Commit graph

3501 commits

Author SHA1 Message Date
Pierangelo Masarati
b1688462ce check for update dn 2001-11-16 11:47:15 +00:00
Howard Chu
a3ded4782e Changed AttributeType.sat_cname from char * to struct berval.
Forced SLAP_USE_AD code, removed ifdefs of old code. filterindex.c is
still badly broken when BDB_FILTER_INDICES is defined, working on that...
2001-11-16 08:18:58 +00:00
Howard Chu
0bfaa8b4ae Changed AttributeType.sat_cname from char * to struct berval.
(will fix up back-bdb next.)
2001-11-16 07:45:37 +00:00
Howard Chu
cc4a51f23c Changed global ad_mutex into per-attributeType mutex. Added
ad_find_lang() to search an AttributeType for a given language variant.
(Will be used in back-bdb/back-ldbm index code...)
2001-11-16 07:39:14 +00:00
Pierangelo Masarati
0ebba25d99 hack to make '' base work; please check side-effects 2001-11-14 17:27:24 +00:00
Pierangelo Masarati
098c4a15d4 fix a couple of misformats 2001-11-14 16:17:30 +00:00
Pierangelo Masarati
a8437c2038 non-root add/delete of entries rooted at '' checks children write permission (forward port from back-ldbm) 2001-11-14 16:09:33 +00:00
Pierangelo Masarati
8c2ed9c809 non-root add/delete of entries rooted at '' checks children write permission 2001-11-14 16:08:59 +00:00
Kurt Zeilenga
90a60edef9 Remove slap_get_time optimization.
timelimit must be checked on first entry.
2001-11-13 20:31:00 +00:00
Kurt Zeilenga
525cd6f783 Port ITS#1430 changes from ldbm 2001-11-13 19:45:47 +00:00
Kurt Zeilenga
0f10bed011 rm currenttime_mutex.
trival other cleanup.
2001-11-13 18:16:07 +00:00
Mark Adamson
8c16d30087 optimize number of calls to slap_get_time() 2001-11-13 01:38:30 +00:00
Howard Chu
52d3f7b3da Fix - put group cache search after backend has been selected 2001-11-12 21:39:55 +00:00
Howard Chu
0b037b5566 Added bdb_attribute and bdb_group ACL support routines 2001-11-12 20:52:25 +00:00
Howard Chu
efb6c24f6b Fix missing case 2001-11-12 20:28:23 +00:00
Howard Chu
48623df1a8 Added backend_group result caching. 2001-11-12 19:37:48 +00:00
Howard Chu
a0a24d73dc Added backend_group result caching. 2001-11-12 19:25:41 +00:00
Pierangelo Masarati
6b1104ab87 Fixes first part of ITS#1430 2001-11-12 17:32:52 +00:00
Pierangelo Masarati
8c4c2ce789 Fixes second part of ITS#1430 2001-11-12 17:27:01 +00:00
Pierangelo Masarati
afd0037eda Fixes ITS#1433 2001-11-12 17:12:43 +00:00
Pierangelo Masarati
b4e7f0873a trims space after comma in dn.regex acls (prelude to normalization) 2001-11-12 11:29:40 +00:00
Mark Adamson
ddd3a4b926 already have the strlen of the attrname in the berval->bv_len 2001-11-12 03:15:40 +00:00
Stig Venaas
d717a7fb9f Fixes memory leaks in do_compare() 2001-11-10 23:34:03 +00:00
Mark Adamson
f05420c8d8 use berval's instead of strings with UTF8normalize() 2001-11-09 19:01:23 +00:00
Kurt Zeilenga
8d74b517cd Remove lint 2001-11-07 01:24:32 +00:00
Howard Chu
5f8058f957 Added schema_destroy() et al to free schema structures on shutdown 2001-11-07 01:03:49 +00:00
Stig Venaas
76243a2797 Fixed more memory leaks 2001-11-06 22:36:28 +00:00
Howard Chu
33ace5610c Added ldap_pvt_tls_destroy() to cleanup TLS library on shutdown 2001-11-06 20:52:59 +00:00
Mark Adamson
67886fc4a1 bervals alloc'd by UTF8SubstringsassertionNormalize() must be ber_bvfree'd 2001-11-06 19:07:15 +00:00
Mark Adamson
e0ff8d6782 fix various memory leaks 2001-11-05 23:14:42 +00:00
Kurt Zeilenga
f8611a1296 Don't use indices to support not [!] filters.
Use pres indices to support LE/GE [<=,>=] filters.
2001-11-05 17:25:44 +00:00
Howard Chu
e47e31ad0a Fix for dbnosync - DB_TXN_NOSYNC is not a valid flag for dbenv_open,
must be set later using dbenv_set_flags.
2001-11-05 07:01:12 +00:00
Howard Chu
09cddf9188 Ported referral patches from back-ldbm. I believe search.c still needs
the patch from ITS#1289 to be ported here.
2001-11-05 06:24:11 +00:00
Kurt Zeilenga
b312488614 telex number should allow $ 2001-11-03 22:03:20 +00:00
Kurt Zeilenga
d03acd7209 Fix uninitialized pointer bug. 2001-11-03 22:02:57 +00:00
Pierangelo Masarati
3a16335374 wrong length in statement selection (not critical); some cleanup (sizeof()-1 instead of strlen on constant strings) 2001-11-01 18:57:21 +00:00
Pierangelo Masarati
08ff231888 fixes assertion fault when the <to> clauses's argument does not have a = inside 2001-10-29 08:14:12 +00:00
Kurt Zeilenga
82fad7d0c8 First stable an implementing latest namedref specification.
Includes rewriting of URLs where the DN of the referral object
and the DN of the ref attribute attribute are not the same.
Also, always returns explicit DN and scope.
Currently, back-ldbm only.  Needs to be ported to back-bdb.
2001-10-26 02:05:14 +00:00
Pierangelo Masarati
271c323281 Fixes ITS#1385 2001-10-25 15:15:34 +00:00
Kurt Zeilenga
79f76c763f Root DSE and subschema subentry compare.
Developed by Steve Omrani/IBM
Copyright IBM Corp. 2001
Use of this source code is subject to the terms of The OpenLDAP
Public License Version 2.7, 7 September 2001.  No trademarks of the
IBM Corporation are to be used to identify, endorse or promote any
products derived from this code without the prior written consent
of IBM.
2001-10-25 06:18:11 +00:00
Kurt Zeilenga
a6acc0ff8c Use allids instead of candidiate negation for !. (ITS#1405)
Use presence indices in support of >= and <=.
(Note presence indices could be used to support = and substr in
like fashion where eq and substr indices are not maintained, but
I'll save that for another day.)
2001-10-24 21:26:32 +00:00
Kurt Zeilenga
23bf2fb086 Fix error messages 2001-10-24 05:27:49 +00:00
Kurt Zeilenga
fcd1ce0e28 Use defined Root DSE attributes.
Developed by Julius Enarusai/IBM
Copyright IBM Corp. 2001

Use of this source code is subject to the terms of The OpenLDAP
Public License Version 2.7, 7 September 2001.  No trademarks of the
IBM Corporation are to be used to identify, endorse or promote any
products derived from this code without the prior written consent
of IBM.
2001-10-23 23:29:41 +00:00
Kurt Zeilenga
d9fb94f1a8 Updated busy loop protection 2001-10-23 22:17:41 +00:00
Julio Sánchez Fernández
aee598dba7 Remove bogus refusal to index ;binary attributes. Notice that I left
in a check.  This way you have to say:

	index userCertificate eq

If we remove it, we could say:

	index userCertificate;binary eq

I have not tried the latter.
2001-10-23 13:42:37 +00:00
Julio Sánchez Fernández
358950e8ad And this change implements indexing for certificateExactMatch. Now
you can search efficiently the directory for a certificate.

Notice that we index certificates just as serial integers.  A full
index should combine the issuer DN too, but I think in most scenarios
that would be extremely redundant and of little benefit.  We can add
an option later to do full indexing.
2001-10-23 13:39:07 +00:00
Julio Sánchez Fernández
9752cea92c No code change, added a comment warning of a possible future difficulty.
Apparently, we refuse to index ;binary attributes.  That is mostly
bogus.  Whether it is indexable or not depends on whether we know how
to or not, nothing more.  I.e., the existance of indexer and filter
functions for the matching rules that are relevant to the attribute
type.
2001-10-23 13:35:54 +00:00
Julio Sánchez Fernández
bf5ea315b6 Compares get values in the matching rule syntax (see RFC2251, 4.1.7),
so we need to tell value_find about this.
2001-10-23 09:48:18 +00:00
Julio Sánchez Fernández
cb98a604fb Replacement for value_find and compatibility macro.
Now we will be able to fix compares.
2001-10-23 09:43:20 +00:00
Julio Sánchez Fernández
de353ebeda Normalization and more error checking. 2001-10-23 09:05:04 +00:00
Julio Sánchez Fernández
dd34307cf7 When checking if an entry matches some filter, we have the list of
values as stored in the entry on the one hand and an assertion value
that is not necessarily of the same syntax.  So tell value_match this
is the case by setting SLAP_MR_VALUE_IS_IN_MR_SYNTAX in flags.
2001-10-22 20:07:06 +00:00
Julio Sánchez Fernández
5f6d5494dd Extend value_match to extract an asserted value from a full value
if needed.  This is controlled by SLAP_MR_VALUE_IS_IN_MR_SYNTAX,
a new flag that should be set when evaluating filters such as in
searches and compares and unset otherwise (such as in modify).

Now, some callers of value_match, notably value_find, don't know
whether to set it or not.  We'll see to that.
2001-10-22 20:03:30 +00:00
Julio Sánchez Fernández
5dbf4bddae Add a flag to help the value_* functions know whether they are seeing
a full value (in attribute type syntax) or a value in the syntax of
the matching rule (as happens in filters).
2001-10-22 19:57:23 +00:00
Julio Sánchez Fernández
be89c094f6 Do something with the error text. 2001-10-22 19:55:21 +00:00
Howard Chu
0185b79559 Don't free entries since the tools realloc the buffers. 2001-10-22 15:58:44 +00:00
Howard Chu
11d884b8cf Fix some uninitialized variables 2001-10-22 15:57:58 +00:00
Howard Chu
c108e66222 Fix entry_encode; must save the given e->e_dn without modification. 2001-10-22 15:01:35 +00:00
Howard Chu
c981026a6c Missed a test in AttributeDescription commit 2001-10-22 14:55:42 +00:00
Howard Chu
c05de965b5 Moved binary entry_encode/entry_decode into main code. Removed lber version. 2001-10-22 14:07:42 +00:00
Howard Chu
0e16f6acf9 Moved AttributeDescription caching into main code:
Changed AttributeDescription.{ad_cname,ad_lang} to struct berval everywhere
   Deleted ad_free() everywhere
   Added ad_mutex to init.c

The AttributeDescriptions are in a linked list hanging off of the
corresponding AttributeType.
2001-10-22 13:23:05 +00:00
Julio Sánchez Fernández
7581e304c0 It now sort of works, but needs some normalization work and proper
error reporting to client and syslog. And indexing, of course.

Now, the problem is that matching rules get called from different
places that are inconsistent in what an assertedValue is.  When doing
a modify, a full certificate value is passed (to verify it isn't
already there).  When doing a search or compare, the passed value is
in the syntax of the matching rule.

Consistency would require that the caller extracts an asserted value
from the full value before calling smr_match.  It can do this by
calling smr_convert (it was unused, was it meant to be used for
this?).

Unfortunately, the caller is typically value_find, value_match, etc.
that have themselves little knowledge of what they are dealing with,
so their interface needs to be extended, new flag values or new
arguments, so that they know if they have a value in attribute type
syntax or in matching rule syntax.
2001-10-22 06:54:30 +00:00
Kurt Zeilenga
17264d1ad4 Experiment with busy loop protection... 2001-10-21 00:48:14 +00:00
Julio Sánchez Fernández
7e1c4f272d Use the ldap syntax oid assigned by David Chadwick (no yet published). 2001-10-20 17:31:52 +00:00
Pierangelo Masarati
99e7ffe034 listen on any device 2001-10-20 17:19:56 +00:00
Julio Sánchez Fernández
4d0ab0215b First cut at certificateExactMatch, completely untested and without
indexing.
2001-10-20 10:15:09 +00:00
Howard Chu
ce6243f009 Patches for modify/modrdn to work with BDB_USE_BINARY_RW. 2001-10-19 20:28:48 +00:00
Howard Chu
98d6a4f2bf Added new bdb_encode/bdb_decode functions, must #define BDB_USE_BINARY_RW
to activate. The bdb_decode works in-place on the db data. Add/Search are
OK, I think Modify needs to be tweaked. Don't use this yet unless you want
to help finish it.
2001-10-19 11:53:15 +00:00
Kurt Zeilenga
d6730e5f50 BDB updates... haven't had a chance to work on this for a while,
committin what I have so that someone else might be able to work it.
2001-10-13 16:55:54 +00:00
Mark Adamson
290137a54f Serialize access to idl insert/delete key routines (ITS 1359) 2001-10-11 18:12:53 +00:00
Kurt Zeilenga
01bdb4650e Check for no OID. 2001-10-10 18:15:30 +00:00
Kurt Zeilenga
b6a3dad8f0 Delete attribute indices 2001-10-09 19:41:48 +00:00
Kurt Zeilenga
cdc7c44d80 Use non-critical ManageDsaIT control. 2001-10-09 18:53:22 +00:00
Pierangelo Masarati
069155f667 fixes ITS #1379; the replication test has been improved by adding modrdn entries 2001-10-09 18:12:22 +00:00
Kurt Zeilenga
fdc0dd7d6a Fix some NEW_LOGGING errors 2001-10-05 21:49:04 +00:00
Kurt Zeilenga
78adfde54e BDB_INDEX code does no harm (but no good yet, not used by filters yet). 2001-10-05 20:12:16 +00:00
Kurt Zeilenga
06a50e37b1 Don't assume e_id is a long. 2001-10-05 18:38:25 +00:00
Kurt Zeilenga
9f1fc48659 Another round. BDB_INDEX almost ready for functional testing. 2001-10-05 17:00:21 +00:00
Kurt Zeilenga
83d50bd696 Minor updates 2001-10-05 02:01:37 +00:00
Kurt Zeilenga
aedf4b42fc Return unwillingToPerform instead of noSuchObject for subschema subentry 2001-10-05 01:55:14 +00:00
Kurt Zeilenga
96e0038832 Initial idl fetch code, undef BDB_INDEX for now, other cleanup 2001-10-05 01:19:58 +00:00
Kurt Zeilenga
5160da05e5 Add some initial BDB_INDEX code... needs much work. 2001-10-04 22:29:34 +00:00
Kurt Zeilenga
3120d37951 More changes to let BDB build without LDBM. 2001-10-04 06:34:03 +00:00
Kurt Zeilenga
9b98f46a5e Add prelim index code from LDBM, needs work... 2001-10-04 02:55:09 +00:00
Kurt Zeilenga
433eb73ef8 Add BDB_INDEX error handling 2001-10-03 23:49:38 +00:00
Kurt Zeilenga
3ad55b225e Add error handling to BDB_INDEX code 2001-10-03 23:39:29 +00:00
Kurt Zeilenga
191853eb51 An incremental step. 2001-10-03 23:28:20 +00:00
Kurt Zeilenga
0135c8dbb1 Add BDB index config code 2001-10-03 21:11:52 +00:00
Kurt Zeilenga
292b6c8757 Replace #if 0 with #if MACRO 2001-10-03 20:34:00 +00:00
Kurt Zeilenga
86a680a4ec Enable management of attribute indices. Not yet used by test_filter. 2001-10-03 20:20:29 +00:00
Kurt Zeilenga
f704c35caf subschemaSubentry attributes could be leaked under some conditions,
plug them.
2001-10-03 18:19:07 +00:00
Pierangelo Masarati
35c38e271d use slap_str2undef_ad for unknown attributes 2001-10-03 18:17:08 +00:00
Pierangelo Masarati
8a3768276a candidate check using new macro from Kurt 2001-10-02 19:15:05 +00:00
Kurt Zeilenga
773b1907d2 Add BDB_IDL_N() macro for ando 2001-10-02 19:04:12 +00:00
Pierangelo Masarati
becb7ff0ce forward porting of time/size limits from back-ldbm (pending the definition of the most appropriate way to determine the number of candidates) 2001-10-02 12:00:01 +00:00
Pierangelo Masarati
4ac9b37db7 forward porting of empty parent dn checks from back-ldbm 2001-10-02 10:44:14 +00:00
Pierangelo Masarati
5544720505 forward porting of composite rdn handling from back-ldbm 2001-10-02 10:39:04 +00:00
Pierangelo Masarati
6e4a050657 fix memory leak in case of ACL failure (no write permission to rdn attributes) 2001-10-02 10:36:35 +00:00
Howard Chu
693a81e1db More CLDAP tweaks, to differentiate between real LDAPv2 CLDAP and "other"
LDAP/UDP messages. Slapd marks received CLDAP messages as LDAP_VERSION2.
The client library can generate CLDAP queries if -Protocol 2 is chosen,
otherwise not. LDAPv2 CLDAP cannot query the slapd rootDSE, gets no reply.
2001-10-02 01:02:23 +00:00
Pierangelo Masarati
1c010c59a1 fix candidate selection based on scope 2001-10-01 22:12:23 +00:00
Pierangelo Masarati
af8488c37d fix result bug; add hooks for error selection based on priority (now the last one is selected) 2001-10-01 22:11:37 +00:00
Pierangelo Masarati
ccef53677f fix various result returning bugs, mostly related to candidate selction that results in invalid candidates (bug detected by Markus Storm <Markus.Storm@mediaWays.net>) 2001-10-01 16:16:51 +00:00
Kurt Zeilenga
44146a1cb7 Rework DB_THREAD support. CDB support needs reimplementation. 2001-10-01 06:08:46 +00:00
Stig Venaas
3c28bb413d Removed a superfluous line left after the ai_addr == NULL fix 2001-09-29 09:40:47 +00:00
Kurt Zeilenga
e78265738d Rework getaddrinfo() stuff for ai_addr == NULL 2001-09-29 06:33:54 +00:00
Kurt Zeilenga
a1ecd9b697 Fix reference stats2 message 2001-09-28 01:44:13 +00:00
Howard Chu
926b454765 Set protocol to LDAP_VERSION2 on UDP session. 2001-09-28 00:49:01 +00:00
Howard Chu
647b5f84ee Resurrection/rewrite of CLDAP (RFC1798 Connectionless LDAP).
Compile with -DLDAP_CONNECTIONLESS to use this code.
For slapd, use "-h cldap://" to listen on UDP.
For ldapsearch, use "-H cldap://" to query on UDP.
Client-side support is very minimal:
  no automatic timeout/retries
  no basedn wildcard expansion on results
  no support for specifying multiple servers at once.
2001-09-28 00:18:40 +00:00
Kurt Zeilenga
af37269416 Rework do_ldap retry loop to better handle server down errors.
Could likely treat other errors (LDAP_BUSY) as non-fatal errors.
2001-09-27 03:13:28 +00:00
Howard Chu
ef7b93242d Replace some calloc/realloc with ch_calloc/ch_realloc for consistency. 2001-09-26 23:42:53 +00:00
Kurt Zeilenga
c45a6f5c23 Fix up binary search 2001-09-26 03:50:48 +00:00
Kurt Zeilenga
5f4d8a71e6 Use a 64MB stack (instead of a 64K on some systems) by default.
This should be tunable...
2001-09-26 02:35:41 +00:00
Kurt Zeilenga
8c758b34f8 Fix build errors 2001-09-26 01:54:39 +00:00
Kurt Zeilenga
37d44620a5 idl_check for back-bdb 2001-09-25 23:56:49 +00:00
Kurt Zeilenga
ef59732180 Add a sample ACL 2001-09-25 20:30:51 +00:00
Kurt Zeilenga
61de99937f ldif.h include cleanup 2001-09-25 00:03:24 +00:00
Kurt Zeilenga
2af75ecc6a Trim both \n and \r\n from config files. 2001-09-24 22:18:02 +00:00
Howard Chu
2124673988 Tweaked ID_BLOCKs to record NIDs for INDIRECT blocks as well as directs.
Use high bit of NMAX to indicate an INDIRECT. Changes are behind
  #ifdef USE_INDIRECT_NIDS
2001-09-22 06:52:32 +00:00
Howard Chu
58f4ffca59 Fix another SEGV from previous patch. 2001-09-22 05:35:52 +00:00
Howard Chu
00a28378f8 Fix previous idl_find patch. Cannot test <=0 with unsigned ints, duh... 2001-09-22 04:10:03 +00:00
Howard Chu
b52795c283 Add idl_find binary search routine, used by idl_insert and idl_split_block
instead of linear search.
2001-09-21 20:30:27 +00:00
Kurt Zeilenga
c0c9c47032 bump MAXARGS to 500 2001-09-21 00:48:47 +00:00
Kurt Zeilenga
1bfadb5608 Bump MAXARGS to 500. 2001-09-21 00:48:00 +00:00
Mark Adamson
465ecb85f0 Finished the integerMatch matching rule and the integer syntax. 2001-09-20 15:50:49 +00:00
Pierangelo Masarati
f082328f45 logs changes even if no appropriate replica (or none at all) is defined (ITS#1335) 2001-09-19 09:09:51 +00:00
Kurt Zeilenga
22688a7ad6 Minor cleanup of last commit 2001-09-18 18:24:47 +00:00
Kurt Zeilenga
fb852d7d80 comment out inetLocalMailReciepent as it has no assigned OID 2001-09-18 17:52:43 +00:00
Howard Chu
6b9b0660c9 Fix ITS#1213, OID macro parsing in attributetypes 2001-09-18 11:30:00 +00:00
Kurt Zeilenga
7a18352c06 Patch for SASL EXTERNAL. Needs to be tested with other mechanisms. 2001-09-18 07:44:18 +00:00
Howard Chu
bb06fd8d6b Fix crashes for SASL/EXTERNAL binds:
in slap_sasl_getdn, test id, not dn. dn is still NULL
  also, don't check for trailing slash
  in slap_sasl_bind, initialize reslen to 0
2001-09-18 03:10:05 +00:00
Kurt Zeilenga
d05e6af326 Clean up include logging 2001-09-17 22:38:52 +00:00
Kurt Zeilenga
baa49e18de Back out ManageDsaIt change. 2001-09-16 22:03:38 +00:00
Kurt Zeilenga
dba27a3a17 Minor cleanup 2001-09-16 22:02:50 +00:00
Kurt Zeilenga
2d5a817288 Remove lint 2001-09-16 22:00:53 +00:00
Pierangelo Masarati
8a78d022bc cleanup and cast of logs 2001-09-13 21:30:44 +00:00
Kurt Zeilenga
4039648a2e Use time_t not char * to represent timestamps.
Fixes billionth second since epoch bug.
2001-09-09 21:16:17 +00:00
Kurt Zeilenga
09a7bd4331 Clean up asserts, should assert desc != NULL instead of attr != NULL 2001-09-09 18:58:54 +00:00
Kurt Zeilenga
0a155934ab Add root DSE supportedFeatures support. 2001-09-09 04:01:07 +00:00
Kurt Zeilenga
82a4f473ce Update 'invalid data' error message. 2001-09-08 03:55:41 +00:00
Kurt Zeilenga
a8b7e93ef4 Add referral scope checks (ITS#1289) from dshriver@sharemedia.com 2001-09-08 02:37:02 +00:00
Kurt Zeilenga
cd51428dbe Add IDL debugging code from SuSE. 2001-09-07 21:58:31 +00:00
Dmitry Kovalev
358835218a finish the prefious fixes... it is really hard to commit a truly good patch without even a chance to check if it is compilable ;) 2001-09-07 18:50:52 +00:00
Dmitry Kovalev
6bf69cbf39 some cosmetics and minor problems fixed, pointed out by Mei-Hui Su (c++-style comments, newlines etc.) 2001-09-07 13:04:11 +00:00
Kurt Zeilenga
ed9b7332fb Add <limits.h> 2001-09-07 02:08:32 +00:00
Kurt Zeilenga
1b42a20565 Remove extensible filter #ifdef 2001-09-04 18:45:05 +00:00
Kurt Zeilenga
3889e1d955 Add some EINTR logic to back-shell. Assumes fgets() handles
such errors in a particular manner.
2001-09-02 00:10:57 +00:00
Kurt Zeilenga
a2ba804e47 Add general extensible matching support and integerBitAndMatch
and integerBitOrMatch enhancement (ITS#1302 + minor changes)
from Luke Howard <lukeh@padl.com>.
2001-09-01 17:10:43 +00:00
Kurt Zeilenga
2c9a238571 Allow dn.base="" 2001-09-01 05:01:31 +00:00
Kurt Zeilenga
ef7b181f8b Open databases using WRCREAT not READER. 2001-09-01 05:00:27 +00:00
Kurt Zeilenga
a49392981a There is no TLSProtocol option. 2001-08-31 16:48:30 +00:00
Mark Adamson
fac77083cc Skip over the "dn:" prefix when passing a DN to dn_normalize(). 2001-08-29 23:01:24 +00:00
Kurt Zeilenga
2f761834b2 Fix NEW_LGGING typo 2001-08-29 19:49:05 +00:00
Kurt Zeilenga
9a80d76f44 Minor rework of *text = textbuf fix 2001-08-28 21:43:00 +00:00
Kurt Zeilenga
f10028ba06 Apply ACLs to front end objects (root DSE, subschema) consistently 2001-08-28 20:28:34 +00:00
Stig Venaas
70f7e55344 Changed get_listener_addresses() to not use getaddrinfo() for PF_LOCAL 2001-08-26 11:03:27 +00:00
Mark Adamson
7378872731 Need to set error text pointer sooner in entry_schema_check(), or Debug() will SEGV 2001-08-15 15:27:26 +00:00
Pierangelo Masarati
b637967b95 fix malformed test 2001-08-04 16:46:03 +00:00
Pierangelo Masarati
8ee6168916 fix a reference to volative memory in back-ldbm/passwd.c that caused garbage messages to be returned to ldappasswd 2001-08-04 15:46:08 +00:00
Pierangelo Masarati
1eb3f8b2e4 add limits stuff to back-ldap 2001-08-04 11:10:35 +00:00
Pierangelo Masarati
b5bb74bb02 cleanup limits stuff in back-meta 2001-08-04 11:10:08 +00:00
Pierangelo Masarati
6a5b253bc6 allow multiple limits setting on one global/per backend config line 2001-08-04 11:09:25 +00:00
Pierangelo Masarati
4919363fa0 more intuitive special limits configuration 2001-08-03 17:25:39 +00:00
Pierangelo Masarati
414783058d enforces detailed search limits 2001-08-03 17:15:14 +00:00
Dmitry Kovalev
2f4d324f60 A big bunch of improvements, contributed by Sam Drake and Raj Damani.
Summary of changes is cited below.
The patch still needs some cosmetic changes to be made, but is ready for testing.

