mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2024-12-27 03:20:22 +08:00
Code Issues Packages Projects Releases Wiki Activity
12,006 Commits 38 Branches 307 Tags 74 MiB
e350d3aebd
Commit Graph

384 Commits

Author SHA1 Message Date
Jong Hyuk Choi
1fdda703e6 Support multiple sync replication at the consumer : 
1) simultaneous operation of multiple active sync replication threads
2) cookie management for individual sync replication thread
   (include rid=%3d to the slapd cookie command line option (-c))
 2003-11-26 19:49:47 +00:00
Kurt Zeilenga
e3a4c4ec9c Notice/Acknowledge updates 2003-11-26 02:58:56 +00:00
Jong Hyuk Choi
c204f4061f keeps syncrepl manpage sections current 2003-11-24 23:16:45 +00:00
Pierangelo Masarati
9620cacd34 clarify the usage of the <modifier> field in 'dn' and 'domain' clauses of <who> access directive 2003-11-01 14:14:09 +00:00
Kurt Zeilenga
d0c05e814d Add a basic DIT content rule test. 
Fix DIT rules to allow extensibleObject in AUX
unifdef -DSLAP_EXTENDED_SCHEMA
 2003-10-24 04:40:32 +00:00
Kurt Zeilenga
f6c1163eea clarify that replacement, but not expression evaluation, 
is done on the string in group.regex=string
We really should rename the style, in this case, to "replacement".
 2003-10-15 08:04:25 +00:00
Luke Howard
976f61f0ed Update SLAPI manual page 2003-10-12 06:36:29 +00:00
Kurt Zeilenga
d03c83f077 ITS#2621, reference slapd.plugin 2003-10-12 04:22:26 +00:00
Kurt Zeilenga
fd445970fb document ditcontentrule directive 2003-10-12 04:20:20 +00:00
Howard Chu
878bff913a Added description for idlcachesize, shm_key 2003-09-27 07:06:48 +00:00
Howard Chu
0eca4fa42f More for dynamic groups 2003-09-21 10:52:44 +00:00
Howard Chu
11148522ec ITS#2573 dynamic group support 2003-09-21 10:45:57 +00:00
Howard Chu
b93a0f45d5 ITS#2497 value-level ACLs 2003-09-21 10:34:40 +00:00
Jong Hyuk Choi
7f882daf15 Schema checking option for LDAP Sync replication 2003-09-03 21:42:52 +00:00
Jong Hyuk Choi
8dc1ac85dd manual update for proxy cache (apurva) 2003-09-03 16:26:17 +00:00
Jong Hyuk Choi
372cb876a0 slapd.conf man page update (LDAP Sync replication configuration) 2003-08-28 22:29:55 +00:00
Kurt Zeilenga
9b0de44b91 Add clarification about authzDN which don't exist in the DIT 2003-08-14 18:38:20 +00:00
Kurt Zeilenga
443d4c8999 sasl-regexp clarifications 2003-07-29 15:28:52 +00:00
Kurt Zeilenga
0a1be4b126 ITS#2622: ucdata is in DATADIR 2003-06-30 18:39:17 +00:00
Hallvard Furuseth
d0582fb4c2 Replace some tabs with spaces. 
Split some too long preformatted lines.
 2003-06-29 15:34:32 +00:00
Hallvard Furuseth
c20dbfb4f6 Remove SEE ALSO locale(5); the locale option has been gone for ages. 2003-06-27 17:30:13 +00:00
Hallvard Furuseth
e613b1a353 Add BACKENDS section in slapd.conf(5). 
Briefly compare back-bdb and back-ldbm.
Remove mention of MDBM and NDBM.  Rename GNU DBM to GDBM.
Fix spacing typos.  Prefix an octal file mode with 0.
Mention "notags" (new name for "nolang" from the attribute options patch).
Add SEE ALSO slapd-monitor(5) to slapd.conf(5).
