Commit Graph

23689 Commits

Author SHA1 Message Date
Quanah Gibson-Mount
92a8025f29 ITS#6244 - Add "now" dynacl module 2021-07-22 17:12:58 +00:00
Howard Chu
2c0707cf13 ITS#9157 save TLS errmsg in ld->ld_error 2021-07-22 15:27:31 +01:00
Howard Chu
81076a7f7c ITS#8775 for passwordMod, pass real DN thru
Since conn->c_dn is the real DN, need to see real DN for <self>
ACLs to work.
2021-07-20 19:27:45 +01:00
Howard Chu
4bd6a6d49d ITS#6916 unique: internal ops shouldn't have user's controls 2021-07-20 17:54:26 +01:00
Quanah Gibson-Mount
d73ce9b3ce ITS#7832 - Fix sysconfdir setting having prefix twice 2021-07-19 17:36:05 +00:00
Howard Chu
0ae71bafcf ITS#9608 fix delete of nonexistent sessionlog 2021-07-13 12:10:28 +01:00
Howard Chu
a464a6e98f ITS#9603 fix IPv6 addrs with tcpd 2021-07-01 16:16:19 +01:00
Bin Lan
457f5bd4a9 ITS#9602 Silence warnings in libldap/tls_o.c 2021-06-29 13:16:37 +01:00
Bin Lan
3be2447dfc ITS#9601 Silence warning in libldap/tpool.c 2021-06-29 13:16:26 +01:00
Randall Mason
6285668ce5 ITS#8903 - Add option to bind early in ldappasswd
ldappasswd is slightly different from a standard passwd workflow in that it
requests an old password, then a new password, then the old password
again.  This confuses people who are used to the unix passwd tool as
well as people who use password manager.  I've seen quite a few people
who have generated a new password, overwriting the old one, and then
need a password reset because they still need to bind to modify their
password.

This patch adds an option to bind at the beginning of the process so
that you can pass '-E' to ldappasswd and it will bind early in the
process so that the process is the same as the standard passwd.  All it
does is run the bind towards the beginning of the process instead of the
end.

The attached patch file is derived from OpenLDAP Software. All of
the modifications to OpenLDAP Software represented in the following
patch(es) were developed by Randall Mason randall@mason.ch. I have not
assigned rights and/or interest in this work to any party.

I, Randall Mason, hereby place the following modifications to
OpenLDAP Software (and only these modifications) into the public domain.
Hence, these modifications may be freely used and/or redistributed for
any purpose with or without attribution and/or other notice.
2021-06-27 20:18:24 +00:00
Quanah Gibson-Mount
44e1c6535e ITS#8695 - Update Windows to use Sleep instead of deprecated _sleep 2021-06-27 19:03:30 +00:00
Ondřej Kuzník
a2e9cb1acd ITS#7080 Postread control support for back-ldif/config 2021-06-27 17:39:46 +00:00
Ondřej Kuzník
5e4f1e862f ITS#7080 Move slap_read_controls Debug message to STATS 2021-06-27 17:39:46 +00:00
Quanah Gibson-Mount
62cad4e647 ITS#9591 - Regenerate configure 2021-06-27 17:39:22 +00:00
Quanah Gibson-Mount
f76d40a963 ITS#9591 - Fix library symbol versioning map file for Solaris
Solaris wants a different option to work with Gnu style library symbol maps
2021-06-24 21:28:01 +00:00
Quanah Gibson-Mount
f6dcc600a3 ITS#8788 - Document that "undef" is not usable with back-mdb 2021-06-24 17:48:21 +00:00
Quanah Gibson-Mount
37e630c5d1 ITS#8874 - Regenerate configure 2021-06-24 17:47:23 +00:00
Quanah Gibson-Mount
59f8d06d33 ITS#8874 - Don't try and link in libcom_err with libfetch on FreeBSD
This was changed for FreeBSD back in the year 2000.
2021-06-24 15:01:51 +00:00
Konstantin Andreev
7bd1fac58c ITS#9590 libldap: fix missing unlock on connection alloc failure 2021-06-24 13:40:44 +01:00
Ondřej Kuzník
4cd096deff ITS#9156 Do not spam the logs on account of lastbind 2021-06-21 18:37:30 +00:00
Ondřej Kuzník
9e1a961792 ITS#9581 Implement lastbind precision 2021-06-21 18:37:30 +00:00
Ondřej Kuzník
681799da65 ITS#9472 Fix cn=config memory leaks in slapo-datamorph 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
006ca73d83 ITS#9473 Fix cn=config memory leaks in slapo-variant 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
5dddb72503 ITS#7215 Update datamorph/variant to drop workaround 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
c7f4a5eb28 ITS#7215 Allow cleanups/commits to fail (once)
Some config changes need to be prepared at entry modification time and
then checked/committed at the end. Such a check can fail, so we need to
do this early enough and also commit the opposite change during a revert
step.

