Commit Graph

165 Commits

Author SHA1 Message Date
Quanah Gibson-Mount
59e9ff6243 Happy New Year 2018-03-22 15:35:24 +00:00
Howard Chu
03ee55d725 Revert "ITS#8752 ppolicy: don't call same cleanup twice"
This reverts commit 1c963f4739.

Revert "ITS#8752 make sure all cleanups are called in overlay_op_walk"

This reverts commit b0ad788b8a.
2017-10-13 18:47:25 +01:00
Howard Chu
1c963f4739 ITS#8752 ppolicy: don't call same cleanup twice
fallout from b0ad788b8a
2017-10-13 17:39:37 +01:00
Josh Soref
10566c8be3 ITS#8605 - spelling fixes
* javascript
* kernel
* ldap
* length
* macros
* maintained
* manager
* matching
* maximum
* mechanism
* memory
* method
* mimic
* minimum
* modifiable
* modifiers
* modifying
* multiple
* necessary
* normalized
* objectclass
* occurrence
* occurring
* offered
* operation
* original
* overridden
* parameter
* permanent
* preemptively
* printable
* protocol
* provider
* really
* redistribution
* referenced
* refresh
* regardless
* registered
* request
* reserved
* resource
* response
* sanity
* separated
* setconcurrency
* should
* specially
* specifies
* structure
* structures
* subordinates
* substitution
* succeed
* successful
* successfully
* sudoers
* sufficient
* superiors
* supported
* synchronization
* terminated
* they're
* through
* traffic
* transparent
* unsigned
* unsupported
* version
* absence
* achieves
* adamson
* additional
* address
* against
* appropriate
* architecture
* associated
* async
* attribute
* authentication
* authorized
* auxiliary
* available
* begin
* beginning
* buffered
* canonical
* certificate
* charray
* check
* class
* compatibility
* compilation
* component
* configurable
* configuration
* configure
* conjunction
* constraints
* constructor
* contained
* containing
* continued
* control
* convenience
* correspond
* credentials
* cyrillic
* database
* definitions
* deloldrdn
* dereferencing
* destroy
* distinguish
* documentation
* emmanuel
* enabled
* entry
* enumerated
* everything
* exhaustive
* existence
* existing
* explicitly
* extract
* fallthru
* fashion
* february
* finally
* function
* generically
* groupname
* happened
* implementation
* including
* initialization
* initializes
* insensitive
* instantiated
* instantiation
* integral
* internal
* iterate
2017-10-11 14:39:38 -07:00
Quanah Gibson-Mount
1df85d3427 Happy New Year! 2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
6c4d6c880b Happy New Year! 2016-01-29 13:32:05 -06:00
Howard Chu
3a305253a0 ITS#8327 fix ppolicy_get_default
pwdMaxRecordedFailure must never be zero
2015-12-03 00:58:33 +00:00
Ryan Tandy
1b7a5871c2 ITS#8234 revert to default policy on failure 2015-09-01 19:19:57 -07:00
Ryan Tandy
572ad2b037 ITS#7537 release entry on failure 2015-09-01 18:56:19 -07:00
Howard Chu
e5b9bdd8c5 ITS#8185 missing schema reference 2015-08-15 00:56:50 +01:00
Howard Chu
b0950f4d44 Fix copy/paste error in prev commit 2015-08-14 15:33:32 +01:00
Howard Chu
af27b7032e ITS#8185 add pwdMaxRecordedFailure
Limit the number of pwdFailureTime stamps to record, regardless
of lockout settings.
2015-08-14 15:19:46 +01:00
Howard Chu
624c1fac8b ITS#8184 avoid redundant mod ops
If multiple ppolicy overlays are present on a glued tree, they all
attempt to update the policy operational attributes in response to
password-related activities. The redundant mod ops will cause the
entire op to fail. Check for these ops before inserting new ones.
2015-07-10 14:04:29 +01:00
Quanah Gibson-Mount
1705fa7e55 Happy New Year 2015-02-11 15:36:57 -06:00
Howard Chu
fccca0ead9 Minor cleanup (coverity) 2015-01-14 16:59:54 +00:00
Quanah Gibson-Mount
db564ab516 Silence compiler warning by adding explicit return 0 to ppolicy_db_destroy 2014-10-03 15:35:39 -05:00
Howard Chu
d8e280e87c ITS#7906 more cleanup
db_open/close were not symmetric with init/destroy
2014-08-11 13:48:29 -07:00
Howard Chu
