Pierangelo Masarati
0b4c7e0181
added new logging to back-meta
2001-05-13 23:44:22 +00:00
Pierangelo Masarati
00dfed1d0e
cleanup of the tests in back-meta/data; after build, run "setup.sh"
...
in back-meta/data and follow instructions.
minor update of "Changes" and "TODO".
2001-05-13 17:58:03 +00:00
Kurt Zeilenga
0445405299
if continuation line starts with a tab, rewrite it to a space
2001-05-12 18:43:06 +00:00
Pierangelo Masarati
74fa239a20
This is the commit of:
...
- librewrite, for string rewriting; it may be used in back-ldap
by configuring with '--enable-rewrite'. It must be used in
back-meta. There's a text file, 'libraries/librewrite/RATIONALE',
that explains the usage and the features. More comprehensive
documentation will follow.
- enhancements of back-ldap (ITS#989,ITS#998,ITS#1002,ITS#1054 and ITS#1137)
including dn rewriting, a fix to group acl matching and so
- back-meta: a new backend that proxies a set of remote servers
by spawning queries. It uses portions of back-ldap and the rewrite
capabilities of librewrite. It can be compiled by configuring
with `--enable-ldap --enable-rewrite --enable-meta'.
There's a text file, 'servers/slapd/back-meta/Documentation', that
describes the main features and config statements.
Note: someone (Kurt?) should run 'autoconf' and commit 'configure' as
my autoconf version must be different: my configures contain a number
of differences and I didn't feel comfortable in adding them :)
2001-05-12 00:51:28 +00:00
Gary Williams
cabeec26d4
fix debug line (ITS 1145)
2001-05-11 20:19:16 +00:00
Kurt Zeilenga
cf2cb85fab
Clean up logging
2001-05-10 17:40:12 +00:00
Kurt Zeilenga
af2ab5f0a5
Make sure we yield() on a failed accept()
2001-05-10 17:39:10 +00:00
Kurt Zeilenga
4baa7c47da
Add better modlist2mod error reporting (to client)
2001-05-10 03:41:17 +00:00
Kurt Zeilenga
f48cb50f12
Zap presentation address match define
2001-05-09 23:43:06 +00:00
Kurt Zeilenga
24ea49810f
Clean up some #ifdefs
2001-05-09 23:42:49 +00:00
Kurt Zeilenga
d523048634
Fix have inet_ntop bug
2001-05-09 23:41:16 +00:00
Kurt Zeilenga
b57bc8b35b
Note that misc is experimental
2001-05-09 04:17:55 +00:00
Kurt Zeilenga
5f7bf65deb
Add ITS#876 nisSchema
2001-05-09 04:16:47 +00:00
Kurt Zeilenga
a8e3501a11
Update copyright
2001-05-08 02:06:33 +00:00
Kurt Zeilenga
9617b89374
Add DESC to various schema elements
2001-05-08 02:03:44 +00:00
Kurt Zeilenga
60c5e77cd6
Fix disconnect bug
2001-05-06 20:01:18 +00:00
Kurt Zeilenga
4055077607
Add simple configure support for sockbuf max incoming
2001-05-05 07:29:21 +00:00
Kurt Zeilenga
be26f1a9f7
Fix typos
2001-05-04 22:50:51 +00:00
Kurt Zeilenga
abce5abf34
Quick sb_max_incoming hack, should be configurable (likely
...
with differing anonymous vs authenticated values).
2001-05-04 21:55:07 +00:00
Kurt Zeilenga
aa983f343e
Clean up entry_free()
...
assert of e_private was not freed by caller
2001-05-04 01:02:36 +00:00
Kurt Zeilenga
383391b460
detect and use fcntl (for BSD/OS)
...
detect inet_ntop (for MacOSX)
2001-05-03 05:53:34 +00:00
Kurt Zeilenga
508890e75b
Add telephone number indexing support (reuse only)
2001-05-03 00:59:47 +00:00
Kurt Zeilenga
87dc3e2091
Use SMD5 is SHA1 is not available
2001-05-02 19:46:30 +00:00
Kurt Zeilenga
3310663d02
RANDFILE directives
2001-05-02 19:46:01 +00:00
Kurt Zeilenga
3fdbff6923
SLP updates
2001-05-02 19:44:21 +00:00
Kurt Zeilenga
66aa425d92
Be a bit more liberal
2001-05-02 19:43:38 +00:00
Kurt Zeilenga
2133318df7
Fix LDIF bug
2001-05-02 19:41:57 +00:00
Kurt Zeilenga
f8b4ed8afb
Fix secprops mimic'ing
2001-05-02 19:41:27 +00:00
Kurt Zeilenga
a045117bf2
fix typo in comment
2001-04-21 01:32:03 +00:00
Kurt Zeilenga
1eb0170482
s/<anonymous>/cn=anonymous/ to avoid syntax issues
2001-04-19 19:29:38 +00:00
Kurt Zeilenga
da0e6d3d98
Previously added modrdn restriction to restrictive. Need to
...
check newSuperior.
