Commit graph

1953 commits

Author SHA1 Message Date
Howard Chu
20c16c279f Add some HDB references 2005-06-11 06:13:04 +00:00
Howard Chu
cdf74c5cb0 More updates for the BDB config section 2005-06-11 06:01:41 +00:00
Howard Chu
35f308ee34 ITS#3767 fix syncrepl retry example 2005-06-11 04:59:58 +00:00
Howard Chu
cfaf61fedc Fix ITS#3766 bad font change 2005-06-11 00:57:34 +00:00
Howard Chu
cd15432de6 More accesslog updates 2005-06-10 11:41:57 +00:00
Howard Chu
7b72a9bc99 ITS#3716, add note about -f/-F behavior re: converting formats 2005-06-09 19:44:02 +00:00
Pierangelo Masarati
94747a8489 fix previous commit; document aliasing and aliasing quotes configuration 2005-06-09 09:45:02 +00:00
Howard Chu
3bae4b4acb ITS#3691 import auditlog overlay 2005-06-07 03:03:18 +00:00
Kurt Zeilenga
b0ad896f5e remove reference to multi-master replication (dead) experimental code 2005-06-03 17:06:58 +00:00
Kurt Zeilenga
64616571aa Update SDF URL 2005-06-03 17:06:02 +00:00
Kurt Zeilenga
5fbba374b1 ITS#3751: fix dqoute typo 2005-05-26 18:32:52 +00:00
Howard Chu
2b68437214 ITS#3745 use "pcache" to instantiate instead of "proxycache" 2005-05-24 17:15:46 +00:00
Pierangelo Masarati
2a55844da3 refresh back-ldap man page, reflecting recent changes 2005-05-23 14:28:30 +00:00
Pierangelo Masarati
d32187df16 note recent changes (needs work) 2005-05-23 07:19:58 +00:00
Pierangelo Masarati
8592822aca document schema checking flag 2005-05-21 14:49:21 +00:00
Kurt Zeilenga
d0fdf1ea46 don't reference ldap_getfilter(3) 2005-05-17 18:12:10 +00:00
Kurt Zeilenga
377db53088 Fix typo 2005-05-13 02:55:21 +00:00
Howard Chu
32aa75bf48 More tweaks for BDB 2005-05-11 00:32:14 +00:00
Howard Chu
544c766f5a More details 2005-05-11 00:13:13 +00:00
Howard Chu
a2a313f37f Preliminary slapd.d info, very incomplete 2005-05-10 11:32:25 +00:00
Howard Chu
48fba4a894 Add notes about -F config dir option 2005-05-08 05:21:54 +00:00
Kurt Zeilenga
2e39dd74b8 Undocument LDAPv2 Kerberos options 2005-05-04 21:35:35 +00:00
Pierangelo Masarati
fa49a73fc4 fix retry; add per-target configurable number of retries; addresses ITS#3672, ITS#3676 & ITS#3680 2005-04-25 18:56:56 +00:00
Howard Chu
2a159cef0e More for ITS#3655 draft-8 updates 2005-04-22 09:15:55 +00:00
Pierangelo Masarati
4a223061ed allow abandon/cancel for all tools 2005-04-19 21:21:51 +00:00
Pierangelo Masarati
448fa12bc1 enable abandon/cancel in ldapsearch (ITS#3670) 2005-04-19 18:07:27 +00:00
Pierangelo Masarati
f2831a77c9 add tools arg description 2005-04-19 17:10:56 +00:00
Howard Chu
c0542eca6b Delete sid reference from syncrepl cookie 2005-04-15 03:23:49 +00:00
Kurt Zeilenga
f8b0454bb8 cleanup 2005-04-14 20:30:13 +00:00
Pierangelo Masarati
e9ab146a41 fix previous commit in case of access to non existent backend (e.g. rootDSE); add (and document) authzID/DN support 2005-04-12 19:36:56 +00:00
Kurt Zeilenga
3e800f20bd <limits.h> cleanup && ITS#3643 2005-04-10 19:32:14 +00:00
Pierangelo Masarati
3ead9d3140 complete access checking documentation 2005-04-10 16:06:45 +00:00
Pierangelo Masarati
a3e5490540 clarify why there's no access checking in back-dnssrv 2005-04-10 16:03:59 +00:00
