Commit graph

731 commits

Author SHA1 Message Date
Pierangelo Masarati
911b5fd42e do not assert when receiving intermediate response (partial fix to ITS#5931) 2009-02-09 14:55:56 +00:00
Pierangelo Masarati
bdb121c967 discard attribute values if attribute name cannot be parsed (ITS#5927) 2009-02-07 15:09:18 +00:00
Howard Chu
2b08e96b53 ITS#5916 - externally callable functions are ldap_pvt, not ldap_int. 2009-02-02 21:14:34 +00:00
Pierangelo Masarati
0ded1f16d5 Allow alias dereferencing in search C API; use new API in proxy backends (ITS#5916) 2009-01-31 10:27:07 +00:00
Pierangelo Masarati
4572e7d721 proxy RFC4525 increment; bail out in case of unsupported extension (ITS#5912) 2009-01-29 20:30:19 +00:00
Kurt Zeilenga
4af9eb9715 Update copyright notices 2009-01-22 00:40:04 +00:00
Pierangelo Masarati
fb9128cdc8 check validity of idassert-bind line (ITS#5863) 2008-12-20 22:34:00 +00:00
Pierangelo Masarati
5a50733e39 don't send error when going to retry (alternative fix to ITS#5854) 2008-12-12 09:29:51 +00:00
Pierangelo Masarati
2f32c29e4a don't bailout in case of insufficientAccess (ITS#5816) 2008-11-18 01:29:34 +00:00
Hallvard Furuseth
7cd654253e ITS#4467: Fix snprintf buffer overflow test for olcDbQuarantine output.
Overrides previous patch which partly fixed it: it was a no-op test before.
2008-10-18 23:49:28 +00:00
Hallvard Furuseth
670ec4f938 Warning cleanup: signed meets unsigned. 2008-10-17 18:05:00 +00:00
Hallvard Furuseth
05bbe7833b Fix typo in assertion: j1 + j1 -> j1 + j2. (Not a crasher, just wrong test.)
Warning cleanup: signed meets unsigned.
2008-10-17 18:02:09 +00:00
Pierangelo Masarati
23f78d1bba leave rs struct untouched (ITS#5742) 2008-10-17 00:06:12 +00:00
Pierangelo Masarati
1421d522ad fix overlays with private instances of databases (ITS#5736) 2008-10-12 20:20:46 +00:00
Pierangelo Masarati
dc414747a7 silence warnings 2008-09-16 14:44:24 +00:00
Pierangelo Masarati
969a0aef0e canonicalize undef objectClass names (much like attributes; ITS#5681) 2008-09-04 08:05:17 +00:00
Pierangelo Masarati
adc358f664 free filter before overlays' cleanup callback 2008-07-15 12:31:08 +00:00
Pierangelo Masarati
d0dd945882 fix potential leak in previous commit 2008-07-15 08:54:41 +00:00
Pierangelo Masarati
5c53e3ad72 improve previous commit (ITS#5614) 2008-07-14 22:44:01 +00:00
Pierangelo Masarati
30ffa33d7e do not propagate undefined or otherwise broken search filters (ITS#5614) 2008-07-14 22:14:49 +00:00
Pierangelo Masarati
c6f12694fc allow proxies to filter out search references (ITS#5593) 2008-07-07 21:25:59 +00:00
Howard Chu
010295e9e7 More symbols for ITS#5355 2008-06-29 21:13:03 +00:00
Pierangelo Masarati
20e8da9ba7 lookup entries as LDAP_REQ_SEARCH (ITS#5513) 2008-05-17 11:36:44 +00:00
Pierangelo Masarati
14c425b922 s/leave/func_leave/ (ITS#5411) 2008-03-15 18:16:21 +00:00
Pierangelo Masarati
ec8466ec83 invalidate connection handler when ldap_sasl_interactive_bind_s() for internal error (ITS#5404); fix response tag 2008-03-08 15:41:17 +00:00
Pierangelo Masarati
b23e4f15a9 make sure orr_newrdn is passed correctly to libldap (ITS#5397) 2008-02-28 16:22:23 +00:00
Hallvard Furuseth
5b526d2544 ITS#5328 - cosmetic cleanup (0 -> LDAP_SUCCESS) 2008-02-11 21:07:25 +00:00
Howard Chu
f481ffef9c ITS#5355 use bi_extra instead of calling directly into back-ldap 2008-02-08 02:01:17 +00:00
Kurt Zeilenga
c890c96d13 Happy New Year (belated) 2008-01-08 00:19:56 +00:00
Pierangelo Masarati
c2bbd6d5e7 fix typing warnings 2007-10-05 10:06:20 +00:00
Howard Chu
c428a16332 coverity - init i 2007-09-26 20:21:53 +00:00
