Howard Chu
4a4bf0bf39
Cleanup error messages
2011-02-28 11:38:19 +00:00
Howard Chu
a60c82b3ba
ITS#6837 olcChainDatabase inherits from olcLDAPConfig
2011-02-19 02:49:18 +00:00
Pierangelo Masarati
5d9baf3e85
use (noncritical) whoami extop during SASL bind (ITS#6817)
2011-02-03 23:35:56 +00:00
Pierangelo Masarati
ddbcb565d4
use (noncritical) authzid control during SASL bind (ITS#6817)
2011-02-03 23:20:15 +00:00
Howard Chu
e72c093a55
ITS#6711 minimal tweaks for aclbind/idassertbind for privileged connection
...
in dobind_int().
2011-02-02 20:56:58 +00:00
Howard Chu
d626977848
Cleanup priv/idassert choice: check for configured bind method, not authcDN
2011-02-02 20:32:48 +00:00
Howard Chu
aec5adac17
ITS#6711 use idassert TLS conf for priv connection if aclbind not set
2011-02-02 20:06:28 +00:00
Pierangelo Masarati
293b5e51a5
first cut at SASL bind issues in idassert (related to ITS#6817)
2011-01-31 22:07:04 +00:00
Hallvard Furuseth
4064e3c15d
Re-fix ITS#6793 (back-ldap bad free of matchedDN).
...
Previous fix opened for a ITS#6758-style double free if the
caller was broken. Using REP_MATCHED_MUSTBEFREED is more robust.
2011-01-31 05:30:05 +00:00
Pierangelo Masarati
36d0a161ab
also handle RFC 4526 t-f filters in back-ldap (more about ITS#6814)
2011-01-29 14:23:53 +00:00
Pierangelo Masarati
b996c17eb2
handle undefined filters in back-ldap (more about ITS#6814)
2011-01-29 12:29:20 +00:00
Pierangelo Masarati
8fcc9b058b
handle undefined objectClass values in search filters (ITS#6814)
2011-01-29 10:30:17 +00:00
Howard Chu
d3b09ef2a9
ITS#5421 drop ldap-int.h
2011-01-19 21:27:16 +00:00
Hallvard Furuseth
3866da50f5
ITS#6793 Fix back-ldap bad free on matchedDN change
2011-01-17 10:55:41 +00:00
Kurt Zeilenga
966cef8c9a
Happy New Year
2011-01-05 00:42:37 +00:00
Pierangelo Masarati
b672d8535d
make sure initialization is only tried once; improve error messages
2011-01-02 15:06:11 +00:00
Pierangelo Masarati
f2df9f0cf5
add some logging (under TRACE)
2011-01-02 12:29:19 +00:00
Hallvard Furuseth
bdb078a778
ITS#6758 Reset dangerous REP_ENTRY_* flags.
...
If SlapReply.sr_un cannot contain an entry but does or soon may
contain another member than sru_search: Ensure nothing will see
leftover REP_ENTRY_* flags and try to clean up the "entry" there.
2010-12-31 20:53:17 +00:00
Hallvard Furuseth
15aa7c472a
noop commit: cleanup 0 -> REP_RESULT in SlapReply
2010-12-31 14:08:34 +00:00
Hallvard Furuseth
d2b024be4a
ITS#6758 Reset some SlapReply flags & data.
...
Reset data more consistenlty. When resetting sr_entry after sending
data, reset sr_flag as well. Reset rs_attrs and Extended Operation
oid/data after setting and sending them.
2010-12-30 23:55:07 +00:00
Hallvard Furuseth
cd6e9156e7
Remove lint (unused vars/labels/funcs/default:s)
2010-12-30 23:34:55 +00:00
Hallvard Furuseth
c9e85af35c
ITS#6759: assert;Debug -> Debug;assert
2010-12-30 23:19:02 +00:00
Hallvard Furuseth
4484781b0d
ITS#6721: Fix uninitialized tv_usec from ITS#6282
2010-11-23 10:10:45 +00:00
Hallvard Furuseth
e1469fff44
For ITS#5421: Also LBER_FREE() -> ber_memfree()
2010-11-22 13:14:29 +00:00
Hallvard Furuseth
b39e9d151d
For ITS#5421: Remove ldap-int.h dependencies.