-----Original Message-----
From: Sam Drake [mailto:drake@timesten.com]
Sent: Saturday, April 07, 2001 10:40 PM
To: 'mitya@seismic.ru'
Cc: openldap-devel@OpenLDAP.org
Subject: RE: Slapd frontend performance issues


FYI, here is a short description of the changes I made.  I'll package up the
changes asap, but it may take a couple of days.

The performance numbers quoted in this report were seen at my location with
a 100,000 object database ... the slower numbers I mentioned earlier were
reported by a customer with a 1,000,000 object database.

I also can't explain the very poor performance I saw with OpenLDAP and LDBM
with a 100,000 object database.

...Sam Drake / TimesTen Performance Software

----------

Work Performed

OpenLDAP 2.0.9, including back-sql, was built successfully on Solaris
8 using gcc.  The LDAP server itself, slapd, passed all tests bundled
with OpenLDAP.  OpenLDAP was built using Sleepycat LDBM release 3.1.17
as the "native" storage manager.

The experimental back-sql facility in slapd was also built
successfully.  It was built using Oracle release 8.1.7 and the Oracle
ODBC driver and ODBC Driver Manager from Merant.  Rudimentary testing
was performed with the data and examples provided with back-sql, and
back-sql was found to be functional.

Slapd and back-sql were then tested with TimesTen, using TimesTen
4.1.1.  Back-sql was not immediately functional with TimesTen due to a
number of SQL limitations in the TimesTen product.

Functional issues encountered were:

1. Back-sql issued SELECT statements including the construct,
   "UPPER(?)".  While TimesTen supports UPPER, it does not support the
   use of parameters as input to builtin functions.  Back-sql was
   modified to convert the parameter to upper case prior to giving it
   to the underlying database ... a change that is appropriate for all
   databases.

2. Back-sql issued SELECT statements using the SQL CONCAT function.
   TimesTen does not support this function.  Back-sql was modified to
   concatentate the necessary strings itself (in "C" code) prior to
   passing the parameters to SQL.  This change is also appropriate for
   all databases, not just TimesTen.

Once these two issues were resolved, back-sql could successfully
process LDAP searches using the sample data and examples provided with
back-sql.

While performance was not measured at this point, numerous serious
performance problems were observed with the back-sql code and the
generated SQL.  In particular:

1. In the process of implementing an LDAP search, back-sql will
   generate and execute a SQL query for all object classes stored in
   back-sql.  During the source of generating each SQL query, it is
   common for back-sql to determine that a particular object class can
   not possibly have any members satisfying the search.  For example,
   this can occur if the query searches an attribute of the LDAP
   object that does not exist in the SQL schema.  In this case,
   back-sql would generate and issue the SQL query anyway, including a
   clause such as "WHERE 1=0" in the generated SELECT.  The overhead
   of parsing, optimizing and executing the query is non-trivial, and
   the answer (the empty set) is known in advance. Solution: Back-sql
   was modified to stop executing a SQL query when it can be
   predetermined that the query will return no rows.

2. Searches in LDAP are fundamentally case-insensitive ("abc" is equal
   to "aBc").  However, in SQL this is not normally the case.
   Back-sql thus generated SQL SELECT statements including clauses of
   the form, "WHERE UPPER(attribute) = 'JOE'".  Even if an index is
   defined on the attribute in the relational database, the index can
   not be used to satisfy the query, as the index is case sensitive.
   The relational database then is forced to scan all rows in the
   table in order to satisfy the query ... an expensive and
   non-scalable proposition.  Solution: Back-sql was modified to allow
   the schema designer to add additional "upper cased" columns to the
   SQL schema.  These columns, if present, contain an upper cased
   version of the "standard" field, and will be used preferentially
   for searching.  Such columns can be provided for all searchable
   columns, some columns, or no columns.  An application using
   database "triggers" or similar mechanisms can automatically
   maintain these upper cased columns when the standard column is
   changed.

3. In order to implement the hierarchical nature of LDAP object
   hierarchies, OpenLDAP uses suffix searches in SQL.  For example, to
   find all objects in the subtree "o=TimesTen,c=us", a SQL SELECT
   statement of the form, "WHERE UPPER(dn) LIKE '%O=TIMESTEN,C=US'"
   would be employed.  Aside from the UPPER issue discussed above, a
   second performance problem in this query is the use of suffix
   search.  In TimesTen (and most relational databases), indexes can
   be used to optimize exact-match searches and prefix searches.
   However, suffix searches must be performed by scanning every row in
   the table ... an expensive and non-scalable proposition.  Solution:
   Back-sql was modified to optionally add a new "dn_ru" column to the
   ldap_entries table.  This additional column, if present, contains a
   byte-reversed and upper cased version of the DN.  This allows
   back-sql to generate indexable prefix searches.  This column is
   also easily maintained automatically through the use of triggers.

Results

A simple database schema was generated holding the LDAP objects and
attributes specified by our customer.  An application was written to
generate test databases.  Both TimesTen and Oracle 8.1.7 were
populated with 100,000 entry databases.

Load Times

Using "slapadd" followed by "slapindex", loading and indexing 100,000
entries in an LDBM database ran for 19 minutes 10 seconds.

Using a C++ application that used ODBC, loading 100,000 entries into
a disk based RDBMS took 17 minutes 53 seconds.

Using a C++ application that used ODBC, loading 100,000 entries into
TimesTen took 1 minute 40 seconds.

Search Times

The command, "timex timesearch.sh '(cn=fname210100*)'" was used to
test search times.  This command issues the same LDAP search 4000
times over a single LDAP connection.  Both the client and server
(slapd) were run on the same machine.

With TimesTen as the database, 4000 queries took 14.93 seconds, for a
rate of 267.9 per second.

With a disk based RDBMS as the database, 4000 queries took 77.79 seconds,
for a
rate of 51.42 per second.

With LDBM as the database, 1 query takes 76 seconds, or 0.076 per
second.  Something is clearly broken.
2001-08-02 17:28:59 +00:00
Kurt Zeilenga
b22ad8cf60 Add some addl. logging 2001-08-02 03:37:20 +00:00
Pierangelo Masarati
8471ef7ed0 add global, per backend and per op_ndn time/size soft, hard and to-be-checked limits (exploited by back-ldbm); see slapd.conf(5) for details 2001-08-01 10:09:04 +00:00
Pierangelo Masarati
419a5ae8c9 fix typo; try to delete dn2id in case of late failure 2001-07-31 10:54:39 +00:00
Pierangelo Masarati
d8cb33ebe8 added acl check for added/removed rdn attrs 2001-07-31 10:02:19 +00:00
Kurt Zeilenga
50223981d9 Fix typo 2001-07-31 07:53:21 +00:00
Kurt Zeilenga
b09727567d Clean up 2001-07-31 04:55:14 +00:00
Kurt Zeilenga
60c4893b93 Last changes should have been #ifdef 2001-07-31 04:30:11 +00:00
Kurt Zeilenga
0bcc892fdf Fix basic operations 2001-07-31 04:24:29 +00:00
Kurt Zeilenga
ca7ba1a3fd Fix slapadd crash when only a subset of databases have been initialized.
Likely should have a general solution to this.
2001-07-31 00:16:44 +00:00
Pierangelo Masarati
4362654eb6 fixes another assert in case of subtle error (schema failure while applying rdn changes) 2001-07-30 20:12:34 +00:00
Pierangelo Masarati
8edccd2554 fixes ITS#1261 (abort on modrdn with new dn already existing) 2001-07-30 14:54:02 +00:00
Pierangelo Masarati
6c81656a95 fixed some memory allocation nonsense 2001-07-29 17:21:28 +00:00
Pierangelo Masarati
c78416fdbd exploits regex-based per op_ndn time/size limits 2001-07-28 11:25:00 +00:00
Pierangelo Masarati
4051547dfa handle regex-based per op_ndn time/size limits 2001-07-28 11:24:22 +00:00
Kurt Zeilenga
279ef73485 Remove assert(0) 2001-07-28 01:06:06 +00:00
Stig Venaas
e3caeb2264 Removed duplicate code by replacing case-Exact/Ignore-Filter/Indexer and
case-Exact/Ignore-Substrings-Match/Filter/Indexer with common code for
the caseExact and caseIgnore cases
2001-07-27 22:54:43 +00:00
Stig Venaas
159fa1b26c Making the approx multistring code default. Leaving the old code for now,
but can really be removed.
2001-07-26 22:33:28 +00:00
Kurt Zeilenga
d4df1af590 Misc cleanup of asserts 2001-07-26 01:08:00 +00:00
Stig Venaas
92ec77f6dc Made approxMatch/Indexer/Filter all do Unicode cannonical normalization
followed by stripping of characters with 8th bit set. The normalization
is needed to make exact match imply approx match.
2001-07-25 21:22:55 +00:00
Kurt Zeilenga
e2b3914982 ITS#1274 fix 2001-07-24 19:54:04 +00:00
Kurt Zeilenga
d31da9dd01 Rework single-value check 2001-07-24 04:31:01 +00:00
Kurt Zeilenga
3e7e6bc6d5 Add an improved single value constraint check. 2001-07-24 03:25:17 +00:00
Pierangelo Masarati
589a5c7442 added extra check to suffix param of replica entry 2001-07-23 14:32:59 +00:00
Kurt Zeilenga
3a2f9e84ba Fix typo 2001-07-22 03:25:45 +00:00
Kurt Zeilenga
0cdf9e3124 fix up UTF8MATCH 2001-07-22 02:45:21 +00:00
Kurt Zeilenga
f310142d2c Use DN normalize 2001-07-22 00:32:58 +00:00
Stig Venaas
d326f96c32 We shouldn't need UTF8oncasecmp() and UTF8casechr() anymore, removing
them.
2001-07-22 00:31:04 +00:00
Kurt Zeilenga
7000f3e8cb Zap old DN code 2001-07-21 23:45:04 +00:00
Kurt Zeilenga
978e417699 Make some additional UTF8 public
Remove lint
2001-07-21 23:13:04 +00:00
Kurt Zeilenga
da2f6f6805 Zap !UTF8MATCH code 2001-07-21 23:02:06 +00:00
Kurt Zeilenga
5cb6b1ce02 Back out DN changes, needs more work 2001-07-21 22:44:55 +00:00
Kurt Zeilenga
9207e19978 unifdef -DMULTIATTRVAL_RDN 2001-07-21 21:21:32 +00:00
Pierangelo Masarati
ece9bdb0eb Added the suffix=<dn> parameter to replica config directive
to allow selective replication of subtrees of a single database.
Multiple occurrences allow the same replica to handle different
subtrees
2001-07-21 14:15:23 +00:00
Pierangelo Masarati
9ee9f1e0e1 Reworked again the caching in case of failure.
Now operations that set the status of an entry to CREATING (add.c, modrdn.c)
need to set it to COMMIT, by calling cache_entry_commit, before returning
the entry itself, otherwise the entry is removed from the cache
and its private data is freed.
Should fix crashes due to add failures as in ITS#1245
2001-07-21 10:53:06 +00:00
Pierangelo Masarati
aec4430d59 Reworked API of nextid; e_private gets destroyed separately from the entry in case add fails (should fix ITS#1245) 2001-07-20 09:50:28 +00:00
Stig Venaas
0e614ca0ec Made caseExactMatch() use Unicode normalization 2001-07-17 20:09:37 +00:00
Stig Venaas
6c362d77ac Made caseIgnoreSubstringsMatch and caseExactSubstringsMatch use proper
Unicode cannonical normalization
2001-07-17 19:35:23 +00:00
Randy Kunkee
82f3004a16 Prevent ldbm_sync from being called by ldbm_cache_close when the new
dbsync configuration is in use, which was preventing the performance
gains of this mode.
2001-07-16 23:21:36 +00:00
Stig Venaas
ea47735802 Fixed UTF8 encoding checks for substrings assertions 2001-07-16 22:48:52 +00:00
Randy Kunkee
f06021e335 Fix ITS#1239:
slapadd core-dumps when destroying db's env (Sleepycat 3.2.9) (ITS#1239)
Only call ldbm_shutdown_env if the database has been opened, ie. when
li->li_dbenv != NULL.  Would appear any time a shutdown occurred and
not all LDBM databases were opened.
2001-07-16 22:16:24 +00:00
Stig Venaas
9b0e583576 Fixed bug in caseExactSubstringsIndexer() and caseIgnoreSubstringsIndexer().
UTF8 normalization must be done before we compute number of keys since
string length might increase.
2001-07-15 21:28:07 +00:00
Kurt Zeilenga
40d68d8374 Extend assertion value syntax checks to some other cases. Needs to
be applied to substrings assertions as well.
2001-07-15 17:25:49 +00:00
Kurt Zeilenga
c46014e27e Fix typo in disallow logging 2001-07-15 17:25:00 +00:00
Stig Venaas
886a7575d0 Fixed segfault in caseIgnoreFilter when assertion value has bad UTF8 coding 2001-07-15 16:21:36 +00:00
Pierangelo Masarati
e864abf685 reworked slapd_mods_free into mimic to avoid extra obj linking into tools 2001-07-14 17:48:12 +00:00
Pierangelo Masarati
5fdba27288 This is the skeleton of back-monitor, the slapd monitoring backend.
The old monitoring stuff has been removed; the new backend is
enabled by using --enable-monitor at configure time and requires

	database monitor

in slapd.conf to be activated.  At present it implements a subset
of the old monitoring options, and it should be extendable to
a number of different subsystems.  The search operation has been
implementd; it does not honor abandon or size/time limits, though.
The compare and the abandon operations are planned.

Copyright Pierangelo Masarati <ando@sys-net.it>; the code is provided
AS IS with NO GUARANTEE.  It can be used and distributed under the
conditions stated by the OpenLDAP Public License.
2001-07-14 17:34:24 +00:00
Kurt Zeilenga
ca43453b95 Quick and dirty hack to add password modify replication. 2001-07-14 01:26:02 +00:00
Pierangelo Masarati
a453d7eacf dn_validate/dn_normalize has been rewritten by
David A. Cooper <david.cooper@nist.gov> (ITS#1232)
according to draft-ietf-ldapbis-dn-05.txt

A copyright statement follows:

  The functions normalize_unicode(), get_hexpair(), write_hex_pair(),
  get_next_byte(), get_next_char(), get_ber_length(),
  ber_parse_primitive_string(), ber_parse_string(), String_normalize(),
  DirectoryString_normalize(), PrintableString_normalize(),
  IA5String_normalize(), ber_parse_primitive_bitstring(),
  ber_parse_bitstring(), getNext8bits(), bitString_normalize(), match_oid(),
  match_key(), get_validated_av_in_dn(), get_validated_rdn_in_dn(),
  and get_validated_dn() in this file were developed at the National Institute
  of Standards and Technology by employees of the Federal Government in the
  course of their official duties. Pursuant to title 17 Section 105 of the
  United States Code the code in these functions is not subject to copyright
  protection and is in the public domain. The copyright for all other code in
  this file is as specified below.
2001-07-13 08:21:14 +00:00
Pierangelo Masarati
b0a60a5d3d added function cache_find_entry_ndn2id that avoids an unnecessary call to dn_normalize; now dn2id calls this function, while the original function has been left as a wrapper 2001-07-11 08:41:42 +00:00
Pierangelo Masarati
27e5c484e6 reworked rdn_attrs to use ldap_explode_rdn; maybe we should remove escapes "\" from parts directly in ldap_explode_rdn 2001-07-10 18:19:22 +00:00
Gary Williams
453e69d636 fix bad debug message 2001-07-10 16:42:26 +00:00
Pierangelo Masarati
005823e032 Forbid empty ("") dn! (followup 5 to ITS#1173) 2001-07-09 10:35:43 +00:00
Pierangelo Masarati
2baa2f0f24 If add to "" is allowed, also modrdn should 2001-07-07 15:40:25 +00:00
Pierangelo Masarati
04c29fb3ea dn2idl API changed for consistency with other dn2id* funcs 2001-07-07 14:49:42 +00:00
Pierangelo Masarati
a4dc886f02 moved some slap_mods_* functions into mods.c, so mods.o can be included
by slapd/tools/*; slap_mods_free is needed by ldbm_back_modrdn after
fixing ITS#1184 (at present -DMULTIATTRVAL_RDN is needed when compiling
back-ldbm/modrdn.c to trigger the compilation of new code).
2001-07-07 09:13:05 +00:00
Pierangelo Masarati
da9ea54700 fixed test on "" (empty) parent dn 2001-07-06 14:40:27 +00:00
Pierangelo Masarati
f4acf94c83 honors '+' rdn separator in adding/deleting attributes; needs -DMULTIATTRVAL_RDN. Please test 2001-07-06 12:24:34 +00:00
Pierangelo Masarati
bff5608926 protos and declarations for charray and rdn stuff 2001-07-06 12:23:22 +00:00
Pierangelo Masarati
38ce12a6f6 added rdn_attrs: parses a rdn and returns types and values in two arrays (honors '+' separator according to RFC 2253) 2001-07-06 12:22:01 +00:00
Pierangelo Masarati
016328a1da added misc charray utilities 2001-07-06 12:20:26 +00:00
Kurt Zeilenga
38e8fefe17 Fix root dse checks 2001-07-06 02:14:47 +00:00
Kurt Zeilenga
9d6852d584 Correct X.500 reference 2001-07-06 02:11:17 +00:00
Pierangelo Masarati
901ce99dde added a comment to rdn_validate: needs to be rewritten according to dn_validate 2001-07-05 20:33:15 +00:00
Pierangelo Masarati
cd74b62fd2 rdn check to prevent illegal rdns in modrdn (copied from dn_rdn) fixes ITS#1102 2001-07-05 08:40:40 +00:00
Pierangelo Masarati
5c0502add9 make slurpd honor include files in slapd.conf (note: the problem was signalled in ITS#131 :) 2001-07-04 20:03:49 +00:00
Pierangelo Masarati
5ad8efbb47 Used API signature from back-bdb; compiles and passes make test 2001-07-03 11:23:18 +00:00
Pierangelo Masarati
fdd45144ca separate ID return value form return status in dn2id (back-ldbm/dn2id.c) 2001-07-02 19:42:27 +00:00
Randy Kunkee
a9097044ea Remove global_backendsyncfreq code (code has been pushed down into back-ldbm). 2001-06-28 18:02:46 +00:00
Randy Kunkee
6a6fd6059d Change to _TRACE instead of _ANY for sync daemon internals. 2001-06-28 09:27:01 +00:00
Randy Kunkee
0ef87764d7 Move backend_syncfreq code down into back-ldbm. Creates new configuration
for LDBM backends called "dbsync", which takes minimum of one argument up
to 3 args which are sync frequency, # of delays, and delay periods.  See
man page update for "dbsync" configuration for more details.
2001-06-28 09:20:33 +00:00
Kurt Zeilenga
77f776dfd1 Another round of TLS updates to support secure referral chasing 2001-06-25 19:17:42 +00:00
Kurt Zeilenga
c4f5497ac6 move TLS ctx to lconn struct in prep for supporting TLS with referrals
need to rework cert check to use per lconn host name
2001-06-25 07:33:42 +00:00
Pierangelo Masarati
6364cea1d3 catch up with bi_db_sync stuff 2001-06-23 15:43:21 +00:00
Kurt Zeilenga
6dd25ba1e6 Plug idl leakage 2001-06-23 05:05:08 +00:00
Kurt Zeilenga
5aefca3be1 Add comments to three-value logic 2001-06-23 02:42:39 +00:00
Kurt Zeilenga
323a03aa90 Fix three value logic 2001-06-23 02:26:09 +00:00
Kurt Zeilenga
1229cfcc3f Backout directory config option 2001-06-22 21:00:24 +00:00
Kurt Zeilenga
60f4554c76 plug substrings filter memory leak 2001-06-22 18:09:19 +00:00
Kurt Zeilenga
f98a1bab88 TLS initialization fix 2001-06-22 18:08:44 +00:00
Randy Kunkee
d492880870 Add sync_daemon to daemon.c, enabled by global configuration
backendsyncfreq <seconds>.  Setting this automatically enables
dbnosync (because the synchronizer takes care of it).
2001-06-22 08:38:58 +00:00
Randy Kunkee
1656f2c774 Patches from Mark Whitehouse (with changes from myself) to make the
dbcachesize setting actually work for db-3.2.9.
2001-06-21 18:54:56 +00:00
Kurt Zeilenga
733d6296a6 Fix undefined filter parsing 2001-06-16 02:20:48 +00:00
Kurt Zeilenga
bee0650d9c Work in progress codes. !UNTESTED! 2001-06-15 07:08:37 +00:00
Kurt Zeilenga
11b6d1f284 Misc updates for NT4 2001-06-15 04:16:55 +00:00
Kurt Zeilenga
e2edf459cb Remove extraneous variable 2001-06-15 00:00:52 +00:00
Kurt Zeilenga
ff993c7ddb Misc updates to password codes / docs 2001-06-13 05:40:24 +00:00
Kurt Zeilenga
8d4c20cd6d Adding crypt(3) salt format (ITS#1202) from Jeff Costlow <j.costlow@f5.com>
with minor changes by committer
---
Copyright 2001, F5 Networks, Inc, All rights reserved.
This software is not subject to any license of F5 Networks.