 2003-06-27 12:22:27 +00:00
Pierangelo Masarati
ade4642f85 Document proxy cache extensions (by way of Jong Hyuk Choi) 2003-06-24 11:49:56 +00:00
Howard Chu
44e32b3f7f ITS#2594 add URI support for replica config 2003-06-14 00:06:36 +00:00
Kurt Zeilenga
256732f2ce s/tls/starttls/ 2003-06-10 18:32:36 +00:00
Hallvard Furuseth
feef99c760 Axe abandon support (ITS#2564) 2003-06-03 12:02:00 +00:00
Kurt Zeilenga
0954351565 Change ACL default style to exact (from regex) 2003-05-30 05:24:39 +00:00
Howard Chu
5ce0e3afb1 Add authors 2003-05-25 03:50:59 +00:00
Kurt Zeilenga
d6bfa4ab8f remove documentation for bind_simple_unprotected 
(which was axed log ago)
 2003-05-24 01:26:38 +00:00
Kurt Zeilenga
b378944fc1 Zap "TLS hard" 2003-05-22 00:15:57 +00:00
Hallvard Furuseth
437e179098 Fix typo. 2003-05-19 17:30:14 +00:00
Pierangelo Masarati
ea8e28c6c1 update back-monitor man page 2003-05-18 23:26:30 +00:00
Kurt Zeilenga
c8a6d52e04 Rework CAVEATS 2003-05-17 18:37:40 +00:00
Pierangelo Masarati
904f513028 clarify DN regex match quirks 2003-05-17 12:39:10 +00:00
Kurt Zeilenga
7c8f3b351f Warn folks that setting TLS option may break some applications. 
URI should be used instead.
 2003-05-17 01:08:09 +00:00
Kurt Zeilenga
c661a77268 axe suffixAlias 2003-04-26 23:52:28 +00:00
Kurt Zeilenga
26badc8174 Add some comments about DB_CONFIG 2003-04-24 16:22:46 +00:00
Kurt Zeilenga
099c2426b8 clarify that updatedn permits replica updating subject to access controls. 2003-04-21 02:29:46 +00:00
Pierangelo Masarati
ab9f7108f1 add caveats to man page; cleanup and small improvements 2003-04-16 22:23:46 +00:00
Pierangelo Masarati
9a39dcb7d4 add slurpd pid/args files 2003-04-15 21:56:21 +00:00
Pierangelo Masarati
8563681f18 document recent changes 2003-04-15 20:55:29 +00:00
Kurt Zeilenga
06da0f5e6f Clarify "users" terminology 2003-04-15 02:20:01 +00:00
Pierangelo Masarati
3e3e5fdec5 first cut at documenting back-monitor 2003-04-08 23:46:56 +00:00
Pierangelo Masarati
250934254b cleanup 2003-04-07 21:42:51 +00:00
Pierangelo Masarati
d275fee025 new rewrite example 2003-04-03 21:17:09 +00:00
Howard Chu
2c2bf67cea ITS#2389, describe conn_max_pending/auth keywords 2003-03-27 04:18:16 +00:00
Hallvard Furuseth
1f00bd3c7f Manpage nitpicks 2003-03-23 16:37:06 +00:00
Kurt Zeilenga
f4bb9a5d64 Fix typo (ITS#2379) 2003-03-15 23:36:23 +00:00
Kurt Zeilenga
472a79f211 LDAPv2 is Historic 2003-03-10 15:34:14 +00:00
Kurt Zeilenga
6fb4582d5c suffixalias is no longer supported 2003-03-07 18:57:30 +00:00
Howard Chu
a60f6fe1a3 Added proxy-whoami keyword and some mention of connection pooling. Depends 
on libldap_r, proxy authz control...
 2003-02-26 16:35:09 +00:00
Kurt Zeilenga
63efc41728 clarify global ACL use 
clarify root and subschema DSE ACLs
 2003-02-24 19:53:03 +00:00
Kurt Zeilenga
607215a8d6 Some dn.regex clarifications 2003-02-23 19:38:32 +00:00
Kurt Zeilenga
f620aa08f9 Max workers was lowered to 16. 2003-02-21 07:18:43 +00:00
Kurt Zeilenga
5abec40030 Document URI and SASL directives 2003-02-09 06:49:34 +00:00
Kurt Zeilenga
698d73d5f3 Disable reverse lookups by default for security 
(and performance) reasons.
