Kurt Zeilenga
c5765e3827
Use provided macros and comment
2000-06-03 17:24:21 +00:00
Kurt Zeilenga
8045b54124
Use getpassphrase() instead of getpass() if available.
2000-05-19 18:41:26 +00:00
Kurt Zeilenga
3e82a5309b
Add missing copyright notices
2000-05-13 02:43:19 +00:00
Kurt Zeilenga
29d9fa20a2
Y2k copyright update
2000-05-13 02:36:07 +00:00
Kurt Zeilenga
69fbf137aa
make ntservice error to string routines static
...
#undef __RETSTR before #define
2000-05-13 00:48:17 +00:00
Howard Chu
3f618bfe03
Fix ambiguous return value in lutil_passwd
2000-05-13 00:10:24 +00:00
Howard Chu
237b00049a
Moved GetLastErrorString to ntservice.c. I missed it before, thought it
...
was unused but it's needed in ntservice.c
2000-05-12 23:53:14 +00:00
Kurt Zeilenga
304a57740a
nt_err.c has moved from lutil to lber
2000-05-12 23:37:28 +00:00
Howard Chu
9a79d03e13
Fix previous change to getRegParam, SERVICE_NAME is only known in slapd.
2000-05-12 21:26:30 +00:00
Howard Chu
3dc83998c0
Moved nt_err from liblutil to liblber, renamed WSAGetErrorString to
...
ber_pvt_wsa_err2string.
2000-05-12 21:16:15 +00:00
Howard Chu
8d2aba12b4
Fix typo in lutil_debug for NT: file -> log_file
2000-05-12 20:01:40 +00:00
Howard Chu
2e5e4c3f20
More fixes for NT support:
...
liblutil/ntservice.c change registry key path used for non-default
service names.
slapd/Makefile.in change to generate slapd.syms dynamically
slapd/daemon.c fix to make NT service ignore SIGBREAK
slapd/main.c fix to allow NT to retrieve listening url from registry
slapd/nt_svc.c fix for exported symbols
slapd/result.c change use of strerror to sock_errstr
slapd/slapd.syms no longer needed
2000-05-11 20:50:20 +00:00
Howard Chu
7ca81c0a03
Fix one more chk_unix ifdef
2000-05-11 20:00:47 +00:00
Kurt Zeilenga
cdb709fd27
Fix unbalanced #endif
2000-05-11 16:06:41 +00:00
Howard Chu
605832eaa5
Added support for AIX security database:
...
configure.in: check for AIX security library, set in AUTH_LIBS macro
top.mk: add AUTH_LIBS macro to SECURITY_LIBS
portable.h.in: added HAVE_AIX_SECURITY macro (via autoheader)
passwd.c: use AIX getuserpw in chk_unix. Also fix logic in chk_unix:
getpwnam must always succeed for the given user. It is not a
fatal error if getspnam returns no result for the user: On
systems that support /etc/shadow, its usage is optional. The
same logic applies for AIX, SCO/HP SecureWare, etc.
2000-05-11 10:10:53 +00:00
Howard Chu
65d7521be1
Added LBER_OPT_LOG_PRINT_FILE to redirect the output of ber_error_print.
...
Used mainly on NT since stderr doesn't exist when slapd runs as a service.
2000-05-11 09:39:33 +00:00
Kurt Zeilenga
3553f9aab6
Fix #ifdefs when --disable-crypt
2000-05-10 23:26:42 +00:00
Kurt Zeilenga
f224e69558
Add experimental code to check simple bind passwords
...
against Cyrus SASLdb. Like other cleartext mechanisms,
should be protected from eavesdropping.
2000-05-10 04:29:51 +00:00
Kurt Zeilenga
802ee714e4
Framework for authpasswd. Needs work. Behind #ifdef
2000-04-25 13:28:03 +00:00
Kurt Zeilenga
6a4ff3b996
Fix == v != bug
2000-04-19 13:35:43 +00:00
Kurt Zeilenga
4c0be829e1
Fix usage in comment
2000-03-17 02:07:59 +00:00
Kurt Zeilenga
0ba3d75913
Don't chdir("/"). Root may not be writable to daemon.
...
Only user can select appropriate run directory. Best left to user.
2000-02-08 04:22:31 +00:00
Kurt Zeilenga
107b22a73c
Fix typo
2000-01-25 23:58:44 +00:00
Kurt Zeilenga
5967cc5658
Even more checks around use of crypt(3).
2000-01-17 17:09:33 +00:00
Kurt Zeilenga
c17b89f431
Add additional crypt() sanity checks.