This is free software; you can redistribute and use it
under the same terms as OpenLDAP itself.
2001-06-13 03:47:17 +00:00
Kurt Zeilenga
67cf14466e Check schema NAMEs 2001-06-07 22:47:02 +00:00
Kurt Zeilenga
cda7d4b2fc Check for children 2001-06-07 00:19:23 +00:00
Kurt Zeilenga
6a647d917f Check for duplicate entries 2001-06-06 22:17:57 +00:00
Kurt Zeilenga
adae86a7db Add more detailed reporting of schema violations to client. 2001-06-06 00:23:56 +00:00
Kurt Zeilenga
891079fb09 Fix undefined attribute type error text usage 2001-06-04 16:46:33 +00:00
Pierangelo Masarati
970abe2637 semicolon after colon in goto labels; no C++ style comments; unused vars removed or #ifdef'd 2001-06-03 08:55:17 +00:00
Pierangelo Masarati
5a2014b863 semicolon after colon in goto labels 2001-06-03 08:53:13 +00:00
Kurt Zeilenga
9a0b6e92d7 Default ACL clause should be "by * none stop" not "by * stop".
That is, default rule should set permissions to none.
2001-06-01 20:09:03 +00:00
Kurt Zeilenga
5f0473d127 Fix typo in last commit 2001-05-30 06:28:32 +00:00
Kurt Zeilenga
e4653bde68 Allow empty numericString matching 2001-05-30 06:06:14 +00:00
Kurt Zeilenga
cc6fab319e Add support for separate max incoming for anonymous and authenticated
sessions (defaults: 256K and 16M respectively).
2001-05-29 20:00:55 +00:00
Kurt Zeilenga
351e436dcf Add an LDBM backend "directory" directive (in addition to
the existing database "directory" directive) to allow setting
of a DB_ENV directory.  Should likely be database specific.
2001-05-29 01:51:37 +00:00
Kurt Zeilenga
7d89fb5446 Fix empty suffix separator test. 2001-05-28 19:40:42 +00:00
Kurt Zeilenga
b56b9859c7 Fix typo (no functional change) 2001-05-28 19:40:15 +00:00
Kurt Zeilenga
820042d013 Add some additional filter checks 2001-05-24 01:07:00 +00:00
Kurt Zeilenga
2433719316 add missing return bug 2001-05-24 00:42:08 +00:00
Kurt Zeilenga
8360b4396f Take rc out from #ifdef 2001-05-20 17:39:32 +00:00
Pierangelo Masarati
c5a9ffa62e pseudo-root dn bind; a couple of minor fixes 2001-05-19 17:02:39 +00:00
Kurt Zeilenga
b8788e8a75 minor cleanup 2001-05-18 17:10:03 +00:00
Kurt Zeilenga
0aef7722e6 Add support for obsolete attributes.
We don't support collective attributes (yet).
Remove exit() calls from scheme parsers.  Need to do same for acl parser.
2001-05-17 07:31:59 +00:00
Pierangelo Masarati
90766f4d4f minor cleanup; some error handling and log fixes 2001-05-16 23:06:15 +00:00
Pierangelo Masarati
395cc1d7bb added new log; minor cleanup of rewrite stuff 2001-05-16 22:55:44 +00:00
Kurt Zeilenga
a76935fe00 Note that schema submissions should come with a reference
to a stable specification.
2001-05-16 20:42:20 +00:00
Kurt Zeilenga
1669cd4d7b Add '=' to printableString to be consistent with ASN.1 description
of syntax.  RFC 1778/2252 are wrong and will need to be updated.
2001-05-16 19:20:29 +00:00
Kurt Zeilenga
ce8fcda8c4 Improve error message when parent is referral or not present 2001-05-16 19:19:16 +00:00
Pierangelo Masarati
0b4c7e0181 added new logging to back-meta 2001-05-13 23:44:22 +00:00
Pierangelo Masarati
00dfed1d0e cleanup of the tests in back-meta/data; after build, run "setup.sh"
in back-meta/data and follow instructions.
minor update of "Changes" and "TODO".
2001-05-13 17:58:03 +00:00
Kurt Zeilenga
0445405299 if continuation line starts with a tab, rewrite it to a space 2001-05-12 18:43:06 +00:00
Pierangelo Masarati
74fa239a20 This is the commit of:
- librewrite, for string rewriting; it may be used in back-ldap
    by configuring with '--enable-rewrite'. It must be used in
    back-meta. There's a text file, 'libraries/librewrite/RATIONALE',
    that explains the usage and the features. More comprehensive
    documentation will follow.
  - enhancements of back-ldap (ITS#989,ITS#998,ITS#1002,ITS#1054 and ITS#1137)
    including dn rewriting, a fix to group acl matching and so
  - back-meta: a new backend that proxies a set of remote servers
    by spawning queries. It uses portions of back-ldap and the rewrite
    capabilities of librewrite. It can be compiled by configuring
    with `--enable-ldap --enable-rewrite --enable-meta'.
    There's a text file, 'servers/slapd/back-meta/Documentation', that
    describes the main features and config statements.

Note: someone (Kurt?) should run 'autoconf' and commit 'configure' as
my autoconf version must be different: my configures contain a number
of differences and I didn't feel comfortable in adding them :)
2001-05-12 00:51:28 +00:00
Gary Williams
cabeec26d4 fix debug line (ITS 1145) 2001-05-11 20:19:16 +00:00
Kurt Zeilenga
cf2cb85fab Clean up logging 2001-05-10 17:40:12 +00:00
Kurt Zeilenga
af2ab5f0a5 Make sure we yield() on a failed accept() 2001-05-10 17:39:10 +00:00
Kurt Zeilenga
4baa7c47da Add better modlist2mod error reporting (to client) 2001-05-10 03:41:17 +00:00
Kurt Zeilenga
f48cb50f12 Zap presentation address match define 2001-05-09 23:43:06 +00:00
Kurt Zeilenga
24ea49810f Clean up some #ifdefs 2001-05-09 23:42:49 +00:00
Kurt Zeilenga
d523048634 Fix have inet_ntop bug 2001-05-09 23:41:16 +00:00
Kurt Zeilenga
b57bc8b35b Note that misc is experimental 2001-05-09 04:17:55 +00:00
Kurt Zeilenga
5f7bf65deb Add ITS#876 nisSchema 2001-05-09 04:16:47 +00:00
Kurt Zeilenga
a8e3501a11 Update copyright 2001-05-08 02:06:33 +00:00
Kurt Zeilenga
9617b89374 Add DESC to various schema elements 2001-05-08 02:03:44 +00:00
Kurt Zeilenga
60c5e77cd6 Fix disconnect bug 2001-05-06 20:01:18 +00:00
Kurt Zeilenga
4055077607 Add simple configure support for sockbuf max incoming 2001-05-05 07:29:21 +00:00
Kurt Zeilenga
be26f1a9f7 Fix typos 2001-05-04 22:50:51 +00:00
Kurt Zeilenga
abce5abf34 Quick sb_max_incoming hack, should be configurable (likely
with differing anonymous vs authenticated values).
2001-05-04 21:55:07 +00:00
Kurt Zeilenga
aa983f343e Clean up entry_free()
assert of e_private was not freed by caller
2001-05-04 01:02:36 +00:00
Kurt Zeilenga
383391b460 detect and use fcntl (for BSD/OS)
detect inet_ntop (for MacOSX)
2001-05-03 05:53:34 +00:00
Kurt Zeilenga
508890e75b Add telephone number indexing support (reuse only) 2001-05-03 00:59:47 +00:00
Kurt Zeilenga
87dc3e2091 Use SMD5 is SHA1 is not available 2001-05-02 19:46:30 +00:00
Kurt Zeilenga
3310663d02 RANDFILE directives 2001-05-02 19:46:01 +00:00
Kurt Zeilenga
3fdbff6923 SLP updates 2001-05-02 19:44:21 +00:00
Kurt Zeilenga
66aa425d92 Be a bit more liberal 2001-05-02 19:43:38 +00:00
Kurt Zeilenga
2133318df7 Fix LDIF bug 2001-05-02 19:41:57 +00:00
Kurt Zeilenga
f8b4ed8afb Fix secprops mimic'ing 2001-05-02 19:41:27 +00:00
Kurt Zeilenga
a045117bf2 fix typo in comment 2001-04-21 01:32:03 +00:00
Kurt Zeilenga
1eb0170482 s/<anonymous>/cn=anonymous/ to avoid syntax issues 2001-04-19 19:29:38 +00:00
Kurt Zeilenga
da0e6d3d98 Previously added modrdn restriction to restrictive. Need to
check newSuperior.
2001-04-19 19:29:00 +00:00
Kurt Zeilenga
c2c7ccc228 Disallow anonymous modification. 2001-04-19 19:28:15 +00:00
Kurt Zeilenga
7537abfb06 Fix referral handling bug 2001-04-12 23:02:20 +00:00
Gary Williams
a26612bc00 fix for select_backend suggested G. Gombas (ITS 1090) 2001-03-27 15:04:06 +00:00
Kurt Zeilenga
20690a532e Fix typo 2001-03-17 17:43:36 +00:00
Kurt Zeilenga
a5ea7aefd6 Add name and uid support to dnaddr 2001-03-15 04:48:29 +00:00
Kurt Zeilenga
fd41a199c0 Make sure we have a separator when doing suffix matching 2001-03-15 03:05:33 +00:00
Kurt Zeilenga
9f8a0e7d1b Normalize DN 2001-03-15 03:04:51 +00:00
Kurt Zeilenga
efaab64b69 Normalized user DN 2001-03-15 03:03:01 +00:00
Kurt Zeilenga
5eaa8fc85f Fix error text bugs 2001-03-15 03:02:23 +00:00
Kurt Zeilenga
e0e0b255f7 Fix typo in $SRCS 2001-03-15 03:01:54 +00:00
Kurt Zeilenga
339a1504d6 Fix syntax/matching-rules for ref and labeledURI 2001-03-15 03:00:52 +00:00
Mark Valence
4b87d9c7d2 Fixed bug (my own, rather old too) that causes a crash on exit when ru
n as a service on NT.
2001-03-11 05:13:57 +00:00
Gary Williams
80ab3d6a6e fix logging line 2001-03-02 14:17:01 +00:00
Mark Valence
2c677743ad bug fix 2001-02-20 16:08:14 +00:00
Mark Valence
95bc47ce79 fix mistype. 2001-02-20 16:07:05 +00:00
Mark Valence
6e6118c6cc attribute & objectclass mapping rules 2001-02-19 19:14:12 +00:00
Mark Valence
efcb4533be Fixed aci syntax validation to use UTF (aci attrs can have dn's) 2001-02-19 19:06:21 +00:00
Gary Williams
9cf6ee8ccd fix acl log line 2001-02-08 13:21:20 +00:00
Gary Williams
8ac7efd02d Add some logging for bad attributes 2001-02-06 16:06:38 +00:00
Kurt Zeilenga
0fc62be316 Rework security restrictions for SASL bind 2001-02-03 03:17:22 +00:00
Kurt Zeilenga
f9a302b1f6 Revamp last commit 2001-02-03 02:32:14 +00:00
Kurt Zeilenga
8091aedc76 Add security checks to root DSE searches.
Fix checking of require statements.
2001-02-03 02:21:37 +00:00
Gary Williams
7c53c9ba1c fix windows-specific logging line 2001-02-02 14:49:35 +00:00
Gary Williams
7cf56432be small changes to logging 2001-02-02 13:50:16 +00:00
Gary Williams
e565505f21 fix logging macros (thanks Mei) 2001-02-02 13:49:26 +00:00
Stig Venaas
ac95c255a8 Using UTF8normcmp() from lunicode, removing our own UTF8casecmp() 2001-01-31 15:58:00 +00:00
Stig Venaas
a8b77998f5 Made caseIgnoreIndexer(), caseIgnoreFilter(),
caseIgnoreSubstringsIndexer(), caseIgnoreSubstringsFilter(),
caseExactIndexer(), caseExactFilter(), caseExactSubstringsIndexer() and
caseExactSubstringsFilter() use UTF8normalize
2001-01-26 15:56:29 +00:00
Stig Venaas
b92bceed2a Now loading all UCDATA files 2001-01-26 14:33:09 +00:00
Stig Venaas
b371357c13 Made dnNormalize() do Unicode normalization and case folding.
dn_normalize() now uses dnNormalize() and fails if normalized string is
longer than original string.
2001-01-25 16:51:59 +00:00
Kurt Zeilenga
d717d9c897 Add DNS SRV to error text 2001-01-24 17:25:30 +00:00
Stig Venaas
13e628bcf4 Load UCDATA composition data 2001-01-24 15:31:53 +00:00
Kurt Zeilenga
fa21f7fe86 Fix IP= port numbers 2001-01-24 00:08:15 +00:00
Mark Adamson
68ab73a0f5 Make sure the variable used for SASL REALM is initialized, in case of no REALM. 2001-01-23 19:18:03 +00:00
Kurt Zeilenga
65cdfa68f0 Fix more typos 2001-01-22 22:03:44 +00:00
Kurt Zeilenga
a4f37d6303 Fix typo 2001-01-22 21:10:54 +00:00
Kurt Zeilenga
10730ca226 Add objectClass kind checking
Kludge NADF schema to conform
2001-01-22 08:09:25 +00:00
Kurt Zeilenga
a93a15d9fc Add copyright notices 2001-01-20 17:49:05 +00:00
Kurt Zeilenga
b849a6ec78 Add default to default option 2001-01-20 01:15:44 +00:00
Howard Chu
4703fe82b2 Pierangelo Masarati's bugfixes and enhancements for suffix-massaging.
See the Changes file for detailed description.
2001-01-19 21:27:20 +00:00
Kurt Zeilenga
28d1dbd8ac Add "sasl-external-x509dn-convert" configuration option aimed
at providing authid TLS/X.509 to LDAP DN mapping.  Experimental.
2001-01-19 00:47:32 +00:00
Kurt Zeilenga
1302713f09 Fix SASL_REALM bug
Minor cleanup of logging code, variable scope
2001-01-19 00:01:25 +00:00
Mark Adamson
6b4ec38178 Change the SASL DN's from cn=authzid to cn=auth 2001-01-18 20:05:15 +00:00
Gary Williams
84658f8a11 add new logging 2001-01-17 21:12:54 +00:00
Kurt Zeilenga
79d9ab38ba Add more restrictive numeric string validate.
Need to rework IA5 matching to support empty strings as they should
be allowed for most string types (excepting directoryString).
2001-01-17 21:02:11 +00:00
Gary Williams
3281138bcf fix format for new logging 2001-01-17 17:01:19 +00:00
Gary Williams
f49fd8a98e fix format 2001-01-17 16:35:53 +00:00
Kurt Zeilenga
c55a82baa2 Mark as "altered version" 2001-01-17 07:09:22 +00:00
Kurt Zeilenga
06d63200e4 ITS#919: fix str2ad initialization bug 2001-01-17 06:32:26 +00:00
Kurt Zeilenga
a5377f6c5e Use consistent spelling of objectClass 2001-01-17 02:51:05 +00:00
Kurt Zeilenga
abb0797358 Move optimistic ret setting 2001-01-17 02:48:55 +00:00
Kurt Zeilenga
8a22a0e0d0 SLP extension derived from patch provided by Caldera Systems.
Copyright 2000, Caldera Systems, Inc All rights reserved.
This software is not subject to any license of Caldera Systems, Inc

This is free software; you can redistribute and use it
under the same terms as OpenLDAP itself
2001-01-16 22:18:33 +00:00
Kurt Zeilenga
2a7036e5b0 ITS#963: Multimaster patch 2001-01-16 06:49:49 +00:00
Gary Williams
ffcdc6d11d More new logging (Behind NEW_LOGGING) 2001-01-15 19:17:29 +00:00
Gary Williams
d531a20f52 more new logging (finally), behind NEW_LOGGING 2001-01-11 17:11:23 +00:00
Kurt Zeilenga
2ae02fc19b Treat unrecognized object classes as an objecdt class violation (per X.511) 2001-01-10 19:00:47 +00:00
Kurt Zeilenga
6d0479b2a6 ITS#955: update cosine schema based upon X.500 recommendations 2001-01-10 18:59:54 +00:00
Stig Venaas
43015fc862 Allow changing rdn only, locked parent twice when old and new parent were
the same.
2001-01-09 15:49:44 +00:00
Kurt Zeilenga
778e5e9bb6 ITS#941: back-passwd levels fix from nick@debian.org 2000-12-28 02:27:13 +00:00
Mark Adamson
466ff113e1 ITS#897, internal connections need to free their single operation struct. 2000-12-08 22:34:22 +00:00
Mark Adamson
2231d5e64e Make SASL authorization work for NULL, "u:", and "dn:" authz strings. 2000-11-30 22:00:15 +00:00
Kurt Zeilenga
fc630ea1f8 Unbind should not return a result 2000-11-30 20:27:27 +00:00
Kurt Zeilenga
04e2da58ed ITS#895: gai_strerror fix 2000-11-24 05:30:52 +00:00
Kurt Zeilenga
8befe70f3f ITS#900: Fix waitpid == 0 bug 2000-11-21 21:59:35 +00:00
Howard Chu
e2ff92c6fc Set outbound connection to use the same protocol version as the inbound. 2000-11-11 03:01:00 +00:00
Kurt Zeilenga
fcd432ffbd empty OID values are invalid 2000-11-10 23:07:20 +00:00
Stig Venaas
b44cc963c2 Improved ucdata loading error handling 2000-11-09 12:39:18 +00:00
Kurt Zeilenga
ba37cbc233 Fix passwd clearing bug 2000-11-06 15:53:02 +00:00
Kurt Zeilenga
00b77ca088 Postal Address should be treated like directoryString 2000-11-04 21:11:52 +00:00
Kurt Zeilenga
451146f795 Update validation of printable-like syntaxes 2000-11-04 21:09:23 +00:00
Kurt Zeilenga
064abee2c8 highlite ;binary comments with SMIME attributes 2000-11-04 20:32:19 +00:00
Kurt Zeilenga
17bcb2b3bb Update printableString to restrict characters per RFC1778 not isprint() 2000-11-04 20:31:50 +00:00
Dmitry Kovalev
a9b601290b Add 'distinct' to sql search query to prevent duplicate entries in results (suggested by Mathieu Guillaume) 2000-11-04 12:52:06 +00:00
Mark Adamson
caf384a37c Improve handling of initials in approximate search strings. 2000-11-03 16:16:27 +00:00
Kurt Zeilenga
e138a74d48 subtype should inherit approximate matching rule 2000-11-02 21:49:03 +00:00
Dmitry Kovalev
c77bd543bc fix even more stupid thing with the same issue ;) 2000-11-02 16:29:57 +00:00
Dmitry Kovalev
46a10706f5 fix _stupid_ thing with toupper -> ldap_pvt_str2upper 2000-11-02 13:18:45 +00:00
Stig Venaas
87e58fb031 Changed ucdata loading, all is done in config.c. Tried to make ucdata load
when found in config file, or before first call to dn_normalize/dn_validate
2000-11-02 10:10:36 +00:00
Dmitry Kovalev
6d94ecd1b0 fix ITS #855 (back-sql crashes with malformed filters),
also extend bind() to something less trivial (to support SIMPLE_AUTH mode)
2000-10-30 20:36:29 +00:00
Kurt Zeilenga
5935a11c8e Set UTF8DN by default 2000-10-30 20:05:41 +00:00
Stig Venaas
a8985a440b Use the macro UTF8DN to set whether new UTF8 dn_normalize() code should
be used.
2000-10-30 20:00:56 +00:00
Stig Venaas
fdbd1ded93 Short term dn_normalize() fix. Uppercases all UTF8 characters as long
as the character byte length is preserved. Change #if 1 to use.
2000-10-28 23:38:14 +00:00
Dmitry Kovalev
4411e0aa17 fix case-insensitive matching
+
documentation cleanup & update
2000-10-25 21:23:04 +00:00
Gary Williams
a0b93ce648 initialize new logging routines (behind NEW_LOGGING) 2000-10-25 16:50:45 +00:00
Gary Williams
d65bf04894 add logfile directive to config (behind NEW_LOGGING) 2000-10-25 16:49:23 +00:00
Kurt Zeilenga
9117cbd488 Fix another #if 0 v UTF8MATCH bug 2000-10-25 01:32:35 +00:00
Kurt Zeilenga
b065d8e01b Missed on #if 0 to #if UTF8MATCH is last commit
Also, enable UTF8MATCH... this is devel!
2000-10-24 22:25:41 +00:00
Kurt Zeilenga
7d2d2d6583 UTF8 aware caseIgnore matching
---
Copyright 2000 Stig Venaas, UNINETT
All rights reserved.

Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice is
preserved. The name of UNINETT may not be used to endorse or promote
products derived from this software without specific prior written
permission. This software is provided ``as is'' without express or
implied warranty.
2000-10-24 22:23:30 +00:00
Mark Adamson
c165d93ecd Implement 2 approximate matching algorithms. 2000-10-24 20:25:37 +00:00
Kurt Zeilenga
52402fa752 Fix register_syntax argument names 2000-10-23 18:02:48 +00:00
Howard Chu
99c88eace1 Fix: remap API error codes into protocol error codes before sending
back to client.
2000-10-23 13:32:14 +00:00
Kurt Zeilenga
dbdba34972 First-cut at manageDSAit-aware backend selection. 2000-10-21 03:29:02 +00:00
Kurt Zeilenga
38cf4a1d82 Add better space compression 2000-10-21 03:27:41 +00:00
Gary Williams
696de70df4 fix lutil_set_debug_level call 2000-10-20 14:46:33 +00:00
Kurt Zeilenga
9e7accb034 This patch replaces gai_strerror with AC_GAI_STRERROR in daemon.c and also
uses AC_GAI_STRERROR to report getaddrinfo failures in os-ip.c
-- Stig Venass
2000-10-19 18:05:11 +00:00
Kurt Zeilenga
5630665e27 quick hack to support holding of the root naming context 2000-10-18 19:29:40 +00:00
Kurt Zeilenga
2dbd6c6d0e remove lint 2000-10-18 00:35:09 +00:00
Gary Williams
aacd6e78f4 convert text level to int 2000-10-17 19:42:24 +00:00
Kurt Zeilenga
a865220fd8 Bump listeners to 10 2000-10-17 06:36:22 +00:00
Kurt Zeilenga
d30264a2a1 Trim unimplemented syntaxes and matching rules from subschema subentry 2000-10-16 23:47:46 +00:00
Kurt Zeilenga
1fb923e6e2 Replace last commit with Stig's improved version 2000-10-16 21:45:35 +00:00
Kurt Zeilenga
820965a412 ITS#839: getaddrinfo portability fix from Gabar Gombas 2000-10-16 20:32:39 +00:00
Kurt Zeilenga
fc227a8816 Remove cpp lint 2000-10-16 20:04:42 +00:00
Kurt Zeilenga
e414303e10 Make sure openldap-slurp is created 700 2000-10-16 16:43:42 +00:00
Julio Sánchez Fernández
336f054d05 Extend MRA. It now has a pointer to a MatchingRule, but a char
pointer is kept for messages and to tell a filter without rule
from one with an unknown rule.  It matters.