 2003-02-08 07:40:19 +00:00
Pierangelo Masarati
f19df0a307 add 'rebind-as-user' according to back-ldap's implementation 2003-02-05 22:04:20 +00:00
Kurt Zeilenga
1aae1854ac delete (7) after UTF-8 2003-02-05 20:42:50 +00:00
Pierangelo Masarati
eed2d5db4d only document 'subtree', but also allow 'sub' 2003-02-05 20:38:42 +00:00
Pierangelo Masarati
381e293b41 allow 'sub' and 'subtree' in acl (fix ITS#2300) 2003-02-05 19:39:34 +00:00
Pierangelo Masarati
ac895cd4d5 document the multiple URI feature 2003-02-04 19:50:17 +00:00
Pierangelo Masarati
55d21236d1 comment a useful feature of using URIs 2003-02-04 19:43:10 +00:00
Kurt Zeilenga
d2bb1b5691 Add a few notes about intended usage of these backends 2003-01-09 12:07:14 +00:00
Kurt Zeilenga
6939c53170 Happy new year 2003-01-03 20:20:47 +00:00
Hallvard Furuseth
5ca8773a8b Fix typos. 2002-12-16 07:31:13 +00:00
Pierangelo Masarati
df5d69df8f allow a custom error log file for plugins by means of a slapd.conf directive; add very bare-bone back-monitor info about installed plugins 2002-12-14 15:04:37 +00:00
Howard Chu
143603690f Added searchstack keyword description. (Sorry, I don't like the word "slab"...) 2002-12-12 23:39:21 +00:00
Hallvard Furuseth
54728f367e Implement user-defined tagging attribute options and ranges 2002-12-12 13:56:05 +00:00
Pierangelo Masarati
9cce5e4c98 a skeleton of slapd.conf directives for SLAPI configuration (lot to do) 2002-12-07 18:03:13 +00:00
Pierangelo Masarati
8473f6e778 set keyword to noEstimate and document it 2002-11-21 20:57:00 +00:00
Pierangelo Masarati
59aea47963 improve limits handling and consistency; return "Admin limit exceeded" instead of "Unwilling to perform" 2002-11-21 12:58:59 +00:00
Pierangelo Masarati
b9e442d7de clarify how to specify no limits 2002-10-31 11:26:19 +00:00
Pierangelo Masarati
53e1930fd0 use keyword "unlimited" instead of -1 for no limits 2002-10-31 09:57:24 +00:00
Kurt Zeilenga
c14cbc1fb7 Update anon 2002-10-26 02:53:36 +00:00
Kurt Zeilenga
6bc33d28c0 Note --without-threads limitation 2002-10-16 16:54:27 +00:00
Kurt Zeilenga
023d0e2a5c Rework unprotected simple bind checks 2002-10-08 19:03:18 +00:00
Kurt Zeilenga
36fca96695 if "disallow bind_simple_unprotected", require at least SSF of 2 2002-10-08 01:06:49 +00:00
Kurt Zeilenga
90e320398a Clarify that "security ssf=n" applies to "disallow bind_simple_unprotected". 2002-10-08 00:51:19 +00:00
Kurt Zeilenga
68aebc05c9 Clean up hash password scheme stuff 2002-09-20 17:27:08 +00:00
Kurt Zeilenga
11a07153d6 Add some clarification as to what hash algorithms are used 
with each password-hash scheme.
 2002-09-20 17:12:58 +00:00
Kurt Zeilenga
2ca678ea2e More LDAPNOINIT statement to top of DESCRIPTION 2002-09-04 20:59:57 +00:00
Pierangelo Masarati
5a0ba6e429 document another (optional) config directive 2002-08-31 10:27:49 +00:00
Pierangelo Masarati
f11c6b27e7 Final run of changes to back-sql; IBM db2 support has been tested. 
Now related ITSes need be audited and possibly closed.

Enhancements:
  - re-styled code for better readability
  - upgraded backend API to reflect recent changes
  - LDAP schema is checked when loading SQL/LDAP mapping
  - AttributeDescription/ObjectClass pointers used for more efficient
    mapping lookup
  - bervals used where string length is required often
  - atomized write operations by committing at the end of each operation
    and defaulting connection closure to rollback
  - added LDAP access control to write operations
  - fully implemented modrdn (with rdn attrs change, deleteoldrdn,
    access check, parent/children check and more)
  - added parent access control, children control to delete operation
  - added structuralObjectClass operational attribute check and
    value return on search
  - added hasSubordinate operational attribute on demand
  - search limits are appropriately enforced
  - function backsql_strcat() has been made more efficient
  - concat function has been made configurable by means of a pattern
  - added config switches:
      - fail_if_no_mapping	write operations fail if there is no mapping
      - has_ldapinfo_dn_ru	overrides autodetect
      - concat_pattern		a string containing two '?' is used
				(note that "?||?" should be more portable
				than builtin function "CONCAT(?,?)")