2000-01-17 16:53:15 +00:00
Kurt Zeilenga
10a6e51521
All close and redirect stdin, stdout, stderr.
2000-01-11 08:04:59 +00:00
Kurt Zeilenga
1fb42bf957
Revamp detach code to ensure stdin, stdout, stderr get closed.
2000-01-11 02:20:01 +00:00
Kurt Zeilenga
34fe70cc71
Validate krb5_init_context
2000-01-10 21:37:04 +00:00
Kurt Zeilenga
38f0b890ab
Borrowed a bit to literally... s/pop/ldap/ s/popper/slapd/
2000-01-09 00:20:00 +00:00
Kurt Zeilenga
e988e175a6
Minor fixes.
2000-01-08 18:51:27 +00:00
Kurt Zeilenga
6437785a82
Initial implementation of Kerberos password verification for
...
simple bind via:
{KERBEROS}principal
Code is disabled by default (for security reasons). Use
--enable-kpasswd to enable. Behind SLAPD_KPASSWD.
Reworked Kerberos detection and split out KBIND as independent
feature (--disable-kbind) (LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND).
KBIND depends upon detection of KRB4 (or KRB425) support. Detection,
building with eBones (as distributed with FreeBSD 3.4) okay, but
wasn't able to test as I don't have a K4 KDC handy.
--with-kerberos has a number of detection options... most likely
don't work properly.
2000-01-08 18:42:11 +00:00
Kurt Zeilenga
f3a650b8af
Add comment about removing HANDSOFF may case alignment problems
1999-12-18 19:51:49 +00:00
Kurt Zeilenga
30411f8402
Add slappasswd to generate rootpw.
1999-12-16 02:18:50 +00:00
Kurt Zeilenga
b1639dadd6
Remove lint
...
Add copyrights
1999-12-13 04:53:59 +00:00
Kurt Zeilenga
cda19446ef
s/generate/hash/
1999-12-12 05:06:36 +00:00
Kurt Zeilenga
431dad371c
Fix slapd SASL/ExternalOps encoding
...
Add controls to extended ops API signatures, need impl.
Update password to support optional server side generation of
new password, verification of old password, and changing of
non-bound user's passwords.
1999-12-10 04:52:32 +00:00
Kurt Zeilenga
b973e61dda
Fix {CRYPT} and {UNIX} passwords
1999-12-09 01:24:38 +00:00
Kurt Zeilenga
5e12c84a6f
Add simple password test program.
...
Rework lutil_passwd routines to use struct berval instead of strings.
1999-12-09 01:11:16 +00:00
Kurt Zeilenga
aeb2de33d7
Found and fixed stupid bug in seeded hash generation.
1999-12-08 19:23:32 +00:00
Kurt Zeilenga
96a126e36a
Need to adjust len by saltlen
1999-12-08 07:07:18 +00:00
Kurt Zeilenga
26c7d69e8c
Update for new password codes for MSVC5
1999-12-08 06:44:22 +00:00
Kurt Zeilenga
d5edb4bff6
Reengineered ldappasswd(1). Uses extended operation to set
...
user password. Likely to be modified to use bind control
instead. Use of modify deprecated in favor mechanisms that
support passwords stored externally to the directory (such
as in a SASL service).
Modified slapd extended operation infrastructure to support
backend provided extended operations.
1999-12-08 04:37:59 +00:00
Kurt Zeilenga
fe591cf679
Remove istty test otherwise we may not detach.
1999-12-05 05:25:02 +00:00
Howard Chu
eaaea51b53
Fixes for NT dynamic linking.
1999-11-27 23:40:08 +00:00
Kurt Zeilenga
357101793b
Use lber types instead of uint32 for md5. sha1 still requires
...
an integer type of exactly 32 bits.
1999-11-17 02:04:06 +00:00
Kurt Zeilenga
14f107e9ed
Changes to support NT single debug
1999-11-01 22:17:06 +00:00
Kurt Zeilenga
b7af076fee
Use centralized output directories.
...
Update single debug/release not to use service manager nor event manager.
Likely breaks MINGW32 port.
1999-11-01 21:25:22 +00:00
Kurt Zeilenga
4cc712db53
Add <ac/param.h> to wrap <sys/param.h>
1999-11-01 17:21:24 +00:00
Howard Chu
17e1877a12
Fix broken MSVC builds. The previous round of Mingw32 patches changed some
...
ifdefs to depend on _WINNT, which is bogus. Added _WIN32 back on these ifs,
and fixed some other include problems.
1999-10-31 02:26:41 +00:00
Kurt Zeilenga
ebc4a8f149
Use uint32 not u_int as code requires 32 bit unsigned integers.
