Zeilenga
0b924192e7 Move nt_debug to -llutil and generalize for all platforms. 1999-06-21 22:52:28 +00:00
Kurt Zeilenga
24c39b31b6 Add LDAP_VALID and other asserts. 1999-06-21 22:38:00 +00:00
Julio Sánchez Fernández
fd15804f63 Tokenization is not really well done. This is a temporary fix for parsing 
answers from Innosoft servers, but expect better tokenization in the
future.
 1999-06-21 10:08:03 +00:00
Kurt Zeilenga
669b8f4047 ber_int_t, ber_tag_t, ber_socket_t, ber_len_t 
added lber_types.h.nt, lber_types.h.in
removal of NULLxxx internal macros (in favor of NULL).
ch_free added to slapd,slurpd/ch_malloc.c
#define free ch_free (should be removed after s/free/ch_free/g) in proto-slap.h
ch_malloc and friends use ber_memalloc and friends
 1999-06-18 23:53:05 +00:00
Gary Williams
e61bb6aa3f close registry, and return static pointer (no free) from getRegParam 1999-06-18 21:29:02 +00:00
Gary Williams
7a7f3018fa fix flag on formatMessage to not allocate buffer 1999-06-18 21:27:43 +00:00
Gary Williams
19d346ba71 remove dependencies on other libraries 1999-06-18 21:27:20 +00:00
Kurt Zeilenga
bbc568b21f ldapconfig.h vs ldap_config.h changes 
backout previous nt changes (actually, just don't include nt_svc.c)
 1999-06-17 04:43:24 +00:00
Kurt Zeilenga
21e081dc5b Separate autoconf generated values from "defaults". 
ldap_defaults.h incorporates non-generated ldapconfig.h values.
	ldap_config.h.in is new template for autoconf generated defaults
		(namely directories and paths)
	ldap_config.h.nt, NT template (must be manually copied)
	s/<ldapconfig.h>/<ldap_defaults.h>/
	s/DIRSEP/LDAP_DIRSEP/ & s/DEFAULT_/LDAP_/
 1999-06-17 03:54:25 +00:00
Gary Williams
8f99cafe87 add new NT service modules 1999-06-16 17:53:38 +00:00
Gary Williams
4d6ce8b87e new code to support slapd as an NT service 1999-06-16 17:53:17 +00:00
Kurt Zeilenga
fdbb2b80bf Remove misplaced LDAP_P() in declaration of ldap_int_get_controls. 1999-06-16 17:11:14 +00:00
Julio Sánchez Fernández
64d018c357 Make sure print_numericoid always returns with a value. 
Remove some lint.
 1999-06-16 12:31:18 +00:00
Kurt Zeilenga
e8a45b52b3 assert read/write to not in use sockbufs. This may cause problems 
with slapd... slapd should be fixed.
 1999-06-15 02:31:15 +00:00
Julio Sánchez Fernández
2abcbd5a4d Matching rules. 
Replace be_liberal by allow_quoted in low level parsers since that
reflects better its semantics.
Add allow_quoted to parse_numericoid.
 1999-06-14 13:40:52 +00:00
Julio Sánchez Fernández
3e6fe96a96 Constification. 1999-06-14 11:57:43 +00:00
Julio Sánchez Fernández
766a5832b1 Netscape DS quotes the SYNTAX values, we propagate the be_liberal 
setting to parse_noidlen so that it can grok that.
Propagate be_liberal parse_oids so that it only accepts a qdstring when
necessary (i.e. in SUP) to cater for another Netscapism.
 1999-06-14 11:31:42 +00:00
Julio Sánchez Fernández
8d2b71e6c1 ldap_*_free routines are new and replace the old static routines, all 
references changed.
Parsers are now more liberal in that they can accept missing OIDs or
OIDs that are in the wrong syntax.
 1999-06-13 23:34:41 +00:00
Kurt Zeilenga
cb68aab469 s/ldap_open/ldap_init/ calls... ldap_open is deprecated. 1999-06-13 21:49:35 +00:00
Juan Gomez
34f068f131 Drop support for alloca(). 1999-06-11 18:56:28 +00:00
Kurt Zeilenga
2cb228a9ce Clean up build_result_ber error handling. 1999-06-11 18:48:34 +00:00
Kurt Zeilenga
fde9d8702e Fix build_result_ber to construct a new ber and to set ld_errno appropriately. 1999-06-10 18:00:04 +00:00
Kurt Zeilenga
f34c94e5d5 Disable LDAP_MEMORY_DEBUG on NT (should not have been enabled by default). 
