Howard Chu
|
122cdf4549
|
In ldap_back_bind, don't send success result, frontend does it
|
2005-02-01 00:19:45 +00:00 |
|
Pierangelo Masarati
|
cfc77f0a0a
|
make referrals chasing optional (default is to chase them)
|
2005-01-30 22:56:59 +00:00 |
|
Pierangelo Masarati
|
8cc2aa9372
|
implement hook; cleanup
|
2005-01-30 22:05:46 +00:00 |
|
Pierangelo Masarati
|
4304dfc9a2
|
allow referrals in result (may happen); propagate chaining errors
|
2005-01-28 01:43:49 +00:00 |
|
Kurt Zeilenga
|
e826914a88
|
Less kludgy willing-to-perform check for recognized and appropriate
global controls
|
2005-01-27 06:45:20 +00:00 |
|
Pierangelo Masarati
|
3dd2f4150b
|
allow proxyAuthz of users authenticated via SASL
|
2005-01-26 20:01:02 +00:00 |
|
Pierangelo Masarati
|
e047657f06
|
remove overoptimistic assertion
|
2005-01-26 10:27:38 +00:00 |
|
Pierangelo Masarati
|
e2fe9e394a
|
fix controls run-time registered by global overlays (kludge non longer required?)
|
2005-01-26 08:04:19 +00:00 |
|
Pierangelo Masarati
|
5b193c218f
|
fix dynamically registered controls check; NOTE: controls registered by global overlays don't work yet; better leave Kurt's kludge in place right now
|
2005-01-25 19:39:56 +00:00 |
|
Pierangelo Masarati
|
6239b70081
|
cleanup previous commit
|
2005-01-25 17:14:19 +00:00 |
|
Pierangelo Masarati
|
c6a1f24186
|
add support for Chaining Behavior control (<draft-sermersheim-ldap-chaining>, a work in progress)
|
2005-01-25 16:11:26 +00:00 |
|
Pierangelo Masarati
|
c6b6d2a5ec
|
StartTLS (ITS#3507) + chain overlay fixes and improvements
|
2005-01-24 09:38:11 +00:00 |
|
Pierangelo Masarati
|
ae0f47b063
|
improve parsing of acl-authcDN/acl-passwd
|
2005-01-22 18:48:03 +00:00 |
|
Pierangelo Masarati
|
1d919d35a5
|
remove #ifdef's for identity assertion
|
2005-01-20 09:04:37 +00:00 |
|
Pierangelo Masarati
|
90cc75f1a1
|
cleanup; add proxyAuthz capability
|
2005-01-19 22:59:25 +00:00 |
|
Pierangelo Masarati
|
5f178fd3d1
|
use idassert for proxyAuthz with the chain overlay
|
2005-01-19 19:11:35 +00:00 |
|
Pierangelo Masarati
|
7348603a53
|
fix ITS#3484
|
2005-01-12 23:22:56 +00:00 |
|
Pierangelo Masarati
|
4e6fd44213
|
the fixes to ITS#3475 make the referrals callback no longer required
|
2005-01-12 21:02:23 +00:00 |
|
Pierangelo Masarati
|
83d1e22b8c
|
don't malloc if proxyAuthz is the only control
|
2005-01-11 00:37:22 +00:00 |
|
Pierangelo Masarati
|
41d7c03e8b
|
clear out the error
|
2005-01-09 23:30:19 +00:00 |
|
Pierangelo Masarati
|
154ae48d69
|
put back chain overlay into back-ldap
|
2005-01-09 21:26:32 +00:00 |
|
Pierangelo Masarati
|
cd2e651c26
|
ITS#3469: C99 compliance
|
2005-01-08 11:25:11 +00:00 |
|
Pierangelo Masarati
|
4d8267595f
|
retry on ldap_result() with a timeout
|
2005-01-08 09:19:51 +00:00 |
|
Kurt Zeilenga
|
dc0eacd40b
|
Happy New Year!
