mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2024-12-27 03:20:22 +08:00
Code Issues Packages Projects Releases Wiki Activity
10,012 Commits 38 Branches 307 Tags 74 MiB
fa3baaeae9
Commit Graph

271 Commits

Author SHA1 Message Date
Howard Chu
5de276fa25 ITS#1749 added maxderefdepth, suffiaxalias, TLSCACertificatePath, 
ucdata-path, moduleload, modulepath. sasl-external-x509dn-convert has
been deleted from the code.
 2002-04-20 10:06:23 +00:00
Howard Chu
e265b47181 Comment out "logfile", its code is behind #ifdef NEW_LOGGING in config.c. 2002-04-20 09:23:19 +00:00
Howard Chu
5770a81595 ITS#1749 added "debug" description, commented out because it has no effect 
without NEW_LOGGING. Added logfile.
 2002-04-20 09:07:24 +00:00
Howard Chu
510f57c8dd ITS#1749 added BDB options 2002-04-20 08:12:03 +00:00
Pierangelo Masarati
4906410ca5 fix typo 2002-04-13 15:07:40 +00:00
Howard Chu
491c0f22e0 ITS#1735 fix typos 2002-04-11 07:39:51 +00:00
Pierangelo Masarati
4a8ab5dbf2 Mostly based on patches provided by Hallvard B. Furuseth 
ITS#1677 - cast away const warnings
ITS#1678 - unsigned char args to ctype funcs
ITS#1682 - don't redefine ldap_debug
ITS#1683 - uninitialized vars
ITS#1703 - ldo_debug initialization
ITS#1705 - unsigned testing
ITS#1706 - socklen_t args
ITS#1719 - back-tcl update (other cleanups/fixes/improvements; yet untested)
ITS#1724 - integerNormalize/integerFilter/integerIndexer bugs
ITS#1725 - libdes not required

Implement back-null (/dev/null style backend)
Cleanup some misc warnings ("%lu" format, unused/uninitialized vars,
        ambiguous operator precedence)

Kurt, please regenerate configure
 2002-04-08 09:43:22 +00:00
Pierangelo Masarati
704ed641eb allow attribute exclusion list in selective replica 2002-03-30 08:57:41 +00:00
Pierangelo Masarati
53e28a63a9 fix typo 2002-03-30 08:46:35 +00:00
Kurt Zeilenga
95691dc8b4 ITS#1680: Fix idle timeout typo 2002-03-25 17:26:07 +00:00
Kurt Zeilenga
409398ea2d s/rootDSEfile/rootDSE/ 2002-02-07 18:17:24 +00:00
Kurt Zeilenga
400af27afa Add clarification to password-hash directive 2002-01-30 00:41:36 +00:00
Howard Chu
7f68a95bac Added TLSVerifyClient configuration notes 2002-01-27 04:49:32 +00:00
Kurt Zeilenga
7ac207dc05 rm noautosubtypes 2002-01-15 02:47:06 +00:00
Howard Chu
93d9a11089 Mention that objectClass names are valid in the attrs=<attrlist> clause. 2002-01-10 10:02:51 +00:00
Kurt Zeilenga
0e2af54a3f Update copyright statements 2002-01-04 21:17:25 +00:00
Kurt Zeilenga
6c44ac070c Zap man pages of deprecated routines 2001-12-22 20:51:27 +00:00
Kurt Zeilenga
f021404b41 disallow bind_v2 is now default 2001-12-21 04:45:04 +00:00
Kurt Zeilenga
7caa803b59 Undocument 'schemacheck off' 2001-12-19 21:28:34 +00:00
Kurt Zeilenga
ff723903c5 Some index clarifications 2001-12-18 02:24:09 +00:00
Howard Chu
dfd26b8d95 Added description of "subordinate" keyword. 2001-12-15 07:15:32 +00:00
Kurt Zeilenga
dffcf0be27 zap friendly 2001-12-05 00:07:04 +00:00
Kurt Zeilenga
493b415255 Rework indexing code, removing "autolang" and making 
"subtypes" and "lang" default behavior.
