upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-12-21 15:19:34 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
21610 commits 38 branches 309 tags 68 MiB
Commit graph

861 commits

Author SHA1 Message Date
Pierangelo Masarati
10e84d7192 document missing RESTART option (ITS#4749); restore alphabetical order 2006-11-13 16:39:44 +00:00
Howard Chu
caac58806a Delete bogus .UC 6 macro invocation (This is not a 4.3BSD manpage) 2006-11-09 20:11:47 +00:00
Pierangelo Masarati
5c236d9df5 document the use of "rebind-as-user" to rebind when re-establishing a broken connection (ITS#4715) 2006-10-24 20:01:19 +00:00
Pierangelo Masarati
53cd4a88d7 document the network-timeout directive (ITS#4718) 2006-10-24 19:49:48 +00:00
Pierangelo Masarati
61b038ce35 further clarify validity of search limits, and "beautify" paragraph 2006-10-18 17:29:37 +00:00
Pierangelo Masarati
dd093c48a8 note that the replication identity may need to be treated specially by the consumer 2006-10-18 17:19:50 +00:00
Pierangelo Masarati
c3932ca2c0 s/local socket/IPC/ 2006-10-09 19:26:41 +00:00
Pierangelo Masarati
4b78b6253b cleanup URI 2006-10-09 19:18:03 +00:00
Pierangelo Masarati
dd2721c857 more on clarification of special proxy identities and resilience to connection failure 2006-10-07 18:14:30 +00:00
Howard Chu
c0fcbdd8b2 mirrormode is still single-master, but must be enforced externally 2006-10-06 21:08:25 +00:00
Quanah Gibson-Mount
67380eea1e five forms. 2006-10-06 02:04:07 +00:00
Howard Chu
dc907d929d Nobody expects the Spanish Inquisition! s/three/four/ 2006-10-06 01:45:03 +00:00
Pierangelo Masarati
18450addda document VERSION, TIMEOUT and NETWORK_TIMEOUT options 2006-09-26 02:54:34 +00:00
Pierangelo Masarati
7ed909045f document the LDAP builtin map in librewrite (ITS#4602) 2006-09-24 17:50:48 +00:00
Pierangelo Masarati
028e7c46ca document the syntax of the ldap.conf(5) file 2006-09-12 21:02:30 +00:00
Pierangelo Masarati
84d6a04c91 improve timeout support (ITS#4157, ITS#4663) 2006-09-04 08:26:09 +00:00
Pierangelo Masarati
150a4f106c improve timeout support (ITS#4157, ITS#4663); manpage cleanup 2006-09-04 08:24:05 +00:00
Pierangelo Masarati
92ff6afec0 note the single-value userPassword constraint (please review) 2006-08-28 14:33:59 +00:00
Kurt Zeilenga
b7873dbb94 Note line length limit. 2006-08-25 20:56:06 +00:00
Pierangelo Masarati
8ac5a02eb2 fix typo 2006-08-17 15:54:10 +00:00
Kurt Zeilenga
3edb468146 A few clarifications. "sync" in syncprov should refer to the 
LDAP Content Sync in general and "syncrepl" should only be used
when referring to replication-specific functionality.
 2006-07-29 16:44:29 +00:00
Howard Chu
75064457c0 ITS#4613 note that lastmod also controls entryCSN and entryUUID 2006-07-24 00:16:34 +00:00
Kurt Zeilenga
3565dcc756 Add access control note to authz-regexp discussion 2006-06-27 20:28:57 +00:00
Howard Chu
3d7647fa4a Document requirement for rootDN on logdb, note access controls. 2006-06-15 00:05:04 +00:00
Pierangelo Masarati
ed0d8d0a94 fix "require" inheritance and handling of "none" (ITS#4574) 2006-06-13 00:16:45 +00:00
Pierangelo Masarati
7b6d39a043 fix and clarify usage details 2006-06-12 22:23:41 +00:00
Pierangelo Masarati
0f8f25cf1a add support for recursive referrals (with simple loop detection) to slapo-chain (ITS#4070); add simple support for returning the error code instead of the original referral (ITS#4570) 2006-06-12 22:09:43 +00:00
Kurt Zeilenga
a031f0c638 Update RFC references 2006-06-09 17:20:38 +00:00
Pierangelo Masarati
2e92f2de68 clarify the behavior of slapo-refint(5) in case of modrdn 2006-05-29 21:14:36 +00:00
Pierangelo Masarati
795841b5a4 implement proxy quarantine (ITS#4569) 2006-05-27 19:54:27 +00:00
Pierangelo Masarati
3f3d1e48b6 document "cancel" feature 2006-05-24 17:56:48 +00:00
Pierangelo Masarati
e5fc7845fc clarify the required access to add the suffix of a database (consequence of ITS#4552) 2006-05-20 11:12:05 +00:00
Kurt Zeilenga
85a1ff4eba Clarify that "disallow bind_anon" doesn't prohibit anonymous access. 2006-05-16 18:15:29 +00:00
Pierangelo Masarati
0369560017 document ITS#4546 "single-conn" feature 2006-05-14 18:12:17 +00:00
Ralf Haferkamp
4d46b8b747 Additional fix for ITS#4522. The "dn=" ist not optional. 2006-05-12 11:48:57 +00:00
Pierangelo Masarati
fbbb8a5d93 fix ITS#4522; imply "+0" when no access is given 2006-05-10 22:25:06 +00:00
Pierangelo Masarati
4c926910d7 document "protocol-version" directive (ITS#4488) 2006-05-09 21:57:07 +00:00
Howard Chu
4934a7ab00 Apply logoldattr / reqOld to ModRDN 2006-05-03 21:38:15 +00:00
Howard Chu
286a168203 Add syncrepl TLS config keywords 2006-05-03 03:50:02 +00:00
Pierangelo Masarati
