Julio Sánchez Fernández
6777a3a41a
Permit access defined by uniqueMember and not only DN-valued
...
attributes. This allows using groupOfUniqueNames for
access control.
Fix small typo in MRA definition.
2000-10-09 19:09:22 +00:00
Kurt Zeilenga
63ae1d22e5
Fix ACL SSF reporting
2000-09-05 18:24:24 +00:00
Kurt Zeilenga
bf3df2f7a6
restrictops, requires, disallow knobs; ssf acls; and misc other changes
...
man pages to follow...
2000-08-28 18:38:48 +00:00
Kurt Zeilenga
1c328aa9c7
Minor typedef and other clean ups
2000-08-26 01:14:05 +00:00
Mark Valence
45fdcb7163
Bug fix submitted by Anthony Brock (ITS#637)
2000-07-25 02:16:59 +00:00
Mark Valence
4b1ff75bdd
Prepare for Set ACLs and ACIs.
2000-06-29 21:41:54 +00:00
Kurt Zeilenga
d19419392c
Use ASCII_*() macros and friends. Should be combined with similiar LDAP_*()
...
macros in ldap_pvt.h.
2000-06-20 17:05:15 +00:00
Kurt Zeilenga
4b58e3b88d
Add schema checks.
2000-06-19 16:14:36 +00:00
Mark Valence
1bfcb4b039
Added .regex, .base, .one, .subtree, and .children "style" modifiers.
2000-06-12 01:35:15 +00:00
Kurt Zeilenga
c3f8de76ef
Fix up debug statement as suggested by christian.lorenz@suse.de
2000-06-07 14:07:50 +00:00
Kurt Zeilenga
693fb9424a
unifdef -DSLAPD_SCHEMA_NOT_COMPAT -USLAPD_SCHEMA_COMPAT
2000-06-06 19:43:18 +00:00
Kurt Zeilenga
b05d071c3a
Fix anonymous mapping
2000-06-03 16:29:34 +00:00
Kurt Zeilenga
3350957674
SLAPD_SCHEMA_NOT_COMPAT: ACI cleanup
2000-05-28 22:17:34 +00:00
Kurt Zeilenga
229e12b69d
SLAPD_SCHEMA_NOT_COMPAT: add subtype aware is_at_syntax()
2000-05-28 19:15:37 +00:00
Kurt Zeilenga
c98f0ea02c
SLAPD_SCHEMA_NOT_COMPAT:
...
Don't depend acl parsing upon slap_schema, it's filled in post-conf
2000-05-28 18:58:09 +00:00
Kurt Zeilenga
439c0c796d
SLAPD_SCHEMA_NOT_COMPAT: Mostly work modify
2000-05-28 16:36:34 +00:00
Kurt Zeilenga
b813a5ba30
SLAPD_SCHEMA_NOT_COMPAT: prelim ACL work
2000-05-27 19:33:08 +00:00
Kurt Zeilenga
60802201e3
Const'ification
...
SASL mech removed from backend bind callback (as SASL is managed by frontend)
Changes to some backends are untested (as I don't have all dependent
software install)
2000-05-22 03:46:57 +00:00
Kurt Zeilenga
4bc786f34b
Y2k copyright update
2000-05-13 02:47:56 +00:00
Howard Chu
55f4896cb9
Fix typo with dnattr parsing
2000-05-12 09:10:45 +00:00
Kurt Zeilenga
2f0ec52df9
Fix improperly terminated comment
2000-04-12 01:10:50 +00:00
Kurt Zeilenga
0dbaf87730
Another round of changes behind -DSLAPD_SCHEMA_NOT_COMPAT
...
plus these changes unhidden changes:
remove now meaning --enable-discreteaci configure option
fix ITS#451, slapd filters
Add ber_bvecadd() to support above
constify ldap_pvt_find_wildcard() and misc slapd routines
renamed some slap.h macros
likely broken something
2000-02-14 20:57:34 +00:00
Kurt Zeilenga
9316c4eace
ACI attributes should be of ACI syntax. Need to assign
...
OID for experimental syntax.
2000-02-01 17:53:07 +00:00
Kurt Zeilenga
3a6e906194
Replace -DSLAPD_SCHEMA_COMPAT with -USLAPD_SCHEMA_NOT_COMPAT
2000-01-31 22:14:16 +00:00
Kurt Zeilenga
d8d19d4ff9
Resolve syntax errors created by previous -DSLAPD_SCHEMA_COMPAT work.
2000-01-29 07:00:39 +00:00
Kurt Zeilenga
c5da0c76ce
Additional changes to migrate to new schema codes
...
Still not usable.