Howard Chu
ebb9e029a7 Make slap_passwd_parse non-destructive 2007-09-23 04:40:51 +00:00
Howard Chu
a3547e2758 More for a_numvals 2007-09-23 04:40:16 +00:00
Howard Chu
c4dbe1a274 Attribute/Modification value counters 2007-09-21 08:43:56 +00:00
Pierangelo Masarati
43c00ab486 fix previous commit 2007-09-15 18:03:55 +00:00
Pierangelo Masarati
eb51129e29 alloc temporaries on slab 2007-09-15 17:33:59 +00:00
Pierangelo Masarati
d1c4d6481f further fix ITS#5138 (please review) 2007-09-15 17:30:07 +00:00
Pierangelo Masarati
5569180736 draft-wahl-ldap-session: append further instances of the control 2007-09-15 17:26:09 +00:00
Howard Chu
5cd816f4eb ITS#5138 don't scan past the sequence of attributes 2007-09-15 03:08:32 +00:00
Pierangelo Masarati
9c5c20b1b9 fix potential double-free (valgrind; ITS#5137) 2007-09-14 23:58:00 +00:00
Pierangelo Masarati
6d38af2689 improve error message 2007-09-13 17:54:49 +00:00
Pierangelo Masarati
331fef5e78 idassert also in case of SASL mechs that do not set authcId 2007-09-09 21:52:10 +00:00
Pierangelo Masarati
f834cdb2f7 fix proxyAuthz oid setup 2007-09-09 21:48:17 +00:00
Pierangelo Masarati
b95e40f56f cleanup 2007-08-26 15:38:20 +00:00
Pierangelo Masarati
9a00bbb35f add support for session tracking (draft-wahl-ldap-sessio) to proxy backends requests 2007-08-22 15:49:35 +00:00
Pierangelo Masarati
99c92b74c9 handle response controls in exops 2007-08-22 12:07:27 +00:00
Pierangelo Masarati
145e6fc1f8 fix or comment Calysto findings 2007-08-21 10:52:16 +00:00
Pierangelo Masarati
2f5bfba296 let req_modify_s and req_modrdn_s have a common portion to interoperate within slap_mods_opattrs() (ITS#5093) 2007-08-16 09:48:53 +00:00
Pierangelo Masarati
27428ac00e uniformly exploit rootdn bind; add support for rootdn bind to backends that didn't have it (ITS#4962) 2007-08-16 09:38:15 +00:00
Pierangelo Masarati
d8636d8e60 fix previous commit: op is not a bind if error 2007-08-11 09:30:52 +00:00
Ralf Haferkamp
3a9310431e Reworked recent backend API changes, now using a separate struct,
(ConfigReply) for the error messages.
2007-08-03 12:02:07 +00:00
Ralf Haferkamp
5ae46c195e Added a new parameter (ConfigArgs*) to the _db_init, _db_open, _db_close and
_db_destroy functions.
2007-07-25 17:21:05 +00:00
Howard Chu
3b837d4fca More for ITS#5050 2007-07-23 00:33:21 +00:00
Howard Chu
da9f66ede7 ITS#5050 use correct (Bind) timeout in dobind_int 2007-07-22 17:48:04 +00:00
Pierangelo Masarati
0122f25853 fix minor error message 2007-07-14 16:17:20 +00:00
Howard Chu
d6ef5f3a0d ITS#5025 clear sr_entry before sending search reference 2007-06-19 20:04:36 +00:00
Pierangelo Masarati
43367e162e re-parse ID from passmod request, if necessary (ultimately fixes ITS#4964, along with fix to ITS#4973) 2007-05-19 14:08:49 +00:00
Pierangelo Masarati
c30ae47206 check for NULL dn in URL; set error code before seding extended response (partially addresses ITS#4968) 2007-05-15 22:29:06 +00:00
Hallvard Furuseth
e4a87ee27c Fix char* = const char* (text = sr->sr_text) 2007-04-04 17:48:25 +00:00
Pierangelo Masarati
d0e6e17b89 cleanup after sending entry 2007-03-21 22:33:09 +00:00
Pierangelo Masarati
6420bcd7d7 restore op before checking result (and, if necessary, bailing out) 2007-03-19 15:50:28 +00:00
Pierangelo Masarati
fd1efa13d0 fix previous commit (ITS#4861) 2007-03-09 17:24:56 +00:00
Pierangelo Masarati
6a9c44849c check consistency of referrals and result code (ITS#4861) 2007-03-08 17:57:49 +00:00
Pierangelo Masarati
5509c20961 keep SlapReply clean (ITS#4828) 2007-02-01 21:58:48 +00:00
Pierangelo Masarati