 2001-12-05 00:06:03 +00:00
Pierangelo Masarati
ae74c1c97c small adjustment 2001-12-04 17:13:25 +00:00
Pierangelo Masarati
6d3df52af9 update limits stuff 2001-12-04 17:10:17 +00:00
Mark Adamson
bd091ce276 Allow size and time limits in slapd.conf for anonymous bound search operations 2001-11-21 20:28:15 +00:00
Kurt Zeilenga
74300deaab Some minor adjustments 2001-11-03 21:53:44 +00:00
Kurt Zeilenga
57a5439d6c Remove derived file 2001-11-03 19:07:05 +00:00
Pierangelo Masarati
cf13ded4fe access control man page 2001-11-03 18:03:10 +00:00
Kurt Zeilenga
fcd1ce0e28 Use defined Root DSE attributes. 
Developed by Julius Enarusai/IBM
Copyright IBM Corp. 2001

Use of this source code is subject to the terms of The OpenLDAP
Public License Version 2.7, 7 September 2001.  No trademarks of the
IBM Corporation are to be used to identify, endorse or promote any
products derived from this code without the prior written consent
of IBM.
 2001-10-23 23:29:41 +00:00
Kurt Zeilenga
850d8eba67 Minor update 2001-10-16 01:16:39 +00:00
Kurt Zeilenga
a466dc75b1 Fix see also formating 2001-09-27 19:56:29 +00:00
Kurt Zeilenga
4abcfca8f5 Clean up DNs and remove extraneous files 2001-09-04 02:47:25 +00:00
Kurt Zeilenga
f7690b1194 Password-hash doesn't support UNIX, KERBEROS, SASL schemes. 2001-08-29 19:37:32 +00:00
Kurt Zeilenga
a9a5a3997d Add dnnolocking warning 2001-08-29 17:08:01 +00:00
Pierangelo Masarati
6a5b253bc6 allow multiple limits setting on one global/per backend config line 2001-08-04 11:09:25 +00:00
Pierangelo Masarati
4919363fa0 more intuitive special limits configuration 2001-08-03 17:25:39 +00:00
Pierangelo Masarati
f35545b058 fix a couple of typos; schemacheck was duplicated 2001-08-01 10:47:44 +00:00
Pierangelo Masarati
8471ef7ed0 add global, per backend and per op_ndn time/size soft, hard and to-be-checked limits (exploited by back-ldbm); see slapd.conf(5) for details 2001-08-01 10:09:04 +00:00
Pierangelo Masarati
2e79b7616b regex-based per op_ndn time/size limits 2001-07-28 12:07:40 +00:00
Pierangelo Masarati
d9889c28ef suffix option; allows partial replication of a database 2001-07-24 13:39:43 +00:00
Randy Kunkee
0ef87764d7 Move backend_syncfreq code down into back-ldbm. Creates new configuration 
for LDBM backends called "dbsync", which takes minimum of one argument up
to 3 args which are sync frequency, # of delays, and delay periods.  See
man page update for "dbsync" configuration for more details.
 2001-06-28 09:20:33 +00:00
Kurt Zeilenga
1229cfcc3f Backout directory config option 2001-06-22 21:00:24 +00:00
Kurt Zeilenga
ff993c7ddb Misc updates to password codes / docs 2001-06-13 05:40:24 +00:00
Kurt Zeilenga
cc6fab319e Add support for separate max incoming for anonymous and authenticated 
sessions (defaults: 256K and 16M respectively).
 2001-05-29 20:00:55 +00:00
Kurt Zeilenga
49a4319b07 document sockbuf_max_incoming 2001-05-29 16:10:08 +00:00
Kurt Zeilenga
351e436dcf Add an LDBM backend "directory" directive (in addition to 
the existing database "directory" directive) to allow setting
of a DB_ENV directory.  Should likely be database specific.
 2001-05-29 01:51:37 +00:00
Kurt Zeilenga
990ab4b119 Randfile 2001-05-02 19:52:58 +00:00
Kurt Zeilenga
26e3fc4625 Document the "threads" directive 2000-10-18 00:22:30 +00:00
Kurt Zeilenga
9520b708eb Fix typo in concurrency description 2000-10-18 00:15:32 +00:00
Kurt Zeilenga
282b192474 Note that the directory containing the replogfile as well as 
the slurpd temporary directory should have limited read/write/execute
access.