The assumption is that the original version is consistent and bconfig
can accurately reconstruct it, so the revert cleanups will not fail and
so all of them get to be run. We set ca->reply.err so that the cleanups
can be made aware and comply with this assumption.
2021-06-21 16:36:06 +00:00
Ondřej Kuzník
4255288ac4 ITS#7215 Postpone index_substr check 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
3dcfffbd00 ITS#9576 Use stored defaults 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
b4afe00942 ITS#9576 Put the used table in ConfigArgs 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
3138c8d5db ITS#9363 Some missed MAGIC defaults 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
2d78b6274f ITS#8747 Allow olcBkLloadClientMaxPending in cn=config 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
f016d88786 ITS#9575 Warn when specifying olcPasswordHash in the cn=config entry 2021-06-21 15:32:03 +00:00
Quanah Gibson-Mount
7eaad9d812 ITS#7832 - Correctly configure sysconfdir so that etcdir can be overridden. 2021-06-16 17:51:12 +00:00
Quanah Gibson-Mount
362fbedc51 ITS#8333 - Update internationalISDNNumber for RFC4519 2021-06-15 18:18:03 +00:00
Konstantin Andreev
00529facbe ITS#9578 ldif: terminate buf after truncating \r 2021-06-12 15:08:11 +01:00
Tero Saarni
3e45c71d29 ITS#9468 do not arm expire timer for connections that are already tainted 2021-06-08 15:41:40 +00:00
Howard Chu
2f880087c9 ITS#9468 always init lc_time and lc_create_time
Doesn't cost us anything and guarantees expiry will work if conn_ttl
or idletimeout are configured at a later time.
2021-06-08 15:41:40 +00:00
Howard Chu
4de2314555 ITS#9561 slapd init.c: fix copy/paste error
Added in 629cafc98d for ITS#8707
2021-06-03 21:28:36 +01:00
Ondřej Kuzník
0ea78fde20 ITS#6467 Indicate which operation is lost if we fail to add log entry 2021-06-03 10:23:43 +01:00
Ondřej Kuzník
726a203133 ITS#6467 Free uuid list after we're finished 2021-06-03 10:22:14 +01:00
Howard Chu
3ca790514f ITS#9557 back-mdb: fix mdb_waitfixup for candidate-based searches
Off-by-one left last scope unrefreshed
2021-05-27 12:48:36 +01:00
Ondřej Kuzník
21d48622c7 ITS#9559 mod_next is not there anymore 2021-05-26 14:51:56 +01:00
Nadezhda Ivanova
b92b03373b ITS#9555 Changed alignment in the default definitions block to tabs instead of spaces 2021-05-25 15:01:51 +00:00
Nadezhda Ivanova
915e515970 ITS#9555 Introduce a default operations timeout for back-asyncmeta 2021-05-25 15:01:51 +00:00
Quanah Gibson-Mount
4005c53d89 ITS#9554 -- Regenerate configure 2021-05-20 16:13:14 +00:00
Quanah Gibson-Mount
3be30b194f ITS#9554 - Rename configure.in to configure.ac 2021-05-20 16:13:14 +00:00
Ondřej Kuzník
5943a33456 ITS#6467 Adjust log message 2021-05-15 10:01:51 +01:00
Ondřej Kuzník
c216ef53cd ITS#6467 Reset avl root after releasing the tree 2021-05-15 10:01:18 +01:00
Ondřej Kuzník
363f10560f ITS#8820 Document ldap_get_attribute_ber() 2021-05-14 08:18:05 +01:00
Ondřej Kuzník
6977635c3e ITS#6467 Deal with modRDNs 2021-05-13 20:14:55 +00:00
Ondřej Kuzník
c2edf41fff ITS#9552 Record reqNewDN for modRDNs 2021-05-13 20:14:55 +00:00