|
2005-01-01 20:49:32 +00:00 |
|
Pierangelo Masarati
|
8ec78171d3
|
trim comment
|
2005-01-01 16:14:40 +00:00 |
|
Pierangelo Masarati
|
5a920206dd
|
more cleanup
|
2004-12-11 18:36:31 +00:00 |
|
Pierangelo Masarati
|
fefa59059d
|
minor cleanup
|
2004-12-08 19:11:27 +00:00 |
|
Pierangelo Masarati
|
6e12819387
|
allow undefined schema items to be returned by back-ldap and remapped by the rwm overlay
|
2004-12-01 21:47:13 +00:00 |
|
Pierangelo Masarati
|
6b1c641bc1
|
warn users of the need to use the rwm overlay
|
2004-11-29 12:40:36 +00:00 |
|
Pierangelo Masarati
|
6eec000889
|
improve diagnostics
|
2004-11-17 17:55:44 +00:00 |
|
Pierangelo Masarati
|
b29bf83e7e
|
remove back-*/external.h
|
2004-11-15 19:45:49 +00:00 |
|
Pierangelo Masarati
|
2d5ec082dd
|
cleanup
|
2004-11-15 14:17:08 +00:00 |
|
Pierangelo Masarati
|
ee4c10d5d0
|
allow backends to automatically install overlays; issue warnings in case of duplicates (fixes ITS#3395 for cases (1.a), (1.b) and (2) simultaneously)
|
2004-11-15 10:28:33 +00:00 |
|
Pierangelo Masarati
|
9c550e7235
|
first step towards removing back-*/external.h
|
2004-11-13 18:52:44 +00:00 |
|
Pierangelo Masarati
|
cd35386935
|
fix ITS#3391
|
2004-11-13 18:40:16 +00:00 |
|
Pierangelo Masarati
|
db4f223c66
|
improve overlay helpers
|
2004-11-13 17:20:24 +00:00 |
|
Pierangelo Masarati
|
363fdcd951
|
no longer required (moved to rwm overlay)
|
2004-11-13 14:50:34 +00:00 |
|
Pierangelo Masarati
|
f176935a58
|
remove rewrite stuff -- now delegted to rwm overlay
|
2004-11-13 14:43:30 +00:00 |
|
Pierangelo Masarati
|
dd367a2b78
|
make sure we're comparing the same database
|
2004-11-11 13:12:34 +00:00 |
|
Pierangelo Masarati
|
79f744f30b
|
rework static backend initialization
|
2004-11-11 00:39:19 +00:00 |
|
Pierangelo Masarati
|
f06f2a6aec
|
fix ITS#3350 (rewrite/remap will be replaced by the rwm overlay)
|
2004-11-10 09:56:55 +00:00 |
|
Pierangelo Masarati
|
b349604352
|
fix ITS#3387
|
2004-11-10 09:45:02 +00:00 |
|
Howard Chu
|
374cd32eb6
|
Add a retry for entry_get too. (oops)
|
2004-10-07 02:55:51 +00:00 |
|
Howard Chu
|
7e87f54716
|
Revert ITS#3353 patch, it needs to be reworked.
|
2004-10-06 05:51:38 +00:00 |
|
Howard Chu
|
bbe986b94e
|
Add a retry for failed connections
|
2004-10-01 12:00:41 +00:00 |
|
Howard Chu
|
55f12a7eee
|
Add a retry for failed connections
|
2004-10-01 11:16:38 +00:00 |
|
Howard Chu
|
fda3d6260e
|
ITS#3353 consolidate slapd globals into a single struct
|
2004-10-01 07:33:16 +00:00 |
|
Kurt Zeilenga
|
d611a4b49a
|
unifdef -UNEW_LOGGING
|
2004-09-04 04:54:28 +00:00 |
|
Pierangelo Masarati
|
809e623cd9
|
add paged results support to back-ldap
|
2004-08-24 09:19:33 +00:00 |
|
Howard Chu
|
f2ee179c3f
|
ITS#3291 delay use of slap_known_controls until all configuration is done
|
2004-08-19 12:10:22 +00:00 |
|
Pierangelo Masarati
|
cc60b5ce76
|
cleanup previous fix; maybe the advanced url parsing funcs should go in some ldap_pvt.h header?
