upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-21 23:29:34 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
22163 commits 38 branches 309 tags 68 MiB
Commit graph

881 commits

Author SHA1 Message Date
Pierangelo Masarati
5e36e5625a move slapo-lastmod to contrib/slapd-modules/lastlog/ (ITS#4701) 2006-12-28 16:41:36 +00:00
Pierangelo Masarati
9fc7cd7267 move slapo-lastmod to contrib/slapd-modules/lastlog/ (ITS#4701) 2006-12-28 16:30:33 +00:00
Pierangelo Masarati
37df2996c4 note workaround for ITS#4785; cleanup 2006-12-28 12:17:19 +00:00
Howard Chu
79728816d3 Note supported commands 2006-12-20 14:32:51 +00:00
Howard Chu
065ea81f30 Cleanup, document include: extension 2006-12-20 14:25:06 +00:00
Howard Chu
d6c4e2a833 Moved lists of backends and overlays to their own manpages 2006-12-20 04:58:33 +00:00
Pierangelo Masarati
4e11af075f - add support for "use-temporary-conn" much like back-ldap 
- fix various connection creation/setup concurrency issues
- use shared connection when always idasserting (similar to ITS#4781)
- reduce the impact of schema mapping when not used (tnx to gprof)
- fix temporary/tainted connection leak in abnormal conditions
 2006-12-17 23:52:23 +00:00
Pierangelo Masarati
ef0261e84c cleanup and document ITS#4781 commit 2006-12-17 22:20:02 +00:00
Pierangelo Masarati
e437cfee54 document support for IPv6 in ACLs (ITS#4756) 2006-12-15 02:15:35 +00:00
Pierangelo Masarati
3164c73276 fix misc. typos; note RFC 4370 2006-12-15 01:08:32 +00:00
Pierangelo Masarati
8326ac21b1 add "report" to "onerr" modes: continue a search in case one target returns an error, and only propagate the error at the end 2006-11-23 23:50:36 +00:00
Howard Chu
ecd7c78547 More tweaks 2006-11-17 19:28:16 +00:00
Howard Chu
d3deed6119 Expand examples, mention converting old conf file with slaptest. 2006-11-17 19:05:31 +00:00
Howard Chu
15502d87ae Add note about access controls on config backend 2006-11-16 15:09:47 +00:00
Howard Chu
8a521a1bd4 Remove ordering restriction on logdb configuration, revise example 2006-11-16 14:38:37 +00:00
Howard Chu
9023ba385d Refer SLAPI to slapd.plugin(5) 2006-11-16 12:47:32 +00:00
Howard Chu
0a69f3721d Fix typos 2006-11-16 12:05:25 +00:00
Howard Chu
15d898f73d ITS#3812 back-config documentation 2006-11-16 11:48:19 +00:00
Pierangelo Masarati
6581f10e9c fix typo (ITS#4753) 2006-11-15 23:49:04 +00:00
Pierangelo Masarati
72e586ba36 revert previous commit; disable RESTART from ldap.conf 2006-11-13 23:51:52 +00:00
Pierangelo Masarati
10e84d7192 document missing RESTART option (ITS#4749); restore alphabetical order 2006-11-13 16:39:44 +00:00
Howard Chu
caac58806a Delete bogus .UC 6 macro invocation (This is not a 4.3BSD manpage) 2006-11-09 20:11:47 +00:00
Pierangelo Masarati
5c236d9df5 document the use of "rebind-as-user" to rebind when re-establishing a broken connection (ITS#4715) 2006-10-24 20:01:19 +00:00
Pierangelo Masarati
53cd4a88d7 document the network-timeout directive (ITS#4718) 2006-10-24 19:49:48 +00:00
Pierangelo Masarati
61b038ce35 further clarify validity of search limits, and "beautify" paragraph 2006-10-18 17:29:37 +00:00
Pierangelo Masarati
dd093c48a8 note that the replication identity may need to be treated specially by the consumer 2006-10-18 17:19:50 +00:00
Pierangelo Masarati
c3932ca2c0 s/local socket/IPC/ 2006-10-09 19:26:41 +00:00
Pierangelo Masarati
4b78b6253b cleanup URI 2006-10-09 19:18:03 +00:00
Pierangelo Masarati
dd2721c857 more on clarification of special proxy identities and resilience to connection failure 2006-10-07 18:14:30 +00:00
Howard Chu
c0fcbdd8b2 mirrormode is still single-master, but must be enforced externally 2006-10-06 21:08:25 +00:00
Quanah Gibson-Mount
67380eea1e five forms. 2006-10-06 02:04:07 +00:00
Howard Chu
dc907d929d Nobody expects the Spanish Inquisition! s/three/four/ 2006-10-06 01:45:03 +00:00
Pierangelo Masarati
18450addda document VERSION, TIMEOUT and NETWORK_TIMEOUT options 2006-09-26 02:54:34 +00:00
Pierangelo Masarati
7ed909045f document the LDAP builtin map in librewrite (ITS#4602) 2006-09-24 17:50:48 +00:00
Pierangelo Masarati
028e7c46ca document the syntax of the ldap.conf(5) file 2006-09-12 21:02:30 +00:00
Pierangelo Masarati
84d6a04c91 improve timeout support (ITS#4157, ITS#4663) 2006-09-04 08:26:09 +00:00
Pierangelo Masarati
150a4f106c improve timeout support (ITS#4157, ITS#4663); manpage cleanup 2006-09-04 08:24:05 +00:00
Pierangelo Masarati
92ff6afec0 note the single-value userPassword constraint (please review) 2006-08-28 14:33:59 +00:00
Kurt Zeilenga
b7873dbb94 Note line length limit. 2006-08-25 20:56:06 +00:00
Pierangelo Masarati
8ac5a02eb2 fix typo 2006-08-17 15:54:10 +00:00
Kurt Zeilenga
3edb468146 A few clarifications. "sync" in syncprov should refer to the 
LDAP Content Sync in general and "syncrepl" should only be used
when referring to replication-specific functionality.
