Commit Graph

1429 Commits

Author SHA1 Message Date
Howard Chu
ff40a705da ITS#4541 better fix 2006-05-12 06:33:27 +00:00
Howard Chu
da0ec66ceb ITS#4541 refine commit for #4524 2006-05-12 06:16:32 +00:00
Howard Chu
dc96eca891 ITS#4536 set chain_tail after sorting messages 2006-05-11 09:07:08 +00:00
Howard Chu
7b10f413d9 Fix ITS#4533 don't destroy input request 2006-05-10 15:01:50 +00:00
Pierangelo Masarati
373ded8d24 add URI list resorting feature (ITS#4524) 2006-05-06 16:15:25 +00:00
Pierangelo Masarati
8242166888 print the correct search base when taken from ldaprc (ITS#4504) 2006-04-25 22:23:00 +00:00
Pierangelo Masarati
a42367ae3a cleanup 2006-04-24 17:20:13 +00:00
Pierangelo Masarati
77e7acc4f9 cleanup; make sure no spurious error code slip thru 2006-04-24 12:12:14 +00:00
Howard Chu
478ae2346e PPOLICY_ERROR is primitive, not constructed 2006-04-22 00:23:44 +00:00
Howard Chu
68b374dd4a Fix EXPIRE/GRACE ber tags 2006-04-21 23:47:53 +00:00
Howard Chu
eb0c92c7df Return rc for tls_init_def_ctx 2006-04-11 20:35:37 +00:00
Pierangelo Masarati
dfc8e7f6b8 better fix for ITS#4483 2006-04-09 22:29:42 +00:00
Pierangelo Masarati
623a7a9fe2 Berlement already freed in ber_flush 2006-04-08 17:43:53 +00:00
Pierangelo Masarati
74b6ab9029 more cleanup 2006-04-08 11:01:19 +00:00
Howard Chu
571ac24b33 Fix destruct sequencing 2006-04-07 02:41:58 +00:00
Howard Chu
056b193ed7 Don't implicitly inherit the default SSL_CTX, tls.c:alloc_handle will
set it explicitly and handle its refcount.
2006-04-07 01:52:32 +00:00
Howard Chu
9693c800bf Free/decrement SSL_CTX refcount when (re)setting it 2006-04-07 01:15:56 +00:00
Howard Chu
7709d4d89e Bump SSL_CTX refcount whenever it gets retrieved 2006-04-07 01:13:31 +00:00
Howard Chu
d18277eac9 ITS#4422, #4475
Move TLS options into struct ldapoptions.
  Added ldap_int_tls_destroy()
  Added LDAP_OPT_X_TLS_NEWCTX to generate new SSL_CTX
2006-04-07 00:52:38 +00:00
Howard Chu
51d5db03ff ITS#4422, rearrange options to allow passing NULL args to TLS/Cyrus 2006-04-07 00:48:41 +00:00
Pierangelo Masarati
8823f5cc87 fix ITS#4450? 2006-04-03 00:34:35 +00:00
Howard Chu
e1664b1f42 plug leak 2006-04-02 21:06:28 +00:00
Hallvard Furuseth
581c1ff6c7 Cast ctype.h char arguments to unsigned char 2006-04-01 23:44:42 +00:00
Pierangelo Masarati
bf860f0596 ld_abandoned must be protected by ld_res_mutex 2006-04-01 00:30:07 +00:00
Howard Chu
9686c7ce99 cleanup 2006-03-31 21:31:32 +00:00
Howard Chu
1c0d2ad7ae cleanup NULL string handling 2006-03-31 21:30:06 +00:00
Howard Chu
2d4da0b23c Cleanup NULL derefs 2006-03-31 21:18:04 +00:00
Howard Chu
aa87b9ad2e cleanup dead code 2006-03-31 21:07:53 +00:00
Howard Chu
8c4711e9db plug leaks 2006-03-31 20:36:53 +00:00
Kurt Zeilenga
40d75df606 Additional TXN changes (a work in progress) 2006-03-30 18:00:04 +00:00
Pierangelo Masarati
177c051f0f use asynchronous API; note that an endless loop may occur (ITS#4450; no fix yet) 2006-03-25 08:16:19 +00:00
Pierangelo Masarati
f48bf42578 seems to fix referral chasing (ITS#4448) 2006-03-24 01:18:36 +00:00
Pierangelo Masarati
70211e9be5 handle abnormal condition 2006-03-23 18:36:10 +00:00
Pierangelo Masarati
8c9f071238 duplicate string from environment, as it may be overridden by the user (ITS#4436) 2006-03-20 11:57:16 +00:00
Pierangelo Masarati
df2b44c3b9 destroy ld_conn_mutex (ITS#4441) 2006-03-20 11:14:43 +00:00
Kurt Zeilenga
544d00f3e5 Fix encoding 2006-03-07 21:48:47 +00:00
Kurt Zeilenga
fad69dbef8 Additional TXN changes 2006-03-07 02:21:27 +00:00
Kurt Zeilenga
825ce79611 Initial and rough client-side implementation of the revised LDAP
Transactions specification.  A work in progress!  Comments welcomed.