8b89b45615 ITS#7906 minor cleanup
rename ppolicy_close -> ppolicy_db_close for consistency
2014-08-05 19:37:28 -07:00
Howard Chu
08792a77fd ITS#7906 better fix
don't free pwcons unless we're actually destroying this DB
2014-08-05 19:36:30 -07:00
Howard Chu
05402c396d ITS#7906 fix ppolicy_connection_destroy
It can still run after ppolicy_close has freed the connection table
2014-07-24 17:04:56 -07:00
Paul B. Henson
85d467aca6 ITS#7161 ppolicy pwdFailureTime resolution should be better than 1 second 2014-06-15 13:42:46 -07:00
Kurt Zeilenga
5c878c1bf2 Happy new year (belated) 2014-01-25 05:21:25 -08:00
Kurt Zeilenga
0fd1bf30b8 Happy New Year 2013-01-02 10:22:57 -08:00
Kurt Zeilenga
2bbf9804b9 Happy New Year! 2012-01-01 07:10:53 -08:00
Pierangelo Masarati
bdbdae3e5f according to draft-behera, this attribute only affects password modifies by self (ITS#7021) 2011-08-20 18:52:54 -06:00
Hallvard Furuseth
fac36dcba7 ITS#6932: Clean up strange asserts & nearby code.
Mostly found by Klocwork: Issues #213,298-300,331,342-343,374,390,410.
2011-05-05 15:55:29 +02:00
Kurt Zeilenga
966cef8c9a Happy New Year 2011-01-05 00:42:37 +00:00
Hallvard Furuseth
50b1c4e1b1 ITS#6620: Don't delete absent pwdChangedTime.
Based on patch by Martin Evans.
2010-12-02 12:19:31 +00:00
Howard Chu
21d299e370 More for ITS#6608 - don't replicate ppolicy state changes on replicas 2010-08-04 08:14:59 +00:00
Howard Chu
9434a7d676 ITS#6608 don't update mod opattrs on single-master slaves 2010-07-28 02:43:21 +00:00
Ralf Haferkamp
c4f0c2cc2b unregister controls when removing syncprov, ppolicy, valsort, chain or
sssvlv overlay
2010-07-01 11:51:43 +00:00
Howard Chu
c8c3847103 ITS#6566 use Debug, not fprintf(stderr) 2010-06-02 00:18:32 +00:00
Kurt Zeilenga
3dadeb3efe happy belated New Year 2010-04-13 22:17:29 +00:00
Howard Chu
eefe62b597 Implement policy checks on compare op 2009-10-15 07:11:39 +00:00
Howard Chu
2d28fe4d4c ITS#6265 must set orm_no_opattrs 2009-08-20 00:32:28 +00:00
Howard Chu
c29b1a53b2 More for 1.124 - forwarded updates need Relax control since state attrs
are no-user-mod.
2009-07-01 07:39:22 +00:00
Howard Chu
8a0b05bfeb ITS#6084 handle pwdAccountLockedTime values set into the future (i.e.,
lame way of setting an expiration date.)
2009-06-30 12:12:53 +00:00
Howard Chu
98ebf1950e Fix prev commit 2009-06-30 11:54:45 +00:00
Howard Chu
b50f9c7aa9 ITS#6082 return checker module's error message to client 2009-06-30 11:51:13 +00:00
Howard Chu
68246fb76d Fix check_password with {cleartext} passwords 2009-06-30 11:24:11 +00:00
Howard Chu
1f07d843f1 ITS#6168 actually use pwdLockout setting 2009-06-30 11:04:16 +00:00
Howard Chu
972176a1e0 Add ppolicy_forward_updates: if configured, ppolicy state changes due to
Binds are performed using the frontend, to allow them to trigger the
updateref on a consumer, which can then be forwarded by the chain overlay.
Setting is ignored if server is not a consumer.
2009-06-30 10:41:51 +00:00
Kurt Zeilenga
4af9eb9715 Update copyright notices 2009-01-22 00:40:04 +00:00
Pierangelo Masarati
0631c47576 do not allow slapo-ppolicy to be global by now (ITS#5858) 2008-12-20 22:02:06 +00:00
Hallvard Furuseth
dffe8d37fa ITS#5770: Fix unaligned BerElements: Use BerElementBuffer, not char[size]. 2008-10-24 17:52:05 +00:00
Pierangelo Masarati
382bb4de11 save one copy (please review) 2008-10-22 21:58:59 +00:00
Hallvard Furuseth
b6f83f1a25 Warning cleanup: signed meets unsigned. ber_flatten2() returns -1 on
error, not LBER_DEFAULT.
2008-10-13 09:17:36 +00:00
Pierangelo Masarati
7cc2acd111 fix previous commit (ITS#5711) 2008-09-27 10:34:52 +00:00
Pierangelo Masarati
a0e3e68a02 allow controls deletion to be deferred; pass response controls back to frontend in extops (ITS#5711) 2008-09-27 10:06:43 +00:00
Howard Chu
f911e0f5d1 ITS#5569 ignore internal ops when validating pwd modify 2008-07-08 19:02:38 +00:00