Howard Chu
826056e75b
More thorough backend_destroy. Added config_destroy. Destroy slap_listeners.
...
Plugged other small leaks.
2001-12-15 12:05:58 +00:00
Howard Chu
d0b1ca692a
Minor strlen cleanup
2001-12-09 13:57:55 +00:00
Pierangelo Masarati
aee3600276
minor cleanup
2001-11-17 16:18:07 +00:00
Mark Adamson
e0ff8d6782
fix various memory leaks
2001-11-05 23:14:42 +00:00
Kurt Zeilenga
61de99937f
ldif.h include cleanup
2001-09-25 00:03:24 +00:00
Kurt Zeilenga
22688a7ad6
Minor cleanup of last commit
2001-09-18 18:24:47 +00:00
Kurt Zeilenga
7a18352c06
Patch for SASL EXTERNAL. Needs to be tested with other mechanisms.
2001-09-18 07:44:18 +00:00
Howard Chu
bb06fd8d6b
Fix crashes for SASL/EXTERNAL binds:
...
in slap_sasl_getdn, test id, not dn. dn is still NULL
also, don't check for trailing slash
in slap_sasl_bind, initialize reslen to 0
2001-09-18 03:10:05 +00:00
Mark Adamson
fac77083cc
Skip over the "dn:" prefix when passing a DN to dn_normalize().
2001-08-29 23:01:24 +00:00
Gary Williams
e565505f21
fix logging macros (thanks Mei)
2001-02-02 13:49:26 +00:00
Mark Adamson
68ab73a0f5
Make sure the variable used for SASL REALM is initialized, in case of no REALM.
2001-01-23 19:18:03 +00:00
Kurt Zeilenga
65cdfa68f0
Fix more typos
2001-01-22 22:03:44 +00:00
Kurt Zeilenga
a4f37d6303
Fix typo
2001-01-22 21:10:54 +00:00
Kurt Zeilenga
28d1dbd8ac
Add "sasl-external-x509dn-convert" configuration option aimed
...
at providing authid TLS/X.509 to LDAP DN mapping. Experimental.
2001-01-19 00:47:32 +00:00
Kurt Zeilenga
1302713f09
Fix SASL_REALM bug
...
Minor cleanup of logging code, variable scope
2001-01-19 00:01:25 +00:00
Mark Adamson
6b4ec38178
Change the SASL DN's from cn=authzid to cn=auth
2001-01-18 20:05:15 +00:00
Gary Williams
f49fd8a98e
fix format
2001-01-17 16:35:53 +00:00
Gary Williams
ffcdc6d11d
More new logging (Behind NEW_LOGGING)
2001-01-15 19:17:29 +00:00
Mark Adamson
2231d5e64e
Make SASL authorization work for NULL, "u:", and "dn:" authz strings.
2000-11-30 22:00:15 +00:00
Kurt Zeilenga
b285814f8e
Fix layer installation
2000-10-12 19:02:31 +00:00
Kurt Zeilenga
27b30275a6
We need to set sasl_layers prior to returning result...
2000-10-07 02:00:54 +00:00
Kurt Zeilenga
a912e6eea0
Make sure authzid form produces a valid subject DN. Support
...
both u: and dn: forms.
Rework sasl-regex DN be of the form
uid=user,cn=realm,cn=mech,cn=authz
Fix up slapd.conf(5)
2000-10-06 23:50:38 +00:00
Kurt Zeilenga
6b80b349fa
remove cruft
2000-09-28 22:25:34 +00:00
Kurt Zeilenga
2b82d4f486
remove lint
...
update bdb codes
2000-09-22 01:40:57 +00:00
Mark Adamson
bf1ee530ea
Implementation of SASL authorization.
2000-09-21 17:32:54 +00:00
Kurt Zeilenga
c9de004a86
Fix logging bug
2000-09-21 16:53:45 +00:00
Kurt Zeilenga
50714d2d48
merge changes from authPassword work which should fix SPASSWD code...
2000-09-20 00:28:57 +00:00
Kurt Zeilenga
a60438c1ce
Add sasl-host option and treat sasl-realm as global only
...
(ie: not backend specific).
2000-08-30 01:44:39 +00:00
Kurt Zeilenga
1c328aa9c7
Minor typedef and other clean ups
2000-08-26 01:14:05 +00:00
Kurt Zeilenga
7b548b4a91
Make settings match manual page.
2000-08-24 01:12:54 +00:00
Kurt Zeilenga
df8c837c80
Fix typos
2000-08-15 23:42:44 +00:00
Kurt Zeilenga
3b03b64b77
Add char* ldap_pvt_get_fqdn(char*) which returns the FQDN of the
...
input. In input==NULL, returns FQDN of local host.
Fixed copy_hostent() uninitialized pointer bug.
Replaced gethostname calls with ldap_pvt_get_fqdn( NULL ) calls.
2000-08-15 01:55:43 +00:00
Kurt Zeilenga
a50f391bb3
Working SASL security layers!
2000-07-28 00:04:07 +00:00
Kurt Zeilenga
9e37451421
Fix typo
2000-07-27 01:10:51 +00:00
Kurt Zeilenga
a71a7cdd98
Rework authorization handling such that authzid u:user gets mapped to
...
authzdn uid=user. Disallow authzid in DN form until we have a
validator.
2000-07-24 23:05:45 +00:00
Kurt Zeilenga
804100b431
Fix sasl end game processing.
2000-07-20 18:39:40 +00:00
Kurt Zeilenga
a8521d3034
Fix mech==NULL bug
2000-07-20 01:04:34 +00:00
Kurt Zeilenga
d2b05a3858
Rework SASL command line arguments. Default is now to authenticate
...
using best available mechanism. (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.
2000-07-15 23:25:46 +00:00
Kurt Zeilenga
a6154d03f2
Misc cleanup
2000-07-15 00:45:31 +00:00
Kurt Zeilenga
5bca08d716
Store sasl callbacks in session handle so that they can properly freed.
2000-07-15 00:01:09 +00:00
Kurt Zeilenga
c8ca70f3ae
Fix callbacks.
2000-07-14 22:00:16 +00:00
Kurt Zeilenga
1e3aa01b7b
Fix SSF reporting.
2000-07-14 20:57:52 +00:00
Kurt Zeilenga
36fb2d9d78
rework SASL callbacks
2000-07-14 20:56:30 +00:00
Kurt Zeilenga
14859793d0
Add logging support
2000-07-14 04:35:36 +00:00
Kurt Zeilenga
5fc22599e2
Update SASL code to reuse context through life of session.
...
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters
2000-07-13 22:54:38 +00:00
Kurt Zeilenga
489fd210df
Change reporting of SASL username
2000-07-06 01:22:42 +00:00
Kurt Zeilenga
51cef9dbed
Return last step output in final response.
...
And some code cleanup.
2000-07-05 21:43:11 +00:00
Kurt Zeilenga
064d6aae65
Reverse SASL mechanism restriction #ifdef
2000-06-26 05:29:37 +00:00
Kurt Zeilenga
a56c161bdb
Misc code cleanup.
2000-06-10 22:39:30 +00:00
Kurt Zeilenga
60802201e3
Const'ification
...
SASL mech removed from backend bind callback (as SASL is managed by frontend)
Changes to some backends are untested (as I don't have all dependent
software install)
2000-05-22 03:46:57 +00:00
