Quanah Gibson-Mount
073232bbc7
Happy New Year!
2024-03-26 19:45:07 +00:00
Ondřej Kuzník
860b61f41d
ITS#10013 Make freeing controls the job of whoever added it
2023-11-21 17:21:52 +00:00
Ondřej Kuzník
3ad71958ee
ITS#9878 We no longer have to trigger li->li_conn_expire_task twice
2022-09-08 08:31:22 +01:00
Quanah Gibson-Mount
fb1151573f
ITS#9863 - Forward lastbind updates if configured
...
Mark lastbind operations as being on the frontendDB so that chaining configurations are honored.
Make pwdLastSuccess flag SLAP_AT_MANAGEABLE
2022-07-06 20:46:49 +00:00
Quanah Gibson-Mount
788e9592ba
Happy New Year!
2022-01-07 18:40:00 +00:00
Ondřej Kuzník
bc37a9fdfa
ITS#9642 Remove redundant calls to slap_wake_listener()
2021-12-15 20:40:53 +00:00
Tero Saarni
3e45c71d29
ITS#9468 do not arm expire timer for connections that are already tainted
2021-06-08 15:41:40 +00:00
Howard Chu
2f880087c9
ITS#9468 always init lc_time and lc_create_time
...
Doesn't cost us anything and guarantees expiry will work if conn_ttl
or idletimeout are configured at a later time.
2021-06-08 15:41:40 +00:00
Tero Saarni
255a37461e
ITS#9468 fixed typos
2021-05-11 15:05:50 +00:00
Tero Saarni
06ed787137
ITS#9468 summarize discussion about rebind-as-user
2021-05-11 15:05:50 +00:00
Tero Saarni
97217da5e3
ITS#9468 back-ldap: Return disconect if rebind cannot be done
2021-05-11 15:05:50 +00:00
Ondřej Kuzník
de0caafe96
ITS#8721 Do not update ri_last unless we're actually retrying
2021-05-07 19:26:19 +00:00
Nadezhda Ivanova
6e3f6639b9
ITS#9502 Implement tcp-user-timeout support for back-ldap/(async)meta
2021-04-22 21:52:12 +00:00
Ondřej Kuzník
e36d1e31c5
ITS#9001 manual changes
2021-03-30 15:46:40 +01:00
Ondřej Kuzník
99efeda06f
ITS#9288 Do no change tainted status on failed retry
...
It seems refcnt == 0 connections are tainted only if they were just
removed from cache.
2021-03-02 20:00:55 +00:00
Tero Saarni
0eacc4a793
ITS#9197 back-ldap: added task that prunes expired connections
2021-02-24 22:07:48 +00:00
Quanah Gibson-Mount
ce2c5173bd
ITS#9161 - Fix various typos
...
Fix a number of different typos across the code base
2021-02-17 18:42:46 +00:00
Ondřej Kuzník
1aecfe0b8f
ITS#6518 Only remove proxyauthz control if we generated one ourselves
2021-02-01 17:22:35 +00:00
Ondřej Kuzník
4a02ae132d
ITS#6518 When using proxyauthz, replace existing control
2021-02-01 16:04:52 +00:00
Ondřej Kuzník
20ec128916
ITS#9179 Always use effective identity when proxying
2021-02-01 14:22:45 +00:00
Quanah Gibson-Mount
efaf9a4a17
Happy New Year!
2021-01-11 19:25:53 +00:00
Howard Chu
12523b0f29
ITS#9400 back-ldap: fix prev commit
2020-11-24 16:08:29 +00:00
Howard Chu
1ea12260d5
ITS#9400 back-ldap: fix retry binds
...
Regression from fix for ITS#7403
2020-11-23 05:14:30 +00:00
Quanah Gibson-Mount
f6ad222e41
Happy New Year!