 2006-07-29 16:44:29 +00:00
Howard Chu
75064457c0 ITS#4613 note that lastmod also controls entryCSN and entryUUID 2006-07-24 00:16:34 +00:00
Kurt Zeilenga
3565dcc756 Add access control note to authz-regexp discussion 2006-06-27 20:28:57 +00:00
Howard Chu
3d7647fa4a Document requirement for rootDN on logdb, note access controls. 2006-06-15 00:05:04 +00:00
Pierangelo Masarati
ed0d8d0a94 fix "require" inheritance and handling of "none" (ITS#4574) 2006-06-13 00:16:45 +00:00
Pierangelo Masarati
7b6d39a043 fix and clarify usage details 2006-06-12 22:23:41 +00:00
Pierangelo Masarati
0f8f25cf1a add support for recursive referrals (with simple loop detection) to slapo-chain (ITS#4070); add simple support for returning the error code instead of the original referral (ITS#4570) 2006-06-12 22:09:43 +00:00
Kurt Zeilenga
a031f0c638 Update RFC references 2006-06-09 17:20:38 +00:00
Pierangelo Masarati
2e92f2de68 clarify the behavior of slapo-refint(5) in case of modrdn 2006-05-29 21:14:36 +00:00
Pierangelo Masarati
795841b5a4 implement proxy quarantine (ITS#4569) 2006-05-27 19:54:27 +00:00
Pierangelo Masarati
3f3d1e48b6 document "cancel" feature 2006-05-24 17:56:48 +00:00
Pierangelo Masarati
e5fc7845fc clarify the required access to add the suffix of a database (consequence of ITS#4552) 2006-05-20 11:12:05 +00:00
Kurt Zeilenga
85a1ff4eba Clarify that "disallow bind_anon" doesn't prohibit anonymous access. 2006-05-16 18:15:29 +00:00
Pierangelo Masarati
0369560017 document ITS#4546 "single-conn" feature 2006-05-14 18:12:17 +00:00
Ralf Haferkamp
4d46b8b747 Additional fix for ITS#4522. The "dn=" ist not optional. 2006-05-12 11:48:57 +00:00
Pierangelo Masarati
fbbb8a5d93 fix ITS#4522; imply "+0" when no access is given 2006-05-10 22:25:06 +00:00
Pierangelo Masarati
4c926910d7 document "protocol-version" directive (ITS#4488) 2006-05-09 21:57:07 +00:00
Howard Chu
4934a7ab00 Apply logoldattr / reqOld to ModRDN 2006-05-03 21:38:15 +00:00
Howard Chu
286a168203 Add syncrepl TLS config keywords 2006-05-03 03:50:02 +00:00
Pierangelo Masarati
8f995a43c8 undocument "protocol-version" statement; sort statements alphabetically, except for URI 2006-05-01 22:12:17 +00:00
Howard Chu
d8595b7c6e ITS#4463 add constraint overlay 2006-04-29 10:03:36 +00:00
Howard Chu
ec4c74f7e0 Add logoldattr option 2006-04-28 20:43:20 +00:00
Hallvard Furuseth
2f04f61dc7 Support rootdn 2006-04-27 16:12:59 +00:00
Howard Chu
da5c3ec1f4 More cleanup 2006-04-27 00:37:40 +00:00
Howard Chu
d62fd3fd5a Cleanup prev commit 2006-04-27 00:27:43 +00:00
Howard Chu
79797e9d9e Added reqOld support 2006-04-27 00:21:19 +00:00
Hallvard Furuseth
b1aaaed434 Clarify output from search command 2006-04-19 13:52:20 +00:00
Kurt Zeilenga
e1b3ad0590 (very) basic documentation of "m"anage access 2006-04-12 06:03:12 +00:00
Pierangelo Masarati
5575f667ba highlight what's user-only 2006-04-09 22:25:29 +00:00
Pierangelo Masarati
ac8c1f2a26 fix multiple response messages; add overall sleep time 2006-03-30 23:49:51 +00:00
Pierangelo Masarati
a38e5265d4 fix typos 2006-03-28 23:08:47 +00:00
Pierangelo Masarati
323c921fba fix "packets" debug value 2006-03-28 15:07:51 +00:00
Pierangelo Masarati
324431062b refuse illegal values for "threads" (ITS#4433) 2006-03-20 12:12:28 +00:00
Howard Chu
3b4fc9b393 Add subord scope for syncrepl 2006-03-07 22:40:00 +00:00
Pierangelo Masarati
af0d2b1d2a add support for "subtree-exclude" 2006-02-16 01:26:39 +00:00
Howard Chu
1884790b5c ITS#4399 s/pwdCheckSyntax/pwdCheckQuality/ 2006-02-13 19:04:06 +00:00
Howard Chu
72b7f845c1 ITS#4397 delete misleading "subsequent database" config note. 2006-02-11 18:35:32 +00:00
Howard Chu
bec47e6a39 s/multimaster/mirrormode/ 2006-02-08 05:50:38 +00:00
Howard Chu
1aebe9bde4 Add multimaster keyword 2006-02-06 04:50:12 +00:00
Pierangelo Masarati
54aefe30f7 implement proxy long-lived connection TTL 2006-02-01 23:10:12 +00:00
Howard Chu
17dbef6ba8 ITS#4354 add a note about avoiding Anonymous DH. 2006-01-19 18:28:20 +00:00
Howard Chu
7b5716ae9b dd note about indexing queryid's 2006-01-18 03:31:01 +00:00
Howard Chu
