Commit Graph

718 Commits

Author SHA1 Message Date
Pierangelo Masarati
fb3fc81c7e improved authz_backend detection for internal databases (ITS#4018) 2005-09-10 09:56:29 +00:00
Kurt Zeilenga
b707e1e38c Move uidNumber and gidNumber into slapd(8)
to ensure they are available for ldapi://.
2005-09-05 01:08:40 +00:00
Pierangelo Masarati
6cb8b14435 allow undefined attrs to be "proxied" (ITS#3959) 2005-08-25 21:14:26 +00:00
Pierangelo Masarati
849ecbcf1f allow options in dynacl configuration 2005-08-22 16:28:50 +00:00
Pierangelo Masarati
4bc8197dcb further ACI factoring out & confinement 2005-08-22 16:03:35 +00:00
Hallvard Furuseth
94747c50db SLAP_OP_* enums are always used. Delete #ifdef SLAPD_MONITOR around definition. 2005-08-21 00:00:09 +00:00
Pierangelo Masarati
00b5d8c1bc allow objectClass checking including sups 2005-08-20 19:01:53 +00:00
Pierangelo Masarati
e066ec210e merge sml_managing into sml_flags (SLAP_MOD_MANAGING) 2005-08-18 08:48:10 +00:00
Pierangelo Masarati
b2284183f9 more on manage 2005-08-17 22:06:46 +00:00
Pierangelo Masarati
ec49990d51 ACIs almost entirely factored out of slapd
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed
2005-08-17 17:14:57 +00:00
Hallvard Furuseth
9873eb7ab0 Add missing Statslog() statements (loglevel stats/stats2):
"ABANDON", "STARTTLS", "CANCEL", "WHOAMI", "PASSMOD", "EXT", "INTERM",
  "TLS established", SASL and Extended Response "RESULT".
In Statslog output "conn=xx fd=yy closed", append the reason in
  "()" unless client or server closed the connection after Unbind.
Still missing Statslog output from a number of failed requests.
2005-08-14 00:14:58 +00:00
Pierangelo Masarati
d10250d9f6 add authzSyntax for authzTo/authzFrom attributes; add X-ORDERED 'VALUES' if support for ordered_value_{validate,pretty,normalize} is present; exploit normalization in slap_parseURI (only #ifdef LDAP_DEVEL) 2005-08-11 23:52:17 +00:00
Pierangelo Masarati
2b93e9b376 wrap validate/pretty/normalize for ordered values (only #ifdef LDAP_DEVEL) 2005-08-11 23:35:15 +00:00
Luke Howard
12d006d17d Add o_no_schema_check to operation structure
entry_schema_check() nows takes Operation instead of Backend as first
argument, allows it to check o_no_schema_check
2005-08-01 15:26:13 +00:00
Luke Howard
cb786e3330 Remove SLAPI pblock from operation structure 2005-07-22 07:54:17 +00:00
Luke Howard
44bb946436 More use of SLAPI accessor macros 2005-07-22 05:33:47 +00:00
Luke Howard
ffe20229dc Move most of SLAPI frontend into overlay 2005-07-21 16:35:20 +00:00
Pierangelo Masarati
b358bd82ad condition SLAP_OVERLAY_ACCESS 2005-07-21 14:23:15 +00:00
Luke Howard
13a8d5046f Add slap_operation_t 2005-07-21 13:35:19 +00:00
Luke Howard
04e499e28c back out previous commit, fat fingers 2005-07-19 15:36:24 +00:00
Luke Howard
2d7a2144dc result.c 2005-07-19 15:35:00 +00:00
Howard Chu
532da5699c ITS#3844 fix typo 2005-07-08 04:57:17 +00:00
Hallvard Furuseth
b1f5e9258a Complete the replacement of LDAP_CONTROL_X_TREE_DELETE with
SLAP_CONTROL_X_TREE_DELETE, which is only defiend when LDAP_DEVEL.
back-sql triggered an assert(0): It expected the control to be supported.