8f995a43c8 undocument "protocol-version" statement; sort statements alphabetically, except for URI 2006-05-01 22:12:17 +00:00
Howard Chu
d8595b7c6e ITS#4463 add constraint overlay 2006-04-29 10:03:36 +00:00
Howard Chu
ec4c74f7e0 Add logoldattr option 2006-04-28 20:43:20 +00:00
Hallvard Furuseth
2f04f61dc7 Support rootdn 2006-04-27 16:12:59 +00:00
Howard Chu
da5c3ec1f4 More cleanup 2006-04-27 00:37:40 +00:00
Howard Chu
d62fd3fd5a Cleanup prev commit 2006-04-27 00:27:43 +00:00
Howard Chu
79797e9d9e Added reqOld support 2006-04-27 00:21:19 +00:00
Hallvard Furuseth
b1aaaed434 Clarify output from search command 2006-04-19 13:52:20 +00:00
Kurt Zeilenga
e1b3ad0590 (very) basic documentation of "m"anage access 2006-04-12 06:03:12 +00:00
Pierangelo Masarati
5575f667ba highlight what's user-only 2006-04-09 22:25:29 +00:00
Pierangelo Masarati
ac8c1f2a26 fix multiple response messages; add overall sleep time 2006-03-30 23:49:51 +00:00
Pierangelo Masarati
a38e5265d4 fix typos 2006-03-28 23:08:47 +00:00
Pierangelo Masarati
323c921fba fix "packets" debug value 2006-03-28 15:07:51 +00:00
Pierangelo Masarati
324431062b refuse illegal values for "threads" (ITS#4433) 2006-03-20 12:12:28 +00:00
Howard Chu
3b4fc9b393 Add subord scope for syncrepl 2006-03-07 22:40:00 +00:00
Pierangelo Masarati
af0d2b1d2a add support for "subtree-exclude" 2006-02-16 01:26:39 +00:00
Howard Chu
1884790b5c ITS#4399 s/pwdCheckSyntax/pwdCheckQuality/ 2006-02-13 19:04:06 +00:00
Howard Chu
72b7f845c1 ITS#4397 delete misleading "subsequent database" config note. 2006-02-11 18:35:32 +00:00
Howard Chu
bec47e6a39 s/multimaster/mirrormode/ 2006-02-08 05:50:38 +00:00
Howard Chu
1aebe9bde4 Add multimaster keyword 2006-02-06 04:50:12 +00:00
Pierangelo Masarati
54aefe30f7 implement proxy long-lived connection TTL 2006-02-01 23:10:12 +00:00
Howard Chu
17dbef6ba8 ITS#4354 add a note about avoiding Anonymous DH. 2006-01-19 18:28:20 +00:00
Howard Chu
7b5716ae9b dd note about indexing queryid's 2006-01-18 03:31:01 +00:00
Howard Chu
ff2163ff17 Fix typo in filter example 2006-01-18 03:23:52 +00:00
Howard Chu
5a977483d4 ITS#4225 added proxyCacheQueries keyword 2006-01-18 03:21:19 +00:00
Howard Chu
8a7501449a Add optional negttl / negative result caching 2006-01-18 03:03:35 +00:00
Kurt Zeilenga
a39d48d045 LDBM is obsolete. 2006-01-13 18:28:58 +00:00
Pierangelo Masarati
9bcb37b5c1 refine fix to ITS#4320 2006-01-10 02:05:54 +00:00
Pierangelo Masarati
339b9c371e rfc2589 support (ITS#4293) 2006-01-06 17:46:52 +00:00
Pierangelo Masarati
a54ca7a6ce factor ACI code out of slapd; now it can only use dynacl layer 2006-01-06 17:12:35 +00:00
Pierangelo Masarati
a3c4b98bc9 minor fixes: typos, comments about ITS#3523 2006-01-06 16:21:22 +00:00
Howard Chu
c07045b0b6 Document cachefree option added in 2.3.14 2006-01-06 03:55:59 +00:00
Kurt Zeilenga
acbb5cf689 Happy new year! 2006-01-03 23:11:52 +00:00
Pierangelo Masarati
1fd9d40e87 part of ITS#3523 2006-01-02 08:13:33 +00:00
Pierangelo Masarati
82c04bf2a0 clarify issues related to performing operations with rootdn identity 2005-12-29 16:14:41 +00:00
Pierangelo Masarati
28aad43241 don't expose unused (and deprecated) log levels 2005-12-22 22:27:16 +00:00
Kurt Zeilenga
6618f0eac5 Fix typo 2005-12-22 01:51:57 +00:00
Pierangelo Masarati
5075d09f49 cleanup and clarify the threading issues with back-ldap and back-meta when looping back to the same DSA (ITS#4141) 2005-12-21 19:01:59 +00:00
Pierangelo Masarati
94028fe7e4 add more checks on input values 2005-12-20 13:58:25 +00:00
Howard Chu
7bee4a6099 ITS#4146,#4266 syncrepl search spec is not identical to ldapsearch(1)... 2005-12-20 12:19:22 +00:00
Kurt Zeilenga
4ee2ae8f94 StartTLS cleanup 2005-12-20 00:39:41 +00:00
Kurt Zeilenga
553f59b900 Add access control recommendation to discussion of password hashing. 2005-12-20 00:39:28 +00:00
Pierangelo Masarati
69caf0b333 clarify usage as per ITS#4197 2005-12-13 20:35:10 +00:00
Pierangelo Masarati
bd975514de add (and document) customizable bind-timeout 2005-12-12 15:57:58 +00:00
Pierangelo Masarati
fdbcfbe598 document idle-timeout; cleanup 2005-12-07 17:57:35 +00:00
Pierangelo Masarati
cdc697d997 clarify that pcache prefers to read objectClass from remote server (ITS#4232) 2005-11-30 00:16:33 +00:00
Pierangelo Masarati
7841f4f538 complete merging of dyngroup into dynlist; add back-config support 2005-11-29 02:10:47 +00:00
Pierangelo Masarati
26d802ee53 add dyngroup compare functionality to dynlist 2005-11-28 11:34:46 +00:00
Pierangelo Masarati
1e01082e10 s/chain-cache-uris/chain-cache-uri/ 2005-11-27 23:18:47 +00:00
Kurt Zeilenga
2567e820b7 Add change record format description 2005-11-24 19:26:44 +00:00
Pierangelo Masarati
dcdd2a567a add a caveat on access control issues 2005-11-23 11:16:28 +00:00
