upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-14 19:04:21 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
8439 commits 38 branches 309 tags 74 MiB
Commit graph

4260 commits

Author SHA1 Message Date
Kurt Zeilenga
4ae637a08d Update comment 2003-02-15 16:38:32 +00:00
Kurt Zeilenga
619f9a72ec Fix typo in last commit 2003-02-14 23:14:19 +00:00
Howard Chu
1756206598 Use bdb_unlocked_cache_return; lock ended when TXN ended. 2003-02-14 22:30:07 +00:00
Kurt Zeilenga
1a14def903 Use function pointers to get at backend routines. 2003-02-14 20:51:35 +00:00
Howard Chu
c04f3e7706 Fix previous commit 2003-02-14 09:17:42 +00:00
Howard Chu
0b6772492f Use extended async APIs to allow direct parsing of results. Otherwise 
they will be interleaved in LDAP*. Avoid setting any options on the handle.
 2003-02-14 05:23:45 +00:00
Howard Chu
202cf8af75 Implemented connection pooling. Requires libldap_r to allow multiple threads 
to access the same LDAP* handle.
 2003-02-13 23:29:56 +00:00
Howard Chu
b228caa723 Revert previous, wasn't broken. 2003-02-13 23:19:51 +00:00
Kurt Zeilenga
074b1a0d3a Place SLAP_EXTENDED_SCHEMA behind defined(LDAP_DEVEL) 2003-02-13 20:47:46 +00:00
Howard Chu
568829d821 Fix uninit'd timeout value 2003-02-13 10:24:32 +00:00
Pierangelo Masarati
628bcc7174 improve error handling 2003-02-10 22:34:06 +00:00
Pierangelo Masarati
1db0725502 partially fix ITS#2310 2003-02-10 21:37:30 +00:00
Pierangelo Masarati
06b981429a fix ITS#2309 2003-02-10 18:15:36 +00:00
Kurt Zeilenga
aaf253318b Move include <slapi.h> behind #ifdef 2003-02-10 02:09:00 +00:00
Kurt Zeilenga
737f4b0d34 Misc LCUP cleanup 2003-02-09 08:43:20 +00:00
Kurt Zeilenga
db427d725d no more suffix_alias 2003-02-09 07:28:15 +00:00
Kurt Zeilenga
8f82e9f772 ITS#2117: remove suffixalias support until someone fixes it 2003-02-09 07:20:03 +00:00
Kurt Zeilenga
282f6bc32d Cancel exop updates 2003-02-09 05:54:45 +00:00
Kurt Zeilenga
c04e9ac993 rename "permit modify" control to "permissive modify" 
rename "no referrals" controls to "domain scope"
misc cleanup
 2003-02-09 05:39:21 +00:00
Kurt Zeilenga
48d47954a6 Rework #ifdef'ing of expermental controls to ease release engineering 
using LDAP_DEVEL (to indicate experimental) to enable experimental features
(true for HEAD unless LDAP_REL_ENG is defined)
 2003-02-08 21:53:05 +00:00
Kurt Zeilenga
a256e5035d extern'ize 2003-02-08 19:18:46 +00:00
Kurt Zeilenga
698d73d5f3 Disable reverse lookups by default for security 
(and performance) reasons.
 2003-02-08 07:40:19 +00:00
Kurt Zeilenga
1862077b24 Use DB_VERSION_ to set BDB_ENOUGH 2003-02-08 07:38:22 +00:00
Kurt Zeilenga
d1287dd341 Reword BDB 4.0 bug comment now that configure requires BDB 4.1 2003-02-08 01:34:27 +00:00
Kurt Zeilenga
cca15d41c9 minor code cleanup 2003-02-08 00:57:21 +00:00
Kurt Zeilenga
3737a1c8c4 cleanup 2003-02-07 20:33:05 +00:00
Jong Hyuk Choi
886179fbca cleanup 2003-02-07 20:16:09 +00:00
Kurt Zeilenga
c315e28779 Move RDN checks to entry_schema_check() so that it is consistently 
applied (and disabled via schemacheck off).  Removed add-rdn-values flag.
 2003-02-07 20:12:26 +00:00
Kurt Zeilenga
2fccb8d68e really put SLAPI behind its #ifdef 2003-02-07 19:06:15 +00:00
Kurt Zeilenga
5192938964 code cleanup 2003-02-07 19:05:45 +00:00
Jong Hyuk Choi
82115be0fb use of normalized dn (fix for a deadlock case ITS#2195) 2003-02-07 15:59:24 +00:00
Jong Hyuk Choi
55cf8bbd88 use of pre-assigned locker in bdb_group() / bdb_attribute() 2003-02-07 15:47:32 +00:00
Pierangelo Masarati
6cf0c94845 some (poor) index cleanup 2003-02-07 15:20:57 +00:00
Pierangelo Masarati
7a97f37bd4 add 'add-rdn-values {on|off}' (default off) switch 2003-02-07 15:19:58 +00:00
Pierangelo Masarati
982969a4ce cleanup 2003-02-07 15:18:43 +00:00
Pierangelo Masarati
08d9d56721 more exaustive logging in case of trouble 2003-02-07 13:46:17 +00:00
Pierangelo Masarati
f8a1007994 (mostly blind) fix of possible leak/dangling pointer and cleanup 2003-02-07 00:46:11 +00:00
Pierangelo Masarati
9f28f12346 make sure the DN is null-terminated before normalizing it 2003-02-06 19:15:14 +00:00
Pierangelo Masarati
1b499a7d7c add helper 2003-02-05 22:06:22 +00:00
Pierangelo Masarati
f19df0a307 add 'rebind-as-user' according to back-ldap's implementation 2003-02-05 22:04:20 +00:00
Pierangelo Masarati
eed2d5db4d only document 'subtree', but also allow 'sub' 2003-02-05 20:38:42 +00:00
Pierangelo Masarati
381e293b41 allow 'sub' and 'subtree' in acl (fix ITS#2300) 2003-02-05 19:39:34 +00:00
Pierangelo Masarati
fae57fcd15 partially fixes ITS#2299 2003-02-05 19:33:01 +00:00
Jong Hyuk Choi
85bdf79337 Filename change : servers/slapd/back-bdb/lcup.c -> servers/slapd/back-bdb/psearch.c 2003-02-05 07:43:00 +00:00
Jong Hyuk Choi
85b1783d5c LDAP Sync Operation (draft-zeilenga-ldup-sync) as a groundwork for an LDAP replication design 2003-02-05 07:37:02 +00:00
Pierangelo Masarati
1b4401ff53 handle attr delete appropriately (pass test004) 2003-02-04 22:33:51 +00:00
Pierangelo Masarati
677f13a846 handle NULL mod_[b]values case 2003-02-04 21:52:43 +00:00
Pierangelo Masarati
e5a1418756 improve last commit 2003-02-04 19:27:56 +00:00
Pierangelo Masarati
c432154ad1 allow multiple URIs (need to backport to back-ldap) 2003-02-04 18:49:58 +00:00
Luke Howard
f894db3be2 Cleanup #ifdefs 2003-02-04 00:40:46 +00:00
Jong Hyuk Choi
e1bf8cc437 Intermediate Response 2003-02-03 17:28:19 +00:00
Luke Howard
17f2953e40 Do not crash when more than one attribute is passed to 
slapi_search_internal_bind()
 2003-02-02 12:20:38 +00:00
Luke Howard
750cbb7026 Ensure normalized root DN is available to internal SLAPI operations for 
authorization to work.

Do not crash when forming Modification list from LDAPMod array.
 2003-02-02 11:00:52 +00:00
Luke Howard
becd81ebd9 Always pass normalized DN to select_backend() when performing operationals 
internal to SLAPI
 2003-02-02 10:02:25 +00:00
Luke Howard
e59d248858 Fix crasher in bvptr2obj 
Fix hasvalue
 2003-02-02 09:22:38 +00:00
Luke Howard
307f7fcc89 Ensure AttributeDescriptions are initialized to NULL 2003-02-02 09:04:43 +00:00
Luke Howard
eee0086ab2 Add search ref callback 2003-02-01 07:05:01 +00:00
Luke Howard
dfc7d338a6 Add sendreference callback 2003-02-01 07:04:13 +00:00
Howard Chu
6038e912dd Fix statslog of big attr names 2003-01-31 20:38:25 +00:00
Howard Chu
945c9fb1c7 Tweak previous commit 2003-01-31 19:44:52 +00:00
Howard Chu
f838a4bb53 Fix subtree and matched search in back-hdb 2003-01-31 19:43:14 +00:00
Howard Chu
5e7655d68d Fix for LDAP_SLAPI not def'd 2003-01-31 18:46:17 +00:00
Luke Howard
e212e59e28 Date PADL copyright notice 2003-01-31 01:06:30 +00:00
Pierangelo Masarati
e3dfb8e317 cleanup 2003-01-31 00:02:51 +00:00
Kurt Zeilenga
e6255466da Remove FIXME stuff (ITS#2243) 2003-01-30 23:14:10 +00:00
Howard Chu
3250cc8d19 Fix includes for VPATH builds 2003-01-30 22:58:39 +00:00
Howard Chu
23c575805a Disallow multiple suffixes by default. Otherwise subtree index optimization 
breaks. #define BDB_MULTIPLE_SUFFIXES if you want multiple suffix support.
