Pierangelo Masarati
|
f8d1a61866
|
more on clarification of special proxy identities and resilience to connection failure
|
2006-10-07 18:07:56 +00:00 |
|
Pierangelo Masarati
|
5714f8565f
|
fix rebind with idassert when a connection expires; also, fix override
|
2006-09-30 01:11:19 +00:00 |
|
Pierangelo Masarati
|
6e18cdb5fd
|
add basic monitoring support to back-ldap/slapo-chain (slapo-chain needs work)
|
2006-09-14 01:05:48 +00:00 |
|
Pierangelo Masarati
|
150a4f106c
|
improve timeout support (ITS#4157, ITS#4663); manpage cleanup
|
2006-09-04 08:24:05 +00:00 |
|
Pierangelo Masarati
|
34af916e3f
|
fix response sending while rebinding (ITS#4597)
|
2006-06-24 16:58:49 +00:00 |
|
Pierangelo Masarati
|
3ebb40c4dd
|
port identity assertion to back-meta; share as much code as possible with back-ldap; misc cleanup
|
2006-06-15 23:12:38 +00:00 |
|
Pierangelo Masarati
|
740f196548
|
rework quarantine locking and so
|
2006-06-07 23:25:38 +00:00 |
|
Pierangelo Masarati
|
85c9a7b4c5
|
further cleanop of previous commits
|
2006-05-30 00:40:39 +00:00 |
|
Pierangelo Masarati
|
f5fcd2c169
|
cleanup previous commit
|
2006-05-30 00:12:23 +00:00 |
|
Pierangelo Masarati
|
a6406de871
|
make room for plugins that deal with quarantine end
|
2006-05-29 21:43:20 +00:00 |
|
Pierangelo Masarati
|
795841b5a4
|
implement proxy quarantine (ITS#4569)
|
2006-05-27 19:54:27 +00:00 |
|
Pierangelo Masarati
|
e5c173691d
|
add cancel strategies (ITS#4560)
|
2006-05-20 14:29:01 +00:00 |
|
Pierangelo Masarati
|
0c33c17bb5
|
"single-conn" forces flushing of existing conns during rebind on same conn (ITS#4546)
|
2006-05-14 17:32:15 +00:00 |
|
Pierangelo Masarati
|
373ded8d24
|
add URI list resorting feature (ITS#4524)
|
2006-05-06 16:15:25 +00:00 |
|
Pierangelo Masarati
|
0500576056
|
add support for old proxyAuthz encoding; allow to workaround buggy implementations of the new version (now RFC4370)
|
2006-04-08 11:12:30 +00:00 |
|
Pierangelo Masarati
|
8c1b8d3f7b
|
actually, if a connection is already in the AVL tree, use it if not binding; otherwise use a tainted one; taint connections that must be freed when refcnt goes to zero
|
2006-04-07 01:28:56 +00:00 |
|
Pierangelo Masarati
|
3861c47316
|
queue implicit binds (ITS#4409)
|
2006-03-03 16:27:00 +00:00 |
|
Pierangelo Masarati
|
54aefe30f7
|
implement proxy long-lived connection TTL
|
2006-02-01 23:10:12 +00:00 |
|
Pierangelo Masarati
|
543c588772
|
don't send error with back-meta
|
2006-01-09 15:13:29 +00:00 |
|
Howard Chu
|
2b39a26150
|
ITS#4315 fix bind concurrency issue
|
2006-01-09 09:14:53 +00:00 |
|
Kurt Zeilenga
|
acbb5cf689
|
Happy new year!
