Howard Chu
451a9623f3
ITS#8576 Revert "LDAP_TAILQ fix"
...
This reverts commit 8ee8248328 .
2017-02-01 11:58:54 +00:00
Quanah Gibson-Mount
1df85d3427
Happy New Year!
2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
6c4d6c880b
Happy New Year!
2016-01-29 13:32:05 -06:00
Howard Chu
e5c778fa43
ITS#8173 fix SEGV after failed retry
2015-07-16 03:29:06 +01:00
Howard Chu
66ab6bafa8
ITS#8142 cleanup prev commit
...
Only drop connection if user originally bound to this backend,
and rebind-as-user was set. Sessions from other backends would
use idassert-bind so loss of creds doesn't affect them.
2015-05-21 01:20:16 +01:00
Howard Chu
117edd79ce
ITS#8142 drop client connection on remote failure
...
also cleanup of return-code handling
2015-05-19 15:37:24 +01:00
Quanah Gibson-Mount
1705fa7e55
Happy New Year
2015-02-11 15:36:57 -06:00
Howard Chu
bc3dbcbde9
Minor cleanup (coverity)
2015-01-14 13:27:45 +00:00
Kurt Zeilenga
5c878c1bf2
Happy new year (belated)
2014-01-25 05:21:25 -08:00
Quanah Gibson-Mount
1a712bf18e
Enable features that were hidden behind LDAP_DEVEL
2013-09-19 09:50:52 -07:00
Quanah Gibson-Mount
dd7b1c39b1
Clean up whitespace in previous commit
2013-01-24 11:31:41 -08:00
Ted C. Cheng
d836def019
added tcp keepalive support to back-ldap
2013-01-24 10:53:56 -08:00
Kurt Zeilenga
0fd1bf30b8
Happy New Year
2013-01-02 10:22:57 -08:00
Howard Chu
c1800082cc
ITS#7403, #6296 fix AUTHZ_BACKEND handling
...
c_authz_cookie should only be set on explicit Bind requests.
2012-10-03 09:12:14 -07:00
Howard Chu
d7c964fedb
ITS#7403 fix idassert non-override mode
2012-09-26 09:29:57 -07:00
Ondrej Kuznik
7c40b6e904
ITS#7182 Keep connection IDs for monitoring purposes.
2012-03-29 07:00:56 -07:00
Ondrej Kuznik
be9585d0ed
ITS#7182 Maintain the operation counts.
...
Currently ldap_back_default_rebind cannot access the ldapinfo structure.
Being a configurable callback, not letting it monitor when a change
might be disruptive feels safer.
2012-03-27 04:28:37 -07:00
Kurt Zeilenga
2bbf9804b9
Happy New Year!
2012-01-01 07:10:53 -08:00
Howard Chu
111ecbdbed
ITS#6851 replace assert with error msg
2011-11-17 17:35:10 -08:00
Howard Chu
ceefe132a8
ITS#6817 fix RE24 build breakage
...
Should SLAP_AUTH_DN be #defined in release now?
2011-06-21 17:05:53 -07:00
Pierangelo Masarati
821d2616b5
fix commit 1.268, related to ITS#6817
2011-03-05 10:30:21 +00:00
Pierangelo Masarati
5d9baf3e85
use (noncritical) whoami extop during SASL bind (ITS#6817)
2011-02-03 23:35:56 +00:00
Pierangelo Masarati
ddbcb565d4
use (noncritical) authzid control during SASL bind (ITS#6817)
2011-02-03 23:20:15 +00:00
Howard Chu
e72c093a55
ITS#6711 minimal tweaks for aclbind/idassertbind for privileged connection
...
in dobind_int().
2011-02-02 20:56:58 +00:00
Howard Chu
d626977848
Cleanup priv/idassert choice: check for configured bind method, not authcDN
2011-02-02 20:32:48 +00:00
Howard Chu
aec5adac17
ITS#6711 use idassert TLS conf for priv connection if aclbind not set
2011-02-02 20:06:28 +00:00
Howard Chu
d3b09ef2a9
ITS#5421 drop ldap-int.h
2011-01-19 21:27:16 +00:00
Kurt Zeilenga
966cef8c9a
Happy New Year
2011-01-05 00:42:37 +00:00
Pierangelo Masarati
aa63f21e4f
cleanup previous commit
2010-09-09 00:57:04 +00:00
Pierangelo Masarati
65b042b4fb
if required by the bindconf configuration, force TLS (partially addresses ITS#6642)
2010-09-09 00:12:01 +00:00
Pierangelo Masarati
1242443553
don't risk leaving around client library error codes
2010-06-22 23:10:48 +00:00
Pierangelo Masarati
3a28608f0d
allow successful binds to return control responses (ITS#6530)
2010-04-22 18:18:15 +00:00
Pierangelo Masarati
bbe7272c7f
allow strict adherence to RFC4370 wrt/ control criticality (ITS#6523)
2010-04-14 21:37:03 +00:00
Kurt Zeilenga
3dadeb3efe
happy belated New Year
2010-04-13 22:17:29 +00:00
Pierangelo Masarati
f75825881a
honor X-ORDERED in olcDbIdAssertAuthzFrom; add olcDbIdAssertPassthru (ITS#6456); note: breaks binary compatibility with module back-meta.la
2010-04-09 22:47:55 +00:00
Pierangelo Masarati
1815ad4cb6
register authz cookie (ITS#6296)
2009-09-17 21:16:04 +00:00
Howard Chu
fffb1fab4e
Include "lutil.h" - fixes warnings in RE24
2009-09-01 00:35:22 +00:00
Hallvard Furuseth
c0e0a64799
Silence warning (missing braces ininitializer)
2009-08-19 18:58:28 +00:00
Pierangelo Masarati
69878f43c8
refactor connection handling
2009-08-19 16:45:15 +00:00
Pierangelo Masarati
bdec7702d7
better logging of privileged connections (more to come; might be unstable for a bit)
2009-08-19 15:00:59 +00:00
Pierangelo Masarati
c39815ee28
don't deadlock when a TLS uri is not responding (ITS#6167)
2009-06-11 06:51:01 +00:00
Kurt Zeilenga
4af9eb9715
Update copyright notices
2009-01-22 00:40:04 +00:00
Pierangelo Masarati
fb9128cdc8
check validity of idassert-bind line (ITS#5863)
2008-12-20 22:34:00 +00:00
Pierangelo Masarati
5a50733e39
don't send error when going to retry (alternative fix to ITS#5854)
2008-12-12 09:29:51 +00:00
Hallvard Furuseth
05bbe7833b
Fix typo in assertion: j1 + j1 -> j1 + j2. (Not a crasher, just wrong test.)
...
Warning cleanup: signed meets unsigned.
2008-10-17 18:02:09 +00:00
Pierangelo Masarati
14c425b922
s/leave/func_leave/ (ITS#5411)
2008-03-15 18:16:21 +00:00
Pierangelo Masarati
ec8466ec83
invalidate connection handler when ldap_sasl_interactive_bind_s() for internal error (ITS#5404); fix response tag
2008-03-08 15:41:17 +00:00
Kurt Zeilenga
c890c96d13
Happy New Year (belated)
2008-01-08 00:19:56 +00:00
Pierangelo Masarati
c2bbd6d5e7
fix typing warnings
2007-10-05 10:06:20 +00:00
Howard Chu
c428a16332
coverity - init i
2007-09-26 20:21:53 +00:00