If you use it, subtree indexing will slow down by factor of 2.
 2003-01-30 22:00:16 +00:00
Pierangelo Masarati
e3b9e0a565 do not treat extensibleObject as special; add comment about referral 2003-01-30 21:21:20 +00:00
Howard Chu
cbf7b063e3 ITS#2285 string_expand for acl set 2003-01-30 20:59:47 +00:00
Luke Howard
c464b299d8 Check for slapi_filter_dup() success in nested filters 2003-01-30 13:07:18 +00:00
Luke Howard
afc8ec976b Terminate f_sub_any array 2003-01-30 13:06:34 +00:00
Luke Howard
1be73d766c Added slapi_filter_dup() API from Sun ONE DS 5.x 2003-01-30 13:04:36 +00:00
Luke Howard
a0da326c97 Implemented slapi_filter_apply() API 2003-01-30 12:24:53 +00:00
Luke Howard
13c48d1f76 Ensure that, when an entry is actually being added to the directory, 
the entry specified by SLAPI_ADD_ENTRY contains the attributes to be
added.
 2003-01-29 22:43:19 +00:00
Luke Howard
e86fe9ade8 doPostSearchPluginFNs() should return void for clarity; postoperation 
plugins have no mechanism by which they may signal an error condition
to the client.
 2003-01-29 22:42:13 +00:00
Pierangelo Masarati
4010870f62 cleanup 2003-01-29 19:05:40 +00:00
Pierangelo Masarati
ffc343a485 allow special objectClasses to violate constraint (as suggested by Hallvard, who needs aliases :) 2003-01-29 18:01:15 +00:00
Pierangelo Masarati
683c237a54 bail out is now the default; use noSuchAttribute as error code, as suggested by Kurt 2003-01-29 17:01:04 +00:00
Pierangelo Masarati
6b5611cbac check for RDN attrs/vals when adding an entry (ITS#2243; need to choose whether to bail out or to add the RDN attr/vals to the entry; FIXME: is constraintViolation a reasonable error? 2003-01-29 15:54:24 +00:00
Pierangelo Masarati
07ad8cefed silence warning 2003-01-27 21:57:32 +00:00
Pierangelo Masarati
c3847a6136 slapi header cleanup 2003-01-27 21:53:23 +00:00
Pierangelo Masarati
e38e50646b silence warning 2003-01-27 21:51:33 +00:00
Pierangelo Masarati
ffde204880 trim unused var 2003-01-27 21:49:32 +00:00
Pierangelo Masarati
49c1ba60b7 slapi header cleanup 2003-01-27 21:35:34 +00:00
Pierangelo Masarati
71e35141e1 cleanup null mapping detection 2003-01-27 21:34:25 +00:00
Jong Hyuk Choi
4f64bd9402 LDAP cancel misc patch 2003-01-27 17:08:51 +00:00
Pierangelo Masarati
57e0ac008c cleanup 2003-01-27 16:48:55 +00:00
Pierangelo Masarati
985dc00b30 cleanup objectclass detection 2003-01-27 16:46:02 +00:00
Pierangelo Masarati
45f4e3602b clean up mapping api 2003-01-27 16:39:56 +00:00
Pierangelo Masarati
c1f84b5031 bring in slapi_cl.h 2003-01-27 16:39:22 +00:00
Pierangelo Masarati
a62249ed27 fix objectclass mapping (to nothing) 2003-01-27 16:07:10 +00:00
Pierangelo Masarati
d1cc80694f reworking of slapi headers 2003-01-27 14:44:39 +00:00
Luke Howard
7c41666c5e Ensure that global plugins are called after backend-specific plugins 
(this was the intention of the existing code but it was buggy, and it
made sense to implement this logic inside getAllPluginFuncs() rather
than doPluginFNs() - not all plugin users call the latter)
 2003-01-27 13:15:21 +00:00
Luke Howard
f989cfddb9 more Sun ONE DS 5.x harmonisation 2003-01-26 01:10:19 +00:00
Luke Howard
3652613cd8 Sun ONE DS 5.x filter harmonisation 2003-01-25 13:36:12 +00:00
Jong Hyuk Choi
0c43007e55 LDAP cancel operation 2003-01-25 00:36:50 +00:00
Hallvard Furuseth
bf8bbc27fe Fix typo in comment. 2003-01-24 20:12:50 +00:00
Pierangelo Masarati
a9cde92376 include ac/ headers 2003-01-24 12:33:12 +00:00
Luke Howard
9e6a9876b2 Grammar cleanup 2003-01-24 11:56:27 +00:00
Luke Howard
24e14748aa Fix memory smasher in slapi_x_modifications2ldapmods() 2003-01-24 11:09:20 +00:00
Luke Howard
1e8fd55cfb Fix uninitialized sl_is_udp 2003-01-24 11:08:54 +00:00
Luke Howard
498420dc26 Check for pPB == NULL (courtesy Pierangelo) 2003-01-24 10:29:24 +00:00
Luke Howard
fc55ee9edc Support slapi_entry_first_attr()/slapi_entry_next_attr() API 2003-01-24 09:23:06 +00:00
Luke Howard
f709f86bed include unistd.h for F_LOCK 2003-01-24 09:08:43 +00:00
Luke Howard
45289b09a7 Matching rule constants for future support 2003-01-24 09:00:18 +00:00
Luke Howard
a67c669583 Fix filter iteration bug 2003-01-24 07:51:26 +00:00
Luke Howard
66d38ab10a Plug memory leak 2003-01-24 06:57:12 +00:00
Luke Howard
146c0085d3 s/ldap_pvt_thread_pool_getcontext/ldap_pvt_thread_pool_context 2003-01-24 06:41:06 +00:00
Luke Howard
562b7fb8d9 fix typo 2003-01-24 05:57:20 +00:00
Luke Howard
6a54a9db0f Support Sun DS 5.x thread abstraction layer 2003-01-24 05:19:57 +00:00
Howard Chu
eb459f4339 Delete redundant ch_free(). 2003-01-24 04:26:04 +00:00
Luke Howard
819d4093ae Honour PermitModify control when adding or deleting values. This code needs 
review although, with the control disabled, it should not affect existing
code paths.