2006-03-06 21:20:36 +00:00
Luke Howard
e5a5f5e1b2 Don't fail compile if LDAP_EXOP_X_TURN undefined (ie. if LDAP_REL_ENG undefined) 2006-03-05 04:23:59 +00:00
Luke Howard
0ccbce9d09 Always pass valid BerElement to ldap_create_control() to avoid assert fail 2006-03-02 16:50:34 +00:00
Kurt Zeilenga
8c8ea049cb Macro cleanup 2006-02-16 05:01:29 +00:00
Kurt Zeilenga
cbc11c9233 unifdef -DLDAP_NULL_IS_NULL 2006-02-14 23:18:12 +00:00
Kurt Zeilenga
2d9e341ae9 Report layer installed only after installed, and fix up report text 2006-02-13 23:26:55 +00:00
Kurt Zeilenga
fe8e3b7efa Kludge for MSAD (ITS#4391 and others) 2006-02-07 01:20:55 +00:00
Howard Chu
fb4cba514d ITS#4354 only set DH callback if OPT_DHFILE has been set. 2006-01-19 18:12:15 +00:00
Kurt Zeilenga
48c34d254f Update proxied authorization implementation to use IANA
assigned result code.
2006-01-12 22:55:56 +00:00
Pierangelo Masarati
056b7e55da silence warning 2006-01-12 18:29:33 +00:00
Howard Chu
41c46bdb4e Tone down dn2bv/bv2dn logging 2006-01-12 06:07:42 +00:00
Luke Howard
86d1072917 ITS#4327 - make SASL_MECH/SASL_REALM no longer user-only options 2006-01-11 17:28:30 +00:00
Pierangelo Masarati
e94ded997d fix typo in previous commit 2006-01-09 11:18:01 +00:00
Kurt Zeilenga
be8676f780 s/pagectrl.o/pagectrl.lo/ 2006-01-09 05:25:43 +00:00
Kurt Zeilenga
d8eace75a7 cleanup 2006-01-09 05:22:46 +00:00
Kurt Zeilenga
eccd913a07 Update variables holding protocol values to ber_*_t's
Remove old grouping/txn code (pending redesign)
2006-01-09 01:25:53 +00:00
Pierangelo Masarati
564dca34bf fix types; further check parameters 2006-01-08 22:45:35 +00:00
Pierangelo Masarati
de79a7bfec rework API functions to create/parse controls; add client API functions to handle RFC2696 paged results (ITS#4314; patch from Hans Leidekker with changes) 2006-01-08 22:03:30 +00:00
Kurt Zeilenga
bca31173d8 Update (and rename) Sort and VLV parse routines to expect actual
control to be directly passed in.
2006-01-08 19:34:01 +00:00
Kurt Zeilenga
8ab4786ef2 correct typo 2006-01-08 19:11:57 +00:00
Kurt Zeilenga
d88f4e8197 cleanup 2006-01-08 17:11:15 +00:00
Pierangelo Masarati
339b9c371e rfc2589 support (ITS#4293) 2006-01-06 17:46:52 +00:00
Kurt Zeilenga
acbb5cf689 Happy new year! 2006-01-03 23:11:52 +00:00
Kurt Zeilenga
cdbbed6c3b improve LDAP_OTHER description 2006-01-03 19:45:26 +00:00
Pierangelo Masarati
0e6f61aa03 fix leaks in ldap_parse_passwd() 2006-01-02 13:27:29 +00:00
Pierangelo Masarati
283f79c268 improve previous commit (one line, use buffer and truncate if required) 2005-12-16 12:18:55 +00:00
Pierangelo Masarati
3edbd4fee7 log attrs 2005-12-15 19:12:09 +00:00
Pierangelo Masarati
fcda57e90f use macros instead of numbers... 2005-12-13 20:11:26 +00:00
Pierangelo Masarati
73acecaf0f cleanup 2005-12-13 15:53:10 +00:00
Kurt Zeilenga
71cf424b77 unifdef -DLDAP_SCOPE_SUBORDINATE 2005-11-26 06:35:36 +00:00
Pierangelo Masarati
f86543c770 cleanup filter escaping 2005-11-25 12:16:27 +00:00
Pierangelo Masarati
6ab23ef926 add more versatile private API for filter escaping 2005-11-25 10:41:33 +00:00
Pierangelo Masarati
c655139449 fix ldap_bv2escaped_filter_value() according to <draft-ietf-ldapbis-filter> 2005-11-25 01:12:32 +00:00
Pierangelo Masarati
d34fffcaf9 use lutil_ato*() whenever appropriate 2005-11-24 01:10:05 +00:00
Kurt Zeilenga
7468c7fb58 Support Solaris 10's getpeerucred(3) (*** blind commit ***) 2005-11-23 18:55:31 +00:00
Kurt Zeilenga
c5c5a7f19b s/ACCRIGHTS/ACCRIGHTSLEN/ 2005-11-23 18:22:02 +00:00
Pierangelo Masarati
1ce491e4f4 fix library checks; implement client side of "touch" modify (ITS#4183) 2005-11-20 14:17:37 +00:00
Pierangelo Masarati
af23be3675 silence warnings... 2005-11-14 21:47:17 +00:00
Pierangelo Masarati
4a6f4369c0 don't malloc empty strings for matched, error 2005-11-12 18:42:03 +00:00
Howard Chu
146b2c5389 ITS#4082 tls ctx requirements are only applicable to servers, or clients
with tls_opt_require_cert = TRY or DEMAND. Ignore requirements for clients.
