Kurt Zeilenga
0c28b66a75
use dnPretty instead of dn_pretty
2001-12-23 00:43:57 +00:00
Kurt Zeilenga
a78053ecfa
Add a couple of FIXME comments
2001-12-22 19:21:32 +00:00
Howard Chu
3bd8946ca0
from jon@symas.com - minor cleanup
2001-12-17 22:48:29 +00:00
Pierangelo Masarati
fe45b74798
minor cleanup
2001-12-10 09:46:50 +00:00
Kurt Zeilenga
30831a4012
misc cleanup
2001-12-09 18:57:46 +00:00
Pierangelo Masarati
67ed3982fb
now dnValidate loops thru each value; added private member to LDAPAVA to hold the attribute description
2001-12-06 11:50:17 +00:00
Pierangelo Masarati
9260b22dec
liberally accept many LDAPv2/LDAPv3 stuff in DN (quoted parts, ';' as rdn separator and so); enforce exact case match of normalized dn in dnMatch (let's see what happens ...); fix a ldapava_free_rdn bug
2001-12-06 10:01:25 +00:00
Kurt Zeilenga
2c07200a3a
pretty DNs
2001-12-06 07:32:53 +00:00
Kurt Zeilenga
575c9469d9
Rework dnNormalize/dnPretty to share LDAP_rewrite
...
Add flag to matching rules to indicate if DN folding is needed.
Don't specify dnPretty as pretty function for DN attribute types as
this works too well (it breaks tests).
2001-12-06 03:24:31 +00:00
Kurt Zeilenga
f26e1b390e
Add basic infrastructure for pretty routines
...
A pretty routine may rewrite the representation of a value but
must not alter the value itself.
2001-12-05 21:36:59 +00:00
Kurt Zeilenga
3f53087f57
Add comments
2001-12-05 21:07:57 +00:00
Pierangelo Masarati
379e0e9d50
another step towards schema aware normalization: ava sorting in rdns; now by defining USE_LDAP_DN_PARSING both the new dn parsing and the server side normalization is used. There might be, every now and then, a flaw mostly due to naive normalization of pseudo-dn (thinking about some acl/regex stuff and so)
2001-12-05 19:26:30 +00:00
Pierangelo Masarati
335a8bd0ad
a gross attempt to implement a schema-aware normalization
2001-12-05 16:34:51 +00:00
Kurt Zeilenga
fe92783ea8
dnMatch should not be local to file
2001-12-04 23:42:10 +00:00
Pierangelo Masarati
9004262d95
reimplement dn_validate/normalize/(match) using the ldap_str2dn/dn2str stuff; need to #define USE_LDAP_DN_PARSING
2001-12-04 20:22:26 +00:00
Kurt Zeilenga
7c555af8d5
Make sure experimental syntaxes are hidden
2001-12-02 04:48:06 +00:00
Pierangelo Masarati
aee3600276
minor cleanup
2001-11-17 16:18:07 +00:00
Kurt Zeilenga
383939f18f
bitString fixes from Julius Enarusai (ITS#1441)
2001-11-16 18:10:37 +00:00
Mark Adamson
f05420c8d8
use berval's instead of strings with UTF8normalize()
2001-11-09 19:01:23 +00:00
Howard Chu
5f8058f957
Added schema_destroy() et al to free schema structures on shutdown
2001-11-07 01:03:49 +00:00
Stig Venaas
76243a2797
Fixed more memory leaks
2001-11-06 22:36:28 +00:00
Mark Adamson
67886fc4a1
bervals alloc'd by UTF8SubstringsassertionNormalize() must be ber_bvfree'd
2001-11-06 19:07:15 +00:00
Mark Adamson
e0ff8d6782
fix various memory leaks
2001-11-05 23:14:42 +00:00
Kurt Zeilenga
b312488614
telex number should allow $
2001-11-03 22:03:20 +00:00
Julio Sánchez Fernández
358950e8ad
And this change implements indexing for certificateExactMatch. Now
...
you can search efficiently the directory for a certificate.
Notice that we index certificates just as serial integers. A full
index should combine the issuer DN too, but I think in most scenarios
that would be extremely redundant and of little benefit. We can add
an option later to do full indexing.
2001-10-23 13:39:07 +00:00
Julio Sánchez Fernández
de353ebeda
Normalization and more error checking.
2001-10-23 09:05:04 +00:00
Julio Sánchez Fernández
be89c094f6
Do something with the error text.
