Commit Graph

4879 Commits

Author SHA1 Message Date
Kurt Zeilenga
e3ffc1b165 Revert last commit 2003-12-16 01:55:56 +00:00
Pierangelo Masarati
e2483d8a9b honor '!' (objectClass negation) when checking attribute presence in list 2003-12-16 01:10:33 +00:00
Pierangelo Masarati
ee34f3fb64 add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication 2003-12-16 00:49:10 +00:00
Howard Chu
6e6bef8f56 Fix - need to initialize lutil_passwd. 2003-12-16 00:39:29 +00:00
Pierangelo Masarati
bc972e0656 allow 'AUTHZ' mech in proxyAuthz control to allow also the <mech> part of the 'u:' user 2003-12-15 18:19:14 +00:00
Pierangelo Masarati
3a5c53a8b1 typo 2003-12-14 15:36:46 +00:00
Pierangelo Masarati
b4629f1e79 fix previous commits 2003-12-14 14:08:15 +00:00
Pierangelo Masarati
588f1f6185 resolve naming conflicts when compiling rwm overlay as static (will disappear as soon as rwm stuff is removed from back-ldap/back-meta) 2003-12-14 11:13:25 +00:00
Kurt Zeilenga
5b0236f4ae Add u: comment 2003-12-13 23:41:44 +00:00
Kurt Zeilenga
1fadacaa31 Forward parse the uauthzid. A realm cannot be specified unless
a mechanism is specified.  (Few mechanisms (DIGEST-MD5 only) support
separate realms.)
2003-12-13 23:38:05 +00:00
Pierangelo Masarati
4602c935f7 saslAuthzTo/From stuff
when comparing IDs to saslAuthzTo/From values, the saslAuthzTo
saslAuthzFrom values can take different forms:

dn[.<style>]:<pattern>

<style> ::= 	exact		; exact match
		children	; children of <pattern> match
		subtree		; <pattern> or children of <pattern> match
		regex		; <pattern> is regcomp() & regexec()
if no <style>, then exact is assumed

u[.<mech>][/<realm>]:<user>

when parsing a proxyAuthz value, only exact DN is allowed,
and no <mech> can be specified.  <user> cannot contain ':'
and <mech> cannot contain '/'.
2003-12-13 23:02:59 +00:00
Howard Chu
0d8613c274 Use c_authmech when c_sasl_bind_mech is empty 2003-12-13 22:43:01 +00:00
Howard Chu
e85cd1e154 Fix prev commit, use c_authtype 2003-12-13 22:16:03 +00:00
Howard Chu
d9aec4ef28 Always set c_authmech 2003-12-13 21:39:51 +00:00
Kurt Zeilenga
4bedf015f0 cleanup 2003-12-13 18:57:00 +00:00
Kurt Zeilenga
dbc37977f2 Look for the '@' in userid@realm in reverse so that a@b@c results
in userid of a@b and realm of c.
2003-12-13 17:25:59 +00:00
Pierangelo Masarati
6e5ddd6420 note a potential problem 2003-12-13 17:21:17 +00:00
Pierangelo Masarati
5a00f25542 conn must be non-null 2003-12-13 15:29:49 +00:00
Pierangelo Masarati
d6bc071dd9 add subtree/children styles to saslAuthzTo/From; 'dn:' now defaults to exact 2003-12-13 12:23:56 +00:00
Pierangelo Masarati
43db7cf4bf cleanup saslauthz code 2003-12-13 10:58:31 +00:00
Pierangelo Masarati
529a03df53 use dedicated admin identity to proxyAuthz 2003-12-13 10:57:42 +00:00
Pierangelo Masarati
9c5fe98a79 declare overlays_init() 2003-12-13 10:57:13 +00:00
Howard Chu
b011c51390 Clean up entry initialization 2003-12-13 02:00:07 +00:00
Kurt Zeilenga
552a51ca50 Tweak the codes 2003-12-11 07:28:01 +00:00
Jong Hyuk Choi
fa2aa5bb25 fix for concurrent persistent searches 2003-12-11 00:04:52 +00:00
Howard Chu
2aca8de6b3 Whitespace 2003-12-10 08:52:19 +00:00
Howard Chu
e28d089a93 Fixup overlay build environment 2003-12-10 08:45:53 +00:00
Pierangelo Masarati
409003a731 make names unique, since back-ldap/back-meta still have/use suffix_massage* routines 2003-12-10 00:15:02 +00:00
Pierangelo Masarati
b5bba83a31 add rwm overlay configure and make stuff (need autoconf/autoheader ...) 2003-12-09 23:50:10 +00:00
Pierangelo Masarati
0176e02398 cleanup handling of unknown directives ... 2003-12-09 23:49:13 +00:00
Howard Chu
cc743d2c1f ITS#2865 don't try to calloc 0 bytes, log an error and return instead.
Don't crash in slapcat when NULL entry is returned.
2003-12-09 20:10:44 +00:00
Howard Chu
67ee75ccd8 ITS#2868 check result from slap_startup 2003-12-09 19:26:14 +00:00
Howard Chu
313bb1dcae Minor cleanup. Still need to address ITS#2866 point 2 2003-12-09 19:09:58 +00:00
Kurt Zeilenga
38ccdaf7a3 unifdef -DLDAP_CONTROL_PAGEDRESULTS (as it is always defined) 2003-12-08 18:16:07 +00:00
Kurt Zeilenga
fbba83b20f notices and acknowledgements 2003-12-08 17:41:40 +00:00
Kurt Zeilenga
fd5ded3afb notices and acknowledgements 2003-12-07 19:19:18 +00:00
Howard Chu
be1a728c5b Added sc_next and sc_cleanup to slap_callback 2003-12-07 08:51:23 +00:00
Howard Chu
0690f79a5a Cleanup unknown config directive handling. 2003-12-07 07:07:00 +00:00
Howard Chu
864aea13f7 ITS#2864 removed sl_mark/sl_release code 2003-12-07 04:00:47 +00:00
Howard Chu
b5052153c2 Minor cleanup 2003-12-07 03:59:54 +00:00
Howard Chu
b0b3eff457 ITS#2864 don't use sl_mark/release. 2003-12-07 03:41:10 +00:00
Howard Chu
9d3c808428 Fix bogus free 2003-12-06 23:54:22 +00:00
Howard Chu
44fc00b4c0 Remove trailing whitespace 2003-12-06 23:53:46 +00:00
Howard Chu
11a4b3eb57 Use runqueue for consistency checker 2003-12-06 23:32:56 +00:00
Howard Chu
74db966ebb Move SLAB_SIZE def to slap.h 2003-12-06 22:30:45 +00:00
Howard Chu
0cef026e98 More memory cleanup 2003-12-06 21:55:47 +00:00
Kurt Zeilenga
c425a7ce1d Move back-tcl to the Attic 2003-12-06 21:37:44 +00:00
Kurt Zeilenga
da6d557cdc Notices 2003-12-06 19:25:01 +00:00
Howard Chu
c59e89de2f Clear ocflags 2003-12-06 14:39:07 +00:00
Pierangelo Masarati
4ccd44af8b improvements 2003-12-06 14:35:45 +00:00