Howard Chu
9355dca9af
Consolidated slap_callbacks into one function. Removed send_search_result.
2003-04-01 04:12:18 +00:00
Howard Chu
e8c58b4e7f
Major API change - (SLAP_OP_BLOCKS) All request parameters are
...
consolidated into the Operation structure. All reply parameters
are consolidated into the new SlapReply structure. Most operations
now have identical call signatures... Changes are not #ifdef'd,
revert to -r NO_SLAP_OP_BLOCKS if necessary to back out.
2003-03-30 09:03:54 +00:00
Howard Chu
40454ccec8
Added op->o_is_auth_check; use ACL_AUTH instead of ACL_SEARCH/ACL_READ
...
in access_allowed() if flag is set. Set in sasl/saslauth searches.
2003-03-10 22:07:21 +00:00
Howard Chu
9beaa08d79
Fix slap_sasl_authorized, c_authz_backend may be NULL
2003-03-02 00:21:24 +00:00
Howard Chu
979e5073cf
Revert previous kludge in controls.c, use ldap_pvt_thread_pool_context
...
instead if c_sasl_bindop is NULL.
2003-02-16 19:34:29 +00:00
Kurt Zeilenga
8f82e9f772
ITS#2117: remove suffixalias support until someone fixes it
2003-02-09 07:20:03 +00:00
Kurt Zeilenga
5192938964
code cleanup
2003-02-07 19:05:45 +00:00
Luke Howard
dfc7d338a6
Add sendreference callback
2003-02-01 07:04:13 +00:00
Kurt Zeilenga
6939c53170
Happy new year
2003-01-03 20:20:47 +00:00
Howard Chu
4e4818771c
Plug memory leak
2002-12-18 22:44:13 +00:00
Kurt Zeilenga
7be4d566d7
cleanup
2002-12-13 00:18:54 +00:00
Luke Howard
6730080081
Allow the root DN to switch to any authorization identity.
2002-12-05 12:25:16 +00:00
Howard Chu
574090d184
Fix slap_sasl2dn(), performing internal search with wrong op.o_ndn.
2002-12-04 22:37:51 +00:00
Kurt Zeilenga
da76c1951e
First-cut proxy authorization support.
2002-12-03 06:11:32 +00:00
Kurt Zeilenga
ab80b03057
back_attribute() should use ACL_AUTH not ACL_READ (at
...
least for current callers, may need to pass it the
permission level)
2002-09-05 02:37:10 +00:00
Howard Chu
70673417f2
Fix debug statement
2002-08-30 14:28:45 +00:00
Howard Chu
925714ceef
Experimental cruft to propagate valid Operation to SASL callbacks.
...
If you have a better way, jupm on in...
2002-08-24 07:34:50 +00:00
Kurt Zeilenga
3a15afa057
Fix abstract schema check
2002-08-22 02:27:42 +00:00
Howard Chu
505a141c75
Use search callbacks in slap_sasl_checkpass and slap_auxprop_lookup,
...
use ACL_AUTH for acl checks.
2002-08-20 05:32:54 +00:00
Kurt Zeilenga
6e02fe2e8a
Remove #if 0 code
2002-08-16 18:58:39 +00:00
Pierangelo Masarati
3a26ef5bbb
silence warnings
2002-08-16 16:33:22 +00:00
Kurt Zeilenga
e69c9067c2
Fix saslregex init bug
2002-08-07 19:17:22 +00:00
Kurt Zeilenga
428c15d883
Misc clean up of last commit.
...
Still need to fix my devbox so I can test this....
2002-08-05 23:40:08 +00:00
Kurt Zeilenga
119462adfa
Rework saslRegex code (not yet tested)
2002-08-05 23:16:28 +00:00
Kurt Zeilenga
d22612e8db
ITS#1951: saslRegexp limits syntax of regular expressions
...
Don't normalize regex.
Also, s/LDAP_OPERATIONS_ERROR/LDAP_OTHER/
2002-08-01 01:10:55 +00:00
Kurt Zeilenga
eb581e43e7
Fix for:
...
SASL regex segmentation faults with group based acls (ITS#1978)
based, in part, by patch submitted by Simon Wilkinson <simon@sxw.org.uk>.
