upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-05 14:42:10 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
5583 commits 38 branches 309 tags 68 MiB
Commit graph

1304 commits

Author SHA1 Message Date
Howard Chu
6a59465686 Fix declaration mismatch when CYRUS is not present 2001-09-18 00:37:56 +00:00
Kurt Zeilenga
241d6a558e Remove dead code 2001-09-09 04:47:03 +00:00
Kurt Zeilenga
553d80cedd Blindly fix TLS/SASL external interaction. 2001-09-09 03:42:26 +00:00
Kurt Zeilenga
3c844f0225 Minor cleanup of ldap_perror() 2001-09-09 03:02:54 +00:00
Kurt Zeilenga
05c9d4bfda Fix TLS ldap.conf issues 2001-09-05 21:22:41 +00:00
Kurt Zeilenga
65686b72fd Do version checks for BDB 3 or greater 2001-09-03 19:23:05 +00:00
Kurt Zeilenga
2f62c3722a Import backwards compatibility for BDB 3.0.x 2001-09-03 19:01:09 +00:00
Howard Chu
f3501cbf50 Fix ldap_int_tls_start to set its error codes in ld->ld_errno. 2001-09-02 12:06:41 +00:00
Howard Chu
b10e0029a5 Full implementation of server identity checking per RFC2830 section 3.6 2001-09-02 11:23:28 +00:00
Kurt Zeilenga
d3cb8a357f Move Cyrus SASL initializing forward 2001-08-31 00:14:04 +00:00
Howard Chu
44a3160fec Remove redundant call of SSL_set_info_callback, to allow users 
to override it in the SSL_CTX.
 2001-08-29 20:28:08 +00:00
Kurt Zeilenga
fb5df59342 Add DB 3.3 support... 
likely needs work on NT4 (but so did old code)
 2001-08-27 22:06:07 +00:00
Kurt Zeilenga
05960887bb Fix -H ldaps:// crashes due to rework of TLS code 2001-08-27 20:22:28 +00:00
Pierangelo Masarati
511e8b606f fix bug in '%' escaping in substitution pattern compile 2001-08-25 15:20:16 +00:00
Kurt Zeilenga
16fa8c4a21 Fix bug introduced during TLS rework 2001-08-02 04:20:11 +00:00
Kurt Zeilenga
2ad03e6041 To be consistent, should assert that ld is valid. 2001-07-24 16:38:42 +00:00
Kurt Zeilenga
2b7727882d misc updates, constification, deprecation... 2001-07-23 05:00:39 +00:00
Kurt Zeilenga
978e417699 Make some additional UTF8 public 
Remove lint
 2001-07-21 23:13:04 +00:00
Pierangelo Masarati
93923d4345 honors multiple type/value in rdn when generating ufn 2001-07-11 20:16:25 +00:00
Kurt Zeilenga
f61152ccbd Check for critical client controls. 2001-07-06 03:13:42 +00:00
Kurt Zeilenga
803e84fcdd TLS doesn't need ldap_host_connected_to() 2001-06-25 21:44:41 +00:00
Kurt Zeilenga
c731288dc6 Replace ATTR_URIS with ATTR_OPTION (more general solution) 2001-06-25 21:39:14 +00:00
Kurt Zeilenga
77f776dfd1 Another round of TLS updates to support secure referral chasing 2001-06-25 19:17:42 +00:00
Kurt Zeilenga
350ffe6d15 Rework tls check 
Needs to be connection specific
 2001-06-25 18:20:14 +00:00
Kurt Zeilenga
c4f5497ac6 move TLS ctx to lconn struct in prep for supporting TLS with referrals 
need to rework cert check to use per lconn host name
 2001-06-25 07:33:42 +00:00
Pierangelo Masarati
1aa97d5f87 actually, <ac/strings.h> rather goes into rewrite-int.h 2001-06-23 16:06:34 +00:00
Kurt Zeilenga
903940014c Sync with 2.x 2001-06-23 01:25:21 +00:00
Kurt Zeilenga
fdbe100e5f include <ac/string.h> as needed (not in rewrite.h) 2001-06-23 01:20:32 +00:00
Kurt Zeilenga
4a23c08678 Fix up error handling 2001-06-22 21:01:04 +00:00
Randy Kunkee
ba4371db84 Tune db3 caching: only call set_cachesize for environment, and not individual 
files.  Don't call set_cachesize if dbcachesize = 0.