      - strcast_func		cast of string constants in "SELECT DISTINCT					statements (needed by PostgreSQL)
      - upper_needs_cast	cast the argument of upper when required
				(basically when building dn substring queries)

Todo:
  - add security checks for SQL statements that can be injected (?)
  - re-test with previously supported RDBMs
  - replace dn_ru and so with normalized dn (no need for upper() and so
    in dn match)
  - implement a backsql_normalize() function to replace the upper()
    conversion routines
  - note that subtree deletion, subtree renaming and so could be easily
    implemented (rollback and consistency checks are available :)
  - implement "lastmod" and other operational stuff (ldap_entries table ?)
 2002-08-23 08:54:08 +00:00
Howard Chu
33d5c0abd7 Fix errors in replica directive 2002-08-22 20:32:09 +00:00
Pierangelo Masarati
76e936e274 reflect recent additions to backend configuration 2002-08-13 17:13:57 +00:00
Howard Chu
1be4ab9d07 ITS#1893 Add (terse) schemadn description 2002-08-10 04:09:28 +00:00
Kurt Zeilenga
9c28c9b361 Zap LDAPv2-only stuff 2002-08-08 03:01:14 +00:00
Kurt Zeilenga
99133f7944 Fix a few typos 2002-07-10 03:12:47 +00:00
Kurt Zeilenga
b839e6fc8b Remove misleading (untrue) text about known syntax OID macros. 2002-06-27 16:27:07 +00:00
Kurt Zeilenga
9a38d98d37 Add option to disallow unprotected simple authentication. 
Add protected simple authentication as a "strong" mechanism.
 2002-06-17 22:18:27 +00:00
Howard Chu
98b1e09c44 Note that TLS_CERT and TLS_KEY are user-only options. 2002-06-16 12:10:23 +00:00
Howard Chu
dca986280e Fix typo in previous commit 2002-06-16 07:29:06 +00:00
Howard Chu
0f0c268c6d Minor cleanup and reformat, added TLS options. 2002-06-16 07:19:31 +00:00
Kurt Zeilenga
220b41bc91 Patch: Bugs with back-ldap/meta mappings (ITS#1787) 
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

manpage patch for ITS#1787.
 2002-06-14 20:41:40 +00:00
Howard Chu
7b9d3b4a26 Added sasl-authz-policy 2002-06-14 11:02:57 +00:00
Kurt Zeilenga
b43ad1dd0e Generate man page date from version.sh 2002-06-13 03:59:10 +00:00
Kurt Zeilenga
faf91f1f1f Update to the 'gentle SIGHUP' patch. (ITS#1679) 
- Let write operations return unwilling-to-perform after
  'gentle shutdown' has been initiated.
- Change -1 to 2 in slapd_gentle_shutdown and slapd_shutdown, since
  sig_atomic_t can be unsigned (ITS#1736).  The 'gentle SIGHUP' patch
  is older than ITS#1736 but was applied later, so it reintroduced
  the problem.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, June 2002.
 2002-06-12 15:43:19 +00:00
Kurt Zeilenga
dfeac21baa Add {CLEARTEXT} to password-hash possibilities 2002-06-12 00:50:28 +00:00
Kurt Zeilenga
133a4ebbc4 Note that rootpw can only be set if rootdn is under suffix. 2002-06-08 18:40:36 +00:00
Kurt Zeilenga
951ca2bd68 Patch: Non-unique msgid for abandon in back-<shell,tcl> (ITS#1793) 
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

It has just occurred to me - duh - that the process ID of a back-shell
command is a perfectly good unique ID for it, and more useful than
any connection id/message id thingy.  Doesn't need extra arguments
to the shell commands either, except a pid: line to abandon.
And msgid: can still be removed in a future version.
Here is a patch.


Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
 2002-06-05 16:40:16 +00:00
Kurt Zeilenga
19eca33ca3 Gentile HUP shutdown from Hallvard 2002-06-03 16:47:43 +00:00
Kurt Zeilenga
15e6a98bba Patch: Non-unique msgid for abandon in back-<shell,tcl> (ITS#1793) 
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Here is a patch which does what I described.  Of course, someone has
to decide if that is the right solution:-)
- Add an "opid:" line to the input to back-shell commands.
- Add an "abandonid: <opid> line to back-shell/abandon input.
- Replace message id with opid in back-tcl arguments.
- Add an abandonid = <opid> argument to back-tcl/abandon.
An opid (operation ID) is a "connection ID/message ID" string.  I
would have liked to use another name to avoid confusion with struct
slap_op->o_opid, but I could not think of another apt word.

This also fixes ITS#1784 and ITS#1792.  Since calling conventions
changed anyway, I fixed back-shell by adding abandonid: and making
opid: always be the ID of the current operation.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
 2002-05-09 02:11:39 +00:00
Kurt Zeilenga
2ab8810555 Documentation patch #4 (ITS#1749) 
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Small changes:
- Fix typo slapd_meta -> slapd-meta in slapd-meta(5).
- Add slapd-dnssrv(5) to SEE ALSO in slapd.conf(5).
- Add descriptions of the files in FILES sections.
- Add $HOME/.udrc to FILES in ud(1) and ud.conf(5).
- Add ldaprc (without ".") and ENVIRONMENT VARIABLES in ldap.conf(5).
- Change manpage references to proper ".BR name (section)".

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
 2002-05-09 02:07:41 +00:00
Kurt Zeilenga
46e33e4634 Fix typos 2002-05-04 04:35:41 +00:00
Kurt Zeilenga
7b1d619a58 Basic dnssrv man page 2002-05-04 04:34:58 +00:00
Pierangelo Masarati
71aa1c5dc9 clarifications 2002-05-02 16:49:47 +00:00
Pierangelo Masarati
4f24ebbb8d 3rd step at updating docs by hallvard Furuseth (with minor changes in slapd-meta.5) 2002-05-02 16:35:16 +00:00
Howard Chu
d879fb351b Added config keyword descriptions from ITS#966. Minor cleanup. 2002-05-01 20:24:56 +00:00
Pierangelo Masarati
4ad033a298 couple of fixes 2002-05-01 19:36:24 +00:00
Howard Chu
0bb46f937b From Hallvard, with slight changes 2002-05-01 19:21:21 +00:00
Pierangelo Masarati
1aa96af216 second round at ITS#1749 2002-05-01 16:38:30 +00:00
Pierangelo Masarati
22c45ec87b couple of fixes 2002-04-29 20:36:04 +00:00
Pierangelo Masarati
d019bff7b8 First commit of Hallvard's backend documentation effort 
Backend documentation patch, version 1

================
Most of this text is taken from OpenLDAP.  The work of rewriting it
to manual pages is done by by Hallvard B. Furuseth and placed into
the public domain.  This software is not subject to any license of
the University of Oslo.
================

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
 2002-04-29 20:24:29 +00:00
Howard Chu
5de276fa25 ITS#1749 added maxderefdepth, suffiaxalias, TLSCACertificatePath, 
ucdata-path, moduleload, modulepath. sasl-external-x509dn-convert has
been deleted from the code.
 2002-04-20 10:06:23 +00:00
Howard Chu
e265b47181 Comment out "logfile", its code is behind #ifdef NEW_LOGGING in config.c. 2002-04-20 09:23:19 +00:00
Howard Chu
5770a81595 ITS#1749 added "debug" description, commented out because it has no effect 
without NEW_LOGGING. Added logfile.
