Luke Howard
cc39f75261
Support for dynamic registration of controls, both through native and
...
SLAPI plugins.
2003-02-28 12:34:35 +00:00
Howard Chu
507781eeb3
Partial fix of ITS#2335, restore proper CLDAP msg format for LDAPv2
2003-02-28 08:34:31 +00:00
Kurt Zeilenga
840f3644f4
SLAP_NVALUES: a couple of basic normalizers... but not working yet.
2003-02-28 05:13:29 +00:00
Kurt Zeilenga
32399d9bd9
axe mr_ptr in favor or schema_prep
2003-02-27 03:29:07 +00:00
Kurt Zeilenga
152829be87
SLAP_NVALUES:
...
schema engine updated (but not schema routines so things don't run yet)
nvalues mostly populated, enough for tests 0-2 to pass
schema routines needs lots of work
modify/mods codes needs lots of work
2003-02-27 01:54:43 +00:00
Kurt Zeilenga
baa5c88d75
whoops (again). Don't define SLAP_NOVALUES yet.
2003-02-26 16:48:31 +00:00
Kurt Zeilenga
dd66e6e929
SLAP_NVALUES, round 3
2003-02-26 07:39:30 +00:00
Kurt Zeilenga
25886d989a
Change MR flag names and add comments as to what they mean to slap.h
2003-02-26 02:55:28 +00:00
Kurt Zeilenga
51e841c694
Whoops, SLAP_NVALUES should be off for now
2003-02-25 23:46:40 +00:00
Kurt Zeilenga
122f5d4299
*** empty log message ***
2003-02-25 23:16:21 +00:00
Kurt Zeilenga
6390e947b0
SLAP_NVALUES, round 2
2003-02-25 22:49:41 +00:00
Kurt Zeilenga
8502301b00
Round one of SLAP_NVALUES code
2003-02-25 21:08:48 +00:00
Kurt Zeilenga
4d9a4174f5
Lower SLAP_MAX_WORKER_THREAD to 16 (from 32)
2003-02-17 17:36:01 +00:00
Howard Chu
65bf90ff73
Use struct berval for exop reqoid everywhere. Define berval constants
...
for the known exops.
2003-02-16 06:15:28 +00:00
Kurt Zeilenga
1a14def903
Use function pointers to get at backend routines.
2003-02-14 20:51:35 +00:00
Kurt Zeilenga
074b1a0d3a
Place SLAP_EXTENDED_SCHEMA behind defined(LDAP_DEVEL)
2003-02-13 20:47:46 +00:00
Kurt Zeilenga
8f82e9f772
ITS#2117: remove suffixalias support until someone fixes it
2003-02-09 07:20:03 +00:00
Kurt Zeilenga
282f6bc32d
Cancel exop updates
2003-02-09 05:54:45 +00:00
Kurt Zeilenga
c04e9ac993
rename "permit modify" control to "permissive modify"
...
rename "no referrals" controls to "domain scope"
misc cleanup
2003-02-09 05:39:21 +00:00
Kurt Zeilenga
48d47954a6
Rework #ifdef'ing of expermental controls to ease release engineering
...
using LDAP_DEVEL (to indicate experimental) to enable experimental features
(true for HEAD unless LDAP_REL_ENG is defined)
2003-02-08 21:53:05 +00:00
Jong Hyuk Choi
85b1783d5c
LDAP Sync Operation (draft-zeilenga-ldup-sync) as a groundwork for an LDAP replication design
2003-02-05 07:37:02 +00:00
Jong Hyuk Choi
e1bf8cc437
Intermediate Response
2003-02-03 17:28:19 +00:00
Luke Howard
dfc7d338a6
Add sendreference callback
2003-02-01 07:04:13 +00:00
Jong Hyuk Choi
0c43007e55
LDAP cancel operation
2003-01-25 00:36:50 +00:00
Luke Howard
eec370af52
LDAPv3 over UDP disposition is now compatible with Active Directory
...
Stubs for PermitModify/NoReferrals controls; implementation coming soon
2003-01-23 15:12:53 +00:00
Kurt Zeilenga
6d1ca4c747
Remove values match v. filter struct field macro overloads
...
Use LDAP_SLISTs instead of per-struct list management for schema structs
misc cleanup and lint removal
2003-01-20 20:21:17 +00:00
Kurt Zeilenga
6939c53170
Happy new year
2003-01-03 20:20:47 +00:00
Howard Chu
7c7daf8556
Statslog additions:
...