 2000-10-16 22:19:29 +00:00
Kurt Zeilenga
df47e87ec3 Zap defaultaccess option 2000-10-13 04:46:50 +00:00
Kurt Zeilenga
bbe9651ca9 fix maxbufsize=factor typo 2000-10-07 02:07:39 +00:00
Kurt Zeilenga
a912e6eea0 Make sure authzid form produces a valid subject DN. Support 
both u: and dn: forms.
Rework sasl-regex DN be of the form
	uid=user,cn=realm,cn=mech,cn=authz
Fix up slapd.conf(5)
 2000-10-06 23:50:38 +00:00
Kurt Zeilenga
1e7fe604e9 Comment on rootpw only be valid if rootdn is with namingContext 2000-10-06 21:19:20 +00:00
Kurt Zeilenga
1b635156ab s/saslregex/sasl-regex/ 
Other minor updates
 2000-10-06 21:16:36 +00:00
Mark Adamson
bf1ee530ea Implementation of SASL authorization. 2000-09-21 17:32:54 +00:00
Kurt Zeilenga
0cd8cf72fb Fix file:: uri 2000-09-19 20:44:05 +00:00
Kurt Zeilenga
34f8561467 Update slurpd with StartTLS and additional SASL parameters 2000-09-15 23:41:07 +00:00
Kurt Zeilenga
5852f7188b Add 'defaultSearchBase' configuration directive to help support 
brain-damaged LDAPv2 clients.
 2000-09-11 21:57:14 +00:00
Kurt Zeilenga
3342ea3b49 Add more bind allow/disallow flags 2000-09-11 18:24:24 +00:00
Kurt Zeilenga
2e13824d0d Add "allow tls_2_anon" to allow StartTLS to force session to anonymous. 
Add "disallow tls_authc" to disallow StartTLS when session is authenticated.
Create and use connection2anonymous routine for consistency.
 2000-09-08 22:59:01 +00:00
Kurt Zeilenga
db67d7cdc5 Add sasl-host directive 2000-08-30 03:50:16 +00:00
Kurt Zeilenga
26e8ba267d Add security factors to man page 2000-08-28 19:17:37 +00:00
Kurt Zeilenga
9715e7f008 Add disallow and requires to man page. Fix sasl ssf handling bug. 2000-08-28 18:58:13 +00:00
Kurt Zeilenga
95e11598ca Add URI to admin guide in See Also section 2000-08-24 23:18:06 +00:00
Kurt Zeilenga
8596bfe2d5 Document sasl_secprops 2000-08-24 01:09:18 +00:00
Kurt Zeilenga
2e4ed9333b Update date as well 2000-08-23 23:43:39 +00:00
Kurt Zeilenga
edd14b7c95 Update index description with substr varients and 
(experimental) subtyping options.
 2000-08-23 23:43:19 +00:00
Kurt Zeilenga
66552eb0bb Fix up examples 2000-08-21 03:10:47 +00:00
Kurt Zeilenga
2683cd6fe6 Update man page header 2000-08-20 01:00:12 +00:00
Kurt Zeilenga
3311d1ca8b Add descriptions for sasl options. 
Clarify other options and re-order a bit.
 2000-08-19 22:14:14 +00:00
Kurt Zeilenga
dd3e3a8fb8 rename admin guide 2000-08-18 02:58:05 +00:00
Mark Adamson
4a5498351e Added SASL authentication to slurpd for connecting to slave LDAP servers. 2000-08-17 16:30:37 +00:00
Kurt Zeilenga
2b3b074b1c Update date 2000-08-13 22:06:44 +00:00
Kurt Zeilenga
f40d19abfc s/SLAPD and SLURPD/OpenLDAP/ .. (admin guide) 2000-08-13 22:00:36 +00:00
Kurt Zeilenga
ee2e7457c7 Clean up attributetype and objectclass description 2000-08-07 23:04:20 +00:00
Kurt Zeilenga
b7f0758fa2 Minor updates, needs to be updated and cleaned up 
Should be PRIMARY source for configuration options.
 2000-07-22 19:04:33 +00:00
Kurt Zeilenga
5fc22599e2 Update SASL code to reuse context through life of session. 