ff2163ff17 Fix typo in filter example 2006-01-18 03:23:52 +00:00
Howard Chu
5a977483d4 ITS#4225 added proxyCacheQueries keyword 2006-01-18 03:21:19 +00:00
Howard Chu
8a7501449a Add optional negttl / negative result caching 2006-01-18 03:03:35 +00:00
Kurt Zeilenga
a39d48d045 LDBM is obsolete. 2006-01-13 18:28:58 +00:00
Pierangelo Masarati
9bcb37b5c1 refine fix to ITS#4320 2006-01-10 02:05:54 +00:00
Pierangelo Masarati
339b9c371e rfc2589 support (ITS#4293) 2006-01-06 17:46:52 +00:00
Pierangelo Masarati
a54ca7a6ce factor ACI code out of slapd; now it can only use dynacl layer 2006-01-06 17:12:35 +00:00
Pierangelo Masarati
a3c4b98bc9 minor fixes: typos, comments about ITS#3523 2006-01-06 16:21:22 +00:00
Howard Chu
c07045b0b6 Document cachefree option added in 2.3.14 2006-01-06 03:55:59 +00:00
Kurt Zeilenga
acbb5cf689 Happy new year! 2006-01-03 23:11:52 +00:00
Pierangelo Masarati
1fd9d40e87 part of ITS#3523 2006-01-02 08:13:33 +00:00
Pierangelo Masarati
82c04bf2a0 clarify issues related to performing operations with rootdn identity 2005-12-29 16:14:41 +00:00
Pierangelo Masarati
28aad43241 don't expose unused (and deprecated) log levels 2005-12-22 22:27:16 +00:00
Kurt Zeilenga
6618f0eac5 Fix typo 2005-12-22 01:51:57 +00:00
Pierangelo Masarati
5075d09f49 cleanup and clarify the threading issues with back-ldap and back-meta when looping back to the same DSA (ITS#4141) 2005-12-21 19:01:59 +00:00
Pierangelo Masarati
94028fe7e4 add more checks on input values 2005-12-20 13:58:25 +00:00
Howard Chu
7bee4a6099 ITS#4146,#4266 syncrepl search spec is not identical to ldapsearch(1)... 2005-12-20 12:19:22 +00:00
Kurt Zeilenga
4ee2ae8f94 StartTLS cleanup 2005-12-20 00:39:41 +00:00
Kurt Zeilenga
553f59b900 Add access control recommendation to discussion of password hashing. 2005-12-20 00:39:28 +00:00
Pierangelo Masarati
69caf0b333 clarify usage as per ITS#4197 2005-12-13 20:35:10 +00:00
Pierangelo Masarati
bd975514de add (and document) customizable bind-timeout 2005-12-12 15:57:58 +00:00
Pierangelo Masarati
fdbcfbe598 document idle-timeout; cleanup 2005-12-07 17:57:35 +00:00
Pierangelo Masarati
cdc697d997 clarify that pcache prefers to read objectClass from remote server (ITS#4232) 2005-11-30 00:16:33 +00:00
Pierangelo Masarati
7841f4f538 complete merging of dyngroup into dynlist; add back-config support 2005-11-29 02:10:47 +00:00
Pierangelo Masarati
26d802ee53 add dyngroup compare functionality to dynlist 2005-11-28 11:34:46 +00:00
Pierangelo Masarati
1e01082e10 s/chain-cache-uris/chain-cache-uri/ 2005-11-27 23:18:47 +00:00
Kurt Zeilenga
2567e820b7 Add change record format description 2005-11-24 19:26:44 +00:00
Pierangelo Masarati
dcdd2a567a add a caveat on access control issues 2005-11-23 11:16:28 +00:00
Pierangelo Masarati
9722bb7c30 fix return attributes (ITS#4203) 2005-11-23 10:20:11 +00:00
Howard Chu
a6adcedecc The overlay creates the suffix entry automatically. 2005-11-21 05:40:31 +00:00
Pierangelo Masarati
567ab77275 reflect recent code changes 2005-11-19 23:40:48 +00:00
Pierangelo Masarati
3e7fd464dc streamline back-ldap/slapo-chain configuration; add the possibility to cache non-configured, anonymous referral URIs 2005-11-19 17:48:33 +00:00
Pierangelo Masarati
32d683f383 document new behavior & configuration items 2005-11-19 15:17:08 +00:00
Pierangelo Masarati
10bf23d123 mention base scoped search requests with empty base DN (ITS#4162) 2005-11-09 10:03:53 +00:00
Pierangelo Masarati
4cab386d13 backport write operation timeouts from back-meta to back-ldap; minor cleanup & silence warnings 2005-11-06 23:29:10 +00:00
Pierangelo Masarati
fd1b1a53f2 add matchedDN; fix and clarify behavior when searching in-directory entries 2005-11-06 23:26:42 +00:00
Pierangelo Masarati
a0d04db2d1 need to reharse hexadecimals and powers of 2... 2005-11-04 19:12:42 +00:00
Pierangelo Masarati
4570d2d14b clarify some logging issues 2005-11-04 17:28:22 +00:00
Kurt Zeilenga
eb61bd92ef Note that schema described herein is a "work in progress", 
subject to change without notice.  Same needs to be
done to slapo-lastmod(5), but its organization makes it
a bit messier.
