Pierangelo Masarati
5bfb9fd590
make authz mode selection fully manual, plus more cleanup
2004-06-20 22:42:36 +00:00
Pierangelo Masarati
f34b11760a
allow a hidden parameter to instruct the proxy that the SASL mech can do native authz; will disappear as soon as I can detect it automnatically
2004-06-19 18:18:26 +00:00
Pierangelo Masarati
e6065fb20d
li->be didn't work; since it seems to be unnecessary, it's been removed; please check
2004-06-19 15:16:51 +00:00
Pierangelo Masarati
a18e199e0d
more on identity assertion
2004-05-22 17:26:02 +00:00
Pierangelo Masarati
cdebc4d376
more on idassert: SASL bind/authz
2004-05-15 10:11:10 +00:00
Pierangelo Masarati
8b954144d6
reflect Kurt's comments on ID assertion
2004-05-14 10:01:22 +00:00
Pierangelo Masarati
66ddf62922
add idassert code (undocumented yet)
2004-05-13 20:25:53 +00:00
Pierangelo Masarati
6a1dd9a1cd
exploit new frontend API 2 protocol error mapping; use urldesc...
2004-04-05 17:36:53 +00:00
Pierangelo Masarati
fa3baaeae9
overlays reworking
2004-03-18 18:59:46 +00:00
Kurt Zeilenga
3c598e89fb
Happy new year
2004-01-01 19:15:16 +00:00
Pierangelo Masarati
529a03df53
use dedicated admin identity to proxyAuthz
2003-12-13 10:57:42 +00:00
Kurt Zeilenga
fbba83b20f
notices and acknowledgements
2003-12-08 17:41:40 +00:00
Pierangelo Masarati
cdb11fc5eb
add administrative bind and proxyAuthz control to enable bound operations in distributed directories (need to manually #define LDAP_BACK_PROXY_AUTHZ and patches from ITS#2851 and ITS#2852)
2003-12-01 08:04:51 +00:00
Kurt Zeilenga
a3d8cda201
notices and acknowledges
2003-11-27 06:35:14 +00:00
Howard Chu
09d05a57c2
More overlay tweaks. Added LDAP chaining overlay.
2003-06-11 04:36:35 +00:00
Howard Chu
423ad06fa6
Revert previous, committed by mistake
2003-04-11 04:28:26 +00:00
Howard Chu
ece7452b05
More memory context tweaks
2003-04-11 01:29:28 +00:00
Pierangelo Masarati
eed02aea22
need a second function because of different free() routines
2003-04-07 17:51:42 +00:00
Pierangelo Masarati
93abccdee3
group rewrite/map stuff in one structure and optimize more function calls
2003-04-07 16:52:59 +00:00
Pierangelo Masarati
77c4389f55
use rewrite info instead of ldapinfo for reusability in back-meta; will change soon
2003-04-07 12:53:00 +00:00
Howard Chu
68c5f6fa98
Cleanup ENABLE_REWRITE ifdefs, put into a new ldap_back_dn_massage().
...
All DN attrs are massaged, whether or not ENABLE_REWRITE is defined.
Use "dnAttr" rewriteContext for Add, Compare, & Modify.
Fixed ldap_back_compare.
2003-04-07 10:15:18 +00:00
Pierangelo Masarati
1ce560383a
map attrs improvement
2003-04-05 16:53:29 +00:00
Pierangelo Masarati
ab3ab80ecd
more args elimination + allow specific messages when mapping client API errors to LDAP_OTHER
2003-04-04 22:20:49 +00:00
Pierangelo Masarati
172e93bfc9
normalize values only if required
2003-04-04 11:03:29 +00:00
Pierangelo Masarati
dfbbd11bd3
remove more unnecessary args
2003-04-04 00:43:40 +00:00
Pierangelo Masarati
ebe0bb0b52
trim unnecessary args
2003-04-03 23:23:56 +00:00
Pierangelo Masarati
17e46d8468
cleanup and fixes
2003-04-03 21:35:27 +00:00
Howard Chu
e8c58b4e7f
Major API change - (SLAP_OP_BLOCKS) All request parameters are
...
consolidated into the Operation structure. All reply parameters
are consolidated into the new SlapReply structure. Most operations
now have identical call signatures... Changes are not #ifdef'd,
revert to -r NO_SLAP_OP_BLOCKS if necessary to back out.