Fix a couple of bugs in debug output.
2000-10-15 19:12:21 +00:00
Julio Sánchez Fernández
5b52ae5109 Extend MRA. It now has a pointer to a MatchingRule, but a char
pointer is kept for messages and to tell a filter without rule
from one with an unknown rule.  It matters.
2000-10-15 19:10:43 +00:00
Julio Sánchez Fernández
18b6b866e2 Better parsing. 2000-10-14 18:36:13 +00:00
Kurt Zeilenga
62a588bd05 Correct SMIME comment
move pilot.schema to the Attic
2000-10-14 01:42:49 +00:00
Kurt Zeilenga
e30826ea36 Per IETF LDAPext discussions, ;binary transfer of binary syntax
makes little sense.  Implementations should not require or by
default return ;binary for attributes of this syntax.  This means
inetOrgPerson needs updating.  This means Netscape roaming doesn't.
2000-10-14 01:37:48 +00:00
Kurt Zeilenga
82e7b2e049 label io as "ldap_" 2000-10-14 00:12:39 +00:00
Julio Sánchez Fernández
7444e727c9 Add mra.o to linked objects 2000-10-13 20:43:32 +00:00
Julio Sánchez Fernández
ff72b73fe3 Protos for extensible matching rules 2000-10-13 20:41:23 +00:00
Julio Sánchez Fernández
d4b63dd3e3 The beginning of extensible matches. Do not use. 2000-10-13 20:39:36 +00:00
Julio Sánchez Fernández
c317a093c4 Let slapd at least start and do things. Someone should really have
a look at this.  Do we need to add something to every program so
that levelArray is at least initialized?
2000-10-13 20:24:49 +00:00
Kurt Zeilenga
2b2ee1ccbd Return authMethodNotSupported not authUnknown for unknown
bind authentication method
2000-10-13 05:28:23 +00:00
Kurt Zeilenga
f7e9842160 Remove "defaultaccess" option. No longer needed as without
ACLs, the only sane and useful option is "read".
2000-10-13 04:45:24 +00:00
Howard Chu
004f4f3260 Fix TLSVerifyClient. Applied in wrong branch before. 2000-10-13 00:54:05 +00:00
Kurt Zeilenga
16fcdec8df Import Stig reorganized daemon.c + style changes 2000-10-12 21:59:08 +00:00
Gary Williams
b9837286db example of new logging use 2000-10-12 20:12:28 +00:00
Gary Williams
bbc0ac00b2 get new debug configuration 2000-10-12 20:11:49 +00:00
Kurt Zeilenga
b285814f8e Fix layer installation 2000-10-12 19:02:31 +00:00
Kurt Zeilenga
5a32ff0603 Add missing 'static'... (ITS#823,825,828)
as reported by Jeff Earickson <jaearick@colby.edu>
other suggestions to be separately reviewed
2000-10-11 23:42:53 +00:00
Kurt Zeilenga
468664c443 Adjust result code when entry is not found to noSuchObject 2000-10-11 18:19:26 +00:00
Mark Valence
7e1d4023b8 Removed testing mods accidentally committed with previous fix. 2000-10-11 16:41:15 +00:00
Mark Valence
8130d0e883 Added conn and op arguments to group backend callback. 2000-10-11 16:35:14 +00:00
Mark Valence
d8d9bec087 Added conn and op arguments to backend_group. 2000-10-11 16:25:28 +00:00
Kurt Zeilenga
e6dc9d1889 Update ldappasswd binddn bug, man page and error reporting 2000-10-11 04:56:08 +00:00
Kurt Zeilenga
1ba91c7fc7 Fix up logging 2000-10-10 06:34:58 +00:00
Kurt Zeilenga
a67546e640 Add more detail to "configured to hold" message 2000-10-10 01:37:07 +00:00
Kurt Zeilenga
2b643c7d0b Don't allow authPassword (yet) 2000-10-10 01:07:39 +00:00
Kurt Zeilenga
ef51582b6e slight change to chdir/chroot commit to clean up perror args 2000-10-09 23:38:30 +00:00
Kurt Zeilenga
0189c35b6a Do a chdir() to the sandbox dir to ensure CWD is within sandbox. 2000-10-09 23:35:57 +00:00
Julio Sánchez Fernández
8a8429a972 Fix misleading text in debug output. 2000-10-09 19:14:44 +00:00
Julio Sánchez Fernández
bdf3ec2fb3 Remove lint. 2000-10-09 19:11:46 +00:00
Kurt Zeilenga
c42c2847cf Fix SLAPD_SPASSWD typo which caused passwd_mutex not to be used
consistently.
2000-10-09 19:09:28 +00:00
Julio Sánchez Fernández
6777a3a41a Permit access defined by uniqueMember and not only DN-valued
attributes.  This allows using groupOfUniqueNames for
access control.
Fix small typo in MRA definition.
2000-10-09 19:09:22 +00:00
Kurt Zeilenga
27b30275a6 We need to set sasl_layers prior to returning result... 2000-10-07 02:00:54 +00:00
Kurt Zeilenga
a912e6eea0 Make sure authzid form produces a valid subject DN. Support
both u: and dn: forms.
Rework sasl-regex DN be of the form
	uid=user,cn=realm,cn=mech,cn=authz
Fix up slapd.conf(5)
2000-10-06 23:50:38 +00:00
Kurt Zeilenga
1b635156ab s/saslregex/sasl-regex/
Other minor updates
2000-10-06 21:16:36 +00:00
Kurt Zeilenga
f3d9dd0fab ITS#806: Fix DISTDIR typo 2000-10-05 17:57:41 +00:00
Kurt Zeilenga
68f1e3a55c Fix install of schema when $(INSTALL) is build/install.sh
use test, not [ ] in expressions
2000-10-04 17:00:03 +00:00
Kurt Zeilenga
cdf17386ac Fix mode of schema.default installed files 2000-10-04 12:45:55 +00:00
Kurt Zeilenga
4dadd52ce7 allow numericString match indexing 2000-10-04 02:23:42 +00:00
Kurt Zeilenga
49d9f7f1b2 Don't excite folks with index_param fails 2000-10-03 20:50:08 +00:00
Kurt Zeilenga
cdc0a66558 ITS#798: don't block on empty replog log in one-shot mode 2000-10-03 18:50:42 +00:00
Kurt Zeilenga
5c66902abb Fix typo 2000-10-02 14:10:51 +00:00
Kurt Zeilenga
492bb0263f Fix thread handling and error printing 2000-10-01 19:21:07 +00:00
Kurt Zeilenga
fcc86b2456 Check for shutdown after successful select() 2000-09-30 05:34:34 +00:00
Kurt Zeilenga
8a8ed19a44 fix typo in comment 2000-09-30 05:34:02 +00:00
Kurt Zeilenga
890a3cc3bb Update entry release to new prototype 2000-09-30 04:13:30 +00:00
Kurt Zeilenga
8f9980d5f6 Logging changes 2000-09-30 01:04:54 +00:00
Kurt Zeilenga
bd9e1b772c Fix no_threads build 2000-09-30 01:04:43 +00:00
Kurt Zeilenga
7c96f629ee Add connection and operation arguments to backend callbacks.
Needed for transactions.
2000-09-29 05:25:44 +00:00
Kurt Zeilenga
ce382475f0 misc cleanup 2000-09-29 02:50:34 +00:00
Kurt Zeilenga
cd9b8b1fe9 ITS#786: fix IA5 string indexing to use appropriate routines 2000-09-29 00:24:43 +00:00
Kurt Zeilenga
283a8f1b4f Add dead lock detection thread. 2000-09-29 00:18:29 +00:00
Kurt Zeilenga
6b80b349fa remove cruft 2000-09-28 22:25:34 +00:00
Kurt Zeilenga
160bf00975 Disable debugging 2000-09-28 22:25:19 +00:00
Kurt Zeilenga
11ba8fcf8f report retries 2000-09-28 18:29:50 +00:00
Kurt Zeilenga
819b5303da Add txn_checkpoint()'ing
disable moddn/newSuperior (needs re'IDing)
2000-09-28 04:09:13 +00:00
Kurt Zeilenga
f106722ebf working modrdn...
(need to fix leaks on transaction retries)
2000-09-28 02:42:20 +00:00
Kurt Zeilenga
67a595b328 fix up bdb_entry_return() calls 2000-09-28 02:27:49 +00:00
Kurt Zeilenga
fe23e0b875 Fix idl_insert... add/modify/delete now working w/ binary IDL search!
Leave debugging in place until post indexing work.
2000-09-28 01:27:01 +00:00
Kurt Zeilenga
75ee0afb30 Add idl_dump for testing purposes 2000-09-28 01:02:59 +00:00
Kurt Zeilenga
b64782a7c0 Clean up logging... need to hand run idl_delete to find bug 2000-09-28 00:24:28 +00:00
Kurt Zeilenga
ce01b5d755 Don't complain about non-existance IDL "range" candidates 2000-09-28 00:10:41 +00:00
Kurt Zeilenga
373479e5b8 Mostly working modify 2000-09-28 00:02:47 +00:00
Kurt Zeilenga
371f8efb9c Fix entry encode/decode logging 2000-09-27 23:37:10 +00:00
Kurt Zeilenga
45b0ae2e7d Fix referrals no-referrals case 2000-09-27 23:25:15 +00:00
Kurt Zeilenga
ddb1124e42 Rough in extended ops, modify, and modrdn.
General code cleanup.
2000-09-27 22:28:59 +00:00
Kurt Zeilenga
cb2734eef0 Fix cursor logic 2000-09-26 22:28:12 +00:00
Kurt Zeilenga
077c47c2a6 replace ALLIDS with RANGE IDLs 2000-09-26 22:22:42 +00:00
Kurt Zeilenga
21cc085854 Add reindex 2000-09-26 20:41:54 +00:00
Kurt Zeilenga
fdeffe84e1 Add kludge to get working tests add/populate. 2000-09-26 20:31:34 +00:00
Kurt Zeilenga
dccdd30497 Got base entry... 2000-09-26 19:26:08 +00:00
Kurt Zeilenga
fcb3ccc526 Fix ber_scanf and init bugs 2000-09-26 17:47:24 +00:00
Kurt Zeilenga
63df7da68e include external.h 2000-09-26 05:33:37 +00:00
Kurt Zeilenga
3c600e3a8c Fix logging 2000-09-26 04:28:52 +00:00
Kurt Zeilenga
e2c2ff8deb Apparently working slapadd! 2000-09-26 04:28:17 +00:00
Kurt Zeilenga
ebae2e5c62 Rough in passwd and referral routines
add diag and fix a few idl bugs
2000-09-26 03:47:56 +00:00
Kurt Zeilenga
5a30d0a9dd Add more diagnostics including linear search version of idl_search() 2000-09-26 01:36:35 +00:00
Kurt Zeilenga
7b97ddabeb Add diagnostics 2000-09-26 01:18:00 +00:00
Kurt Zeilenga
922cd5f41e Fix nextid 2000-09-26 00:56:33 +00:00
Kurt Zeilenga
b6d63b8e17 Add additional diagnostics 2000-09-26 00:43:00 +00:00
Kurt Zeilenga
11797cdbeb Fix initialization, add additional diagnostics 2000-09-26 00:12:31 +00:00
Kurt Zeilenga
0518820376 Add bind() 2000-09-25 23:46:54 +00:00
Kurt Zeilenga
c182511f91 Add bdb_bind, clean up init, s/Backend/BackendDB/ 2000-09-25 23:41:16 +00:00
Kurt Zeilenga
6a74325e5d Clean up debug messages 2000-09-25 21:58:41 +00:00
Kurt Zeilenga
61f5f03a23 Disable sub directory support for now 2000-09-25 21:30:15 +00:00
Kurt Zeilenga
e50c9b1588 Add minimal config support 2000-09-25 21:10:21 +00:00
Kurt Zeilenga
c3ab074c00 Update build environment for back-bdb 2000-09-25 20:16:19 +00:00
Kurt Zeilenga
ec1f989c79 Finish search rough in (w/o alias nor indexing support) 2000-09-25 19:59:45 +00:00
Kurt Zeilenga
61a15be30a Rough in search routine 2000-09-25 18:59:15 +00:00
Kurt Zeilenga
708db94416 Clean up logging and fix ITS#771 typo 2000-09-25 06:49:27 +00:00
Kurt Zeilenga
3874e8571d Add dn2entry.c 2000-09-24 22:48:13 +00:00
Kurt Zeilenga
64c521085b Add compare routine 2000-09-24 06:04:58 +00:00
Kurt Zeilenga
68a5db572c rough in an add/delete and deadlock avoidance 2000-09-23 23:15:40 +00:00
Kurt Zeilenga
b7b075ba75 Remove unneeded getpeername call (use accept() from).
cleanup #ifdef, localize variables, and misc changes.
2000-09-23 20:39:52 +00:00
Kurt Zeilenga
aa5b7d4d52 Restrict keepalive/nodelay setsockopt to IP streams 2000-09-23 19:14:40 +00:00
Kurt Zeilenga
318d11e9db Fix ri initialization bug (ITS#768) 2000-09-22 22:24:30 +00:00
Kurt Zeilenga
6949ab9d15 Replace indexing hash with 32-bit FNV-1... should be much faster than MD5 2000-09-22 22:19:46 +00:00
Kurt Zeilenga
adf7955160 Add indirection to hash routines to allow for easier replacement
(MD5 should be replaced with something faster)
2000-09-22 20:47:46 +00:00
Kurt Zeilenga
048cb81a0f Use LUTIL_MD5_BYTES constant 2000-09-22 20:36:27 +00:00
Kurt Zeilenga
641845f4c1 Rework schema install to work with VPATH support 2000-09-22 19:16:53 +00:00
Kurt Zeilenga
f164e69baa Don't recursive lock connections_mutex in idle timeout routine 2000-09-22 18:18:39 +00:00
Kurt Zeilenga
de61693cdb Add depend information 2000-09-22 08:53:51 +00:00
Kurt Zeilenga
aaab54e142 Add bdb_add() and supporting routines 2000-09-22 06:46:32 +00:00
Kurt Zeilenga
2b82d4f486 remove lint
update bdb codes
2000-09-22 01:40:57 +00:00
Kurt Zeilenga
d78a515860 Fix build issues 2000-09-21 23:00:51 +00:00
Kurt Zeilenga
2aebaba70e Patch req2rst not to abort on unknown tags 2000-09-21 22:29:53 +00:00
Kurt Zeilenga
342ad23c4c sasl_secprops: needs to return "" 2000-09-21 21:32:13 +00:00
Kurt Zeilenga
d5860fb05c check return of ldap_pvt_tls_init() (which doesn't fail yet) 2000-09-21 21:30:02 +00:00
Kurt Zeilenga
8730b78ad3 Remove assert in sasl_secprops 2000-09-21 21:28:32 +00:00
Kurt Zeilenga
cf17c168c5 Fix portability issue.
Move prototypes to proto-slap.h
2000-09-21 19:12:41 +00:00
Kurt Zeilenga
bbae507a8f Set TCP_NODELAY and SO_KEEPALIVE after every accept() as some accept()
implementations do not create new socket with all properties of
listening socket.
2000-09-21 19:08:17 +00:00
Mark Adamson
bf1ee530ea Implementation of SASL authorization. 2000-09-21 17:32:54 +00:00
Kurt Zeilenga
c9de004a86 Fix logging bug 2000-09-21 16:53:45 +00:00
Kurt Zeilenga
101ec9c57f modify idl_search to use binary search algorithm 2000-09-21 01:56:10 +00:00
Kurt Zeilenga
4830b23b9d Add idl_delete routines 2000-09-20 23:29:41 +00:00
Kurt Zeilenga
6543336245 Fix typo in comment 2000-09-20 23:29:14 +00:00
Kurt Zeilenga
4617f2e946 Fix SPASSWD merge for real 2000-09-20 17:34:06 +00:00
Kurt Zeilenga
31dd2fb5eb Fix merge of SPASSWD changes 2000-09-20 17:13:36 +00:00
Kurt Zeilenga
95627d674a Add dn2id code
Add idl_insert
2000-09-20 07:21:09 +00:00
Kurt Zeilenga
7ab0916488 Reply on DB_CONFIG for tuning... 2000-09-20 02:01:05 +00:00
Kurt Zeilenga
50714d2d48 merge changes from authPassword work which should fix SPASSWD code... 2000-09-20 00:28:57 +00:00
Kurt Zeilenga
67e3f97097 Add new nextid code. 2000-09-19 20:13:41 +00:00
Kurt Zeilenga
22e739b736 Add rough implementation of tool callbacks. 2000-09-19 18:08:04 +00:00
Kurt Zeilenga
fe186a9c8f Add BDB errcall 2000-09-19 01:59:08 +00:00
Kurt Zeilenga
b0f3bcb552 Don't set DB_PRIVATE yet. 2000-09-18 21:51:19 +00:00
Kurt Zeilenga
c1fdf4587c Add errpfx and errcall 2000-09-18 21:35:08 +00:00
Kurt Zeilenga
da5da64ef8 Add set_*_dir calls 2000-09-18 21:19:19 +00:00
Kurt Zeilenga
4077211117 Fix up back-bdb framework 2000-09-18 20:03:41 +00:00
Kurt Zeilenga
c3b0c9bd0a Initial autoconf support for back-bdb 2000-09-18 19:02:03 +00:00
Kurt Zeilenga
434b0738dd Don't check fd_sets until after we check fd < dtblsize 2000-09-18 19:01:21 +00:00
Kurt Zeilenga
583cbc8c25 Framework for back-bdb 2000-09-18 18:51:07 +00:00
Kurt Zeilenga
ad08ff008e Remove -s (noschemacheck in favor of using global_schemacheck) 2000-09-17 20:40:43 +00:00
Kurt Zeilenga
9a8006a6c2 Validate values in tool mode 2000-09-16 22:47:29 +00:00
Kurt Zeilenga
b6674a90b0 Cleanup 2000-09-16 22:46:52 +00:00
Kurt Zeilenga
b2e776cfe7 Reorder DN check 2000-09-16 06:23:53 +00:00
Kurt Zeilenga
5cfb3f24a5 Fix modrdn handling 2000-09-16 00:26:24 +00:00
Kurt Zeilenga
34f8561467 Update slurpd with StartTLS and additional SASL parameters 2000-09-15 23:41:07 +00:00
Kurt Zeilenga
b1770ee098 Remove cruft (-h) 2000-09-15 22:49:14 +00:00
Kurt Zeilenga
45cf7e1dfe Add additional error checking... need to better handle
garbage input from slapadd or pre-existing database.
2000-09-15 03:26:22 +00:00
Kurt Zeilenga
825c3c4c5c Fix handling of optional cred 2000-09-15 00:09:44 +00:00
Kurt Zeilenga
f2b1d423c1 Cleanup 2000-09-14 07:10:15 +00:00
Kurt Zeilenga
435bdf24b0 Fix ;binary subtyping 2000-09-14 06:07:23 +00:00
Ben Collins
09a2e74d5a dereference 'char **text' when passing it as an arg to Debug() 2000-09-13 21:52:50 +00:00
Ben Collins
d216e32d63 declare return value of index_mask() to be slap_mask_t, also get rid of extraneous code in for() loop 2000-09-13 21:51:14 +00:00
Kurt Zeilenga
16cdbd9c74 Update handling of binary syntax to require ";binary" transfer 2000-09-13 21:50:24 +00:00
Ben Collins
810d3ce224 specifically check for NULL return from acl_get() 2000-09-13 21:49:56 +00:00
Kurt Zeilenga
13262aca41 Fix java schema 2000-09-13 19:58:56 +00:00
Kurt Zeilenga
2a8176cd62 Add Standard Track PKI schema (RFC2587) 2000-09-13 06:09:50 +00:00
Kurt Zeilenga
6c3e915ceb Fix reversed assert logic 2000-09-13 01:23:39 +00:00
Kurt Zeilenga
93074d7e43 Add EOL at EOF 2000-09-13 00:05:45 +00:00
Kurt Zeilenga
16101ba8c9 Remove extranous characters (^M) and other minor clean up 2000-09-12 21:43:42 +00:00
Kurt Zeilenga
f7ba5a68c4 Catch nextid failures. 2000-09-12 21:16:03 +00:00
Kurt Zeilenga
d6a56aaf25 Fix typo in last commit 2000-09-12 19:35:19 +00:00
Kurt Zeilenga
bd9de9d90d Clean up defaultSearchBase code 2000-09-12 18:21:09 +00:00
Kurt Zeilenga
6629093571 Add entry_encode() 2000-09-12 04:57:56 +00:00
Kurt Zeilenga
5864dfdb7b remove lint 2000-09-12 00:38:47 +00:00
Kurt Zeilenga
0549d647de Fix bad merge 2000-09-12 00:37:03 +00:00
Kurt Zeilenga
99ca5d4b91 Update projects for DB31 (Sleepcat changed library names, ugh) 2000-09-12 00:33:02 +00:00
Kurt Zeilenga
5170fc3a98 Add BitString syntax/matching rule handlers
Add NameAndOptionalUID/UniqueMemberMatch handlers
2000-09-12 00:32:08 +00:00
Kurt Zeilenga
fdc16c2f94 Add initial entry_encode() routine for back-sleepy (behind #if)
Need to add entry_decode().
2000-09-12 00:28:08 +00:00
Kurt Zeilenga
a3ae90ac8a Rework integer syntax to support signed values.
Validation is quite rigid allowing use of simple normalization
and caseExactIA5 matching (and indexing).
2000-09-12 00:00:25 +00:00
Kurt Zeilenga
5852f7188b Add 'defaultSearchBase' configuration directive to help support
brain-damaged LDAPv2 clients.
2000-09-11 21:57:14 +00:00
Kurt Zeilenga
344b91e257 Add Java (RFC2713) and Corba (RFC2714) schema 2000-09-11 20:27:35 +00:00
Kurt Zeilenga
6a3b8e281b ITS#722: disallow argument buffer overflow 2000-09-11 19:05:24 +00:00
Kurt Zeilenga
d8c4df6f39 -lldbm now sets DB_USE_ENVIRON and support input of a DB home path.
back-ldbm needs modification to support db home directory as backend
(as oppose to database) option.
2000-09-11 18:46:34 +00:00
Julio Sánchez Fernández
95eacae431 Integer (not numericString, that are different) matches.
Good for nss_ldap (equality indexing of uidNumber and the
like now work).
2000-09-11 18:34:14 +00:00
Kurt Zeilenga
3342ea3b49 Add more bind allow/disallow flags 2000-09-11 18:24:24 +00:00
Kurt Zeilenga
2e13824d0d Add "allow tls_2_anon" to allow StartTLS to force session to anonymous.
Add "disallow tls_authc" to disallow StartTLS when session is authenticated.
Create and use connection2anonymous routine for consistency.
2000-09-08 22:59:01 +00:00
Kurt Zeilenga
2c342e894c Minor change to connection error handling 2000-09-08 18:46:18 +00:00
Kurt Zeilenga
85fc1af755 disallow more root dse operations 2000-09-08 16:59:15 +00:00
Kurt Zeilenga
1e26e165fe Disallow inappropriate operations upon the root dse. 2000-09-08 05:20:46 +00:00
Kurt Zeilenga
a20800a964 backout ucdata change as being a little too experimental 2000-09-07 23:46:07 +00:00
Kurt Zeilenga
a4fac87687 Use ucdata (very experimental) 2000-09-07 23:19:10 +00:00
Kurt Zeilenga
f9690a37bb ITS#717 slapd kbind patch 2000-09-07 22:03:32 +00:00
Kurt Zeilenga
d463b3cab1 Add missing "disallow bind_anon" directive (ITS#721) 2000-09-07 17:53:05 +00:00
Kurt Zeilenga
89766f131e ITS#713 check_time_syntax suggested by klasen@zdv.uni-tuebingen.de
Portions Copyright 2000, Norbert Klasen, All rights reserved.
      This software is not subject to any license of
      Universitaet Tuebingen.

      This is free software; you can redistribute and use it
      under the same terms as OpenLDAP itself.
2000-09-06 19:17:33 +00:00
Kurt Zeilenga
d4a89d30f8 Minor IPv6 changes (ITS#716) suggested by Stig Venass <venaas@uninett.no> 2000-09-06 19:03:33 +00:00
Kurt Zeilenga
5a4f5e5c50 reuse dnMatch as uniqueMemberMatch 2000-09-05 22:07:08 +00:00
Kurt Zeilenga
a75a024fd3 Consistently don't require "entry" access (except on search) 2000-09-05 21:48:12 +00:00
Kurt Zeilenga
7e71a7f63b Add krb5-kdc to list 2000-09-05 20:24:44 +00:00
Kurt Zeilenga
99f4a10c3e Add hdb.schema from Luke Howard <lukeh@padl.com>, file renamed. 2000-09-05 20:23:12 +00:00
Kurt Zeilenga
f2bcf33e23 Use DN syntax routines for Name and Optional OID syntax.
This is quite bogus but meets most users needs.
Should be replaced with real Name and Optional OID routines.
2000-09-05 20:10:39 +00:00
Kurt Zeilenga
f97482e10f Fix authz bug introduced by last change 2000-09-05 19:45:06 +00:00
Kurt Zeilenga
7778304b16 Fix typo 2000-09-05 19:38:26 +00:00
Kurt Zeilenga
c8c969a184 Rework connection lock code to avoid unnecessary lock reaquire 2000-09-05 19:11:27 +00:00
Kurt Zeilenga
488189aed2 Fix SSF ACLs 2000-09-05 18:48:09 +00:00
Kurt Zeilenga
63ae1d22e5 Fix ACL SSF reporting 2000-09-05 18:24:24 +00:00
Dmitry Kovalev
04939b7aca documentation update. this reflects recent changes (redesign, referral and multiple objectclasses support, and other), and provides new (hopefully more clear ;) description of concept 2000-09-05 18:16:58 +00:00
Kurt Zeilenga
cee040a321 Bring UCdata infrastructure. 2000-09-03 23:48:35 +00:00
Kurt Zeilenga
91bdd84b96 Duplicate IA5 matching rule routines as needed to implement UTF-8 varients. 2000-09-03 18:04:08 +00:00
Kurt Zeilenga
179cd46266 ITS#705: nisNetgroupTripleValidate
ITS#706: bootParameterValidate
Submitted by Stig Venass <venaas@uninett.no>
Modified by Kurt Zeilenga <kurt@openldap.org> for stricter
	adherence to specification (RFC 2307).

Portions
Copyright 2000 Stig Venaas
All rights reserved.

Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice is
preserved. This software is provided ``as is'' without express or
implied warranty.
2000-09-03 17:35:39 +00:00
Kurt Zeilenga
309c458ed4 Experimental fix for deadlock 2000-09-02 00:19:06 +00:00
Randy Kunkee
58bb439d08 Raise MAXARGS to 200, since the schema syntax burns more. 2000-08-31 22:16:16 +00:00
Kurt Zeilenga
3058b0515d Don't publish version 2 if disallowed 2000-08-31 18:51:15 +00:00
Kurt Zeilenga
563fd083e9 reorder tests 2000-08-30 22:24:21 +00:00
Kurt Zeilenga
553a78e2ee Don't drain after TLS failure.... causes busy forever loop 2000-08-30 22:08:19 +00:00
Kurt Zeilenga
a60438c1ce Add sasl-host option and treat sasl-realm as global only
(ie: not backend specific).
2000-08-30 01:44:39 +00:00
Kurt Zeilenga
4e8973e6cb Rework bind restrictions 2000-08-28 23:37:44 +00:00
Kurt Zeilenga
102f12a71a Restrict bind 2000-08-28 23:29:29 +00:00
Kurt Zeilenga
90f0d9c85e Remove lint 2000-08-28 22:20:19 +00:00
Kurt Zeilenga
3e91d48127 Move authzid_backend to after restrictions checks 2000-08-28 21:28:22 +00:00
Kurt Zeilenga
4520cd4ec2 Align with man page 2000-08-28 19:19:47 +00:00
Kurt Zeilenga
9715e7f008 Add disallow and requires to man page. Fix sasl ssf handling bug. 2000-08-28 18:58:13 +00:00
Kurt Zeilenga
bf3df2f7a6 restrictops, requires, disallow knobs; ssf acls; and misc other changes
man pages to follow...
2000-08-28 18:38:48 +00:00
Kurt Zeilenga
08b52f80bb Fix alias deref success v. NoSuchObject bug 2000-08-27 17:53:01 +00:00
Kurt Zeilenga
b10a60c34a Provide a little information regarding contents of this directory 2000-08-26 20:25:36 +00:00
Kurt Zeilenga
8ef285f854 Misc schema clarifications 2000-08-26 20:24:52 +00:00
Kurt Zeilenga
4739a3015b Align with re20 2000-08-26 19:55:08 +00:00
Kurt Zeilenga
537704b540 Update void syntax and entry/children pseudo-attribute types
to have publishable OIDs.
2000-08-26 19:52:21 +00:00
Kurt Zeilenga
511e26641e Assign publishable OID for caseExactIA5SubstringsMatch 2000-08-26 18:49:50 +00:00
Kurt Zeilenga
2d3e998c3c Remove extended op callback function... doesn't provide necessary locking 2000-08-26 02:13:52 +00:00
Kurt Zeilenga
1c328aa9c7 Minor typedef and other clean ups 2000-08-26 01:14:05 +00:00
Kurt Zeilenga
a54b9cde6e Rework last commit for better forward compatibility 2000-08-25 07:55:08 +00:00
Kurt Zeilenga
be654e45f1 Remove meantion of authPassword from slappasswd(8) for 2.0.
Use -u scheme (in line with future code).
Need to trim authPassword from release schema code/confs.
2000-08-25 07:42:11 +00:00
Kurt Zeilenga
4b126ead58 Add "index objectClass eq"
Add additional comments.
Trim modules
2000-08-25 01:16:32 +00:00
Kurt Zeilenga
e8339f677c Add additional comments to note incomplete validation of syntaxes 2000-08-24 20:00:44 +00:00
Kurt Zeilenga
4a3b51e0da Add fake validators for nisNetgroupTriple and bootParameter syntaxes.
Note that real validators would likely break common usage as 'keystring'
is too limiting.
2000-08-24 19:54:16 +00:00
Kurt Zeilenga
60c474a4a0 ITS#681: Fix for problems with IPv6 and ACLs
from Stig Venaas <venaas@uninett.no>
---
Copyright 2000 Stig Venaas, UNINETT
All rights reserved.

Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice is
preserved. The name of UNINETT may not be used to endorse or promote
products derived from this software without specific prior written
permission. This software is provided ``as is'' without express or
implied warranty.
2000-08-24 18:34:48 +00:00
Kurt Zeilenga
7b548b4a91 Make settings match manual page. 2000-08-24 01:12:54 +00:00
Kurt Zeilenga
67ddc87e68 Fix substring any filters 2000-08-22 22:34:37 +00:00
Kurt Zeilenga
a7ec3506cf change "substr" to imply initial, any, final indexing. 2000-08-22 21:33:09 +00:00
Kurt Zeilenga
02f888c563 First cut of LDBM substrings indexing. Needs testing. 2000-08-22 21:26:25 +00:00
Kurt Zeilenga
32c7186b9c Add frontend support for "any" substrings assertions.
Needs to be tied into index mask and backend search code.
2000-08-22 02:23:52 +00:00
Kurt Zeilenga
4f43f8262e Remove extraneous ber_bvfree() 2000-08-22 02:07:32 +00:00
Kurt Zeilenga
f207bd9dd2 Fix uninitialized value ptr bug 2000-08-21 23:20:26 +00:00
Kurt Zeilenga
9de590cf26 Assign perm OID 2000-08-21 21:51:38 +00:00
Kurt Zeilenga
50643e5e73 Assign perm OIDs 2000-08-21 21:50:30 +00:00
Kurt Zeilenga
52223bd699 Use example.com in examples 2000-08-21 03:09:53 +00:00
Kurt Zeilenga
160ecea6b1 Fix callback check logic 2000-08-21 03:08:01 +00:00
Kurt Zeilenga
c9910bc19f Use SASL quiet mode 2000-08-21 03:06:55 +00:00
Kurt Zeilenga
a1cc95d558 Hide SASL behind HAVE_CYRUS_SASL 2000-08-19 18:47:32 +00:00
Mark Adamson
c7abc6310d Fix the logic for checking if backend DB has all necessary functions. 2000-08-18 16:58:46 +00:00
Kurt Zeilenga
5425a5e4c8 remove bdb2 cruft 2000-08-18 04:24:08 +00:00
Kurt Zeilenga
7800d2d41e Remove cldap cruft 2000-08-18 03:35:19 +00:00
Kurt Zeilenga
b1aed76e35 clarify error messages 2000-08-18 00:58:00 +00:00
Kurt Zeilenga
3c1f76d568 jpeg syntax should be using blobValidator. 2000-08-17 17:55:33 +00:00
Mark Adamson
4a5498351e Added SASL authentication to slurpd for connecting to slave LDAP servers. 2000-08-17 16:30:37 +00:00
Kurt Zeilenga
f286380c82 Check for IP using != AF_LOCAL instead of = AF_INET 2000-08-17 04:22:36 +00:00
Kurt Zeilenga
66bad2ad21 Add HAVE_CHROOT ifdef 2000-08-17 04:21:20 +00:00
Kurt Zeilenga
20a67a2dbc needs ldap_pvt.h 2000-08-17 04:20:12 +00:00
Howard Chu
0f8047b95e Implemented ldap_pvt_tls_get_peer() for use with SASL/EXTERNAL.
Added ldap_pvt_tls_get_strength() - return encryption strength, for
use as a SASL session security factor.
2000-08-16 23:27:41 +00:00
Kurt Zeilenga
df8c837c80 Fix typos 2000-08-15 23:42:44 +00:00
Kurt Zeilenga
146f9d7ddf Split a = b = c statement to remove warnings (errors) from picking compilers 2000-08-15 21:59:18 +00:00
Kurt Zeilenga
85b3f80869 Plug leaks. 2000-08-15 21:57:40 +00:00
Kurt Zeilenga
20248e7430 Move delete of last value check out of inner loop. 2000-08-15 21:57:28 +00:00
Dmitry Kovalev
f48f00f995 added missing SQL script to samples 2000-08-15 17:05:53 +00:00
Kurt Zeilenga
3b03b64b77 Add char* ldap_pvt_get_fqdn(char*) which returns the FQDN of the
input.  In input==NULL, returns FQDN of local host.
Fixed copy_hostent() uninitialized pointer bug.
Replaced gethostname calls with ldap_pvt_get_fqdn( NULL ) calls.
2000-08-15 01:55:43 +00:00
Kurt Zeilenga
a2804649a5 Fix reversed assertion logic 2000-08-11 19:25:09 +00:00
Kurt Zeilenga
27ebe8534a Move default slurpd directory to $(LOCALSTATEDIR)/openldap-slurp. 2000-08-10 02:52:01 +00:00
Kurt Zeilenga
6be4f4fdb2 remove assert(0) 2000-08-07 17:19:55 +00:00
Kurt Zeilenga
5b856458a2 s/SAFEMEMCPY/AC_MEMCPY/
Use AC_FMEMCPY where appropriate (-llber)
2000-07-28 01:07:07 +00:00
Kurt Zeilenga
a50f391bb3 Working SASL security layers! 2000-07-28 00:04:07 +00:00
Kurt Zeilenga
9a0964174e Update named referrals to draft-zeilenga-ldap-namedref.txt
(IETF namedref draft is now defunct)
2000-07-27 20:18:05 +00:00
Kurt Zeilenga
5a546c93a3 Add ''work in progress'' comment 2000-07-27 20:17:26 +00:00
Kurt Zeilenga
b213ce3a69 Remove cruft 2000-07-27 20:12:16 +00:00
Kurt Zeilenga
7ba63f5ea7 Fix up schema per ITS#642 2000-07-27 20:11:41 +00:00
Kurt Zeilenga
c86a1aaac2 Remove dead comment 2000-07-27 18:40:50 +00:00
Kurt Zeilenga
9e37451421 Fix typo 2000-07-27 01:10:51 +00:00
Kurt Zeilenga
948f31cd85 s/METAPHONE/SLAPD_METAPHONE/ 2000-07-27 00:14:39 +00:00
Kurt Zeilenga
f1d0813562 Clean up at_find 2000-07-26 23:18:49 +00:00
Kurt Zeilenga
57deefc94f Working slapindex! 2000-07-26 19:48:02 +00:00
Kurt Zeilenga
3a1ff6f9c7 Remove old kruft. 2000-07-26 17:23:07 +00:00
Kurt Zeilenga
efb7672dde Do not log attribute value 2000-07-25 20:54:11 +00:00
Kurt Zeilenga
3ad45a0662 Clean up WSAENOTSOCK code (no functional change) 2000-07-25 20:04:23 +00:00
Mark Valence
45fdcb7163 Bug fix submitted by Anthony Brock (ITS#637) 2000-07-25 02:16:59 +00:00
Kurt Zeilenga
b0a01cfbc2 ITS#636, keys == NULL bug
plus plug leak when keys != NULL
2000-07-25 01:24:47 +00:00
Kurt Zeilenga
a71a7cdd98 Rework authorization handling such that authzid u:user gets mapped to
authzdn uid=user.  Disallow authzid in DN form until we have a
validator.
2000-07-24 23:05:45 +00:00
Kurt Zeilenga
f80127f097 Ignore missing associated matching rule for now 2000-07-24 21:40:58 +00:00
Kurt Zeilenga
6c41d272cf Update framework to support registration of approximate matching
rules.
2000-07-24 21:29:30 +00:00
Kurt Zeilenga
e0e314db88 Update based upon latest AuthPassword I-D 2000-07-24 21:28:52 +00:00
Randy Kunkee
af0ec07692 Prevent always overwriting slapd.conf in install-conf rule. 2000-07-24 20:48:53 +00:00
Kurt Zeilenga
e7e7bca4c0 Fix typo 2000-07-23 21:22:19 +00:00
Kurt Zeilenga
3a73af57c1 conform schema routines to ldap naming conventions 2000-07-22 17:30:44 +00:00
Kurt Zeilenga
cd5aed0bbe Use sigaction to set SA_RESTART (if appropriate).
Portability of this code needs to tested.
2000-07-22 00:37:51 +00:00
Kurt Zeilenga
5b4fd50db6 No need to include <ac/signal.h> twice 2000-07-21 23:34:13 +00:00
Kurt Zeilenga
33cb84f57c Add experimental reindexer. 2000-07-21 23:24:24 +00:00
Kurt Zeilenga
27f674a926 Share function declarations between varients 2000-07-21 22:47:46 +00:00
Kurt Zeilenga
19324c4292 Remove lint 2000-07-21 21:56:33 +00:00
Kurt Zeilenga
3cada60a1b Plug a couple of minor memory leaks 2000-07-21 17:25:41 +00:00
Kurt Zeilenga
7cb1176502 Plug memory leak of normalized value in value_find() 2000-07-20 23:56:12 +00:00
Kurt Zeilenga
2890bc5b6d Fix entry/children always allowed bug! 2000-07-20 22:52:44 +00:00
Kurt Zeilenga
804100b431 Fix sasl end game processing. 2000-07-20 18:39:40 +00:00
Kurt Zeilenga
a8521d3034 Fix mech==NULL bug 2000-07-20 01:04:34 +00:00
Randy Kunkee
1228f6defc Move indented #defines to lh-column -- OSF4.0e does not allow the '#' to
be indented.  Use "#<tab>define" instead.
2000-07-19 10:04:09 +00:00
Kurt Zeilenga
ce63e21f00 New slapindex framework (no meat) 2000-07-19 02:24:08 +00:00
Randy Kunkee
46ca9103b6 Fix MAXARGS boundary condition problem: slapd crashed if number of tokens
parsed == MAXARGS (only applicable if you have really large objectclasses).
2000-07-19 01:40:05 +00:00
Kurt Zeilenga
c0bbb090b7 Fix substring indices and enable in tests. 2000-07-18 22:59:34 +00:00
Kurt Zeilenga
9c5ad6291b Add experimental caseExact/Ignore substrings indexer/filter routines. 2000-07-18 17:46:34 +00:00
Kurt Zeilenga
3c91b7e05a Clarify message logged upon host_access() failure 2000-07-18 03:12:55 +00:00
Kurt Zeilenga
95eea5accc First cut SASL "interactive" and "quiet" modes (default is "automatic") 2000-07-17 00:56:29 +00:00
Kurt Zeilenga
d2b05a3858 Rework SASL command line arguments. Default is now to authenticate
using best available mechanism.  (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.
2000-07-15 23:25:46 +00:00
Kurt Zeilenga
a6154d03f2 Misc cleanup 2000-07-15 00:45:31 +00:00
Kurt Zeilenga
5bca08d716 Store sasl callbacks in session handle so that they can properly freed. 2000-07-15 00:01:09 +00:00
Kurt Zeilenga
c8ca70f3ae Fix callbacks. 2000-07-14 22:00:16 +00:00
Kurt Zeilenga
1e3aa01b7b Fix SSF reporting. 2000-07-14 20:57:52 +00:00
Kurt Zeilenga
36fb2d9d78 rework SASL callbacks 2000-07-14 20:56:30 +00:00
Kurt Zeilenga
14859793d0 Add logging support 2000-07-14 04:35:36 +00:00
Kurt Zeilenga
85c2a7a2a8 Update NT build to include recently added SASL sources. 2000-07-13 23:43:24 +00:00
Kurt Zeilenga
5fc22599e2 Update SASL code to reuse context through life of session.
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters
2000-07-13 22:54:38 +00:00
Julio Sánchez Fernández
3fa223ad59 Oops, hope this gets it right 2000-07-12 20:15:38 +00:00
Julio Sánchez Fernández
e1b50dbf56 QUIPU cleaning removed necessary tool install logic 2000-07-12 19:59:58 +00:00
Kurt Zeilenga
1f1993989a s/enable-unix/enable-local/
s/LDAP_PF_UNIX/LDAP_PF_LOCAL/
s/AF_UNIX/AF_LOCAL/
s/PF_UNIX/PF_LOCAL/
2000-07-09 21:49:36 +00:00
Kurt Zeilenga
489fd210df Change reporting of SASL username 2000-07-06 01:22:42 +00:00
Kurt Zeilenga
5c4cef793f Fix error handling 2000-07-05 22:15:43 +00:00
Kurt Zeilenga
51cef9dbed Return last step output in final response.
And some code cleanup.
2000-07-05 21:43:11 +00:00
Kurt Zeilenga
8484d2c757 Remove lint 2000-07-05 21:03:57 +00:00
Randy Kunkee
df2af6bf47 Only process back-* subdirectories that have a Makefile. 2000-07-05 17:05:42 +00:00
Kurt Zeilenga
d7c4b4c4e7 Fix leak pointed out by christian.lorenz@suse.de (ITS#614) 2000-07-04 20:27:59 +00:00
Mark Valence
d4d03e36e5 Added "threads" config to slapd.conf. 2000-07-04 19:24:13 +00:00
Kurt Zeilenga
2eb664f481 Add octetString syntax to undefined attribute type 2000-07-02 17:50:18 +00:00
Kurt Zeilenga
b1172dc5ac Add experimental support for undefined attribute types. 2000-07-02 17:16:18 +00:00
Kurt Zeilenga
7ec41919ff Rename escape_value to filter_escape_value 2000-07-02 17:14:37 +00:00
Kurt Zeilenga
5594efabc0 Provide caseExactIA5SubstringsMatch using OpenLDAP OID 2000-07-02 16:36:21 +00:00
Kurt Zeilenga
b21ba52482 Clarify ad_type usage 2000-07-02 08:06:55 +00:00
Mark Valence
bf1c91b165 Fix seg fault (test003). 2000-07-02 07:18:55 +00:00
Kurt Zeilenga
1566454e6e Add sets to NT build, remove LINT 2000-07-01 04:58:23 +00:00
Kurt Zeilenga
af611de371 Escape filter strings 2000-07-01 04:57:54 +00:00
Kurt Zeilenga
b6f7392865 Fix typos 2000-06-30 21:57:29 +00:00
Kurt Zeilenga
2ece0ee378 s/SUBSTRINGS/SUBSTR/ 2000-06-30 21:26:43 +00:00
Mark Valence
517fa54bb0 Fix aci link error. 2000-06-30 18:04:10 +00:00
Kurt Zeilenga
1f1f8849eb Quick fix to aci link error 2000-06-30 17:09:52 +00:00
Kurt Zeilenga
1a20c9a582 Skip over unsupported tags 2000-06-30 17:09:26 +00:00
Kurt Zeilenga
854b6d1839 genTime: Move validate above normalizer 2000-06-30 02:18:58 +00:00
Mark Valence
3705a26f2d Add support for Set ACLs and ACIs. Still need to make this syntax awa
re.
2000-06-29 22:02:15 +00:00
Dmitry Kovalev
6078008495 minor fix (eliminate warnings) 2000-06-29 21:54:31 +00:00
Mark Valence
4b1ff75bdd Prepare for Set ACLs and ACIs. 2000-06-29 21:41:54 +00:00
Dmitry Kovalev
e90ef57645 changes for 2.0-beta
including:
- fixes according to new API changes
- closing db connection in connection_destroy callback, not unbind
- support of new schema code, samples changed accordingly
- support for multiple objectclasses (to distinguish from unique objectclass-to-tables mapping)
- auto 'ref' attribute support
- samples now include illustrations of using these 2 features to make named referrals as described in ldapext-namedref draft

more to come:
- documentation update
- different improvements to be more close to native directory (after beta?)
2000-06-29 21:14:43 +00:00
Kurt Zeilenga
8d4ec58151 Initial, very unforgiving, booleanValidate and booleanMatch. 2000-06-29 19:00:17 +00:00
Mark Valence
16f2a29c23 Fix negated tests in IA5StringNormalize and numericStringNormalize. 2000-06-28 05:29:09 +00:00
Mark Valence
11ccf96104 Updated attribute routine to pass back bervals. 2000-06-28 05:26:17 +00:00
Kurt Zeilenga
664fabdf4c Update matching rule usage 2000-06-26 17:54:45 +00:00
Kurt Zeilenga
064d6aae65 Reverse SASL mechanism restriction #ifdef 2000-06-26 05:29:37 +00:00
Kurt Zeilenga
8670bb6ba2 Add missing sockerr call 2000-06-26 05:23:33 +00:00
Kurt Zeilenga
3112f21612 Add attribute type/matching rule support for structuralObjectClass attribute
type.  Add type to core.schema.  Not yet populated on add nor checked on modify.
2000-06-26 05:13:41 +00:00
Kurt Zeilenga
a34c40915b Ripe out Kbind 2000-06-26 01:23:00 +00:00
Kurt Zeilenga
317d04a5d9 Modify backend_attribute to return bervals and adjust ACLs
(actually, ACL here might be dangerous)
2000-06-26 01:22:32 +00:00
Kurt Zeilenga
7ced460520 Update slurpd to use LDAPv3 w/ ManageDSAit
Remove slurpd kbind support as this requires LDAPv2
Backout back-ldbm/referrals.c update_ndn hack
2000-06-25 22:45:28 +00:00
Kurt Zeilenga
e2fa599482 Move old files to the Attic 2000-06-25 22:01:42 +00:00
Kurt Zeilenga
07c7d3c3cb QUIPU -> Attic 2000-06-25 21:40:13 +00:00
Kurt Zeilenga
acb451a031 Return unwillingToPerform for step 2 kerberos bind. 2000-06-25 20:39:34 +00:00
Kurt Zeilenga
6020fe58e8 Modified slapd to be slurpd friendly.
Slurpd incorrectly sends a separate attribute for each value of an
	attribute which caused slapd to complain.  Hacked slapd/add.c
	to merge values.
	Slurpd uses version 2 and hence cannot set ManageDSAit.  Hack
	slapd/back-ldbm/referral.c such that if update_ndn matches
	o_ndn, no referrals are returned.
Fix replication tests
	ldapmodify must be made against master as no rebind proc exists
	final ldapsearch should not chase
Fix referral tests
	Use -C option as needed
2000-06-25 20:07:40 +00:00
Kurt Zeilenga
5f20cf1ed5 Modify ldapsearch(1) significantly. Now handles LDAPv3 search
references, extended results, and extended partial results.  LDIF
extended to support these new features and reported version 2.
-L now limits output to LDIFv1 for compatibility reasons.  No
-L is now LDIFv2.  Old alternative form is no longer supported.

Use LDAP_TMPDIR (in ldap_config.h) instead of hardcoded /tmp
Use LDAP_FILE_URI_PREFIX (in ldap_config.h) instead of hardcoded
	file://tmp/
2000-06-25 00:35:17 +00:00
Kurt Zeilenga
49f4147385 Added -llber 'N' ber_printf format which inserts a NULL if
an internal flag set.  Used for SEQUENCE testing.  Flag must
be set using debugger.  Modified ber_printf to use new format
were needed for extensibility testing.

Added first cut -lldap support for extended responses.
Modified ldapsearch(1) to handle v3 search references when not
chasing.  Also added extended/unsolicited notification handling
and extended partial response handling.  Changes include a
number of LDIF enhancements.

