Kurt Zeilenga
e87e01b9c5
DNS SRV meat (a work in progress)
2000-05-10 21:48:18 +00:00
Howard Chu
7a586d4e49
Add ld parameter to ldap_pvt_tls_start invocations. See tls.c...
2000-05-10 21:02:46 +00:00
Howard Chu
f0c4f83ea2
libldap/tls.c: change tls_verify_cb to no longer ignore verification errors.
...
This means a ldaps connection may drop before any LDAP protocol exchange
occurs (due to expired cert, unrecognized CAs, etc.).
Change ldap_pvt_tls_connect to copy any TLS error string to ld_error upon
connection failure, otherwise client just sees "can't contact LDAP server."
slapd/connection.c: add flush/delay when SSL_accept fails, to allow any
TLS alerts we generated to propagate back to the client. (Which will then
be picked up by ldap_pvt_tls_connect on the client...)
2000-05-10 17:07:09 +00:00
Kurt Zeilenga
f224e69558
Add experimental code to check simple bind passwords
...
against Cyrus SASLdb. Like other cleartext mechanisms,
should be protected from eavesdropping.
2000-05-10 04:29:51 +00:00
Kurt Zeilenga
d0555fffe6
Error handling changes including separation of client v. server
...
SASL to LDAP translation. plus comments and other minor changes
2000-05-03 18:59:58 +00:00
Kurt Zeilenga
0b3a6786fe
Use (unsigned char) -1 instead of 0xffU.
2000-05-03 18:55:27 +00:00
Kurt Zeilenga
014afae269
setting UFN prefix to NULL should clear prefix not cause crash.
2000-05-03 10:45:36 +00:00
Kurt Zeilenga
95092681dd
Clarify error string, add comment
2000-04-26 09:17:54 +00:00
Kurt Zeilenga
459194f347
Fix typo in multbyte tag code
2000-04-26 09:17:05 +00:00
Kurt Zeilenga
5043287a4c
Fix NULL filter bug
2000-04-25 13:52:44 +00:00
Kurt Zeilenga
802ee714e4
Framework for authpasswd. Needs work. Behind #ifdef
2000-04-25 13:28:03 +00:00
Kurt Zeilenga
1973c664cc
Fix NULL pointer deref bugs
2000-04-25 10:43:15 +00:00
Kurt Zeilenga
da5673c71a
Apply experimental multibyte tag fix
2000-04-25 10:42:32 +00:00
Kurt Zeilenga
274bf59441
replace ldap_dnssrv_init() with lower level calls
...
ldap_domain2dn()
ldap_domain2hostlist()
and provide prototype to soon-to-be-implemented
ldap_dn2domain().
ldap_dnssrv_init(), if needed, can easily be implemented
using ldap_create(), ldap_set_option() and the above
commands.
2000-04-25 10:38:03 +00:00
Kurt Zeilenga
c02d7e2cb6
ITS#503: Extend ldap tools to support SASL/TLS
...
Submitted by Gabor Gombas <gombasg@inf.elte.hu>
2000-04-20 09:23:51 +00:00
Kurt Zeilenga
16dc181de4
Add RCSid
2000-04-19 13:37:52 +00:00
Kurt Zeilenga
6a4ff3b996
Fix == v != bug
2000-04-19 13:35:43 +00:00
Kurt Zeilenga
21431725fc
fix = vs == bug
2000-04-12 01:06:58 +00:00
Kurt Zeilenga
870dbca576
objectclass=* -> NULL
2000-04-12 01:00:48 +00:00
Kurt Zeilenga
4035b05232
ITS#441: unhex escape referrals. Needs review before being
...
applied to RE 1.2.
2000-03-20 22:00:16 +00:00
Kurt Zeilenga
1a348f9fbe
Return okay after setting LDAP_OPT_X_TLS_CERT (ITS#447)
2000-03-18 23:55:51 +00:00
Kurt Zeilenga
4c0be829e1
Fix usage in comment
2000-03-17 02:07:59 +00:00
Kurt Zeilenga
c2050e04d3
ITS#479 fix: ber_put_seqorset() writes a few bytes beyond an allocated buffer
...
Commit based upon patch and comments provided by Alan Clark <aclark@novell.com>.
> Kudos to Dave Steck for the find and fix
2000-03-15 19:47:22 +00:00
Kurt Zeilenga
535cc1dbbc
Add missing ;
2000-03-14 04:27:00 +00:00
Kurt Zeilenga
72c6446ef6
Mark statically allocated BerElement as valid.
2000-03-14 04:25:49 +00:00
Kurt Zeilenga
117b6a91d0
More fixes and comments
2000-03-14 04:08:12 +00:00
Kurt Zeilenga
c43fec53f5
Cyrus SASL uses screwy terms.
