mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-01-06 10:46:21 +08:00
Code Issues Packages Projects Releases Wiki Activity
11,026 Commits 38 Branches 307 Tags 74 MiB
68a4288aba
Commit Graph

544 Commits

Author SHA1 Message Date
Pierangelo Masarati
f035e1f18f document proxyauthz{dn|pw} and idassert-* 2004-05-13 23:35:39 +00:00
Pierangelo Masarati
bbbe0db326 helper for unlimited time/size limits request 2004-05-07 17:43:22 +00:00
Pierangelo Masarati
03c64541d4 add granular op restriction 2004-05-01 17:53:37 +00:00
Pierangelo Masarati
ff0df4b6aa add group authz 2004-04-25 23:59:06 +00:00
Kurt Zeilenga
6366a0ca61 cleanup 2004-04-24 02:27:31 +00:00
Pierangelo Masarati
02ac6941d3 document slapacl tool 2004-04-20 09:18:10 +00:00
Pierangelo Masarati
9c10415919 - clarify when $$ must be used in regex; 
- clarify access privileges of rootdn;
- clarify that auth access is always required when performing authz-regexp,
  not only for proxyAuthz
 2004-04-19 01:19:41 +00:00
Pierangelo Masarati
05a84fb025 typo 2004-04-19 00:08:32 +00:00
Pierangelo Masarati
80c34cf27e typos 2004-04-18 21:36:32 +00:00
Howard Chu
8da6bf194a Added referential integrity and attribute uniqueness overlays 2004-04-17 08:17:43 +00:00
Pierangelo Masarati
9b3a3d5fce improve tool mode selection by slapd switch 2004-04-16 18:54:15 +00:00
Kurt Zeilenga
349c7834ce Rename config options and attribute names (for 2.3). 2004-04-16 02:29:55 +00:00
Kurt Zeilenga
765a6bd5d4 rename 2004-04-16 01:51:25 +00:00
Kurt Zeilenga
460510be0a rename function and config parameters 2004-04-16 01:50:29 +00:00
Pierangelo Masarati
6624f68725 fix braindead config option (mostly harmless) 2004-04-15 20:27:43 +00:00
Pierangelo Masarati
8ea2f6e157 further clarify size limits 2004-04-15 01:16:53 +00:00
Pierangelo Masarati
6b2347be6a document lastmod overlay 2004-04-14 23:35:17 +00:00
Pierangelo Masarati
8bf68bc796 clarify the use of the fail_if_no_mapping switch and minor cleanup 2004-04-14 13:10:00 +00:00
Pierangelo Masarati
3ea4368913 add slapsaslauth test tool 2004-04-13 17:18:03 +00:00
Pierangelo Masarati
25c672a844 document search disable feature (spin-off of limit on unchecked entries) 2004-04-09 17:57:48 +00:00
Pierangelo Masarati
2e13fbeea1 completion of limits w/ paged results control 2004-04-09 15:54:46 +00:00
Hallvard Furuseth
6b45e32da3 Add NEW_LOGGING note for the commented-out "debug" and "logfile" options. 2004-04-09 05:27:04 +00:00
Pierangelo Masarati
85b078a3cb clarify what rewrite rules suffixmassage corresponds to 2004-04-07 20:55:32 +00:00
Kurt Zeilenga
bd7cd42669 clarify updatedn (again) 2004-04-07 03:32:55 +00:00
Kurt Zeilenga
bd765b849d ITS#2768: configuring slurpd's interval between replog checks 
based upon a patch submitted by Jason Townsend (Apple).
 2004-03-23 01:12:11 +00:00
Howard Chu
d4d5e253d9 Fix header 2004-03-19 20:23:26 +00:00
Howard Chu
057a385346 Rename slapd-ppolicy.5 to slapo-ppolicy.5 2004-03-19 20:18:46 +00:00
Pierangelo Masarati
9e159e2382 remove outdated comment 2004-03-18 21:48:21 +00:00
Pierangelo Masarati
fa3baaeae9 overlays reworking 2004-03-18 18:59:46 +00:00
Howard Chu
d1292c1b14 Added ppolicy_use_lockout keyword; Default behavior is not to issue the 
PP_accountLocked error for locked accounts. (Gives too much information
to attackers.)
