Pierangelo Masarati
41ceb4af9d
don't risk using dangling pointers when looping thru connections (ITS#4405)
2006-06-13 18:00:33 +00:00
Howard Chu
15853f1e74
ITS#4583 use mutex around SSL_accept()
2006-06-08 19:35:42 +00:00
Pierangelo Masarati
7a3ff8ddc2
count requests and responses in logs
2006-05-27 10:17:34 +00:00
Pierangelo Masarati
6b889b0a8a
s/fprintf/Debug/ (ITS#4553); lock ld_conn_mutex before accessing conn(s)
2006-05-18 00:59:13 +00:00
Pierangelo Masarati
86b566f029
cleanup
2006-05-18 00:37:56 +00:00
Pierangelo Masarati
2b29cf4909
fix rev 1.125 commit
2006-05-17 22:13:39 +00:00
Pierangelo Masarati
6a2c344217
typo in comment
2006-05-14 12:14:08 +00:00
Howard Chu
25f81a48e6
Add SSL failure reason to TLS: can't connect message.
2006-05-13 00:29:28 +00:00
Howard Chu
ff40a705da
ITS#4541 better fix
2006-05-12 06:33:27 +00:00
Howard Chu
da0ec66ceb
ITS#4541 refine commit for #4524
2006-05-12 06:16:32 +00:00
Howard Chu
dc96eca891
ITS#4536 set chain_tail after sorting messages
2006-05-11 09:07:08 +00:00
Howard Chu
7b10f413d9
Fix ITS#4533 don't destroy input request
2006-05-10 15:01:50 +00:00
Pierangelo Masarati
373ded8d24
add URI list resorting feature (ITS#4524)
2006-05-06 16:15:25 +00:00
Pierangelo Masarati
8242166888
print the correct search base when taken from ldaprc (ITS#4504)
2006-04-25 22:23:00 +00:00
Pierangelo Masarati
a42367ae3a
cleanup
2006-04-24 17:20:13 +00:00
Pierangelo Masarati
77e7acc4f9
cleanup; make sure no spurious error code slip thru
2006-04-24 12:12:14 +00:00
Howard Chu
478ae2346e
PPOLICY_ERROR is primitive, not constructed
2006-04-22 00:23:44 +00:00
Howard Chu
68b374dd4a
Fix EXPIRE/GRACE ber tags
2006-04-21 23:47:53 +00:00
Howard Chu
eb0c92c7df
Return rc for tls_init_def_ctx
2006-04-11 20:35:37 +00:00
Pierangelo Masarati
dfc8e7f6b8
better fix for ITS#4483
2006-04-09 22:29:42 +00:00
Pierangelo Masarati
623a7a9fe2
Berlement already freed in ber_flush
2006-04-08 17:43:53 +00:00
Pierangelo Masarati
74b6ab9029
more cleanup
2006-04-08 11:01:19 +00:00
Howard Chu
571ac24b33
Fix destruct sequencing
2006-04-07 02:41:58 +00:00
Howard Chu
056b193ed7
Don't implicitly inherit the default SSL_CTX, tls.c:alloc_handle will
...
set it explicitly and handle its refcount.
2006-04-07 01:52:32 +00:00
Howard Chu
9693c800bf
Free/decrement SSL_CTX refcount when (re)setting it
2006-04-07 01:15:56 +00:00
Howard Chu
7709d4d89e
Bump SSL_CTX refcount whenever it gets retrieved
2006-04-07 01:13:31 +00:00
Howard Chu
d18277eac9
ITS#4422, #4475
...
Move TLS options into struct ldapoptions.
Added ldap_int_tls_destroy()
Added LDAP_OPT_X_TLS_NEWCTX to generate new SSL_CTX
2006-04-07 00:52:38 +00:00
Howard Chu
51d5db03ff
ITS#4422, rearrange options to allow passing NULL args to TLS/Cyrus
2006-04-07 00:48:41 +00:00
Pierangelo Masarati
8823f5cc87
fix ITS#4450?
