Pierangelo Masarati
|
14c425b922
|
s/leave/func_leave/ (ITS#5411)
|
2008-03-15 18:16:21 +00:00 |
|
Pierangelo Masarati
|
ec8466ec83
|
invalidate connection handler when ldap_sasl_interactive_bind_s() for internal error (ITS#5404); fix response tag
|
2008-03-08 15:41:17 +00:00 |
|
Kurt Zeilenga
|
c890c96d13
|
Happy New Year (belated)
|
2008-01-08 00:19:56 +00:00 |
|
Pierangelo Masarati
|
c2bbd6d5e7
|
fix typing warnings
|
2007-10-05 10:06:20 +00:00 |
|
Howard Chu
|
c428a16332
|
coverity - init i
|
2007-09-26 20:21:53 +00:00 |
|
Pierangelo Masarati
|
43c00ab486
|
fix previous commit
|
2007-09-15 18:03:55 +00:00 |
|
Pierangelo Masarati
|
5569180736
|
draft-wahl-ldap-session: append further instances of the control
|
2007-09-15 17:26:09 +00:00 |
|
Pierangelo Masarati
|
6d38af2689
|
improve error message
|
2007-09-13 17:54:49 +00:00 |
|
Pierangelo Masarati
|
331fef5e78
|
idassert also in case of SASL mechs that do not set authcId
|
2007-09-09 21:52:10 +00:00 |
|
Pierangelo Masarati
|
f834cdb2f7
|
fix proxyAuthz oid setup
|
2007-09-09 21:48:17 +00:00 |
|
Pierangelo Masarati
|
b95e40f56f
|
cleanup
|
2007-08-26 15:38:20 +00:00 |
|
Pierangelo Masarati
|
9a00bbb35f
|
add support for session tracking (draft-wahl-ldap-sessio) to proxy backends requests
|
2007-08-22 15:49:35 +00:00 |
|
Pierangelo Masarati
|
145e6fc1f8
|
fix or comment Calysto findings
|
2007-08-21 10:52:16 +00:00 |
|
Pierangelo Masarati
|
27428ac00e
|
uniformly exploit rootdn bind; add support for rootdn bind to backends that didn't have it (ITS#4962)
|
2007-08-16 09:38:15 +00:00 |
|
Pierangelo Masarati
|
d8636d8e60
|
fix previous commit: op is not a bind if error
|
2007-08-11 09:30:52 +00:00 |
|
Howard Chu
|
3b837d4fca
|
More for ITS#5050
|
2007-07-23 00:33:21 +00:00 |
|
Howard Chu
|
da9f66ede7
|
ITS#5050 use correct (Bind) timeout in dobind_int
|
2007-07-22 17:48:04 +00:00 |
|
Pierangelo Masarati
|
6420bcd7d7
|
restore op before checking result (and, if necessary, bailing out)
|
2007-03-19 15:50:28 +00:00 |
|
Pierangelo Masarati
|
fd1efa13d0
|
fix previous commit (ITS#4861)
|
2007-03-09 17:24:56 +00:00 |
|
Pierangelo Masarati
|
6a9c44849c
|
check consistency of referrals and result code (ITS#4861)
|
2007-03-08 17:57:49 +00:00 |
|
Pierangelo Masarati
|
e07dc8c757
|
fix more spurious return stuff; split quarantine in: detection, exploitation, recovery; describe failure reasons
|
2007-01-28 00:24:10 +00:00 |
|
Pierangelo Masarati
|
ecc28ff57c
|
fix cached connection taint in case of timeout
|
2007-01-26 00:40:05 +00:00 |
|
Pierangelo Masarati
|
ee2370bf42
|
one more round of cached connections fixes/improvements
|
2007-01-13 11:51:28 +00:00 |
|
Pierangelo Masarati
|
fc20e15556
|
further cleanup
|
2007-01-10 00:53:05 +00:00 |
|
Pierangelo Masarati
|
e2d65fb69b
|
fix previous commit(s)
|
2007-01-09 00:59:17 +00:00 |
|
Howard Chu
|
a6a8fb514b
|
Add TLS context configuration
|
2007-01-08 23:36:24 +00:00 |
|
Pierangelo Masarati
|
82de650b19
|
fix idassert mode=self for anonymous operations (ITS#4798)
|
2007-01-08 18:34:59 +00:00 |
|
Pierangelo Masarati
|
45edf395eb
|
cleanup ITS#4781 enhancement
|
2007-01-06 00:45:02 +00:00 |
|
Kurt Zeilenga
|
da6d9eb046
|
happy new year
|
2007-01-02 20:00:42 +00:00 |
|
Pierangelo Masarati
|
7e8242d50d
|
pool privileged connections (ITS#4791)
|
2006-12-24 18:23:36 +00:00 |
|
Pierangelo Masarati
|
4483e79906
|
further fix of ITS#4782
|
2006-12-19 22:11:33 +00:00 |
|
Pierangelo Masarati
|
6752a27c0e
|
(almost) blind fixes to ITS#4782
|
2006-12-19 21:59:23 +00:00 |
|
Howard Chu
|
08b209ffa9
|
ITS#4782 quick fix, never send result from proxy authz check.