Pierangelo Masarati
9722bb7c30 fix return attributes (ITS#4203) 2005-11-23 10:20:11 +00:00
Howard Chu
a6adcedecc The overlay creates the suffix entry automatically. 2005-11-21 05:40:31 +00:00
Pierangelo Masarati
567ab77275 reflect recent code changes 2005-11-19 23:40:48 +00:00
Pierangelo Masarati
3e7fd464dc streamline back-ldap/slapo-chain configuration; add the possibility to cache non-configured, anonymous referral URIs 2005-11-19 17:48:33 +00:00
Pierangelo Masarati
32d683f383 document new behavior & configuration items 2005-11-19 15:17:08 +00:00
Pierangelo Masarati
10bf23d123 mention base scoped search requests with empty base DN (ITS#4162) 2005-11-09 10:03:53 +00:00
Pierangelo Masarati
4cab386d13 backport write operation timeouts from back-meta to back-ldap; minor cleanup & silence warnings 2005-11-06 23:29:10 +00:00
Pierangelo Masarati
fd1b1a53f2 add matchedDN; fix and clarify behavior when searching in-directory entries 2005-11-06 23:26:42 +00:00
Pierangelo Masarati
a0d04db2d1 need to reharse hexadecimals and powers of 2... 2005-11-04 19:12:42 +00:00
Pierangelo Masarati
4570d2d14b clarify some logging issues 2005-11-04 17:28:22 +00:00
Kurt Zeilenga
eb61bd92ef Note that schema described herein is a "work in progress", 
subject to change without notice.  Same needs to be
done to slapo-lastmod(5), but its organization makes it
a bit messier.
 2005-11-01 20:33:15 +00:00
Howard Chu
1e52928337 ITS#4017 add TLSDHParamFile 2005-10-28 05:42:56 +00:00
Howard Chu
7151004a03 Comment out obsolete ucdata-path directive 2005-10-28 03:24:53 +00:00
Howard Chu
43ecd6f3a2 One more try, deleted corrupt revision. Add tool-threads keyword. 2005-10-28 03:17:10 +00:00
Howard Chu
c3c0e006a9 Cleanup, proxy cache is no longer tied to meta 2005-10-19 05:22:14 +00:00
Howard Chu
b766d6da8f Fix formatting 2005-10-18 03:50:06 +00:00
Howard Chu
fc2affed6c Delta-syncrepl doc updates 2005-10-18 03:25:57 +00:00
Howard Chu
b2bf5094eb Update purge age days 2005-10-14 23:28:47 +00:00
Pierangelo Masarati
ddded040b9 document new directive as per ITS#4057 2005-10-01 18:06:13 +00:00
Howard Chu
eab3e6b572 ITS#3996 add notes about glue interaction with other overlays (syncprov) 2005-09-27 15:29:36 +00:00
Howard Chu
7fc2627431 Minor formatting tweaks 2005-09-02 06:44:33 +00:00
Hallvard Furuseth
0e099ff942 Remove more glue references 2005-09-01 13:31:00 +00:00
Howard Chu
f8ec98588b Reinstate subordinate directive, delete references to slapo-glue 2005-09-01 12:10:26 +00:00
Hallvard Furuseth
a18543d1ff Document slapo-glue(5) effect on slapcat(8), slapadd(8) and slapindex(8) 2005-08-31 22:27:56 +00:00
Hallvard Furuseth
6c1bbc2816 Update SEE ALSO section for previous commit. 2005-08-31 18:34:56 +00:00
Hallvard Furuseth
9911e90b6b Null backend support for slapadd and slapcat 2005-08-31 18:17:46 +00:00
Howard Chu
37f5c6aa0e Update for draft 09 (just added NO-USER-MODIFICATION to some operational 
attributes).
 2005-08-23 19:24:35 +00:00
Howard Chu
02f52030b0 More for valsort 2005-08-23 10:44:36 +00:00
Pierangelo Masarati
99a6ba2e10 reflect additions to dynacl config syntax 2005-08-22 16:30:41 +00:00
Pierangelo Masarati
150bcfcbcb moved to contrib/slapd-overlays/allop 2005-08-22 09:12:21 +00:00
Pierangelo Masarati
09e167427a note slapo-allop 2005-08-20 18:02:09 +00:00
Pierangelo Masarati
36c9ccdba1 cleanup objectclass inheritance 2005-08-20 18:01:40 +00:00
Pierangelo Masarati
8d5e1ae2b4 rework acknowledgments 2005-08-20 12:20:58 +00:00
Pierangelo Masarati
43fb9f0e46 allop man page 2005-08-20 12:20:39 +00:00
Pierangelo Masarati
9205f4fdb2 reflect recent changes to code 2005-08-20 11:39:08 +00:00
Howard Chu
19b8e9e1ce ITS#3936 fix wording, add clarification 2005-08-14 08:48:57 +00:00
Howard Chu
f4c1eee382 ITS#3935 tweak sessionlog description 2005-08-14 08:35:31 +00:00
Howard Chu
da2c46fe22 ITS#3935 fix sessionlog description 2005-08-14 08:20:54 +00:00
Howard Chu
023282b46f ITS#3823 minor cleanups / clarifications 2005-07-29 03:51:45 +00:00
Pierangelo Masarati
c172a20c49 document new timeout feature; improve existing stuff 2005-07-19 00:42:32 +00:00
Pierangelo Masarati
9ba68f902d provide a useful example 2005-07-18 17:24:07 +00:00
Hallvard Furuseth
cd80d6d5ec Add userPassword protection to example. 2005-07-18 14:07:57 +00:00
Hallvard Furuseth
5a84fb8b0f Add OVERLAYS section 2005-07-18 14:03:35 +00:00
Hallvard Furuseth
eda3a937e6 Note that the overlay is experimental (copied from slapd-relay.5). 2005-07-18 11:44:16 +00:00
Hallvard Furuseth
a04ee03a98 Note that relay backend is experimental (copied from slapd-relay.5). 2005-07-18 11:40:54 +00:00
Hallvard Furuseth
ca0e431cff Add slapd-hdb 2005-07-18 11:14:39 +00:00
