Ondřej Kuzník
8b353df0e2
ITS#9517 Add module args support to slappaswd and relevant docs
2021-04-14 18:17:59 +01:00
Howard Chu
e16b0a739c
ITS#8586 server cert manpage tweaks
2021-04-12 20:32:12 +01:00
Andreas Schulze
680091b5b4
ITS#8586 load cert+chain from TLSCertificateFile
...
For OpenSSL
2021-04-12 20:32:09 +01:00
Karl O. Pinc
4e4341f379
ITS#9396 Recommend namedPolicy for ppolicy entries
2021-04-09 18:33:48 +00:00
Howard Chu
2a3b64f4e6
ITS#9518 add LDAP_OPT_X_TLS_PROTOCOL_MAX option
...
OpenSSL only
2021-04-09 18:12:40 +01:00
Quanah Gibson-Mount
0ad73f8717
ITS#9437 - Fix slapo-otp overlay name
2021-03-31 23:12:00 +00:00
Quanah Gibson-Mount
c5a56bcbeb
ITS#9437, ITS#9470 - Document homedir, OTP overlays
2021-03-31 17:59:35 +00:00
Ondřej Kuzník
fe7e4697e9
ITS#9437 Implement TOTP drift correction
2021-03-31 14:57:56 +00:00
Ondřej Kuzník
87f3bad8bb
ITS#9437 Add otp_2fa overlay
2021-03-31 14:57:56 +00:00
Quanah Gibson-Mount
adb16cbd64
ITS#9470 - Fix typos
2021-03-26 16:28:39 +00:00
Ondřej Kuzník
8382d3c380
ITS#9470 Add homedir overlay
2021-03-26 01:27:09 +00:00
HoweverAT
9d594a118e
ITS#8847 Add SOCKET_BIND_ADDRESSES Option
2021-03-25 18:47:11 +00:00
Howard Chu
f1ebb45695
ITS#9251 make max filter depth configurable
2021-03-22 17:31:13 +00:00
Quanah Gibson-Mount
4c44e35076
ITS#9200 -- 2.4 to 2.5 upgrade documentation and updates
2021-03-18 18:39:28 +00:00
Quanah Gibson-Mount
91a5159152
ITS#8773 - Add slapo-deref.5 man page
2021-03-15 16:31:55 +00:00
Quanah Gibson-Mount
2fcfeb83f0
ITS#8742 - Bring slapd.conf.5 and slapd-config.5 in sync
2021-03-11 19:24:25 +00:00
Quanah Gibson-Mount
c7763538de
ITS#9453 - Make pw argon2 official
2021-03-10 23:21:08 +00:00
Quanah Gibson-Mount
9d5267e14e
ITS#9079 - Fix minor issues with slapo-unique man page
2021-03-09 19:12:49 +00:00
Quanah Gibson-Mount
d41b35b8c0
ITS#9260 - Reference conn-pool-max option in related man pages
2021-03-09 17:22:42 +00:00
Quanah Gibson-Mount
7a8f7c6efb
ITS#9490 - Fix typo
2021-03-05 15:59:17 +00:00
Quanah Gibson-Mount
932d18fdc1
ITS#8724 - Note that paged results is stripped
2021-03-04 21:44:38 +00:00
Quanah Gibson-Mount
5d5f431868
ITS#9490 - Add keepalive settings to ldap.conf
2021-03-04 17:11:35 +00:00
James Rine
2b4e8acdd1
Change UAF moto in documentation to "Naturally Inspiring"
2021-03-03 19:57:10 +00:00
Quanah Gibson-Mount
fc0cb887c3
Revert "ITS#8977 - Remove documentation for idlexp"
...
This reverts commit a40f6bff89 .
2021-03-02 19:56:51 +00:00
Ondřej Kuzník
6bfdb0342d
ITS#8215 Some more slapmodify manpage tweaks
2021-03-02 19:08:50 +00:00
Quanah Gibson-Mount
2ec44a11ab
ITS#8454 - Add detailed information about auditlog format
2021-02-26 20:13:47 +00:00
Quanah Gibson-Mount
51462ca0ee
ITS#8659 - Add missing data on auditlog schema
...
