Commit graph

18457 commits

Author SHA1 Message Date
Howard Chu
a28b346173 Add pwGraceExpiry to gracecheck
minor cleanup
revert Other Operations change from 09
filled in IANA considerations (no longer TBD)
Reference RFC4520, not 3383 (obsolete)
2009-08-12 02:43:19 +00:00
Howard Chu
b6d4aa13fb Revision 02 2009-08-10 02:08:41 +00:00
Howard Chu
c73efa3d57 Revision 01 (expired) 2009-08-10 02:06:46 +00:00
Howard Chu
3761a2e3a4 Added version 10 2009-08-10 02:03:50 +00:00
Hallvard Furuseth
791035d93f Fix last commit: cast strcasecmp unsigned char* to char* 2009-08-07 21:46:25 +00:00
Hallvard Furuseth
3802aa5483 More ITS#6215: Catch malformed elements in ber_get_stringbvl().
Do not use ber_<first/next>_element(), which have no error return.
2009-08-07 19:26:11 +00:00
Hallvard Furuseth
bc20500e62 More ITS#6215: Define and use ber_tag_and_rest() and ber_<peek/skip>_element() 2009-08-07 19:15:26 +00:00
Hallvard Furuseth
95fbdcab4e More ITS#6215: Fix wrong fix in rev 1.121 2009-08-07 16:04:25 +00:00
Howard Chu
e229b7c398 In session_chkhost get the last CN, not the first. 2009-08-07 11:59:42 +00:00
Howard Chu
5b15978248 Give more time for sync after master restart 2009-08-06 22:15:56 +00:00
Pierangelo Masarati
9ebc168a8a log in case of failure (FIXME: should those logs be at ANY level?) 2009-08-04 23:45:42 +00:00
Pierangelo Masarati
1f33edc08e use back-config if supported 2009-08-04 23:27:52 +00:00
Howard Chu
9bd09d7b0e Fully parse undefined substring filters so they can be logged 2009-08-04 22:41:59 +00:00
Hallvard Furuseth
455c49ba3e Simplify struct bgbvr and ber_get_stringbvl(), preserving behavior. 2009-08-04 21:11:38 +00:00
Pierangelo Masarati
3e2ac1f6c0 improve previous commit 2009-08-04 14:26:40 +00:00
Pierangelo Masarati
38fa7e0621 be liberal in accepting CL (ITS#6241) 2009-08-04 14:14:17 +00:00
Howard Chu
50688c960c In slap_mods_check, always compare ordering index first 2009-08-04 02:42:20 +00:00
Pierangelo Masarati
f2e1b78391 silence warnings; misc cleanup; test refresh as non-allowed user 2009-08-03 22:49:30 +00:00
Pierangelo Masarati
20371c3eae note about OpenSSL being more liberal than OpenLDAP when there is garbage past the end of a certificateList 2009-08-03 14:07:49 +00:00
Pierangelo Masarati
8fc79e1116 rework common options (ITS#6049) 2009-08-03 13:40:28 +00:00
Pierangelo Masarati
e153f41e90 add entry_dup_to(); use it to address ITS#6172 (thanks to Michael Karcher) 2009-08-03 13:18:05 +00:00
Pierangelo Masarati
5139241ade blind fix to ITS#6163 2009-08-03 13:08:22 +00:00
Pierangelo Masarati
a1ed732822 count query answerability; allow configuration of private database 2009-08-02 22:00:01 +00:00
Howard Chu
dd88fdbcc3 ITS#6152 add olcProxyCacheOffline for manually toggling cache expiration,
assume some external process will tell us when network is on/offline
2009-08-02 01:20:03 +00:00
Howard Chu
076c1d23cf Fix attributeCertificateValidate 2009-08-01 01:11:15 +00:00
Howard Chu
e8d95fa072 Fix certificateListValidate parsing of CRL extensions 2009-08-01 00:39:41 +00:00
Howard Chu
d479db53e0 Minor cleanup 2009-07-31 03:26:03 +00:00
Howard Chu
403ee0b62e Fix, reqcert == ALLOW should ignore cert verification failures 2009-07-31 01:51:34 +00:00
Howard Chu
3f2101198b ITS#6239 use our own hostname checking for MozNSS 2009-07-31 01:32:51 +00:00
Hallvard Furuseth
02e165258c Might help ITS#6145: change while to do-while, to make visible that the
loop saving malloced data is run at least once.