1999-10-30 03:30:10 +00:00
Kurt Zeilenga
5bb1546867
Refine comments.
1999-10-28 17:42:46 +00:00
Howard Chu
e99eab787f
Use new macros from configure.in to accomodate NT/Mingw32 environment.
...
See README 1.27 log
1999-10-28 07:31:59 +00:00
Howard Chu
a57a9abe6d
New files added for Mingw32 support.
...
See README 1.27 log
1999-10-28 07:22:10 +00:00
Howard Chu
dd89498e85
Fix misc syntax warnings and/or bugs.
...
See README 1.27 log
1999-10-28 07:18:48 +00:00
Howard Chu
74d93ac2f8
Fix Winsock-related warning and/or bugs.
...
See README 1.27 log
1999-10-28 07:17:08 +00:00
Kurt Zeilenga
554f5b7aea
Fix up comments.
1999-10-27 22:00:29 +00:00
Kurt Zeilenga
8d821f3904
Really fix gettimeofday usage.
1999-10-27 21:53:41 +00:00
Kurt Zeilenga
68a569c738
Don't use sig_atomic_t.
...
Comment upon synchronization issue.
Fix gettimeofday usage.
1999-10-27 21:50:49 +00:00
Kurt Zeilenga
c52dc059e6
In fallback mode, use value of buffer to improve quality of hash.
1999-10-27 19:42:27 +00:00
Kurt Zeilenga
f804da9bef
Port to NT.
1999-10-27 04:41:38 +00:00
Kurt Zeilenga
491dc61df6
Didn't mean to commit #undef URANDOM_DEVICE
1999-10-27 00:29:10 +00:00
Kurt Zeilenga
241799c9e3
Make sure rdata differs for each program.
1999-10-27 00:08:31 +00:00
Kurt Zeilenga
9e0958d5bc
Rework counter code in fallback.
1999-10-26 23:54:39 +00:00
Kurt Zeilenga
58e10c7417
Add a fallback based upon Phil Karn's "practical randomness" idea.
1999-10-26 23:41:09 +00:00
Kurt Zeilenga
d0ad0cf228
Minor cleanup.
1999-10-26 23:04:44 +00:00
Kurt Zeilenga
3d064b73c5
Fix compilation errors.
1999-10-26 23:00:30 +00:00
Kurt Zeilenga
bdca662249
Add lutil_entropy(). Currently only supports /dev/urandom or
...
Linux equivs. Should be extended to support other quality
sources of entropy. Should be extended to support a reasonable fallback.
1999-10-26 22:57:39 +00:00
Kurt Zeilenga
f4a0699311
Add macros to compute base64 encode/decode lengths.
1999-10-25 01:44:47 +00:00
Kurt Zeilenga
a284b641b7
Move crypt(3) prototypes from <ac/unistd.h> to <ac/crypt.h> (new) to
...
avoid clashes with Kth Kerberos.
1999-10-01 04:48:30 +00:00
Kurt Zeilenga
3c00fd6d23
Rework passwd routines to allow callers to determine which
...
schemes are supported. This should facilate server rootDSE
advertisement of supported schemes, etc..
1999-09-25 22:13:25 +00:00
Kurt Zeilenga
e642a1b9cd
Add OpenLDAP RCSid
1999-09-08 22:52:19 +00:00
Kurt Zeilenga
403f4479bc
Add OpenLDAP RCSid to *.[ch] in clients, libraries, and servers.
...
Replace old Id as needed (back-tcl).
Leave updating of contribWare to contributors (for now).
1999-09-08 19:06:24 +00:00
Hallvard Furuseth
1ced9c02cf
Fix typo in lutil_debug_file()
1999-09-02 07:40:25 +00:00
Kurt Zeilenga
683ea591f7
pipe(2) needs unistd.h
1999-08-31 17:51:04 +00:00
Kurt Zeilenga
0307dd3b38
Use pipe(2) if descriptors are selectable.
1999-08-31 17:01:10 +00:00
Kurt Zeilenga
ac8b5468aa
Clean up soctpair for NT. Add USE_PAIR to allow pair(2) use.
1999-08-31 16:47:42 +00:00
Kurt Zeilenga
b509dd4d8c
sockpair cleanup including:
...
provide prototype in lutil.h
use LBER_SOCKET_T instead of int in prototype. (didn't use
ber_socket_t so all of lber.h wouldn't have be dragged in)
rename signal handlers, use RETSIGTYPE, and make SIGHUP wake
rename fd to sd to reflect descriptor must be usable as a socket.
renamed sel_exit_fds to wake_sds to reflect current use
improve readability of sockpeer.c including removing obtuse goto.