|
2004-07-26 08:31:01 +00:00 |
|
Pierangelo Masarati
|
9f6f5491fe
|
slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay
|
2004-07-25 23:16:40 +00:00 |
|
Pierangelo Masarati
|
cd7540feee
|
cleanup URI parsing/checking (fixes ITS#3253)
|
2004-07-24 11:17:03 +00:00 |
|
Pierangelo Masarati
|
a7b55f4f44
|
assert administrative identity instead of the required one if doing auth check in non-caching mode
|
2004-07-23 00:11:05 +00:00 |
|
Pierangelo Masarati
|
07f010a01f
|
fix previous fix
|
2004-07-22 23:03:04 +00:00 |
|
Pierangelo Masarati
|
b94d5e17e2
|
rework op/rs structures to deal with opeartional attributes
|
2004-07-18 21:44:29 +00:00 |
|
Hallvard Furuseth
|
af5ab4f196
|
Add missing format argument for 'unhandled idassert-method' error message.
|
2004-07-18 07:16:34 +00:00 |
|
Pierangelo Masarati
|
81d89ddd63
|
validate/pretty before normalizing... (ITS#3218)
|
2004-07-06 22:02:52 +00:00 |
|
Pierangelo Masarati
|
277d921945
|
clear shared connections when ldap_result fails with -1 (typically, remote server is down); fixes ITS#3217
|
2004-07-04 23:35:18 +00:00 |
|
Pierangelo Masarati
|
1f70ad82f2
|
clean up unnecessary checks; don't use SASL native authz if authz ID is not static, because back-ldap pools connections...
|
2004-06-21 00:57:12 +00:00 |
|
Pierangelo Masarati
|
eca48b6f20
|
not sure that cyrus-sasl doesn't honor empty authz; need to check
|
2004-06-20 23:21:40 +00:00 |
|
Pierangelo Masarati
|
5bfb9fd590
|
make authz mode selection fully manual, plus more cleanup
|
2004-06-20 22:42:36 +00:00 |
|
Pierangelo Masarati
|
176e5542bb
|
fix erroneous logging
|
2004-06-20 22:42:04 +00:00 |
|
Pierangelo Masarati
|
5d843b2b13
|
detect mechs that are known to perform native authz
|
2004-06-19 18:32:55 +00:00 |
|
Pierangelo Masarati
|
f34b11760a
|
allow a hidden parameter to instruct the proxy that the SASL mech can do native authz; will disappear as soon as I can detect it automnatically
|
2004-06-19 18:18:26 +00:00 |
|
Pierangelo Masarati
|
e6065fb20d
|
li->be didn't work; since it seems to be unnecessary, it's been removed; please check
|
2004-06-19 15:16:51 +00:00 |
|
Pierangelo Masarati
|
d1b692ceb4
|
clarify no limits in (internal) searches
|
2004-06-12 11:33:21 +00:00 |
|
Jong Hyuk Choi
|
f60f2d5048
|
Fix typo
|
2004-06-08 02:52:59 +00:00 |
|
Howard Chu
|
7488f557cd
|
Fix entry_get, only check mapped attr if attr was provided
|
2004-05-25 04:54:32 +00:00 |
|
Pierangelo Masarati
|
a18e199e0d
|
more on identity assertion
|
2004-05-22 17:26:02 +00:00 |
|
Howard Chu
|
a11553c212
|
Always normalize entries (ITS#3152, ITS#3144)
|
2004-05-19 23:19:24 +00:00 |
|
Pierangelo Masarati
|
cdebc4d376
|
more on idassert: SASL bind/authz
|
2004-05-15 10:11:10 +00:00 |
|
Pierangelo Masarati
|
8b954144d6
|
reflect Kurt's comments on ID assertion
|
