Howard Chu
b10e0029a5
Full implementation of server identity checking per RFC2830 section 3.6
2001-09-02 11:23:28 +00:00
Kurt Zeilenga
d3cb8a357f
Move Cyrus SASL initializing forward
2001-08-31 00:14:04 +00:00
Howard Chu
44a3160fec
Remove redundant call of SSL_set_info_callback, to allow users
...
to override it in the SSL_CTX.
2001-08-29 20:28:08 +00:00
Kurt Zeilenga
fb5df59342
Add DB 3.3 support...
...
likely needs work on NT4 (but so did old code)
2001-08-27 22:06:07 +00:00
Kurt Zeilenga
05960887bb
Fix -H ldaps:// crashes due to rework of TLS code
2001-08-27 20:22:28 +00:00
Pierangelo Masarati
511e8b606f
fix bug in '%' escaping in substitution pattern compile
2001-08-25 15:20:16 +00:00
Kurt Zeilenga
16fa8c4a21
Fix bug introduced during TLS rework
2001-08-02 04:20:11 +00:00
Kurt Zeilenga
2ad03e6041
To be consistent, should assert that ld is valid.
2001-07-24 16:38:42 +00:00
Kurt Zeilenga
2b7727882d
misc updates, constification, deprecation...
2001-07-23 05:00:39 +00:00
Kurt Zeilenga
978e417699
Make some additional UTF8 public
...
Remove lint
2001-07-21 23:13:04 +00:00
Pierangelo Masarati
93923d4345
honors multiple type/value in rdn when generating ufn
2001-07-11 20:16:25 +00:00
Kurt Zeilenga
f61152ccbd
Check for critical client controls.
2001-07-06 03:13:42 +00:00
Kurt Zeilenga
803e84fcdd
TLS doesn't need ldap_host_connected_to()
2001-06-25 21:44:41 +00:00
Kurt Zeilenga
c731288dc6
Replace ATTR_URIS with ATTR_OPTION (more general solution)
2001-06-25 21:39:14 +00:00
Kurt Zeilenga
77f776dfd1
Another round of TLS updates to support secure referral chasing
2001-06-25 19:17:42 +00:00
Kurt Zeilenga
350ffe6d15
Rework tls check
...
Needs to be connection specific
2001-06-25 18:20:14 +00:00
Kurt Zeilenga
c4f5497ac6
move TLS ctx to lconn struct in prep for supporting TLS with referrals
...
need to rework cert check to use per lconn host name
2001-06-25 07:33:42 +00:00
Pierangelo Masarati
1aa97d5f87
actually, <ac/strings.h> rather goes into rewrite-int.h
2001-06-23 16:06:34 +00:00
Kurt Zeilenga
903940014c
Sync with 2.x
2001-06-23 01:25:21 +00:00
Kurt Zeilenga
fdbe100e5f
include <ac/string.h> as needed (not in rewrite.h)
2001-06-23 01:20:32 +00:00
Kurt Zeilenga
4a23c08678
Fix up error handling
2001-06-22 21:01:04 +00:00
Randy Kunkee
ba4371db84
Tune db3 caching: only call set_cachesize for environment, and not individual
...
files. Don't call set_cachesize if dbcachesize = 0.
2001-06-22 08:31:36 +00:00
Randy Kunkee
1656f2c774
Patches from Mark Whitehouse (with changes from myself) to make the
...
dbcachesize setting actually work for db-3.2.9.
2001-06-21 18:54:56 +00:00
Kurt Zeilenga
10fd143311
s/__/LDAP_P/g
2001-06-16 07:37:43 +00:00
Kurt Zeilenga
55755fea2a
Rebind cleanup
2001-06-15 04:49:38 +00:00
Kurt Zeilenga
11b6d1f284
Misc updates for NT4
2001-06-15 04:16:55 +00:00
Kurt Zeilenga
5f25c10980
new rebind proc
...
new SASL locking
2001-06-15 00:14:56 +00:00
Kurt Zeilenga
5ac196e3f9
Update headers
2001-06-15 00:02:12 +00:00
Kurt Zeilenga
7ee53eb12e
Remove const from salt_format
2001-06-14 02:20:05 +00:00
Kurt Zeilenga
ff993c7ddb
Misc updates to password codes / docs
2001-06-13 05:40:24 +00:00
Kurt Zeilenga
8d4c20cd6d
Adding crypt(3) salt format (ITS#1202) from Jeff Costlow <j.costlow@f5.com>
...
with minor changes by committer
---
Copyright 2001, F5 Networks, Inc, All rights reserved.
