Commit graph

166 commits

Author SHA1 Message Date
Randall Mason
6285668ce5 ITS#8903 - Add option to bind early in ldappasswd
ldappasswd is slightly different from a standard passwd workflow in that it
requests an old password, then a new password, then the old password
again.  This confuses people who are used to the unix passwd tool as
well as people who use password manager.  I've seen quite a few people
who have generated a new password, overwriting the old one, and then
need a password reset because they still need to bind to modify their
password.

This patch adds an option to bind at the beginning of the process so
that you can pass '-E' to ldappasswd and it will bind early in the
process so that the process is the same as the standard passwd.  All it
does is run the bind towards the beginning of the process instead of the
end.

The attached patch file is derived from OpenLDAP Software. All of
the modifications to OpenLDAP Software represented in the following
patch(es) were developed by Randall Mason randall@mason.ch. I have not
assigned rights and/or interest in this work to any party.

I, Randall Mason, hereby place the following modifications to
OpenLDAP Software (and only these modifications) into the public domain.
Hence, these modifications may be freely used and/or redistributed for
any purpose with or without attribution and/or other notice.
2021-06-27 20:18:24 +00:00
Quanah Gibson-Mount
efaf9a4a17 Happy New Year! 2021-01-11 19:25:53 +00:00
Quanah Gibson-Mount
a97eed06f0 ITS#6937 - Remove unused proctitle bits 2020-04-15 19:32:28 +00:00
Quanah Gibson-Mount
f6ad222e41 Happy New Year! 2020-01-09 16:50:21 +00:00
Quanah Gibson-Mount
b45a6a7dc7 Happy New Year! 2019-01-14 18:46:16 +00:00
Quanah Gibson-Mount
59e9ff6243 Happy New Year 2018-03-22 15:35:24 +00:00
Quanah Gibson-Mount
1df85d3427 Happy New Year! 2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
6c4d6c880b Happy New Year! 2016-01-29 13:32:05 -06:00
Quanah Gibson-Mount
1705fa7e55 Happy New Year 2015-02-11 15:36:57 -06:00
Kurt Zeilenga
5c878c1bf2 Happy new year (belated) 2014-01-25 05:21:25 -08:00
Kurt Zeilenga
0fd1bf30b8 Happy New Year 2013-01-02 10:22:57 -08:00
Kurt Zeilenga
2bbf9804b9 Happy New Year! 2012-01-01 07:10:53 -08:00
Hallvard Furuseth
ef76d419ec ITS#6548,#7092 Unbind,cleanup before client exit.
Gets rid of "(connection lost)" in slapd statslog "closed" message.
2011-11-20 13:52:40 +01:00
Howard Chu
d76be4828c ITS#6977 fix verbose check in client tools 2011-06-23 17:10:37 -07:00
Kurt Zeilenga
966cef8c9a Happy New Year 2011-01-05 00:42:37 +00:00
Kurt Zeilenga
d271154ffb Allow all common controls (namely for ppolicy) 2010-10-27 01:00:47 +00:00
Kurt Zeilenga
3dadeb3efe happy belated New Year 2010-04-13 22:17:29 +00:00
Pierangelo Masarati
c5cf99dd4d move getpassphrase inside tool_bind; make sure password is always malloc'd and freed 2010-04-12 04:06:13 +00:00
Howard Chu
789388ddfe ITS#6005 strings from ber_scanf must be ber_memfree'd 2009-03-08 00:08:09 +00:00
Kurt Zeilenga
4af9eb9715 Update copyright notices 2009-01-22 00:40:04 +00:00
Howard Chu
86b5de38be ITS#5812 add SASL_NOCANON / -N option 2008-11-21 03:30:15 +00:00
Pierangelo Masarati
43ae03fc10 silence warnings 2008-09-16 14:10:02 +00:00
Kurt Zeilenga
c890c96d13 Happy New Year (belated) 2008-01-08 00:19:56 +00:00
Kurt Zeilenga
ae47797cc8 Send common request controls with extended request.
Only bitch about missing genPassword in success response.
2007-06-21 22:01:36 +00:00
Kurt Zeilenga
8eb0741a1c Ppolicy control should be sent with every request...
handle returns in ldappasswd(1) and ldapwhoami(1).  Likely needs to be
added to other ldap*(1) commands.
2007-06-19 01:02:42 +00:00
Kurt Zeilenga
fa6aa0688a Revert last commit
Purports to remove kbind, but adds a ldap_search_s() request.
2007-06-19 00:58:35 +00:00
Howard Chu
d0d709fadd ITS#4799 remove kbind 2007-01-10 00:01:38 +00:00
Kurt Zeilenga
da6d9eb046 happy new year 2007-01-02 20:00:42 +00:00
Luke Howard
b7c41e655f Add common -o nettimeout option to specify network timeout 2006-12-18 03:17:43 +00:00
Kurt Zeilenga
8e5699e60f fix confused comment 2006-08-17 00:26:25 +00:00
Howard Chu
05655a202c ITS#4403 don't unbind a NULL ld. 2006-02-16 08:21:02 +00:00
Pierangelo Masarati
57ca537d0c rework control response handling 2006-01-08 19:51:28 +00:00
Kurt Zeilenga
acbb5cf689 Happy new year! 2006-01-03 23:11:52 +00:00
Pierangelo Masarati
9db7874784 complain if new password is not returned when expected 2006-01-02 14:16:34 +00:00
Pierangelo Masarati
81b28fe329 check reponse tags in ldapmodify; other functions rely on client library, which might need further work. Also, remove or silence all deprecated API calls 2005-11-16 21:50:51 +00:00
Kurt Zeilenga
5a654472f5 Provide unique error message for ldap_parse_extended_result 2005-10-29 23:42:12 +00:00
Pierangelo Masarati
4a223061ed allow abandon/cancel for all tools 2005-04-19 21:21:51 +00:00
Kurt Zeilenga
c57f440118 ITS#3620: Initial Unbind control fix
A better fix would be to use the _ext interface
Also add and use a tool_destroy() function (to destroy SASL/TLS contexts).
2005-04-01 23:29:02 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Kurt Zeilenga
e29381da53 Fix typo 2004-08-28 02:30:18 +00:00
Kurt Zeilenga
25805a3bb2 -E/-e are not just for controls 2004-03-12 22:34:07 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Kurt Zeilenga
d2b9a4913b Use ldap_unbind_ext(3) 2003-12-18 19:15:57 +00:00
Kurt Zeilenga
d5a1231a64 Remove -C(hasing) option. Doesn't make sense for update operations
(at least not with a secure authentication framework).
2003-12-17 00:34:37 +00:00
Kurt Zeilenga
e3a4c4ec9c Notice/Acknowledge updates 2003-11-26 02:58:56 +00:00
Kurt Zeilenga
327880b984 Notice updates 2003-11-25 23:17:08 +00:00
Kurt Zeilenga
aa8fd2f6b0 -y should not require -W 2003-09-12 20:10:05 +00:00
Kurt Zeilenga
6b9109466c ITS#2696:
ldappasswd -T and -t options don't work, they try to open the file ldappasswd
  instead of the argument passed.

Applied patch provided by Nicolas Schodet.
2003-09-09 17:17:21 +00:00
Kurt Zeilenga
afa2cd1893 ITS#2657: authzid (and assertion) should apply to most everything
(preliminary modify/incr client-side code)
2003-07-30 10:21:16 +00:00
Kurt Zeilenga
a255dbb9e9 Add -y support 2003-04-12 03:46:45 +00:00