2001-04-19 19:29:00 +00:00
Kurt Zeilenga
c2c7ccc228
Disallow anonymous modification.
2001-04-19 19:28:15 +00:00
Kurt Zeilenga
7537abfb06
Fix referral handling bug
2001-04-12 23:02:20 +00:00
Gary Williams
a26612bc00
fix for select_backend suggested G. Gombas (ITS 1090)
2001-03-27 15:04:06 +00:00
Kurt Zeilenga
20690a532e
Fix typo
2001-03-17 17:43:36 +00:00
Kurt Zeilenga
a5ea7aefd6
Add name and uid support to dnaddr
2001-03-15 04:48:29 +00:00
Kurt Zeilenga
fd41a199c0
Make sure we have a separator when doing suffix matching
2001-03-15 03:05:33 +00:00
Kurt Zeilenga
9f8a0e7d1b
Normalize DN
2001-03-15 03:04:51 +00:00
Kurt Zeilenga
efaab64b69
Normalized user DN
2001-03-15 03:03:01 +00:00
Kurt Zeilenga
5eaa8fc85f
Fix error text bugs
2001-03-15 03:02:23 +00:00
Kurt Zeilenga
e0e0b255f7
Fix typo in $SRCS
2001-03-15 03:01:54 +00:00
Kurt Zeilenga
339a1504d6
Fix syntax/matching-rules for ref and labeledURI
2001-03-15 03:00:52 +00:00
Mark Valence
4b87d9c7d2
Fixed bug (my own, rather old too) that causes a crash on exit when ru
...
n as a service on NT.
2001-03-11 05:13:57 +00:00
Gary Williams
80ab3d6a6e
fix logging line
2001-03-02 14:17:01 +00:00
Mark Valence
2c677743ad
bug fix
2001-02-20 16:08:14 +00:00
Mark Valence
95bc47ce79
fix mistype.
2001-02-20 16:07:05 +00:00
Mark Valence
6e6118c6cc
attribute & objectclass mapping rules
2001-02-19 19:14:12 +00:00
Mark Valence
efcb4533be
Fixed aci syntax validation to use UTF (aci attrs can have dn's)
2001-02-19 19:06:21 +00:00
Gary Williams
9cf6ee8ccd
fix acl log line
2001-02-08 13:21:20 +00:00
Gary Williams
8ac7efd02d
Add some logging for bad attributes
2001-02-06 16:06:38 +00:00
Kurt Zeilenga
0fc62be316
Rework security restrictions for SASL bind
2001-02-03 03:17:22 +00:00
Kurt Zeilenga
f9a302b1f6
Revamp last commit
2001-02-03 02:32:14 +00:00
Kurt Zeilenga
8091aedc76
Add security checks to root DSE searches.
...
Fix checking of require statements.
2001-02-03 02:21:37 +00:00
Gary Williams
7c53c9ba1c
fix windows-specific logging line
2001-02-02 14:49:35 +00:00
Gary Williams
7cf56432be
small changes to logging
2001-02-02 13:50:16 +00:00
Gary Williams
e565505f21
fix logging macros (thanks Mei)
2001-02-02 13:49:26 +00:00
Stig Venaas
ac95c255a8
Using UTF8normcmp() from lunicode, removing our own UTF8casecmp()
2001-01-31 15:58:00 +00:00
Stig Venaas
a8b77998f5
Made caseIgnoreIndexer(), caseIgnoreFilter(),
...
caseIgnoreSubstringsIndexer(), caseIgnoreSubstringsFilter(),
caseExactIndexer(), caseExactFilter(), caseExactSubstringsIndexer() and
caseExactSubstringsFilter() use UTF8normalize
2001-01-26 15:56:29 +00:00
Stig Venaas
b92bceed2a
Now loading all UCDATA files
2001-01-26 14:33:09 +00:00
Stig Venaas
b371357c13
Made dnNormalize() do Unicode normalization and case folding.
...
dn_normalize() now uses dnNormalize() and fails if normalized string is
longer than original string.