 2001-06-22 08:31:36 +00:00
Randy Kunkee
1656f2c774 Patches from Mark Whitehouse (with changes from myself) to make the 
dbcachesize setting actually work for db-3.2.9.
 2001-06-21 18:54:56 +00:00
Kurt Zeilenga
10fd143311 s/__/LDAP_P/g 2001-06-16 07:37:43 +00:00
Kurt Zeilenga
55755fea2a Rebind cleanup 2001-06-15 04:49:38 +00:00
Kurt Zeilenga
11b6d1f284 Misc updates for NT4 2001-06-15 04:16:55 +00:00
Kurt Zeilenga
5f25c10980 new rebind proc 
new SASL locking
 2001-06-15 00:14:56 +00:00
Kurt Zeilenga
5ac196e3f9 Update headers 2001-06-15 00:02:12 +00:00
Kurt Zeilenga
7ee53eb12e Remove const from salt_format 2001-06-14 02:20:05 +00:00
Kurt Zeilenga
ff993c7ddb Misc updates to password codes / docs 2001-06-13 05:40:24 +00:00
Kurt Zeilenga
8d4c20cd6d Adding crypt(3) salt format (ITS#1202) from Jeff Costlow <j.costlow@f5.com> 
with minor changes by committer
---
Copyright 2001, F5 Networks, Inc, All rights reserved.
This software is not subject to any license of F5 Networks.

This is free software; you can redistribute and use it
under the same terms as OpenLDAP itself.
 2001-06-13 03:47:17 +00:00
Kurt Zeilenga
86acd7eb20 unifdef -ULDAP_UFN 2001-06-11 21:08:49 +00:00
Kurt Zeilenga
4edc93c807 EOL 2001-06-09 02:35:44 +00:00
Kurt Zeilenga
44bef574c8 Updated pthread test and usage (avoid pthread_detach if possible) 
don't use tmpnam()
 2001-06-09 01:05:35 +00:00
Kurt Zeilenga
e8ac75d22f Fix up some locking 2001-06-07 16:24:46 +00:00
Kurt Zeilenga
d773c7178f Fix typos in last commit 2001-06-07 16:15:25 +00:00
Kurt Zeilenga
486ad59260 Add a DB version check. 2001-06-07 16:11:59 +00:00
Pierangelo Masarati
a712216a6c semicolon after colon in goto labels; no C++ style comments 2001-06-03 08:52:22 +00:00
Kurt Zeilenga
fcf71ea34f clean up LDBM_{,UN}LOCK macros 2001-05-31 20:11:40 +00:00
Kurt Zeilenga
b6892b4493 big mutex needs #ifdef HAVE_BERKELEY_DB_THREAD wrapper 2001-05-28 20:16:21 +00:00
Kurt Zeilenga
94e1d48032 Misc adjustments to CBM tests 2001-05-28 20:00:17 +00:00
Kurt Zeilenga
4b8eae427f Initial CDB implementation. 2001-05-28 19:43:11 +00:00
Kurt Zeilenga
52067f461e Fix wrapping separators (no functional change) 2001-05-28 19:42:22 +00:00
Kurt Zeilenga
c6d9373d03 Enable ldbm_big_mutex for Berkeley DB 2/3 per comments from Sleepycat. 
Can be disabled if and we implement DB_INIT_CDB + DB_INIT_MPOOL +
DB_CDB_ALLDB.
