Howard Chu
9bf03e0e7c
Silence warning
2007-11-21 02:52:53 +00:00
Howard Chu
883ac70a36
Tweak ACL cache messages
2007-10-08 12:52:26 +00:00
Howard Chu
d2179d885f
Use attr_valfind instead of value_find_ex to optimize lookups
2007-09-24 05:02:31 +00:00
Pierangelo Masarati
d92e8ad1f7
add helper for internal searchs for objectClass=*
2007-09-15 17:38:53 +00:00
Pierangelo Masarati
e48e3e7503
remove unused code
2007-09-14 22:24:21 +00:00
Howard Chu
88cbe052e0
Fallout from ITS#4986 - remove unused param of select_backend()
2007-07-13 03:18:20 +00:00
Pierangelo Masarati
71c93265e2
fix ITS#4874
2007-03-15 01:07:19 +00:00
Pierangelo Masarati
4b9f4c688a
allow to specify the required access privileges in internal operations (ITS#4806)
2007-01-16 22:13:44 +00:00
Kurt Zeilenga
da6d9eb046
happy new year
2007-01-02 20:00:42 +00:00
Pierangelo Masarati
186d30288d
silence warning
2006-12-24 15:43:01 +00:00
Pierangelo Masarati
8830e0628e
more portable fix to ITS#4756
2006-12-17 22:03:03 +00:00
Pierangelo Masarati
97e6225cc9
implement full IPv6 support in ACLs; use URL notation (as suggested by Howard) to disambiguate parsing (ITS#4756)
2006-12-15 01:11:11 +00:00
Pierangelo Masarati
fdddeb1d8f
minor cleanup
2006-09-09 16:20:11 +00:00
Kurt Zeilenga
d3e288dffe
s/managedit/relax/
...
#unifdef -DSLAP_RELAX
2006-08-22 23:31:46 +00:00
Kurt Zeilenga
d9720d50dd
Some LDAP_DEVEL cleanup
2006-08-15 19:36:54 +00:00
Quanah Gibson-Mount
da1e743491
Minor typo fix (maintaned -> maintained)
2006-08-01 01:27:02 +00:00
Howard Chu
9a35796594
RE23 seems to still need these ACL states
2006-07-09 22:23:14 +00:00
Howard Chu
86f1f7e047
Cleanup unused fields from prev commit
2006-07-09 21:32:16 +00:00
Howard Chu
25c4b164a4
ITS#4253 fix value-dependent ACL caching - just record the ACL we'll start
...
looking for, don't cache anything else.
2006-07-09 20:51:00 +00:00
Howard Chu
c94c10a3b8
ITS#4587 fix for uniquemember/NameAndOptionalUID syntax
2006-07-09 10:21:42 +00:00
Ralf Haferkamp
e1d1d32402
Do "selfwrite" check independent of other <who> clauses (ITS#4587)
2006-06-27 15:26:08 +00:00
Pierangelo Masarati
c0d95f08c1
record value-dependent state for acl_mask_dn() (ITS#4587)
2006-06-14 18:33:02 +00:00
Pierangelo Masarati
f6e4f20254
test for ITS#4587; another bit of fix for that
2006-06-13 08:53:34 +00:00
Howard Chu
adba963c32
ITS#4587, selfwrite should apply to more than just USERS acl's
2006-06-13 03:19:07 +00:00
Hallvard Furuseth
2c3a06321a
2006-05-25 15:59:21 +00:00
Howard Chu
b41f2cad74
Fix dynacl tgrant/tdeny initialization
2006-05-08 09:06:37 +00:00
Kurt Zeilenga
eb9a3c1876
unifdef -DSLAP_ACL_HONOR_DISCLOSE
...
unifdef -DSLAP_ACL_HONOR_MANAGE
unifdef -DSLAP_OVERLAY_ACCESS
unifdef -DSLAP_ORDERED_PRETTYNORM
unifdef -DSLAP_AUTHZ_SYNTAX
Move LDAP_COLLECTIVE_ATTRIBUTES, LDAP_COMP_MATCH, and LDAP_SYNC_TIMESTAMP
back behind LDAP_DEVEL (as these either too experimental or not yet
implemented).
2006-04-12 05:53:26 +00:00
Pierangelo Masarati
a54ca7a6ce
factor ACI code out of slapd; now it can only use dynacl layer
2006-01-06 17:12:35 +00:00
Pierangelo Masarati
8c0ad9021a
fix self<access> for "users" (ITS#4299)
2006-01-04 00:52:07 +00:00
Kurt Zeilenga
acbb5cf689
Happy new year!
2006-01-03 23:11:52 +00:00
Luke Howard
cbf33d4fb1
Handle LDAP_MOD_INCREMENT in acl_check_modlist()
2005-12-24 16:02:15 +00:00
Pierangelo Masarati
da03eb0390
normalize value in "exact" attrval clause (ITS#4255)
2005-12-09 10:33:01 +00:00
Howard Chu
b831ebba7d
ITS#4218 streamline frontend/overlay access_allowed. Probably need to
...
do the same for acl_group and acl_attribute.
2005-11-26 07:53:07 +00:00
Pierangelo Masarati
d34fffcaf9
use lutil_ato*() whenever appropriate
2005-11-24 01:10:05 +00:00
Pierangelo Masarati
4537065ffc
further isolation and cleanup of ACI code
2005-11-10 00:52:43 +00:00
Howard Chu
7dcb68f6fa
Move CSN invocations to backends
2005-10-13 11:58:44 +00:00
Pierangelo Masarati
9129a2f7ee
silence warnings
2005-09-10 18:59:35 +00:00
Pierangelo Masarati
8e3adc2428
fix uninitialized, signedness and other issues (ITS#3854)
2005-08-26 16:52:51 +00:00
Pierangelo Masarati
4bc8197dcb
further ACI factoring out & confinement
2005-08-22 16:03:35 +00:00
Pierangelo Masarati
e066ec210e
merge sml_managing into sml_flags (SLAP_MOD_MANAGING)
2005-08-18 08:48:10 +00:00
Pierangelo Masarati
ef7421b87d
more on manage access level
2005-08-18 02:25:10 +00:00
Pierangelo Masarati
b2284183f9
more on manage
2005-08-17 22:06:46 +00:00
Pierangelo Masarati
ec49990d51
ACIs almost entirely factored out of slapd
...
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Pierangelo Masarati
69c6cd5365
fix small issues with dynacl and ACI in general
2005-08-17 14:44:41 +00:00
Pierangelo Masarati
f38e72b26c
trim use of uninitialized data; please review
2005-08-10 10:21:37 +00:00
Pierangelo Masarati
c3b977b2da
ACL logging was incomplete (and misleading)
2005-08-07 11:36:18 +00:00
Hallvard Furuseth
5a6eabb69d
Silence unused variable warnings
2005-07-27 08:52:32 +00:00
Pierangelo Masarati
d2b863fa24
fix previous commit (see NOTE and FIXMEs)
2005-07-23 10:29:40 +00:00
Luke Howard
9e4ea429e5
Add fe_access_allowed(), should allow global ACL overlays to work
2005-07-23 04:18:48 +00:00
Pierangelo Masarati
bccf2a7282
backout previous commit: frontendDB doesn't have the right rootn, ACLs and so
2005-07-22 17:22:51 +00:00