2001-01-25 16:51:59 +00:00
Kurt Zeilenga
d717d9c897
Add DNS SRV to error text
2001-01-24 17:25:30 +00:00
Stig Venaas
13e628bcf4
Load UCDATA composition data
2001-01-24 15:31:53 +00:00
Kurt Zeilenga
fa21f7fe86
Fix IP= port numbers
2001-01-24 00:08:15 +00:00
Mark Adamson
68ab73a0f5
Make sure the variable used for SASL REALM is initialized, in case of no REALM.
2001-01-23 19:18:03 +00:00
Kurt Zeilenga
65cdfa68f0
Fix more typos
2001-01-22 22:03:44 +00:00
Kurt Zeilenga
a4f37d6303
Fix typo
2001-01-22 21:10:54 +00:00
Kurt Zeilenga
10730ca226
Add objectClass kind checking
...
Kludge NADF schema to conform
2001-01-22 08:09:25 +00:00
Kurt Zeilenga
a93a15d9fc
Add copyright notices
2001-01-20 17:49:05 +00:00
Kurt Zeilenga
b849a6ec78
Add default to default option
2001-01-20 01:15:44 +00:00
Howard Chu
4703fe82b2
Pierangelo Masarati's bugfixes and enhancements for suffix-massaging.
...
See the Changes file for detailed description.
2001-01-19 21:27:20 +00:00
Kurt Zeilenga
28d1dbd8ac
Add "sasl-external-x509dn-convert" configuration option aimed
...
at providing authid TLS/X.509 to LDAP DN mapping. Experimental.
2001-01-19 00:47:32 +00:00
Kurt Zeilenga
1302713f09
Fix SASL_REALM bug
...
Minor cleanup of logging code, variable scope
2001-01-19 00:01:25 +00:00
Mark Adamson
6b4ec38178
Change the SASL DN's from cn=authzid to cn=auth
2001-01-18 20:05:15 +00:00
Gary Williams
84658f8a11
add new logging
2001-01-17 21:12:54 +00:00
Kurt Zeilenga
79d9ab38ba
Add more restrictive numeric string validate.
...
Need to rework IA5 matching to support empty strings as they should
be allowed for most string types (excepting directoryString).
2001-01-17 21:02:11 +00:00
Gary Williams
3281138bcf
fix format for new logging
2001-01-17 17:01:19 +00:00
Gary Williams
f49fd8a98e
fix format
2001-01-17 16:35:53 +00:00
Kurt Zeilenga
c55a82baa2
Mark as "altered version"
2001-01-17 07:09:22 +00:00
Kurt Zeilenga
06d63200e4
ITS#919: fix str2ad initialization bug
2001-01-17 06:32:26 +00:00
Kurt Zeilenga
a5377f6c5e
Use consistent spelling of objectClass
2001-01-17 02:51:05 +00:00
Kurt Zeilenga
abb0797358
Move optimistic ret setting
2001-01-17 02:48:55 +00:00
Kurt Zeilenga
8a22a0e0d0
SLP extension derived from patch provided by Caldera Systems.
...
Copyright 2000, Caldera Systems, Inc All rights reserved.
This software is not subject to any license of Caldera Systems, Inc
This is free software; you can redistribute and use it
under the same terms as OpenLDAP itself
2001-01-16 22:18:33 +00:00
Kurt Zeilenga
2a7036e5b0
ITS#963: Multimaster patch
2001-01-16 06:49:49 +00:00
Gary Williams
ffcdc6d11d
More new logging (Behind NEW_LOGGING)
2001-01-15 19:17:29 +00:00
Gary Williams
d531a20f52
more new logging (finally), behind NEW_LOGGING
2001-01-11 17:11:23 +00:00
Kurt Zeilenga
2ae02fc19b
Treat unrecognized object classes as an objecdt class violation (per X.511)
2001-01-10 19:00:47 +00:00
Kurt Zeilenga
6d0479b2a6
ITS#955: update cosine schema based upon X.500 recommendations
2001-01-10 18:59:54 +00:00
Stig Venaas
43015fc862
Allow changing rdn only, locked parent twice when old and new parent were
...
the same.
2001-01-09 15:49:44 +00:00
Kurt Zeilenga
778e5e9bb6
ITS#941: back-passwd levels fix from nick@debian.org
2000-12-28 02:27:13 +00:00
Mark Adamson
466ff113e1
ITS#897, internal connections need to free their single operation struct.
2000-12-08 22:34:22 +00:00
Mark Adamson
2231d5e64e
Make SASL authorization work for NULL, "u:", and "dn:" authz strings.