 2001-05-28 19:11:29 +00:00
Kurt Zeilenga
deb9644a8a Should not be using reverse lookup names to check certificates. 2001-05-19 23:07:46 +00:00
Kurt Zeilenga
588a518bff Don't set_cachesize for db3 2001-05-18 00:55:09 +00:00
Kurt Zeilenga
5a26f9d617 Fix ; typo 2001-05-16 19:17:51 +00:00
Kurt Zeilenga
a36a6211e5 Regen 2001-05-12 18:44:07 +00:00
Pierangelo Masarati
74fa239a20 This is the commit of: 
- librewrite, for string rewriting; it may be used in back-ldap
    by configuring with '--enable-rewrite'. It must be used in
    back-meta. There's a text file, 'libraries/librewrite/RATIONALE',
    that explains the usage and the features. More comprehensive
    documentation will follow.
  - enhancements of back-ldap (ITS#989,ITS#998,ITS#1002,ITS#1054 and ITS#1137)
    including dn rewriting, a fix to group acl matching and so
  - back-meta: a new backend that proxies a set of remote servers
    by spawning queries. It uses portions of back-ldap and the rewrite
    capabilities of librewrite. It can be compiled by configuring
    with `--enable-ldap --enable-rewrite --enable-meta'.
    There's a text file, 'servers/slapd/back-meta/Documentation', that
    describes the main features and config statements.

Note: someone (Kurt?) should run 'autoconf' and commit 'configure' as
my autoconf version must be different: my configures contain a number
of differences and I didn't feel comfortable in adding them :)
 2001-05-12 00:51:28 +00:00
Gary Williams
9909448880 fix global level usage (ITS 1143, 1144) 2001-05-11 15:31:34 +00:00
Kurt Zeilenga
7522d3fcab Add HAVE_INET_NTOP 2001-05-09 23:41:38 +00:00
Kurt Zeilenga
9adfb3552a Minor redef 2001-05-07 03:50:53 +00:00
Kurt Zeilenga
9046576228 Misc cleanup 2001-05-07 03:43:23 +00:00
Kurt Zeilenga
9275b09954 Add a bit of hardening 2001-05-06 19:07:24 +00:00
Kurt Zeilenga
325a12e25d NT thread fix 2001-05-06 18:58:45 +00:00
Kurt Zeilenga
61d874af10 reimplementation of sb_max_incoming 2001-05-04 21:15:09 +00:00
Kurt Zeilenga
383391b460 detect and use fcntl (for BSD/OS) 
detect inet_ntop (for MacOSX)
 2001-05-03 05:53:34 +00:00
Kurt Zeilenga
00c645b9a1 ITS#133 2001-05-03 05:51:39 +00:00
Kurt Zeilenga
9ed2b33e2b optional SHA1 2001-05-02 19:49:44 +00:00
Kurt Zeilenga
8684be0278 Fix logic error in param check 2001-04-12 23:05:19 +00:00
Kurt Zeilenga
66fdd720f4 Fix off by one bug 2001-04-12 23:05:02 +00:00
Kurt Zeilenga
0a8b2f1381 Trim last of CLDAP cruft 2001-03-15 03:15:15 +00:00
Kurt Zeilenga
5fe2190603 libldap/cyrus.c's ldap_pvt_sasl_install fix 
from Mei-Hui Su <mei@ISI.EDU>
 2001-03-15 03:14:34 +00:00
Kurt Zeilenga
bd4c6b84ea Bug in chkResponseList loop (ITS#1047) from David @ Novell 2001-03-15 03:11:52 +00:00
Kurt Zeilenga
7f91ee936f Clean up header inclusion 2001-03-15 03:09:52 +00:00
Mark Valence