Add missing objectClass auditContainer
Add missing attribute reqMod to auditModRDN objectClass
2021-02-26 17:01:12 +00:00
Ondřej Kuzník
34b95c520e
ITS#9438 Add remoteauth overlay
2021-02-25 22:11:39 +00:00
Quanah Gibson-Mount
dc6aab1f7d
ITS#8665 - Document limits restrictions for glued databases
2021-02-25 00:48:05 +00:00
Paul B. Henson
146889f205
ITS#9419 Add support for HAProxy proxy protocol v2
2021-02-24 18:11:09 +00:00
Ondřej Kuzník
3925b8e009
ITS#7259 Clarify password length considerations
2021-02-24 13:19:40 +00:00
Quanah Gibson-Mount
a40f6bff89
ITS#8977 - Remove documentation for idlexp
...
The idlexp feature depends on additional work that is not yet done. Remove documentation for the feature
2021-02-18 18:47:40 +00:00
Ondřej Kuzník
e6cf237802
ITS#9180 Mark memberof deprecated
2021-02-18 16:28:12 +00:00
Jan Synacek
c25fa7b0e5
ITS#7744 Fix TLS_REQCERT description
2021-02-18 14:45:51 +00:00
Howard Chu
dfd8515e8e
ITS#8861 clarify tls keyword
2021-02-18 14:33:16 +00:00
Howard Chu
70a7f51742
ITS#7795 more detail for "manage" priv
2021-02-18 13:23:47 +00:00
Quanah Gibson-Mount
c9c0e9f05c
ITS#8248 - Clarify documentation around logfile directive
2021-02-17 21:00:55 +00:00
Quanah Gibson-Mount
ce2c5173bd
ITS#9161 - Fix various typos
...
Fix a number of different typos across the code base
2021-02-17 18:42:46 +00:00
Quanah Gibson-Mount
71213e6938
ITS#8132 - Clarify wording on serverID.
2021-02-17 17:33:48 +00:00
Quanah Gibson-Mount
97ba684c9e
Fix typo
2021-02-17 17:28:33 +00:00
Ondřej Kuzník
c109bdd755
ITS#9292 Explicitly mention ldap_memfree
2021-02-17 15:13:49 +00:00
Karl O. Pinc
7077dc3138
Better explanation of when access control processing stops
2021-02-17 15:02:33 +00:00
Karl O. Pinc
2b402a5f34
Improve authzFrom and authzTo docs
2021-02-17 15:02:22 +00:00
Ondřej Kuzník
d3fca1364b
ITS#9102 Update secprop documentation
2021-02-17 13:24:00 +00:00
Jan Synacek
f841427950
ITS#7866 - Mention default database in tools' man pages
2021-02-15 19:53:28 +00:00
Howard Chu
9090dd727b
ITS#7584 packets, BER, and parse loglevels
...
Note these are only valid for debug output, not syslog
2021-02-15 18:09:47 +00:00
Howard Chu
0b769a4490
ITS#6694 reorganize unchecked/pagedresults limits descriptions
2021-02-15 13:40:58 +00:00
David Barchiesi
0799f58533
ITS#9442 Add negregex constraint type for not allowing values based on a regex.
2021-01-28 18:54:03 +00:00
Quanah Gibson-Mount
e768dcd062
ITS#6406 - Note accesslog storage requirements
...
Update slapo-accesslog(5) man page to note that the database backend storing the data must support an ordered return of results.
2021-01-26 18:06:05 +00:00
Quanah Gibson-Mount
7d096281ef
ITS#8214 - Fix man page to require rwm prefix
2021-01-26 15:59:43 +00:00
Quanah Gibson-Mount
efaf9a4a17
Happy New Year!