Pierangelo Masarati
e8e5e38b52 refresh list of known overlays 2005-07-17 22:44:39 +00:00
Pierangelo Masarati
9ea3fa375c add an "OBSOLETED DIRECTIVES" section and list "subordinate" 2005-07-17 22:17:16 +00:00
Hallvard Furuseth
28256b4711 Add an example. Note that glued databases should usually have the same indexes. 2005-07-17 02:24:46 +00:00
Pierangelo Masarati
d0d98451ce fix typo 2005-07-16 15:36:29 +00:00
Pierangelo Masarati
e1ad1c6e22 move to attic... 2005-07-15 16:22:21 +00:00
Pierangelo Masarati
a238b4ffd4 apply (a modified version of) ITS#3822 patch 2005-07-15 15:46:30 +00:00
Pierangelo Masarati
6c4ce69ea8 refresh info about supported backends (added config, ldif; trimmed tcl) addresses ITS#3866 2005-07-15 15:35:26 +00:00
Hallvard Furuseth
45bf310444 ITS#3836: Explain that most monitor attrs are operational. 2005-07-07 08:21:18 +00:00
Pierangelo Masarati
deec44b89a fix further ITS#3830 issues; allow to specify a matching rule for non-DN match 2005-07-05 12:00:14 +00:00
Hallvard Furuseth
dfff2e0b32 Add copyright. 2005-07-04 12:50:57 +00:00
Hallvard Furuseth
0960b0aadd Document "REFERRALS". 
Add SEE ALSO openssl(1) and sasl(3).
 2005-07-04 12:01:19 +00:00
Hallvard Furuseth
135672c910 Manpage typos 2005-07-04 06:57:10 +00:00
Pierangelo Masarati
9565ec4bbd document new flag values for identity assertion 2005-07-03 23:18:08 +00:00
Pierangelo Masarati
297c7933b1 add "onerr" flag 2005-06-25 15:13:44 +00:00
Pierangelo Masarati
f86daac8c8 import retcode overlay 2005-06-19 22:39:44 +00:00
Pierangelo Masarati
d77bf49cb0 remove unnecessary and deprecated "lastmod" statement usage description (ITS#3789) 2005-06-17 17:44:11 +00:00
Howard Chu
cfaf61fedc Fix ITS#3766 bad font change 2005-06-11 00:57:34 +00:00
Howard Chu
cd15432de6 More accesslog updates 2005-06-10 11:41:57 +00:00
Pierangelo Masarati
94747a8489 fix previous commit; document aliasing and aliasing quotes configuration 2005-06-09 09:45:02 +00:00
Howard Chu
3bae4b4acb ITS#3691 import auditlog overlay 2005-06-07 03:03:18 +00:00
Howard Chu
2b68437214 ITS#3745 use "pcache" to instantiate instead of "proxycache" 2005-05-24 17:15:46 +00:00
Pierangelo Masarati
2a55844da3 refresh back-ldap man page, reflecting recent changes 2005-05-23 14:28:30 +00:00
Pierangelo Masarati
d32187df16 note recent changes (needs work) 2005-05-23 07:19:58 +00:00
Pierangelo Masarati
8592822aca document schema checking flag 2005-05-21 14:49:21 +00:00
Kurt Zeilenga
2e39dd74b8 Undocument LDAPv2 Kerberos options 2005-05-04 21:35:35 +00:00
Pierangelo Masarati
fa49a73fc4 fix retry; add per-target configurable number of retries; addresses ITS#3672, ITS#3676 & ITS#3680 2005-04-25 18:56:56 +00:00
Howard Chu
2a159cef0e More for ITS#3655 draft-8 updates 2005-04-22 09:15:55 +00:00
Kurt Zeilenga
3e800f20bd <limits.h> cleanup && ITS#3643 2005-04-10 19:32:14 +00:00
Pierangelo Masarati
3ead9d3140 complete access checking documentation 2005-04-10 16:06:45 +00:00
Pierangelo Masarati
a3e5490540 clarify why there's no access checking in back-dnssrv 2005-04-10 16:03:59 +00:00
Pierangelo Masarati
24a06b551f import of back-ldif man page; please review 2005-04-09 01:20:12 +00:00
Pierangelo Masarati
8feffa6091 further fulfilment of ITS#3639 2005-04-09 00:44:17 +00:00
Pierangelo Masarati
02464d6e34 further fulfilment of ITS#3639 2005-04-09 00:34:32 +00:00
Pierangelo Masarati
11ddb834be further fulfilment of ITS#3639 2005-04-08 23:39:05 +00:00
Pierangelo Masarati
797efdf730 further fulfilment of ITS#3639 2005-04-08 22:52:23 +00:00
Pierangelo Masarati
6dda364276 further fulfilment of ITS#3639 2005-04-08 22:08:40 +00:00
Pierangelo Masarati
140b33927f more to partial fulfilment of ITS#3639 2005-04-08 19:27:22 +00:00
Pierangelo Masarati
3fbc65082e remove slapd-tcl(5) 2005-04-08 19:00:58 +00:00
Pierangelo Masarati
111deb128e partial fulfilment of ITS#3639; need to check other backends thoroughly 2005-04-08 18:41:13 +00:00
Pierangelo Masarati
e7fef14447 document the dynlist overlay 2005-04-07 23:18:48 +00:00
Kurt Zeilenga
228e28c266 Remove redundant note indication. 2005-04-04 19:56:43 +00:00
Pierangelo Masarati
f1698e30f5 update diagnostics and man pages 2005-04-04 12:24:50 +00:00
Kurt Zeilenga
542468dcad Spell out BDB 2005-04-01 23:31:21 +00:00
Howard Chu
c808575c12 Add dbconfig directive for creating/writing the DB_CONFIG file 2005-04-01 11:50:37 +00:00
Pierangelo Masarati
584b21d20b initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615) 2005-03-31 18:10:11 +00:00
Pierangelo Masarati
27e5fabb8b document missing feature; avoid the risk of returning argv in an inconsistent state when an error occurs 2005-03-28 18:51:02 +00:00
Kurt Zeilenga
a0fa7f7901 Document partially implemented "disclose" level. 