Added StatslogTest macro.
Added attributes to modify and search Statslog.
Added Statslog of SASL authcid.
2002-12-16 12:14:37 +00:00
Hallvard Furuseth
486eaa69b6
Rename "lang(uage)" to "tag(s)". (Cleanup after attribute options patch.)
2002-12-13 19:15:20 +00:00
Hallvard Furuseth
54728f367e
Implement user-defined tagging attribute options and ranges
2002-12-12 13:56:05 +00:00
Hallvard Furuseth
fbbbdd8b94
ITS#2215: Let Statslog() work if only one of LDAP_DEBUG/LDAP_SYSLOG is #defined
2002-12-09 18:18:14 +00:00
Pierangelo Masarati
1b70e16448
SLAPI - Netscape plugin API for slapd - based on patch contributed by Steve Omrani <somrani@us.ibm.com> as ITS#2073
2002-12-07 17:19:29 +00:00
Pierangelo Masarati
8e74ed4dfc
fix initialization size and silence warning
2002-12-05 11:47:44 +00:00
Howard Chu
09679eb715
Added SLAP_MR_VALUE_NORMALIZED_MATCH, avoid redundant normalize when
...
calling value_find with already-normalized DNs
2002-12-04 18:19:46 +00:00
Howard Chu
827ea96e16
ITS#1523 enhanced ACL caching
2002-12-04 02:35:00 +00:00
Kurt Zeilenga
da76c1951e
First-cut proxy authorization support.
2002-12-03 06:11:32 +00:00
Kurt Zeilenga
8754c8f2a3
#unifdef paged results, remove lint
2002-11-28 04:38:41 +00:00
Pierangelo Masarati
415a8d325f
add limits to entries count for paged results
2002-11-21 20:49:02 +00:00
Pierangelo Masarati
c354bb23bf
Support for RFC 2696:
...
LDAP Control Extension for Simple Paged Results Manipulation
contributed by Lynn Moss <lynnmoss@us.ibm.com> (ITS#2189)
applied with changes.
2002-11-21 02:16:53 +00:00
Pierangelo Masarati
76bf91f553
remove #ifdef SLAP_FILTER_HASSUBORDINATES
2002-11-10 19:48:36 +00:00
Kurt Zeilenga
6f59ca0e5b
Add superiorUUID to system schema
2002-10-28 20:01:55 +00:00
Pierangelo Masarati
f07cabad0f
need to move #define here; on by default
2002-10-26 16:32:11 +00:00
Pierangelo Masarati
7b3f889ec1
fix hasSubordinate filtering; now it can be safely turned on
2002-10-26 16:18:31 +00:00
Kurt Zeilenga
36569048ff
Add "allow update_anon"
...
Fix -USLAP_X_LISTENER_MOD builds
2002-10-25 18:47:24 +00:00
Jong Hyuk Choi
8074294f1d
LCUP persistent search code drop
2002-10-25 17:51:30 +00:00
Pierangelo Masarati
97e526cb2d
add restrictions related to listeners in form of file permissions
...
(see in slapd(8) the description on how to enforce file permissions
on sockets in ldapi schema); at present, only user permissions are
used as follows: the url extension x-mod=-rwxrwxrwx is used; only
the user permisisons are considered, e.g. the first set of rwx;
"r" means read is allowed from that listener
"w" means write is allowed on that listener
"x" means bind is not required on that listener
these restrictions ADD to those already present, and are actually
checked AFTER the other restrictions, but BEFORE ACLs, so they can
be used to apply gross restrictions but should not be viewed as
a replacement of ACLs. To compile this, #define SLAP_X_LISTENER_MOD
2002-10-25 16:43:44 +00:00
Pierangelo Masarati
956f1d16aa
listener:
...
- use bervals for url and sockname
- pass connection_init() the listener struct pointer instead of each value
- don't copy them in the Connection struct 'cause they're not going to change
- define macros for legacy usage of c_listener_url and c_sockname
2002-10-24 10:03:52 +00:00
Kurt Zeilenga
1aa829922f
Implement content rule checks
...
w/ implicit default rules allowing any auxiliary class to be mixed in
2002-10-09 23:02:01 +00:00
Kurt Zeilenga
acc32b9d9e
Basic framework for DIT Content Rules (not yet enforced)
2002-10-09 07:11:50 +00:00
Kurt Zeilenga
023d0e2a5c
Rework unprotected simple bind checks
2002-10-08 19:03:18 +00:00
Kurt Zeilenga
f5e6d1db41
#unifdef -DSCHEMA_DN
2002-09-29 04:30:38 +00:00
Jong Hyuk Choi
1509e321de
LCUP Response Control Code
2002-09-14 00:29:06 +00:00
Kurt Zeilenga
37d9880495
Some LCUP clean up
2002-09-06 00:29:20 +00:00
Jong Hyuk Choi
4b48c05a8e
LDAP Client Update Protocol - non-persistent update (TODO: response control ...)