2000-03-14 03:08:46 +00:00
Kurt Zeilenga
5701fec1b5
correct callback numbering
2000-03-14 02:59:53 +00:00
Kurt Zeilenga
17527368d1
work args of ldap_negotiated_sasl_bind_s() and provide examples
...
with authentication id and authorization ids. Note: this routine
doesn't actually negotiate anything. It likely should be renamed
ldap_sasl_auth_s() or ldap_sasl_bind_multistep() or something.
2000-03-14 02:54:08 +00:00
Kurt Zeilenga
db662b516f
Fix NT builds and remove lint
2000-03-13 19:30:14 +00:00
Julio Sánchez Fernández
50dafec453
Fixed an irritating problem with nss_ldap and pam_ldap. Since these
...
modules are dynamically loaded, they summon libldap when needed.
However, depending on the security libraries available when the
shared libldap was built, the latter brings up other dependencies.
On some platforms, it seems that no solution is available: no
indirect dynamic dependencies. But for some platforms where this
is supported (in particular, Linux), the shared libldap must
contain info on what other dynamic libraries it needs. We were
failing to put this info into the shared library. This patch
seems to fix it.
2000-03-13 17:55:41 +00:00
Julio Sánchez Fernández
b9fb4c442c
Useronly logic was inverted, we were ignoring the whole ldap.conf,
...
except where we should.
2000-03-13 12:31:35 +00:00
Kurt Zeilenga
c044b2a667
Remove race condition noted in ITS#216.
2000-03-11 00:58:10 +00:00
Kurt Zeilenga
6e5d2eea4e
Add missing parens so that last commit behaves as desired.
2000-03-10 18:16:22 +00:00
Kurt Zeilenga
5b5b43a9e0
ITS#471: fix handling of delete referrals.
2000-03-08 18:56:22 +00:00
Kurt Zeilenga
655c0bda41
Ignore space in filter: ( !(foo=bar))
2000-02-21 20:57:48 +00:00
Kurt Zeilenga
6cb60f381a
Eliminate second session protocol version field.
2000-02-18 19:57:38 +00:00
Kurt Zeilenga
6c6ecc15d5
Add comment concern appropriate use of LDAP_MEMORY_DEBUG
...
(basically, it's for testing internals, don't enable it otherwise)
2000-02-16 23:51:34 +00:00
Kurt Zeilenga
b8c8f6ef6f
Fix ldap_set_option( NULL, LDAP_OPT_PROTOCOL_VERSION, &v ) as
...
suggested by Steve Sonntag.
2000-02-16 22:59:15 +00:00
Kurt Zeilenga
0dbaf87730
Another round of changes behind -DSLAPD_SCHEMA_NOT_COMPAT
...
plus these changes unhidden changes:
remove now meaning --enable-discreteaci configure option
fix ITS#451, slapd filters
Add ber_bvecadd() to support above
constify ldap_pvt_find_wildcard() and misc slapd routines
renamed some slap.h macros
likely broken something
2000-02-14 20:57:34 +00:00
Kurt Zeilenga
d0d80a633a
Put *free(NULL) asserts behind LDAP_MEMORY_DEBUG
2000-02-11 21:11:44 +00:00
Kurt Zeilenga
6968ede534
ITS#450: teach LDBM/GDBM about cursors
2000-02-11 02:05:14 +00:00
Kurt Zeilenga
0ba3d75913
Don't chdir("/"). Root may not be writable to daemon.
...
Only user can select appropriate run directory. Best left to user.
2000-02-08 04:22:31 +00:00
Kurt Zeilenga
25af82b3ea
Use required form if value is zero length, eg "attr-desc:".
...
Use BASE64 if attr-desc includes ";binary"
2000-02-03 22:28:12 +00:00
Kurt Zeilenga
2549654bb5
Add comment about leaked on exit values.... we likely should
...
implement an at_exit() handler.
2000-02-02 21:26:36 +00:00
Luke Howard
30522f7437
Changed (!strcmp(...)==0) to (strcmp(...)==0); obviously
...
wrong. Fix from adamson@andrew.cmu.edu .
2000-02-01 23:34:16 +00:00
Kurt Zeilenga
0919e503cd
Use LDAP_CONST, not const, in public function declarations.
2000-02-01 01:11:26 +00:00
Kurt Zeilenga
02a604db21
Really fix VPATH support...
2000-01-28 21:52:28 +00:00
Kurt Zeilenga
11c92c8fc8
Last change actually broke VPATH support
2000-01-28 21:38:18 +00:00
Kurt Zeilenga
106ec28414
Fix VPATH support.
2000-01-28 21:32:42 +00:00