 2002-04-20 09:07:24 +00:00
Howard Chu
510f57c8dd ITS#1749 added BDB options 2002-04-20 08:12:03 +00:00
Pierangelo Masarati
4906410ca5 fix typo 2002-04-13 15:07:40 +00:00
Howard Chu
491c0f22e0 ITS#1735 fix typos 2002-04-11 07:39:51 +00:00
Pierangelo Masarati
4a8ab5dbf2 Mostly based on patches provided by Hallvard B. Furuseth 
ITS#1677 - cast away const warnings
ITS#1678 - unsigned char args to ctype funcs
ITS#1682 - don't redefine ldap_debug
ITS#1683 - uninitialized vars
ITS#1703 - ldo_debug initialization
ITS#1705 - unsigned testing
ITS#1706 - socklen_t args
ITS#1719 - back-tcl update (other cleanups/fixes/improvements; yet untested)
ITS#1724 - integerNormalize/integerFilter/integerIndexer bugs
ITS#1725 - libdes not required

Implement back-null (/dev/null style backend)
Cleanup some misc warnings ("%lu" format, unused/uninitialized vars,
        ambiguous operator precedence)

Kurt, please regenerate configure
 2002-04-08 09:43:22 +00:00
Pierangelo Masarati
704ed641eb allow attribute exclusion list in selective replica 2002-03-30 08:57:41 +00:00
Pierangelo Masarati
53e28a63a9 fix typo 2002-03-30 08:46:35 +00:00
Kurt Zeilenga
95691dc8b4 ITS#1680: Fix idle timeout typo 2002-03-25 17:26:07 +00:00
Kurt Zeilenga
409398ea2d s/rootDSEfile/rootDSE/ 2002-02-07 18:17:24 +00:00
Kurt Zeilenga
400af27afa Add clarification to password-hash directive 2002-01-30 00:41:36 +00:00
Howard Chu
7f68a95bac Added TLSVerifyClient configuration notes 2002-01-27 04:49:32 +00:00
Kurt Zeilenga
7ac207dc05 rm noautosubtypes 2002-01-15 02:47:06 +00:00
Howard Chu
93d9a11089 Mention that objectClass names are valid in the attrs=<attrlist> clause. 2002-01-10 10:02:51 +00:00
Kurt Zeilenga
0e2af54a3f Update copyright statements 2002-01-04 21:17:25 +00:00
Kurt Zeilenga
6c44ac070c Zap man pages of deprecated routines 2001-12-22 20:51:27 +00:00
Kurt Zeilenga
f021404b41 disallow bind_v2 is now default 2001-12-21 04:45:04 +00:00
Kurt Zeilenga
7caa803b59 Undocument 'schemacheck off' 2001-12-19 21:28:34 +00:00
Kurt Zeilenga
ff723903c5 Some index clarifications 2001-12-18 02:24:09 +00:00
Howard Chu
dfd26b8d95 Added description of "subordinate" keyword. 2001-12-15 07:15:32 +00:00
Kurt Zeilenga
dffcf0be27 zap friendly 2001-12-05 00:07:04 +00:00
Kurt Zeilenga
493b415255 Rework indexing code, removing "autolang" and making 
"subtypes" and "lang" default behavior.
 2001-12-05 00:06:03 +00:00
Pierangelo Masarati
ae74c1c97c small adjustment 2001-12-04 17:13:25 +00:00
Pierangelo Masarati
6d3df52af9 update limits stuff 2001-12-04 17:10:17 +00:00
Mark Adamson
bd091ce276 Allow size and time limits in slapd.conf for anonymous bound search operations 2001-11-21 20:28:15 +00:00
Kurt Zeilenga
74300deaab Some minor adjustments 2001-11-03 21:53:44 +00:00
Kurt Zeilenga
57a5439d6c Remove derived file 2001-11-03 19:07:05 +00:00
Pierangelo Masarati
cf13ded4fe access control man page 2001-11-03 18:03:10 +00:00
Kurt Zeilenga
fcd1ce0e28 Use defined Root DSE attributes. 
Developed by Julius Enarusai/IBM
Copyright IBM Corp. 2001

Use of this source code is subject to the terms of The OpenLDAP
Public License Version 2.7, 7 September 2001.  No trademarks of the
IBM Corporation are to be used to identify, endorse or promote any
products derived from this code without the prior written consent
of IBM.