Pierangelo Masarati
24a06b551f import of back-ldif man page; please review 2005-04-09 01:20:12 +00:00
Pierangelo Masarati
8feffa6091 further fulfilment of ITS#3639 2005-04-09 00:44:17 +00:00
Pierangelo Masarati
02464d6e34 further fulfilment of ITS#3639 2005-04-09 00:34:32 +00:00
Pierangelo Masarati
11ddb834be further fulfilment of ITS#3639 2005-04-08 23:39:05 +00:00
Pierangelo Masarati
797efdf730 further fulfilment of ITS#3639 2005-04-08 22:52:23 +00:00
Pierangelo Masarati
6dda364276 further fulfilment of ITS#3639 2005-04-08 22:08:40 +00:00
Pierangelo Masarati
140b33927f more to partial fulfilment of ITS#3639 2005-04-08 19:27:22 +00:00
Pierangelo Masarati
3fbc65082e remove slapd-tcl(5) 2005-04-08 19:00:58 +00:00
Pierangelo Masarati
111deb128e partial fulfilment of ITS#3639; need to check other backends thoroughly 2005-04-08 18:41:13 +00:00
Pierangelo Masarati
e7fef14447 document the dynlist overlay 2005-04-07 23:18:48 +00:00
Pierangelo Masarati
e410840e22 clarify what can appear after -H 2005-04-07 19:57:38 +00:00
Kurt Zeilenga
228e28c266 Remove redundant note indication. 2005-04-04 19:56:43 +00:00
Pierangelo Masarati
e350d3aebd update and refresh man pages 2005-04-04 12:25:12 +00:00
Pierangelo Masarati
f1698e30f5 update diagnostics and man pages 2005-04-04 12:24:50 +00:00
Kurt Zeilenga
542468dcad Spell out BDB 2005-04-01 23:31:21 +00:00
Pierangelo Masarati
592c4ad2b0 document new options 2005-04-01 19:07:09 +00:00
Pierangelo Masarati
39aa718410 document new options 2005-04-01 18:59:28 +00:00
Howard Chu
c808575c12 Add dbconfig directive for creating/writing the DB_CONFIG file 2005-04-01 11:50:37 +00:00
Pierangelo Masarati
584b21d20b initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615) 2005-03-31 18:10:11 +00:00
Kurt Zeilenga
3e0ac3bed2 Add basic support for HTML->PDF conversion (uses htmldoc) 2005-03-29 23:59:04 +00:00
Pierangelo Masarati
27e5fabb8b document missing feature; avoid the risk of returning argv in an inconsistent state when an error occurs 2005-03-28 18:51:02 +00:00
Kurt Zeilenga
0dd113d3f0 Minor updates 2005-03-28 03:05:47 +00:00
Kurt Zeilenga
34b11c572d Add ANSI and BSI 2005-03-28 03:01:18 +00:00
Kurt Zeilenga
3e54f90b53 Don't advertise 1.1 as private space. 2005-03-28 02:42:04 +00:00
Kurt Zeilenga
3060d72f36 Update a few URLs 2005-03-27 22:09:53 +00:00
Kurt Zeilenga
41e084e1be Misc updates 2005-03-26 07:12:55 +00:00
Kurt Zeilenga
accc49849b s/privacy/confidentiality/ 2005-03-25 03:48:04 +00:00
Kurt Zeilenga
57f36ae0cf Add HDB 2005-03-25 03:38:59 +00:00
Kurt Zeilenga
df46f8432a Fix things up 2005-03-25 03:26:02 +00:00
Kurt Zeilenga
4d53ce55c7 Add cr notice 2005-03-25 03:18:33 +00:00
Kurt Zeilenga
ed7cb2dd38 init makefile 2005-03-25 03:17:36 +00:00
Kurt Zeilenga
99d03d408a Update CR 2005-03-25 02:46:49 +00:00
Kurt Zeilenga
97396cccfb Fix image base 2005-03-24 21:56:15 +00:00
Kurt Zeilenga
58def8dd29 Update CR notices and release documents 2005-03-23 17:20:59 +00:00
Kurt Zeilenga
61567b2de9 Misc updates 2005-03-19 23:48:11 +00:00
Kurt Zeilenga
a0fa7f7901 Document partially implemented "disclose" level.