2021-01-11 19:25:53 +00:00
Howard Chu
354e678ce9
ITS#9426 dynlist: don't add unexpanded groups at end of search
...
if pagedResults is in use
2020-12-15 22:55:47 +00:00
Ondřej Kuzník
b49f51879f
Implement client pending operation limits
2020-11-17 17:58:15 +00:00
Ondřej Kuzník
25a4d684fc
Permit lloadd to share slapd TLS context
2020-11-17 17:58:15 +00:00
Ondřej Kuzník
513659c610
Document config behaviour
2020-11-17 17:58:15 +00:00
Nadezhda Ivanova
678fa100f7
Convert the load balancer into a backend
2020-11-17 17:58:14 +00:00
Nadezhda Ivanova
37cd5f21d5
Enable compilation of the load balancer as a module
...
To compile the balancer as a slapd module, pass --enable-balancer=mod to ./configure
Use --enable-balancer(=yes) to compile as standalone server.
2020-11-17 17:58:14 +00:00
Ondřej Kuzník
0cfd4fca4d
Make timeouts common and redo connection read timeouts
2020-11-17 17:58:14 +00:00
Ondřej Kuzník
ccf75c96c4
Update write timeout to timeval
2020-11-17 17:58:14 +00:00
Ondřej Kuzník
7b413f9ed4
Update docs and defaults
2020-11-17 17:55:46 +00:00
Ondřej Kuzník
9d3b998abd
Document new bind configuration
2020-11-17 17:55:46 +00:00
Ondřej Kuzník
a8a0fe26b0
Documentation updates
2020-11-17 17:55:46 +00:00
Ondřej Kuzník
495dfa69a2
Split client/upstream PDU size limits
2020-11-17 17:55:46 +00:00
Ondřej Kuzník
3fa8a0cdf2
Rename listener-threads to reflect the option
2020-11-17 17:55:46 +00:00
Ondřej Kuzník
8d85912ab9
lloadd documentation
2020-11-17 17:55:46 +00:00
Quanah Gibson-Mount
4041848587
Add documentation on ACL requirements for psuedo-attribute entryDN
...
Also fix up the example for replacing the memberOf overlay
2020-11-10 23:30:47 +00:00
Quanah Gibson-Mount
66af4cfd5d
ITS#8618 - Remove deprecated -h and -p options to client tools
2020-10-01 21:27:59 +00:00
Lukas Juhrich
c8ba729f84
Issue#8769 - Fix oid search extension syntax in documentation
...
The option string, e.g. '<oid>=:dn:' is parsed like a LDIF entry starting from
the '=' and replacing the '=' with a dummy variable 'x'. In this case, said
string is 'x:dn:', so the resulting effective value is 'dn:'. This also implies
that base64 values have to be passed in the form '<oid>=::<b64value>'.
2020-09-04 22:39:53 +00:00
Quanah Gibson-Mount
e749750a8f
ITS#8159 - Add missing "hard" parameter to size.prtotal
2020-09-01 19:40:36 +00:00
Quanah Gibson-Mount
04124c1f70
ITS#8175 - Fix missing descriptions for olcDisallows for proxy_authz_non_critical and dontusecopy_non_critical
2020-09-01 18:04:06 +00:00
Howard Chu
d5ed7c5027
ITS#9054, #9318 document new TLS options in slapd
2020-08-28 11:09:25 +01:00
Howard Chu
608a822349
ITS#9318 add TLS_REQSAN option
...
Add an option to specify how subjectAlternativeNames should be
handled when validating the names in a server certificate.
2020-08-21 18:05:08 +00:00
Howard Chu
2386a11649
ITS#9054 Add support for multiple EECDH curves
...