1999-08-31 05:18:06 +00:00
Howard Chu
c057653881
Added lutil_pair()
1999-08-31 03:25:23 +00:00
Kurt Zeilenga
b8a3a153bb
Axe <varargs.h> support. Assume STDC C translator is available
...
to build OpenLDAP.
1999-08-24 00:27:53 +00:00
Kurt Zeilenga
e4f6d54877
New dn2id format with base/one/subtree indices (ldbm/bdb2)
...
New id2entry (id-less) format (ldbm/bdb2)
Removed id2children (ldbm/bdb2)
Added nextid database (ldbm)
Broke ldbmtest
Removed ldif2* tools (ldbm/bdb2)
Added slap tools (slapadd, slapcat, slapindex)
1999-08-17 19:00:59 +00:00
Gary Williams
b1701d24e1
if urls is NULL, default to ldap:///
1999-08-04 18:26:19 +00:00
Kurt Zeilenga
59c8a88c2f
Needs <ac/stdlib.h> for EXIT_*
1999-08-03 18:41:55 +00:00
Kurt Zeilenga
df8f7cbb9b
s/exit(1)/exit(EXIT_FAILURE)/
...
s/exit(0)/exit(EXIT_SUCCESS)/
add <ac/stdlib.h> where needed and other minor header adjustments
1999-08-03 18:14:24 +00:00
Hallvard Furuseth
e3d164d10e
Simplify and speed up a bit by removing CHAR64LONG16.
1999-08-01 11:16:53 +00:00
Kurt Zeilenga
c881940100
relocate wsa error to -llutil
1999-07-27 00:36:58 +00:00
Kurt Zeilenga
933908f72f
ACL CHANGES:
...
by <who> <access> changed to by <who>+ <access> (joined with AND)
added peername=<regex> sockname=<regex> url=<regex>
removed addr=<regex> (use peername instead).
replace dn_upcase with str2upper and str2lower. Use where needed.
1999-07-21 20:54:23 +00:00
Kurt Zeilenga
94d5067b22
Use assert instead of private Assert macro
1999-07-13 18:39:20 +00:00
Hallvard Furuseth
55fa595f56
Add missing newline at EOF
1999-07-13 04:11:49 +00:00
Kurt Zeilenga
9225707a06
Modify lutil_passwd to accept a third argument char** methods to
...
specific which methods may be used. This will facilate development
of a slapd config directive "passwordMethod ..." to specify which
methods should be allowed.
1999-06-29 22:24:53 +00:00
Kurt Zeilenga
dcc5bdfe7e
Log out to stderr, add LDAP_VERSION3 support to bind.c and modrdn.c
1999-06-29 01:02:48 +00:00
Kurt Zeilenga
1fe082d16c
Support both vsnprintf and vsprintf
1999-06-28 22:04:31 +00:00
Kurt Zeilenga
ab10099fc1
Added support for "userPassword: {UNIX}uid". getpwnam("uid") is
...
used to fetch the pw_passwd which is than passwd to crypt().
getspnam() is used instead of getpwnam() when available.
Added configration detection of pw_passwd, shadow.h, getpwnam()
and getspnam().
1999-06-26 20:52:59 +00:00
Kurt Zeilenga
61c5f7a2ca
Add debug to nt project, remove lint.
1999-06-21 22:59:23 +00:00
Kurt Zeilenga
0b924192e7
Move nt_debug to -llutil and generalize for all platforms.
1999-06-21 22:52:28 +00:00
Gary Williams
e61bb6aa3f
close registry, and return static pointer (no free) from getRegParam
1999-06-18 21:29:02 +00:00
Gary Williams
7a7f3018fa
fix flag on formatMessage to not allocate buffer
1999-06-18 21:27:43 +00:00
Gary Williams
19d346ba71
remove dependencies on other libraries
1999-06-18 21:27:20 +00:00
Kurt Zeilenga
21e081dc5b
Separate autoconf generated values from "defaults".
...
ldap_defaults.h incorporates non-generated ldapconfig.h values.
ldap_config.h.in is new template for autoconf generated defaults
(namely directories and paths)
ldap_config.h.nt, NT template (must be manually copied)
s/<ldapconfig.h>/<ldap_defaults.h>/
s/DIRSEP/LDAP_DIRSEP/ & s/DEFAULT_/LDAP_/
1999-06-17 03:54:25 +00:00
Gary Williams
8f99cafe87
add new NT service modules
1999-06-16 17:53:38 +00:00
Gary Williams
4d6ce8b87e
new code to support slapd as an NT service
1999-06-16 17:53:17 +00:00