"manage" remains undocumented (and unimplemented).
2005-03-19 18:46:07 +00:00
Kurt Zeilenga
5d0f80c477 Clarify tools 2005-03-19 18:37:16 +00:00
Kurt Zeilenga
d68c9c6d01 rev10 2005-03-16 02:26:17 +00:00
Kurt Zeilenga
80639c49f8 Add SASLprep 2005-03-11 05:35:35 +00:00
Kurt Zeilenga
6a5b8c1119 Remove "LDAP over TLS" text altogether 2005-03-10 08:31:29 +00:00
Howard Chu
aad140151e More for translucent 2005-03-10 04:35:57 +00:00
Howard Chu
8da7cce20d Added translucent overlay (sponsored by HP) 2005-03-10 03:13:24 +00:00
Howard Chu
2aa326c341 Document the '-q' quick mode option 2005-02-22 13:24:21 +00:00
Howard Chu
993649b4e0 Add back-hdb description 2005-02-15 23:44:32 +00:00
Kurt Zeilenga
6e9703f241 rev 05 2005-02-12 17:48:12 +00:00
Kurt Zeilenga
d4daf91ef4 rev 01 2005-02-12 16:25:02 +00:00
Kurt Zeilenga
393a2746c3 rev 08 (expired) 2005-02-12 16:24:34 +00:00
Kurt Zeilenga
108f03f4c5 rev 30 2005-02-11 20:56:17 +00:00
Pierangelo Masarati
ebd026cd7f fix typo 2005-02-08 13:17:02 +00:00
Pierangelo Masarati
43138aa500 use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup 2005-02-05 15:55:02 +00:00
Kurt Zeilenga
226eb41733 revision 29 2005-02-04 18:29:57 +00:00
Pierangelo Masarati
4123f29eaa fix spelling 2005-02-01 10:31:57 +00:00
Pierangelo Masarati
3b84f11d25 honor SLAP_GLUE_INSTANCE() flag; allow to advertize subordinate databases 2005-01-31 00:15:45 +00:00
Pierangelo Masarati
7d3c997aaf document recently added options 2005-01-30 22:59:43 +00:00
Howard Chu
86ab73ecd6 Remove "fasttool" option; obsoleted by "slapadd -q" 2005-01-25 20:21:36 +00:00
Pierangelo Masarati
6b37f6c06f typo in previous commit 2005-01-23 22:18:35 +00:00
Pierangelo Masarati
00f64211e2 cleanup and clarify aspects of the overlay usage 2005-01-23 22:11:46 +00:00
Pierangelo Masarati
9effc2b8f0 cleanup of rewrite code and docs 2005-01-23 21:42:05 +00:00
Pierangelo Masarati
ae0f47b063 improve parsing of acl-authcDN/acl-passwd 2005-01-22 18:48:03 +00:00
Kurt Zeilenga
69fcf8cbd6 Cleanup notices 2005-01-21 19:38:13 +00:00
Howard Chu
6c34a7c3b2 ITS#3330 mention objectClass index 2005-01-19 10:10:51 +00:00
Howard Chu
bb9fe5d7ac Cleanup prev commit 2005-01-19 09:55:03 +00:00
Howard Chu
c804bb3728 ITS#3293 add description of syncrepl starttls keyword 2005-01-19 09:47:46 +00:00
Pierangelo Masarati
2e057821e5 clarify referral usage 2005-01-19 00:28:29 +00:00
Pierangelo Masarati
b4e37e518f fixes for ITS#3480,3485,3489; implementation of DISCLOSE access for all operations (ITS#3472); ITS#3432.4; added value validate/pretty when applicable (see comments and #defines in back-sql.h) 2005-01-16 23:12:36 +00:00
Howard Chu
3bdca8a274 More notes for the provider 2005-01-14 07:02:00 +00:00
Howard Chu
39c89d9661 More syncrepl cleanup 2005-01-14 06:53:16 +00:00
Howard Chu
7189b4f540 Delete obsolete syncrepl provider/consumer details 2005-01-14 06:17:37 +00:00
Howard Chu
62107d5dd7 Delete syncrepl updatedn 2005-01-13 18:58:58 +00:00
Howard Chu
bf27ba977b Deleted syncrepl updatedn 2005-01-13 18:51:29 +00:00
Pierangelo Masarati
b381e1bcc8 cosmetic changes 2005-01-12 14:25:08 +00:00
Howard Chu
8ef2d9d0eb ITS#3478 more complete consumer config example 2005-01-12 03:47:19 +00:00
Howard Chu