This software is not subject to any license of F5 Networks.
This is free software; you can redistribute and use it
under the same terms as OpenLDAP itself.
2001-06-13 03:47:17 +00:00
Kurt Zeilenga
86acd7eb20
unifdef -ULDAP_UFN
2001-06-11 21:08:49 +00:00
Kurt Zeilenga
4edc93c807
EOL
2001-06-09 02:35:44 +00:00
Kurt Zeilenga
44bef574c8
Updated pthread test and usage (avoid pthread_detach if possible)
...
don't use tmpnam()
2001-06-09 01:05:35 +00:00
Kurt Zeilenga
e8ac75d22f
Fix up some locking
2001-06-07 16:24:46 +00:00
Kurt Zeilenga
d773c7178f
Fix typos in last commit
2001-06-07 16:15:25 +00:00
Kurt Zeilenga
486ad59260
Add a DB version check.
2001-06-07 16:11:59 +00:00
Pierangelo Masarati
a712216a6c
semicolon after colon in goto labels; no C++ style comments
2001-06-03 08:52:22 +00:00
Kurt Zeilenga
fcf71ea34f
clean up LDBM_{,UN}LOCK macros
2001-05-31 20:11:40 +00:00
Kurt Zeilenga
b6892b4493
big mutex needs #ifdef HAVE_BERKELEY_DB_THREAD wrapper
2001-05-28 20:16:21 +00:00
Kurt Zeilenga
94e1d48032
Misc adjustments to CBM tests
2001-05-28 20:00:17 +00:00
Kurt Zeilenga
4b8eae427f
Initial CDB implementation.
2001-05-28 19:43:11 +00:00
Kurt Zeilenga
52067f461e
Fix wrapping separators (no functional change)
2001-05-28 19:42:22 +00:00
Kurt Zeilenga
c6d9373d03
Enable ldbm_big_mutex for Berkeley DB 2/3 per comments from Sleepycat.
...
Can be disabled if and we implement DB_INIT_CDB + DB_INIT_MPOOL +
DB_CDB_ALLDB.
2001-05-28 19:11:29 +00:00
Kurt Zeilenga
deb9644a8a
Should not be using reverse lookup names to check certificates.
2001-05-19 23:07:46 +00:00
Kurt Zeilenga
588a518bff
Don't set_cachesize for db3
2001-05-18 00:55:09 +00:00
Kurt Zeilenga
5a26f9d617
Fix ; typo
2001-05-16 19:17:51 +00:00
Kurt Zeilenga
a36a6211e5
Regen
2001-05-12 18:44:07 +00:00
Pierangelo Masarati
74fa239a20
This is the commit of:
...
- librewrite, for string rewriting; it may be used in back-ldap
by configuring with '--enable-rewrite'. It must be used in
back-meta. There's a text file, 'libraries/librewrite/RATIONALE',
that explains the usage and the features. More comprehensive
documentation will follow.
- enhancements of back-ldap (ITS#989,ITS#998,ITS#1002,ITS#1054 and ITS#1137)
including dn rewriting, a fix to group acl matching and so
- back-meta: a new backend that proxies a set of remote servers
by spawning queries. It uses portions of back-ldap and the rewrite
capabilities of librewrite. It can be compiled by configuring
with `--enable-ldap --enable-rewrite --enable-meta'.
There's a text file, 'servers/slapd/back-meta/Documentation', that
describes the main features and config statements.
Note: someone (Kurt?) should run 'autoconf' and commit 'configure' as
my autoconf version must be different: my configures contain a number
of differences and I didn't feel comfortable in adding them :)
2001-05-12 00:51:28 +00:00
Gary Williams
9909448880
fix global level usage (ITS 1143, 1144)
2001-05-11 15:31:34 +00:00