Commit Graph

44 Commits

Author SHA1 Message Date
Howard Chu
54eb6f539c Remove redundant def 2005-05-06 01:45:44 +00:00
Howard Chu
59de8333d0 Fix ppolicy libltdl usage on Win32 2005-04-26 12:54:24 +00:00
Howard Chu
855f7d44e9 pwdReset was not supposed to be NO-USER-MODIFICATION 2005-04-22 18:42:52 +00:00
Howard Chu
5158e46d59 Note draft 8 in comment 2005-04-22 09:10:06 +00:00
Howard Chu
3400b96d71 ITS#3655 patch from Ralf rhafer@suse.de update to draft 8 behavior 2005-04-22 09:09:12 +00:00
Howard Chu
5aed76fe78 ITS#3573, mark pwdChangedTime, pwdGraceUseTime, pwdExpirationWarned,
pwdHistory, and pwdReset NO-USER-MODIFICATION
2005-04-12 10:58:50 +00:00
Howard Chu
119cbcaba4 Schema unparsing support 2005-03-21 08:31:48 +00:00
Howard Chu
fba9235d0f Add HARDCODE schema flags 2005-03-21 00:22:54 +00:00
Pierangelo Masarati
5b193c218f fix dynamically registered controls check; NOTE: controls registered by global overlays don't work yet; better leave Kurt's kludge in place right now 2005-01-25 19:39:56 +00:00
Kurt Zeilenga
28b5df9a90 Hide "work in progress" 2005-01-25 05:35:54 +00:00
Howard Chu
aa913f1bef Use be_shadow_update, not be_isupdate 2005-01-13 19:02:08 +00:00
Pierangelo Masarati
f40527ef49 fix ACL value checking for bind (ITS#3446) 2005-01-07 13:57:16 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Howard Chu
30a6f4d24d Better fix for ITS#3365, manage back-bdb's read locks so frontend/etc.
don't need to worry about them.
2004-12-05 02:00:19 +00:00
Howard Chu
996354e2dd Pass entire entry to password_quality check module, not just attrs 2004-12-01 16:01:04 +00:00
Howard Chu
47dd8d8732 Dynamic control management 2004-11-23 13:08:45 +00:00
Howard Chu
e4c231fe0c Only use libltdl #if SLAPD_MODULES is defined, otherwise ignore
external pwdCheckModules.
2004-11-05 08:57:05 +00:00
Howard Chu
1df6d76269 Add ppolicy_hash_cleartext config keyword, hash Adds as well as Modifies.
Changed check_pw_quality callback to pass entry's Attributes in final arg.
2004-10-07 04:07:17 +00:00
Howard Chu
7e87f54716 Revert ITS#3353 patch, it needs to be reworked. 2004-10-06 05:51:38 +00:00
Howard Chu
fda3d6260e ITS#3353 consolidate slapd globals into a single struct 2004-10-01 07:33:16 +00:00
Howard Chu
e014144f98 Move time parsers from ppolicy.c to liblutil; preserve greater precision 2004-09-28 12:23:37 +00:00
Howard Chu
89b03a1c7e Make ppolicy_add consistent with ppolicy_modify - don't add pwdChangedTime
opattr on replicated entries.
2004-09-21 00:14:28 +00:00
Kurt Zeilenga
d611a4b49a unifdef -UNEW_LOGGING 2004-09-04 04:54:28 +00:00
Howard Chu
77df33a164 Fix crash on modify if userpassword didn't exist yet 2004-08-15 22:23:58 +00:00
Howard Chu
a14bda1df4 strptime is unreliable, just parse time ourselves 2004-07-18 18:28:16 +00:00
Pierangelo Masarati
657e580bbe fix schema initialization when built as module... 2004-05-13 23:33:14 +00:00
Howard Chu
c0075d57b4 better fix for prev commit 2004-05-13 00:46:52 +00:00
Howard Chu
ee0af2b9d5 ITS#3137 defer schema loading until overlay configuration 2004-05-13 00:38:24 +00:00
Howard Chu
cba00e0025 Fix attributions, add HP info 2004-04-08 02:59:28 +00:00
Kurt Zeilenga
44725e7303 use BER_BVNULL 2004-04-07 04:11:43 +00:00
Pierangelo Masarati
25fce61f70 silence erroneous warning 2004-04-06 12:22:51 +00:00
Pierangelo Masarati
a11dc61e05 rework be_isupdate accordingly to be_isroot 2004-04-06 09:42:40 +00:00
Kurt Zeilenga
c7e89d57be swap be_isroot and be_isroot_dn symbols 2004-04-06 01:06:20 +00:00
Howard Chu
4b2febb3db Allow users to change their own password by default, fix history check
when SafeModify is false.
2004-04-05 23:09:57 +00:00
Pierangelo Masarati
e516247068 exploit new isroot_dn helper 2004-04-05 17:31:27 +00:00
Howard Chu
939ca7705b Avoid mktime/gmtime in parse_time(), just compute time_t ourselves. 2004-04-05 13:38:43 +00:00
Howard Chu
65e409817e Fix prev commit, days at month boundaries 2004-04-04 15:40:14 +00:00
Howard Chu
ebd7bc27e7 Fix parse_time GMT computation for daylight savings time 2004-04-04 13:40:56 +00:00
Howard Chu
e1fc5012bd Don't manipulate password history if not configured in policy 2004-04-03 06:21:03 +00:00
Howard Chu
ea14637a0d Fix prev commit 2004-03-18 10:51:18 +00:00
Howard Chu
d1292c1b14 Added ppolicy_use_lockout keyword; Default behavior is not to issue the
PP_accountLocked error for locked accounts. (Gives too much information
to attackers.)
2004-03-18 10:35:54 +00:00
Howard Chu
def2fab7b5 Added ppolicy_hide_lockout keyword 2004-03-18 10:20:27 +00:00
Howard Chu
dbade4ad8c Fix account lock check 2004-03-17 09:54:49 +00:00
Howard Chu
b59da518cf Password policy overlay, implements draft 7. The spec is still in flux;
this module should not be used in production.
2004-03-16 10:15:18 +00:00