Kurt Zeilenga
c7f0438044
bvalue cleanup
2004-04-08 06:49:17 +00:00
Kurt Zeilenga
44725e7303
use BER_BVNULL
2004-04-07 04:11:43 +00:00
Kurt Zeilenga
c7e89d57be
swap be_isroot and be_isroot_dn symbols
2004-04-06 01:06:20 +00:00
Pierangelo Masarati
e516247068
exploit new isroot_dn helper
2004-04-05 17:31:27 +00:00
Howard Chu
35c774d3b8
Yet more for ITS#3008. Seems to work properly now.
2004-03-10 09:11:20 +00:00
Howard Chu
3853fade60
More for ITS#3008
2004-03-10 08:00:41 +00:00
Howard Chu
cac30b1855
ITS#3008 fix value-based ACLs
2004-03-10 02:59:03 +00:00
Pierangelo Masarati
006745430e
allow "expand" style in peername, sockname, sockurl as well; more sanity checks
2004-03-09 19:44:14 +00:00
Pierangelo Masarati
042869366d
use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks
2004-03-09 16:33:05 +00:00
Pierangelo Masarati
a4e062ca36
apply advanced peername ACL (ITS#2907)
2004-03-08 18:49:12 +00:00
Kurt Zeilenga
3c598e89fb
Happy new year
2004-01-01 19:15:16 +00:00
Luke Howard
c03a70955d
Make defaulted backend available to ACL plugin pblock
2004-01-01 09:42:44 +00:00
Luke Howard
03e5db818f
Fix ACL plugin bug - return value of ACL plugins was being ignored
2004-01-01 06:33:18 +00:00
Luke Howard
f289d6b7f0
Fix assertion failure if acl_check_modlist() called where op->o_bd == NULL.
...
Behavior now matches access_allowed() - the first backend is used. The
code needs review, I have not tested it.
2003-12-30 03:50:14 +00:00
Luke Howard
0549d46adf
Don't require slapi to be in the path - always include slapi/slapi.h
2003-12-28 04:17:48 +00:00
Pierangelo Masarati
f2a9089e4d
cleanup most of the -pedantic warnings (ITS#2884) and other small fixes
2003-12-17 20:55:46 +00:00
Luke Howard
516fd0ff50
First round of SLAPI cleanups - use slapi_int_XXX for internal functions
...
(slapi_x_XXX is still reserved for exported functions that are not part
of the SLAPI specification)
2003-12-16 15:49:31 +00:00
Pierangelo Masarati
ee34f3fb64
add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication
2003-12-16 00:49:10 +00:00
Kurt Zeilenga
4e15a84452
Updated notices
2003-11-27 01:17:14 +00:00
Howard Chu
01f7a7466b
SLAPI fix - no-op when slapi_plugins_used == 0
2003-10-24 05:58:42 +00:00
Howard Chu
1240c70ff4
ITS#2497, implement value-level ACLs:
...
access to attr=foo val.regex=bar.*
2003-09-20 03:23:10 +00:00
Howard Chu
94e88c3700
ITS#2679 don't use cached ACL state from different attribute
2003-09-16 22:03:26 +00:00
Kurt Zeilenga
a1b9d3148e
subtree ACI patch from Ralf
2003-09-09 18:37:31 +00:00
Luke Howard
0edb270b9e
Support for ACL plugins
2003-08-31 08:17:21 +00:00
Howard Chu
dc41a6b37e
ITS#2529 null DN in log
2003-05-22 09:22:41 +00:00
Kurt Zeilenga
231f8464d1
cleanup
2003-04-29 21:14:12 +00:00
Kurt Zeilenga
5cd994ed21
remove dnNormalize2
...
replace calls to dnNormalize2 with calls to dnNormalize
2003-04-29 18:28:14 +00:00
Luke Howard
86a18c2ea2
Don't pollute op->o_bd in access_allowed()
2003-04-18 04:57:15 +00:00
Pierangelo Masarati
194528d689
fix ACI per-thread memory management
2003-04-12 17:42:51 +00:00
Howard Chu
280fc819cf
Memory context tweaks for Bind
2003-04-12 06:56:42 +00:00
Howard Chu
ece7452b05
More memory context tweaks
2003-04-11 01:29:28 +00:00
Kurt Zeilenga
c75be97ae9
#ifdef -DSLAP_NVALUES
2003-04-05 03:35:16 +00:00
Pierangelo Masarati
df29552130
fix new API leftover
2003-04-03 21:17:44 +00:00
Howard Chu
e8c58b4e7f
Major API change - (SLAP_OP_BLOCKS) All request parameters are
...
consolidated into the Operation structure. All reply parameters
are consolidated into the new SlapReply structure. Most operations
now have identical call signatures... Changes are not #ifdef'd,
revert to -r NO_SLAP_OP_BLOCKS if necessary to back out.
2003-03-30 09:03:54 +00:00
Howard Chu
5ad51b6150
SLAP_NVALUES tweaks - after input, a_nvals is always populated. If there is
...
no normalizer, a_nvals = a_vals.
2003-03-24 01:56:56 +00:00
Howard Chu
3f48cabdde
Fix typo
2003-03-23 15:45:06 +00:00
Kurt Zeilenga
8873006105
SLAP_NVALUES changes
...
and misc cleanup
2003-03-16 18:10:16 +00:00
Kurt Zeilenga
c0477e1532
Fix test006-acls
2003-03-15 23:02:55 +00:00
Kurt Zeilenga
3972e13fc3
NVALUES: fix a couple of value_find_ex() calls
2003-03-15 22:47:17 +00:00
Pierangelo Masarati
bfe6d806d9
(ultimately?) fix ITS#2361
2003-03-11 12:23:20 +00:00
Howard Chu
5c3909f567
ITS#2361, skip sockname, peername, peerdomain, sockurl ACLs if the
...
corresponding conn->field is NULL. (overwrites previous commit.)
2003-03-10 22:28:35 +00:00
Pierangelo Masarati
11c225d40c
check conn->c_listener before use (hack to fix ITS#2361; need to review this part of slapi)
2003-03-10 22:19:32 +00:00
Howard Chu
40454ccec8
Added op->o_is_auth_check; use ACL_AUTH instead of ACL_SEARCH/ACL_READ
...
in access_allowed() if flag is set. Set in sasl/saslauth searches.
2003-03-10 22:07:21 +00:00
Kurt Zeilenga
152829be87
SLAP_NVALUES:
...
schema engine updated (but not schema routines so things don't run yet)
nvalues mostly populated, enough for tests 0-2 to pass
schema routines needs lots of work
modify/mods codes needs lots of work
2003-02-27 01:54:43 +00:00
Pierangelo Masarati
937475efbf
blind fix
2003-02-26 21:45:56 +00:00
Kurt Zeilenga
25886d989a
Change MR flag names and add comments as to what they mean to slap.h
2003-02-26 02:55:28 +00:00
Howard Chu
cbf7b063e3
ITS#2285 string_expand for acl set
2003-01-30 20:59:47 +00:00
Kurt Zeilenga
6939c53170
Happy new year
2003-01-03 20:20:47 +00:00
Pierangelo Masarati
8e74ed4dfc
fix initialization size and silence warning
2002-12-05 11:47:44 +00:00
Howard Chu
b1798f9160
Fix typo in prev commit value_find/_ex
2002-12-04 23:20:22 +00:00