Pierangelo Masarati
b6cf5ca896
make sure filter is applied to final entry (ITS#6255)
2009-08-14 00:14:35 +00:00
Pierangelo Masarati
bea861dda5
honor sizelimit when filter needs to be split between local and remote (ITS#6253)
2009-08-14 00:03:10 +00:00
Howard Chu
9b764c3f9e
Fix prev commit again, IPPROTO_TCP is the documented correct approach
2009-08-13 21:35:38 +00:00
Pierangelo Masarati
60627ddf93
eliminate code duplication
2009-08-13 21:24:32 +00:00
Pierangelo Masarati
50764138f1
ITS#6243 (forced commit, missing ITS number)
2009-08-13 21:01:17 +00:00
Pierangelo Masarati
2d1d2f3008
remove misleading comment
2009-08-13 21:00:04 +00:00
Pierangelo Masarati
9f80d80dbd
expose subordinate databases; add a link to the superior DN
2009-08-13 20:58:20 +00:00
Howard Chu
f5bad5673b
Fix prev commit, it was not Linux-only as it claimed to be.
2009-08-13 20:55:04 +00:00
Pierangelo Masarati
efabe1d279
honor per-target tls/chase referrals/rebind as user (ITS#6190)
2009-08-13 19:30:37 +00:00
Pierangelo Masarati
f32bc8bc85
advertise known exops
2009-08-13 15:52:56 +00:00
Hallvard Furuseth
332838dcb0
For ITS#6215: Export ber_skip_element() and ber_peek_element()
2009-08-12 22:14:35 +00:00
Hallvard Furuseth
b0e6e73d1c
ITS#6215 cleanup: Export ber_skip_element() to complement ber_peek_element()
2009-08-12 22:13:50 +00:00
Hallvard Furuseth
3e20bda971
Trying again: No need to maintain ber->ber_usertag except at ber_printf "!"
2009-08-12 22:12:15 +00:00
Howard Chu
a28b346173
Add pwGraceExpiry to gracecheck
...
minor cleanup
revert Other Operations change from 09
filled in IANA considerations (no longer TBD)
Reference RFC4520, not 3383 (obsolete)
2009-08-12 02:43:19 +00:00
Howard Chu
b6d4aa13fb
Revision 02
2009-08-10 02:08:41 +00:00
Howard Chu
c73efa3d57
Revision 01 (expired)
2009-08-10 02:06:46 +00:00
Howard Chu
3761a2e3a4
Added version 10
2009-08-10 02:03:50 +00:00
Hallvard Furuseth
791035d93f
Fix last commit: cast strcasecmp unsigned char* to char*
2009-08-07 21:46:25 +00:00
Hallvard Furuseth
3802aa5483
More ITS#6215: Catch malformed elements in ber_get_stringbvl().
...
Do not use ber_<first/next>_element(), which have no error return.
2009-08-07 19:26:11 +00:00
Hallvard Furuseth
bc20500e62
More ITS#6215: Define and use ber_tag_and_rest() and ber_<peek/skip>_element()
2009-08-07 19:15:26 +00:00
Hallvard Furuseth
95fbdcab4e
More ITS#6215: Fix wrong fix in rev 1.121
2009-08-07 16:04:25 +00:00
Howard Chu
e229b7c398
In session_chkhost get the last CN, not the first.
2009-08-07 11:59:42 +00:00
Howard Chu
5b15978248
Give more time for sync after master restart
2009-08-06 22:15:56 +00:00
Pierangelo Masarati
9ebc168a8a
log in case of failure (FIXME: should those logs be at ANY level?)
2009-08-04 23:45:42 +00:00
Pierangelo Masarati
1f33edc08e
use back-config if supported
2009-08-04 23:27:52 +00:00
Howard Chu
9bd09d7b0e
Fully parse undefined substring filters so they can be logged
2009-08-04 22:41:59 +00:00
Hallvard Furuseth
455c49ba3e
Simplify struct bgbvr and ber_get_stringbvl(), preserving behavior.