2005-07-07 20:36:37 +00:00
Howard Chu
d518a76b35 ITS#3844 fix slap_operational_subschemaSubentry 2005-07-07 17:39:29 +00:00
Pierangelo Masarati
deec44b89a fix further ITS#3830 issues; allow to specify a matching rule for non-DN match 2005-07-05 12:00:14 +00:00
Howard Chu
e42e8d7130 Add op->o_tincr to distinguish ops with same op->o_time. (We should
be preparing to use timestamps with sub-second resolution, really.)
2005-06-09 22:56:35 +00:00
Howard Chu
8f58409749 Add SLAP_MOD_INTERNAL flag to Modifications, allow internal ops to bypass
ACL checks when modifying user-modifiable attributes as non-root user.
2005-06-04 09:44:39 +00:00
Howard Chu
bf110af723 Fix slap_verbmask 2005-05-23 12:56:14 +00:00
Pierangelo Masarati
0873f03b39 don't unparse starttls field in slap_bindconf if default 2005-05-23 07:23:46 +00:00
Kurt Zeilenga
31727f0f4d Additional manageDIT changes.
Now require be_isroot() instead of "manage".
2005-05-13 21:09:26 +00:00
Pierangelo Masarati
d508114a9e improve fix 2005-05-13 20:27:12 +00:00
Pierangelo Masarati
6868323e17 fix ACL_PRIV_MASK for manage 2005-05-13 19:29:38 +00:00
Kurt Zeilenga
d1143204b2 Add parsing for manageDIT control. 2005-05-13 08:22:08 +00:00
Kurt Zeilenga
2544a320b9 extend manageDIT test cases (now just need to find time
to implement this)
2005-05-13 06:43:06 +00:00
Howard Chu
ee59484f7b Restructured to allow miscellaneous Adds under database/overlay objects 2005-05-09 03:42:51 +00:00
Pierangelo Masarati
54de0cbffc use appropriate log level if bailing out; need to use Debug() instead fprintf( stderr ) in many places... 2005-05-06 20:36:59 +00:00
Pierangelo Masarati
d23243a507 more on strict config parsing (ITS#3705) 2005-05-06 16:42:03 +00:00
Howard Chu
9a1beb7fe4 unifdef SLAP_USE_CONFDIR 2005-05-01 20:57:32 +00:00
Kurt Zeilenga
0ad446f014 ITS3693: fix of authPasswordSchemes for whom ever ends up implementing this 2005-04-30 05:43:09 +00:00
Pierangelo Masarati
8d41d6d927 hardcode "description" and "seeAlso" 2005-04-29 20:29:29 +00:00
Howard Chu
b92387bb1c ITS#3671 add REP_ENTRY_MUSTRELEASE flag, release the entry before
attempting to write the response on the network. (This should probably
be the default behavior anyway, since network hangs of this sort can
cause problems for any backend that has entry locks.)
2005-04-24 22:21:57 +00:00
Howard Chu
8f78d064ee Isolate syncrepl stuff in syncrepl.c 2005-04-22 14:38:35 +00:00
Howard Chu
854b433489 Fix X-ORDERED SIBLINGS 2005-04-21 06:39:58 +00:00
Pierangelo Masarati
d2dd3a616c hide changes behind specific #ifdef, conditioned by LDAP_DEBUG; always allow access on back-dnssrv 2005-04-12 01:07:30 +00:00
Pierangelo Masarati
15016154b6 add ACL hook to overlays 2005-04-12 00:24:04 +00:00
Pierangelo Masarati
c1885efd83 more bindconf cleanup 2005-04-10 23:43:17 +00:00
Pierangelo Masarati
3546934005 same for objectClass; improve previous commit 2005-04-10 15:40:15 +00:00
Pierangelo Masarati
fa4b1c69d7 Added further consistency checks and a new schema parse error value
which should help in debugging schema development for back-config.
The check essentially verifies, when a duplicate attributeType is found,
that the new attributeType definition is an exact duplicate of the
definition already present in the schema.
2005-04-10 15:14:13 +00:00
Howard Chu
e2a3fc3af3 Preserve OID macros for display in back-config 2005-04-09 16:13:04 +00:00
Pierangelo Masarati
4abbf9c610 implement add/delete granularity in write access (ITS#3631) 2005-04-08 00:18:24 +00:00