...
LDAP_FREE() -> ber_memfree(), msg->lm_ber -> ldap_get_message_ber(msg).
2010-11-22 12:51:44 +00:00
Pierangelo Masarati
001b30ebc6
fix slapo-chain startup issue when using back-config, related to ITS#6540
2010-11-14 23:53:54 +00:00
Howard Chu
1e18b823a0
ITS#6699 search references must turn onelevel scope to base
2010-11-12 04:35:49 +00:00
Pierangelo Masarati
50a21d512f
cleanup related to ITS#6565 (also plugs a leak)
2010-09-10 22:19:41 +00:00
Pierangelo Masarati
aa63f21e4f
cleanup previous commit
2010-09-09 00:57:04 +00:00
Pierangelo Masarati
65b042b4fb
if required by the bindconf configuration, force TLS (partially addresses ITS#6642)
2010-09-09 00:12:01 +00:00
Pierangelo Masarati
22e5e49f26
use request/referral DN, scope, filter according to RFC4511 (related to ITS#6565)
2010-07-22 19:17:20 +00:00
Ralf Haferkamp
c4f0c2cc2b
unregister controls when removing syncprov, ppolicy, valsort, chain or
...
sssvlv overlay
2010-07-01 11:51:43 +00:00
Pierangelo Masarati
1242443553
don't risk leaving around client library error codes
2010-06-22 23:10:48 +00:00
Pierangelo Masarati
3a28608f0d
allow successful binds to return control responses (ITS#6530)
2010-04-22 18:18:15 +00:00
Pierangelo Masarati
467a1da79f
add support for don't use copy in SASL auxprops lookup/store (ITS#6475; TODO: document new directives)
2010-04-15 18:13:53 +00:00
Pierangelo Masarati
9d2e03f052
allow to specify a per-database list of attributes that need to be always collected, even if not explicitly requested by clients (addresses ITS#6513)
2010-04-15 05:26:21 +00:00
Pierangelo Masarati
bbe7272c7f
allow strict adherence to RFC4370 wrt/ control criticality (ITS#6523)
2010-04-14 21:37:03 +00:00
Kurt Zeilenga
3dadeb3efe
happy belated New Year
2010-04-13 22:17:29 +00:00
Pierangelo Masarati
9702081201
handle ordered values as appropriate (ITS#6516)
2010-04-12 18:01:37 +00:00
Pierangelo Masarati
f57a216f1c
use slab allocation
2010-04-12 07:44:56 +00:00
Pierangelo Masarati
32048a5128
fix previous commit
2010-04-12 02:28:40 +00:00
Pierangelo Masarati
2355fb516a
backout unintended commit commit
2010-04-12 00:08:11 +00:00
Pierangelo Masarati
0dc3a13c01
fix previous commit
2010-04-12 00:06:45 +00:00
Pierangelo Masarati
f75825881a
honor X-ORDERED in olcDbIdAssertAuthzFrom; add olcDbIdAssertPassthru (ITS#6456); note: breaks binary compatibility with module back-meta.la
2010-04-09 22:47:55 +00:00
Howard Chu
32feda4478
Add pbind proxybind overlay. Just intercepts Bind requests on a regular DB
...
and proxies them to a remote server.
2010-02-04 01:59:58 +00:00
Howard Chu
66a58ae93a
ConnTTL, NetworkTimeout, and ProtocolVersion were missing from the
...
config OC, thus inaccessible from cn=config
2010-02-04 01:02:51 +00:00
Pierangelo Masarati
2047a0d784
plug one-time leaks
2009-12-18 19:07:16 +00:00
Pierangelo Masarati
48b8970dad
issue a useful error message
2009-12-08 19:49:15 +00:00
Pierangelo Masarati
5118f06b13
plug leak/logical error (ITS#6326)
2009-10-07 22:46:35 +00:00
Pierangelo Masarati
1815ad4cb6
register authz cookie (ITS#6296)
2009-09-17 21:16:04 +00:00