 2005-11-01 20:33:15 +00:00
Howard Chu
1e52928337 ITS#4017 add TLSDHParamFile 2005-10-28 05:42:56 +00:00
Howard Chu
7151004a03 Comment out obsolete ucdata-path directive 2005-10-28 03:24:53 +00:00
Howard Chu
43ecd6f3a2 One more try, deleted corrupt revision. Add tool-threads keyword. 2005-10-28 03:17:10 +00:00
Howard Chu
c3c0e006a9 Cleanup, proxy cache is no longer tied to meta 2005-10-19 05:22:14 +00:00
Howard Chu
b766d6da8f Fix formatting 2005-10-18 03:50:06 +00:00
Howard Chu
fc2affed6c Delta-syncrepl doc updates 2005-10-18 03:25:57 +00:00
Howard Chu
b2bf5094eb Update purge age days 2005-10-14 23:28:47 +00:00
Pierangelo Masarati
ddded040b9 document new directive as per ITS#4057 2005-10-01 18:06:13 +00:00
Howard Chu
eab3e6b572 ITS#3996 add notes about glue interaction with other overlays (syncprov) 2005-09-27 15:29:36 +00:00
Howard Chu
7fc2627431 Minor formatting tweaks 2005-09-02 06:44:33 +00:00
Hallvard Furuseth
0e099ff942 Remove more glue references 2005-09-01 13:31:00 +00:00
Howard Chu
f8ec98588b Reinstate subordinate directive, delete references to slapo-glue 2005-09-01 12:10:26 +00:00
Hallvard Furuseth
a18543d1ff Document slapo-glue(5) effect on slapcat(8), slapadd(8) and slapindex(8) 2005-08-31 22:27:56 +00:00
Hallvard Furuseth
6c1bbc2816 Update SEE ALSO section for previous commit. 2005-08-31 18:34:56 +00:00
Hallvard Furuseth
9911e90b6b Null backend support for slapadd and slapcat 2005-08-31 18:17:46 +00:00
Howard Chu
37f5c6aa0e Update for draft 09 (just added NO-USER-MODIFICATION to some operational 
attributes).
 2005-08-23 19:24:35 +00:00
Howard Chu
02f52030b0 More for valsort 2005-08-23 10:44:36 +00:00
Pierangelo Masarati
99a6ba2e10 reflect additions to dynacl config syntax 2005-08-22 16:30:41 +00:00
Pierangelo Masarati
150bcfcbcb moved to contrib/slapd-overlays/allop 2005-08-22 09:12:21 +00:00
Pierangelo Masarati
09e167427a note slapo-allop 2005-08-20 18:02:09 +00:00
Pierangelo Masarati
36c9ccdba1 cleanup objectclass inheritance 2005-08-20 18:01:40 +00:00
Pierangelo Masarati
8d5e1ae2b4 rework acknowledgments 2005-08-20 12:20:58 +00:00
Pierangelo Masarati
43fb9f0e46 allop man page 2005-08-20 12:20:39 +00:00
Pierangelo Masarati
9205f4fdb2 reflect recent changes to code 2005-08-20 11:39:08 +00:00
Howard Chu
19b8e9e1ce ITS#3936 fix wording, add clarification 2005-08-14 08:48:57 +00:00
Howard Chu
f4c1eee382 ITS#3935 tweak sessionlog description 2005-08-14 08:35:31 +00:00
Howard Chu
da2c46fe22 ITS#3935 fix sessionlog description 2005-08-14 08:20:54 +00:00
Howard Chu
023282b46f ITS#3823 minor cleanups / clarifications 2005-07-29 03:51:45 +00:00
Pierangelo Masarati
c172a20c49 document new timeout feature; improve existing stuff 2005-07-19 00:42:32 +00:00
Pierangelo Masarati
9ba68f902d provide a useful example 2005-07-18 17:24:07 +00:00
Hallvard Furuseth
cd80d6d5ec Add userPassword protection to example. 2005-07-18 14:07:57 +00:00
Hallvard Furuseth
5a84fb8b0f Add OVERLAYS section 2005-07-18 14:03:35 +00:00
Hallvard Furuseth
eda3a937e6 Note that the overlay is experimental (copied from slapd-relay.5). 2005-07-18 11:44:16 +00:00
Hallvard Furuseth
a04ee03a98 Note that relay backend is experimental (copied from slapd-relay.5). 2005-07-18 11:40:54 +00:00
Hallvard Furuseth
ca0e431cff Add slapd-hdb 2005-07-18 11:14:39 +00:00
Pierangelo Masarati
e8e5e38b52 refresh list of known overlays 2005-07-17 22:44:39 +00:00
Pierangelo Masarati
9ea3fa375c add an "OBSOLETED DIRECTIVES" section and list "subordinate" 2005-07-17 22:17:16 +00:00
Hallvard Furuseth
28256b4711 Add an example. Note that glued databases should usually have the same indexes. 2005-07-17 02:24:46 +00:00
Pierangelo Masarati
d0d98451ce fix typo 2005-07-16 15:36:29 +00:00
Pierangelo Masarati
e1ad1c6e22 move to attic... 2005-07-15 16:22:21 +00:00
Pierangelo Masarati
a238b4ffd4 apply (a modified version of) ITS#3822 patch 2005-07-15 15:46:30 +00:00
Pierangelo Masarati
6c4ce69ea8 refresh info about supported backends (added config, ldif; trimmed tcl) addresses ITS#3866 2005-07-15 15:35:26 +00:00
Hallvard Furuseth
45bf310444 ITS#3836: Explain that most monitor attrs are operational. 2005-07-07 08:21:18 +00:00
Pierangelo Masarati
deec44b89a fix further ITS#3830 issues; allow to specify a matching rule for non-DN match 2005-07-05 12:00:14 +00:00
Hallvard Furuseth
dfff2e0b32 Add copyright. 2005-07-04 12:50:57 +00:00
Hallvard Furuseth
0960b0aadd Document "REFERRALS". 
Add SEE ALSO openssl(1) and sasl(3).