2006-04-03 00:34:35 +00:00
Howard Chu
e1664b1f42
plug leak
2006-04-02 21:06:28 +00:00
Hallvard Furuseth
581c1ff6c7
Cast ctype.h char arguments to unsigned char
2006-04-01 23:44:42 +00:00
Pierangelo Masarati
bf860f0596
ld_abandoned must be protected by ld_res_mutex
2006-04-01 00:30:07 +00:00
Howard Chu
9686c7ce99
cleanup
2006-03-31 21:31:32 +00:00
Howard Chu
1c0d2ad7ae
cleanup NULL string handling
2006-03-31 21:30:06 +00:00
Howard Chu
2d4da0b23c
Cleanup NULL derefs
2006-03-31 21:18:04 +00:00
Howard Chu
aa87b9ad2e
cleanup dead code
2006-03-31 21:07:53 +00:00
Howard Chu
8c4711e9db
plug leaks
2006-03-31 20:36:53 +00:00
Kurt Zeilenga
40d75df606
Additional TXN changes (a work in progress)
2006-03-30 18:00:04 +00:00
Pierangelo Masarati
177c051f0f
use asynchronous API; note that an endless loop may occur (ITS#4450; no fix yet)
2006-03-25 08:16:19 +00:00
Pierangelo Masarati
f48bf42578
seems to fix referral chasing (ITS#4448)
2006-03-24 01:18:36 +00:00
Pierangelo Masarati
70211e9be5
handle abnormal condition
2006-03-23 18:36:10 +00:00
Pierangelo Masarati
8c9f071238
duplicate string from environment, as it may be overridden by the user (ITS#4436)
2006-03-20 11:57:16 +00:00
Pierangelo Masarati
df2b44c3b9
destroy ld_conn_mutex (ITS#4441)
2006-03-20 11:14:43 +00:00
Kurt Zeilenga
544d00f3e5
Fix encoding
2006-03-07 21:48:47 +00:00
Kurt Zeilenga
fad69dbef8
Additional TXN changes
2006-03-07 02:21:27 +00:00
Kurt Zeilenga
825ce79611
Initial and rough client-side implementation of the revised LDAP
...
Transactions specification. A work in progress! Comments welcomed.
2006-03-06 21:20:36 +00:00
Luke Howard
e5a5f5e1b2
Don't fail compile if LDAP_EXOP_X_TURN undefined (ie. if LDAP_REL_ENG undefined)
2006-03-05 04:23:59 +00:00
Luke Howard
0ccbce9d09
Always pass valid BerElement to ldap_create_control() to avoid assert fail
2006-03-02 16:50:34 +00:00
Kurt Zeilenga
8c8ea049cb
Macro cleanup
2006-02-16 05:01:29 +00:00
Kurt Zeilenga
cbc11c9233
unifdef -DLDAP_NULL_IS_NULL
2006-02-14 23:18:12 +00:00
Kurt Zeilenga
2d9e341ae9
Report layer installed only after installed, and fix up report text
2006-02-13 23:26:55 +00:00
Kurt Zeilenga
fe8e3b7efa
Kludge for MSAD (ITS#4391 and others)
2006-02-07 01:20:55 +00:00
Howard Chu
fb4cba514d
ITS#4354 only set DH callback if OPT_DHFILE has been set.
2006-01-19 18:12:15 +00:00
Kurt Zeilenga
48c34d254f
Update proxied authorization implementation to use IANA
...
assigned result code.
2006-01-12 22:55:56 +00:00
Pierangelo Masarati
056b7e55da
silence warning
2006-01-12 18:29:33 +00:00
Howard Chu
41c46bdb4e
Tone down dn2bv/bv2dn logging
2006-01-12 06:07:42 +00:00
Luke Howard
86d1072917
ITS#4327 - make SASL_MECH/SASL_REALM no longer user-only options
2006-01-11 17:28:30 +00:00
Pierangelo Masarati
e94ded997d
fix typo in previous commit
2006-01-09 11:18:01 +00:00
Kurt Zeilenga
be8676f780
s/pagectrl.o/pagectrl.lo/
2006-01-09 05:25:43 +00:00
Kurt Zeilenga
d8eace75a7
cleanup
2006-01-09 05:22:46 +00:00
Kurt Zeilenga
eccd913a07
Update variables holding protocol values to ber_*_t's
...
Remove old grouping/txn code (pending redesign)
2006-01-09 01:25:53 +00:00
Pierangelo Masarati
564dca34bf
fix types; further check parameters
2006-01-08 22:45:35 +00:00
Pierangelo Masarati
de79a7bfec
rework API functions to create/parse controls; add client API functions to handle RFC2696 paged results (ITS#4314; patch from Hans Leidekker with changes)
2006-01-08 22:03:30 +00:00
Kurt Zeilenga
bca31173d8
Update (and rename) Sort and VLV parse routines to expect actual
...
control to be directly passed in.