18b5f637de ITS#3478 the rootdn is always needed when using syncrepl 2005-01-12 03:37:58 +00:00
Pierangelo Masarati
fbaf6a1a78 ITS#3468 2005-01-11 01:10:22 +00:00
Pierangelo Masarati
90f64bacde more improvements 2005-01-05 16:47:49 +00:00
Pierangelo Masarati
f5936eb7fc minor naming cleanup; improvements to DN mapping layer; major docs update 2005-01-05 16:23:00 +00:00
Kurt Zeilenga
dc0eacd40b Happy New Year! 2005-01-01 20:49:32 +00:00
Pierangelo Masarati
a9ed17a458 fix ITS#3441 2004-12-29 14:03:38 +00:00
Pierangelo Masarati
75c0965cc3 essential description of the chain overlay; please review 2004-12-08 23:47:08 +00:00
Howard Chu
eedeba2f29 Minor tweaks 2004-12-08 09:09:22 +00:00
Howard Chu
c9ea959728 Updates for syncprov overlay 2004-12-08 07:38:06 +00:00
Howard Chu
d42d600538 Moved sessionlog description from bdb to syncprov 2004-12-08 04:57:43 +00:00
Pierangelo Masarati
cc78fb525b ITS#3419: values in built auth DNs may need DN escaping, so build them via ldap_dn2bv 2004-12-06 15:17:23 +00:00
Howard Chu
553d9f6d66 Initial doc 2004-12-04 20:42:04 +00:00
Howard Chu
2f48a47194 Deleted "subordinate" keyword, added slapo-glue doc 2004-12-04 20:07:06 +00:00
Howard Chu
0560a28893 Add a checkpoint task if time-based checkpointing is configured. 2004-12-03 17:36:38 +00:00
Howard Chu
3330aceb0c s/UUID/CSN/ 2004-12-02 01:43:15 +00:00
Howard Chu
9d9bb0ba7a First draft of CSN spec, please comment. 2004-12-02 01:25:42 +00:00
Pierangelo Masarati
af9ce14812 allow undefined schema items to be returned by back-ldap and remapped by the rwm overlay 2004-12-01 22:00:08 +00:00
Howard Chu
8697bcdf7a Pass entry to password_quality check module, not just attrs 2004-12-01 16:02:27 +00:00
Kurt Zeilenga
f0dff0fc9a Fix typo 2004-11-24 22:22:27 +00:00
Pierangelo Masarati
437bd421bb test "entry" as default attribute 2004-11-17 13:43:04 +00:00
Pierangelo Masarati
184fc4878a more on ITS#3396: note that the filter is mandatory, and that the protocol must be ldap:// 2004-11-16 18:57:40 +00:00
Pierangelo Masarati
ca5d5c6fc7 back out previous commit 2004-11-15 22:54:17 +00:00
Pierangelo Masarati
f872ad29ba move special dn patterns to style enum; add creator special dn pattern 2004-11-15 22:21:50 +00:00
Pierangelo Masarati
2cf20312e2 cleanup 2004-11-13 17:59:21 +00:00
Pierangelo Masarati
d7bdb8cb24 disable referral rewrite in default suffix massage 2004-11-13 12:15:40 +00:00
Pierangelo Masarati
1b21fba38c <CONTROL> deserves a separate section 2004-11-12 12:45:10 +00:00
Jong Hyuk Choi
d8dfb976b4 fix unfortunate omission of [-r] in ldapdelete(1) 2004-11-10 03:58:39 +00:00
Ralf Haferkamp
5704a2ef6e CRL checking options for ldap.conf and slapd.conf 2004-10-28 18:50:38 +00:00
Pierangelo Masarati
a9f2f12b93 clearly indicate what the default rules are 2004-10-28 17:53:46 +00:00
Jong Hyuk Choi
c7aa0bca3f syncrepl retry feature 2004-10-27 19:43:45 +00:00
Jong Hyuk Choi
7e454e074a syncrepl retry parameter 2004-10-27 18:29:01 +00:00
Pierangelo Masarati
df745fc44f clarify that the names of the configure statements are case-insensitive, despite style considerations lead to use uppercase for some and lowercase for others 2004-10-27 11:26:27 +00:00
Kurt Zeilenga
68a4288aba Recent updates 2004-10-27 04:52:02 +00:00
Kurt Zeilenga