 2005-07-04 12:01:19 +00:00
Hallvard Furuseth
135672c910 Manpage typos 2005-07-04 06:57:10 +00:00
Pierangelo Masarati
9565ec4bbd document new flag values for identity assertion 2005-07-03 23:18:08 +00:00
Pierangelo Masarati
297c7933b1 add "onerr" flag 2005-06-25 15:13:44 +00:00
Pierangelo Masarati
f86daac8c8 import retcode overlay 2005-06-19 22:39:44 +00:00
Pierangelo Masarati
d77bf49cb0 remove unnecessary and deprecated "lastmod" statement usage description (ITS#3789) 2005-06-17 17:44:11 +00:00
Howard Chu
cfaf61fedc Fix ITS#3766 bad font change 2005-06-11 00:57:34 +00:00
Howard Chu
cd15432de6 More accesslog updates 2005-06-10 11:41:57 +00:00
Pierangelo Masarati
94747a8489 fix previous commit; document aliasing and aliasing quotes configuration 2005-06-09 09:45:02 +00:00
Howard Chu
3bae4b4acb ITS#3691 import auditlog overlay 2005-06-07 03:03:18 +00:00
Howard Chu
2b68437214 ITS#3745 use "pcache" to instantiate instead of "proxycache" 2005-05-24 17:15:46 +00:00
Pierangelo Masarati
2a55844da3 refresh back-ldap man page, reflecting recent changes 2005-05-23 14:28:30 +00:00
Pierangelo Masarati
d32187df16 note recent changes (needs work) 2005-05-23 07:19:58 +00:00
Pierangelo Masarati
8592822aca document schema checking flag 2005-05-21 14:49:21 +00:00
Kurt Zeilenga
2e39dd74b8 Undocument LDAPv2 Kerberos options 2005-05-04 21:35:35 +00:00
Pierangelo Masarati
fa49a73fc4 fix retry; add per-target configurable number of retries; addresses ITS#3672, ITS#3676 & ITS#3680 2005-04-25 18:56:56 +00:00
Howard Chu
2a159cef0e More for ITS#3655 draft-8 updates 2005-04-22 09:15:55 +00:00
Kurt Zeilenga
3e800f20bd <limits.h> cleanup && ITS#3643 2005-04-10 19:32:14 +00:00
Pierangelo Masarati
3ead9d3140 complete access checking documentation 2005-04-10 16:06:45 +00:00
Pierangelo Masarati
a3e5490540 clarify why there's no access checking in back-dnssrv 2005-04-10 16:03:59 +00:00
Pierangelo Masarati
24a06b551f import of back-ldif man page; please review 2005-04-09 01:20:12 +00:00
Pierangelo Masarati
8feffa6091 further fulfilment of ITS#3639 2005-04-09 00:44:17 +00:00
Pierangelo Masarati
02464d6e34 further fulfilment of ITS#3639 2005-04-09 00:34:32 +00:00
Pierangelo Masarati
11ddb834be further fulfilment of ITS#3639 2005-04-08 23:39:05 +00:00
Pierangelo Masarati
797efdf730 further fulfilment of ITS#3639 2005-04-08 22:52:23 +00:00
Pierangelo Masarati
6dda364276 further fulfilment of ITS#3639 2005-04-08 22:08:40 +00:00
Pierangelo Masarati
140b33927f more to partial fulfilment of ITS#3639 2005-04-08 19:27:22 +00:00
Pierangelo Masarati
3fbc65082e remove slapd-tcl(5) 2005-04-08 19:00:58 +00:00
Pierangelo Masarati
111deb128e partial fulfilment of ITS#3639; need to check other backends thoroughly 2005-04-08 18:41:13 +00:00
Pierangelo Masarati
e7fef14447 document the dynlist overlay 2005-04-07 23:18:48 +00:00
Kurt Zeilenga
228e28c266 Remove redundant note indication. 2005-04-04 19:56:43 +00:00
Pierangelo Masarati
f1698e30f5 update diagnostics and man pages 2005-04-04 12:24:50 +00:00
Kurt Zeilenga
542468dcad Spell out BDB 2005-04-01 23:31:21 +00:00
Howard Chu
c808575c12 Add dbconfig directive for creating/writing the DB_CONFIG file 2005-04-01 11:50:37 +00:00
Pierangelo Masarati
584b21d20b initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615) 2005-03-31 18:10:11 +00:00
Pierangelo Masarati
27e5fabb8b document missing feature; avoid the risk of returning argv in an inconsistent state when an error occurs 2005-03-28 18:51:02 +00:00
Kurt Zeilenga
a0fa7f7901 Document partially implemented "disclose" level. 
"manage" remains undocumented (and unimplemented).
 2005-03-19 18:46:07 +00:00
Howard Chu
aad140151e More for translucent 2005-03-10 04:35:57 +00:00
Howard Chu
8da7cce20d Added translucent overlay (sponsored by HP) 2005-03-10 03:13:24 +00:00
Howard Chu
993649b4e0 Add back-hdb description 2005-02-15 23:44:32 +00:00
Pierangelo Masarati
ebd026cd7f fix typo 2005-02-08 13:17:02 +00:00
Pierangelo Masarati
43138aa500 use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup 2005-02-05 15:55:02 +00:00
Pierangelo Masarati
4123f29eaa fix spelling 2005-02-01 10:31:57 +00:00
Pierangelo Masarati
3b84f11d25 honor SLAP_GLUE_INSTANCE() flag; allow to advertize subordinate databases 2005-01-31 00:15:45 +00:00
Pierangelo Masarati
7d3c997aaf document recently added options 2005-01-30 22:59:43 +00:00
Howard Chu
86ab73ecd6 Remove "fasttool" option; obsoleted by "slapadd -q" 2005-01-25 20:21:36 +00:00
Pierangelo Masarati
6b37f6c06f typo in previous commit 2005-01-23 22:18:35 +00:00
Pierangelo Masarati
00f64211e2 cleanup and clarify aspects of the overlay usage 2005-01-23 22:11:46 +00:00
Pierangelo Masarati
9effc2b8f0 cleanup of rewrite code and docs 2005-01-23 21:42:05 +00:00
Pierangelo Masarati
ae0f47b063 improve parsing of acl-authcDN/acl-passwd 2005-01-22 18:48:03 +00:00
Kurt Zeilenga
69fcf8cbd6 Cleanup notices 2005-01-21 19:38:13 +00:00
Howard Chu
6c34a7c3b2 ITS#3330 mention objectClass index 2005-01-19 10:10:51 +00:00
Howard Chu
bb9fe5d7ac Cleanup prev commit 2005-01-19 09:55:03 +00:00