"manage" remains undocumented (and unimplemented).
 2005-03-19 18:46:07 +00:00
Howard Chu
aad140151e More for translucent 2005-03-10 04:35:57 +00:00
Howard Chu
8da7cce20d Added translucent overlay (sponsored by HP) 2005-03-10 03:13:24 +00:00
Howard Chu
993649b4e0 Add back-hdb description 2005-02-15 23:44:32 +00:00
Pierangelo Masarati
ebd026cd7f fix typo 2005-02-08 13:17:02 +00:00
Pierangelo Masarati
43138aa500 use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup 2005-02-05 15:55:02 +00:00
Pierangelo Masarati
4123f29eaa fix spelling 2005-02-01 10:31:57 +00:00
Pierangelo Masarati
3b84f11d25 honor SLAP_GLUE_INSTANCE() flag; allow to advertize subordinate databases 2005-01-31 00:15:45 +00:00
Pierangelo Masarati
7d3c997aaf document recently added options 2005-01-30 22:59:43 +00:00
Howard Chu
86ab73ecd6 Remove "fasttool" option; obsoleted by "slapadd -q" 2005-01-25 20:21:36 +00:00
Pierangelo Masarati
6b37f6c06f typo in previous commit 2005-01-23 22:18:35 +00:00
Pierangelo Masarati
00f64211e2 cleanup and clarify aspects of the overlay usage 2005-01-23 22:11:46 +00:00
Pierangelo Masarati
9effc2b8f0 cleanup of rewrite code and docs 2005-01-23 21:42:05 +00:00
Pierangelo Masarati
ae0f47b063 improve parsing of acl-authcDN/acl-passwd 2005-01-22 18:48:03 +00:00
Kurt Zeilenga
69fcf8cbd6 Cleanup notices 2005-01-21 19:38:13 +00:00
Howard Chu
6c34a7c3b2 ITS#3330 mention objectClass index 2005-01-19 10:10:51 +00:00
Howard Chu
bb9fe5d7ac Cleanup prev commit 2005-01-19 09:55:03 +00:00
Howard Chu
c804bb3728 ITS#3293 add description of syncrepl starttls keyword 2005-01-19 09:47:46 +00:00
Pierangelo Masarati
2e057821e5 clarify referral usage 2005-01-19 00:28:29 +00:00
Pierangelo Masarati
b4e37e518f fixes for ITS#3480,3485,3489; implementation of DISCLOSE access for all operations (ITS#3472); ITS#3432.4; added value validate/pretty when applicable (see comments and #defines in back-sql.h) 2005-01-16 23:12:36 +00:00
Howard Chu
bf27ba977b Deleted syncrepl updatedn 2005-01-13 18:51:29 +00:00
Pierangelo Masarati
b381e1bcc8 cosmetic changes 2005-01-12 14:25:08 +00:00
Howard Chu
18b5f637de ITS#3478 the rootdn is always needed when using syncrepl 2005-01-12 03:37:58 +00:00
Pierangelo Masarati
90f64bacde more improvements 2005-01-05 16:47:49 +00:00
Pierangelo Masarati
f5936eb7fc minor naming cleanup; improvements to DN mapping layer; major docs update 2005-01-05 16:23:00 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Pierangelo Masarati
a9ed17a458 fix ITS#3441 2004-12-29 14:03:38 +00:00
Pierangelo Masarati
75c0965cc3 essential description of the chain overlay; please review 2004-12-08 23:47:08 +00:00
Howard Chu
d42d600538 Moved sessionlog description from bdb to syncprov 2004-12-08 04:57:43 +00:00
Howard Chu
553d9f6d66 Initial doc 2004-12-04 20:42:04 +00:00
Howard Chu
2f48a47194 Deleted "subordinate" keyword, added slapo-glue doc 2004-12-04 20:07:06 +00:00
Howard Chu
0560a28893 Add a checkpoint task if time-based checkpointing is configured. 2004-12-03 17:36:38 +00:00
Pierangelo Masarati
af9ce14812 allow undefined schema items to be returned by back-ldap and remapped by the rwm overlay 2004-12-01 22:00:08 +00:00
Howard Chu
8697bcdf7a Pass entry to password_quality check module, not just attrs 2004-12-01 16:02:27 +00:00
Pierangelo Masarati
184fc4878a more on ITS#3396: note that the filter is mandatory, and that the protocol must be ldap:// 2004-11-16 18:57:40 +00:00
Pierangelo Masarati
ca5d5c6fc7 back out previous commit 2004-11-15 22:54:17 +00:00
Pierangelo Masarati
f872ad29ba move special dn patterns to style enum; add creator special dn pattern 2004-11-15 22:21:50 +00:00
Pierangelo Masarati
2cf20312e2 cleanup 2004-11-13 17:59:21 +00:00
Pierangelo Masarati
d7bdb8cb24 disable referral rewrite in default suffix massage 2004-11-13 12:15:40 +00:00
Pierangelo Masarati
1b21fba38c <CONTROL> deserves a separate section 2004-11-12 12:45:10 +00:00
Ralf Haferkamp
5704a2ef6e CRL checking options for ldap.conf and slapd.conf 2004-10-28 18:50:38 +00:00
Pierangelo Masarati
a9f2f12b93 clearly indicate what the default rules are 2004-10-28 17:53:46 +00:00
Jong Hyuk Choi
c7aa0bca3f syncrepl retry feature 2004-10-27 19:43:45 +00:00
Pierangelo Masarati
df745fc44f clarify that the names of the configure statements are case-insensitive, despite style considerations lead to use uppercase for some and lowercase for others 2004-10-27 11:26:27 +00:00
Kurt Zeilenga
3819290f69 NEW_LOGGING 2004-10-19 03:18:03 +00:00
Kurt Zeilenga
54f6cf0b2c Clarify which kinds of regexs are used. 2004-10-17 19:32:13 +00:00
Howard Chu
1df6d76269 Add ppolicy_hash_cleartext config keyword, hash Adds as well as Modifies. 