2004-05-14 10:01:22 +00:00 |
|
Pierangelo Masarati
|
3b38676dd3
|
complete idassert options
|
2004-05-13 22:12:46 +00:00 |
|
Pierangelo Masarati
|
66ddf62922
|
add idassert code (undocumented yet)
|
2004-05-13 20:25:53 +00:00 |
|
Pierangelo Masarati
|
d40e5a365a
|
fix DN_SEPARATOR() and clarify its use
|
2004-05-07 09:03:05 +00:00 |
|
Pierangelo Masarati
|
b34cf02488
|
more on fixing escaped semicolon in normalized DN
|
2004-05-07 02:18:08 +00:00 |
|
Luke Howard
|
22f425c1f3
|
Fix warning in assignment
|
2004-04-15 02:37:40 +00:00 |
|
Luke Howard
|
12949734bd
|
Fix warning in assignment
|
2004-04-15 02:36:23 +00:00 |
|
Pierangelo Masarati
|
c0c24cfec5
|
first round of SHADOW flags/isupdate test unification
|
2004-04-10 10:00:58 +00:00 |
|
Kurt Zeilenga
|
c7f0438044
|
bvalue cleanup
|
2004-04-08 06:49:17 +00:00 |
|
Howard Chu
|
8c6fe48806
|
More dynamic/static cleanup
|
2004-04-08 05:58:54 +00:00 |
|
Howard Chu
|
f2e1df3ef7
|
Consolidated static/dynamic backend switches
|
2004-04-08 05:56:23 +00:00 |
|
Jong Hyuk Choi
|
1c1b2bb6ee
|
updatedn fix for syncrepl
|
2004-04-07 17:32:37 +00:00 |
|
Kurt Zeilenga
|
44725e7303
|
use BER_BVNULL
|
2004-04-07 04:11:43 +00:00 |
|
Pierangelo Masarati
|
a11dc61e05
|
rework be_isupdate accordingly to be_isroot
|
2004-04-06 09:42:40 +00:00 |
|
Pierangelo Masarati
|
e17be551a4
|
fix previous commit
|
2004-04-06 08:47:59 +00:00 |
|
Pierangelo Masarati
|
0f867b9577
|
revert erroneous commit; cure the test the right way
|
2004-04-05 23:47:17 +00:00 |
|
Kurt Zeilenga
|
9a64fdb991
|
use SLAP_DBFLAGS instead of be->be_flags
|
2004-04-05 23:42:59 +00:00 |
|
Pierangelo Masarati
|
6a1dd9a1cd
|
exploit new frontend API 2 protocol error mapping; use urldesc...
|
2004-04-05 17:36:53 +00:00 |
|
Pierangelo Masarati
|
fa3baaeae9
|
overlays reworking
|
2004-03-18 18:59:46 +00:00 |
|
Pierangelo Masarati
|
66ee9b2d73
|
carefully check the URI
|
2004-03-17 22:36:47 +00:00 |
|
Pierangelo Masarati
|
ec6a663820
|
reset SlapReply flags
|
2004-03-17 11:50:15 +00:00 |
|
Pierangelo Masarati
|
246fa41c96
|
"searchFilter" by default must be empty
|
2004-03-10 21:53:39 +00:00 |
|
Pierangelo Masarati
|
65b49dd312
|
add "searchFilterAttrDN" rewrite context, and allow filterstring rewrite
|
2004-03-10 21:11:14 +00:00 |
|
Pierangelo Masarati
|
091246c6fd
|
move limits evaluation to frontend
|
2004-03-08 18:12:45 +00:00 |
|
Pierangelo Masarati
|
5c6ec10f48
|
massage normalized DN when either is fine
|
2004-03-06 16:49:08 +00:00 |
|
Pierangelo Masarati
|
2b393962fc
|
fix continuation of ITS#2999
|
2004-03-06 09:33:24 +00:00 |
|
Howard Chu
|
b480d7c9ff
|
Added pwdexop request structure to avoid redundant parsing
|
2004-02-29 19:04:34 +00:00 |
|
Pierangelo Masarati
|
d015b9583c
|
handle filter computed in a more granular way (ITS#2977)
|
2004-02-28 16:05:59 +00:00 |
|