2003-03-30 09:03:54 +00:00
Howard Chu
99950e4fe4
Deleted BackendInfo->bi_acl_attribute, bi_acl_group.
...
Replaced with bi_entry_get_rw.
Implemented for back-bdb, back-ldbm, back-ldap.
2003-03-26 11:50:03 +00:00
Pierangelo Masarati
bf35f8e37f
improved filter mapping/rewrite; improved result rewriting; improved attribute/objectclass mapping configuration
2003-03-01 11:08:53 +00:00
Howard Chu
9f0598034e
Fix do/don't send result logic
2003-02-19 00:01:22 +00:00
Howard Chu
532eea87c9
Added passwd_exop, added matchedDN rewrite for results.
2003-02-16 09:22:44 +00:00
Howard Chu
0b6772492f
Use extended async APIs to allow direct parsing of results. Otherwise
...
they will be interleaved in LDAP*. Avoid setting any options on the handle.
2003-02-14 05:23:45 +00:00
Howard Chu
202cf8af75
Implemented connection pooling. Requires libldap_r to allow multiple threads
...
to access the same LDAP* handle.
2003-02-13 23:29:56 +00:00
Pierangelo Masarati
45f4e3602b
clean up mapping api
2003-01-27 16:39:56 +00:00
Kurt Zeilenga
6939c53170
Happy new year
2003-01-03 20:20:47 +00:00
Hallvard Furuseth
2bcb48361d
Remove casts of AVL function pointers.
2002-12-14 22:25:52 +00:00
Pierangelo Masarati
c1edf76e20
use BerVarray for suffix_massaging stuff
2002-05-01 17:45:03 +00:00
Pierangelo Masarati
6feec86e5d
- trim check for real naming context already defined as suffix
...
- improve automatic massaging (prettify once)
- add (optimistic) automatic filter massaging
- cleanup of massaging stuff
2002-05-01 11:41:57 +00:00
Howard Chu
c7262c7599
Added rebind-as-user option; saves bind credentials and sets a rebind_proc
...
to allow chasing referrals using the same user's credentials.
2002-04-25 02:05:34 +00:00
Howard Chu
ac1332cdb8
Renamed BVarray to BerVarray. Moved slapd:bvarray_{add,free} to
...
liblber:ber_bvarray_{add,free}.
2002-01-14 01:43:17 +00:00
Howard Chu
225fa32d8f
BVarray fixes for ldap_dnattr_rewrite
2002-01-05 11:41:23 +00:00
Kurt Zeilenga
0e2af54a3f
Update copyright statements
2002-01-04 21:17:25 +00:00
Pierangelo Masarati
bd535be5cb
hide mapping initialization
2002-01-04 17:51:20 +00:00
Howard Chu
f52cc9bab5
Change struct berval ** to BVarray
2002-01-02 11:00:36 +00:00
Howard Chu
743c402265
Changed search attrs from struct berval ** to AttributeName *
2001-12-31 11:35:52 +00:00
Howard Chu
6b413395fd
More struct beral conversion
2001-12-28 04:20:08 +00:00
Howard Chu
d00fe773ae
Fix attrs handling
2001-12-26 09:19:57 +00:00
Pierangelo Masarati
74fa239a20
This is the commit of:
...
- librewrite, for string rewriting; it may be used in back-ldap
by configuring with '--enable-rewrite'. It must be used in
back-meta. There's a text file, 'libraries/librewrite/RATIONALE',
that explains the usage and the features. More comprehensive
documentation will follow.
- enhancements of back-ldap (ITS#989,ITS#998,ITS#1002,ITS#1054 and ITS#1137)
including dn rewriting, a fix to group acl matching and so
- back-meta: a new backend that proxies a set of remote servers
by spawning queries. It uses portions of back-ldap and the rewrite
capabilities of librewrite. It can be compiled by configuring
with `--enable-ldap --enable-rewrite --enable-meta'.
There's a text file, 'servers/slapd/back-meta/Documentation', that
describes the main features and config statements.
Note: someone (Kurt?) should run 'autoconf' and commit 'configure' as
my autoconf version must be different: my configures contain a number
of differences and I didn't feel comfortable in adding them :)
2001-05-12 00:51:28 +00:00
Mark Valence
6e6118c6cc
attribute & objectclass mapping rules
2001-02-19 19:14:12 +00:00