2000-11-30 22:00:15 +00:00
Kurt Zeilenga
fc630ea1f8
Unbind should not return a result
2000-11-30 20:27:27 +00:00
Kurt Zeilenga
04e2da58ed
ITS#895: gai_strerror fix
2000-11-24 05:30:52 +00:00
Kurt Zeilenga
8befe70f3f
ITS#900: Fix waitpid == 0 bug
2000-11-21 21:59:35 +00:00
Howard Chu
e2ff92c6fc
Set outbound connection to use the same protocol version as the inbound.
2000-11-11 03:01:00 +00:00
Kurt Zeilenga
fcd432ffbd
empty OID values are invalid
2000-11-10 23:07:20 +00:00
Stig Venaas
b44cc963c2
Improved ucdata loading error handling
2000-11-09 12:39:18 +00:00
Kurt Zeilenga
ba37cbc233
Fix passwd clearing bug
2000-11-06 15:53:02 +00:00
Kurt Zeilenga
00b77ca088
Postal Address should be treated like directoryString
2000-11-04 21:11:52 +00:00
Kurt Zeilenga
451146f795
Update validation of printable-like syntaxes
2000-11-04 21:09:23 +00:00
Kurt Zeilenga
064abee2c8
highlite ;binary comments with SMIME attributes
2000-11-04 20:32:19 +00:00
Kurt Zeilenga
17bcb2b3bb
Update printableString to restrict characters per RFC1778 not isprint()
2000-11-04 20:31:50 +00:00
Dmitry Kovalev
a9b601290b
Add 'distinct' to sql search query to prevent duplicate entries in results (suggested by Mathieu Guillaume)
2000-11-04 12:52:06 +00:00
Mark Adamson
caf384a37c
Improve handling of initials in approximate search strings.
2000-11-03 16:16:27 +00:00
Kurt Zeilenga
e138a74d48
subtype should inherit approximate matching rule
2000-11-02 21:49:03 +00:00
Dmitry Kovalev
c77bd543bc
fix even more stupid thing with the same issue ;)
2000-11-02 16:29:57 +00:00
Dmitry Kovalev
46a10706f5
fix _stupid_ thing with toupper -> ldap_pvt_str2upper
2000-11-02 13:18:45 +00:00
Stig Venaas
87e58fb031
Changed ucdata loading, all is done in config.c. Tried to make ucdata load
...
when found in config file, or before first call to dn_normalize/dn_validate
2000-11-02 10:10:36 +00:00
Dmitry Kovalev
6d94ecd1b0
fix ITS #855 (back-sql crashes with malformed filters),
...
also extend bind() to something less trivial (to support SIMPLE_AUTH mode)
2000-10-30 20:36:29 +00:00
Kurt Zeilenga
5935a11c8e
Set UTF8DN by default
2000-10-30 20:05:41 +00:00
Stig Venaas
a8985a440b
Use the macro UTF8DN to set whether new UTF8 dn_normalize() code should
...
be used.
2000-10-30 20:00:56 +00:00
Stig Venaas
fdbd1ded93
Short term dn_normalize() fix. Uppercases all UTF8 characters as long
...
as the character byte length is preserved. Change #if 1 to use.
2000-10-28 23:38:14 +00:00
Dmitry Kovalev
4411e0aa17
fix case-insensitive matching
...
+
documentation cleanup & update
2000-10-25 21:23:04 +00:00
Gary Williams
a0b93ce648
initialize new logging routines (behind NEW_LOGGING)
2000-10-25 16:50:45 +00:00
Gary Williams
d65bf04894
add logfile directive to config (behind NEW_LOGGING)
2000-10-25 16:49:23 +00:00
Kurt Zeilenga
9117cbd488
Fix another #if 0 v UTF8MATCH bug
2000-10-25 01:32:35 +00:00
Kurt Zeilenga
b065d8e01b
Missed on #if 0 to #if UTF8MATCH is last commit
...
Also, enable UTF8MATCH... this is devel!
2000-10-24 22:25:41 +00:00
Kurt Zeilenga
7d2d2d6583
UTF8 aware caseIgnore matching
...
---
Copyright 2000 Stig Venaas, UNINETT
All rights reserved.
Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice is
preserved. The name of UNINETT may not be used to endorse or promote
products derived from this software without specific prior written
permission. This software is provided ``as is'' without express or
implied warranty.
2000-10-24 22:23:30 +00:00
Mark Adamson
c165d93ecd
Implement 2 approximate matching algorithms.
2000-10-24 20:25:37 +00:00
Kurt Zeilenga
52402fa752
Fix register_syntax argument names
2000-10-23 18:02:48 +00:00
Howard Chu
99c88eace1
Fix: remap API error codes into protocol error codes before sending
...
back to client.