 2001-10-23 23:29:41 +00:00
Kurt Zeilenga
850d8eba67 Minor update 2001-10-16 01:16:39 +00:00
Kurt Zeilenga
a466dc75b1 Fix see also formating 2001-09-27 19:56:29 +00:00
Kurt Zeilenga
4abcfca8f5 Clean up DNs and remove extraneous files 2001-09-04 02:47:25 +00:00
Kurt Zeilenga
f7690b1194 Password-hash doesn't support UNIX, KERBEROS, SASL schemes. 2001-08-29 19:37:32 +00:00
Kurt Zeilenga
a9a5a3997d Add dnnolocking warning 2001-08-29 17:08:01 +00:00
Pierangelo Masarati
6a5b253bc6 allow multiple limits setting on one global/per backend config line 2001-08-04 11:09:25 +00:00
Pierangelo Masarati
4919363fa0 more intuitive special limits configuration 2001-08-03 17:25:39 +00:00
Pierangelo Masarati
f35545b058 fix a couple of typos; schemacheck was duplicated 2001-08-01 10:47:44 +00:00
Pierangelo Masarati
8471ef7ed0 add global, per backend and per op_ndn time/size soft, hard and to-be-checked limits (exploited by back-ldbm); see slapd.conf(5) for details 2001-08-01 10:09:04 +00:00
Pierangelo Masarati
2e79b7616b regex-based per op_ndn time/size limits 2001-07-28 12:07:40 +00:00
Pierangelo Masarati
d9889c28ef suffix option; allows partial replication of a database 2001-07-24 13:39:43 +00:00
Randy Kunkee
0ef87764d7 Move backend_syncfreq code down into back-ldbm. Creates new configuration 
for LDBM backends called "dbsync", which takes minimum of one argument up
to 3 args which are sync frequency, # of delays, and delay periods.  See
man page update for "dbsync" configuration for more details.
 2001-06-28 09:20:33 +00:00
Kurt Zeilenga
1229cfcc3f Backout directory config option 2001-06-22 21:00:24 +00:00
Kurt Zeilenga
ff993c7ddb Misc updates to password codes / docs 2001-06-13 05:40:24 +00:00
Kurt Zeilenga
cc6fab319e Add support for separate max incoming for anonymous and authenticated 
sessions (defaults: 256K and 16M respectively).
 2001-05-29 20:00:55 +00:00
Kurt Zeilenga
49a4319b07 document sockbuf_max_incoming 2001-05-29 16:10:08 +00:00
Kurt Zeilenga
351e436dcf Add an LDBM backend "directory" directive (in addition to 
the existing database "directory" directive) to allow setting
of a DB_ENV directory.  Should likely be database specific.
 2001-05-29 01:51:37 +00:00
Kurt Zeilenga
990ab4b119 Randfile 2001-05-02 19:52:58 +00:00
Kurt Zeilenga
26e3fc4625 Document the "threads" directive 2000-10-18 00:22:30 +00:00
Kurt Zeilenga
9520b708eb Fix typo in concurrency description 2000-10-18 00:15:32 +00:00
Kurt Zeilenga
282b192474 Note that the directory containing the replogfile as well as 
the slurpd temporary directory should have limited read/write/execute
access.
 2000-10-16 22:19:29 +00:00
Kurt Zeilenga
df47e87ec3 Zap defaultaccess option 2000-10-13 04:46:50 +00:00
Kurt Zeilenga
bbe9651ca9 fix maxbufsize=factor typo 2000-10-07 02:07:39 +00:00
Kurt Zeilenga
a912e6eea0 Make sure authzid form produces a valid subject DN. Support 
both u: and dn: forms.
Rework sasl-regex DN be of the form
	uid=user,cn=realm,cn=mech,cn=authz
Fix up slapd.conf(5)
 2000-10-06 23:50:38 +00:00
Kurt Zeilenga
1e7fe604e9 Comment on rootpw only be valid if rootdn is with namingContext 2000-10-06 21:19:20 +00:00
Kurt Zeilenga
1b635156ab s/saslregex/sasl-regex/ 
Other minor updates
 2000-10-06 21:16:36 +00:00
Mark Adamson
bf1ee530ea Implementation of SASL authorization. 2000-09-21 17:32:54 +00:00
Kurt Zeilenga
0cd8cf72fb Fix file:: uri 2000-09-19 20:44:05 +00:00
Kurt Zeilenga
34f8561467 Update slurpd with StartTLS and additional SASL parameters 2000-09-15 23:41:07 +00:00
Kurt Zeilenga
5852f7188b Add 'defaultSearchBase' configuration directive to help support 
brain-damaged LDAPv2 clients.