 2003-01-24 01:43:09 +00:00
Pierangelo Masarati
8d9629e1de fix logging and uninitialized value warning 2003-01-23 22:55:01 +00:00
Pierangelo Masarati
5a771fcac0 cleanup versioning 2003-01-23 22:45:17 +00:00
Pierangelo Masarati
d8756a1c98 fix ITS#2289 (don't use shared data for search state; use msgid instead) 2003-01-23 22:07:33 +00:00
Luke Howard
7759f75d76 Test PermitModify and NoReferrals controls (note that PermitModify is 
ignored for the moment - will be fixed shortly)
 2003-01-23 15:22:20 +00:00
Luke Howard
eec370af52 LDAPv3 over UDP disposition is now compatible with Active Directory 
Stubs for PermitModify/NoReferrals controls; implementation coming soon
 2003-01-23 15:12:53 +00:00
Luke Howard
2c40905b77 Pass normalized DN to select_backend() 2003-01-23 14:25:13 +00:00
Luke Howard
8621f955b2 Reference slapi_search_internal() due to linker error -- need to fix this 
properly XXX
 2003-01-23 11:29:52 +00:00
Luke Howard
8c18022b41 Install object type plugins 2003-01-23 09:22:32 +00:00
Luke Howard
0650e6ad52 Allow plugin to retrieve desired attribute list and state of manageDSAit control 
Support search preop/rewrite/postop plugins for root DSE and subschema
 2003-01-23 08:45:28 +00:00
Hallvard Furuseth
e384faf927 Return 0 or 1 from is_entry_*(), to kill 'signed vs. unsigned' warnings. 2003-01-22 22:01:21 +00:00
Kurt Zeilenga
58bff46c7c s/AUTHZ/BIND/ for consistency with other Statslog() messages 2003-01-22 21:37:04 +00:00
Luke Howard
12af6de4cf Clarification regarding compute search filter rewriting: only 
SLAPI_SEARCH_FILTER needs to be updated
 2003-01-22 15:46:45 +00:00
Luke Howard
3dad7cae7b To conform to the SLAPI spec, slapi_filter_get_ava() should not duplicate 
for caller
 2003-01-22 15:07:23 +00:00
Luke Howard
561ab80de0 Check for modified filter after calling search rewriter plugin 2003-01-22 14:57:35 +00:00
Luke Howard
2aeec166ff Call rewrite function after preop plugins (not before) - confirmed with Sun 2003-01-22 14:54:12 +00:00
Luke Howard
5b4b062dba Use ber_dupbv() to avoid crashing on binary values 2003-01-22 14:53:03 +00:00
Luke Howard
265261bf60 Added some OpenLDAP extensions for determining ldapi:// sock/peername 
and whether connection is UDP
 2003-01-22 14:41:51 +00:00
Luke Howard
214b79e740 Call search rewriter callback before first preop search plugin 2003-01-22 13:51:27 +00:00
Luke Howard
2bc4da9378 SLAPI fixes (better documentation) 2003-01-22 13:38:38 +00:00
Luke Howard
faf8d43a6f First pass at replacing proprietary OpenLDAP virtual attribute API 
(which existed briefly for a day!) with Sun ONE DS 5.x computed
attribute API
 2003-01-22 13:06:46 +00:00
Luke Howard
c76d37313b More DS 5.x harmonisation 2003-01-22 10:00:27 +00:00
Luke Howard
921d62c2ae Added slapi_entry_attr_get_charptr() API 2003-01-22 09:35:48 +00:00
Luke Howard
2107a4c1b3 New DS 5.x memory management API memory management API memory management API memory management API 2003-01-22 09:30:47 +00:00
Luke Howard
293c765c11 Added slapi_access_allowed() and slapi_acl_check_mods() API for Sun ONE 
DS 5.x compat
This required exposing the mods array conversion functions so they
are now in slapi/slapi_utils.[ch]
 2003-01-22 09:00:06 +00:00
Luke Howard
fb22bdeb58 Fixed crashed in slapi_value_free 2003-01-21 15:44:04 +00:00
Luke Howard
4fbd922a09 Make sure slapi_valueset_add_value() copies the input value 2003-01-21 15:32:43 +00:00
Luke Howard
e26749d76b Ensure AttributeDescriptions are initialized to NULL before calling slap_str2ad() 2003-01-21 15:24:28 +00:00
Luke Howard
6469f164a8 Allow coalesce pblock types. 
Take care with pblock values that need to be duplicated
 2003-01-21 15:21:55 +00:00
Luke Howard
7d5978b4aa Put #endif in correct place when commenting out backend directive check 
for plugins (now that global plugins are nominally supported)
 2003-01-21 15:14:07 +00:00
Luke Howard
17b761cf96 Allow global plugins. 2003-01-21 15:11:35 +00:00
Luke Howard
1e32bdbd69 Allow plugins not associated with a specific backend 2003-01-21 15:09:58 +00:00
Luke Howard
5883b270b8 If no plugins are registered, have front-end silently ignore 2003-01-21 14:52:33 +00:00
Luke Howard
8dd11efd39 Don't crash if no backend 2003-01-21 14:44:51 +00:00
Luke Howard
8de6186e54 Added OpenLDAP-specific SLAPI for getting entry ID 2003-01-21 14:08:58 +00:00
Luke Howard
97b9eb2e55 Set opattr plugin-specific pblock parameters to NULL after coalescing 
returned attributes
 2003-01-21 14:06:22 +00:00
Luke Howard
0edb0803d2 Add support for virtual operational attribute plugin type 2003-01-21 14:00:25 +00:00
Luke Howard
f327941341 Reserve pblock IDs for opattr plugin 2003-01-21 13:51:53 +00:00
Luke Howard
053672c6c0 Added Slapi_AttrSet accessors in order to implement virtual operational 
attribute plugin
 2003-01-21 13:48:37 +00:00
Luke Howard
e09f30179b First round of DS 5.x SLAPI functions 2003-01-21 12:16:53 +00:00
Luke Howard
f1fdb34fbe Added slapi_attr_get_flags() and slapi_attr_flag_is_set() API for 
Sun ONE harmonisation.
 2003-01-21 10:12:08 +00:00
Luke Howard
6f26183f20 Confusingly, make SLAPI_OPERATION_AUTHTYPE return a pointer to 
SLAPI_CONN_AUTHMETHOD. From my understanding of the Sun ONE API
this is the correct behaviour.
 2003-01-21 09:50:59 +00:00
Luke Howard
68ed72e4c7 Return LDAP_PARAM_ERROR when NULL passed to internal SLAPI functions 2003-01-21 09:48:28 +00:00
Luke Howard
ff263ec6a7 Return LDAP_OTHER instead of LDAP_OPERATIONS_ERROR for internal SLAPI 
failure
 2003-01-21 09:42:26 +00:00
Luke Howard
4a9213f752 Distinguish between AUTHTYPE and AUTHMETHOD (latter is static storage) 
for Sun ONE harmonisation
 2003-01-21 09:39:56 +00:00
Luke Howard
30d946959e Set SLAPI_BIND_CREDENTIALS for bind preoperation plugin 2003-01-21 08:35:48 +00:00
Luke Howard
313d3633e3 Further harmonisation with Sun ONE SLAPI: extra PBlock parameters 
on connections and operations
 2003-01-21 08:34:25 +00:00
Luke Howard
53ced8a648 Allow SLAPI bind plugins to set the authorization identity, at least for 
simple binds
 2003-01-21 06:30:38 +00:00
Luke Howard
8ab0c4d401 fix SLAPI_MODIFY_MODS pointer error 2003-01-21 05:56:46 +00:00
Luke Howard
84918362df Allow a modify preoperation plugin to insert additional modifications to 
be applied by the backend.
 2003-01-21 05:30:14 +00:00
Luke Howard
8e8b4093f5 Mark Sun ONE 5.x SLAPI plugin types to avoid collisions 
Rename internal slapi_XXX API to slapi_x_XXX
Always set result code/matched/error text in operation parameter block
to make available to postoperation plugins
 2003-01-21 02:46:55 +00:00
Luke Howard
45a66e2ed4 Harmonise slapi_ch_free() with Sun ONE API 2003-01-20 23:29:30 +00:00
Luke Howard
d484a9781c Conform SLAPI to Netscape, iPlanet and Sun ONE Directory Server 
behaviour:

1. Plugins never return LDAP result codes, instead they return a
   small integer (0 or -1, others for special cases)
2. Preoperation plugins can abort processing by returning a non-
   zero value to the frontend
3. Postoperation plugins never abort processing (all are called)
   and their return values are ignored
 2003-01-20 23:18:11 +00:00
Kurt Zeilenga
b5594b2750 Return the Start TLS error. 2003-01-20 22:37:42 +00:00
Luke Howard
27dba2226f Only non-postoperation plugins should be able to abort processing of further 
plugins.
 2003-01-20 22:33:50 +00:00
Kurt Zeilenga
6d1ca4c747 Remove values match v. filter struct field macro overloads 
Use LDAP_SLISTs instead of per-struct list management for schema structs
misc cleanup and lint removal
 2003-01-20 20:21:17 +00:00
Kurt Zeilenga
521d8384a1 works without SLAPI 2003-01-20 20:18:53 +00:00
Kurt Zeilenga
a190d15a60 cleanup 2003-01-20 20:17:12 +00:00
Kurt Zeilenga
b3705e69f4 Add LDAP_BEGIN/END_DECL 2003-01-20 20:16:42 +00:00
Kurt Zeilenga
5bbf08d3ff ITS#2266: -b option missing break 2003-01-20 19:13:00 +00:00
Kurt Zeilenga
bcd7306877 ITS#2268: SASL/ANONYMOUS fixes from kuenne@rentec.com 2003-01-20 18:09:46 +00:00
Luke Howard
c9278e54ec Fix up return values in new slapi private API 2003-01-20 00:11:56 +00:00
Luke Howard
d3292b83fa Style consistency in new SLAPI_MODIFY_MODS code 2003-01-19 22:49:21 +00:00
Luke Howard
fe4cd099c8 FreeLDAPMods() should be static 2003-01-19 22:45:10 +00:00
Luke Howard
8e8228f0b0 Fix libltdl link dependency causing link error on Linux 2003-01-19 22:43:29 +00:00
Luke Howard
6a5f29b60a Use new SLAPI API for setting associated parameters associated with the 
Connection, Operation and Backend structures.