2006-01-08 19:34:01 +00:00
Kurt Zeilenga
8ab4786ef2
correct typo
2006-01-08 19:11:57 +00:00
Kurt Zeilenga
d88f4e8197
cleanup
2006-01-08 17:11:15 +00:00
Pierangelo Masarati
339b9c371e
rfc2589 support (ITS#4293)
2006-01-06 17:46:52 +00:00
Kurt Zeilenga
acbb5cf689
Happy new year!
2006-01-03 23:11:52 +00:00
Kurt Zeilenga
cdbbed6c3b
improve LDAP_OTHER description
2006-01-03 19:45:26 +00:00
Pierangelo Masarati
0e6f61aa03
fix leaks in ldap_parse_passwd()
2006-01-02 13:27:29 +00:00
Pierangelo Masarati
283f79c268
improve previous commit (one line, use buffer and truncate if required)
2005-12-16 12:18:55 +00:00
Pierangelo Masarati
3edbd4fee7
log attrs
2005-12-15 19:12:09 +00:00
Pierangelo Masarati
fcda57e90f
use macros instead of numbers...
2005-12-13 20:11:26 +00:00
Pierangelo Masarati
73acecaf0f
cleanup
2005-12-13 15:53:10 +00:00
Kurt Zeilenga
71cf424b77
unifdef -DLDAP_SCOPE_SUBORDINATE
2005-11-26 06:35:36 +00:00
Pierangelo Masarati
f86543c770
cleanup filter escaping
2005-11-25 12:16:27 +00:00
Pierangelo Masarati
6ab23ef926
add more versatile private API for filter escaping
2005-11-25 10:41:33 +00:00
Pierangelo Masarati
c655139449
fix ldap_bv2escaped_filter_value() according to <draft-ietf-ldapbis-filter>
2005-11-25 01:12:32 +00:00
Pierangelo Masarati
d34fffcaf9
use lutil_ato*() whenever appropriate
2005-11-24 01:10:05 +00:00
Kurt Zeilenga
7468c7fb58
Support Solaris 10's getpeerucred(3) (*** blind commit ***)
2005-11-23 18:55:31 +00:00
Kurt Zeilenga
c5c5a7f19b
s/ACCRIGHTS/ACCRIGHTSLEN/
2005-11-23 18:22:02 +00:00
Pierangelo Masarati
1ce491e4f4
fix library checks; implement client side of "touch" modify (ITS#4183)
2005-11-20 14:17:37 +00:00
Pierangelo Masarati
af23be3675
silence warnings...
2005-11-14 21:47:17 +00:00
Pierangelo Masarati
4a6f4369c0
don't malloc empty strings for matched, error
2005-11-12 18:42:03 +00:00
Howard Chu
146b2c5389
ITS#4082 tls ctx requirements are only applicable to servers, or clients
...
with tls_opt_require_cert = TRY or DEMAND. Ignore requirements for clients.
2005-11-08 13:42:10 +00:00
Pierangelo Masarati
5be72fe816
don't allow '{' in TK_BAREWORD (ITS#4116)
2005-11-07 22:53:43 +00:00
Pierangelo Masarati
a6453f28f8
silence warnings
2005-11-06 23:27:09 +00:00
Kurt Zeilenga
4f63434511
Improve SASL error handling
2005-11-06 22:43:23 +00:00
Pierangelo Masarati
e1a7fa2ee9
fix ldap_bv2escaped_filter_value
2005-11-06 11:41:42 +00:00
Howard Chu
d67a2f2044
Move lconn_tls_ctx to ldo_tls_ctx. Otherwise clients cannot set it after
...
ldap_initializ'ing an LD and before connecting on it. Really all of the
global TLS options belong in the ldapoptions struct, instead of static vars.
2005-11-05 12:49:43 +00:00
Pierangelo Masarati
f571f4b2b4
fix previous commit
2005-11-03 20:11:22 +00:00
Pierangelo Masarati
561cd3d845
don't leak hostname
2005-11-03 15:17:48 +00:00
Kurt Zeilenga
ecd86725f2
Update result code to IANA-assigned values
...
Provide some backwards compatibility.
Misc cleanup
2005-11-03 01:27:07 +00:00
Howard Chu
6fcfaedf90
ITS#4137 was returning with tls_def_ctx_mutex locked.