2000-01-28 20:01:00 +00:00
Howard Chu
0b15c19cdf
Fix bug in group spec parsing, was failing to set attributeType if a
...
nondefault objectclass was given
2000-01-15 03:48:37 +00:00
Howard Chu
9f7b1160dd
Move str2access and access2str outside #ifdef LDAP_DEBUG clause
1999-11-10 20:28:42 +00:00
Kurt Zeilenga
0ec43c31ba
Add more shortcircuits (for $$ cases)
1999-10-26 22:29:47 +00:00
Kurt Zeilenga
3261f219a3
Add support for Root DSE ACLs.
...
Add "users" shorthand (dn="^.+$")
Add regex short circuiting for common dn regexs.
1999-10-26 03:19:41 +00:00
Kurt Zeilenga
06eb390586
Make accessmask2str reentrant.
1999-10-21 23:19:22 +00:00
Kurt Zeilenga
3d765d6108
Additional changes to improve logic and logging. Still buggy.
1999-10-21 20:29:52 +00:00
Kurt Zeilenga
873c8f213b
More acl parsing fixes... and print fixes.
1999-10-21 18:44:26 +00:00
Kurt Zeilenga
9c5b7aa29d
Fix parsing of descrete attributes.
1999-10-21 18:27:23 +00:00
Kurt Zeilenga
f6829ee903
Initial commit of new ACL engine. Engine supports descrete access
...
privs, additive/substractive rules, and rule continuation. Existing
rules that use 'defaultaccess none' should be 100% compatible. Rules
that rely other defaultaccess settings will require addition of
explicit clauses granting the access.
Needs additional testing and tuning of logs
1999-10-21 17:53:56 +00:00
Kurt Zeilenga
403f4479bc
Add OpenLDAP RCSid to *.[ch] in clients, libraries, and servers.
...
Replace old Id as needed (back-tcl).
Leave updating of contribWare to contributors (for now).
1999-09-08 19:06:24 +00:00
Hallvard Furuseth
33cc7d4cf1
Introduce and use LDAP_GCCATTR() = __attributes__() in gcc
1999-09-03 21:06:33 +00:00
Hallvard Furuseth
ac09c64f5c
Fix fprintf format args
1999-08-29 00:26:44 +00:00
Hallvard Furuseth
1a16766b3c
Always compile acl_dn_pat when it is set, otherwise acl.c breaks
1999-08-22 03:30:45 +00:00
Kurt Zeilenga
87675a953d
ACIs from Mark Valence <kurash@sassafras.com> (ITS#261)
1999-08-20 22:42:04 +00:00
Kurt Zeilenga
2a74677799
const'fication
1999-08-20 19:00:44 +00:00
Kurt Zeilenga
9c3ed0310b
Add copyright notices.
1999-08-06 23:07:46 +00:00
Kurt Zeilenga
df8f7cbb9b
s/exit(1)/exit(EXIT_FAILURE)/
...
s/exit(0)/exit(EXIT_SUCCESS)/
add <ac/stdlib.h> where needed and other minor header adjustments
1999-08-03 18:14:24 +00:00
Kurt Zeilenga
5600097ae1
Update ACL field names and usage statement to match -devel post
1999-07-22 00:50:11 +00:00
Kurt Zeilenga
d5b1892ccc
Fix acl parse bug
1999-07-21 21:08:05 +00:00
Kurt Zeilenga
933908f72f
ACL CHANGES:
...
by <who> <access> changed to by <who>+ <access> (joined with AND)
added peername=<regex> sockname=<regex> url=<regex>
removed addr=<regex> (use peername instead).
replace dn_upcase with str2upper and str2lower. Use where needed.
1999-07-21 20:54:23 +00:00
Kurt Zeilenga
170836751a
Namespace changes
...
added slap_ and ldbm_ to many structures
added typedefs to many structures
used typedefs
New main.c argument parsing with ldap url support (replacing -a address).
New sockaddr_in handling and support for multiple listeners.
1999-07-19 19:40:33 +00:00
Kurt Zeilenga
73276e84ae
Import experimental referral implementation from OPENLDAP_DEVEL_REFERRALS.
...
Includes support for update referral for each replicated backend.
Reworked replication test to use update referral.
Includes major rewrite of response encoding codes (result.c).
Includes reworked alias support and eliminates old suffix alias codes
(can be emulated using named alias).
Includes (untested) support for the Manage DSA IT control.
Works in LDAPv2 world. Still testing in LDAPv3 world.
Added default referral (test009) test.
1999-07-16 02:45:46 +00:00
Kurt Zeilenga
51d1c90887
unifdef -DSLAPD_ACLGROUPS -DSLAPD_ACLAUTH
1999-07-05 06:26:26 +00:00
Kurt Zeilenga
549c89f817
Regarding previous commit:
...
Fix broken ACL macros.
Fix o_dn/o_ndn == NULL vs "".
1999-07-04 19:53:00 +00:00