f9a76ce1ab Bug fix and Windows compat change. 2001-02-19 19:09:54 +00:00
Kurt Zeilenga
12e9ed8e12 Fix memory leak 2001-02-03 01:49:12 +00:00
Gary Williams
36880023b6 fix NT build by moving unistd.h 2001-02-02 16:07:12 +00:00
Stig Venaas
7a3c92f2a7 Adding UTF8normcmp() for normalizing and comparing two UTF8 strings 2001-01-31 15:45:30 +00:00
Stig Venaas
899357d702 Including ac/ctype.h to get TOUPPER macro 2001-01-26 14:35:20 +00:00
Kurt Zeilenga
9e8743215c Fix another typo 2001-01-22 21:25:06 +00:00
Kurt Zeilenga
1ae1061858 Fix typo 2001-01-22 20:50:07 +00:00
Kurt Zeilenga
ec87e9e30f Default objectClass kind should be STRUCTURAL 2001-01-22 08:06:48 +00:00
Kurt Zeilenga
b08f7e8bce Fix typo 2001-01-22 07:42:13 +00:00
Kurt Zeilenga
1cabc6931d Add a little whitespace for readability 2001-01-20 01:17:15 +00:00
Kurt Zeilenga
90c9d543a8 Provide extra salt for crypt(3) 2001-01-20 01:15:28 +00:00
Stig Venaas
8c61bd279e Added UTF8normalize() that does Unicode canonical normalization and 
optionally case folding
 2001-01-19 15:52:58 +00:00
Kurt Zeilenga
a4f4d8be59 Don't use ntohl(). 
Add min/max bufsize check
 2001-01-19 04:53:21 +00:00
Kurt Zeilenga
599a610164 Update SASL bufsize checks 2001-01-18 22:18:41 +00:00
Stig Venaas
3621d2a329 Also install comp.dat, and fixed a bug in create_comps() 2001-01-18 18:10:11 +00:00
Kurt Zeilenga
c0a06f25c2 Add ldap_pvt_tls_get_peer_dn() routine. Returns peer as an LDAP DN. 2001-01-18 00:40:58 +00:00
Kurt Zeilenga
319a75ef39 Fix LMPASSWD code 
Move <ac/unistd.h> and <ac/crypt.h> behind SLAPD_CRYPT
 2001-01-18 00:35:09 +00:00
Gary Williams
16e6422329 new logging 2001-01-17 17:08:44 +00:00
Gary Williams
eade718809 check for global level setting 2001-01-17 17:05:43 +00:00
Stig Venaas
cacb73c3db Add -x CompositionExclusions.txt as parameter to ucgendat, in order to 
exclude some compositions from comp.dat
 2001-01-16 17:25:20 +00:00
Stig Venaas
1bea1fdd34 Lists the characters from the UTR #15 Composition Exclusion Table 2001-01-16 17:22:26 +00:00
Stig Venaas
6c2ea5ec24 Final UCData-2.5 update 2001-01-15 16:14:43 +00:00
Stig Venaas
aa93a92313 Not currently used, but updating to UCData-2.5 anyway 2001-01-15 11:42:09 +00:00
Stig Venaas
a92da36ed8 Upgrading to UCData-2.5, this is just the docs 2001-01-15 09:30:46 +00:00
Kurt Zeilenga
a0828d6135 Rework scope defaulting to only default scope for references. 
Might break LDAPv2 partial results
 2001-01-10 23:48:24 +00:00
Kurt Zeilenga
1d1c1edf44 update rand file after use 2001-01-10 21:14:13 +00:00
Ben Collins
4391e6654a s/UTF8_CHARLEN/LDAP_UTF8_CHARLEN/ 2001-01-03 21:38:32 +00:00
Kurt Zeilenga
5082731e24 Add UTF-8 wc/mb conversion routines contributed by Novell. 
/******************************************************************************
 * Copyright (C) 1999, 2000 Novell, Inc. All Rights Reserved.