2005-11-02 23:43:19 +00:00
Kurt Zeilenga
461ed37970
cleanup
2005-11-01 20:33:49 +00:00
Pierangelo Masarati
9c056f95fe
consistently use HSTRERROR (ITS#4124)
2005-10-31 15:04:37 +00:00
Howard Chu
4ebed09d81
ITS#4017, additional revisions for DH parameters
2005-10-28 05:35:19 +00:00
Kurt Zeilenga
551d94c6e8
Additional serverSaslCred trace messages.
...
Misc. cleanup
2005-10-20 03:49:22 +00:00
Howard Chu
5e416949e0
Fix ldapi DN ordering
2005-10-17 12:57:53 +00:00
Kurt Zeilenga
279033fc1c
ITS#3440: (blind) fix for VxWorks inet_ntoa(3) leak,
...
use inet_ntoa_b(3) instead.
2005-10-14 03:40:03 +00:00
Kurt Zeilenga
408fa06f95
missed \
2005-10-13 06:53:32 +00:00
Kurt Zeilenga
a534d5fb6b
Add ldap_bv2escaped_filter_value (ITS#2535)
2005-10-13 06:35:28 +00:00
Kurt Zeilenga
0ea43c9d7d
Assume TLS is properly configured if any one of
...
keyfile, certfile, cacertfile, or cacertdir is
provided. Note that TLS can be properly configured
without any of these when non-X.509 cipher suites
are used, so this might have be rethought.
2005-10-12 20:31:04 +00:00
Howard Chu
bb3c3f654f
Fix typo
2005-10-12 00:31:05 +00:00
Howard Chu
f18c63fa13
Add LDAP* to debug messages to aid tracking
2005-10-12 00:23:30 +00:00
Howard Chu
e8b1b004d4
Fix ITS#3832 must mutex protect ld->ld_conns
2005-10-12 00:05:43 +00:00
Howard Chu
f54bc26357
ITS#4072 ldap_pvt_tls_init_def_ctx() returns LDAP_NO_SUPPORT if not
...
sufficiently configured. Update slapd/slurpd to act appropriately.
2005-10-09 19:55:39 +00:00
Howard Chu
2ea5a66be2
ITS#2942 skip referrals that we've already chased
2005-10-09 10:01:38 +00:00
Howard Chu
a8a23840b8
Simplify lm_chain_tail handling, support LDAP_MSG_RECEIVED
...
Drop support for LDAP_MORE_RESULTS_TO_RETURN
2005-10-08 18:51:14 +00:00
Howard Chu
fc79957ad6
Don't set ndelay on socket connect if no timeout was specified
2005-10-08 18:19:50 +00:00
Howard Chu
9095af5928
ITS#4017 support Diffie-Hellman parameters for multiple key lengths
2005-10-05 20:01:52 +00:00
Pierangelo Masarati
385aebc806
plug potential ld_error leak (ITS#4064)
2005-10-04 21:30:30 +00:00
Howard Chu
a0f6fdb730
ITS#4048 plug leak
2005-09-30 06:20:56 +00:00
Howard Chu
d918bd4dc0
ITS#4053 free cldap peer address
2005-09-30 06:04:38 +00:00
Pierangelo Masarati
9129a2f7ee
silence warnings
2005-09-10 18:59:35 +00:00
Hallvard Furuseth
2e19c67235
Handle LDAP_INT_GLOBAL_OPT() failure in ldap_int_destroy_global_options()
2005-08-31 18:59:27 +00:00
Kurt Zeilenga
f07015dad2
Update build tools based upon OPENLDAP_AC work
2005-08-25 20:09:26 +00:00
Pierangelo Masarati
21e33fed33
treat TRUE/FLASE like SUCCESS; don't chase "" referrals
2005-08-22 09:41:36 +00:00
Pierangelo Masarati
f5737d72b0
cosmetic changes (easier to inspect under gdb)
2005-08-20 19:54:56 +00:00
Pierangelo Masarati
3dd05cdb2d
fix SASL numeric secprops parsing (ITS#3955)
2005-08-20 14:22:42 +00:00
Pierangelo Masarati
52ce57f525
don't try to print NULLs on Solaris...