 2004-03-18 10:35:54 +00:00
Pierangelo Masarati
32a3311156 typo 2004-03-18 00:40:31 +00:00
Pierangelo Masarati
cd105fab4e man page 2004-03-18 00:36:50 +00:00
Pierangelo Masarati
f970303799 document new tools and remove deprected switches 2004-03-18 00:11:40 +00:00
Pierangelo Masarati
732ad4a3da document new tools 2004-03-18 00:07:24 +00:00
Howard Chu
e5ec72c2b9 Add note about overlay directive 2004-03-16 22:25:08 +00:00
Howard Chu
9e39c5e0b6 Docs for ppolicy overlay 2004-03-16 22:00:30 +00:00
Pierangelo Masarati
65b49dd312 add "searchFilterAttrDN" rewrite context, and allow filterstring rewrite 2004-03-10 21:11:14 +00:00
Pierangelo Masarati
006745430e allow "expand" style in peername, sockname, sockurl as well; more sanity checks 2004-03-09 19:44:14 +00:00
Pierangelo Masarati
042869366d use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks 2004-03-09 16:33:05 +00:00
Pierangelo Masarati
4645eeb5ec cleanup DN style in limits 2004-03-08 13:13:30 +00:00
Pierangelo Masarati
f69c249892 fix program name (ITS#3003) 2004-03-06 15:48:21 +00:00
Pierangelo Masarati
5716b7f1b2 document saslAuthzTo/saslAuthzFrom new syntax; add onelevel style to DN type 2004-03-06 11:00:49 +00:00
Howard Chu
5f9a87c041 password-hash now takes a list of mechanisms 2004-03-02 22:17:20 +00:00
Howard Chu
c519390c82 Add -T option for invoking in tool mode 2004-02-26 19:26:12 +00:00
Kurt Zeilenga
b927f86e3f Clarify updatedn 2004-02-25 17:37:59 +00:00
Pierangelo Masarati
4e57108991 allow search limits based on groups (ITS#2967) 2004-02-18 16:40:36 +00:00
Pierangelo Masarati
cf5e2496f7 map type/name were swapped 2004-02-05 18:17:27 +00:00
Kurt Zeilenga
1fa73dad3b Reworded -r description from Quanah (ITS#2941) 2004-01-30 01:19:54 +00:00
Kurt Zeilenga
e476580d85 clarify -t 2004-01-21 00:51:09 +00:00
Pierangelo Masarati
f5a9f62578 clarify that's useless to give write privileges to the roodn of a database... 2004-01-14 23:11:48 +00:00
Pierangelo Masarati
4dbc0b842a spacing (ITS#2916) 2004-01-10 11:17:52 +00:00
Kurt Zeilenga
c8408d3c6a ITS#2906: report invalid userPassword schemes, clarify documentation 2004-01-09 04:11:57 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Kurt Zeilenga
b613a3d57d crypt(3) is not portable... 2003-12-30 01:37:38 +00:00
Pierangelo Masarati
3994dc645a allow to set max passes per rule 2003-12-29 18:02:49 +00:00
Pierangelo Masarati
9e86d9ffe2 clarify field description in rewriteRule statement 2003-12-29 17:12:29 +00:00
Pierangelo Masarati
c860ba6a23 fix, clarify and document previous commit 2003-12-29 17:06:43 +00:00
Pierangelo Masarati
3ddfddb1a7 typo 2003-12-29 15:22:10 +00:00
Jong Hyuk Choi
cd16a93244 update syncrepl and session log info 2003-12-21 16:32:00 +00:00
Pierangelo Masarati
8e89944abc for consistency, always allow 'onelevel' as an alias for 'one' in dnstyle 2003-12-20 15:29:05 +00:00
Jong Hyuk Choi
4894623e4d replica promotion / demotion 2003-12-19 23:12:44 +00:00
Kurt Zeilenga
aabcce3e58 Document +0 2003-12-19 05:06:51 +00:00
Kurt Zeilenga
2284f101fc Print UNDEFINED on compare error 2003-12-18 23:24:49 +00:00
Pierangelo Masarati
113727ba53 allow 'all' vs. 'any' sasl-authz-policy 2003-12-18 18:28:43 +00:00
Kurt Zeilenga
7f4ff18bd4 Update index to encourage "proper" use 2003-12-18 02:12:44 +00:00
Pierangelo Masarati
ca52621c1b some notes on access required by proxyAuthz control; 
note that other controls may need different access
privileges via, e.g., backend_attribute() (syncrepl?)