fc2fbac74b New I-Ds 2004-10-23 00:14:06 +00:00
Kurt Zeilenga
ad31bf3940 protocol-27 2004-10-23 00:12:24 +00:00
Kurt Zeilenga
7fe5cf27cf Add rfc3928 2004-10-23 00:11:23 +00:00
Kurt Zeilenga
c951fda5a8 Add turn to list 2004-10-20 20:40:54 +00:00
Kurt Zeilenga
3819290f69 NEW_LOGGING 2004-10-19 03:18:03 +00:00
Kurt Zeilenga
54f6cf0b2c Clarify which kinds of regexs are used. 2004-10-17 19:32:13 +00:00
Kurt Zeilenga
c41d0eaf7c Add some chroot clarifications. 2004-10-13 01:29:50 +00:00
Kurt Zeilenga
4c256c4181 jail(2) support would be nice... 2004-10-12 17:58:43 +00:00
Kurt Zeilenga
275ee6f13d RFC 3909: LDAP Cancel Operation 2004-10-09 02:11:47 +00:00
Howard Chu
1df6d76269 Add ppolicy_hash_cleartext config keyword, hash Adds as well as Modifies.
Changed check_pw_quality callback to pass entry's Attributes in final arg.
2004-10-07 04:07:17 +00:00
Pierangelo Masarati
c4123bb613 document submatches provided by non-regex <what> clauses 2004-10-06 23:19:53 +00:00
Pierangelo Masarati
796dce8657 add (and honor) a (configurable) baseObject to workaround ldap_entries view for RDBMSes that do not support UNION in views 2004-10-02 17:33:32 +00:00
Howard Chu
36b0611404 ITS#2588, ITS#2661 docs. 2004-09-28 09:02:31 +00:00
Kurt Zeilenga
424d673a6c Update SSF comments 2004-09-13 20:43:33 +00:00
Pierangelo Masarati
04734610de fix file:/// URI 2004-09-11 15:59:34 +00:00
Kurt Zeilenga
af64a9d8aa matched values 2004-09-11 05:50:21 +00:00
Kurt Zeilenga
4287dc5bd0 matched valued 2004-09-11 05:49:57 +00:00
Kurt Zeilenga
441ff00a06 Add default note 2004-09-10 22:55:59 +00:00
Kurt Zeilenga
3869e3b84d Add localSSF slapd.conf(5) directive to set SSF associated
with ldapi:// sessions.
2004-09-10 22:35:24 +00:00
Kurt Zeilenga
cdd94c7aa1 Add "slapcat -a filter" support 2004-09-08 21:44:28 +00:00
Kurt Zeilenga
5f5d50aeb0 Add TLS cipher suite directive to ldap.conf(5) 2004-09-05 07:21:20 +00:00
Kurt Zeilenga
9545fe8953 Fix typo 2004-09-04 18:00:34 +00:00
Kurt Zeilenga
192e1da12e Misc updates 2004-08-30 03:02:40 +00:00
Kurt Zeilenga
48cae5aed8 ITS#3310: Fix lud_host typo 2004-08-29 14:55:56 +00:00
Kurt Zeilenga
1abceb3020 deprecated 2004-08-28 15:52:18 +00:00
Kurt Zeilenga
5cf77e2d31 new RFCs 2004-08-28 15:50:21 +00:00
Kurt Zeilenga
6780800386 Update RFCs and I-Ds... 2004-08-27 18:41:02 +00:00
Pierangelo Masarati
450b579971 cleanup docs 2004-08-24 09:27:45 +00:00
Pierangelo Masarati
f64de49b9f update and cleanup 2004-08-21 12:28:54 +00:00
Pierangelo Masarati
905c8d580b move proxycache configuration directives into slapo-pcache; add references in related man pages 2004-08-21 12:20:01 +00:00
Pierangelo Masarati
d606635ec1 cleanup 2004-08-21 09:47:50 +00:00
Pierangelo Masarati
7b4a51cc28 further improve loglevel selection 2004-07-29 12:39:51 +00:00
Pierangelo Masarati
f33b51832a allow to use names to set loglevel 2004-07-29 00:10:03 +00:00
Pierangelo Masarati
9f6f5491fe slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay 2004-07-25 23:16:40 +00:00
Howard Chu
6a00e8b326 More info about linearindex and slapadd 2004-07-22 22:52:47 +00:00
Howard Chu
dd7003cf9f Added linearindex option for slapindex. Improves performance when database
size exceeds dbcache size by minimizing cache thrashing.