2001-10-22 19:55:21 +00:00
Julio Sánchez Fernández
7581e304c0
It now sort of works, but needs some normalization work and proper
...
error reporting to client and syslog. And indexing, of course.
Now, the problem is that matching rules get called from different
places that are inconsistent in what an assertedValue is. When doing
a modify, a full certificate value is passed (to verify it isn't
already there). When doing a search or compare, the passed value is
in the syntax of the matching rule.
Consistency would require that the caller extracts an asserted value
from the full value before calling smr_match. It can do this by
calling smr_convert (it was unused, was it meant to be used for
this?).
Unfortunately, the caller is typically value_find, value_match, etc.
that have themselves little knowledge of what they are dealing with,
so their interface needs to be extended, new flag values or new
arguments, so that they know if they have a value in attribute type
syntax or in matching rule syntax.
2001-10-22 06:54:30 +00:00
Julio Sánchez Fernández
7e1c4f272d
Use the ldap syntax oid assigned by David Chadwick (no yet published).
2001-10-20 17:31:52 +00:00
Julio Sánchez Fernández
4d0ab0215b
First cut at certificateExactMatch, completely untested and without
...
indexing.
2001-10-20 10:15:09 +00:00
Mark Adamson
465ecb85f0
Finished the integerMatch matching rule and the integer syntax.
2001-09-20 15:50:49 +00:00
Kurt Zeilenga
ed9b7332fb
Add <limits.h>
2001-09-07 02:08:32 +00:00
Kurt Zeilenga
a2ba804e47
Add general extensible matching support and integerBitAndMatch
...
and integerBitOrMatch enhancement (ITS#1302 + minor changes)
from Luke Howard <lukeh@padl.com>.
2001-09-01 17:10:43 +00:00
Stig Venaas
e3caeb2264
Removed duplicate code by replacing case-Exact/Ignore-Filter/Indexer and
...
case-Exact/Ignore-Substrings-Match/Filter/Indexer with common code for
the caseExact and caseIgnore cases
2001-07-27 22:54:43 +00:00
Stig Venaas
159fa1b26c
Making the approx multistring code default. Leaving the old code for now,
...
but can really be removed.
2001-07-26 22:33:28 +00:00
Kurt Zeilenga
d4df1af590
Misc cleanup of asserts
2001-07-26 01:08:00 +00:00
Stig Venaas
92ec77f6dc
Made approxMatch/Indexer/Filter all do Unicode cannonical normalization
...
followed by stripping of characters with 8th bit set. The normalization
is needed to make exact match imply approx match.
2001-07-25 21:22:55 +00:00
Kurt Zeilenga
e2b3914982
ITS#1274 fix
2001-07-24 19:54:04 +00:00
Kurt Zeilenga
0cdf9e3124
fix up UTF8MATCH
2001-07-22 02:45:21 +00:00
Kurt Zeilenga
f310142d2c
Use DN normalize
2001-07-22 00:32:58 +00:00
Stig Venaas
d326f96c32
We shouldn't need UTF8oncasecmp() and UTF8casechr() anymore, removing
...
them.
2001-07-22 00:31:04 +00:00
Kurt Zeilenga
978e417699
Make some additional UTF8 public
...
Remove lint
2001-07-21 23:13:04 +00:00
Kurt Zeilenga
da2f6f6805
Zap !UTF8MATCH code
2001-07-21 23:02:06 +00:00
Kurt Zeilenga
5cb6b1ce02
Back out DN changes, needs more work
2001-07-21 22:44:55 +00:00
Stig Venaas
0e614ca0ec
Made caseExactMatch() use Unicode normalization
2001-07-17 20:09:37 +00:00
Stig Venaas
6c362d77ac
Made caseIgnoreSubstringsMatch and caseExactSubstringsMatch use proper
...
Unicode cannonical normalization
2001-07-17 19:35:23 +00:00
Stig Venaas
ea47735802
Fixed UTF8 encoding checks for substrings assertions
2001-07-16 22:48:52 +00:00
Stig Venaas
9b0e583576
Fixed bug in caseExactSubstringsIndexer() and caseIgnoreSubstringsIndexer().
...
UTF8 normalization must be done before we compute number of keys since
string length might increase.
2001-07-15 21:28:07 +00:00
Kurt Zeilenga
40d68d8374
Extend assertion value syntax checks to some other cases. Needs to
...
be applied to substrings assertions as well.
2001-07-15 17:25:49 +00:00
Stig Venaas
886a7575d0
Fixed segfault in caseIgnoreFilter when assertion value has bad UTF8 coding
2001-07-15 16:21:36 +00:00