 2003-12-18 00:27:01 +00:00
Kurt Zeilenga
c4c6a38a0b Dont mention bare oc in list. 2003-12-17 17:48:56 +00:00
Kurt Zeilenga
30a1ff596d s/+/@/ in OC attr lists 2003-12-17 17:36:41 +00:00
Pierangelo Masarati
947f41832e more clarifications on dnstyle usage 2003-12-16 11:20:59 +00:00
Pierangelo Masarati
ee34f3fb64 add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication 2003-12-16 00:49:10 +00:00
Kurt Zeilenga
75b9f8acdc Make a few OPERATIONAL REQUIREMENT clarifications 
Clean up formating
 2003-12-15 18:41:23 +00:00
Pierangelo Masarati
7444352358 describe detailed access levels required for each operation 2003-12-15 17:55:55 +00:00
Kurt Zeilenga
eec0f83fd7 Fix typos 2003-12-14 21:00:52 +00:00
Pierangelo Masarati
529a03df53 use dedicated admin identity to proxyAuthz 2003-12-13 10:57:42 +00:00
Howard Chu
2f06437348 Updated for proxycache overlay. Probably belongs on its own now... 2003-12-07 04:30:39 +00:00
Kurt Zeilenga
17939ccdca Clarify that the updatedn should not be same as the rootdn. 2003-12-02 21:18:19 +00:00
Pierangelo Masarati
f0ea4161ba add administrative bind and proxyAuthz control to enable bound operations in distributed directories (need to manually #define LDAP_BACK_PROXY_AUTHZ and patches from ITS#2851 and ITS#2852) 2003-12-01 08:29:06 +00:00
Jong Hyuk Choi
4ae382fd79 misc updates 
- syncrepl : id -> rid
 - man page update
 2003-11-26 21:37:44 +00:00
Jong Hyuk Choi
1fdda703e6 Support multiple sync replication at the consumer : 
1) simultaneous operation of multiple active sync replication threads
2) cookie management for individual sync replication thread
   (include rid=%3d to the slapd cookie command line option (-c))
 2003-11-26 19:49:47 +00:00
Kurt Zeilenga
e3a4c4ec9c Notice/Acknowledge updates 2003-11-26 02:58:56 +00:00
Jong Hyuk Choi
c204f4061f keeps syncrepl manpage sections current 2003-11-24 23:16:45 +00:00
Howard Chu
f23c5d9565 ITS#2823 delete extraneous argument 2003-11-15 08:40:51 +00:00
Howard Chu
470345e993 ITS#2822 fix typos 2003-11-15 08:34:36 +00:00
Pierangelo Masarati
9620cacd34 clarify the usage of the <modifier> field in 'dn' and 'domain' clauses of <who> access directive 2003-11-01 14:14:09 +00:00
Kurt Zeilenga
d0c05e814d Add a basic DIT content rule test. 
Fix DIT rules to allow extensibleObject in AUX
unifdef -DSLAP_EXTENDED_SCHEMA
 2003-10-24 04:40:32 +00:00
Kurt Zeilenga
f6c1163eea clarify that replacement, but not expression evaluation, 
is done on the string in group.regex=string
We really should rename the style, in this case, to "replacement".
 2003-10-15 08:04:25 +00:00
Luke Howard
976f61f0ed Update SLAPI manual page 2003-10-12 06:36:29 +00:00
Kurt Zeilenga
d03c83f077 ITS#2621, reference slapd.plugin 2003-10-12 04:22:26 +00:00
Kurt Zeilenga
fd445970fb document ditcontentrule directive 2003-10-12 04:20:20 +00:00
Kurt Zeilenga
7094fd6c08 Update filter representations to conform to RFC 2254. 2003-10-07 22:41:45 +00:00
Howard Chu
878bff913a Added description for idlcachesize, shm_key 2003-09-27 07:06:48 +00:00
Howard Chu
0eca4fa42f More for dynamic groups 2003-09-21 10:52:44 +00:00
Howard Chu
11148522ec ITS#2573 dynamic group support 2003-09-21 10:45:57 +00:00
Howard Chu
b93a0f45d5 ITS#2497 value-level ACLs 2003-09-21 10:34:40 +00:00
Jong Hyuk Choi
7f882daf15 Schema checking option for LDAP Sync replication 2003-09-03 21:42:52 +00:00
Jong Hyuk Choi
8dc1ac85dd manual update for proxy cache (apurva) 2003-09-03 16:26:17 +00:00
Jong Hyuk Choi
372cb876a0 slapd.conf man page update (LDAP Sync replication configuration) 2003-08-28 22:29:55 +00:00
Kurt Zeilenga
9b0de44b91 Add clarification about authzDN which don't exist in the DIT 2003-08-14 18:38:20 +00:00
Kurt Zeilenga
bd98f4c2a2 ITS#2644: fix inconsistent domain names used in example 2003-08-09 03:23:03 +00:00
Kurt Zeilenga
443d4c8999 sasl-regexp clarifications 2003-07-29 15:28:52 +00:00