Mark Valence
c6ad81bcd2
Fix minor bug in handling group ACLs.
2000-06-21 19:07:56 +00:00
Mark Valence
3a31fead5e
Fixed paren nesting bug, separated convoluted conditionals, added comm
...
ents about the logic.
2000-06-17 18:23:27 +00:00
Mark Valence
638371ebe7
Fix uninitialized variable.
2000-06-17 08:20:44 +00:00
Mark Valence
0c6b9ce2dd
Fix ACI group membership test to look up OC.
2000-06-14 22:17:33 +00:00
Mark Valence
2ee8093f98
Fix ACI group membership test to look up OC.
2000-06-14 22:11:44 +00:00
Mark Valence
0ebf86f2d3
Bug hunting -- hang when checking dnattr in ACL.
2000-06-14 06:08:20 +00:00
Mark Valence
1bfcb4b039
Added .regex, .base, .one, .subtree, and .children "style" modifiers.
2000-06-12 01:35:15 +00:00
Kurt Zeilenga
a56c161bdb
Misc code cleanup.
2000-06-10 22:39:30 +00:00
Kurt Zeilenga
c3f8de76ef
Fix up debug statement as suggested by christian.lorenz@suse.de
2000-06-07 14:07:50 +00:00
Kurt Zeilenga
693fb9424a
unifdef -DSLAPD_SCHEMA_NOT_COMPAT -USLAPD_SCHEMA_COMPAT
2000-06-06 19:43:18 +00:00
Kurt Zeilenga
eb70b602ee
Rework ACI codes to use OpenLDAPaci. Add needed schema elements.
...
Needs work. Volunteers welcomed.
2000-05-30 21:34:55 +00:00
Kurt Zeilenga
e4a7b953f3
SLAPD_SCHEMA_NOT_COMPAT: fix typo
2000-05-29 04:57:31 +00:00
Kurt Zeilenga
bdf9b0d017
SLAPD_SCHEMA_NOT_COMPAT: working ACLs! (have not tested ACIs)
2000-05-29 03:51:26 +00:00
Kurt Zeilenga
9e5312e166
SLAPD_SCHEMA_NOT_COMPAT: ACL cleanup (not yet working)
2000-05-29 03:44:06 +00:00
Kurt Zeilenga
3350957674
SLAPD_SCHEMA_NOT_COMPAT: ACI cleanup
2000-05-28 22:17:34 +00:00
Kurt Zeilenga
439c0c796d
SLAPD_SCHEMA_NOT_COMPAT: Mostly work modify
2000-05-28 16:36:34 +00:00
Kurt Zeilenga
37235b71c0
SLAPD_SCHEMA_NOT_COMPAT: working cn=schema
2000-05-15 23:36:37 +00:00
Kurt Zeilenga
4bc786f34b
Y2k copyright update
2000-05-13 02:47:56 +00:00
Kurt Zeilenga
0c134a72d6
SCHEMA_NOT_COMPAT changes
2000-04-25 13:21:06 +00:00
Kurt Zeilenga
4091381660
Yet another round of SLAPD_SCHEMA_NOT_COMPAT changes, including:
...
limited subtype support, modlist handling, filter updates,
lastmod attribute handling.
2000-02-28 21:16:05 +00:00
Kurt Zeilenga
ceb6412e62
More -DSLAPD_SCHEMA_NOT_COMPAT changes
...
Not hidden: "<anonymous>" modifiersname
2000-02-15 18:57:07 +00:00
Kurt Zeilenga
0dbaf87730
Another round of changes behind -DSLAPD_SCHEMA_NOT_COMPAT
...
plus these changes unhidden changes:
remove now meaning --enable-discreteaci configure option
fix ITS#451, slapd filters
Add ber_bvecadd() to support above
constify ldap_pvt_find_wildcard() and misc slapd routines
renamed some slap.h macros
likely broken something
2000-02-14 20:57:34 +00:00
Kurt Zeilenga
36b0423311
Add Modification/Modifications structures for -DSLAPD_SCHEMA_NOT_COMPAT
2000-02-07 20:37:10 +00:00
Kurt Zeilenga
bc51bd5180
Yet another round of SLAPD_SCHEMA_NOT_COMPAT changes...
...
Changes outside of #ifdef include three value filter processing.
2000-02-06 21:09:44 +00:00
Kurt Zeilenga
9316c4eace
ACI attributes should be of ACI syntax. Need to assign
...
OID for experimental syntax.
2000-02-01 17:53:07 +00:00
Kurt Zeilenga
3a6e906194
Replace -DSLAPD_SCHEMA_COMPAT with -USLAPD_SCHEMA_NOT_COMPAT
2000-01-31 22:14:16 +00:00
Kurt Zeilenga
c5da0c76ce
Additional changes to migrate to new schema codes
...