Fixed getpassphrase() returns NULL bugs
2000-06-24 01:40:39 +00:00
Kurt Zeilenga
ae63be3894 DirectoryString syntaxes must have one or more octets to be valid. 2000-06-23 23:57:53 +00:00
Mark Valence
df460af05e Add attribute.c to project. 2000-06-23 20:24:13 +00:00
Mark Valence
c6ad81bcd2 Fix minor bug in handling group ACLs. 2000-06-21 19:07:56 +00:00
Mark Valence
acc740d54f Add ldap_back_attribute to ldap backend 2000-06-21 18:23:38 +00:00
Mark Valence
3b7d356820 Added attribute.c 2000-06-21 17:46:15 +00:00
Mark Valence
51bd73ce7d New backend routine: back_attribute 2000-06-21 17:41:49 +00:00
Mark Valence
295f3ba0aa New backend routine: back_attribute 2000-06-21 17:23:24 +00:00
Kurt Zeilenga
b065b258f4 Prepare for additional schema routines. 2000-06-21 01:12:29 +00:00
Kurt Zeilenga
d19419392c Use ASCII_*() macros and friends. Should be combined with similiar LDAP_*()
macros in ldap_pvt.h.
2000-06-20 17:05:15 +00:00
Kurt Zeilenga
2c7f89b1b2 remove locale option. OpenLDAP is designed only for the "C" locale. 2000-06-20 16:55:23 +00:00
Kurt Zeilenga
01f7e78cbb Add experimental objectIdentifierFirstComponentMatch routine 2000-06-20 03:55:40 +00:00
Kurt Zeilenga
f35942799e Use SLAPD_COMPARE_UNDEFINED 2000-06-20 03:54:50 +00:00
Kurt Zeilenga
4e3c32d816 Introduce LDAP_V() and friends 2000-06-20 03:53:12 +00:00
Kurt Zeilenga
bec9e6aa8a Update OpenLDAP experimental schema 2000-06-20 03:15:48 +00:00
Kurt Zeilenga
1f0e50f285 Fix minor bugs 2000-06-20 02:46:45 +00:00
Mark Valence
463cc5479f Update some prototype macros to build on NT. 2000-06-19 22:40:42 +00:00
Kurt Zeilenga
5c9cf0eb71 Clarify normalization/matching routine recycling 2000-06-19 21:30:18 +00:00
Kurt Zeilenga
aa6ed3d4d8 Fix typo in last commit 2000-06-19 20:54:54 +00:00
Kurt Zeilenga
3bacb800d4 unrecognized objectIdentifer in desc form shall result in
an undefined matched.  unrecognized objectIdentifer in OID form
shall result in false match.
2000-06-19 20:53:56 +00:00
Kurt Zeilenga
665272dca1 Minor adjustments to substrings searching 2000-06-19 20:39:11 +00:00
Kurt Zeilenga
7fec5877a3 Add SLAPD_TOP_OID macro for oc.c 2000-06-19 16:15:33 +00:00
Kurt Zeilenga
4b58e3b88d Add schema checks. 2000-06-19 16:14:36 +00:00
Kurt Zeilenga
11ac0330bb Extend objectClassMatch to return true if asserted class is a
subclass of stored value.
2000-06-19 16:14:12 +00:00
Kurt Zeilenga
8ce2589505 Fix is_object_subclass and implicitly add 'top' to structural
object classes with a superior.
2000-06-19 16:12:57 +00:00
Kurt Zeilenga
eccc217c53 Add DESC and fix minor bugs, more changes to come 2000-06-19 16:11:27 +00:00
Kurt Zeilenga
9ef1a740c2 Round one of LDAP_F() macro changes. In this round we rename
macros into our namespace and limit use to headers.  A subsequent
round will add macros to separately handle forward declarations
of variables from declaration of function prototypes.  The last
round will add additional macros for declaring actual variables and
functions.
2000-06-18 19:48:07 +00:00
Kurt Zeilenga
c4febe2db7 Add references to slappasswd(8) 2000-06-18 19:38:01 +00:00
Kurt Zeilenga
4bfda48c20 Add referral.c 2000-06-17 20:38:07 +00:00
Mark Valence
3a31fead5e Fixed paren nesting bug, separated convoluted conditionals, added comm
ents about the logic.
2000-06-17 18:23:27 +00:00
Mark Valence
638371ebe7 Fix uninitialized variable. 2000-06-17 08:20:44 +00:00
Kurt Zeilenga
189b738c63 Add LDBM referral handler... 2000-06-17 07:45:40 +00:00
Kurt Zeilenga
97137ca016 Add scope to debug message 2000-06-17 05:53:23 +00:00
Kurt Zeilenga
ef1664b013 Reimplement search_candidate support for scope, referrals, and aliases.
Uses auto/static storage to avoid unnecessary malloc/free calls.
2000-06-17 05:01:50 +00:00
Kurt Zeilenga
bfbe3e49ee Fix aliasing. 2000-06-17 02:00:30 +00:00
Kurt Zeilenga
152ec5c4ed Remove broken num subordinates code. 2000-06-17 01:22:55 +00:00
Kurt Zeilenga
73b9ffc3e5 Add referral generator 2000-06-16 19:10:43 +00:00
Kurt Zeilenga
09e087c8e5 Duplicate language tag to avoid double free 2000-06-16 16:05:37 +00:00
Kurt Zeilenga
c249b16679 Remove dead code 2000-06-16 06:42:34 +00:00
Kurt Zeilenga
c332df50de Remove unnecessary arg from front end backend_check_referrals call 2000-06-16 04:07:57 +00:00
Kurt Zeilenga
74f77cfe11 Compare w/ ManageDSAit not implemented. 2000-06-16 03:54:52 +00:00
Kurt Zeilenga
da74650afc Also eliminated by dnssrv referral.c code 2000-06-16 03:52:28 +00:00
Kurt Zeilenga
5e04ed8cfd Remove files no longer needed (due to referral entry point) 2000-06-16 03:51:45 +00:00
Kurt Zeilenga
79ebfbc4fe Rework referral entry point with DNS SRV implementation (needs testing). 2000-06-16 03:50:02 +00:00
Kurt Zeilenga
a3414536a4 Add backend_check_referrals() framework. 2000-06-16 01:46:42 +00:00
Kurt Zeilenga
6f378341a2 Add backend_check_referrals() framework. 2000-06-16 01:19:30 +00:00
Kurt Zeilenga
5ab454ac77 Minor adjustments to last commit 2000-06-15 22:53:18 +00:00
Kurt Zeilenga
90e4c08751 Add logic to properly (per X.500 recommendations) handle attribute
types without equality matching rules.
2000-06-15 22:06:45 +00:00
Kurt Zeilenga
178dc1b708 Treat all phone number syntaxes as numericString 2000-06-15 20:33:56 +00:00
Kurt Zeilenga
d1fd2436da Treat telephone syntax as numeric 2000-06-15 20:14:01 +00:00
Kurt Zeilenga
aa10d362b7 fix substring match bugs 2000-06-15 19:56:51 +00:00
Kurt Zeilenga
07907dda8b Repair case{Ignore,Exact}IA5SubstringsMatch 2000-06-15 19:32:24 +00:00
Mark Valence
93a622d5e1 Use the first empty slot in the open cache table, so scan doesn't (usu
ally) have to look through the entire table.
2000-06-15 17:48:16 +00:00
Kurt Zeilenga
1ae21d00f1 Fix alias dn_in v. dn bug 2000-06-15 17:37:02 +00:00
Kurt Zeilenga
45f4839578 Fix initialization bug 2000-06-15 17:12:53 +00:00
Kurt Zeilenga
8cb40e89d9 Fix slappasswd 2000-06-15 16:09:36 +00:00
Mark Valence
3888bac4bf Added Generalized Time matching and ordering (it's just caseExactIA5Ma
tch).  Set OpenLDAP Experimental ACI syntax validation to IA5StringVal
idate for now, to facilitate testing.
2000-06-15 08:34:48 +00:00
Mark Valence
7211daa837 Fixed whitespace prefix checks. Added UTC Time and Generalized Time s
yntax validation and normalization routines.
2000-06-15 07:58:04 +00:00
Mark Valence
9c7127cd81 Check if process is installed/running as service on NT beofre trying t
o start it as a service (gets around an annoying pause when starting u
p as a non-service).
2000-06-15 02:21:01 +00:00
Kurt Zeilenga
f770dc16ab cond_*() routines: Pass pointer to Datum, not Datum. Probably
should be done for all of LDBM.
2000-06-14 23:48:13 +00:00
Kurt Zeilenga
4189b89d7a Forgot continuation key prefix 2000-06-14 23:28:52 +00:00
Mark Valence
ba044208a6 Bug fix. 2000-06-14 23:28:28 +00:00
Mark Valence
7694c22528 Fix OC check. 2000-06-14 22:21:53 +00:00
Mark Valence
0c6b9ce2dd Fix ACI group membership test to look up OC. 2000-06-14 22:17:33 +00:00
Mark Valence
2ee8093f98 Fix ACI group membership test to look up OC. 2000-06-14 22:11:44 +00:00
Kurt Zeilenga
b7d1b10bca Minor cleanup 2000-06-14 21:11:56 +00:00
Mark Valence
89da861b89 Bug hunting -- various problems with opening caches. 2000-06-14 18:23:43 +00:00
Mark Valence
0ebf86f2d3 Bug hunting -- hang when checking dnattr in ACL. 2000-06-14 06:08:20 +00:00
Mark Valence
6a43d24f48 Bug hunting -- crash when doing substring match. 2000-06-14 06:07:06 +00:00
Mark Valence
d91dba4ad0 Bug fix in dn_rdn when dn string begins with whitespace. 2000-06-14 03:59:19 +00:00
Kurt Zeilenga
df4b2a443e Fix addition of dynamic operational attributes (subschemaSubentry) 2000-06-13 17:48:51 +00:00
Kurt Zeilenga
7150c22fca ITS#590: remove extra symbol 2000-06-13 17:24:18 +00:00
Kurt Zeilenga
ec426532b2 Reworked thread code to better support thread-library specific
r/w locks and thread pools.  Hide internal structures (using
pthread'ish technics).  Place common code in threads.c.  Move
no-thread code to thr_stub.c.  Move thread pool code to tpool.c.
Removed setconcurrency call from initializer, added 'concurrency'
directive to slapd.  Tested code under pthreads, pth, and no-threads.
2000-06-13 02:42:13 +00:00
Mark Valence
1bfcb4b039 Added .regex, .base, .one, .subtree, and .children "style" modifiers. 2000-06-12 01:35:15 +00:00
Kurt Zeilenga
1ef14875db Thought I fixed these errors previously... oh well. 2000-06-10 23:06:08 +00:00
Kurt Zeilenga
a56c161bdb Misc code cleanup. 2000-06-10 22:39:30 +00:00
Mark Valence
3cad129608 Removed active_threads count and associated mutex/cond. Replaced with
ldap_pvt_thread_pool_backload() as needed.  All tests run OK on pthre
ads (linux), cthreads, NT threads, and Pth.
2000-06-10 06:40:03 +00:00
Mark Valence
b55346e3f3 Fix make install when build dir is not main ldap dir. 2000-06-10 02:06:27 +00:00
Mark Valence
e8f1dc6906 Add ldap_back_group routine. 2000-06-10 01:32:36 +00:00
Kurt Zeilenga
55dba4395f Update PF_INET6 and PF_UNIX detection, both default to auto 2000-06-09 23:09:51 +00:00
Kurt Zeilenga
ef89854944 ITS#576: cause subdir make failure to halt subsequent making 2000-06-09 17:42:40 +00:00
Kurt Zeilenga
140a579e32 Additional IPv6 changes from Stig Venaas
Copyright 2000 Stig Venaas, UNINETT
All rights reserved.

Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice is
preserved. The name of UNINETT may not be used to endorse or promote
products derived from this software without specific prior written
permission. This software is provided ``as is'' without express or
implied warranty.
2000-06-09 17:00:22 +00:00
Kurt Zeilenga
9e23dc2c81 Fix dependencies 2000-06-09 15:03:04 +00:00
Kurt Zeilenga
dc1e5a9392 remove IA64 lint 2000-06-09 06:24:10 +00:00
Kurt Zeilenga
cd23b57eee Already in core (damn) 2000-06-09 02:29:50 +00:00
Kurt Zeilenga
1d8cbe45e8 Add RFC 2589 schema 2000-06-09 02:29:00 +00:00
Kurt Zeilenga
bb9d8a0f20 Initialize peername with EOS. 2000-06-08 23:12:52 +00:00
Kurt Zeilenga
1f7c26e4ee First cut new schema support.
Back-shell still doesn't support binary data, should use -lldif routines
2000-06-08 18:38:17 +00:00
Kurt Zeilenga
fad62c5d1d Remove lint 2000-06-08 18:36:37 +00:00
Kurt Zeilenga
88848d3aea ~ NULL was a bad idea. 2000-06-08 03:12:14 +00:00
Kurt Zeilenga
61be4bd0c8 remove pointer v. int lint from ber_sockbuf_ctrl. 2000-06-08 01:08:01 +00:00
Mark Valence
7ec6a4363f Use thread pool for operation threads. 2000-06-07 19:27:33 +00:00
Kurt Zeilenga
60d6c13d73 Use ldap_pvt_url_scheme2tls() to test for ldaps:// 2000-06-07 17:50:58 +00:00
Mark Valence
185641cb12 ldap_is_ldaps_url takes a char *. Is there a better fix, since the ur
l is already parsed?
2000-06-07 17:28:01 +00:00
Kurt Zeilenga
13ddec656f fix up stats/debug messages 2000-06-07 14:18:09 +00:00
Kurt Zeilenga
c3f8de76ef Fix up debug statement as suggested by christian.lorenz@suse.de 2000-06-07 14:07:50 +00:00
Kurt Zeilenga
6ad1c45bd3 Use LDAP_VFREE and friends. Other misc code cleanup. 2000-06-07 05:17:29 +00:00
Kurt Zeilenga
e5ebc553ac Rework URI parser to provide true scheme not proto/properties.
Plus more pthread rwlock code
2000-06-07 01:09:40 +00:00
Kurt Zeilenga
64d7227821 Basic IPv6 support...
Copyright 2000 Stig Venaas, UNINETT
All rights reserved.

Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice is
preserved. The name of UNINETT may not be used to endorse or promote
products derived from this software without specific prior written
permission. This software is provided ``as is'' without express or
implied warranty.
2000-06-06 20:23:22 +00:00
Kurt Zeilenga
73db6bd875 Cleanup slapd.conf sed'ing 2000-06-06 20:21:56 +00:00
Kurt Zeilenga
a00125b53e Axe old schema files 2000-06-06 19:48:06 +00:00
Kurt Zeilenga
693fb9424a unifdef -DSLAPD_SCHEMA_NOT_COMPAT -USLAPD_SCHEMA_COMPAT 2000-06-06 19:43:18 +00:00
Kurt Zeilenga
dd00feb04d Add presense indexing 2000-06-06 19:32:15 +00:00
Kurt Zeilenga
6d542e26a5 remove init arg from attrs_index_config proto 2000-06-06 19:31:45 +00:00
Kurt Zeilenga
352b447aa4 Don't automatically index objectlclass eq, ineffective more than not 2000-06-06 19:30:49 +00:00
Kurt Zeilenga
10082bc346 Use err2txt for unknown error 2000-06-06 05:54:36 +00:00
Mark Valence
78f24c1d89 Fix memory leak in new schema code. 2000-06-06 05:21:14 +00:00
Kurt Zeilenga
43f3e1e9b2 Remove not to be implemented control. 2000-06-06 04:50:24 +00:00
Kurt Zeilenga
3e9868b4ec Prepare for unifdef -DSLAPD_SCHEMA_NOT_COMPAT 2000-06-06 04:49:19 +00:00
Mark Valence
a5ee438c93 Updated for schemas. 2000-06-06 04:24:11 +00:00
Kurt Zeilenga
bf3c642e68 Complete group ACL impl. under new schema code 2000-06-06 02:11:27 +00:00
Kurt Zeilenga
5278e67b28 Remove lint 2000-06-06 02:11:01 +00:00
Kurt Zeilenga
4a1f646682 Move experimental Back-BDB2 to Attic 2000-06-06 01:23:17 +00:00
Kurt Zeilenga
1af849c720 DNSSRV use res_query, not res_search
Update configure and depend --enable-dnssrv upon finding res_query
Update back-dnssrv to better handle ManageDSAit control
2000-06-05 23:56:26 +00:00
Kurt Zeilenga
1aa4b07c98 Remove support for DNS DNs (not to be confused with X.500 DN using
domainComponents (DC)).
2000-06-05 20:07:02 +00:00
Kurt Zeilenga
ca6de2138e Include core.schema, not old schema files 2000-06-05 17:47:15 +00:00
Kurt Zeilenga
09806eec40 Use #ifdef, not #if 2000-06-05 16:18:48 +00:00
Kurt Zeilenga
e4a9292d74 A simple (and correct) backend group selection. 2000-06-05 07:38:23 +00:00
Kurt Zeilenga
c81cc806ab Move old schema files to Attic.
SLAPD_SCHEMA_COMPAT *should* be able to use schema files
2000-06-05 07:17:51 +00:00
Mark Valence
08f8cecddc Fix broken non-schema build (var not defined). 2000-06-05 06:00:15 +00:00
Mark Valence
7401eddb02 Keep from ldbm_sync'ing a DBCache unless it has been changed. 2000-06-05 05:10:30 +00:00
Mark Valence
3d599d1bd3 Use "uri" directive (instead of "server") to specify server. Add "bin
ddn" and "bindpw" directives for supporting group lookups.
2000-06-05 04:59:26 +00:00
Mark Valence
96c61ea465 backend_group selects the correct backend for the group. 2000-06-05 04:34:59 +00:00
Kurt Zeilenga
51e619d424 Add ManageDSAit support to back-dnssrv
Fix backend critical controls crash
Move 'associatedDomain' to core.schema
2000-06-05 03:10:46 +00:00
Mark Valence
bd7c946ccc Update to work with schemas (SLAPD_SCHEMA_NOT_COMPAT=1) 2000-06-04 23:02:19 +00:00
Kurt Zeilenga
ea069cb7c2 New indexer/filter codes (test suite works) with cheats
Updated NT Project files (with Cyrus SASL library depend)
2000-06-04 22:59:38 +00:00
Mark Valence
f8c1bc5ccb Fix parameter order error. 2000-06-04 22:59:34 +00:00
Mark Valence
6916d0d527 Fix memory leak. 2000-06-04 22:59:06 +00:00
Mark Valence
47888f1c6b Bug fix. 2000-06-04 04:34:21 +00:00
Mark Valence
bac87c2562 Bug fix for new sockbuf code under NT. Added mutex protection against
deadlock in connection_resched.
2000-06-04 04:29:07 +00:00
Kurt Zeilenga
b05d071c3a Fix anonymous mapping 2000-06-03 16:29:34 +00:00
Kurt Zeilenga
4b352c57ed Raise MAXDBCACHE to 128. 2000-06-03 03:37:02 +00:00
Kurt Zeilenga
45c6324a9d Move ldapd into the Attic, quipu tools remain for now. 2000-06-01 23:00:22 +00:00
Kurt Zeilenga
c23536faa9 remove lint 2000-06-01 22:01:00 +00:00
Kurt Zeilenga
2e0912622b ITS#537: lber io rewrite from Gambor Gombas.
Copyright 2000 Gábor Gombás. All rights reserved.
This is free software. You may redistribute and use it under the same
terms as OpenLDAP itself.
2000-06-01 20:59:21 +00:00
Kurt Zeilenga
a3ee061fdc Install *.schema only
Install *.schema as read-only
2000-06-01 15:27:10 +00:00
Kurt Zeilenga
7c7fab11d4 Add extensibleObject support 2000-05-31 18:46:13 +00:00
Kurt Zeilenga
14663e1733 Add project public directory schema 2000-05-31 00:47:40 +00:00
Kurt Zeilenga
cd4c2c06d3 Move schema needed by slapd to core.schema so that only one file
is required to be included.
This leaves openldap.schema empty.  Will use it to hold example
schema from the OpenLDAP Public Directory.
2000-05-31 00:13:10 +00:00
Kurt Zeilenga
eb70b602ee Rework ACI codes to use OpenLDAPaci. Add needed schema elements.
Needs work.  Volunteers welcomed.
2000-05-30 21:34:55 +00:00
Kurt Zeilenga
773d839924 Clean up 'ref' DESC 2000-05-30 20:20:25 +00:00
Kurt Zeilenga
34edec3107 Strip installed executables
better library clean
2000-05-30 18:23:56 +00:00
Kurt Zeilenga
64f028a6ab New schema code is now the default.
Use -DSLAPD_SCHEMA_COMPAT to use 1.x compatible schema (deprecated).
2000-05-29 16:39:16 +00:00
Kurt Zeilenga
6ec3f1438a Update directory comment 2000-05-29 05:54:36 +00:00
Kurt Zeilenga
c70cb72ef9 install $(localstatedir)/openldap-ldbm with mode 700 2000-05-29 05:51:24 +00:00
Kurt Zeilenga
e45979599d Add NumericString syntax and matching rules. 2000-05-29 04:58:40 +00:00
Kurt Zeilenga
e4a7b953f3 SLAPD_SCHEMA_NOT_COMPAT: fix typo 2000-05-29 04:57:31 +00:00
Kurt Zeilenga
bdf9b0d017 SLAPD_SCHEMA_NOT_COMPAT: working ACLs! (have not tested ACIs) 2000-05-29 03:51:26 +00:00
Kurt Zeilenga
9e5312e166 SLAPD_SCHEMA_NOT_COMPAT: ACL cleanup (not yet working) 2000-05-29 03:44:06 +00:00
Kurt Zeilenga
287de3517d SLAPD_SCHEMA_NOT_COMPAT: working tests 1-4! 2000-05-29 01:08:09 +00:00
Kurt Zeilenga
e31e42374e SLAPD_SCHEMA_NOT_COMPAT: cheap DN match 2000-05-29 00:27:49 +00:00
Kurt Zeilenga
30c43c307c SLAPD_SCHEMA_NOT_COMPAT: working modify? need additional match
routines, such as distinguishedNameMatch, to be sure.
2000-05-28 23:51:39 +00:00
Julio Sánchez Fernández
3e3acf87c8 Let the caller decide how liberal the schema parsing routines will be.
Most flags do nothing yet.
2000-05-28 22:45:56 +00:00
Kurt Zeilenga
13daacdbda Fix error text handling 2000-05-28 22:38:21 +00:00
Kurt Zeilenga
3350957674 SLAPD_SCHEMA_NOT_COMPAT: ACI cleanup 2000-05-28 22:17:34 +00:00
Kurt Zeilenga
a4277ba3e1 SLAPD_SCHEMA_NOT_COMPAT: copy mod op 2000-05-28 21:45:49 +00:00
Kurt Zeilenga
4d835c0532 modify ldbm_modify_internal to return error text 2000-05-28 20:44:08 +00:00
Kurt Zeilenga
7a97873274 SLAPD_SCHEMA_NOT_COMPAT: working test005-modrdn! 2000-05-28 19:54:07 +00:00
Kurt Zeilenga
229e12b69d SLAPD_SCHEMA_NOT_COMPAT: add subtype aware is_at_syntax() 2000-05-28 19:15:37 +00:00
Kurt Zeilenga
c98f0ea02c SLAPD_SCHEMA_NOT_COMPAT:
Don't depend acl parsing upon slap_schema, it's filled in post-conf
2000-05-28 18:58:09 +00:00
Kurt Zeilenga
9e9be9c283 SLAPD_SCHEMA_NOT_COMPAT: Mostly working modrdn 2000-05-28 17:26:30 +00:00
Kurt Zeilenga
439c0c796d SLAPD_SCHEMA_NOT_COMPAT: Mostly work modify 2000-05-28 16:36:34 +00:00
Kurt Zeilenga
5904e0013f SLAPD_SCHEMA_NOT_COMPAT: add missing AttributeDescriptions 2000-05-28 01:36:03 +00:00
Kurt Zeilenga
ee37a6bdea SLAPD_SCHEMA_NOT_COMPAT: case{Exact,Ignore}IA5SubstringsMatch 2000-05-28 01:18:53 +00:00
Kurt Zeilenga
3d26427c02 SLAPD_SCHEMA_NOT_COMPAT: fix bind acls 2000-05-27 23:16:30 +00:00
Kurt Zeilenga
9baacdcfff SLAPD_SCHEMA_NOT_COMPAT: Add enough matching rules to get through test003 2000-05-27 23:08:28 +00:00
Kurt Zeilenga
1a8f509f9a s/substring/substrings/ 2000-05-27 22:46:37 +00:00
Kurt Zeilenga
2273ae0cb7 SLAPD_SCHEMA_NOT_COMPAT: add f_sub_desc -> f_sub_type for compat 2000-05-27 21:45:52 +00:00
Kurt Zeilenga
f8dd082b74 SLAPD_SCHEMA_NOT_COMPAT: framework for substring searching 2000-05-27 21:41:04 +00:00
Kurt Zeilenga
9d8f60e63c fix -USLAPD_SCHEMA_NOT_COMPAT 2000-05-27 20:40:26 +00:00
Kurt Zeilenga
58d25f4ab1 SLAPD_SCHEMA_NOT_COMPAT: allocate/deallocate f_sub as needed. 2000-05-27 20:37:59 +00:00
Kurt Zeilenga
b813a5ba30 SLAPD_SCHEMA_NOT_COMPAT: prelim ACL work 2000-05-27 19:33:08 +00:00
Kurt Zeilenga
dab0793d0c Working test001 and test002. 2000-05-27 19:21:28 +00:00
Kurt Zeilenga
47333bf762 CSRI malloc compat fix 2000-05-27 17:06:11 +00:00
Kurt Zeilenga
5ba8a93a79 Add asserts in attempt to find oc_find bug... 2000-05-27 17:05:28 +00:00
Kurt Zeilenga
8dbd32687e SLAPD_SCHEMA_NOT_COMPAT: disable indexing 2000-05-27 06:23:25 +00:00
Kurt Zeilenga
e0bf8e8904 Fix build problems under NT... likely broken service manager code. 2000-05-27 06:21:23 +00:00
Kurt Zeilenga
203f1d28c7 Additional clarification... and fix second typo 2000-05-27 00:49:55 +00:00
Kurt Zeilenga
f2ac35c653 Fix typo in last commit 2000-05-27 00:39:35 +00:00
Kurt Zeilenga
fa581d7542 Clarify error text returned to client 2000-05-27 00:38:16 +00:00
Kurt Zeilenga
e8c292df89 Add -n serviceName (for loggging purposes) 2000-05-26 19:52:40 +00:00
Kurt Zeilenga
1bc5314d62 Fix DNSSRV initialization bug 2000-05-26 18:05:27 +00:00
Dmitry Kovalev
b8af4a67ea Summary of changes:
- filter -> SQL translation bugfixes
- several memory leaks fixups
- improved configurability:
    - allows definition of  uppercasing function to support CIS matching on databases that do
    case sensitive compares (this fixes up Oracle issues, example updated)
    - allows more flexibility in stored procedures interface (different parameter order, optional return
      codes - see samples, and comments in backsql.h)
- synchronize function interfaces to recent changes in prototypes ("const" clauses etc.) made for all backends
  (those changes led to compile-time errors)
2000-05-26 16:03:32 +00:00
Kurt Zeilenga
60981bdce1 Add debugging... 2000-05-26 07:01:33 +00:00
Kurt Zeilenga
4a254064f5 Fix referrals bug 2000-05-26 06:08:06 +00:00
Kurt Zeilenga
5b13d847e1 Unneeded 2000-05-26 05:48:23 +00:00
Kurt Zeilenga
e0fc97bfa7 DB3 fixes 2000-05-26 05:47:02 +00:00
Kurt Zeilenga
168e5ed841 Fix typo in last commit 2000-05-25 03:46:55 +00:00
Kurt Zeilenga
1ae20e9b0c Move extern schema_init_done outside of #ifdef SLAPD_SCHEMA_NOT_COMPAT 2000-05-25 02:09:59 +00:00
Kurt Zeilenga
89b09b020d Split schema_prep() from schema_init.c 2000-05-25 01:49:21 +00:00
Kurt Zeilenga
67e34b5e88 SLAPD_SCHEMA_NOT_COMPAT: Update back-passwd (that was too easy) 2000-05-25 01:15:09 +00:00
Kurt Zeilenga
09965d67de SLAPD_SCHEMA_NOT_COMPAT: fix IA5StringNormalize aswell 2000-05-24 23:28:49 +00:00
Kurt Zeilenga
7ae8225088 SLAPD_SCHEMA_NOT_COMPAT: Fix UTF8StringNormalizer 2000-05-24 23:27:33 +00:00
Kurt Zeilenga
c96f12ee49 SLAPD_SCHEMA_NOT_COMPAT: Fix memory stomping 2000-05-24 22:55:16 +00:00
Kurt Zeilenga
433d9388be SLAPD_SCHEMA_NOT_COMPAT:
Add syntax normalizer, separate from matching rule normalizer.
with mr normalizer defaulting to syntax normalizer.  This allows
for more consistent handling of some syntaxes, such as directoryString
(where all matches should ignore leading, trailing, and other extra
spaces).
2000-05-24 22:20:03 +00:00
Kurt Zeilenga
bd243c07a3 Add hooks for syntax normalizer (used by value_match)
and prettier (to be used by update operations).
2000-05-24 20:21:46 +00:00
Julio Sánchez Fernández
106ff98af0 Revert last change, 2000-05-24 20:11:21 +00:00
Julio Sánchez Fernández
851e2de03d Backout last change, it belongs in syntaxes, not attribute types 2000-05-24 20:03:58 +00:00
Kurt Zeilenga
c1da50a426 SLAPD_SCHEMA_NOT_COMPAT: equality filters
(2.5.4.0=2.5.6.0) works!	ie: (objectclass=top)
2000-05-24 18:49:30 +00:00
Kurt Zeilenga
522761dc17 SLAPD_SCHEMA_NOT_COMPAT: Fix misuse of attrs_find 2000-05-24 18:00:30 +00:00
Julio Sánchez Fernández
2e0c16b56b Get a couple of extensions into fields easy to use at runtime. 2000-05-24 15:54:21 +00:00
Kurt Zeilenga
12acffa96e objectclass needs a special equality match. 2000-05-24 06:38:02 +00:00
Kurt Zeilenga
c4b4478799 Return LDAP resultCodes 2000-05-24 06:37:20 +00:00
Kurt Zeilenga
11ef270498 SLAPD_SCHEMA_NOT_COMPAT: Fix normalization bugs
Disable cn=Schema "merging" messages
2000-05-24 00:59:58 +00:00
Kurt Zeilenga
80d52b18ce SLAPD_SCHEMA_NOT_COMPAT: more filtering 2000-05-24 00:34:28 +00:00
Kurt Zeilenga
6ddde55964 SLAPD_SCHEMA_NOT_COMPAT: Add more three value filter logic code 2000-05-24 00:13:27 +00:00
Kurt Zeilenga
3657e63a17 SLAPD_SCHEMA_NOT_COMPAT: at least make filters not loop 2000-05-23 23:52:25 +00:00
Kurt Zeilenga
5ab4c575f4 Add bogus validator for fax number syntax 2000-05-23 21:42:51 +00:00
Kurt Zeilenga
3019e9d525 Remove debugging assert committed by mistake 2000-05-23 20:47:38 +00:00
Kurt Zeilenga
4540262cf5 Fix typo in last commit and in schema_check.c 2000-05-23 20:33:40 +00:00
Kurt Zeilenga
0781f59f5d Add inetOrgPerson 2000-05-23 20:09:43 +00:00
Kurt Zeilenga
35a2912388 SLAPD_SCHEMA_NOT_COMPAT: fix add bug 2000-05-23 18:20:38 +00:00
Kurt Zeilenga
62eea3b452 SLAPD_SCHEMA_NOT_COMPAT: fix bugs in add/modify logic 2000-05-23 18:08:19 +00:00
Kurt Zeilenga
bf3a229423 SLAPD_SCHEMA_NOT_COMPAT: cleanup 2000-05-23 17:00:46 +00:00
Julio Sánchez Fernández
34c05b5149 Extend slapd schema structure definitions to reflect the new
extensions field in the contained structures.
2000-05-23 13:56:26 +00:00
Kurt Zeilenga
ec576aae41 SLAPD_SCHEMA_NOT_COMPAT: Use no-op syntax validator 2000-05-23 02:33:56 +00:00
Kurt Zeilenga
a838ea676e SLAPD_SCHEMA_NOT_COMPAT: fix up add framework 2000-05-23 01:21:47 +00:00
Kurt Zeilenga
c82f96f520 Add authPassword and fix krbName 2000-05-23 01:20:33 +00:00
Kurt Zeilenga
bd6a0c3da0 Const'ification 2000-05-22 03:59:32 +00:00
Kurt Zeilenga
a5c2403eb1 const'ification 2000-05-22 03:55:03 +00:00
Kurt Zeilenga
60802201e3 Const'ification
SASL mech removed from backend bind callback (as SASL is managed by frontend)
Changes to some backends are untested (as I don't have all dependent
  software install)
2000-05-22 03:46:57 +00:00
Kurt Zeilenga
3eec592bb3 Remove lint 2000-05-21 23:15:55 +00:00
Kurt Zeilenga
b2f56a7318 SLAPD_SCHEMA_NOT_COMPAT: framework for value_match() and value_find() 2000-05-21 22:46:51 +00:00
Kurt Zeilenga
f2912805fb s/2000-2000/2000/ in copyright notice 2000-05-21 18:15:00 +00:00
Kurt Zeilenga
0e0bc2bdd4 Add krbName 2000-05-21 01:09:41 +00:00
Kurt Zeilenga
72db2b73dc Add a little debugging 2000-05-19 02:44:47 +00:00
Kurt Zeilenga
cdb5244edf Fix typo in -USLAPD_SCHEMA_NOT_COMPAT varient 2000-05-19 01:06:43 +00:00
Kurt Zeilenga
52cf422c1b SLAPD_SCHEMA_NOT_COMPAT: implement str2entry() 2000-05-19 00:33:39 +00:00
Kurt Zeilenga
56c186cb83 Fix typo in last commit 2000-05-19 00:33:09 +00:00
Kurt Zeilenga
a14b3b291a Add X-BINARY (binary transfer required) and X-NOT-H-R (not human readable)
to appropriate syntaxes.
2000-05-18 22:07:34 +00:00
Kurt Zeilenga
074be5fb5a SLAPD_SCHEMA_NOT_COMPAT: numerous changes to syntax flags, mostly minor
added new value_normalize() code
	need LDAPsyntaxes X- field support
2000-05-18 17:21:42 +00:00
Kurt Zeilenga
5697ed03ed Update "entry" and "children" psuedo attribute types in openldap.schema
Update comments in cosine.schema
2000-05-17 20:48:48 +00:00
Kurt Zeilenga
fa9f7a7d8e SLAPD_SCHEMA_NOT_COMPAT: add framework for substr value normalization
Calls value_normalize per substr component (like old code),
	likely should have/call substr_normalize which takes all components
		at once (to allow more sophisticated normalization)
2000-05-17 20:29:26 +00:00
Kurt Zeilenga
1f22c52b8a SLAP_SCHEMA_NOT_COMPAT: add calls to dummy value_normalize()
SLAP_SCHEMA_NOT_COMPAT: Need to sort out normalization of substring components
2000-05-17 20:08:13 +00:00
Kurt Zeilenga
75b51d523f Add missing syntaxes from RFC 2252. 2000-05-17 18:10:38 +00:00
Kurt Zeilenga
f3f5b6a1b3 Update pilot schema based upon asid ldapv3-attributes I-D.
Add needed syntaxes defs to schema_init.c
2000-05-17 17:25:48 +00:00
Kurt Zeilenga
aa3ed4a5e3 Minor cleanup 2000-05-17 06:02:03 +00:00
Kurt Zeilenga
00f6f9c59a Assign temporary OIDs to "entry" and "children" psuedo attributes types 2000-05-17 04:23:39 +00:00
Kurt Zeilenga
4d23358a8e move mail and simpleSecurityObject to core.schema 2000-05-17 02:52:32 +00:00
Kurt Zeilenga
06a18f628e add domainComponent as alternative name for 'dc' (per rfc2253)
misc other clean up
2000-05-17 02:35:25 +00:00
Kurt Zeilenga
1c131933a2 jpegPhoto should be defined here as RFC 2798 is the only
known referencable spec.
2000-05-17 02:34:23 +00:00
Kurt Zeilenga
cb4f0fb246 RFC 1274 cosine pilot schema
(pilot.schema is actually closer to newPilot)
2000-05-17 02:33:19 +00:00
Kurt Zeilenga
bb4ee30aa2 Update to based upon rev1 of lachman laser 2000-05-17 02:32:37 +00:00
Kurt Zeilenga
04ca214dfb Update inetOrgPerson based upon RFC 2978 2000-05-16 22:25:36 +00:00
Kurt Zeilenga
eb248103b0 Fix -USLAPD_SCHEMA_NOT_COMPAT 2000-05-16 22:04:49 +00:00
Kurt Zeilenga
df96737bf2 Remove Lint. 2000-05-16 21:54:24 +00:00
Kurt Zeilenga
349bec7c0e Fix desc not NULL bugs 2000-05-16 21:44:54 +00:00
Kurt Zeilenga
8d407bc2a6 Modify ava code to return error text
Filter code needs to be updated to properly handle soft errors.
2000-05-16 21:03:18 +00:00
Kurt Zeilenga
c689e1cb74 bv2ad expects desc pointer to be NULL if unallocated 2000-05-16 20:50:49 +00:00
Kurt Zeilenga
dfe11c105d s/LDAProotDSE/OpenLDAProotDSE/ (until we have a standard track class) 2000-05-16 18:13:08 +00:00
Kurt Zeilenga
318a116910 Misc. schema updates. 2000-05-16 18:11:50 +00:00
Kurt Zeilenga
75841ac6c7 Apply filter to info entry 2000-05-16 17:00:42 +00:00
Kurt Zeilenga
53709873dd Rework root dse and other info entry codes to produce entry
to caller (do_search) such that info can be used by other
operations (ie: do_compare).
2000-05-16 16:42:01 +00:00
Kurt Zeilenga
a1430fdfdb Rework root dse and other info entry codes to produce entry
to caller (do_search) such that info can be used by other
operations (ie: do_compare).
SLAPD_SCHEMA_NOT_COMPAT: Add additional code to support filters (needs work)
2000-05-16 16:22:52 +00:00
Kurt Zeilenga
4e5992c190 Fix unsigned * vs unsigned long * bugs 2000-05-16 04:52:37 +00:00
Kurt Zeilenga
deac70a6de Fix typo in last commit 2000-05-16 02:17:59 +00:00
Kurt Zeilenga
6af8b86a7e SLAPD_SCHEMA_NOT_COMPAT: need to set desc to NULL 2000-05-15 23:47:51 +00:00
Kurt Zeilenga
37235b71c0 SLAPD_SCHEMA_NOT_COMPAT: working cn=schema 2000-05-15 23:36:37 +00:00
Kurt Zeilenga
aa08287e29 SLAPD_SCHEMA_NOT_COMPAT: simple Root DSE search WORKS! 2000-05-15 22:07:10 +00:00
Kurt Zeilenga
19becc614f SLAPD_SCHEMA_NOT_COMPAT: implement attr_merge() 2000-05-15 21:47:58 +00:00
Kurt Zeilenga
73b48936a7 Should have #ifdef'ed in last commit 2000-05-15 21:22:57 +00:00
Kurt Zeilenga
40ab90fa9c SLAPD_SCHEMA_NOT_COMPAT: Rework caching of internal schema 2000-05-15 21:05:25 +00:00
Kurt Zeilenga
7b14e1304a Relocate schema_init() call to main()
Add schema_prep() call to main()
Similiar changes to slapcommon.c
Add schema_prep() impl to schema_init.c
Add slap_ad_entry and slap_ad_children globals.
Add "entry" and "children" to openldap.schema (this likely should
  be added to schema via code, not configuration)
2000-05-15 20:04:36 +00:00
Kurt Zeilenga
ef6ee899cb Fix -USLAPD_SCHEMA_NOT_COMPAT bugs introduced in last commit 2000-05-15 19:28:26 +00:00
Kurt Zeilenga
59aba7711b SLAPD_SCHEMA_NOT_COMPAT: basic filter parsing 2000-05-15 18:46:03 +00:00
Kurt Zeilenga
ff3e396bb9 Port to SLAPD_SCHEMA_NOT_COMPAT 2000-05-15 16:53:28 +00:00
Kurt Zeilenga
7c88b6f191 Fix typo in last commit 2000-05-15 16:53:05 +00:00
Kurt Zeilenga
e0eba07244 Add copyright notices 2000-05-15 16:35:48 +00:00
Kurt Zeilenga
dc68e41ee9 cleanup old TOOLID macro 2000-05-15 16:33:07 +00:00
Kurt Zeilenga
1e65293aa2 Minor updates to shell backend configuration/examples.
Replace U-Mich DN with OpenLDAP DN
Remove default referral
Add copyright notice
s/#!/bin/sh/#! /bin/sh/
2000-05-15 16:31:59 +00:00
Kurt Zeilenga
ae7d89fa1e SLAPD_SCHEMA_NOT_COMPAT addl. filter changes (a work in progress). 2000-05-15 00:41:29 +00:00
Kurt Zeilenga
4bc786f34b Y2k copyright update 2000-05-13 02:47:56 +00:00
Howard Chu
72d53b60e0 Silence some warnings from parameter type mismatches 2000-05-13 01:18:57 +00:00
Howard Chu
9a79d03e13 Fix previous change to getRegParam, SERVICE_NAME is only known in slapd. 2000-05-12 21:26:30 +00:00
Howard Chu
55f4896cb9 Fix typo with dnattr parsing 2000-05-12 09:10:45 +00:00
Howard Chu
43e97bfb7a Removed XLDFLAGS, unnecessary 2000-05-11 20:50:50 +00:00
Howard Chu
2e5e4c3f20 More fixes for NT support:
liblutil/ntservice.c change registry key path used for non-default
  	service names.
  slapd/Makefile.in change to generate slapd.syms dynamically
  slapd/daemon.c fix to make NT service ignore SIGBREAK
  slapd/main.c fix to allow NT to retrieve listening url from registry
  slapd/nt_svc.c fix for exported symbols
  slapd/result.c change use of strerror to sock_errstr
  slapd/slapd.syms no longer needed
2000-05-11 20:50:20 +00:00
Kurt Zeilenga
643864c569 Change negotiated mechanism:
If application provide one, use it.  If application doesn't
	provide one, use best of server advertised.
Fix SASL/ANONYMOUS (not normally used, but should work)
PLAIN is not currently working... might be local to me as my
Cyrus installation is a bit hosted.
2000-05-11 20:16:26 +00:00
Howard Chu
2d9a7620b5 LDAP_F macro is obsolete. Redeclare perl_ack_xs_init static, since it
is, and declare boot_DynaLoader as EXT since it actually comes from
perl, not from this module.
2000-05-11 09:35:29 +00:00
Howard Chu
3d5553abc2 Removed XLDFLAGS, unnecessary for modules. 2000-05-11 09:33:34 +00:00
Kurt Zeilenga
4fad202b44 hostname needs to be static 2000-05-11 02:41:34 +00:00
Kurt Zeilenga
f9411ca154 Fix another bug... seems to be working... ldap://root.openldap.org/ 2000-05-11 01:12:48 +00:00
Kurt Zeilenga
59305df8bb Fix debug level typo 2000-05-11 00:44:03 +00:00
Kurt Zeilenga
cb8d9e16e9 Add bind handler which returns unwillingToPerform with
nasty message if password was provided.
2000-05-10 23:54:57 +00:00
Kurt Zeilenga
1dc3e3c408 Add basic and EXPERIMENTAL chroot() support. 2000-05-10 23:30:52 +00:00
Kurt Zeilenga
18f31148be Working (but likely not robust) DNS SRV backend! 2000-05-10 22:43:08 +00:00
Kurt Zeilenga
fbb58dec53 Fix minor bugs... 2000-05-10 22:21:57 +00:00
Kurt Zeilenga
e87e01b9c5 DNS SRV meat (a work in progress) 2000-05-10 21:48:18 +00:00
Howard Chu
df7ca2c3f3 Remove #undef LDAP_MOD_BVALUES - backends like back-ldap that are also
LDAP clients themselves still need this definition.
2000-05-10 21:22:07 +00:00
Howard Chu
3af3014763 Remove bogus use of PERL_LDFLAGS, it's correctly inserted in SLAPD_LIBS
by top.mk
2000-05-10 21:18:12 +00:00
Kurt Zeilenga
dbde2604d7 Additional DNS SRV framework (a work in progress)
add common request handler
	remove bind handler (not needed)
2000-05-10 20:11:58 +00:00
Kurt Zeilenga
2c2a54d6d7 Add DNS SRV backend framework (a work in progress). 2000-05-10 18:17:38 +00:00
Howard Chu
f0c4f83ea2 libldap/tls.c: change tls_verify_cb to no longer ignore verification errors.
This means a ldaps connection may drop before any LDAP protocol exchange
occurs (due to expired cert, unrecognized CAs, etc.).
  Change ldap_pvt_tls_connect to copy any TLS error string to ld_error upon
connection failure, otherwise client just sees "can't contact LDAP server."