 *
 * THIS WORK IS SUBJECT TO U.S. AND INTERNATIONAL COPYRIGHT LAWS AND
 * TREATIES. USE, MODIFICATION, AND REDISTRIBUTION OF THIS WORK IS SUBJECT
 * TO VERSION 2.0.1 OF THE OPENLDAP PUBLIC LICENSE, A COPY OF WHICH IS
 * AVAILABLE AT HTTP://WWW.OPENLDAP.ORG/LICENSE.HTML OR IN THE FILE "LICENSE"
 * IN THE TOP-LEVEL DIRECTORY OF THE DISTRIBUTION. ANY USE OR EXPLOITATION
 * OF THIS WORK OTHER THAN AS AUTHORIZED IN VERSION 2.0.1 OF THE OPENLDAP
 * PUBLIC LICENSE, OR OTHER PRIOR WRITTEN CONSENT FROM NOVELL, COULD SUBJECT
 * THE PERPETRATOR TO CRIMINAL AND CIVIL LIABILITY.
 ******************************************************************************/
 2000-12-28 02:20:37 +00:00
Kurt Zeilenga
b7607bf237 ITS#884: GSSAPI interoperabity with ActiveDirectory 
Improve interoperability when of scred is present but empty.
 2000-12-27 19:42:09 +00:00
Mark Valence
a376cb1002 dup() does not work on WinSock sockets. 2000-12-21 22:38:06 +00:00
Mark Adamson
ef2dd4bcb0 ITS#897 Internal connection that is closed on one end and about to 
be closed on other end could get reused by a new internal connection.
 2000-12-08 23:23:08 +00:00
Kurt Zeilenga
d8292a62da Fix referral scope logic 2000-12-08 19:45:04 +00:00
Kurt Zeilenga
fafbe5878b Clean up 2000-11-29 03:30:59 +00:00
Kurt Zeilenga
a09139465a Update URL parsing and LDAP referral/reference chasing to handle 
search scope defaulting.
 2000-11-28 19:56:55 +00:00
Kurt Zeilenga
c0f9ec5458 ITS#889 fix 2000-11-22 20:27:30 +00:00
Kurt Zeilenga
6053ed1058 ITS#903: validate hostname in server cert from Norbert Klasen 
adapted as needed.
 2000-11-22 20:23:38 +00:00
Kurt Zeilenga
df7804debc ITS#899 LANMAN password contribution from Norbert Klasen 2000-11-22 20:18:50 +00:00
Kurt Zeilenga
5941625eb7 ITS#889: quick fix 2000-11-20 18:59:42 +00:00
Stig Venaas
b44cc963c2 Improved ucdata loading error handling 2000-11-09 12:39:18 +00:00
Kurt Zeilenga
511a84bc31 First cut of SASL/EXTERNAL 2000-10-31 23:00:35 +00:00
Kurt Zeilenga
907cd90607 Fix UTF-8 5-octet sequences 2000-10-27 21:32:46 +00:00
Kurt Zeilenga
7b9886e909 Add LDAP URL critical extension counter support. lud_crit_exts 
is the number of critical extensions contained in lud_exts.
As we currently do not support any extension, this flag is
useful for determining whether or not we should attempt to
use the URL.  Added check of this counter to ldap_url_search
and LDAPv3 chase referrals.
 2000-10-26 06:17:14 +00:00
Gary Williams
e809d3e90c get rid of unused structure 2000-10-25 16:48:11 +00:00
Gary Williams
3fdbbcaba3 add new logging macros/defs (behind NEW_LOGGING) 2000-10-25 16:47:17 +00:00
Gary Williams
0e7f9b7ab4 try new logging routines (behind NEW_LOGGING) 2000-10-25 15:35:01 +00:00
Gary Williams
ecad3079e5 add new ber dump routine (behind NEW_LOGGING) 2000-10-25 15:33:39 +00:00
Kurt Zeilenga
2504f29a0c Fix IS ASCII checks. Should be < 0x80 (0100), not < 0x100. 2000-10-23 18:04:45 +00:00
Julio Sánchez Fernández
47fd4fbad3 A little bit of Matching Rule Use. 2000-10-23 12:25:43 +00:00
Kurt Zeilenga
9e7accb034 This patch replaces gai_strerror with AC_GAI_STRERROR in daemon.c and also 
uses AC_GAI_STRERROR to report getaddrinfo failures in os-ip.c
-- Stig Venass
 2000-10-19 18:05:11 +00:00
Kurt Zeilenga
9f0d190739 Add ldap_pvt_gai_strerror(). 