2009-08-04 21:11:38 +00:00
Pierangelo Masarati
3e2ac1f6c0
improve previous commit
2009-08-04 14:26:40 +00:00
Pierangelo Masarati
38fa7e0621
be liberal in accepting CL (ITS#6241)
2009-08-04 14:14:17 +00:00
Howard Chu
50688c960c
In slap_mods_check, always compare ordering index first
2009-08-04 02:42:20 +00:00
Pierangelo Masarati
f2e1b78391
silence warnings; misc cleanup; test refresh as non-allowed user
2009-08-03 22:49:30 +00:00
Pierangelo Masarati
20371c3eae
note about OpenSSL being more liberal than OpenLDAP when there is garbage past the end of a certificateList
2009-08-03 14:07:49 +00:00
Pierangelo Masarati
8fc79e1116
rework common options (ITS#6049)
2009-08-03 13:40:28 +00:00
Pierangelo Masarati
e153f41e90
add entry_dup_to(); use it to address ITS#6172 (thanks to Michael Karcher)
2009-08-03 13:18:05 +00:00
Pierangelo Masarati
5139241ade
blind fix to ITS#6163
2009-08-03 13:08:22 +00:00
Pierangelo Masarati
a1ed732822
count query answerability; allow configuration of private database
2009-08-02 22:00:01 +00:00
Howard Chu
dd88fdbcc3
ITS#6152 add olcProxyCacheOffline for manually toggling cache expiration,
...
assume some external process will tell us when network is on/offline
2009-08-02 01:20:03 +00:00
Howard Chu
076c1d23cf
Fix attributeCertificateValidate
2009-08-01 01:11:15 +00:00
Howard Chu
e8d95fa072
Fix certificateListValidate parsing of CRL extensions
2009-08-01 00:39:41 +00:00
Howard Chu
d479db53e0
Minor cleanup
2009-07-31 03:26:03 +00:00
Howard Chu
403ee0b62e
Fix, reqcert == ALLOW should ignore cert verification failures
2009-07-31 01:51:34 +00:00
Howard Chu
3f2101198b
ITS#6239 use our own hostname checking for MozNSS
2009-07-31 01:32:51 +00:00
Hallvard Furuseth
02e165258c
Might help ITS#6145: change while to do-while, to make visible that the
...
loop saving malloced data is run at least once.
2009-07-31 00:05:32 +00:00
Howard Chu
d4f2a06887
Check for CN length match as well in chkhost
2009-07-30 21:52:09 +00:00
Hallvard Furuseth
f6c10270d9
Move common Log*() macro code to new macros LogExpand()/LogArg
2009-07-30 21:45:10 +00:00
Hallvard Furuseth
ef0163c198
Fix last commit: C90 rejects declaration after code
2009-07-30 15:34:42 +00:00
Hallvard Furuseth
19b8065922
More ITS#6215: Fix va_arg integer types for ber_scanf "bei" & ber_printf "BX"
2009-07-29 23:03:10 +00:00
Hallvard Furuseth
8b3bb91e93
More ITS#6215: Fix ber_scanf(,"mMvVW",) cleanup on error:
...
Parse args correctly and free up memory.
Also set some lengths=0 and remove unneeded ptr==NULL tests before frees.
2009-07-29 22:38:19 +00:00
Hallvard Furuseth
886520f193
More ITS#6215: Free data to the memory context used to allocate it
2009-07-29 22:10:45 +00:00
Hallvard Furuseth
b6bad3e995
More ITS#6215:
...
Reject indefinite-length format in ber_skip_tag(). localize *len.
Reject broken and too large bitstrings in ber_get_bitstringa().
Simplify a number of functions somewhat - no functionality changes.
Remove unnecessary tests and ber_tag updates after ber_skip_tag().
2009-07-29 21:47:54 +00:00