Ensure that SLAPI_MODIFY_MODS is set to an array of LDAPMods.
 2003-01-19 15:30:10 +00:00
Luke Howard
d54548b9a0 Use strtol() not strtoul() in integerBit{And,Or}Match matching rules 2003-01-19 15:20:09 +00:00
Luke Howard
8866875e69 return error codes from new internal API 2003-01-19 15:04:19 +00:00
Hallvard Furuseth
6a51371fc5 Silence gcc warnings (signed vs. unsigned, implicit declarations, unused vars). 2003-01-19 15:03:25 +00:00
Luke Howard
cb61800ac6 added slapi_backend_set_pb 2003-01-19 14:55:10 +00:00
Luke Howard
17f95a3fd3 added slapi_operation_set_pb 2003-01-19 14:47:26 +00:00
Luke Howard
ec05ef7f22 Added slapi_connection_set_pb() API for front-end. 
Implemented slapi_is_connection-ssl().
 2003-01-19 14:32:49 +00:00
Hallvard Furuseth
3bd76701d1 Fix printf format errors. 2003-01-19 14:07:02 +00:00
Hallvard Furuseth
265b7e22c6 Insert missing initializers, to silence gcc warnings. 2003-01-19 13:38:44 +00:00
Hallvard Furuseth
1fbbc11811 Fix LBER_ERROR vs. -1 confusion. 2003-01-19 13:10:17 +00:00
Pierangelo Masarati
8d0711b08f slapi-plugin.h goes in include 2003-01-18 11:19:27 +00:00
Kurt Zeilenga
6939c53170 Happy new year 2003-01-03 20:20:47 +00:00
Hallvard Furuseth
aeaaa8c6ca Fix octetStringOrderingMatch(). It thought "b"<"aa", becuase "b" is shorter. 2003-01-03 17:06:01 +00:00
Hallvard Furuseth
b0f9305b66 Delete bitStringNormalize(). 2003-01-03 16:17:06 +00:00
Kurt Zeilenga
8f0dc1a4a3 Fix ocflags tests 2003-01-02 23:55:37 +00:00
Hallvard Furuseth
d96236b5ce Fix attribute value parsing in objectIdentifierFirstComponentMatch(). 2003-01-02 15:01:56 +00:00
Kurt Zeilenga
887c21c53e Fix typo in last commit 2002-12-30 04:23:31 +00:00
Kurt Zeilenga
a4ad2eea17 ACL cleanup 
Likely needs more deadlock detection checks
 2002-12-30 01:12:10 +00:00
Kurt Zeilenga
ed471a4d53 Fix access_allowed() error checking bug 2002-12-30 01:02:31 +00:00
Pierangelo Masarati
f148506bf6 reworking of error handling (should also fix ITS#2235) 2002-12-27 18:08:27 +00:00
Pierangelo Masarati
0baf5af19b reworking of error handling (should also fix ITS#2235) 2002-12-27 17:53:53 +00:00
Pierangelo Masarati
ddb17d592f use 'safe' functions 2002-12-27 17:24:47 +00:00
Pierangelo Masarati
9f269f2227 cleanup 2002-12-27 17:24:20 +00:00
Pierangelo Masarati
e9a74cffba slapi used the old version of the LDAP_LOG macro (caught by Howard) 2002-12-27 14:59:01 +00:00
Pierangelo Masarati
b793be6aca slapi cleanup 2002-12-27 14:58:20 +00:00
Pierangelo Masarati
8527127602 fix slapi build 2002-12-27 12:10:05 +00:00
Pierangelo Masarati
f83585952d misc slapi cleanup 2002-12-27 11:48:41 +00:00
Pierangelo Masarati
b027461b9d unsigned is good for all 2002-12-23 13:43:01 +00:00
Pierangelo Masarati
c7e5fba1a2 fix indirect idl block fetch failure (should be back-ported) 2002-12-23 12:51:21 +00:00
Kurt Zeilenga
b2a3ceb002 A few X.509 certificate tweaks... needs work (and testing) 2002-12-21 22:54:51 +00:00
Kurt Zeilenga
a3837b107a Minor cleanup 2002-12-21 22:54:25 +00:00
Kurt Zeilenga
539693f56c Correct fix 2002-12-20 17:57:00 +00:00
Kurt Zeilenga
b47d0d6b6a if 0 out bad statslog 2002-12-20 17:25:51 +00:00
Kurt Zeilenga
f43bf6b283 cleanup 2002-12-20 04:08:06 +00:00
Howard Chu
4e4818771c Plug memory leak 2002-12-18 22:44:13 +00:00
Howard Chu
89ab02479d Use ber_flatten2 2002-12-18 19:17:15 +00:00
Howard Chu
4ab720eefa Eliminate redundant steps 2002-12-18 19:00:23 +00:00
Howard Chu
06c223991f Fix previous commit, compare must return signed result 2002-12-18 07:55:27 +00:00
Howard Chu
bb9531eda6 Plug memory leak 2002-12-18 01:58:18 +00:00
Kurt Zeilenga
75757a5c82 Don't reeval expression 2002-12-17 05:25:05 +00:00
Howard Chu
870c3cb5c6 Revert previous, it was only masking the real problem. And caused more... 2002-12-17 04:56:41 +00:00
Howard Chu
0e69c86461 Fix Statslog messages 2002-12-17 00:23:36 +00:00
Howard Chu
48c8cebbe3 Fix typo in previous commit 2002-12-16 12:17:49 +00:00
Howard Chu
7c7daf8556 Statslog additions: 
Added StatslogTest macro.
	Added attributes to modify and search Statslog.
	Added Statslog of SASL authcid.
 2002-12-16 12:14:37 +00:00
Howard Chu
40b651afb1 Fix previous commit, was freeing name from rev-lookup too soon. 2002-12-16 00:58:05 +00:00
Hallvard Furuseth
2bcb48361d Remove casts of AVL function pointers. 2002-12-14 22:25:52 +00:00
Hallvard Furuseth
ff2a3201cb Call node_find_cmp() with (void *)&ulong instead of (void *)ulong. 
The old code assumed sizeof(long) == sizeof(void *), among other things.
 2002-12-14 21:01:08 +00:00
Pierangelo Masarati
df5d69df8f allow a custom error log file for plugins by means of a slapd.conf directive; add very bare-bone back-monitor info about installed plugins 2002-12-14 15:04:37 +00:00
Hallvard Furuseth
486eaa69b6 Rename "lang(uage)" to "tag(s)". (Cleanup after attribute options patch.) 2002-12-13 19:15:20 +00:00
Kurt Zeilenga
7be4d566d7 cleanup 2002-12-13 00:18:54 +00:00
Hallvard Furuseth
54728f367e Implement user-defined tagging attribute options and ranges 2002-12-12 13:56:05 +00:00
Howard Chu
88adbc8691 Fix ITS#2234 canonicalization bug 2002-12-12 13:49:25 +00:00
Kurt Zeilenga
854e447231 misc cleanup 2002-12-11 20:39:05 +00:00
Howard Chu
b40e40ec3c undef CONNECTION_INPUT_LOOP, use DATA_READY_LOOP. Seems to help prevent 
hangs in heavy load situations.
 2002-12-11 18:36:02 +00:00
Howard Chu
ee571c54a4 Must use reentrant gethostbyaddr for reverse lookups. Other threads may 
be doing lookups too (e.g., SASL/GSSAPI)
 2002-12-11 16:36:36 +00:00
Howard Chu
56c11f4a13 Fix ITS#2227, nameUIDNormalize fell behind the times... 2002-12-11 01:33:24 +00:00
Howard Chu
e39f9848ac Fix previous commit, check for dup in avl_insert 2002-12-10 20:56:08 +00:00
Howard Chu
349e05ff4d Added config keyword "searchstack" for setting search stack cache depth. 
Default is still 16.