2005-11-08 13:42:10 +00:00
Pierangelo Masarati
5be72fe816 don't allow '{' in TK_BAREWORD (ITS#4116) 2005-11-07 22:53:43 +00:00
Pierangelo Masarati
a6453f28f8 silence warnings 2005-11-06 23:27:09 +00:00
Kurt Zeilenga
4f63434511 Improve SASL error handling 2005-11-06 22:43:23 +00:00
Pierangelo Masarati
e1a7fa2ee9 fix ldap_bv2escaped_filter_value 2005-11-06 11:41:42 +00:00
Howard Chu
d67a2f2044 Move lconn_tls_ctx to ldo_tls_ctx. Otherwise clients cannot set it after
ldap_initializ'ing an LD and before connecting on it. Really all of the
global TLS options belong in the ldapoptions struct, instead of static vars.
2005-11-05 12:49:43 +00:00
Pierangelo Masarati
f571f4b2b4 fix previous commit 2005-11-03 20:11:22 +00:00
Pierangelo Masarati
561cd3d845 don't leak hostname 2005-11-03 15:17:48 +00:00
Kurt Zeilenga
ecd86725f2 Update result code to IANA-assigned values
Provide some backwards compatibility.
Misc cleanup
2005-11-03 01:27:07 +00:00
Howard Chu
6fcfaedf90 ITS#4137 was returning with tls_def_ctx_mutex locked. 2005-11-02 23:43:19 +00:00
Kurt Zeilenga
461ed37970 cleanup 2005-11-01 20:33:49 +00:00
Pierangelo Masarati
9c056f95fe consistently use HSTRERROR (ITS#4124) 2005-10-31 15:04:37 +00:00
Howard Chu
4ebed09d81 ITS#4017, additional revisions for DH parameters 2005-10-28 05:35:19 +00:00
Kurt Zeilenga
551d94c6e8 Additional serverSaslCred trace messages.
Misc. cleanup
2005-10-20 03:49:22 +00:00
Howard Chu
5e416949e0 Fix ldapi DN ordering 2005-10-17 12:57:53 +00:00
Kurt Zeilenga
279033fc1c ITS#3440: (blind) fix for VxWorks inet_ntoa(3) leak,
use inet_ntoa_b(3) instead.
2005-10-14 03:40:03 +00:00
Kurt Zeilenga
408fa06f95 missed \ 2005-10-13 06:53:32 +00:00
Kurt Zeilenga
a534d5fb6b Add ldap_bv2escaped_filter_value (ITS#2535) 2005-10-13 06:35:28 +00:00
Kurt Zeilenga
0ea43c9d7d Assume TLS is properly configured if any one of
keyfile, certfile, cacertfile, or cacertdir is
provided.  Note that TLS can be properly configured
without any of these when non-X.509 cipher suites
are used, so this might have be rethought.
2005-10-12 20:31:04 +00:00
Howard Chu
bb3c3f654f Fix typo 2005-10-12 00:31:05 +00:00
Howard Chu
f18c63fa13 Add LDAP* to debug messages to aid tracking 2005-10-12 00:23:30 +00:00
Howard Chu
e8b1b004d4 Fix ITS#3832 must mutex protect ld->ld_conns 2005-10-12 00:05:43 +00:00
Howard Chu
f54bc26357 ITS#4072 ldap_pvt_tls_init_def_ctx() returns LDAP_NO_SUPPORT if not
sufficiently configured. Update slapd/slurpd to act appropriately.
2005-10-09 19:55:39 +00:00
Howard Chu
2ea5a66be2 ITS#2942 skip referrals that we've already chased 2005-10-09 10:01:38 +00:00