slapd/connection.c: add flush/delay when SSL_accept fails, to allow any
TLS alerts we generated to propagate back to the client. (Which will then
be picked up by ldap_pvt_tls_connect on the client...)
2000-05-10 17:07:09 +00:00
Howard Chu
dcad3d9569 Undo slapd/add.c rev 1.54; back-bdb2 and back-ldbm were the only backends
that called entry_free() on failure. This change would cause a memory leak
from all the other backends. Instead, remove the entry_free calls in these
two backends and let the frontend take care of it for everyone.
2000-05-10 16:36:46 +00:00
Kurt Zeilenga
f224e69558 Add experimental code to check simple bind passwords
against Cyrus SASLdb.  Like other cleartext mechanisms,
should be protected from eavesdropping.
2000-05-10 04:29:51 +00:00
Kurt Zeilenga
dcc943e528 move default "directory" 2000-05-03 19:01:29 +00:00
Kurt Zeilenga
d0555fffe6 Error handling changes including separation of client v. server
SASL to LDAP translation.  plus comments and other minor changes
2000-05-03 18:59:58 +00:00
Kurt Zeilenga
8c386888fa Move default LDBM directory from /usr/tmp to $(localstatedir) 2000-05-03 10:07:21 +00:00
Bastiaan Bakker
14418bdff3 Avoid C++ keyword 'new' in header files. 2000-04-30 15:26:51 +00:00
Bastiaan Bakker
873c36f788 Added example 'moduleload' lines to slapd.conf 2000-04-30 15:01:32 +00:00
Randy Kunkee
e5de6c5b0c Change count test for non-zero reference counts to check for ... non-zero. 2000-04-26 09:24:58 +00:00
Randy Kunkee
75467fb340 Rework order of things to allow restart in oneshot mode. 2000-04-26 09:24:12 +00:00
Kurt Zeilenga
92e2453467 A NULL (empty) SASL mechanism should not result in a protocol error. 2000-04-26 09:20:25 +00:00
Kurt Zeilenga
b872bf3a91 fix -UHAVE_CYRUS_SASL 2000-04-25 19:28:00 +00:00
Kurt Zeilenga
20351a05cc SASL: me thinks I got the states okay... now to test. 2000-04-25 18:02:50 +00:00
Kurt Zeilenga
42a20681cc SASL closer to working from frontend only, need to work through
states.
2000-04-25 17:23:54 +00:00
Kurt Zeilenga
55ae3cffd8 SASL code without backend support. Should work with
external store, but not yet tested.  [Intent is to support
both in same server... may not be doable]
2000-04-25 16:03:17 +00:00
Kurt Zeilenga
2e22c55a6c Fix typo in prev commit 2000-04-25 13:25:55 +00:00
Kurt Zeilenga
6f2a817d9d bind/sasl cleanup PRIOR TO moving call from backend to frontend 2000-04-25 13:21:42 +00:00
Kurt Zeilenga
0c134a72d6 SCHEMA_NOT_COMPAT changes 2000-04-25 13:21:06 +00:00
Kurt Zeilenga
12e253fc66 entry_schema_check rename 2000-04-25 13:20:05 +00:00
Kurt Zeilenga
01c4e0f03c LDAP_OPERATIONS_ERROR -> LDAP_OTHER
and other error handling changes
2000-04-25 13:18:59 +00:00
Kurt Zeilenga
365d17ca68 entry_schema_check() rename and more (error handling) 2000-04-25 13:15:55 +00:00
Kurt Zeilenga
8b09742e5c (slightly) better comments 2000-04-25 13:13:42 +00:00
Kurt Zeilenga
f5ab390e08 Update 2000-04-25 13:12:40 +00:00
Kurt Zeilenga
56ebee78fb return more descriptive error text 2000-04-25 13:12:20 +00:00
Kurt Zeilenga
16937cb91d remove SASL bind call. Frontend code coming. 2000-04-25 13:10:31 +00:00
Kurt Zeilenga
3bad06d52b entry_schema_check() rename 2000-04-25 13:07:14 +00:00
Kurt Zeilenga
2dc6185a92 LDAP_OPERATIONS_ERROR -> LDAP_OTHER
and other misc changes
2000-04-25 13:06:22 +00:00
Kurt Zeilenga
27a29fddbb Fix comment 2000-04-25 13:02:42 +00:00
Ben Collins
32bdecbb5f for slurpd's replica directory (slurpd.status, and rej file) use a subdir of what the user specifies (add replica/ to it) to avoid /tmp races. A lot of the files that slurpd uses cannot be opened with O_EXCL, nor can we safely determine if there are any hardlinks from another file to it, so we create our own subdirectory so we can control the perms, even in /tmp 2000-04-24 17:03:45 +00:00
Ben Collins
a44adcfb43 filecheck(), we should strcpy the file passed (f arg) and not always slapd_replogfile, else this function is of little real use 2000-04-24 16:47:41 +00:00
Ben Collins
4319e67736 use strcpy instead of sprintf when all we have is two args (source and dest) 2000-04-24 16:44:16 +00:00
Ben Collins
50a41f3ee2 when opening files in /tmp use O_CREAT|O_EXCL to overcome race conditions 2000-04-24 16:42:16 +00:00
Kurt Zeilenga
28d7d099be LDAP_OPERATIONS -> LDAP_OTHER 2000-04-19 13:42:08 +00:00
Kurt Zeilenga
01de012e1c Fix realloc bug and remove use of LDAP_MOD_BVALUES 2000-04-19 08:43:37 +00:00
Kurt Zeilenga
2d4fb1e6e1 Fix c_mutex unlock bug 2000-04-12 01:40:06 +00:00
Kurt Zeilenga
065af58fb7 Fix debug messages 2000-04-12 01:39:52 +00:00
Kurt Zeilenga
4854c6173b Fix debug message 2000-04-12 01:35:53 +00:00
Kurt Zeilenga
2f0ec52df9 Fix improperly terminated comment 2000-04-12 01:10:50 +00:00
Kurt Zeilenga
360c56a78a fix uninitialized ndn bug 2000-04-12 01:09:36 +00:00
Kurt Zeilenga
870dbca576 objectclass=* -> NULL 2000-04-12 01:00:48 +00:00
Julio Sánchez Fernández
976ac15785 The add routine in the backend already frees the entry in error, so
avoid trying to free it again.
2000-03-30 13:14:42 +00:00
Julio Sánchez Fernández
7a7855508c We need to inherit syntax_compat from superior. Problem manifests
itself in that cn suddenly becomes case-sensitive.
2000-03-24 13:44:37 +00:00
Kurt Zeilenga
ebfb0b8261 Move presence index change outside of values for loop. 2000-03-20 23:38:38 +00:00
Kurt Zeilenga
94d3673dbe wrap sql *.c files with #ifdef SLAPD_SQL to facilate NT builds
without -DSLAPD_SQL
2000-03-19 06:18:27 +00:00
Kurt Zeilenga
abbd5ec2fa fix up comment 2000-03-17 22:57:49 +00:00
Kurt Zeilenga
3e5c381d3a Need SOFTADD fix for previous fix 2000-03-17 18:31:40 +00:00
Kurt Zeilenga
d1803fce0a Fix multivalued indices. Need to add indices of remaining
values after delete of any value.
2000-03-17 18:22:16 +00:00
Kurt Zeilenga
28c6217a12 s/userPassword/password/ (variable name) 2000-03-17 02:06:50 +00:00
Kurt Zeilenga
d2893546cd Don't add subentries of the RootDSE to namingContexts 2000-03-17 02:06:10 +00:00
Kurt Zeilenga
c66605890d MUST -> MAY ( cn ) 2000-03-17 02:05:21 +00:00
Kurt Zeilenga
cfbeac4576 Missing entry causes slapd to segfault (ITS#482)
Fix provided by pturgyan@umich.edu
2000-03-17 01:47:40 +00:00
Dmitry Kovalev
f28e0c1967 update Win32 build environment to support back-sql 2000-03-16 19:58:36 +00:00
Dmitry Kovalev
a16a87a412 even more back-sql files 2000-03-16 19:46:21 +00:00
Dmitry Kovalev
4e703c5261 more back-sql files + rdbms_dependent samples 2000-03-16 19:34:46 +00:00
Dmitry Kovalev
d63b3dc2fd added back-sql files 2000-03-16 19:08:22 +00:00
Dmitry Kovalev
8dc136ddd6 update Unix build environment to support back-sql
2 more steps left: add back-sql directory itself, and update Win32 build environment.
2000-03-16 18:54:11 +00:00
Kurt Zeilenga
ad6882acac Add additional be_isroot() checks to protect against empty
root and client ndns.  (the existing backend protections
*should* be good enough, but one cannot be too safe)
2000-03-15 19:42:03 +00:00
Kurt Zeilenga
db662b516f Fix NT builds and remove lint 2000-03-13 19:30:14 +00:00
Kurt Zeilenga
000c1ca40b Fix calloc typo 2000-03-09 19:15:48 +00:00
Kurt Zeilenga
9369b9daad Fix malloc of referral pointer array. 2000-03-08 17:37:49 +00:00
Kurt Zeilenga
4710c74605 Rework error handling. Add error descriptions.
Don't use LDAP_OPERATIONS_ERROR for internal errors.  Use LDAP_OTHER
instead.  (more changes needed in this area)
2000-03-03 22:37:06 +00:00
Kurt Zeilenga
5681a79d96 StartTLS now grabs conn->c_mutex before mucking with connection.
Add comment concerning sequencing issues which need to be resolved
by reworking of connection state machine.  Add note that a race
condition exists until this rework is complete.
Rework extended operations to return pointer to static error text.
2000-03-02 20:36:53 +00:00
Kurt Zeilenga
10588da3c5 Print tag with SASL in progress operations error. 2000-03-02 01:20:00 +00:00
Kurt Zeilenga
ddb9755ba7 Move handling of operations errors due to submission of
non-bind requests while a multi-step SASL bind process
is under to connection.c.  Return LDAP_OPERATIONS_ERROR,
not LDAP_SASL_BIND_IN_PROGRESS.
2000-03-02 00:59:10 +00:00
Kurt Zeilenga
e96865c1a8 Reorder error detection based upon precedence 2000-03-01 22:59:34 +00:00
Kurt Zeilenga
add0d847fb Need to strdup subschemasubentry a_type 2000-03-01 19:38:15 +00:00
Kurt Zeilenga
ac7f6c2e37 Replace do_*() return -1 with return SLAPD_DISCONNECT.
Only return SLAPD_DISCONNECT with a send_ldap_disconnect()
was called.
Add initial code for support predetermined filter results
when filter is undefined (or known to be true or false).
2000-02-29 23:48:01 +00:00
Kurt Zeilenga
4091381660 Yet another round of SLAPD_SCHEMA_NOT_COMPAT changes, including:
limited subtype support, modlist handling, filter updates,
lastmod attribute handling.
2000-02-28 21:16:05 +00:00
Kurt Zeilenga
76553ea53f More -DSLAPD_SCHEMA_NOT_COMPAT changes, including initial
impl of slap_modlist2mods() and is_at_subtype().
2000-02-25 19:36:07 +00:00
Kurt Zeilenga
2c16d08b7c noschemacheck should not disable validation of DNs 2000-02-25 19:31:54 +00:00
Kurt Zeilenga
34197ca974 ITS#464: Fix multiple password support 2000-02-24 17:59:10 +00:00
Kurt Zeilenga
ecb915357c Correct comment concerning entry LDIF. 2000-02-22 20:25:54 +00:00
Kurt Zeilenga
550542e020 Use common entry cleanup code. 2000-02-22 19:43:02 +00:00
Kurt Zeilenga
86bd13846f Additional -DSLAPD_SCHEMA_NOT_COMPAT changes
Not hidden "NULLDN" to "<anonymous>" in modify stats
2000-02-22 19:26:15 +00:00
Kurt Zeilenga
ceb6412e62 More -DSLAPD_SCHEMA_NOT_COMPAT changes
Not hidden: "<anonymous>" modifiersname
2000-02-15 18:57:07 +00:00
Kurt Zeilenga
0dbaf87730 Another round of changes behind -DSLAPD_SCHEMA_NOT_COMPAT
plus these changes unhidden changes:
	remove now meaning --enable-discreteaci configure option
	fix ITS#451, slapd filters
	Add ber_bvecadd() to support above
	constify ldap_pvt_find_wildcard() and misc slapd routines
	renamed some slap.h macros
	likely broken something
2000-02-14 20:57:34 +00:00
Kurt Zeilenga
4e4b8204ab ITS#454: fix VPATH support 2000-02-12 20:04:45 +00:00
Kurt Zeilenga
36b0423311 Add Modification/Modifications structures for -DSLAPD_SCHEMA_NOT_COMPAT 2000-02-07 20:37:10 +00:00
Kurt Zeilenga
79e92663e8 Fix -DSLAPD_SCHEMA_NOT_COMPAT -DLDAP_DEBUG builds (still won't run) 2000-02-07 17:50:42 +00:00
Kurt Zeilenga
bc51bd5180 Yet another round of SLAPD_SCHEMA_NOT_COMPAT changes...
Changes outside of #ifdef include three value filter processing.
2000-02-06 21:09:44 +00:00
Kurt Zeilenga
f9195f9b6f Another round of SLAPD_SCHEMA_NOT_COMPAT changes including
basic structures for handing language tags and binary option
(but less actual code to actually support them).  Provided
for reference only.  Will not even compile.
2000-02-05 05:01:41 +00:00
Kurt Zeilenga
86cedc6ac7 ITS#439: Fix logic error 2000-02-04 17:49:32 +00:00
Kurt Zeilenga
2e3d9d7737 Use experimental OID for ACI syntax. Likely need to add
additional schema items.
2000-02-01 18:05:49 +00:00
Kurt Zeilenga
9316c4eace ACI attributes should be of ACI syntax. Need to assign
OID for experimental syntax.
2000-02-01 17:53:07 +00:00
Kurt Zeilenga
3708530620 Didn't return after returning unknown critical control.
Noticed that abandon and unbind don't have control support... something for
another day.
2000-02-01 01:22:06 +00:00
Kurt Zeilenga
3a6e906194 Replace -DSLAPD_SCHEMA_COMPAT with -USLAPD_SCHEMA_NOT_COMPAT 2000-01-31 22:14:16 +00:00
Kurt Zeilenga
08e3b010d5 Move oc_check_allowed() next to oc_check_required() in preparation for
rewrite.
2000-01-31 18:21:07 +00:00
Kurt Zeilenga
10fdd7ff7c Put type;option trimming codes behind SLAPD_SCHEMA_COMPAT.
Attribute subtyping, especially that using attribute description
options, will have to reengineered.
2000-01-31 17:59:10 +00:00
Kurt Zeilenga
d298e35514 Add SLAP_SYNTAX_BINARY flag to indicate binary storage is used for
attributes of the syntax.  Such attribute values be transferred
using binary syntax unless ber2str/str2ber routines are provided.
Used in conjunction with ";binary" attribute description option
and/or the Binary syntax.
2000-01-31 01:49:44 +00:00
Kurt Zeilenga
e0f7614a11 Add matching rule function pointers for index generation and use with
filters.
2000-01-29 23:36:42 +00:00
Kurt Zeilenga
916a63d819 Add schema_init to MSVC5 project 2000-01-29 22:54:11 +00:00
Kurt Zeilenga
49976b5bc1 Constify a few attr_*() routines 2000-01-29 22:03:34 +00:00
Kurt Zeilenga
d4c814ecd9 Move extern to proto header 2000-01-29 20:06:46 +00:00
Kurt Zeilenga
4c52827d28 Split out schema initialization of builtin syntax/matching rule
routines to separate file to keep schema.c of managable size.
2000-01-29 19:43:19 +00:00
Kurt Zeilenga
d8d19d4ff9 Resolve syntax errors created by previous -DSLAPD_SCHEMA_COMPAT work. 2000-01-29 07:00:39 +00:00
Kurt Zeilenga
ad262b3ac6 Fix minor problems with proceeding commit which broken old schema compat 2000-01-28 21:20:28 +00:00
Kurt Zeilenga
ce56fbcba8 Remove ai_syntaxinfo (syntax) from AttrInfo. Call attr_syntax() directly. 2000-01-28 21:10:34 +00:00
Kurt Zeilenga
cca2bdcb40 Move INDEX_ macros from back-ldbm.h to slap.h and prefix with SLAP_
Move AttrInfo from back-ldbm.h to attr.c
2000-01-28 20:38:00 +00:00
Kurt Zeilenga
17f1024ad5 Fix -DSLAPD_SCHEMA_NOT_COMPAT syntax error in last commit 2000-01-28 20:10:25 +00:00
Kurt Zeilenga
c5da0c76ce Additional changes to migrate to new schema codes
Still not usable.
2000-01-28 20:01:00 +00:00
Kurt Zeilenga
51190984ee place old schema codes behind -DSLAPD_SCHEMA_COMPAT 2000-01-28 01:17:58 +00:00
Kurt Zeilenga
e9b1012fb1 Put more old schema code behind SLAPD_SCHEMA_COMPAT (which still
MUST be defined).
2000-01-28 00:33:29 +00:00
Kurt Zeilenga
434e7229ac Add code to handle operational attributes via new schema codes
behind -USLAPD_SCHEMA_COMPAT.
2000-01-27 19:02:24 +00:00
Kurt Zeilenga
df712b8597 Don't exclude no-user-modification attributes from ACL checks
unless access requested is WRITE.  This allows you to apply
an ACL to limit search/reading of no-user-modification attributes.
Writes, of course, are always prohibited (by do_add, do_modify).
2000-01-27 18:35:36 +00:00
Kurt Zeilenga
9dde98577d Move ldap_unicode_t to ldap_pvt.h, typedef to ldap_ucs2_t for now.
ldap_ucs2_t is a short.  The unicode routines may break if
sizeof(short) != 2...
2000-01-27 05:27:36 +00:00
Kurt Zeilenga
cdcb0390ba Last commit was a bit premature. This fixes up compiler
bugs and adds temporary code to glue things until we sort
out unicode UTF-8 vs UCS-4 vs UCS-2 issues.
2000-01-27 01:43:12 +00:00
Kurt Zeilenga
4ec79023bd Add IA5StringConvert (to UCS-2/4). May not be needed if we use
UTF-8 internally.
2000-01-27 01:02:51 +00:00
Kurt Zeilenga
96ba43c591 Add in hooks for mr conversion routines 2000-01-26 00:12:51 +00:00
Kurt Zeilenga
4be3e66aaf Use UTF8Normalize, not IA5Normalize for matching rules for directoryString
syntax.
2000-01-25 23:59:50 +00:00
Kurt Zeilenga
9fec129997 Second round of schema changes
Revert normalization to matching rule per discussions with Julio.
May need separate normalization routines for stored value and asserted
value. Currently rely on passed in syntax/mr to allow "special" behavior.
Reworked filters to pass struct berval * instead of char *. (needs work)
Validation, normalization and matching needed.
2000-01-25 21:13:31 +00:00
Kurt Zeilenga
4bdd788c68 Move uppercase comment to be next to uppercasing code. 2000-01-25 00:49:14 +00:00
Kurt Zeilenga
7f63755d5d Start putting old code behind the currently defined SLAPD_SCHEMA_COMPAT. 2000-01-25 00:38:48 +00:00
Kurt Zeilenga
a412a0529d Have compare use get_ava().
Well help when we split assertion options out from the description.
2000-01-25 00:05:36 +00:00
Kurt Zeilenga
117a37272d Modify slapd syntax struct to have both a validation and normalization
routine.  Could be combined into one routine.
Modify slapd matching rule struct to only have match function.
Modify old attribute such that 'bin' implies octetString, not 'binary'.
Add compatibility for IA5 strings.  Only directoryStrings were handled
before.
Treat attribute types without syntax as incomplete, not default.
Add OctetStringValidate (always returns okay).
Add {UTF8,IA5}StringValidate/Normalize  (IA5 based loosely on
case_exact_normalize).  Need case{Exact,Ignore}UTFMatch, using IA5 versions
for now.
Removed default of syntax/mr handlders, should just skip
registration of syntax/mr's without handlers.
Added comments to slap.h about types versus descriptions.
2000-01-24 23:31:26 +00:00
Kurt Zeilenga
fdcd8465c3 s/case_ignore_normalize/caseIgnoreIA5Normalize/
s/case_ignore_compare/caseIgnoreIA5Match/
s/case_exact_normalize/caseExactIA5Normalize/
s/case_exact_compare/caseExactIA5Match/