|
2006-12-19 20:37:38 +00:00 |
|
Pierangelo Masarati
|
3e427ad75a
|
support a separate cached connection for binds when using (liberal) idassert flagged with "override" (ITS#4781)
|
2006-12-17 22:11:40 +00:00 |
|
Pierangelo Masarati
|
09abc9f8ae
|
fix leak in case of retry
|
2006-11-24 01:44:11 +00:00 |
|
Pierangelo Masarati
|
71bcd4a4b6
|
s/ldap_int_discard/ldap_pvt_discard/
|
2006-10-28 18:13:12 +00:00 |
|
Pierangelo Masarati
|
45156c6d7a
|
need ldap-int.h for ldap_int_discard() declaration (ITS#4717)
|
2006-10-28 16:19:53 +00:00 |
|
Pierangelo Masarati
|
6416d83372
|
add ldap_int_discard(); use it in proxies (ITS#4717)
|
2006-10-22 20:31:41 +00:00 |
|
Howard Chu
|
6f13331f4f
|
Drop extraneous test from copy/paste (1.200) (coverity)
|
2006-10-08 00:37:18 +00:00 |
|
Pierangelo Masarati
|
f8d1a61866
|
more on clarification of special proxy identities and resilience to connection failure
|
2006-10-07 18:07:56 +00:00 |
|
Pierangelo Masarati
|
5714f8565f
|
fix rebind with idassert when a connection expires; also, fix override
|
2006-09-30 01:11:19 +00:00 |
|
Pierangelo Masarati
|
55b5685425
|
ldap_back_dobind_int() may need to free a connection
|
2006-09-11 22:45:19 +00:00 |
|
Pierangelo Masarati
|
1ab4c624ed
|
rearrange error handling
|
2006-09-11 21:04:25 +00:00 |
|
Pierangelo Masarati
|
150a4f106c
|
improve timeout support (ITS#4157, ITS#4663); manpage cleanup
|
2006-09-04 08:24:05 +00:00 |
|
Pierangelo Masarati
|
00c2498543
|
back-ldap should only touch the connection timestamp when activity actually occurred (i.e. ldap_result() returned a positive value), otherwise if "the network cable is removed after the connection is established" ldap_result() keeps returning 0 forever...
|
2006-09-03 11:02:15 +00:00 |
|
Pierangelo Masarati
|
8a71ac3740
|
don't leak identity
|
2006-08-31 16:21:54 +00:00 |
|
Howard Chu
|
ca262ee8e6
|
Fix test045, test048 use acl-bind credentials on retry if they were set.
|
2006-08-25 02:16:57 +00:00 |
|
Pierangelo Masarati
|
e4d24ecce8
|
don't leave dangling conns in the AVL tree
|
2006-08-18 17:11:41 +00:00 |
|
Pierangelo Masarati
|
5b317f5b85
|
the conn may not be bound yet even if the bound DN is set...
|
2006-08-18 15:22:26 +00:00 |
|
Kurt Zeilenga
|
4ba9bc1c2d
|
Use LDAP_OTHER to indicate internal error
|
2006-08-12 21:46:29 +00:00 |
|