Added IDL caching, modified from ITS#2182. Uses "idlcachesize" config
keyword. Code is #ifdef'd, currently defined, with default cache of 0.
 2002-12-10 20:33:49 +00:00
Howard Chu
d4a422329b From ITS#2183, use a long-lived IDL stack per thread. 2002-12-10 17:59:21 +00:00
Kurt Zeilenga
32f6c9ec6d Make digit a local static variable instead of a global 2002-12-10 16:44:02 +00:00
Hallvard Furuseth
fbbbdd8b94 ITS#2215: Let Statslog() work if only one of LDAP_DEBUG/LDAP_SYSLOG is #defined 2002-12-09 18:18:14 +00:00
Pierangelo Masarati
bc35e4bc0d another attempt to fix slapi build sequence ... 2002-12-09 12:17:23 +00:00
Kurt Zeilenga
56ebd53e51 expand authid buffer 2002-12-08 07:56:49 +00:00
Pierangelo Masarati
08710f80cd fix previous commit 2002-12-07 19:19:26 +00:00
Pierangelo Masarati
d19706634c fix previous commit 2002-12-07 19:00:34 +00:00
Kurt Zeilenga
e9ab2f8d06 Catch NULL control OID up front. 2002-12-07 18:35:22 +00:00
Kurt Zeilenga
7c4445aed4 Avoid magic constant (32) in allocation. Use sizeof instead 2002-12-07 18:34:25 +00:00
Pierangelo Masarati
5b87c4c448 some todo stuff 2002-12-07 18:31:25 +00:00
Pierangelo Masarati
1b70e16448 SLAPI - Netscape plugin API for slapd - based on patch contributed by Steve Omrani <somrani@us.ibm.com> as ITS#2073 2002-12-07 17:19:29 +00:00
Kurt Zeilenga
db98e44d6a Finish proxy authzid control 2002-12-05 18:14:02 +00:00
Luke Howard
6730080081 Allow the root DN to switch to any authorization identity. 2002-12-05 12:25:16 +00:00
Pierangelo Masarati
8e74ed4dfc fix initialization size and silence warning 2002-12-05 11:47:44 +00:00
Howard Chu
b1798f9160 Fix typo in prev commit value_find/_ex 2002-12-04 23:20:22 +00:00
Howard Chu
574090d184 Fix slap_sasl2dn(), performing internal search with wrong op.o_ndn. 2002-12-04 22:37:51 +00:00
Howard Chu
09679eb715 Added SLAP_MR_VALUE_NORMALIZED_MATCH, avoid redundant normalize when 
calling value_find with already-normalized DNs
 2002-12-04 18:19:46 +00:00
Kurt Zeilenga
eb41333e4c Use getpeereid(3) where available else use *_PEERCRED replacment function 2002-12-04 06:17:32 +00:00
Luke Howard
daf7d0c0eb Support SO_PEERCRED SASL EXTERNAL authorization. 2002-12-04 04:14:44 +00:00
Luke Howard
a6edb2ae36 Treat all EXTERNAL DNs are already normalized. 2002-12-04 04:13:20 +00:00
Howard Chu
827ea96e16 ITS#1523 enhanced ACL caching 2002-12-04 02:35:00 +00:00
Julius Enarusai
9b5ec8f43b Fixed minor compile errors in LDAP_LOG debug statements. 2002-12-03 17:06:58 +00:00
Kurt Zeilenga
da76c1951e First-cut proxy authorization support. 2002-12-03 06:11:32 +00:00
Hallvard Furuseth
416aeb9347 Never let ldif_parse_line() return a NULL value with success. 2002-12-02 22:46:07 +00:00
Hallvard Furuseth
b968317900 A search requesting 'cn;lang-en-' did not find 'cn;lang-en'. 2002-11-30 20:00:01 +00:00
Pierangelo Masarati
6ce1fc099a fix handling of anomalous databases, like subordinate ones (as suggested by Howard) 2002-11-29 17:43:28 +00:00
Howard Chu
0c5d1dc00f Fix ITS#2214, clear gs->matched after freeing it. 2002-11-28 17:20:17 +00:00
Howard Chu
3260b26717 Fix ITS#2200, must use SASL creds exactly as received 2002-11-28 16:16:05 +00:00
Howard Chu
ce581462bd More streamlining. 2002-11-28 15:47:06 +00:00
Howard Chu
5f4db0b47f Don't use be_private to point to our glueinfo. This allows underlying 
backends to be called directly, instead of having to wrap every function.
Delete unneeded wrappers.
 2002-11-28 15:17:26 +00:00
Pierangelo Masarati
a7c5307279 perhaps the assert can be removed; should work now 2002-11-28 08:25:12 +00:00
Kurt Zeilenga
8754c8f2a3 #unifdef paged results, remove lint 2002-11-28 04:38:41 +00:00
Howard Chu
ca4764ccfa ITS#2202, set SASL_SUCCESS_DATA on sasl_server_new(). 2002-11-27 03:49:04 +00:00
Howard Chu
36c915a134 Fix ITS#2200, revert patch in rev 1.128. SASL/Kerberos4 requires a patch 
to Cyrus SASL lib/server.c, can't fix it here.
 2002-11-27 03:46:42 +00:00
Kurt Zeilenga
4e223d588b Reorder header inclusion to resolve ITS#2204. 2002-11-26 20:22:24 +00:00
Kurt Zeilenga
5e572b5deb Clean up examples 2002-11-26 17:56:51 +00:00
Pierangelo Masarati
e178624b42 cleanup 2002-11-25 23:37:54 +00:00
Pierangelo Masarati
014ba5ac80 silence warning 2002-11-25 23:37:10 +00:00
Pierangelo Masarati
a62aa61544 much better fix for ITS#2196 (dnattr without sat_equality is bounced at config) 2002-11-25 18:37:04 +00:00
Pierangelo Masarati
95f75aaf15 mr should not be NULL; fixes ITS#2196 2002-11-24 21:36:14 +00:00
Pierangelo Masarati
7091853dfc ITS#2176: Change password on slave when multimaster is enabled (do not use multimaster) 2002-11-22 00:56:20 +00:00
Pierangelo Masarati
9ccf63f327 remove paged results cruft 2002-11-21 22:37:06 +00:00
Pierangelo Masarati
8473f6e778 set keyword to noEstimate and document it 2002-11-21 20:57:00 +00:00
Pierangelo Masarati
415a8d325f add limits to entries count for paged results 2002-11-21 20:49:02 +00:00
Pierangelo Masarati
2b639068b6 seems to be leaking a ber 2002-11-21 20:21:22 +00:00
Pierangelo Masarati
3ff7138cb2 improve limits handling and consistency 2002-11-21 14:23:39 +00:00
Pierangelo Masarati
59aea47963 improve limits handling and consistency; return "Admin limit exceeded" instead of "Unwilling to perform" 2002-11-21 12:58:59 +00:00
Pierangelo Masarati
b26ecba01a - allow interactive pagedResults size change 
- implement pagedResults abandon by setting size=0
- misc code cleanup
 2002-11-21 03:36:37 +00:00
Pierangelo Masarati
acab9b3266 remove cruft 2002-11-21 02:18:31 +00:00
Pierangelo Masarati
26d2ea1488 fix typo in comment :) 2002-11-21 02:18:13 +00:00
Pierangelo Masarati
6a917650e8 add supported controls to backend entries 2002-11-21 02:17:24 +00:00
Pierangelo Masarati
c354bb23bf Support for RFC 2696: 
LDAP Control Extension for Simple Paged Results Manipulation

contributed by Lynn Moss <lynnmoss@us.ibm.com> (ITS#2189)

applied with changes.
