Kurt Zeilenga
c43fec53f5
Cyrus SASL uses screwy terms.
2000-03-14 03:08:46 +00:00
Kurt Zeilenga
5701fec1b5
correct callback numbering
2000-03-14 02:59:53 +00:00
Kurt Zeilenga
17527368d1
work args of ldap_negotiated_sasl_bind_s() and provide examples
...
with authentication id and authorization ids. Note: this routine
doesn't actually negotiate anything. It likely should be renamed
ldap_sasl_auth_s() or ldap_sasl_bind_multistep() or something.
2000-03-14 02:54:08 +00:00
Kurt Zeilenga
db662b516f
Fix NT builds and remove lint
2000-03-13 19:30:14 +00:00
Julio Sánchez Fernández
50dafec453
Fixed an irritating problem with nss_ldap and pam_ldap. Since these
...
modules are dynamically loaded, they summon libldap when needed.
However, depending on the security libraries available when the
shared libldap was built, the latter brings up other dependencies.
On some platforms, it seems that no solution is available: no
indirect dynamic dependencies. But for some platforms where this
is supported (in particular, Linux), the shared libldap must
contain info on what other dynamic libraries it needs. We were
failing to put this info into the shared library. This patch
seems to fix it.
2000-03-13 17:55:41 +00:00
Julio Sánchez Fernández
b9fb4c442c
Useronly logic was inverted, we were ignoring the whole ldap.conf,
...
except where we should.
2000-03-13 12:31:35 +00:00
Kurt Zeilenga
6e5d2eea4e
Add missing parens so that last commit behaves as desired.
2000-03-10 18:16:22 +00:00
Kurt Zeilenga
5b5b43a9e0
ITS#471: fix handling of delete referrals.
2000-03-08 18:56:22 +00:00
Kurt Zeilenga
655c0bda41
Ignore space in filter: ( !(foo=bar))
2000-02-21 20:57:48 +00:00
Kurt Zeilenga
6cb60f381a
Eliminate second session protocol version field.
2000-02-18 19:57:38 +00:00
Kurt Zeilenga
b8c8f6ef6f
Fix ldap_set_option( NULL, LDAP_OPT_PROTOCOL_VERSION, &v ) as
...
suggested by Steve Sonntag.
2000-02-16 22:59:15 +00:00
Kurt Zeilenga
0dbaf87730
Another round of changes behind -DSLAPD_SCHEMA_NOT_COMPAT
...
plus these changes unhidden changes:
remove now meaning --enable-discreteaci configure option
fix ITS#451, slapd filters
Add ber_bvecadd() to support above
constify ldap_pvt_find_wildcard() and misc slapd routines
renamed some slap.h macros
likely broken something
2000-02-14 20:57:34 +00:00
Kurt Zeilenga
d0d80a633a
Put *free(NULL) asserts behind LDAP_MEMORY_DEBUG
2000-02-11 21:11:44 +00:00
Kurt Zeilenga
2549654bb5
Add comment about leaked on exit values.... we likely should
...
implement an at_exit() handler.
2000-02-02 21:26:36 +00:00
Luke Howard
30522f7437
Changed (!strcmp(...)==0) to (strcmp(...)==0); obviously
...
wrong. Fix from adamson@andrew.cmu.edu .
2000-02-01 23:34:16 +00:00
Kurt Zeilenga
0919e503cd
Use LDAP_CONST, not const, in public function declarations.
2000-02-01 01:11:26 +00:00
Kurt Zeilenga
4eb13130a9
typedef ber_int_t ldap_ucs4_t
2000-01-27 01:04:17 +00:00
Kurt Zeilenga
f3cb97e973
Add utf-8 to MSVC projects and remove lint.
2000-01-25 20:22:17 +00:00
Kurt Zeilenga
ed9969b1c4
Make ldap_utf8_bytes() act like strlen() not sizeof()
2000-01-23 23:33:01 +00:00
Kurt Zeilenga
42cc5e5333
Fix bugs in UTF-8 code. Apply to getdn and charray.
2000-01-23 23:07:24 +00:00
Kurt Zeilenga
61b509d881
Add some robustness to UTF-8 routines.
2000-01-23 18:43:30 +00:00
Kurt Zeilenga
16c903909c
Add comments to UTF-8 declarations.
...
Add US ASCII optimizations macros.
#ifdef out unused routines
Ready to hack getdn.c and others to support UTF-8
2000-01-23 05:35:38 +00:00
Kurt Zeilenga
4e0964e8b4
Add comments.
2000-01-23 02:39:55 +00:00
Kurt Zeilenga
22ba55371e
Move ldap_utf8_*() declarations from ldap-int.h to ldap_pvt.h.
...
We may likely want to expose the routines at a later date (ldap_utf8.h?).
2000-01-22 21:09:24 +00:00
Kurt Zeilenga
aa934d0666
We'll need ldap_utf8_strpbrk() as well.
2000-01-22 21:03:21 +00:00
Kurt Zeilenga
4e3c4d8c6d
Add initial (untested) implementations of ldap_utf8_strtok,
...
ldap_utf8_strcspn, ldap_utf8_strtok.