Changed check_pw_quality callback to pass entry's Attributes in final arg.
 2004-10-07 04:07:17 +00:00
Pierangelo Masarati
c4123bb613 document submatches provided by non-regex <what> clauses 2004-10-06 23:19:53 +00:00
Pierangelo Masarati
796dce8657 add (and honor) a (configurable) baseObject to workaround ldap_entries view for RDBMSes that do not support UNION in views 2004-10-02 17:33:32 +00:00
Howard Chu
36b0611404 ITS#2588, ITS#2661 docs. 2004-09-28 09:02:31 +00:00
Kurt Zeilenga
424d673a6c Update SSF comments 2004-09-13 20:43:33 +00:00
Pierangelo Masarati
04734610de fix file:/// URI 2004-09-11 15:59:34 +00:00
Kurt Zeilenga
441ff00a06 Add default note 2004-09-10 22:55:59 +00:00
Kurt Zeilenga
3869e3b84d Add localSSF slapd.conf(5) directive to set SSF associated 
with ldapi:// sessions.
 2004-09-10 22:35:24 +00:00
Kurt Zeilenga
5f5d50aeb0 Add TLS cipher suite directive to ldap.conf(5) 2004-09-05 07:21:20 +00:00
Pierangelo Masarati
450b579971 cleanup docs 2004-08-24 09:27:45 +00:00
Pierangelo Masarati
f64de49b9f update and cleanup 2004-08-21 12:28:54 +00:00
Pierangelo Masarati
905c8d580b move proxycache configuration directives into slapo-pcache; add references in related man pages 2004-08-21 12:20:01 +00:00
Pierangelo Masarati
d606635ec1 cleanup 2004-08-21 09:47:50 +00:00
Pierangelo Masarati
7b4a51cc28 further improve loglevel selection 2004-07-29 12:39:51 +00:00
Pierangelo Masarati
f33b51832a allow to use names to set loglevel 2004-07-29 00:10:03 +00:00
Pierangelo Masarati
9f6f5491fe slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay 2004-07-25 23:16:40 +00:00
Howard Chu
6a00e8b326 More info about linearindex and slapadd 2004-07-22 22:52:47 +00:00
Howard Chu
dd7003cf9f Added linearindex option for slapindex. Improves performance when database 
size exceeds dbcache size by minimizing cache thrashing.
 2004-07-22 22:32:37 +00:00
Howard Chu
f9f22058e7 ITS#3178 add "fasttool" option to disable transaction logging in tool mode 2004-07-22 22:14:35 +00:00
Pierangelo Masarati
52a49e0840 improve manual and make naming contexts uniform; NOTE: backwards compatibility not preserved 2004-07-20 00:46:20 +00:00
Pierangelo Masarati
fa694f0c3c document rwm overlay 2004-07-18 21:45:20 +00:00
Pierangelo Masarati
23c5f4c09f small improvements 2004-07-06 22:37:22 +00:00
Pierangelo Masarati
f64283ccae beautify and clarify <what> clause usage and defaults 2004-06-28 14:33:35 +00:00
Pierangelo Masarati
44e8ffd4fe clarify the use of regex and expand in by dn clauses 2004-06-28 10:22:48 +00:00
Pierangelo Masarati
d8eff4d1b5 use hard limit instead of returning adminLimitExceeded when requested limit exceeds hard; improve (and document) syntax; modify test025 accordingly 2004-06-22 09:43:41 +00:00
Kurt Zeilenga
5238488e60 Replaced MSAD specific stuff 2004-06-22 04:33:18 +00:00
Pierangelo Masarati
ca33242924 manual cleanup 2004-06-20 22:39:43 +00:00
Pierangelo Masarati
b1a1f0b8b6 cleanup limits 2004-06-19 10:01:47 +00:00
Kurt Zeilenga
c521e21946 Okay, fully revert commit before last. 2004-06-17 23:23:15 +00:00
Kurt Zeilenga
28668bfa62 Partial revert of last change. shm_key documentation needed. 2004-06-17 23:01:22 +00:00
Kurt Zeilenga
08c405257b Undocument backend options which overlap DB_CONFIG options. 
DB_CONFIG should generally be used instead.