Still not usable.
2000-01-28 20:01:00 +00:00
Kurt Zeilenga
e9b1012fb1
Put more old schema code behind SLAPD_SCHEMA_COMPAT (which still
...
MUST be defined).
2000-01-28 00:33:29 +00:00
Kurt Zeilenga
434e7229ac
Add code to handle operational attributes via new schema codes
...
behind -USLAPD_SCHEMA_COMPAT.
2000-01-27 19:02:24 +00:00
Kurt Zeilenga
df712b8597
Don't exclude no-user-modification attributes from ACL checks
...
unless access requested is WRITE. This allows you to apply
an ACL to limit search/reading of no-user-modification attributes.
Writes, of course, are always prohibited (by do_add, do_modify).
2000-01-27 18:35:36 +00:00
Mark Valence
d93ef01ac7
Add get_supported_acimech() for use by root_dse, check aci OIDs against supported list.
1999-11-22 18:42:46 +00:00
Mark Valence
23cb3a0555
Added a "dnattr" case for ACIs (still need to check the ACI OID).
1999-11-08 18:50:51 +00:00
Mark Valence
af855ec94b
Updated ACI code to work with new ACL changes. All changes are within the SLAPD_ACI_ENABLED #ifdef's.
1999-11-06 05:05:50 +00:00
Kurt Zeilenga
3fbee54fa5
Remove lint
1999-10-27 04:40:56 +00:00
Kurt Zeilenga
3261f219a3
Add support for Root DSE ACLs.
...
Add "users" shorthand (dn="^.+$")
Add regex short circuiting for common dn regexs.
1999-10-26 03:19:41 +00:00
Kurt Zeilenga
06eb390586
Make accessmask2str reentrant.
1999-10-21 23:19:22 +00:00
Kurt Zeilenga
3d765d6108
Additional changes to improve logic and logging. Still buggy.
1999-10-21 20:29:52 +00:00
Kurt Zeilenga
f6829ee903
Initial commit of new ACL engine. Engine supports descrete access
...
privs, additive/substractive rules, and rule continuation. Existing
rules that use 'defaultaccess none' should be 100% compatible. Rules
that rely other defaultaccess settings will require addition of
explicit clauses granting the access.
Needs additional testing and tuning of logs
1999-10-21 17:53:56 +00:00
Kurt Zeilenga
7a0b0b2bbf
In preparation for adding dn_rewrite()...
...
s/dn_normalize/dn_validate/
s/dn_normalize_case/dn_normalize/
1999-09-24 01:46:37 +00:00
Kurt Zeilenga
ccfba5f2c0
Misc. cleanup
1999-09-16 02:31:29 +00:00
Kurt Zeilenga
403f4479bc
Add OpenLDAP RCSid to *.[ch] in clients, libraries, and servers.
...
Replace old Id as needed (back-tcl).
Leave updating of contribWare to contributors (for now).
1999-09-08 19:06:24 +00:00
Hallvard Furuseth
07b9eb68a3
Kill //-style comments
1999-09-05 20:53:13 +00:00
Hallvard Furuseth
c09a2c63e7
Cleanup:
...
Fix printf formats, remove unused variables, add missing prototypes in slapd,
add static/const, add some return types or change to void return type.
1999-09-02 08:05:17 +00:00
Kurt Zeilenga
87675a953d
ACIs from Mark Valence <kurash@sassafras.com> (ITS#261)
1999-08-20 22:42:04 +00:00
Kurt Zeilenga
9c3ed0310b
Add copyright notices.
1999-08-06 23:07:46 +00:00
Kurt Zeilenga
68d561a97b
Add limited LDAP_INVALID_DN_SYNTAX support. dn_normalize{,_case}() now returns
...
NULL does not meet basic syntax rules.
1999-07-22 17:14:42 +00:00
Kurt Zeilenga
5600097ae1
Update ACL field names and usage statement to match -devel post
1999-07-22 00:50:11 +00:00
Kurt Zeilenga
933908f72f
ACL CHANGES:
...
by <who> <access> changed to by <who>+ <access> (joined with AND)
added peername=<regex> sockname=<regex> url=<regex>
removed addr=<regex> (use peername instead).
replace dn_upcase with str2upper and str2lower. Use where needed.
1999-07-21 20:54:23 +00:00
Kurt Zeilenga
170836751a
Namespace changes
...
added slap_ and ldbm_ to many structures
added typedefs to many structures
used typedefs
New main.c argument parsing with ldap url support (replacing -a address).
New sockaddr_in handling and support for multiple listeners.
1999-07-19 19:40:33 +00:00
Kurt Zeilenga
e9c2895472
Add support for unsolicited notifications.
1999-07-07 18:51:39 +00:00