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters
 2000-07-13 22:54:38 +00:00
Kurt Zeilenga
2c7f89b1b2 remove locale option. OpenLDAP is designed only for the "C" locale. 2000-06-20 16:55:23 +00:00
Kurt Zeilenga
55d180f3ab Incomplete update of LDIF, refer to RFC 2000-06-18 19:41:49 +00:00
Kurt Zeilenga
65f9a005ed Add reference to slappasswd(8) 2000-06-18 19:40:38 +00:00
Kurt Zeilenga
93a8125eab Add OpenLDAP RCS ID 2000-06-18 19:39:31 +00:00
Kurt Zeilenga
ec426532b2 Reworked thread code to better support thread-library specific 
r/w locks and thread pools.  Hide internal structures (using
pthread'ish technics).  Place common code in threads.c.  Move
no-thread code to thr_stub.c.  Move thread pool code to tpool.c.
Removed setconcurrency call from initializer, added 'concurrency'
directive to slapd.  Tested code under pthreads, pth, and no-threads.
 2000-06-13 02:42:13 +00:00
Kurt Zeilenga
6892f74529 Remove old schema directives 2000-06-06 07:57:41 +00:00
Kurt Zeilenga
4bc786f34b Y2k copyright update 2000-05-13 02:47:56 +00:00
Kurt Zeilenga
8c386888fa Move default LDBM directory from /usr/tmp to $(localstatedir) 2000-05-03 10:07:21 +00:00
Kurt Zeilenga
393ff0ad71 Add .ldaprc to SYSNOPSIS 2000-04-12 01:23:43 +00:00
Kurt Zeilenga
58987407fe Add comment concerning 'directory' LDBM option... a separate directory 
must be specified for each database.
 2000-03-03 19:51:39 +00:00
Kurt Zeilenga
152c0e25c2 Add reference to RFC 2307 (rootpw) 2000-03-01 22:58:30 +00:00
Kurt Zeilenga
ab7c490960 Add BINDDN user-only directive to .ldaprc 
Used only for simple bind when dn == NULL and password != NULL.
 1999-12-17 03:27:16 +00:00
Kurt Zeilenga
f6829ee903 Initial commit of new ACL engine. Engine supports descrete access 
privs, additive/substractive rules, and rule continuation.  Existing
rules that use 'defaultaccess none' should be 100% compatible.  Rules
that rely other defaultaccess settings will require addition of
explicit clauses granting the access.
Needs additional testing and tuning of logs
 1999-10-21 17:53:56 +00:00
Kurt Zeilenga
7e53b5bdeb Change 'attribute' directive to 'attributetype' 
(and allowing 'attribute' for backwards compatibility).
manuals and *.schema to be updated as time permits.
 1999-10-13 20:28:00 +00:00
Kurt Zeilenga
35655c056f Reimplement LDBM_SYNC/LDBM_NOSYNC code (dbnosync). 
Old code applied sync flags to store(), however supported DBMs
require such flags to be specified during open().  The new
code now applies flags in ldbm_cache_open (which calls ldbm_open).
ldbm_cache_close() now calls ldbm_sync().  This will force
a updating of on-disk contents after each LDAP operation.
The old code either failed to sync the on-disk contents until
close or synced on every store.   Per LDBM operation syncing
*should* be safe enough... real data safety requires transactions.
Removed nosync option from BDB2 as it is not compatible with
txn support.
Also added code to disable DBM level locking as slapd is only
process acessing the databases (dbnolocking).
 1999-09-23 19:49:20 +00:00
Kurt Zeilenga
305ed36159 Add RCSid and Copyright 1999-09-12 04:41:47 +00:00
Kurt Zeilenga
521f761b2a s/patch/path/ 1999-09-06 18:25:48 +00:00
Howard Chu
ccab3faa58 Update for attribute, objectclass, and objectidentifier descriptions. 1999-08-20 00:32:36 +00:00
Kurt Zeilenga
f422f01109 s/U-Mich/OpenLDAP/ in examples 1999-08-18 02:01:24 +00:00
Kurt Zeilenga
1b2aeeee21 s/ldif2ldbm/slapadd/ and similiar changes 
ldif updates (add URL description).
 1999-08-17 20:25:16 +00:00
Kurt Zeilenga
9e93d5eba6 lastmod is on by default. 1999-08-05 23:52:14 +00:00
Kurt Zeilenga
29b0ed18df Fix misplaced paragraph tag 1999-07-21 17:31:37 +00:00
Julio Sánchez Fernández
fbd4c530ba Document a few TLS options that do something. 1999-07-16 19:56:32 +00:00
Kurt Zeilenga
73276e84ae Import experimental referral implementation from OPENLDAP_DEVEL_REFERRALS. 