2000-10-23 13:32:14 +00:00
Kurt Zeilenga
dbdba34972
First-cut at manageDSAit-aware backend selection.
2000-10-21 03:29:02 +00:00
Kurt Zeilenga
38cf4a1d82
Add better space compression
2000-10-21 03:27:41 +00:00
Gary Williams
696de70df4
fix lutil_set_debug_level call
2000-10-20 14:46:33 +00:00
Kurt Zeilenga
9e7accb034
This patch replaces gai_strerror with AC_GAI_STRERROR in daemon.c and also
...
uses AC_GAI_STRERROR to report getaddrinfo failures in os-ip.c
-- Stig Venass
2000-10-19 18:05:11 +00:00
Kurt Zeilenga
5630665e27
quick hack to support holding of the root naming context
2000-10-18 19:29:40 +00:00
Kurt Zeilenga
2dbd6c6d0e
remove lint
2000-10-18 00:35:09 +00:00
Gary Williams
aacd6e78f4
convert text level to int
2000-10-17 19:42:24 +00:00
Kurt Zeilenga
a865220fd8
Bump listeners to 10
2000-10-17 06:36:22 +00:00
Kurt Zeilenga
d30264a2a1
Trim unimplemented syntaxes and matching rules from subschema subentry
2000-10-16 23:47:46 +00:00
Kurt Zeilenga
1fb923e6e2
Replace last commit with Stig's improved version
2000-10-16 21:45:35 +00:00
Kurt Zeilenga
820965a412
ITS#839: getaddrinfo portability fix from Gabar Gombas
2000-10-16 20:32:39 +00:00
Kurt Zeilenga
fc227a8816
Remove cpp lint
2000-10-16 20:04:42 +00:00
Kurt Zeilenga
e414303e10
Make sure openldap-slurp is created 700
2000-10-16 16:43:42 +00:00
Julio Sánchez Fernández
336f054d05
Extend MRA. It now has a pointer to a MatchingRule, but a char
...
pointer is kept for messages and to tell a filter without rule
from one with an unknown rule. It matters.
Fix a couple of bugs in debug output.
2000-10-15 19:12:21 +00:00
Julio Sánchez Fernández
5b52ae5109
Extend MRA. It now has a pointer to a MatchingRule, but a char
...
pointer is kept for messages and to tell a filter without rule
from one with an unknown rule. It matters.
2000-10-15 19:10:43 +00:00
Julio Sánchez Fernández
18b6b866e2
Better parsing.
2000-10-14 18:36:13 +00:00
Kurt Zeilenga
62a588bd05
Correct SMIME comment
...
move pilot.schema to the Attic
2000-10-14 01:42:49 +00:00
Kurt Zeilenga
e30826ea36
Per IETF LDAPext discussions, ;binary transfer of binary syntax
...
makes little sense. Implementations should not require or by
default return ;binary for attributes of this syntax. This means
inetOrgPerson needs updating. This means Netscape roaming doesn't.
2000-10-14 01:37:48 +00:00
Kurt Zeilenga
82e7b2e049
label io as "ldap_"
2000-10-14 00:12:39 +00:00
Julio Sánchez Fernández
7444e727c9
Add mra.o to linked objects
2000-10-13 20:43:32 +00:00
Julio Sánchez Fernández
ff72b73fe3
Protos for extensible matching rules
2000-10-13 20:41:23 +00:00
Julio Sánchez Fernández
d4b63dd3e3
The beginning of extensible matches. Do not use.
2000-10-13 20:39:36 +00:00
Julio Sánchez Fernández
c317a093c4
Let slapd at least start and do things. Someone should really have
...
a look at this. Do we need to add something to every program so
that levelArray is at least initialized?
2000-10-13 20:24:49 +00:00
Kurt Zeilenga
2b2ee1ccbd
Return authMethodNotSupported not authUnknown for unknown
...
bind authentication method
2000-10-13 05:28:23 +00:00
Kurt Zeilenga
f7e9842160
Remove "defaultaccess" option. No longer needed as without
...
ACLs, the only sane and useful option is "read".
2000-10-13 04:45:24 +00:00
Howard Chu
004f4f3260
Fix TLSVerifyClient. Applied in wrong branch before.
2000-10-13 00:54:05 +00:00
Kurt Zeilenga
16fcdec8df
Import Stig reorganized daemon.c + style changes
2000-10-12 21:59:08 +00:00
Gary Williams
b9837286db
example of new logging use
2000-10-12 20:12:28 +00:00
Gary Williams
bbc0ac00b2
get new debug configuration
2000-10-12 20:11:49 +00:00