2009-07-31 00:05:32 +00:00
Howard Chu
d4f2a06887 Check for CN length match as well in chkhost 2009-07-30 21:52:09 +00:00
Hallvard Furuseth
f6c10270d9 Move common Log*() macro code to new macros LogExpand()/LogArg 2009-07-30 21:45:10 +00:00
Hallvard Furuseth
ef0163c198 Fix last commit: C90 rejects declaration after code 2009-07-30 15:34:42 +00:00
Hallvard Furuseth
19b8065922 More ITS#6215: Fix va_arg integer types for ber_scanf "bei" & ber_printf "BX" 2009-07-29 23:03:10 +00:00
Hallvard Furuseth
8b3bb91e93 More ITS#6215: Fix ber_scanf(,"mMvVW",) cleanup on error:
Parse args correctly and free up memory.
Also set some lengths=0 and remove unneeded ptr==NULL tests before frees.
2009-07-29 22:38:19 +00:00
Hallvard Furuseth
886520f193 More ITS#6215: Free data to the memory context used to allocate it 2009-07-29 22:10:45 +00:00
Hallvard Furuseth
b6bad3e995 More ITS#6215:
Reject indefinite-length format in ber_skip_tag().  localize *len.
Reject broken and too large bitstrings in ber_get_bitstringa().
Simplify a number of functions somewhat - no functionality changes.
Remove unnecessary tests and ber_tag updates after ber_skip_tag().
2009-07-29 21:47:54 +00:00
Hallvard Furuseth
29aa1d07c7 For ITS#6215: No need to maintain ber->ber_usertag except at ber_printf "!" 2009-07-29 17:21:54 +00:00
Hallvard Furuseth
4bed42ae5a For ITS#6215: Do not expose obsolete Seqorset. Note ber_write(,,,nonzero) is gone. 2009-07-29 17:07:52 +00:00
Hallvard Furuseth
36d2dc034d More ITS#6215 -
Speedup & less memory allocation:
  Simplify the work to encode tag, length, integer/enum, sequence/set.
  Drop struct seqorset and allocations of it.  Replace BerElement.ber_sos.
  Drop ber_write(,,,nonzero) support. Callers, if any, need to be rewritten.
  Make ber_log_sos_dump() and ber_sos_dump() stubs, they could no longer work.
Fix ber_write() buffer overrun after ber_start_seqorset().
Check overflow and max sizes, e.g. for functions returning int size.
Some cleanup, and handwaves in the direction of supporting CHAR_BIT>8.
Add/fix comments and a few descriptive types/macros.
2009-07-29 16:49:42 +00:00
Hallvard Furuseth
53f884ac1d Remove useless asserts that will be re-assert()ed before the variable is used 2009-07-29 15:06:28 +00:00
Hallvard Furuseth
12a6f3e055 ITS#6215: Fix buffer overrun and write through NULL pointer 2009-07-29 14:57:09 +00:00
Howard Chu
8a0284cf04 ITS#5946 always allow mirrormode to be set to FALSE 2009-07-29 09:21:50 +00:00
Howard Chu
bf69b8e065 ITS#5942 consolidate server URL match to config_check_my_url().
In syncrepl, assume consumer pointing to same server but different
searchbase is OK otherwise ignore config.
2009-07-29 09:04:39 +00:00
Howard Chu
850e4ae0d3 Use distribution hints in searches 2009-07-29 00:58:46 +00:00
Howard Chu
82874bed6e ITS#6233 don't advance ptr after storing final NUL. 2009-07-28 22:04:13 +00:00
Howard Chu
016c518652 ITS#6230 fix typos 2009-07-27 18:54:56 +00:00
Howard Chu
82e95f8091 Change AttributeName.an_oc_exclude to an_oc_flags, avoid multiple
futile searches for OC matches.
2009-07-26 00:14:15 +00:00
Howard Chu
25a06ddd43 ITS#6228 fix typo 2009-07-25 23:37:24 +00:00
Howard Chu
2405153aab fix typo in prev commit 2009-07-25 07:19:21 +00:00