Howard Chu
c804bb3728 ITS#3293 add description of syncrepl starttls keyword 2005-01-19 09:47:46 +00:00
Pierangelo Masarati
2e057821e5 clarify referral usage 2005-01-19 00:28:29 +00:00
Pierangelo Masarati
b4e37e518f fixes for ITS#3480,3485,3489; implementation of DISCLOSE access for all operations (ITS#3472); ITS#3432.4; added value validate/pretty when applicable (see comments and #defines in back-sql.h) 2005-01-16 23:12:36 +00:00
Howard Chu
bf27ba977b Deleted syncrepl updatedn 2005-01-13 18:51:29 +00:00
Pierangelo Masarati
b381e1bcc8 cosmetic changes 2005-01-12 14:25:08 +00:00
Howard Chu
18b5f637de ITS#3478 the rootdn is always needed when using syncrepl 2005-01-12 03:37:58 +00:00
Pierangelo Masarati
90f64bacde more improvements 2005-01-05 16:47:49 +00:00
Pierangelo Masarati
f5936eb7fc minor naming cleanup; improvements to DN mapping layer; major docs update 2005-01-05 16:23:00 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Pierangelo Masarati
a9ed17a458 fix ITS#3441 2004-12-29 14:03:38 +00:00
Pierangelo Masarati
75c0965cc3 essential description of the chain overlay; please review 2004-12-08 23:47:08 +00:00
Howard Chu
d42d600538 Moved sessionlog description from bdb to syncprov 2004-12-08 04:57:43 +00:00
Howard Chu
553d9f6d66 Initial doc 2004-12-04 20:42:04 +00:00
Howard Chu
2f48a47194 Deleted "subordinate" keyword, added slapo-glue doc 2004-12-04 20:07:06 +00:00
Howard Chu
0560a28893 Add a checkpoint task if time-based checkpointing is configured. 2004-12-03 17:36:38 +00:00
Pierangelo Masarati
af9ce14812 allow undefined schema items to be returned by back-ldap and remapped by the rwm overlay 2004-12-01 22:00:08 +00:00
Howard Chu
8697bcdf7a Pass entry to password_quality check module, not just attrs 2004-12-01 16:02:27 +00:00
Pierangelo Masarati
184fc4878a more on ITS#3396: note that the filter is mandatory, and that the protocol must be ldap:// 2004-11-16 18:57:40 +00:00
Pierangelo Masarati
ca5d5c6fc7 back out previous commit 2004-11-15 22:54:17 +00:00
Pierangelo Masarati
f872ad29ba move special dn patterns to style enum; add creator special dn pattern 2004-11-15 22:21:50 +00:00
Pierangelo Masarati
2cf20312e2 cleanup 2004-11-13 17:59:21 +00:00
Pierangelo Masarati
d7bdb8cb24 disable referral rewrite in default suffix massage 2004-11-13 12:15:40 +00:00
Pierangelo Masarati
1b21fba38c <CONTROL> deserves a separate section 2004-11-12 12:45:10 +00:00
Ralf Haferkamp
5704a2ef6e CRL checking options for ldap.conf and slapd.conf 2004-10-28 18:50:38 +00:00
Pierangelo Masarati
a9f2f12b93 clearly indicate what the default rules are 2004-10-28 17:53:46 +00:00
Jong Hyuk Choi
c7aa0bca3f syncrepl retry feature 2004-10-27 19:43:45 +00:00
Pierangelo Masarati
df745fc44f clarify that the names of the configure statements are case-insensitive, despite style considerations lead to use uppercase for some and lowercase for others 2004-10-27 11:26:27 +00:00
Kurt Zeilenga
3819290f69 NEW_LOGGING 2004-10-19 03:18:03 +00:00
Kurt Zeilenga
54f6cf0b2c Clarify which kinds of regexs are used. 2004-10-17 19:32:13 +00:00
Howard Chu
1df6d76269 Add ppolicy_hash_cleartext config keyword, hash Adds as well as Modifies. 
Changed check_pw_quality callback to pass entry's Attributes in final arg.
 2004-10-07 04:07:17 +00:00
Pierangelo Masarati
c4123bb613 document submatches provided by non-regex <what> clauses 2004-10-06 23:19:53 +00:00
Pierangelo Masarati
796dce8657 add (and honor) a (configurable) baseObject to workaround ldap_entries view for RDBMSes that do not support UNION in views 2004-10-02 17:33:32 +00:00
Howard Chu
36b0611404 ITS#2588, ITS#2661 docs. 2004-09-28 09:02:31 +00:00
Kurt Zeilenga
424d673a6c Update SSF comments 2004-09-13 20:43:33 +00:00
Pierangelo Masarati
04734610de fix file:/// URI 2004-09-11 15:59:34 +00:00
Kurt Zeilenga
441ff00a06 Add default note 2004-09-10 22:55:59 +00:00
Kurt Zeilenga
3869e3b84d Add localSSF slapd.conf(5) directive to set SSF associated 
with ldapi:// sessions.
 2004-09-10 22:35:24 +00:00
Kurt Zeilenga
5f5d50aeb0 Add TLS cipher suite directive to ldap.conf(5) 2004-09-05 07:21:20 +00:00
Pierangelo Masarati
450b579971 cleanup docs 2004-08-24 09:27:45 +00:00
Pierangelo Masarati
f64de49b9f update and cleanup 2004-08-21 12:28:54 +00:00
Pierangelo Masarati
905c8d580b move proxycache configuration directives into slapo-pcache; add references in related man pages 2004-08-21 12:20:01 +00:00
Pierangelo Masarati
d606635ec1 cleanup 2004-08-21 09:47:50 +00:00
Pierangelo Masarati
7b4a51cc28 further improve loglevel selection 2004-07-29 12:39:51 +00:00
Pierangelo Masarati
f33b51832a allow to use names to set loglevel 2004-07-29 00:10:03 +00:00
Pierangelo Masarati
9f6f5491fe slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay 2004-07-25 23:16:40 +00:00
Howard Chu
6a00e8b326 More info about linearindex and slapadd 2004-07-22 22:52:47 +00:00
Howard Chu
dd7003cf9f Added linearindex option for slapindex. Improves performance when database 
size exceeds dbcache size by minimizing cache thrashing.