Includes support for update referral for each replicated backend.
	Reworked replication test to use update referral.
Includes major rewrite of response encoding codes (result.c).
Includes reworked alias support and eliminates old suffix alias codes
(can be emulated using named alias).
Includes (untested) support for the Manage DSA IT control.
Works in LDAPv2 world.  Still testing in LDAPv3 world.
Added default referral (test009) test.
 1999-07-16 02:45:46 +00:00
Kurt Zeilenga
7e4b3bc2e7 initial commit of idletimeout code... everything but the actual timeout. 1999-06-18 22:54:19 +00:00
Hallvard Furuseth
20f90f3031 ITS#118: Remove "delete" and add [self] in access levels for "defaultaccess" 1999-05-03 22:55:27 +00:00
Kurt Zeilenga
01b967244d Make 'schemacheck on' the default. 1999-04-29 18:10:40 +00:00
Hallvard Furuseth
79f7c85067 Add locale support (slapd.conf keyword "locale") to slapd if HAVE_LOCALE_H 1999-02-22 21:01:24 +00:00
Kurt Spanier
68a8798594 Definition of slapd pid and args files as slapd.conf general parameters; 
introduction of pid/agrs parameters to the test-suite slapd.conf files;
creation of sub-directory test/var for storage of pid/args files during test;
update of the slapd and slapd.conf man pages.
(The change reduces dependency on ldapconfig.h, since SLAPD_PIDEXT
 and SLAPD_ARGSEXT are deleted from the code.)
 1999-01-21 15:53:54 +00:00
Kurt Zeilenga
d14454aa0e Document fact that rootpw need not be cleartext. 1999-01-15 20:33:56 +00:00
Kurt Zeilenga
d66a450344 Update init and ldap.conf(5) to handle LDAPNOINIT, LDAPCONF, LDAPRC 
environment settings.
 1999-01-14 23:04:08 +00:00
Kurt Zeilenga
668d6ecf11 Fix typo in dbcachenowsync description. 1998-12-30 20:15:14 +00:00
Kurt Zeilenga
654d3c0814 Fix minor formatting problem (missing .TP) with dbcachenowsync description. 1998-12-30 19:58:31 +00:00
Kurt Zeilenga
ba84e23867 Add ldap.conf man page. 1998-11-29 20:58:40 +00:00
Kurt Zeilenga
edd464ee8f Update build environment: 
default sysconfdir subdirectory is openldap instead of ldap.
    This removes conflicts with other ldap subsystems.  Should
    be configure option.
  *.conf files are now preserved.  A *.conf.default are always
    created with the latest conf.
  *.help and ldapfriendly are now placed in $(datadir)/$(ldap_subdir)
  updated man pages to reflect changes.
 1998-11-29 19:48:28 +00:00
Kurt Zeilenga
1fc810bfe5 Added support for ldap.conf file. See ldap.conf(5) for details. 
Modified clients to reduce use of ldapconfig.h.edit.
ldap_{get,set}_option support is relatively complete.  Needs
to be extended to support other "features" of OpenLDAP.
 1998-11-10 23:37:30 +00:00
Kurt Zeilenga
3f1b97481c Make flush_writes the default. Change option to 'dbcachenowsync'. 
Change backend struct option to li_dbcachewsync.
 1998-11-07 02:25:32 +00:00
Kurt Zeilenga
2a869f5a99 merged with autoconf branch 1998-10-25 01:41:42 +00:00
Kurt Zeilenga
adc2134f03 Modified build environment to correctly support bin,sbin,libexec,etc 
and setting of variables from Make-platform with defaults in Make-common.
 1998-08-19 18:19:39 +00:00
Kurt Zeilenga
079f21c3ac Added LIBEXECDIR, SBINDIR and patched install rules and files as needed. 1998-08-19 02:38:35 +00:00
Kurt Zeilenga
04ff180cbf Modified make system to support CVS instead of RCS 1998-08-09 01:24:49 +00:00
Kurt Zeilenga
42e0d83cb3 Initial revision 1998-08-09 00:43:13 +00:00