2002-09-04 02:00:42 +00:00
Kurt Zeilenga
8a5b200c44
Add appropriate matching rule checks.
...
Clean up syntax error reporting.
2002-09-03 07:01:09 +00:00
Kurt Zeilenga
e9a71156cc
Add matching rule use support where assertion syntax != value syntax
2002-08-31 20:42:25 +00:00
Pierangelo Masarati
e2ec62f09f
add matchingRuleUse to schema; use a berval instead of _oidlen in syntax and matching rule
2002-08-31 10:45:22 +00:00
Pierangelo Masarati
fbc11bd16a
- added the capability to filter based on hasSubordinate attribute
...
to back-bdb, back-ldbm and back-sql (the latter with limitations);
- added handling of ":dn" attributes to extended rfc2254 filters
and to matched value filter
- altered the behavior of get_mra() when a matching rule is given:
now it checks whether it is compatible with the attribute syntax
and, in case it is, the given mr is used. In case of no type,
the check is delayed when filtering
2002-08-29 10:55:48 +00:00
Kurt Zeilenga
1086ffb438
Round one of subclass indexing for objectClass and structualObjectClasss.
...
add soc_cname to ObjectClass structure
2002-08-29 01:12:59 +00:00
Howard Chu
9f5b28baf3
Remove c_sasl_bindmutex, Binds are already serialized.
2002-08-26 22:20:30 +00:00
Kurt Zeilenga
1c5725010e
Add a Connection pointer to the Operation.
2002-08-26 19:29:34 +00:00
Howard Chu
925714ceef
Experimental cruft to propagate valid Operation to SASL callbacks.
...
If you have a better way, jupm on in...
2002-08-24 07:34:50 +00:00
Howard Chu
8c30114d84
Added thread-pool getkey/setkey functions
2002-08-24 05:39:43 +00:00
Howard Chu
e5091f5926
Updated register_syntax, register_matching_rule for more convenient
...
calling from other modules
2002-08-17 01:29:18 +00:00
Howard Chu
07ebdca237
ITS#1893, use "schemadn" to configure subschemasubentry DN. (diff was
...
inaccessible, this is original code, not contributed.)
2002-08-10 03:10:52 +00:00
Kurt Zeilenga
eb581e43e7
Fix for:
...
SASL regex segmentation faults with group based acls (ITS#1978)
based, in part, by patch submitted by Simon Wilkinson <simon@sxw.org.uk>.
2002-07-28 07:27:55 +00:00
Kurt Zeilenga
0371c61073
Add monitorContext rootDSE attribute
2002-06-19 06:44:16 +00:00
Kurt Zeilenga
9a38d98d37
Add option to disallow unprotected simple authentication.
...
Add protected simple authentication as a "strong" mechanism.
2002-06-17 22:18:27 +00:00
Kurt Zeilenga
27fdd04153
Add -4/-6 flags to slapd to force use of IPv4 or IPv6
2002-06-15 22:01:39 +00:00
Howard Chu
07a34489c6
Added saslAuthzTo and saslAuthzFrom to system schema.
...
Added sasl-authz-policy config keyword to control proxy authorization.
Moved sasl-related config processing to sasl.c:slap_sasl_config().
Moved other global defs used only in saslauthz.c into saslauthz.c.
2002-06-14 08:10:14 +00:00
Howard Chu
c5c1ddb1ca
Deleted Connection->c_cdn. Use conn->c_dn instead...
2002-06-12 08:38:59 +00:00
Howard Chu
6d1a322f73
Finished slap_sasl_setpass for Cyrus 1.5; Cyrus 2.1 is incomplete.
...
Added conn->c_sasl_dn, streamlined slap_sasl_bind.
2002-06-12 04:05:48 +00:00
Kurt Zeilenga
55e925abe6
Add abstract/final system attribute types.
...
clean up error code macros
2002-05-31 20:24:26 +00:00
Kurt Zeilenga
bdad40c696
Disallow addition of system schema via config files.