 2002-11-21 02:16:53 +00:00
Pierangelo Masarati
0f17b4f852 fix possible uninitialized use of nmods 2002-11-21 00:31:36 +00:00
Julius Enarusai
614e7d565d Converted ch_malloc and ch_calloc calls to SLAP_MALLOC and SLAP_CALLOC. 2002-11-19 21:26:09 +00:00
Julius Enarusai
3fddf93a7b Converted ch_malloc and ch_calloc calls to SLAP_MALLOC and SLAP_CALLOC. 2002-11-19 20:20:00 +00:00
Julius Enarusai
fe569dbb75 Converted ch_malloc and ch_calloc calls to SLAP_MALLOC and SLAP_CALLOC. 2002-11-19 18:24:18 +00:00
Julius Enarusai
d9e7a7190b Converted ch_calloc and ch_malloc calls to SLAP_CALLOC and SLAP_MALLOC. 2002-11-19 17:06:17 +00:00
Howard Chu
1385f29ebc Fix is_entry_objectclass flag comparisons (from Jason Townsend @ Apple) 2002-11-18 03:56:54 +00:00
Kurt Zeilenga
390cdcfbc2 Add AUTHZ stats logging 2002-11-11 18:55:45 +00:00
Kurt Zeilenga
e1f2ed9bc1 Delete some old (bad) statslog messages 2002-11-11 18:38:57 +00:00
Pierangelo Masarati
498d1f043d silence warnings; fix messages 2002-11-10 20:00:44 +00:00
Pierangelo Masarati
76bf91f553 remove #ifdef SLAP_FILTER_HASSUBORDINATES 2002-11-10 19:48:36 +00:00
Pierangelo Masarati
a9c902a7ca improve error messages 2002-11-10 18:16:43 +00:00
Kurt Zeilenga
b5b495a871 Remove extra entry_free() 2002-11-10 06:48:55 +00:00
Pierangelo Masarati
5794b3a2dd Add checks for SQL headers in configure.in (need to rerun autoheader 
and autoconf); #include "ac/string.h" instead of <string.h>
 2002-11-09 17:03:07 +00:00
Pierangelo Masarati
0491710fa7 Patch: Wrong args to Debug() and LDAP_LOG() (ITS#2170,2171) 
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================
 2002-11-09 16:09:50 +00:00
Pierangelo Masarati
7400191ba8 cleanup str2adlist 2002-11-09 14:46:00 +00:00
Julius Enarusai
8669824fd5 Converted ch_calloc calls to SLAP_CALLOC. 2002-11-08 18:17:21 +00:00
Julius Enarusai
6e9c21cff8 Converted ch_malloc, ch_calloc and ch_realloc calls to SLAP_MALLOC, 
SLAP_CALLOC and SLAP_REALLOC respectively.
 2002-11-08 17:13:20 +00:00
Pierangelo Masarati
a777c53564 fix attribute delete (ITS#2158) patch provided by Timofey B. Nickonov <ntb@mts.ru> 2002-11-02 16:00:21 +00:00
Julius Enarusai
2d98b19bf7 Converted ch_malloc, ch_calloc and ch_realloc calls to SLAP_MALLOC and 
SLAP_CALLOC in add_value/add_value_one functions and propagated errors to
all functions that use these functions.
 2002-11-01 18:59:52 +00:00
Howard Chu
24f1a11cde Fix sasl_server_start invocation, must pass NULL cred when credlen is 0. 2002-11-01 02:14:55 +00:00
Stig Venaas
0f86bbde87 Fix referrals and alias. For ldbm and I think for bdb, this is necessary 
now that we normalize to lower case. Should be merged into 2.1.
 2002-10-31 16:48:04 +00:00
Pierangelo Masarati
53e1930fd0 use keyword "unlimited" instead of -1 for no limits 2002-10-31 09:57:24 +00:00
Jong Hyuk Choi
ca8ab9d809 changes in bdb_psearch() - search scope check 2002-10-29 08:05:45 +00:00
Jong Hyuk Choi
2e1809d76f change due to removal of servers/slapd/lcup.c 2002-10-29 04:39:05 +00:00
Jong Hyuk Choi
3d4a915f2b Removal of servers/slapd/lcup.c 2002-10-29 00:00:47 +00:00
Jong Hyuk Choi
3a9229a3e9 Use of slap_schema.si_ad_entryUUID in bdb_psearch() 2002-10-28 23:57:54 +00:00
Kurt Zeilenga
6f59ca0e5b Add superiorUUID to system schema 2002-10-28 20:01:55 +00:00
Kurt Zeilenga
293158f432 code cleanup 2002-10-27 03:42:32 +00:00
Kurt Zeilenga
886f60f822 Fix typo 2002-10-27 00:41:52 +00:00
Howard Chu
322a800c26 Fix ITS#2157, server should never attempt to unlink the client's socket. 
It likely has no name anyway, and the client owns it after all.
 2002-10-26 22:41:26 +00:00
Pierangelo Masarati
dea2420569 beautify "unknown" 2002-10-26 18:51:24 +00:00
Pierangelo Masarati
f07cabad0f need to move #define here; on by default 2002-10-26 16:32:11 +00:00
Pierangelo Masarati
7b3f889ec1 fix hasSubordinate filtering; now it can be safely turned on 2002-10-26 16:18:31 +00:00
Pierangelo Masarati
69343add5a use more appropriate error code 2002-10-26 10:05:35 +00:00
Pierangelo Masarati
8558b8808e actually, get_perms is needed by ldapi:// rgeardless of -DSLAP_X_LISTENER_MOD 2002-10-26 10:02:41 +00:00
Kurt Zeilenga
36569048ff Add "allow update_anon" 
Fix -USLAP_X_LISTENER_MOD builds
 2002-10-25 18:47:24 +00:00
Jong Hyuk Choi
15c5943edd Addition of servers/slapd/lcup.c and servers/slapd/back-bdb/lcup.c for persistent search 2002-10-25 17:57:03 +00:00
Jong Hyuk Choi
8074294f1d LCUP persistent search code drop 2002-10-25 17:51:30 +00:00
Pierangelo Masarati
97e526cb2d add restrictions related to listeners in form of file permissions 
(see in slapd(8) the description on how to enforce file permissions
on sockets in ldapi schema); at present, only user permissions are
used as follows: the url extension x-mod=-rwxrwxrwx is used; only
the user permisisons are considered, e.g. the first set of rwx;
	"r" means read is allowed from that listener
	"w" means write is allowed on that listener
	"x" means bind is not required on that listener
these restrictions ADD to those already present, and are actually
checked AFTER the other restrictions, but BEFORE ACLs, so they can
be used to apply gross restrictions but should not be viewed as
a replacement of ACLs. To compile this, #define SLAP_X_LISTENER_MOD
 2002-10-25 16:43:44 +00:00
Kurt Zeilenga
6d199506bb ber_write error message cleanup 2002-10-25 05:47:08 +00:00
Kurt Zeilenga
2b2e406b46 Make sure that newSuperior isn't old superior 2002-10-25 01:09:50 +00:00
Pierangelo Masarati
956f1d16aa listener: 
- use bervals for url and sockname
- pass connection_init() the listener struct pointer instead of each value
- don't copy them in the Connection struct 'cause they're not going to change
- define macros for legacy usage of c_listener_url and c_sockname
 2002-10-24 10:03:52 +00:00
Pierangelo Masarati
fdd586a6b7 change socket permission syntax (to reuse function for other purposes) 2002-10-23 14:12:01 +00:00
Pierangelo Masarati
456a561b65 prevent use of uninitialized var 2002-10-23 14:11:02 +00:00
Pierangelo Masarati
665cb3e86e fix typo 2002-10-23 14:10:21 +00:00
Kurt Zeilenga
ff9dd56587 Add comment attributing origin of the Metaphone algorithm 2002-10-22 04:52:57 +00:00
Kurt Zeilenga
c382c5efa2 blind fix for NULL pointer in Debug() bug (ITS#2143) 2002-10-17 17:45:44 +00:00
Kurt Zeilenga
ac66a219d0 Fix comment 2002-10-17 04:35:55 +00:00
Kurt Zeilenga
c64d28aa4e correct security sample 2002-10-12 05:10:41 +00:00
Howard Chu
9d2a8ba1b4 More fixes for ITS#2136, make sure all error returns set *text. 2002-10-11 17:12:56 +00:00
Kurt Zeilenga
40b685b70d Patch: Delete the buggy surrogate parent code (ITS#1815) 
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
 2002-10-10 20:28:36 +00:00
Kurt Zeilenga
5504bed852 More OBSOLETE checks 2002-10-10 02:38:32 +00:00