 2004-06-17 22:51:27 +00:00
Pierangelo Masarati
05b60e6b1e s/to/by/ 2004-06-17 22:51:03 +00:00
Pierangelo Masarati
f78611bf5e improve documentation of how to specify multiple uris 2004-06-16 15:18:34 +00:00
Pierangelo Masarati
a0dfadceef mention new tools 2004-06-15 22:40:53 +00:00
Pierangelo Masarati
b1718c4f69 mention new tools 2004-06-15 22:39:08 +00:00
Pierangelo Masarati
71142cc7e5 mention new tools 2004-06-15 22:38:31 +00:00
Pierangelo Masarati
a527174bcb fix indent (any man expert to check it?) 2004-06-15 20:57:28 +00:00
Pierangelo Masarati
a18e199e0d more on identity assertion 2004-05-22 17:26:02 +00:00
Howard Chu
725ca08f8d Add note about syncrepl Persist retries 2004-05-21 23:58:26 +00:00
Pierangelo Masarati
46b27edc3b more on idassert 2004-05-15 10:10:09 +00:00
Pierangelo Masarati
8b954144d6 reflect Kurt's comments on ID assertion 2004-05-14 10:01:22 +00:00
Pierangelo Masarati
f035e1f18f document proxyauthz{dn|pw} and idassert-* 2004-05-13 23:35:39 +00:00
Pierangelo Masarati
03c64541d4 add granular op restriction 2004-05-01 17:53:37 +00:00
Pierangelo Masarati
ff0df4b6aa add group authz 2004-04-25 23:59:06 +00:00
Pierangelo Masarati
9c10415919 - clarify when $$ must be used in regex; 
- clarify access privileges of rootdn;
- clarify that auth access is always required when performing authz-regexp,
  not only for proxyAuthz
 2004-04-19 01:19:41 +00:00
Pierangelo Masarati
05a84fb025 typo 2004-04-19 00:08:32 +00:00
Pierangelo Masarati
80c34cf27e typos 2004-04-18 21:36:32 +00:00
Howard Chu
8da6bf194a Added referential integrity and attribute uniqueness overlays 2004-04-17 08:17:43 +00:00
Kurt Zeilenga
349c7834ce Rename config options and attribute names (for 2.3). 2004-04-16 02:29:55 +00:00
Pierangelo Masarati
6624f68725 fix braindead config option (mostly harmless) 2004-04-15 20:27:43 +00:00
Pierangelo Masarati
8ea2f6e157 further clarify size limits 2004-04-15 01:16:53 +00:00
Pierangelo Masarati
6b2347be6a document lastmod overlay 2004-04-14 23:35:17 +00:00
Pierangelo Masarati
8bf68bc796 clarify the use of the fail_if_no_mapping switch and minor cleanup 2004-04-14 13:10:00 +00:00
Pierangelo Masarati
25c672a844 document search disable feature (spin-off of limit on unchecked entries) 2004-04-09 17:57:48 +00:00
Pierangelo Masarati
2e13fbeea1 completion of limits w/ paged results control 2004-04-09 15:54:46 +00:00
Hallvard Furuseth
6b45e32da3 Add NEW_LOGGING note for the commented-out "debug" and "logfile" options. 2004-04-09 05:27:04 +00:00
Pierangelo Masarati
85b078a3cb clarify what rewrite rules suffixmassage corresponds to 2004-04-07 20:55:32 +00:00
Kurt Zeilenga
bd7cd42669 clarify updatedn (again) 2004-04-07 03:32:55 +00:00
Kurt Zeilenga
bd765b849d ITS#2768: configuring slurpd's interval between replog checks 
based upon a patch submitted by Jason Townsend (Apple).
 2004-03-23 01:12:11 +00:00
Howard Chu
d4d5e253d9 Fix header 2004-03-19 20:23:26 +00:00
Howard Chu
057a385346 Rename slapd-ppolicy.5 to slapo-ppolicy.5 2004-03-19 20:18:46 +00:00
Pierangelo Masarati
9e159e2382 remove outdated comment 2004-03-18 21:48:21 +00:00
Pierangelo Masarati
fa3baaeae9 overlays reworking 2004-03-18 18:59:46 +00:00
Howard Chu
d1292c1b14 Added ppolicy_use_lockout keyword; Default behavior is not to issue the 
PP_accountLocked error for locked accounts. (Gives too much information
to attackers.)
 2004-03-18 10:35:54 +00:00
Pierangelo Masarati
cd105fab4e man page 2004-03-18 00:36:50 +00:00
Howard Chu
e5ec72c2b9 Add note about overlay directive 2004-03-16 22:25:08 +00:00
Howard Chu
9e39c5e0b6 Docs for ppolicy overlay 2004-03-16 22:00:30 +00:00
Pierangelo Masarati
65b49dd312 add "searchFilterAttrDN" rewrite context, and allow filterstring rewrite 2004-03-10 21:11:14 +00:00
Pierangelo Masarati
006745430e allow "expand" style in peername, sockname, sockurl as well; more sanity checks 2004-03-09 19:44:14 +00:00
Pierangelo Masarati
042869366d use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks 2004-03-09 16:33:05 +00:00
Pierangelo Masarati
4645eeb5ec cleanup DN style in limits 2004-03-08 13:13:30 +00:00
Pierangelo Masarati
5716b7f1b2 document saslAuthzTo/saslAuthzFrom new syntax; add onelevel style to DN type 2004-03-06 11:00:49 +00:00
Howard Chu
5f9a87c041 password-hash now takes a list of mechanisms 2004-03-02 22:17:20 +00:00
Kurt Zeilenga
b927f86e3f Clarify updatedn 2004-02-25 17:37:59 +00:00
Pierangelo Masarati
4e57108991 allow search limits based on groups (ITS#2967) 2004-02-18 16:40:36 +00:00
Pierangelo Masarati
cf5e2496f7 map type/name were swapped 2004-02-05 18:17:27 +00:00
Pierangelo Masarati
f5a9f62578 clarify that's useless to give write privileges to the roodn of a database... 2004-01-14 23:11:48 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Pierangelo Masarati
3994dc645a allow to set max passes per rule 2003-12-29 18:02:49 +00:00
Pierangelo Masarati
9e86d9ffe2 clarify field description in rewriteRule statement 2003-12-29 17:12:29 +00:00
Pierangelo Masarati
c860ba6a23 fix, clarify and document previous commit 2003-12-29 17:06:43 +00:00
Pierangelo Masarati
3ddfddb1a7 typo 2003-12-29 15:22:10 +00:00
Jong Hyuk Choi
cd16a93244 update syncrepl and session log info 2003-12-21 16:32:00 +00:00
Pierangelo Masarati
8e89944abc for consistency, always allow 'onelevel' as an alias for 'one' in dnstyle 2003-12-20 15:29:05 +00:00
Kurt Zeilenga
aabcce3e58 Document +0 2003-12-19 05:06:51 +00:00
Pierangelo Masarati
113727ba53 allow 'all' vs. 'any' sasl-authz-policy 2003-12-18 18:28:43 +00:00
Pierangelo Masarati
ca52621c1b some notes on access required by proxyAuthz control; 
note that other controls may need different access
privileges via, e.g., backend_attribute() (syncrepl?)