2020-01-09 16:50:21 +00:00
Ondřej Kuzník
1273a38eda
ITS#8427 Set up TLS settings on each reconnection
2019-06-12 16:40:04 +02:00
Ondřej Kuzník
76df74dbea
ITS#8731 Apply doc/devel/variadic_debug/07-shortcut.cocci
2019-02-15 16:51:53 +00:00
Ondřej Kuzník
97a310b312
ITS#8731 Apply doc/devel/variadic_debug/04-variadic.cocci
2019-02-15 16:51:53 +00:00
Howard Chu
765dfaf0e4
ITS#8963 use BIND timeout for start_tls
...
Since we only support it in conjunction with Bind anyway, not
as a standalone op
2019-01-31 23:37:03 +00:00
Quanah Gibson-Mount
b45a6a7dc7
Happy New Year!
2019-01-14 18:46:16 +00:00
Quanah Gibson-Mount
59e9ff6243
Happy New Year
2018-03-22 15:35:24 +00:00
Quanah Gibson-Mount
a9ff0e97fc
ITS#6817 - back-meta work for SLAP_AUTH_DN was never finished according
...
to the ITS notes. In addition, this would need man page updates for the
feature
2017-09-26 11:27:15 -07:00
Howard Chu
bb62d9cb73
ITS#8270 use the configured exop timeout for StartTLS
...
Also, there's no need for a retry loop here. Just wait for
the specified timeout or give up.
2017-08-31 16:53:45 +01:00
Howard Chu
451a9623f3
ITS#8576 Revert "LDAP_TAILQ fix"
...
This reverts commit 8ee8248328 .
2017-02-01 11:58:54 +00:00
Quanah Gibson-Mount
1df85d3427
Happy New Year!
2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
6c4d6c880b
Happy New Year!
2016-01-29 13:32:05 -06:00
Howard Chu
e5c778fa43
ITS#8173 fix SEGV after failed retry
2015-07-16 03:29:06 +01:00
Howard Chu
66ab6bafa8
ITS#8142 cleanup prev commit
...
Only drop connection if user originally bound to this backend,
and rebind-as-user was set. Sessions from other backends would
use idassert-bind so loss of creds doesn't affect them.
2015-05-21 01:20:16 +01:00
Howard Chu
117edd79ce
ITS#8142 drop client connection on remote failure
...
also cleanup of return-code handling
2015-05-19 15:37:24 +01:00
Quanah Gibson-Mount
1705fa7e55
Happy New Year
2015-02-11 15:36:57 -06:00
Howard Chu
bc3dbcbde9
Minor cleanup (coverity)
2015-01-14 13:27:45 +00:00
Kurt Zeilenga
5c878c1bf2
Happy new year (belated)
2014-01-25 05:21:25 -08:00
Quanah Gibson-Mount
1a712bf18e
Enable features that were hidden behind LDAP_DEVEL
2013-09-19 09:50:52 -07:00
Quanah Gibson-Mount
dd7b1c39b1
Clean up whitespace in previous commit
2013-01-24 11:31:41 -08:00
Ted C. Cheng
d836def019
added tcp keepalive support to back-ldap
2013-01-24 10:53:56 -08:00
Kurt Zeilenga
0fd1bf30b8
Happy New Year
2013-01-02 10:22:57 -08:00
Howard Chu
c1800082cc
ITS#7403, #6296 fix AUTHZ_BACKEND handling
...
c_authz_cookie should only be set on explicit Bind requests.
2012-10-03 09:12:14 -07:00
Howard Chu
d7c964fedb
ITS#7403 fix idassert non-override mode
2012-09-26 09:29:57 -07:00
Ondrej Kuznik
7c40b6e904
ITS#7182 Keep connection IDs for monitoring purposes.
2012-03-29 07:00:56 -07:00
Ondrej Kuznik
be9585d0ed
ITS#7182 Maintain the operation counts.
...
Currently ldap_back_default_rebind cannot access the ldapinfo structure.
Being a configurable callback, not letting it monitor when a change
might be disruptive feels safer.
2012-03-27 04:28:37 -07:00
Kurt Zeilenga
2bbf9804b9
Happy New Year!
2012-01-01 07:10:53 -08:00