Calls to gai_strerror() should be replaced with calls AC_GAI_STRERROR().
 2000-10-18 17:25:30 +00:00
Kurt Zeilenga
3498151f99 Validate session handle 2000-10-18 16:32:57 +00:00
Gary Williams
895296fbd3 fix file test 2000-10-18 14:58:34 +00:00
Kurt Zeilenga
ffe1320bf5 fix SOCKET_ERROR typos 2000-10-18 03:24:50 +00:00
Kurt Zeilenga
c56a27e7e8 Eliminate the need for a buffer. 2000-10-18 02:27:45 +00:00
Kurt Zeilenga
7fad68f7b4 remove lint 2000-10-18 00:29:21 +00:00
Kurt Zeilenga
25522f1399 Remove lint 2000-10-18 00:28:39 +00:00
Kurt Zeilenga
ce373d3800 Use SOCKET_ERROR instead of -1 2000-10-18 00:27:31 +00:00
Kurt Zeilenga
d491ac55de Update handling of partial responses 
Update comments
Update log messages
rename symbols per conventions
 2000-10-18 00:26:53 +00:00
Kurt Zeilenga
7beb6e4f89 minor cleanup 2000-10-18 00:24:58 +00:00
Kurt Zeilenga
6442964059 Handle *lud_host == '\0' 
(likely should modify parsers and other codes to disallow such)
 2000-10-17 20:30:14 +00:00
Kurt Zeilenga
174c6abfe2 ldap_url_search should use hostport of URL. 2000-10-17 19:26:04 +00:00
Gary Williams
5a541e8744 convert string levels to ints 2000-10-17 18:56:24 +00:00
Kurt Zeilenga
66818be637 Don't attempt to send abandon unless connection exists. 
If connection doesn't exist, return LDAP_SERVER_DOWN.
 2000-10-16 23:11:41 +00:00
Kurt Zeilenga
edef4b2970 ITS#821: TLS data ready fix from <mattc@chartist.com> 2000-10-16 20:26:56 +00:00
Julio Sánchez Fernández
5d899f0c00 Better processing of extensible filters. Needs testing, but the prior 
version was not encoding properly the filter.
 2000-10-15 19:17:06 +00:00
Kurt Zeilenga
bcdd316b86 entropy should be unsigned 2000-10-14 02:14:38 +00:00
Kurt Zeilenga
3d57f2ae67 Rework control create/dup routines to distinguish not 
present value from empty value.
 2000-10-14 02:13:53 +00:00
Kurt Zeilenga
92625471e1 Fix typo 2000-10-14 02:13:11 +00:00
Julio Sánchez Fernández
491a63b5d4 Prevent it from crashing. 2000-10-13 20:22:46 +00:00
Gary Williams
1217a452e9 add typedef for log function that was in lber.h 2000-10-13 14:10:41 +00:00
Kurt Zeilenga
93d9fde132 Label sb debugging as "ldap_"... 2000-10-13 01:00:55 +00:00
Kurt Zeilenga
2a6f092422 Add sasl i/o debugging 2000-10-12 23:50:58 +00:00
Gary Williams
3e0cc38404 remove LDAP_Debug macro 2000-10-12 21:16:18 +00:00
Gary Williams
7f888171f7 update logging 2000-10-12 21:14:43 +00:00
Gary Williams
a10feabf25 slight change to macro 2000-10-12 21:02:58 +00:00
Gary Williams
d37f3e6ee2 first try at logging improvements 2000-10-12 20:01:12 +00:00
Kurt Zeilenga
5a32ff0603 Add missing 'static'... (ITS#823,825,828) 
as reported by Jeff Earickson <jaearick@colby.edu>
other suggestions to be separately reviewed
 2000-10-11 23:42:53 +00:00