2002-05-30 05:23:37 +00:00
Kurt Zeilenga
aecf4033f6
Hide some yet-to-be-implemented schema
2002-05-29 06:14:55 +00:00
Howard Chu
a067d64c3a
Fixes for slap_sasl_regexp parsing and normalization
2002-05-07 18:46:32 +00:00
Kurt Zeilenga
8c152396b9
Matched Values implementation (ITS#1776) based upon submission
...
form Mikhail Sahalaev <M.Sahalayev@pgr.salford.ac.uk>.
Further work needed:
add testxxx-matchedvalues
rework ldapsearch(1) portion of patch to generalize use of options
---
Copyright 2001, Mikhail Sahalaev, All rights reserved.
This software is not subject to any license of University Of
Salford.
Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice
is preserved.
2002-05-02 18:56:56 +00:00
Howard Chu
7fae7fe155
Changed be_[n]suffix, be_[n]suffixAlias to BerVarray. No more bvec's anywhere.
2002-05-01 18:50:14 +00:00
Pierangelo Masarati
6b8828ed28
handle trivial cases
2002-04-29 19:14:42 +00:00
Howard Chu
efecf4e121
ITS#1733 eliminate o_abandonmutex
2002-04-11 08:03:40 +00:00
Howard Chu
5c4a924f81
ITS#1735 unused conn.c_uthc_backend, include ldap_pvt.h
2002-04-11 07:42:57 +00:00
Pierangelo Masarati
c22f10f4ca
don't count operations per request if back-monitor is not built
2002-04-08 19:13:13 +00:00
Pierangelo Masarati
51e33154b3
count initiated/completed operations divided per request
2002-04-08 18:41:15 +00:00
Pierangelo Masarati
440637dde7
various acl improvements/cleanups/speedups (need to be documented, though)
2002-04-03 15:42:19 +00:00
Pierangelo Masarati
9bf3ccd0bf
allow attribute exclusion list in selective replica
2002-03-30 08:52:20 +00:00
Kurt Zeilenga
e7523b1496
add si_syn_octetString to keep syntax load checks in one place.
2002-03-30 01:07:20 +00:00
Kurt Zeilenga
0be4d842bc
Update control framework
...
Misc cleanup
NT updates
2002-03-24 02:17:21 +00:00
Pierangelo Masarati
49f324a1fa
fix ITS#1671 and more
2002-03-23 16:53:44 +00:00
Kurt Zeilenga
33516fa9eb
#ifdef ACI/authpasswd schema
2002-02-18 20:06:50 +00:00
Kurt Zeilenga
32fb8b0bff
Add ACL state recording to avoid multiple evaluation of
...
value-independent access controls.
2002-02-09 05:14:17 +00:00
Howard Chu
f50b75f0c2
Added replica attr=<attribute list> support to filter replog content
2002-02-08 06:44:33 +00:00
Kurt Zeilenga
41e8195c2e
Fix binary v lang_range typo
2002-01-31 15:09:55 +00:00
Kurt Zeilenga
057dda50d3
remove deadwood, e.g. slap_index2prefix()
2002-01-31 00:11:44 +00:00
Kurt Zeilenga
0a31400d63
Some misc cleanup
2002-01-29 06:06:20 +00:00
Kurt Zeilenga
14662be692
Add whoami extended operation.
...
Add no-op control (needs backend implementation)
Updated modify password extended option API
Kludged control infrastructure to support frontend only controls
2002-01-28 20:25:30 +00:00
Howard Chu
5e522ca882
Changed Access.a_sockurl_pat, Connection.c_listener_url etc.
...
to struct bervals
2002-01-28 11:41:07 +00:00
Kurt Zeilenga
8057b1a0a8
Language Tag and Range Support <draft-zeilenga-ldap-rfc2596-xx.txt>
...
Based upon code submitted by Steve Omrani <somrani@us.ibm.com> (ITS#1525)
2002-01-26 23:14:51 +00:00
Howard Chu
4191f39037
Changed slap_authz_info.sai_mech to struct berval.
...
Changed sasl_* to use struct bervals.
2002-01-26 13:57:41 +00:00
Howard Chu
1226d620e0
Added Entry->e_bv for entry_decode
2002-01-25 07:11:52 +00:00
Kurt Zeilenga
3d8c269f2e
Update collective attribute schema
2002-01-19 22:33:07 +00:00