 2000-09-11 21:57:14 +00:00
Kurt Zeilenga
3342ea3b49 Add more bind allow/disallow flags 2000-09-11 18:24:24 +00:00
Kurt Zeilenga
2e13824d0d Add "allow tls_2_anon" to allow StartTLS to force session to anonymous. 
Add "disallow tls_authc" to disallow StartTLS when session is authenticated.
Create and use connection2anonymous routine for consistency.
 2000-09-08 22:59:01 +00:00
Kurt Zeilenga
db67d7cdc5 Add sasl-host directive 2000-08-30 03:50:16 +00:00
Kurt Zeilenga
26e8ba267d Add security factors to man page 2000-08-28 19:17:37 +00:00
Kurt Zeilenga
9715e7f008 Add disallow and requires to man page. Fix sasl ssf handling bug. 2000-08-28 18:58:13 +00:00
Kurt Zeilenga
95e11598ca Add URI to admin guide in See Also section 2000-08-24 23:18:06 +00:00
Kurt Zeilenga
8596bfe2d5 Document sasl_secprops 2000-08-24 01:09:18 +00:00
Kurt Zeilenga
2e4ed9333b Update date as well 2000-08-23 23:43:39 +00:00
Kurt Zeilenga
edd14b7c95 Update index description with substr varients and 
(experimental) subtyping options.
 2000-08-23 23:43:19 +00:00
Kurt Zeilenga
66552eb0bb Fix up examples 2000-08-21 03:10:47 +00:00
Kurt Zeilenga
2683cd6fe6 Update man page header 2000-08-20 01:00:12 +00:00
Kurt Zeilenga
3311d1ca8b Add descriptions for sasl options. 
Clarify other options and re-order a bit.
 2000-08-19 22:14:14 +00:00
Kurt Zeilenga
dd3e3a8fb8 rename admin guide 2000-08-18 02:58:05 +00:00
Mark Adamson
4a5498351e Added SASL authentication to slurpd for connecting to slave LDAP servers. 2000-08-17 16:30:37 +00:00
Kurt Zeilenga
2b3b074b1c Update date 2000-08-13 22:06:44 +00:00
Kurt Zeilenga
f40d19abfc s/SLAPD and SLURPD/OpenLDAP/ .. (admin guide) 2000-08-13 22:00:36 +00:00
Kurt Zeilenga
ee2e7457c7 Clean up attributetype and objectclass description 2000-08-07 23:04:20 +00:00
Kurt Zeilenga
b7f0758fa2 Minor updates, needs to be updated and cleaned up 
Should be PRIMARY source for configuration options.
 2000-07-22 19:04:33 +00:00
Kurt Zeilenga
5fc22599e2 Update SASL code to reuse context through life of session. 
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters
 2000-07-13 22:54:38 +00:00
Kurt Zeilenga
2c7f89b1b2 remove locale option. OpenLDAP is designed only for the "C" locale. 2000-06-20 16:55:23 +00:00
Kurt Zeilenga
55d180f3ab Incomplete update of LDIF, refer to RFC 2000-06-18 19:41:49 +00:00
Kurt Zeilenga
65f9a005ed Add reference to slappasswd(8) 2000-06-18 19:40:38 +00:00
Kurt Zeilenga
93a8125eab Add OpenLDAP RCS ID 2000-06-18 19:39:31 +00:00
Kurt Zeilenga
ec426532b2 Reworked thread code to better support thread-library specific 
r/w locks and thread pools.  Hide internal structures (using
pthread'ish technics).  Place common code in threads.c.  Move
no-thread code to thr_stub.c.  Move thread pool code to tpool.c.
Removed setconcurrency call from initializer, added 'concurrency'
directive to slapd.  Tested code under pthreads, pth, and no-threads.
 2000-06-13 02:42:13 +00:00
Kurt Zeilenga
6892f74529 Remove old schema directives 2000-06-06 07:57:41 +00:00
Kurt Zeilenga
4bc786f34b Y2k copyright update 2000-05-13 02:47:56 +00:00
Kurt Zeilenga
8c386888fa Move default LDBM directory from /usr/tmp to $(localstatedir) 2000-05-03 10:07:21 +00:00