 2004-07-22 22:32:37 +00:00
Howard Chu
f9f22058e7 ITS#3178 add "fasttool" option to disable transaction logging in tool mode 2004-07-22 22:14:35 +00:00
Pierangelo Masarati
52a49e0840 improve manual and make naming contexts uniform; NOTE: backwards compatibility not preserved 2004-07-20 00:46:20 +00:00
Pierangelo Masarati
fa694f0c3c document rwm overlay 2004-07-18 21:45:20 +00:00
Pierangelo Masarati
23c5f4c09f small improvements 2004-07-06 22:37:22 +00:00
Pierangelo Masarati
f64283ccae beautify and clarify <what> clause usage and defaults 2004-06-28 14:33:35 +00:00
Pierangelo Masarati
44e8ffd4fe clarify the use of regex and expand in by dn clauses 2004-06-28 10:22:48 +00:00
Pierangelo Masarati
d8eff4d1b5 use hard limit instead of returning adminLimitExceeded when requested limit exceeds hard; improve (and document) syntax; modify test025 accordingly 2004-06-22 09:43:41 +00:00
Kurt Zeilenga
5238488e60 Replaced MSAD specific stuff 2004-06-22 04:33:18 +00:00
Pierangelo Masarati
ca33242924 manual cleanup 2004-06-20 22:39:43 +00:00
Pierangelo Masarati
b1a1f0b8b6 cleanup limits 2004-06-19 10:01:47 +00:00
Kurt Zeilenga
c521e21946 Okay, fully revert commit before last. 2004-06-17 23:23:15 +00:00
Kurt Zeilenga
28668bfa62 Partial revert of last change. shm_key documentation needed. 2004-06-17 23:01:22 +00:00
Kurt Zeilenga
08c405257b Undocument backend options which overlap DB_CONFIG options. 
DB_CONFIG should generally be used instead.
 2004-06-17 22:51:27 +00:00
Pierangelo Masarati
05b60e6b1e s/to/by/ 2004-06-17 22:51:03 +00:00
Pierangelo Masarati
f78611bf5e improve documentation of how to specify multiple uris 2004-06-16 15:18:34 +00:00
Pierangelo Masarati
a0dfadceef mention new tools 2004-06-15 22:40:53 +00:00
Pierangelo Masarati
b1718c4f69 mention new tools 2004-06-15 22:39:08 +00:00
Pierangelo Masarati
71142cc7e5 mention new tools 2004-06-15 22:38:31 +00:00
Pierangelo Masarati
a527174bcb fix indent (any man expert to check it?) 2004-06-15 20:57:28 +00:00
Pierangelo Masarati
a18e199e0d more on identity assertion 2004-05-22 17:26:02 +00:00
Howard Chu
725ca08f8d Add note about syncrepl Persist retries 2004-05-21 23:58:26 +00:00
Pierangelo Masarati
46b27edc3b more on idassert 2004-05-15 10:10:09 +00:00
Pierangelo Masarati
8b954144d6 reflect Kurt's comments on ID assertion 2004-05-14 10:01:22 +00:00
Pierangelo Masarati
f035e1f18f document proxyauthz{dn|pw} and idassert-* 2004-05-13 23:35:39 +00:00
Pierangelo Masarati
03c64541d4 add granular op restriction 2004-05-01 17:53:37 +00:00
Pierangelo Masarati
ff0df4b6aa add group authz 2004-04-25 23:59:06 +00:00
Pierangelo Masarati
9c10415919 - clarify when $$ must be used in regex; 
- clarify access privileges of rootdn;
- clarify that auth access is always required when performing authz-regexp,
  not only for proxyAuthz
 2004-04-19 01:19:41 +00:00
Pierangelo Masarati
05a84fb025 typo 2004-04-19 00:08:32 +00:00
Pierangelo Masarati
80c34cf27e typos 2004-04-18 21:36:32 +00:00
Howard Chu
8da6bf194a Added referential integrity and attribute uniqueness overlays 2004-04-17 08:17:43 +00:00
Kurt Zeilenga
349c7834ce Rename config options and attribute names (for 2.3). 2004-04-16 02:29:55 +00:00
Pierangelo Masarati
6624f68725 fix braindead config option (mostly harmless) 2004-04-15 20:27:43 +00:00
Pierangelo Masarati
8ea2f6e157 further clarify size limits 2004-04-15 01:16:53 +00:00
Pierangelo Masarati
6b2347be6a document lastmod overlay 2004-04-14 23:35:17 +00:00
Pierangelo Masarati
8bf68bc796 clarify the use of the fail_if_no_mapping switch and minor cleanup 2004-04-14 13:10:00 +00:00
Pierangelo Masarati
25c672a844 document search disable feature (spin-off of limit on unchecked entries) 2004-04-09 17:57:48 +00:00
Pierangelo Masarati
2e13fbeea1 completion of limits w/ paged results control 2004-04-09 15:54:46 +00:00
Hallvard Furuseth
6b45e32da3 Add NEW_LOGGING note for the commented-out "debug" and "logfile" options. 2004-04-09 05:27:04 +00:00
Pierangelo Masarati
85b078a3cb clarify what rewrite rules suffixmassage corresponds to 2004-04-07 20:55:32 +00:00
Kurt Zeilenga
bd7cd42669 clarify updatedn (again) 2004-04-07 03:32:55 +00:00
Kurt Zeilenga
bd765b849d ITS#2768: configuring slurpd's interval between replog checks 
based upon a patch submitted by Jason Townsend (Apple).