 2003-12-18 00:27:01 +00:00
Kurt Zeilenga
c4c6a38a0b Dont mention bare oc in list. 2003-12-17 17:48:56 +00:00
Kurt Zeilenga
30a1ff596d s/+/@/ in OC attr lists 2003-12-17 17:36:41 +00:00
Pierangelo Masarati
947f41832e more clarifications on dnstyle usage 2003-12-16 11:20:59 +00:00
Pierangelo Masarati
ee34f3fb64 add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication 2003-12-16 00:49:10 +00:00
Kurt Zeilenga
75b9f8acdc Make a few OPERATIONAL REQUIREMENT clarifications 
Clean up formating
 2003-12-15 18:41:23 +00:00
Pierangelo Masarati
7444352358 describe detailed access levels required for each operation 2003-12-15 17:55:55 +00:00
Kurt Zeilenga
eec0f83fd7 Fix typos 2003-12-14 21:00:52 +00:00
Pierangelo Masarati
529a03df53 use dedicated admin identity to proxyAuthz 2003-12-13 10:57:42 +00:00
Howard Chu
2f06437348 Updated for proxycache overlay. Probably belongs on its own now... 2003-12-07 04:30:39 +00:00
Kurt Zeilenga
17939ccdca Clarify that the updatedn should not be same as the rootdn. 2003-12-02 21:18:19 +00:00
Pierangelo Masarati
f0ea4161ba add administrative bind and proxyAuthz control to enable bound operations in distributed directories (need to manually #define LDAP_BACK_PROXY_AUTHZ and patches from ITS#2851 and ITS#2852) 2003-12-01 08:29:06 +00:00
Jong Hyuk Choi
4ae382fd79 misc updates 
- syncrepl : id -> rid
 - man page update
 2003-11-26 21:37:44 +00:00
Jong Hyuk Choi
1fdda703e6 Support multiple sync replication at the consumer : 
1) simultaneous operation of multiple active sync replication threads
2) cookie management for individual sync replication thread
   (include rid=%3d to the slapd cookie command line option (-c))
 2003-11-26 19:49:47 +00:00
Kurt Zeilenga
e3a4c4ec9c Notice/Acknowledge updates 2003-11-26 02:58:56 +00:00
Jong Hyuk Choi
c204f4061f keeps syncrepl manpage sections current 2003-11-24 23:16:45 +00:00
Pierangelo Masarati
9620cacd34 clarify the usage of the <modifier> field in 'dn' and 'domain' clauses of <who> access directive 2003-11-01 14:14:09 +00:00
Kurt Zeilenga
d0c05e814d Add a basic DIT content rule test. 
Fix DIT rules to allow extensibleObject in AUX
unifdef -DSLAP_EXTENDED_SCHEMA
 2003-10-24 04:40:32 +00:00
Kurt Zeilenga
f6c1163eea clarify that replacement, but not expression evaluation, 
is done on the string in group.regex=string
We really should rename the style, in this case, to "replacement".
 2003-10-15 08:04:25 +00:00
Luke Howard
976f61f0ed Update SLAPI manual page 2003-10-12 06:36:29 +00:00
Kurt Zeilenga
d03c83f077 ITS#2621, reference slapd.plugin 2003-10-12 04:22:26 +00:00
Kurt Zeilenga
fd445970fb document ditcontentrule directive 2003-10-12 04:20:20 +00:00
Howard Chu
878bff913a Added description for idlcachesize, shm_key 2003-09-27 07:06:48 +00:00
Howard Chu
0eca4fa42f More for dynamic groups 2003-09-21 10:52:44 +00:00
Howard Chu
11148522ec ITS#2573 dynamic group support 2003-09-21 10:45:57 +00:00
Howard Chu
b93a0f45d5 ITS#2497 value-level ACLs 2003-09-21 10:34:40 +00:00
Jong Hyuk Choi
7f882daf15 Schema checking option for LDAP Sync replication 2003-09-03 21:42:52 +00:00
Jong Hyuk Choi
8dc1ac85dd manual update for proxy cache (apurva) 2003-09-03 16:26:17 +00:00
Jong Hyuk Choi
372cb876a0 slapd.conf man page update (LDAP Sync replication configuration) 2003-08-28 22:29:55 +00:00
Kurt Zeilenga
9b0de44b91 Add clarification about authzDN which don't exist in the DIT 2003-08-14 18:38:20 +00:00
Kurt Zeilenga
443d4c8999 sasl-regexp clarifications 2003-07-29 15:28:52 +00:00
Kurt Zeilenga
0a1be4b126 ITS#2622: ucdata is in DATADIR 2003-06-30 18:39:17 +00:00
Hallvard Furuseth
d0582fb4c2 Replace some tabs with spaces. 
Split some too long preformatted lines.
 2003-06-29 15:34:32 +00:00
Hallvard Furuseth
c20dbfb4f6 Remove SEE ALSO locale(5); the locale option has been gone for ages. 2003-06-27 17:30:13 +00:00
Hallvard Furuseth
e613b1a353 Add BACKENDS section in slapd.conf(5). 
Briefly compare back-bdb and back-ldbm.
Remove mention of MDBM and NDBM.  Rename GNU DBM to GDBM.
Fix spacing typos.  Prefix an octal file mode with 0.
Mention "notags" (new name for "nolang" from the attribute options patch).
Add SEE ALSO slapd-monitor(5) to slapd.conf(5).
 2003-06-27 12:22:27 +00:00
Pierangelo Masarati
ade4642f85 Document proxy cache extensions (by way of Jong Hyuk Choi) 2003-06-24 11:49:56 +00:00