Requires OpenSSL 1.0.2 or newer
2020-08-21 07:58:07 +01:00
Ondřej Kuzník
43ebfa8fb4
ITS#6467 Make accesslog a possible sessionlog source
2020-07-22 22:25:10 +01:00
Quanah Gibson-Mount
3716245fec
Issue#8511 - Update documentation and configs to correctly use multiprovider
2020-07-22 19:32:49 +00:00
Ondřej Kuzník
a49b553676
ITS#9279 Implement Netscape password policy controls in ppolicy
2020-07-22 18:57:38 +00:00
Howard Chu
c470af3749
ITS#9121 add examples to manpage
2020-07-22 15:11:24 +00:00
Howard Chu
2c0499ae4e
ITS#9121 support nested groups
2020-07-22 15:11:24 +00:00
Howard Chu
9210ed1618
ITS#9121 add dynamic memberOf support for static groups
2020-07-22 15:11:24 +00:00
Ondřej Kuzník
c7b008eede
ITS#8701 Fix documentation
2020-07-21 10:48:47 +01:00
Quanah Gibson-Mount
21eef84a49
ITS#9275 -- Update wording to remove slave and master terms, consolidate on provider/consumer
2020-07-18 16:27:04 +00:00
Quanah Gibson-Mount
b180833da8
ITS#9020 - Fix typo
2020-07-14 15:22:25 +00:00
Ondřej Kuzník
bdc9dbc511
ITS#8701 Implement account usability in ppolicy
2020-07-07 16:43:37 +01:00
Quanah Gibson-Mount
c06ac436e2
ITS#9235 Merge libldap_r into libldap
2020-07-03 17:23:14 -07:00
Ondřej Kuzník
376d5d65cb
ITS#7084 ACL of 'manage' gives pasword administrator access
...
Password administrators can bypass safeModify, password quality checks
and trigger reset if policy instructs the server to.
2020-07-03 20:42:14 +00:00
Quanah Gibson-Mount
58c978825c
Issue#9020 - Use consistent namespaces for overlays
2020-06-22 20:44:12 +00:00
Ondřej Kuzník
528ab11f66
ITS#9271 Document ldap_parse_intermediate
2020-05-28 16:02:02 +00:00
Quanah Gibson-Mount
f926e66723
ITS#8873 - Delete obsolete configuration options from back-ldap, back-meta, and back-asyncmeta
2020-05-26 19:59:56 +00:00
Howard Chu
9183abe62c
ITS#9264 add an optional lock to slapo-unique
2020-05-22 15:08:20 +01:00
Quanah Gibson-Mount
005c870d68
ITS#8154 - olcTimeLimit and olcSizeLimit are single valued, fix docs
2020-05-18 20:49:25 +00:00
Quanah Gibson-Mount
83217b9842
ITS#8614 - documentation updates
2020-05-18 19:37:47 +00:00
Ryan Tandy
9282e6edea
ITS#8155 Support cacertdir with GnuTLS
2020-05-14 07:56:28 -07:00
Ryan Tandy
7dfbcfa151
Fix typos
2020-04-28 11:24:48 -07:00
Isaac Boukris
3cd50fa8b3
ITS#9189 rework sasl-cbinding support
...
Add LDAP_OPT_X_SASL_CBINDING option to define the binding type to use,
defaults to "none".
Add "tls-endpoint" binding type implementing "tls-server-end-point" from
RCF 5929, which is compatible with Windows.
Fix "tls-unique" to include the prefix in the bindings as per RFC 5056.
2020-04-23 21:00:39 +02:00
Quanah Gibson-Mount
1f4d4c9536
ITS#9230 - Update truncate man page information for 2.5 and later
2020-04-22 00:37:23 +00:00
Quanah Gibson-Mount
a019e7fe1a
ITS#9207 - Remove MozNSS code and documentation
2020-04-20 21:38:01 +00:00
Ondřej Kuzník
6d6a330057
ITS#8245 Use Relax control to avoid uniqueness checks
...
Still needs to retrieve the entry for ACL resolution until we can
restrict controls with ACLs.
2020-04-06 20:44:09 +00:00
Quanah Gibson-Mount
4358ab5d73
ITS#9184 - Document V[V[V]] option to slapd
2020-04-06 18:46:01 +00:00
Quanah Gibson-Mount
a5b8a41c13
ITS#9003
...
Note that with slapd-ldap, the special character "*" actually allows anonymous rather than denies, as is the case with authz-policy
2020-04-01 19:40:27 +00:00
Ondřej Kuzník
ba290f1c35
ITS#9156 Document ppolicy changes
2020-01-23 23:47:14 +00:00