Howard Chu
|
f918243a2f
|
ITS#6256 from Jonathan Clarke
|
2009-08-15 14:05:47 +00:00 |
|
Howard Chu
|
b87553684a
|
More for prev commit
|
2009-08-14 20:02:08 +00:00 |
|
Pierangelo Masarati
|
dc12e58d38
|
allow to look-ahead entry DN without decoding the whole entry
|
2009-08-14 15:33:09 +00:00 |
|
Pierangelo Masarati
|
8ecfb077bf
|
harmonize API: source to dest right to left
|
2009-08-14 14:18:04 +00:00 |
|
Pierangelo Masarati
|
bb3e14ddba
|
honor requested attrs (ITS#6254), including operational
|
2009-08-14 01:18:23 +00:00 |
|
Pierangelo Masarati
|
f283f7ad47
|
improve previous commit; make sure returned entries match filter (ITS#6255); defer sizelimit exceeded detection
|
2009-08-14 00:49:48 +00:00 |
|
Pierangelo Masarati
|
b6cf5ca896
|
make sure filter is applied to final entry (ITS#6255)
|
2009-08-14 00:14:35 +00:00 |
|
Pierangelo Masarati
|
bea861dda5
|
honor sizelimit when filter needs to be split between local and remote (ITS#6253)
|
2009-08-14 00:03:10 +00:00 |
|
Howard Chu
|
9b764c3f9e
|
Fix prev commit again, IPPROTO_TCP is the documented correct approach
|
2009-08-13 21:35:38 +00:00 |
|
Pierangelo Masarati
|
60627ddf93
|
eliminate code duplication
|
2009-08-13 21:24:32 +00:00 |
|
Pierangelo Masarati
|
50764138f1
|
ITS#6243 (forced commit, missing ITS number)
|
2009-08-13 21:01:17 +00:00 |
|
Pierangelo Masarati
|
2d1d2f3008
|
remove misleading comment
|
2009-08-13 21:00:04 +00:00 |
|
Pierangelo Masarati
|
9f80d80dbd
|
expose subordinate databases; add a link to the superior DN
|
2009-08-13 20:58:20 +00:00 |
|
Howard Chu
|
f5bad5673b
|
Fix prev commit, it was not Linux-only as it claimed to be.
|
2009-08-13 20:55:04 +00:00 |
|
Pierangelo Masarati
|
efabe1d279
|
honor per-target tls/chase referrals/rebind as user (ITS#6190)
|
2009-08-13 19:30:37 +00:00 |
|
Pierangelo Masarati
|
f32bc8bc85
|
advertise known exops
|
2009-08-13 15:52:56 +00:00 |
|
Hallvard Furuseth
|
332838dcb0
|
For ITS#6215: Export ber_skip_element() and ber_peek_element()
|
2009-08-12 22:14:35 +00:00 |
|
Hallvard Furuseth
|
b0e6e73d1c
|
ITS#6215 cleanup: Export ber_skip_element() to complement ber_peek_element()
|
2009-08-12 22:13:50 +00:00 |
|
Hallvard Furuseth
|
3e20bda971
|
Trying again: No need to maintain ber->ber_usertag except at ber_printf "!"
|
2009-08-12 22:12:15 +00:00 |
|
Howard Chu
|
a28b346173
|
Add pwGraceExpiry to gracecheck
minor cleanup
revert Other Operations change from 09
filled in IANA considerations (no longer TBD)
Reference RFC4520, not 3383 (obsolete)
|
2009-08-12 02:43:19 +00:00 |
|
Howard Chu
|
b6d4aa13fb
|
Revision 02
|
2009-08-10 02:08:41 +00:00 |
|
Howard Chu
|
c73efa3d57
|
Revision 01 (expired)
|
2009-08-10 02:06:46 +00:00 |
|
Howard Chu
|
3761a2e3a4
|
Added version 10
|
2009-08-10 02:03:50 +00:00 |
|
Hallvard Furuseth
|
791035d93f
|
Fix last commit: cast strcasecmp unsigned char* to char*
|
2009-08-07 21:46:25 +00:00 |
|
Hallvard Furuseth
|
3802aa5483
|
More ITS#6215: Catch malformed elements in ber_get_stringbvl().