2000-01-22 20:55:43 +00:00
Kurt Zeilenga
3eca68a5d2
Add additional UTF-8 routines
2000-01-22 18:48:37 +00:00
Kurt Zeilenga
14210f5e34
Fix charlen and add getc
2000-01-22 03:40:54 +00:00
Kurt Zeilenga
23afcd5c6e
Initial UTF-8 routines.
2000-01-22 01:55:34 +00:00
Luke Howard
6a06fb7fba
In ldap_pvt_sasl_init() treat subsequent invocations as no-ops, not error.
2000-01-16 01:29:15 +00:00
Howard Chu
80f85e972d
In ldap_pvt_tls_init() treat subsequent invocations as no-ops, not error.
...
In tls_verify_cb() use CRYPTO_free instead of free (necessary on NT due to
use of different heaps).
Changed update_flags to use SSL_get_error() to check success/status. This
fixes the problem of sb->sb_trans_needs_read getting set on dead sockets.
2000-01-15 19:03:16 +00:00
Kurt Zeilenga
9ac0eab126
remove UNSPECIFIED_TLS... HOST implies ldap://
2000-01-14 01:08:15 +00:00
Kurt Zeilenga
6437785a82
Initial implementation of Kerberos password verification for
...
simple bind via:
{KERBEROS}principal
Code is disabled by default (for security reasons). Use
--enable-kpasswd to enable. Behind SLAPD_KPASSWD.
Reworked Kerberos detection and split out KBIND as independent
feature (--disable-kbind) (LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND).
KBIND depends upon detection of KRB4 (or KRB425) support. Detection,
building with eBones (as distributed with FreeBSD 3.4) okay, but
wasn't able to test as I don't have a K4 KDC handy.
--with-kerberos has a number of detection options... most likely
don't work properly.
2000-01-08 18:42:11 +00:00
Luke Howard
5a0bbd7eed
Imported <ldap.h> in <ldap_pvt.h> so ldap_pvt_sasl_bind() has necessary
...
types. Changed const sasl_callback_t * to LDAP_CONST sasl_callback_t *.
2000-01-05 12:56:17 +00:00
Luke Howard
a466a64318
Added support for connecting to LDAP servers located using DNS
...
SRV records. Added lock around resolver library which is shared
by the DNS SRV code and the getdxbyname() code.
2000-01-03 02:33:22 +00:00
Luke Howard
57b62dc7d4
Added ldap_pvt_sasl_bind() prototype to ldap_pvt.h. This
...
required importing sasl.h into ldap_pvt.h, thus that import
was removed from ldap-int.h.
2000-01-03 00:15:30 +00:00
Luke Howard
736b8d0a24
Braced ldap_connect_to_path() in #ifdef LDAP_PF_LOCAL so as to compile
...
without PF_LOCAL support.
2000-01-02 01:56:01 +00:00
Luke Howard
9b4e3b2234
Merged in preliminary support for Cyrus SASL library;
...
support for DCE slash-delimited, left-to-right DNs;
support for a domain socket transport (enable with
--enable-ldapi); and extensions to URL parsing to
support the latter transport.
2000-01-02 01:21:25 +00:00
Howard Chu
d92d403a76
NT requires $(SECURITY_LIBS) at link time.
1999-12-26 00:11:14 +00:00
Kurt Zeilenga
ab7c490960
Add BINDDN user-only directive to .ldaprc
...
Used only for simple bind when dn == NULL and password != NULL.
1999-12-17 03:27:16 +00:00
Kurt Zeilenga
30ffb54064
ITS#399: timelimit/timeout handling
...
ITS#400: LDAP_TIMEOUT handling
1999-12-16 00:41:18 +00:00
Kurt Zeilenga
096dcdc580
Add support for useronly configuration attributes.
1999-12-14 02:26:37 +00:00
Kurt Zeilenga
d331d4c1f3
Remove lint.
1999-12-12 05:07:17 +00:00
Kurt Zeilenga
18fad04e69
Fix == != typo
1999-12-12 05:02:03 +00:00
Kurt Zeilenga
c1a31ac9a2
Fix decoding of sasl bind and extended operation responses.
1999-12-12 03:16:46 +00:00
Mark Valence
7ee49bc676
Fix mem leak in ldap_start_tls(), treat empty host name as localhost when opening a connection.
1999-12-11 03:50:33 +00:00
Mark Valence
c0faf75a90
Unescape host:port when parsing a host list.
1999-12-11 03:46:07 +00:00
Mark Valence
a76c9f18a9
Start TLS extension: check that TLS was inited successfully, return default referral on failure as appropriate.
1999-12-10 19:18:33 +00:00
Mark Valence
e0e7e9842e
client/server controls added to ldap_start_tls().
1999-12-10 18:26:12 +00:00
Mark Valence
268dd9beaf
Condition ldap_start_tls on HAVE_TLS.
1999-12-10 17:18:59 +00:00