917ae32030 more about quarantine separation 2007-01-28 00:31:47 +00:00
Pierangelo Masarati
e07dc8c757 fix more spurious return stuff; split quarantine in: detection, exploitation, recovery; describe failure reasons 2007-01-28 00:24:10 +00:00
Pierangelo Masarati
6155d91143 don't return adminLimitExceeded unless LDAPv3; use largest among candidates timeouts 2007-01-26 01:59:30 +00:00
Pierangelo Masarati
5a228fa87a implement search timeout when the remote server does not respond in the specified timeout 2007-01-26 00:40:54 +00:00
Pierangelo Masarati
ecc28ff57c fix cached connection taint in case of timeout 2007-01-26 00:40:05 +00:00
Kurt Zeilenga
3297be046b silence warnings 2007-01-19 07:31:02 +00:00
Pierangelo Masarati
02af23c4c1 allow modules to muck with connection tree and so 2007-01-18 00:02:29 +00:00
Pierangelo Masarati
b604ef8d52 test mapped error code (ITS#4808) 2007-01-17 21:52:13 +00:00
Pierangelo Masarati
ee2370bf42 one more round of cached connections fixes/improvements 2007-01-13 11:51:28 +00:00
Pierangelo Masarati
78362d5acf fix entry deallocation 2007-01-11 21:33:39 +00:00
Pierangelo Masarati
fc20e15556 further cleanup 2007-01-10 00:53:05 +00:00
Pierangelo Masarati
e79580d203 disallow invalid per-syntax shortcuts 2007-01-09 15:33:54 +00:00
Pierangelo Masarati
3042c57ac0 allow forcing abandon of search operations on a connection basis 2007-01-09 12:19:04 +00:00
Howard Chu
afabf44493 Fix prev commit 2007-01-09 02:09:44 +00:00
Howard Chu
99a1d0f979 Fix TLS parsing 2007-01-09 01:35:31 +00:00
Pierangelo Masarati
e2d65fb69b fix previous commit(s) 2007-01-09 00:59:17 +00:00
Howard Chu
a6a8fb514b Add TLS context configuration 2007-01-08 23:36:24 +00:00
Pierangelo Masarati
82de650b19 fix idassert mode=self for anonymous operations (ITS#4798) 2007-01-08 18:34:59 +00:00
Pierangelo Masarati
45edf395eb cleanup ITS#4781 enhancement 2007-01-06 00:45:02 +00:00
Pierangelo Masarati
d132415e5f cleanup 2007-01-05 10:34:32 +00:00
Pierangelo Masarati
3284f54ec0 silence warnings 2007-01-03 21:34:49 +00:00
Kurt Zeilenga
da6d9eb046 happy new year 2007-01-02 20:00:42 +00:00
Pierangelo Masarati
7e8242d50d pool privileged connections (ITS#4791) 2006-12-24 18:23:36 +00:00
Pierangelo Masarati
6193ee4003 don't leak callbacks if stuff cannot be registered; provide a means to dispose of private stuff if required 2006-12-24 15:44:56 +00:00
Pierangelo Masarati
4483e79906 further fix of ITS#4782 2006-12-19 22:11:33 +00:00
Pierangelo Masarati
6752a27c0e (almost) blind fixes to ITS#4782 2006-12-19 21:59:23 +00:00
Howard Chu
08b209ffa9 ITS#4782 quick fix, never send result from proxy authz check. 2006-12-19 20:37:38 +00:00
Pierangelo Masarati
f52bb3d2c7 catch double free 2006-12-18 01:29:07 +00:00
Pierangelo Masarati
96152e2a3f fix another typo 2006-12-17 22:48:17 +00:00
Pierangelo Masarati
68fd83f2fd further fix previous commit 2006-12-17 22:21:41 +00:00
Pierangelo Masarati
ef0261e84c cleanup and document ITS#4781 commit 2006-12-17 22:20:02 +00:00
Pierangelo Masarati
3e427ad75a support a separate cached connection for binds when using (liberal) idassert flagged with "override" (ITS#4781) 2006-12-17 22:11:40 +00:00
Pierangelo Masarati
5e3d7a55dc rewrite chased DN according to referral's (ITS#4776) 2006-12-15 02:00:24 +00:00
Pierangelo Masarati
09abc9f8ae fix leak in case of retry 2006-11-24 01:44:11 +00:00
Howard Chu
4b6a3e8b6d Convert schema parsers to ConfigArgs so they can pass errors back to clients 2006-11-15 01:18:37 +00:00
Pierangelo Masarati
71bcd4a4b6 s/ldap_int_discard/ldap_pvt_discard/ 2006-10-28 18:13:12 +00:00