2005-08-19 15:47:52 +00:00
Pierangelo Masarati
7732236996
plug yet another one-time leak
2005-08-19 15:05:03 +00:00
Pierangelo Masarati
a0e46c6289
allow oidmacros in syntax (e.g. AD)
2005-08-18 23:34:10 +00:00
Pierangelo Masarati
a324dc8050
clear code before calling functions that may modify it
2005-08-18 18:48:02 +00:00
Pierangelo Masarati
e441f32374
little bit easier to track from inside gdb...
2005-08-18 13:38:59 +00:00
Pierangelo Masarati
4f5502ef9f
rework internal functions - need the parsed list of URIs before massaging; no impact on exposed funcs
2005-08-17 07:50:28 +00:00
Kurt Zeilenga
f799a2e4ba
replace struct msghdr macros
2005-08-13 02:17:12 +00:00
Pierangelo Masarati
3638b6c722
solve a deadlock during unbind: ldap_send_unbind() is called by ldap_free_connection() only, and just in case the last arg is not 0; but most of the times ldap_free_connection() is called with ld_req_mutex locked, so it shouldn't be locked again from inside ldap_send_unbind()
2005-08-11 17:11:41 +00:00
Pierangelo Masarati
b3f366e0ba
essentially address 3791 with a reworked patch
2005-08-11 15:13:29 +00:00
Pierangelo Masarati
ad62d9da1b
expose ldap_tls_inplace()
2005-08-11 12:14:24 +00:00
Pierangelo Masarati
228af40058
cleanup
2005-08-11 12:13:43 +00:00
Hallvard Furuseth
d50820cdd6
Read LDAPResult.resultCode & ModifyRequest.modification.operation
...
and send SortResult.sortResult as BER ENUMERATED, not BER INTEGER.
libldap: ldap_parse_extended_result, try_read1msg, build_result_ber,
ldap_parse_sasl_bind_result. slapd: do_modify, send_ldap_controls.
2005-08-10 00:54:38 +00:00
Pierangelo Masarati
a3a9bb9bfa
little more about potential concurrency issues
2005-08-03 16:54:08 +00:00
Howard Chu
834f1bd253
ITS#3578 increment parent's referral count
2005-08-02 11:24:52 +00:00
Hallvard Furuseth
b295d66a2c
assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL).
2005-08-02 10:57:42 +00:00
Pierangelo Masarati
01dc0183a3
plug leaks; cleanup
2005-08-01 23:35:44 +00:00
Hallvard Furuseth
f9e505727e
Plug memory leaks - free() controls in LDAP*
2005-08-01 03:51:53 +00:00
Hallvard Furuseth
d49a477702
Cleanup
2005-07-31 18:05:51 +00:00
Pierangelo Masarati
5ff31144a7
cleanup
2005-07-30 16:26:25 +00:00
Hallvard Furuseth
fbce398466
Also declare copy_hostent() if LDAP_R_COMPILE && HAVE_GETHOSTBYADDR_R.
...
Only declare safe_realloc() if LDAP_R_COMPILE.
Indentation cleanup.
2005-07-26 04:21:19 +00:00
Pierangelo Masarati
7fade0d585
(yet) another potential concurrency issue
2005-07-23 22:04:04 +00:00
Hallvard Furuseth
f0091b101f
Cast LDAP_BOOL value to LDAP_BOOLEANS; it could only use flags fitting in int.
2005-07-22 13:24:47 +00:00
Hallvard Furuseth
81ecb0b153
assert expects int. (int)<nonnull ptr/long> can be 0. Use assert(arg!=0/NULL).
2005-07-18 06:22:33 +00:00
Hallvard Furuseth
f43a823c73
Add missing "static" for functions declared static but defined non-static
2005-07-18 05:14:41 +00:00
Hallvard Furuseth
bf1d1a84bd
Remove unused type: struct token
2005-07-17 11:53:35 +00:00
Pierangelo Masarati
19c1c6d671
some (stupid) editors complain because 'new' is a reserved word in C++
2005-07-16 15:38:33 +00:00
Pierangelo Masarati
5e84975adf
paranoid check
2005-07-16 15:37:01 +00:00
Pierangelo Masarati
e790055467
be liberal: accept empty oid lists
2005-07-15 00:46:30 +00:00
Hallvard Furuseth
d449c9d08b
Silence "unused variable" warnings
2005-07-14 19:18:55 +00:00
Hallvard Furuseth
3d8aceab81
Fix typos GETNAMEINFO->HAVE_GETNAMEINFO, HAVE_HERROR->HAVE_HSTRERROR
2005-07-14 19:17:05 +00:00