|
2006-01-03 23:11:52 +00:00 |
|
Pierangelo Masarati
|
1b42fde372
|
implement (per-target) per-conn proxy-side idle-timeout (ITS#4115); revitalize (per-target) network-timeout in back-meta; fix issue with connection initialization error in ldap_back_retry(); cleanup configuration of back-ldap
|
2005-12-07 17:35:02 +00:00 |
|
Pierangelo Masarati
|
3e7fd464dc
|
streamline back-ldap/slapo-chain configuration; add the possibility to cache non-configured, anonymous referral URIs
|
2005-11-19 17:48:33 +00:00 |
|
Pierangelo Masarati
|
7fa4b159bf
|
fix dangling resources issue in slapd-ldap; completely rework slapo-chain to fix the resource leak/concurrency issue; add support for multiple well-known URIs to set credentials for, and deal with unknown URIs anonymously; similar reworking and cleanup for slapd-meta
|
2005-11-19 15:00:50 +00:00 |
|
Pierangelo Masarati
|
4cab386d13
|
backport write operation timeouts from back-meta to back-ldap; minor cleanup & silence warnings
|
2005-11-06 23:29:10 +00:00 |
|
Pierangelo Masarati
|
37f4e80929
|
hide unused member (will likely be removed)
|
2005-09-24 18:46:01 +00:00 |
|
Pierangelo Masarati
|
112be0118e
|
cleanup states/timeout handling in back-ldap/meta; add connection pooling and defer of pseudoroot bind to back-meta
|
2005-09-24 18:39:26 +00:00 |
|
Pierangelo Masarati
|
c6e2a69f27
|
fix tls propagation, including rebind
|
2005-08-11 16:01:24 +00:00 |
|
Pierangelo Masarati
|
4ed743cc84
|
remove unrequired member; address ITS#3913
|
2005-08-02 22:48:30 +00:00 |
|
Pierangelo Masarati
|
982981d465
|
fix potential deadlock; improve idassert in case of authzFrom rules (new flag values); rootdn can always idassert
|
2005-07-03 23:27:56 +00:00 |
|
Pierangelo Masarati
|
9e811df052
|
seems to definitely fix issues related to ITS#3808
|
2005-06-29 16:38:09 +00:00 |
|
Pierangelo Masarati
|
a7f44159c1
|
complete back-config support, including chain overlay; passes all tests; HEADS-UP: few syntax changes (essentially backwards compatible)
|
2005-05-23 07:25:00 +00:00 |
|
Pierangelo Masarati
|
da2a26d19f
|
first round of back-config support; need to #define LDAP_BACK_BCONFIG; no support for rewrite and so, still stuff to fix. Doesn't pass most of the tests
|
2005-05-21 19:07:14 +00:00 |
|
Pierangelo Masarati
|
c80eb34888
|
honor T-F filters (ITS#3706) and some cleanup
|
2005-05-05 00:07:17 +00:00 |
|
Pierangelo Masarati
|
a141e3badf
|
enable use of asynchronous call to StartTLS
|
2005-04-16 02:56:46 +00:00 |
|
Pierangelo Masarati
|
5affbfa428
|
add SASL bind for acl-authc; use slap_bindconf
|
2005-04-10 23:44:06 +00:00 |
|
Pierangelo Masarati
|
43138aa500
|
use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup
|
2005-02-05 15:55:02 +00:00 |
|
Pierangelo Masarati
|
cfc77f0a0a
|
make referrals chasing optional (default is to chase them)
|
2005-01-30 22:56:59 +00:00 |
|
Pierangelo Masarati
|
c6b6d2a5ec
|
StartTLS (ITS#3507) + chain overlay fixes and improvements
|
2005-01-24 09:38:11 +00:00 |
|
Pierangelo Masarati
|
1d919d35a5
|
remove #ifdef's for identity assertion
|
2005-01-20 09:04:37 +00:00 |
|
Kurt Zeilenga
|
dc0eacd40b
|
Happy New Year!
|
2005-01-01 20:49:32 +00:00 |
|
Pierangelo Masarati
|
db4f223c66
|
improve overlay helpers
|
2004-11-13 17:20:24 +00:00 |
|
Pierangelo Masarati
|
f176935a58
|
remove rewrite stuff -- now delegted to rwm overlay
|
2004-11-13 14:43:30 +00:00 |
|
Pierangelo Masarati
|
79f744f30b
|
rework static backend initialization
|
2004-11-11 00:39:19 +00:00 |
|
Pierangelo Masarati
|
f06f2a6aec
|
fix ITS#3350 (rewrite/remap will be replaced by the rwm overlay)
|
2004-11-10 09:56:55 +00:00 |
|
Howard Chu
|
55f12a7eee
|
Add a retry for failed connections
|
2004-10-01 11:16:38 +00:00 |
|
Pierangelo Masarati
|
277d921945
|
clear shared connections when ldap_result fails with -1 (typically, remote server is down); fixes ITS#3217
|
2004-07-04 23:35:18 +00:00 |
|
Pierangelo Masarati
|
5bfb9fd590
|
make authz mode selection fully manual, plus more cleanup
|
2004-06-20 22:42:36 +00:00 |
|
Pierangelo Masarati
|
f34b11760a
|
allow a hidden parameter to instruct the proxy that the SASL mech can do native authz; will disappear as soon as I can detect it automnatically
|
2004-06-19 18:18:26 +00:00 |
|
Pierangelo Masarati
|
e6065fb20d
|
li->be didn't work; since it seems to be unnecessary, it's been removed; please check
|
2004-06-19 15:16:51 +00:00 |
|