Kurt Zeilenga
857165b1bf Add some OBSOLETE schema checks 2002-10-10 02:07:24 +00:00
Kurt Zeilenga
b5020aa16d Don't mask error text variables 2002-10-09 23:36:28 +00:00
Kurt Zeilenga
27cb98d28d Remove lint 2002-10-09 23:35:45 +00:00
Kurt Zeilenga
1aa829922f Implement content rule checks 
w/ implicit default rules allowing any auxiliary class to be mixed in
 2002-10-09 23:02:01 +00:00
Howard Chu
e6d10b9590 Revert previous commit. More thought needed re: IPV4 vs IPv6 failures 2002-10-09 21:18:51 +00:00
Howard Chu
2e538e19d4 ITS#2132, give up at first bind failure 2002-10-09 20:45:13 +00:00
Kurt Zeilenga
5060ebb36d Fix bad sup error 2002-10-09 19:24:02 +00:00
Kurt Zeilenga
dff7315edf Need ../cr.o 2002-10-09 19:11:12 +00:00
Howard Chu
b9bd44b047 Fix ITS#2132, give up if listener fails to open 2002-10-09 18:57:50 +00:00
Kurt Zeilenga
acc32b9d9e Basic framework for DIT Content Rules (not yet enforced) 2002-10-09 07:11:50 +00:00
Kurt Zeilenga
023d0e2a5c Rework unprotected simple bind checks 2002-10-08 19:03:18 +00:00
Kurt Zeilenga
06f69e603c Add security restrictions examples 2002-10-08 01:15:20 +00:00
Kurt Zeilenga
36fca96695 if "disallow bind_simple_unprotected", require at least SSF of 2 2002-10-08 01:06:49 +00:00
Kurt Zeilenga
df6c69ffd6 More entry level access control for back-shell 
(should be applied to back-perl and other programmable backends)
 2002-10-07 21:56:43 +00:00
Kurt Zeilenga
3a17376dfd s/256/LBER_ELEMENT_SIZEOF/ 
set LBER_ELEMENT_SIZEOF to 256
maybe this should be set to N*sizeof(size_t) or something
 2002-10-07 21:01:47 +00:00
Kurt Zeilenga
cb73d243fb More "entry" level ACLs for entry add, delete, and rename. 2002-10-07 19:19:29 +00:00
Kurt Zeilenga
d19db4b7ed Fix up last commits 2002-10-04 23:42:27 +00:00
Kurt Zeilenga
9fbcc90bd5 Add "entry" ACL checks for add/delete/rename ops 2002-10-04 23:26:28 +00:00
Kurt Zeilenga
8975676fa4 Clean up some #else #if 'ing 2002-10-04 18:36:44 +00:00
Kurt Zeilenga
5b591d0dec Fix subentry OIDs 2002-10-02 01:18:46 +00:00
Kurt Zeilenga
33248a02e1 Code cleanup (no functional changes) 2002-10-01 04:07:55 +00:00
Kurt Zeilenga
f5e6d1db41 #unifdef -DSCHEMA_DN 2002-09-29 04:30:38 +00:00
Kurt Zeilenga
4ef4c9eb06 Return default referral if DN maps to empty domain. 2002-09-26 16:12:39 +00:00
Kurt Zeilenga
b4e1ea15f3 benign buffer overflow fix (ITS#1964) 2002-09-25 04:34:33 +00:00
Kurt Zeilenga
bbbf2f4ca7 Fix handling of non-critical controls for backends which 
support no controls.
 2002-09-24 18:20:59 +00:00
Kurt Zeilenga
d0a4fee37a Minor updates 2002-09-22 19:09:47 +00:00
Kurt Zeilenga
976c35fbf0 fix possible uninit bug 2002-09-21 04:33:19 +00:00
Howard Chu
bdf9b3ae1b Fix ITS#1033 slapd hangs with GNU Pth - don't write to the wakefd 
more than once at any given time.
 2002-09-21 03:52:16 +00:00
Kurt Zeilenga
f558b6b02f Add experimental +/- AttributeName support. 2002-09-21 00:11:43 +00:00
Kurt Zeilenga
d9d58ae02f Save "-" for no subtypes 2002-09-20 19:58:25 +00:00
Howard Chu
9ba829436e Add dummy reference to lutil_uuidstr() for dynamically loaded back-bdb 
and back-ldbm.
 2002-09-20 01:02:33 +00:00
Howard Chu
104f8cc409 Simpler fix for NO_THREADS 2002-09-19 06:34:53 +00:00
Howard Chu
ff9e580d33 Updated BDB_HIER for current API 2002-09-19 06:08:12 +00:00
Howard Chu
6fa0363d09 Don't set bdb yield with NO_THREADS 2002-09-19 01:38:00 +00:00
Howard Chu
919274432b Fixes for NO_THREADS 
Use a per-env locker ID
	Always set lock_detect, since we allow slapadd etc. concurrently
Also removed unused lock_detect_task code. lockdetect config keyword only
needs <policy>, no <seconds> argument.
 2002-09-19 01:13:27 +00:00
Howard Chu
7666bb7482 Add calls to module_init/module_kill to support dynamically loaded backends. 2002-09-18 11:58:19 +00:00
Kurt Zeilenga
3eb21d8a6c Misc cleanup 2002-09-16 21:50:55 +00:00
Kurt Zeilenga
f0364e25d1 Fix sizeof [r]buf typo 2002-09-16 21:35:33 +00:00
Kurt Zeilenga
cc7d1433bb For object classes in attribute lists, use '+' (or '-') to indicate 
name is an objectClass.
 2002-09-16 20:48:08 +00:00
Kurt Zeilenga
a1da292989 Wrap csn filter frees with sync mode check. 2002-09-15 22:42:50 +00:00
Kurt Zeilenga
88c8cca820 Fix return value 2002-09-15 22:42:07 +00:00
Kurt Zeilenga
0ad91236fd Add LDAP_CONTROL_CLIENT_UPDATE to list of supported controls 2002-09-15 22:28:38 +00:00
Kurt Zeilenga
1d0e916c6f Misc CLIENT_UPDATE cleanups 2002-09-15 22:22:51 +00:00
Kurt Zeilenga
2a9783bd5e Fix typos in last commit 2002-09-15 22:13:25 +00:00
Kurt Zeilenga
629a0219f2 Cleanup up LDAP_CLIENT_UPDATE code... including some bug fixing. 2002-09-15 21:08:34 +00:00
Jong Hyuk Choi
1509e321de LCUP Response Control Code 2002-09-14 00:29:06 +00:00
Howard Chu
3e61f0630d Fix ITS#2082, bdb_idl_intersection 2002-09-13 20:19:56 +00:00
Howard Chu
7e493b87be Fix debug messages 2002-09-13 20:19:15 +00:00
Howard Chu
a8297e6d22 Fix test of uninit'd rc at LOCK_ID 2002-09-13 12:32:08 +00:00
Howard Chu
1263e40b55 Set BDB's global allocators to ber_*, don't bother with the per-env setting. 2002-09-12 02:47:18 +00:00
Pierangelo Masarati
ae2cd84d16 trim c++ style comments 2002-09-11 17:15:55 +00:00
Howard Chu
7823832770 Fix ITS#2075, NULL moddn->newsup->bv_val 2002-09-11 10:59:41 +00:00
Pierangelo Masarati
8758a30bf2 #undef SLAP_X_FILTER_HASSUBORDINATES while I fix the entry lock problem ... 2002-09-10 10:10:11 +00:00
Howard Chu
35e8b8325d Unifdef BDB_IDL_MULTI. 2002-09-10 04:20:45 +00:00
Kurt Zeilenga
e6fdfd4cee only optimize objectClass filters when (objectClass=*) is 
presented... avoids (&(objectClass=*)(objectClass=foo)) problems.
 2002-09-09 23:25:22 +00:00
Howard Chu
9953574b47 Fix: if slapadd was used with an un-ordered LDIF file, we can't rely on 
entries having ascending entry IDs. Always start from the beginning of
the candidate list. (This should be fine in the general case as well,
since the subtree index will also have refined the candidates.)
 2002-09-09 04:24:38 +00:00
Howard Chu
30de884223 More memory cleanup 2002-09-09 00:56:57 +00:00
Howard Chu
a4b30ce455 Plug memleaks from -r1.45 2002-09-09 00:55:52 +00:00
Pierangelo Masarati
b8240724ad optimize also duplicate/existence check in value delete operations 2002-09-07 16:08:30 +00:00
Howard Chu
b623e4495b Fix typo in one-level searches, left over from -r1.23 cleanup 2002-09-06 12:37:24 +00:00
Kurt Zeilenga
37d9880495 Some LCUP clean up 2002-09-06 00:29:20 +00:00
Howard Chu
73207c7110 Replace HACK in slap_sasl_canonicalize with safer test. 2002-09-05 11:01:12 +00:00
Kurt Zeilenga
ab80b03057 back_attribute() should use ACL_AUTH not ACL_READ (at 
least for current callers, may need to pass it the
permission level)
 2002-09-05 02:37:10 +00:00
Howard Chu
62ceae250c ITS#2065 omit libbackends.a when no static backends configured. 