to make room for UTF-8 and T.61 varients.
2000-01-23 20:53:12 +00:00
Kurt Zeilenga
2f22b6bf0c Add comment: old schema is OC less category (abstract, struct, aux). 2000-01-23 20:49:17 +00:00
Howard Chu
0b15c19cdf Fix bug in group spec parsing, was failing to set attributeType if a
nondefault objectclass was given
2000-01-15 03:48:37 +00:00
Kurt Zeilenga
a16943d645 Per ITS#419, don't require SLAPD_RLOOKUPS when HAVE_TCPD 2000-01-11 01:12:08 +00:00
Kurt Zeilenga
6437785a82 Initial implementation of Kerberos password verification for
simple bind via:
	{KERBEROS}principal
Code is disabled by default (for security reasons).  Use
--enable-kpasswd to enable.  Behind SLAPD_KPASSWD.
Reworked Kerberos detection and split out KBIND as independent
feature (--disable-kbind) (LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND).
KBIND depends upon detection of KRB4 (or KRB425) support.  Detection,
building with eBones (as distributed with FreeBSD 3.4) okay, but
wasn't able to test as I don't have a K4 KDC handy.
--with-kerberos has a number of detection options... most likely
don't work properly.
2000-01-08 18:42:11 +00:00
Luke Howard
a1ccf169da Filled in Cyrus SASL authz/storage callbacks for all backends
(callbacks not yet implemented though).
2000-01-02 05:42:14 +00:00
Luke Howard
9b4e3b2234 Merged in preliminary support for Cyrus SASL library;
support for DCE slash-delimited, left-to-right DNs;
support for a domain socket transport (enable with
--enable-ldapi); and extensions to URL parsing to
support the latter transport.
2000-01-02 01:21:25 +00:00
Kurt Zeilenga
6fb04da524 Install schema/*.{at,oc}.conf files. 2000-01-01 20:11:50 +00:00
Kurt Zeilenga
8dc0fac3ad Remove 'mail' as it 'standard', not 'laser' 2000-01-01 20:10:41 +00:00
Kurt Zeilenga
13f72e9dde Add missing \n 2000-01-01 19:40:06 +00:00
Kurt Zeilenga
da93ca8c5e Remove DNS_DN experimental code. 1999-12-18 19:54:22 +00:00
Kurt Zeilenga
79b31f63c2 don't treat undefined oc as extensibleObject 1999-12-18 03:10:22 +00:00
Howard Chu
0fa6f1df1e Tentative fix for ITS #402. (Not tested yet.) If successful, this patch
should also be applied to back-bdb2/idl.c.
1999-12-17 10:04:31 +00:00
Kurt Zeilenga
30411f8402 Add slappasswd to generate rootpw. 1999-12-16 02:18:50 +00:00
Kurt Zeilenga
6253e7c278 Updated sasl response to support returning of referrals.
Updates to extended operation framework to support arbitrary
referrals and extended results without OIDs.
Updated passwd extended operation to support returning update_refs
as needed.  Needs replog support.
1999-12-15 23:22:47 +00:00
Kurt Zeilenga
b1639dadd6 Remove lint
Add copyrights
1999-12-13 04:53:59 +00:00
Kurt Zeilenga
4dfc7fc674 Fix server unavailable handling bug introduced by the ldap_open to
ldap_init change.   Fix suggested by Jay D. Allen <jay@fork.com>.
1999-12-12 20:12:39 +00:00
Kurt Zeilenga
3eef87beeb Stop reducing number of substring candiadates when there is only two or
less left.  Based upon suggestion made by bert hubert <ahu@casema.net>
1999-12-12 19:59:05 +00:00
Kurt Zeilenga
7c28aa058c Add password check and generation check.
Modify tests to use -h "ldap://localhost:port/" instead of -p port.
1999-12-12 18:45:06 +00:00
Kurt Zeilenga
fe5608c4d5 Wrap request/response bervals in a sequence. 1999-12-11 19:33:45 +00:00
Mark Valence
a76c9f18a9 Start TLS extension: check that TLS was inited successfully, return default referral on failure as appropriate. 1999-12-10 19:18:33 +00:00
Kurt Zeilenga
01ab716e8a ITS#394: index presence bug fix 1999-12-10 18:07:24 +00:00
Kurt Zeilenga
431dad371c Fix slapd SASL/ExternalOps encoding
Add controls to extended ops API signatures, need impl.
Update password to support optional server side generation of
new password, verification of old password, and changing of
non-bound user's passwords.
1999-12-10 04:52:32 +00:00
Howard Chu
ffca59fc51 Add some mutex symbols, delete unused *_values symbols 1999-12-10 03:42:39 +00:00
Kurt Zeilenga
0c8fdd5b20 Return protocol error if reqdata was provided. 1999-12-09 23:21:48 +00:00
Kurt Zeilenga
1b787171fc Place passwd extended op into builtin list. 1999-12-09 23:05:15 +00:00
Mark Valence
1fadca5419 Start TLS extended op routine. 1999-12-09 22:41:45 +00:00
Mark Valence
454284f1ea Adds for Start TLS functionality on slapd and LDAP C API. 1999-12-09 22:33:22 +00:00
Mark Valence
31eea5f43c On Windows, WSAENOTSOCK is treated the same as EBADF. This is needed because of a race condition (sock is selected just after another thread closes it), which needs a proper fix. 1999-12-09 22:05:00 +00:00
Kurt Zeilenga
354d0d5b50 Modify password code such that backend end routine calls into
frontend to complete parsing of extended op reqdata.
Modify password extended operation to allow optional id (DN)
entry to change (not tested).  Also, provide room to allow
server side password generation (not implemented).  Added optional old
password field to support proxying (not implemented).
Need to implement replog() support.
1999-12-09 21:30:32 +00:00
Mark Valence
bb693fd1b5 Bug fix: re-used Connection have TLS value for previous conn. 1999-12-09 21:06:42 +00:00
Kurt Zeilenga
5e12c84a6f Add simple password test program.
Rework lutil_passwd routines to use struct berval instead of strings.
1999-12-09 01:11:16 +00:00
Howard Chu
2ee9c196d2 Fix the 1.71 fix - only offset the length if the last character of the
referral URL is not a '/'. Also in send_search_reference, corrected the
comparison for the pre-V3 case. Previously, referrals were being dropped
completely for V2 subtree searches. More work is still needed, V2 onelevel
referral handling is wrong.
1999-12-08 23:31:11 +00:00
Kurt Zeilenga
26c7d69e8c Update for new password codes for MSVC5 1999-12-08 06:44:22 +00:00
Kurt Zeilenga
d5edb4bff6 Reengineered ldappasswd(1). Uses extended operation to set
user password.  Likely to be modified to use bind control
instead.  Use of modify deprecated in favor mechanisms that
support passwords stored externally to the directory (such
as in a SASL service).
Modified slapd extended operation infrastructure to support
backend provided extended operations.
1999-12-08 04:37:59 +00:00
Gary Williams
552c86de98 release build needs advapi32.lib added to link 1999-12-07 20:08:05 +00:00
Kurt Zeilenga
831bfa760e reduce slap_passwd_check to simple form 1999-12-06 21:42:10 +00:00
Kurt Zeilenga
6a0dbb229b Modify slapd.conf to match example provided in Quick Start Guide 1999-12-04 18:35:33 +00:00
Kurt Zeilenga
5d5588836f Fix ldap_rename parameter order (ITS#387) 1999-12-04 17:19:11 +00:00
Howard Chu
ed05ed8025 Fix memory losses, ITS#379 1999-12-03 00:21:32 +00:00
Howard Chu
cbc5c8494e Fix off-by-one in v2ref 1999-12-02 05:19:24 +00:00
Howard Chu
d1841b5c1f Fix WAKE_LISTENER hang in single-threaded server 1999-12-02 03:45:54 +00:00
Howard Chu
7eec31c8f6 Don't call FD_SET for an fd if it is already set. This causes major problems
on NT due to their fd_set implementation.
1999-12-02 03:21:06 +00:00
Mark Valence
9c88ec691d Removed unnecessary #include "back-ldbm.h". 1999-12-01 01:45:23 +00:00
Kurt Zeilenga
a9fb92467e Add send_ldap_sasl() to facility implementation of SASL bind. 1999-11-29 17:44:14 +00:00
Howard Chu
e63364baac Read a full buffer from wake_sds whenever we wake up from select(). 1999-11-28 04:05:59 +00:00
Howard Chu
eaaea51b53 Fixes for NT dynamic linking. 1999-11-27 23:40:08 +00:00
Kurt Zeilenga
3978748e35 Fix prototypes to use ber_int_t consistently. 1999-11-25 17:52:47 +00:00
Howard Chu
e9a246744e load_extension was referenced unconditionally, but is only defined
in extended.c if SLAPD_EXTERNAL_EXTENSIONS is defined. Add #ifdef here.
1999-11-25 10:07:14 +00:00
Kurt Zeilenga
10649f5601 adjust to kerberos/passwd rearrangements. 1999-11-24 00:49:02 +00:00
Kurt Zeilenga
3c586012e3 Switch userpasswd from 'ces' to 'bin'. 1999-11-23 19:03:40 +00:00
Kurt Zeilenga
42bb3e2e85 Move userPassord and krbName authentication routines to the frontend. 1999-11-23 19:00:09 +00:00
Mark Valence
6b23a78ac1 Add supportedACIMechanisms to root DSE (when compiling with ACIs enabled). 1999-11-22 18:44:07 +00:00
Mark Valence
d93ef01ac7 Add get_supported_acimech() for use by root_dse, check aci OIDs against supported list. 1999-11-22 18:42:46 +00:00
Mark Valence
0b9f7c8240 Added get_supported_acimech() 1999-11-22 18:40:05 +00:00
Mark Valence
72fff129d2 Add supportedACIMechanisms to operation attributes list. 1999-11-22 18:38:42 +00:00
Mark Valence
0cebfef468 Add supportedACIMechanisms and aCIMechanism attributetypes. 1999-11-22 18:24:08 +00:00
Kurt Zeilenga
45a6876db1 Add OID for LDAPsubentry... this item likely to change 1999-11-22 01:28:24 +00:00
Kurt Zeilenga
a1a5f9752c Add some simple DESC... every item should have a DESC 1999-11-22 00:57:26 +00:00
Kurt Zeilenga
bc0d17ba1e Shift a few more "core" items from pilot to core. 1999-11-22 00:01:44 +00:00
Kurt Zeilenga
1113769e54 Move dcObject uidObject to core.schema 1999-11-21 23:40:03 +00:00
Kurt Zeilenga
faf7f146b2 Remove Netscape (draft) TTL schema 1999-11-21 23:39:14 +00:00
Kurt Zeilenga
adc617ca16 Add RFC2589 Dynamic Directory schema 1999-11-21 23:38:14 +00:00
Kurt Zeilenga
c7dc3e235c Add OpenLDAP RCSid 1999-11-21 23:26:12 +00:00
Kurt Zeilenga
c49ee66b78 Plug memory leak. 1999-11-21 23:20:25 +00:00
Mark Valence
de24d31499 schema definitions from Active Directory. 1999-11-21 19:50:35 +00:00
Kurt Zeilenga
3d0dd02b17 Advertise LDAP_CONTROL_X_CHANGE_PASSWD.
Implementation coming soon.
1999-11-17 23:43:25 +00:00
Mark Valence
bd922dcd3b Use get_supported_extension() accessor instead of supportedextensions[] extern. 1999-11-17 23:29:30 +00:00
Kurt Zeilenga
bbeec83869 ITS#357 (cont): Don't crash on at_cn == NULL. 1999-11-17 22:53:54 +00:00
Mark Valence
43a6e2e878 Added "ntdom" backend info. 1999-11-17 22:52:34 +00:00
Kurt Zeilenga
8032f5885d ITS#357: at_cn == NULL causes crash 1999-11-17 22:43:07 +00:00
Kurt Zeilenga
a995aef4a5 Install schema. 1999-11-17 21:14:22 +00:00
Mark Valence
883f9de61d Added get_supported_extension(), removed extern supportedExtensions[]. 1999-11-17 19:17:31 +00:00
Mark Valence
fbe44c195d Use get_supported_extension() accessor instead of supportedextensions[] extern. 1999-11-17 18:59:41 +00:00
Mark Valence
e1d1259191 Added get_supported_extension(int) accessor (replaces supportedExtensions extern). 1999-11-17 18:55:01 +00:00
Kurt Zeilenga
0de4adaf09 Use objectclass LDAProotDSE for root DSE instead of LDAPsubentry.
Still need object classes for both of these.  Suspect we'll need
to assign "experimental" ones from our arc.
1999-11-17 01:47:49 +00:00
John Quillan
c6744aea36 fixed problem in which we didn't statically link in the dynamic
loader, there for not allowing any modules with shared libraries
to be loaded.
1999-11-11 06:14:41 +00:00
Howard Chu
9f7b1160dd Move str2access and access2str outside #ifdef LDAP_DEBUG clause 1999-11-10 20:28:42 +00:00
Mark Valence
951b275ed6 Added support for external extensions (based on moduleload). All new code is conditional on SLAPD_EXTERNAL_EXTENSIONS. 1999-11-09 21:42:45 +00:00
Mark Valence
be9c0c2467 Rewrite to better support external modules hooking into slapd. Added module_init() and module_kill() routines for startup and (clean) shutdown. 1999-11-09 21:32:19 +00:00
Mark Valence
a432217976 Added calls to new module_init() and module_kill() routines. 1999-11-09 21:22:12 +00:00
Mark Valence
47d4d7fbb0 Added new module_* routines, changed def. of load_extension. 1999-11-09 21:20:23 +00:00
Mark Valence
249313f75a Removed previous changes for extensions -- extensions now use moduleload. 1999-11-09 21:18:37 +00:00
Mark Valence
4903dbcd76 Bug fixes to do_extended(). 1999-11-09 04:14:38 +00:00
Mark Valence
c8aa051571 Load extension library on "extension" keyword in configs (actual load routine is in extended.c). Protected by #ifdef SLAPD_EXTERNAL_EXTENSIONS. 1999-11-09 03:37:05 +00:00
Mark Valence
90c4709eb7 In preparation for extensions improvements, added send_ldap_extended. 1999-11-09 03:29:50 +00:00
Mark Valence
edc7062f34 In preparation for extensions improvements -- added send_ldap_extended and load_extension. 1999-11-09 03:28:17 +00:00
Mark Valence
23cb3a0555 Added a "dnattr" case for ACIs (still need to check the ACI OID). 1999-11-08 18:50:51 +00:00
Kurt Zeilenga
f4856214fb *** empty log message *** 1999-11-08 15:38:59 +00:00
Kurt Zeilenga
58eb1534f9 Needs <ldap.h> due to stubs. 1999-11-08 15:30:51 +00:00
Mark Valence
af855ec94b Updated ACI code to work with new ACL changes. All changes are within the SLAPD_ACI_ENABLED #ifdef's. 1999-11-06 05:05:50 +00:00
Howard Chu
fe79f5d12a Fix - v2ref returned a pointer that it did not allocate, and send_ldap_result
would try to free it. Also, send_search_result was not freeing the pointer,
but it should have been.
1999-11-05 22:50:58 +00:00
Howard Chu
f0916150f3 Delete unnecessary exports 1999-11-05 22:49:45 +00:00