Do not use ber_<first/next>_element(), which have no error return.
|
2009-08-07 19:26:11 +00:00 |
|
Hallvard Furuseth
|
bc20500e62
|
More ITS#6215: Define and use ber_tag_and_rest() and ber_<peek/skip>_element()
|
2009-08-07 19:15:26 +00:00 |
|
Hallvard Furuseth
|
95fbdcab4e
|
More ITS#6215: Fix wrong fix in rev 1.121
|
2009-08-07 16:04:25 +00:00 |
|
Howard Chu
|
e229b7c398
|
In session_chkhost get the last CN, not the first.
|
2009-08-07 11:59:42 +00:00 |
|
Howard Chu
|
5b15978248
|
Give more time for sync after master restart
|
2009-08-06 22:15:56 +00:00 |
|
Pierangelo Masarati
|
9ebc168a8a
|
log in case of failure (FIXME: should those logs be at ANY level?)
|
2009-08-04 23:45:42 +00:00 |
|
Pierangelo Masarati
|
1f33edc08e
|
use back-config if supported
|
2009-08-04 23:27:52 +00:00 |
|
Howard Chu
|
9bd09d7b0e
|
Fully parse undefined substring filters so they can be logged
|
2009-08-04 22:41:59 +00:00 |
|
Hallvard Furuseth
|
455c49ba3e
|
Simplify struct bgbvr and ber_get_stringbvl(), preserving behavior.
|
2009-08-04 21:11:38 +00:00 |
|
Pierangelo Masarati
|
3e2ac1f6c0
|
improve previous commit
|
2009-08-04 14:26:40 +00:00 |
|
Pierangelo Masarati
|
38fa7e0621
|
be liberal in accepting CL (ITS#6241)
|
2009-08-04 14:14:17 +00:00 |
|
Howard Chu
|
50688c960c
|
In slap_mods_check, always compare ordering index first
|
2009-08-04 02:42:20 +00:00 |
|
Pierangelo Masarati
|
f2e1b78391
|
silence warnings; misc cleanup; test refresh as non-allowed user
|
2009-08-03 22:49:30 +00:00 |
|
Pierangelo Masarati
|
20371c3eae
|
note about OpenSSL being more liberal than OpenLDAP when there is garbage past the end of a certificateList
|
2009-08-03 14:07:49 +00:00 |
|
Pierangelo Masarati
|
8fc79e1116
|
rework common options (ITS#6049)
|
2009-08-03 13:40:28 +00:00 |
|
Pierangelo Masarati
|
e153f41e90
|
add entry_dup_to(); use it to address ITS#6172 (thanks to Michael Karcher)
|
2009-08-03 13:18:05 +00:00 |
|
Pierangelo Masarati
|
5139241ade
|
blind fix to ITS#6163
|
2009-08-03 13:08:22 +00:00 |
|
Pierangelo Masarati
|
a1ed732822
|
count query answerability; allow configuration of private database
|
2009-08-02 22:00:01 +00:00 |
|
Howard Chu
|
dd88fdbcc3
|
ITS#6152 add olcProxyCacheOffline for manually toggling cache expiration,
assume some external process will tell us when network is on/offline
|
2009-08-02 01:20:03 +00:00 |
|
Howard Chu
|
076c1d23cf
|
Fix attributeCertificateValidate
|
2009-08-01 01:11:15 +00:00 |
|
Howard Chu
|
e8d95fa072
|
Fix certificateListValidate parsing of CRL extensions
|
2009-08-01 00:39:41 +00:00 |
|
Howard Chu
|
d479db53e0
|
Minor cleanup
|
2009-07-31 03:26:03 +00:00 |
|
Howard Chu
|
403ee0b62e
|
Fix, reqcert == ALLOW should ignore cert verification failures
|
2009-07-31 01:51:34 +00:00 |
|
Howard Chu
|
3f2101198b
|
ITS#6239 use our own hostname checking for MozNSS
|
2009-07-31 01:32:51 +00:00 |
|
Hallvard Furuseth
|
02e165258c
|
Might help ITS#6145: change while to do-while, to make visible that the
loop saving malloced data is run at least once.
|
2009-07-31 00:05:32 +00:00 |
|
Howard Chu
|
d4f2a06887
|
Check for CN length match as well in chkhost
|
2009-07-30 21:52:09 +00:00 |
|