Fix LDAP_MEMORY_DEBUG realloc size bug, thanks Alex.
 1999-06-10 00:56:00 +00:00
Julio Sánchez Fernández
92839e817f Fixed inconsistent management of white space that was producing parsing 
problems in slapd.
 1999-06-09 11:51:31 +00:00
Julio Sánchez Fernández
9291bf6f44 Added whitespace in output in a few places. 
Minor cosmetic changes.
Fixed parsing of noidlen.
 1999-06-08 17:40:27 +00:00
Kurt Zeilenga
c6cf2815cb Add missing ';' after BER_MEM_VALID macro calls. 1999-06-08 01:41:38 +00:00
Kurt Zeilenga
82def24b31 don't test BER_MEM_VALID forever. 1999-06-08 01:37:47 +00:00
Kurt Zeilenga
ca00536233 Minor clean of assert() and comments. 1999-06-07 23:12:34 +00:00
Kurt Zeilenga
b09e658d5b Add and use a BER_MEM_VALID macro (behind ifdef LDAP_MEMORY_DEBUG). 
Make sure LBER_INTIALIZED is set on any ber_mem* call.
 1999-06-07 19:33:08 +00:00
Kurt Zeilenga
012f4e29b0 Hide assert(p == NULL) behind LDAP_MEMORY_DEBUG. 
Add detection for duplicate free in LDAP_MEMORY_DEBUG code.
 1999-06-07 18:48:22 +00:00
Kurt Zeilenga
f257ee858c Use LDAP_VERSION2 instead of LDAP_VERSION. 1999-06-07 18:45:52 +00:00
Kurt Zeilenga
8c772985c7 s/LDAP_OPT_MATCHED_STRING/LDAP_OPT_MATCHED_DN/ 
Added place holder for LDAP_FILTER_EXTENDED code.
Added assert() here and there and removed lint.
Removed version promotion code (version must be manually set).
Added messages.c to MSVC project.
 1999-06-05 20:18:32 +00:00
Kurt Zeilenga
b219b6aa48 Remove DOS comment. 1999-06-05 20:14:02 +00:00
Kurt Zeilenga
48c8aa035d EXPERIMENTAL ldap_extended_operation() and ldap_parse_extended_result() 1999-06-04 00:34:04 +00:00
Kurt Zeilenga
a53823a613 Update comments to reflect RFC2251 specs. 1999-06-03 19:22:33 +00:00
Kurt Zeilenga
9fef42d3f8 Enable browsing info in MSVC debugging configurations. 
Toy with dllimport/dllexport stuff (think I'll leave the real dll work to
somebody else).
Added ldap_strdup() wrapper of ber_strdup().
 1999-06-03 18:24:22 +00:00
Kurt Zeilenga
21c70857f1 s/<stdlib.h>/<ac/stdlib.h>/ 1999-06-03 00:37:44 +00:00
Kurt Zeilenga
3046c0449e Fix up s/NULL.*/NULL/ errors 1999-06-02 23:21:06 +00:00
Kurt Zeilenga
f472d3abcf No anonymous unions. 1999-06-02 22:40:58 +00:00
Kurt Zeilenga
1f52f6e43e Add ber_strdup(), remove ldap_int_strdup(), add LDAP_STRDUP macro 
and ripple change through -lldap.
 1999-06-02 22:28:22 +00:00
Kurt Zeilenga
bed6465529 Make first argument of *_get_option const (experimental). 
Make _MOD_SOFTADD 0x1000 to minimize chance of conflict with legit changes
to API spec.
Fix memory leak in ldap_mods_free() and minor memory allocator issues.
 1999-06-02 21:38:48 +00:00
Kurt Zeilenga
09fe2bc905 Add experimental wrong heap detection behind LDAP_MEMORY_DEBUG macro. 1999-06-02 21:34:34 +00:00