2002-07-28 07:27:55 +00:00
Kurt Zeilenga
8a3d02bf6b
misc cleanup
2002-07-23 18:35:12 +00:00
Howard Chu
a073e28510
Fix setting c_authz_backend for SASL binds:
...
in slap_sasl2dn, make sure it's set for base DN searches as well.
in do_bind, don't zero it during multi-stage binds.
2002-07-13 00:11:03 +00:00
Julius Enarusai
6107ba67d2
Coverted LDAP_LOG macro to use subsystem ID int values instead of string values
2002-07-11 20:33:24 +00:00
Kurt Zeilenga
cbba11d7cd
saslAuthzTo/From LDUP URLs should have hostnames
2002-06-14 22:03:52 +00:00
Howard Chu
07a34489c6
Added saslAuthzTo and saslAuthzFrom to system schema.
...
Added sasl-authz-policy config keyword to control proxy authorization.
Moved sasl-related config processing to sasl.c:slap_sasl_config().
Moved other global defs used only in saslauthz.c into saslauthz.c.
2002-06-14 08:10:14 +00:00
Kurt Zeilenga
d6e7f0f630
Rework c_authzid_backend in preparation for sasl_setpass() support
2002-06-11 22:56:47 +00:00
Howard Chu
6f47e13147
Cyrus 2 support now requires Cyrus 2.1.3. Adds support for in-directory
...
SASL secrets. (Only works with plaintext userpassword tho.)
2002-05-07 23:08:23 +00:00
Howard Chu
a067d64c3a
Fixes for slap_sasl_regexp parsing and normalization
2002-05-07 18:46:32 +00:00
Howard Chu
56f1355968
Added comment for future reference re: in-directory secrets
2002-05-07 02:17:34 +00:00
Howard Chu
1dea5905c6
More SASL DN simplification. No more "dn:" prefix used anywhere internally.
2002-04-17 07:56:46 +00:00
Kurt Zeilenga
02e8527248
Patch: Escape character troubles (ITS#1753)
...
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
================
maildap could address buf[-1] if len was < 2.
REWRITE_SUBMATCH_ESCAPE is '%', not '\'.
librewrite and saslautz could walk past the end of a string which
ended with an escape character.
Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-15 18:29:39 +00:00
Howard Chu
efecf4e121
ITS#1733 eliminate o_abandonmutex
2002-04-11 08:03:40 +00:00
Howard Chu
f516e34918
ITS#1681 - detect bad filter in slap_parseURI() - from Hallvard Furuseth
2002-04-09 10:41:15 +00:00
Howard Chu
1353ded30c
Change slap_parseURI to use ldap_parse_url. Other struct berval changes.
2002-04-05 05:37:01 +00:00
Kurt Zeilenga
3d89f398a9
Fix callback initializer.
2002-03-04 21:28:46 +00:00
Kurt Zeilenga
d23c559646
Don't use 'shtool mkln' as ln(1) replacement.
...
Allow both <sasl/sasl.h> and <sasl.h>
2002-02-11 08:28:51 +00:00
Kurt Zeilenga
b315d8af34
Update Cyrus SASL detection to always look for <sasl.h> regardless
...
of version and then try -lsasl2 and -lsasl. Make SASL code
conditional on SASL_VERSION_MAJOR, not HAVE_CYRUS_SASL.
2002-02-10 17:51:19 +00:00
Howard Chu
8a4e92b259
Support for Cyrus SASLv2. Untested.
2002-02-10 14:27:23 +00:00
Kurt Zeilenga
0a31400d63
Some misc cleanup
2002-01-29 06:06:20 +00:00
Howard Chu
d937237987
Eliminated dn_normalize. No more migration.
2002-01-26 14:51:45 +00:00
Howard Chu
4191f39037
Changed slap_authz_info.sai_mech to struct berval.
...
Changed sasl_* to use struct bervals.
2002-01-26 13:57:41 +00:00
Howard Chu
eab49fe5da
Cleanup lint
2002-01-19 04:50:26 +00:00
Howard Chu
ac1332cdb8
Renamed BVarray to BerVarray. Moved slapd:bvarray_{add,free} to
...
liblber:ber_bvarray_{add,free}.
2002-01-14 01:43:17 +00:00
Howard Chu
d0724c769e
Fix mutex leak in previous commit
2002-01-13 17:17:29 +00:00