Also fixed dependencies for dynamic backends and tools.
 2002-09-04 10:58:25 +00:00
Jong Hyuk Choi
4b48c05a8e LDAP Client Update Protocol - non-persistent update (TODO: response control ...) 2002-09-04 02:00:42 +00:00
Pierangelo Masarati
5d50463376 optimize duplicate detection based on mods and existing values count 2002-09-03 15:12:36 +00:00
Kurt Zeilenga
69ba1a21bc Extend checks to substrings rules. Need to kludge around 
LDAP's kludged builtin substrings rules.
 2002-09-03 07:28:57 +00:00
Kurt Zeilenga
8a5b200c44 Add appropriate matching rule checks. 
Clean up syntax error reporting.
 2002-09-03 07:01:09 +00:00
Howard Chu
3099d89d9e Don't use sasl_set_alloc on Cyrus 2, it manages all of its memory 
internally and we don't want to get in the way.
 2002-09-02 22:25:26 +00:00
Kurt Zeilenga
3e1a896928 Update comment 2002-09-02 22:07:23 +00:00
Pierangelo Masarati
d3ca441ae8 /* 
* The original code performs ( n ) normalizations
 * and ( n * ( n - 1 ) / 2 ) matches, which hide
 * the same number of normalizations.  The new code
 * performs the same number of normalizations ( n )
 * and ( n * ( n - 1 ) / 2 ) mem compares, far less
 * expensive than an entire match, if a match is
 * equivalent to a normalization and a mem compare ...
 *
 * This is far more memory expensive than the previous,
 * but it can heavily improve performances when big
 * chunks of data are added (typical example is a group
 * with thousands of DN-syntax members; on my system:
 * for members of 5-RDN DNs,

 members         orig            bvmatch (dirty) new
 1000            0m38.456s       0m0.553s        0m0.608s
 2000            2m33.341s       0m0.851s        0m1.003s

 * Moreover, 100 groups with 10000 members each were
 * added in 37m27.933s (an analogous LDIF file was
 * loaded into Active Directory in 38m28.682s, BTW).
 *
 * Maybe we could switch to the new algorithm when
 * the number of values overcomes a given threshold?
 */
 2002-09-02 19:41:03 +00:00
Pierangelo Masarati
eb38db1be5 various fixes and improvements 2002-09-02 19:39:31 +00:00
Pierangelo Masarati
857d08ea21 use bvmatch() instead of ber_bvcmp() when testing for match without ordering 2002-09-02 19:39:06 +00:00
Kurt Zeilenga
132506e13c Add NOOP search support. 2002-09-02 17:38:17 +00:00
Kurt Zeilenga
af183089b8 unifdef -DSLAP_X_MRA_MATCH_DNATTRS 2002-09-01 00:33:20 +00:00
Kurt Zeilenga
b5f51ed4a5 have get_mra use mr_usable_with_at() as well 2002-08-31 21:39:42 +00:00
Kurt Zeilenga
c6052ac8b0 Add mr_usable_with_at() routine. Use both in generation 
of rule uses, but also in test_filter_mra()
 2002-08-31 21:23:45 +00:00
Kurt Zeilenga
5c61f55faa Make sure we don't expose hidden attribute types in rule uses 2002-08-31 20:49:50 +00:00
Kurt Zeilenga
e9a71156cc Add matching rule use support where assertion syntax != value syntax 2002-08-31 20:42:25 +00:00
Kurt Zeilenga
04c71ce9b2 List approximates as well in rule uses. 
Don't yet list ordering rules yet, these require special attention (and
hence are not marked MR_EXT yet)
 2002-08-31 19:25:41 +00:00
Kurt Zeilenga
d6ac7ac544 Fix last commit. 
Also add uses where mr is the attribute's equality rule.
 2002-08-31 19:17:54 +00:00
Kurt Zeilenga
2908cdff11 MR_EXT rules can be used with any type whose syntax is same as 
the syntax's assertion syntax.
 2002-08-31 19:05:36 +00:00
Kurt Zeilenga
6c7104c82b Don't hide matchingRuleUse's description (now implemented) 
Use attribute's cname not oid in matching rule uses
 2002-08-31 18:41:21 +00:00
Pierangelo Masarati
966dd1bdca definitely fix NOOP in back-bdb 2002-08-31 17:03:42 +00:00
Pierangelo Masarati
0d5fe062e2 improved support for NOOP; add is fine, the other write funcs still need work 2002-08-31 12:00:39 +00:00
Pierangelo Masarati
a0c54f1625 use ldap_charray_add instead of dedicated helper; get rid of dependency from ldap-int.h 2002-08-31 11:14:15 +00:00
Pierangelo Masarati
71aecea2aa fix bitwise matching (courtesy of Luke Howard) 2002-08-31 10:56:27 +00:00
Pierangelo Masarati
804a111fbd add {create,modify}Timestamp to subschema subentry (SHOULD per RFC2251; use server startup time to be conservative) 2002-08-31 10:49:03 +00:00
Pierangelo Masarati
aea52e5bc9 define macros for appropriate sizing of lutil buffers 2002-08-31 10:48:02 +00:00
Pierangelo Masarati
e2ec62f09f add matchingRuleUse to schema; use a berval instead of _oidlen in syntax and matching rule 2002-08-31 10:45:22 +00:00
Pierangelo Masarati
c76b36254c cleanup comments 2002-08-31 10:41:49 +00:00
Pierangelo Masarati
c8cfbca64d fix extendedMatch and approx hfilter andling; get rid of subtree_cond (argh, need to trim it from config and docs ...) 2002-08-31 10:39:23 +00:00
Pierangelo Masarati
a1bb43946b better handling of children_cond 2002-08-31 10:38:29 +00:00
Pierangelo Masarati
95a99bd522 trace illegal condition in backsql_strfcat 2002-08-31 10:37:42 +00:00
Pierangelo Masarati
685363e880 add 'children_cond' config statement 2002-08-31 10:36:16 +00:00
Pierangelo Masarati
b0dfd89e1b added referral support to back-{ldap,meta}; need to allow send_serch_reference() handle NULL entry pointer 2002-08-31 10:35:23 +00:00
Pierangelo Masarati
501cd4c611 fix extendedMatch values return filter control 2002-08-31 10:29:03 +00:00
Kurt Zeilenga
b04483a6a2 We don't support substrings matching via extensibleMatch 2002-08-30 19:30:58 +00:00
Howard Chu
70673417f2 Fix debug statement 2002-08-30 14:28:45 +00:00
Howard Chu
c4f74ac639 Fix crash in mra_free, freeing ber-private value. 2002-08-30 12:38:50 +00:00
Howard Chu
0614b5fdbf Fix unindent commit 2002-08-30 11:48:47 +00:00
Howard Chu
4a3a557827 Use DB_NODUPDATA when adding IDs. Silence log for DB_NOTFOUND in delete_key, 
let caller log it if they care.
 2002-08-30 11:37:43 +00:00
Howard Chu
9d4f5e13e8 Unindented a level. Fixed logging of keys. 2002-08-30 11:21:20 +00:00
Howard Chu
f32803e738 Don't mask DB_KEYEXIST errors in bdb_idl_insert_key, let dn2id see them. 
Ignore DB_KEYEXIST and DB_NOTFOUND errors in key_change.
 2002-08-30 10:41:46 +00:00
Kurt Zeilenga
81420d4f91 Yet another bug fix... this one from Luke. 2002-08-29 19:54:17 +00:00
Pierangelo Masarati
a8bf275221 cleaner handling of unchecked limit support 2002-08-29 19:43:29 +00:00
Kurt Zeilenga
ecfb311f8f Fix objectSubClassIndexer bug 2002-08-29 18:05:49 +00:00
Pierangelo Masarati
58b860a15e fix server-size controls handling in back-{ldap,meta} 2002-08-29 15:07:18 +00:00
Pierangelo Masarati
7e2317c842 add server side controls to back-ldap and back-meta 2002-08-29 14:39:31 +00:00
Pierangelo Masarati
e7d2d0a9f5 avoid zero size ch_malloc() when no attributes are present in vrFilter 2002-08-29 13:32:28 +00:00
Pierangelo Masarati
82cb585d32 trim unused var 2002-08-29 12:41:07 +00:00
Pierangelo Masarati
c38f1a63b0 this test is useless, since noop is masked SLAP_CTRL_UPDATE 2002-08-29 12:17:28 +00:00