 2004-03-23 01:12:11 +00:00
Howard Chu
d4d5e253d9 Fix header 2004-03-19 20:23:26 +00:00
Howard Chu
057a385346 Rename slapd-ppolicy.5 to slapo-ppolicy.5 2004-03-19 20:18:46 +00:00
Pierangelo Masarati
9e159e2382 remove outdated comment 2004-03-18 21:48:21 +00:00
Pierangelo Masarati
fa3baaeae9 overlays reworking 2004-03-18 18:59:46 +00:00
Howard Chu
d1292c1b14 Added ppolicy_use_lockout keyword; Default behavior is not to issue the 
PP_accountLocked error for locked accounts. (Gives too much information
to attackers.)
 2004-03-18 10:35:54 +00:00
Pierangelo Masarati
cd105fab4e man page 2004-03-18 00:36:50 +00:00
Howard Chu
e5ec72c2b9 Add note about overlay directive 2004-03-16 22:25:08 +00:00
Howard Chu
9e39c5e0b6 Docs for ppolicy overlay 2004-03-16 22:00:30 +00:00
Pierangelo Masarati
65b49dd312 add "searchFilterAttrDN" rewrite context, and allow filterstring rewrite 2004-03-10 21:11:14 +00:00
Pierangelo Masarati
006745430e allow "expand" style in peername, sockname, sockurl as well; more sanity checks 2004-03-09 19:44:14 +00:00
Pierangelo Masarati
042869366d use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks 2004-03-09 16:33:05 +00:00
Pierangelo Masarati
4645eeb5ec cleanup DN style in limits 2004-03-08 13:13:30 +00:00
Pierangelo Masarati
5716b7f1b2 document saslAuthzTo/saslAuthzFrom new syntax; add onelevel style to DN type 2004-03-06 11:00:49 +00:00
Howard Chu
5f9a87c041 password-hash now takes a list of mechanisms 2004-03-02 22:17:20 +00:00
Kurt Zeilenga
b927f86e3f Clarify updatedn 2004-02-25 17:37:59 +00:00
Pierangelo Masarati
4e57108991 allow search limits based on groups (ITS#2967) 2004-02-18 16:40:36 +00:00
Pierangelo Masarati
cf5e2496f7 map type/name were swapped 2004-02-05 18:17:27 +00:00
Pierangelo Masarati
f5a9f62578 clarify that's useless to give write privileges to the roodn of a database... 2004-01-14 23:11:48 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Pierangelo Masarati
3994dc645a allow to set max passes per rule 2003-12-29 18:02:49 +00:00
Pierangelo Masarati
9e86d9ffe2 clarify field description in rewriteRule statement 2003-12-29 17:12:29 +00:00
Pierangelo Masarati
c860ba6a23 fix, clarify and document previous commit 2003-12-29 17:06:43 +00:00
Pierangelo Masarati
3ddfddb1a7 typo 2003-12-29 15:22:10 +00:00
Jong Hyuk Choi
cd16a93244 update syncrepl and session log info 2003-12-21 16:32:00 +00:00
Pierangelo Masarati
8e89944abc for consistency, always allow 'onelevel' as an alias for 'one' in dnstyle 2003-12-20 15:29:05 +00:00
Kurt Zeilenga
aabcce3e58 Document +0 2003-12-19 05:06:51 +00:00
Pierangelo Masarati
113727ba53 allow 'all' vs. 'any' sasl-authz-policy 2003-12-18 18:28:43 +00:00
Pierangelo Masarati
ca52621c1b some notes on access required by proxyAuthz control; 
note that other controls may need different access
privileges via, e.g., backend_attribute() (syncrepl?)
 2003-12-18 00:27:01 +00:00
Kurt Zeilenga
c4c6a38a0b Dont mention bare oc in list. 2003-12-17 17:48:56 +00:00
Kurt Zeilenga
30a1ff596d s/+/@/ in OC attr lists 2003-12-17 17:36:41 +00:00
Pierangelo Masarati
947f41832e more clarifications on dnstyle usage 2003-12-16 11:20:59 +00:00
Pierangelo Masarati
ee34f3fb64 add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication 2003-12-16 00:49:10 +00:00
Kurt Zeilenga
75b9f8acdc Make a few OPERATIONAL REQUIREMENT clarifications 
Clean up formating
 2003-12-15 18:41:23 +00:00
Pierangelo Masarati
7444352358 describe detailed access levels required for each operation 2003-12-15 17:55:55 +00:00
Kurt Zeilenga
eec0f83fd7 Fix typos 2003-12-14 21:00:52 +00:00
Pierangelo Masarati
529a03df53 use dedicated admin identity to proxyAuthz 2003-12-13 10:57:42 +00:00
Howard Chu
2f06437348 Updated for proxycache overlay. Probably belongs on its own now... 2003-12-07 04:30:39 +00:00
Kurt Zeilenga
17939ccdca Clarify that the updatedn should not be same as the rootdn. 2003-12-02 21:18:19 +00:00
Pierangelo Masarati
f0ea4161ba add administrative bind and proxyAuthz control to enable bound operations in distributed directories (need to manually #define LDAP_BACK_PROXY_AUTHZ and patches from ITS#2851 and ITS#2852) 2003-12-01 08:29:06 +00:00
Jong Hyuk Choi
4ae382fd79 misc updates 
- syncrepl : id -> rid
 - man page update
 2003-11-26 21:37:44 +00:00
Jong Hyuk Choi
1fdda703e6 Support multiple sync replication at the consumer : 
1) simultaneous operation of multiple active sync replication threads
2) cookie management for individual sync replication thread
   (include rid=%3d to the slapd cookie command line option (-c))
 2003-11-26 19:49:47 +00:00
Kurt Zeilenga
e3a4c4ec9c Notice/Acknowledge updates 2003-11-26 02:58:56 +00:00
Jong Hyuk Choi
c204f4061f keeps syncrepl manpage sections current 2003-11-24 23:16:45 +00:00