Pierangelo Masarati
4602c935f7
saslAuthzTo/From stuff
...
when comparing IDs to saslAuthzTo/From values, the saslAuthzTo
saslAuthzFrom values can take different forms:
dn[.<style>]:<pattern>
<style> ::= exact ; exact match
children ; children of <pattern> match
subtree ; <pattern> or children of <pattern> match
regex ; <pattern> is regcomp() & regexec()
if no <style>, then exact is assumed
u[.<mech>][/<realm>]:<user>
when parsing a proxyAuthz value, only exact DN is allowed,
and no <mech> can be specified. <user> cannot contain ':'
and <mech> cannot contain '/'.
2003-12-13 23:02:59 +00:00
Howard Chu
0d8613c274
Use c_authmech when c_sasl_bind_mech is empty
2003-12-13 22:43:01 +00:00
Kurt Zeilenga
dbc37977f2
Look for the '@' in userid@realm in reverse so that a@b@c results
...
in userid of a@b and realm of c.
2003-12-13 17:25:59 +00:00
Pierangelo Masarati
6e5ddd6420
note a potential problem
2003-12-13 17:21:17 +00:00
Pierangelo Masarati
5a00f25542
conn must be non-null
2003-12-13 15:29:49 +00:00
Howard Chu
be1a728c5b
Added sc_next and sc_cleanup to slap_callback
2003-12-07 08:51:23 +00:00
Howard Chu
42d8c0a39d
Added slap_null_cb
2003-12-01 12:03:20 +00:00
Howard Chu
0a5f1e8516
#ifdef for slap_auxprop_store
2003-11-29 23:01:56 +00:00
Kurt Zeilenga
f0cd57eb9b
cleanup
2003-11-29 22:37:07 +00:00
Pierangelo Masarati
e30a736354
clarify auxprop_store member type
2003-11-29 17:50:50 +00:00
Howard Chu
ddd056158e
Add auxprop_store support for Cyrus SASL 2.1.16+
2003-11-29 07:02:16 +00:00
Kurt Zeilenga
4e15a84452
Updated notices
2003-11-27 01:17:14 +00:00
Howard Chu
f4649fbde3
ITS#2825 fix SASL internal searches
2003-11-13 21:42:28 +00:00
Howard Chu
b5b036d9fb
ITS#2762 tweak SASL include paths
2003-10-11 01:24:44 +00:00
Kurt Zeilenga
3e49a9cf6e
add "proxy" to "authorization" in a few places
2003-09-19 18:23:37 +00:00
Howard Chu
1881ae872f
ITS#2729 fix typos
2003-09-19 00:49:33 +00:00
Howard Chu
10811b6f51
Clarify/standardize library version mismatch error messages
2003-09-12 00:54:21 +00:00
Luke Howard
d649ae0808
Inherit operation pblock for SLAPI
2003-08-31 08:14:54 +00:00
Howard Chu
9dace23dec
Change slap_sasl_authorized to take an Operation instead of a Connection,
...
for compatibility with proxyAuthz control
2003-05-24 02:44:46 +00:00
Howard Chu
46e2b97757
ITS#2424 use two SASL contexts per session to conform to RFC 2222
2003-05-01 04:11:57 +00:00
Howard Chu
04c5d82817
Fix prev commit
2003-04-30 16:00:36 +00:00
Howard Chu
4b73446ab5
ITS#2424 reset SASL on an existing connection
2003-04-30 15:38:32 +00:00
Howard Chu
7e2273b30e
Added errmsg arg to lutil_passwd_{check,hash} functions
2003-04-30 07:52:05 +00:00
Kurt Zeilenga
5cd994ed21
remove dnNormalize2
...
replace calls to dnNormalize2 with calls to dnNormalize
2003-04-29 18:28:14 +00:00
Hallvard Furuseth
778a38f49c
Reduce warnings: Add missing 0 or NULL initializers for struct members.
2003-04-29 16:36:19 +00:00
Howard Chu
280fc819cf
Memory context tweaks for Bind
2003-04-12 06:56:42 +00:00
Howard Chu
ece7452b05
More memory context tweaks
2003-04-11 01:29:28 +00:00
Howard Chu
f897519d11
Minor cleanups
2003-04-09 23:37:00 +00:00
Howard Chu
813d5c8ed8
First cut at thread-local malloc. Only used by search() for now...
...
Needs work in normalizers, etc.
2003-04-09 16:52:03 +00:00
Howard Chu
aa3b717937
Don't build generic_filter dynamically, it's a simple static.
2003-04-09 08:28:19 +00:00
Howard Chu
b282339c96
Minor cleanup, use shorthand macros
2003-04-04 05:49:21 +00:00
Howard Chu
9355dca9af
Consolidated slap_callbacks into one function. Removed send_search_result.
2003-04-01 04:12:18 +00:00
Howard Chu
fa9bf23501
Minor cleanup
2003-03-31 07:49:34 +00:00
Howard Chu
e8c58b4e7f
Major API change - (SLAP_OP_BLOCKS) All request parameters are
...
consolidated into the Operation structure. All reply parameters
are consolidated into the new SlapReply structure. Most operations
now have identical call signatures... Changes are not #ifdef'd,
revert to -r NO_SLAP_OP_BLOCKS if necessary to back out.
2003-03-30 09:03:54 +00:00
Kurt Zeilenga
8873006105
SLAP_NVALUES changes
...
and misc cleanup
2003-03-16 18:10:16 +00:00
Howard Chu
40454ccec8
Added op->o_is_auth_check; use ACL_AUTH instead of ACL_SEARCH/ACL_READ
...
in access_allowed() if flag is set. Set in sasl/saslauth searches.
2003-03-10 22:07:21 +00:00
Howard Chu
65bf90ff73
Use struct berval for exop reqoid everywhere. Define berval constants
...
for the known exops.
2003-02-16 06:15:28 +00:00
Pierangelo Masarati
f8a1007994
(mostly blind) fix of possible leak/dangling pointer and cleanup
2003-02-07 00:46:11 +00:00
Pierangelo Masarati
9f28f12346
make sure the DN is null-terminated before normalizing it
2003-02-06 19:15:14 +00:00
Luke Howard
eee0086ab2
Add search ref callback
2003-02-01 07:05:01 +00:00
Kurt Zeilenga
bcd7306877
ITS#2268: SASL/ANONYMOUS fixes from kuenne@rentec.com
2003-01-20 18:09:46 +00:00
Kurt Zeilenga
6939c53170
Happy new year
2003-01-03 20:20:47 +00:00
Kurt Zeilenga
a3837b107a
Minor cleanup
2002-12-21 22:54:25 +00:00
Kurt Zeilenga
539693f56c
Correct fix
2002-12-20 17:57:00 +00:00
Kurt Zeilenga
b47d0d6b6a
if 0 out bad statslog
2002-12-20 17:25:51 +00:00
Howard Chu
0e69c86461
Fix Statslog messages
2002-12-17 00:23:36 +00:00
Howard Chu
7c7daf8556
Statslog additions:
...
Added StatslogTest macro.
Added attributes to modify and search Statslog.
Added Statslog of SASL authcid.
2002-12-16 12:14:37 +00:00
Kurt Zeilenga
7be4d566d7
cleanup
2002-12-13 00:18:54 +00:00
Howard Chu
88adbc8691
Fix ITS#2234 canonicalization bug
2002-12-12 13:49:25 +00:00
Luke Howard
a6edb2ae36
Treat all EXTERNAL DNs are already normalized.
2002-12-04 04:13:20 +00:00