2004-07-22 22:32:37 +00:00
Howard Chu
f9f22058e7 ITS#3178 add "fasttool" option to disable transaction logging in tool mode 2004-07-22 22:14:35 +00:00
Howard Chu
76b2701a28 Minor cleanup 2004-07-22 22:13:13 +00:00
Pierangelo Masarati
52a49e0840 improve manual and make naming contexts uniform; NOTE: backwards compatibility not preserved 2004-07-20 00:46:20 +00:00
Pierangelo Masarati
fa694f0c3c document rwm overlay 2004-07-18 21:45:20 +00:00
Pierangelo Masarati
23c5f4c09f small improvements 2004-07-06 22:37:22 +00:00
Pierangelo Masarati
f64283ccae beautify and clarify <what> clause usage and defaults 2004-06-28 14:33:35 +00:00
Pierangelo Masarati
44e8ffd4fe clarify the use of regex and expand in by dn clauses 2004-06-28 10:22:48 +00:00
Pierangelo Masarati
d8eff4d1b5 use hard limit instead of returning adminLimitExceeded when requested limit exceeds hard; improve (and document) syntax; modify test025 accordingly 2004-06-22 09:43:41 +00:00
Kurt Zeilenga
5238488e60 Replaced MSAD specific stuff 2004-06-22 04:33:18 +00:00
Pierangelo Masarati
ca33242924 manual cleanup 2004-06-20 22:39:43 +00:00
Pierangelo Masarati
b1a1f0b8b6 cleanup limits 2004-06-19 10:01:47 +00:00
Pierangelo Masarati
671e3c7651 allow max for time/size limits 2004-06-18 19:47:53 +00:00
Kurt Zeilenga
1e17d75400 limit clean up 2004-06-18 07:23:37 +00:00
Kurt Zeilenga
c521e21946 Okay, fully revert commit before last. 2004-06-17 23:23:15 +00:00
Kurt Zeilenga
28668bfa62 Partial revert of last change. shm_key documentation needed. 2004-06-17 23:01:22 +00:00
Kurt Zeilenga
08c405257b Undocument backend options which overlap DB_CONFIG options.
DB_CONFIG should generally be used instead.
2004-06-17 22:51:27 +00:00
Pierangelo Masarati
05b60e6b1e s/to/by/ 2004-06-17 22:51:03 +00:00
Kurt Zeilenga
cec8d2e8c7 misc updates 2004-06-16 22:10:34 +00:00
Pierangelo Masarati
f78611bf5e improve documentation of how to specify multiple uris 2004-06-16 15:18:34 +00:00
Kurt Zeilenga
87980d56b8 Component Matching is being worked, remove item.
Add LDIFv2 (XML) support item.
2004-06-15 23:39:22 +00:00
Pierangelo Masarati
a0dfadceef mention new tools 2004-06-15 22:40:53 +00:00
Pierangelo Masarati
b1718c4f69 mention new tools 2004-06-15 22:39:08 +00:00
Pierangelo Masarati
71142cc7e5 mention new tools 2004-06-15 22:38:31 +00:00
Pierangelo Masarati
a527174bcb fix indent (any man expert to check it?) 2004-06-15 20:57:28 +00:00
Kurt Zeilenga
6826810ea7 allow logging to USER and DAEMON (ITS#3187) 2004-06-15 07:22:48 +00:00
Kurt Zeilenga
f199cff008 Strip out version info.
Refer to README instead.
2004-06-09 05:41:07 +00:00
Kurt Zeilenga
5f8834d817 Update version requirements (likely should just refer to README) 2004-06-09 05:36:17 +00:00
Kurt Zeilenga
653f91eb5b Update date 2004-06-06 06:16:40 +00:00
Kurt Zeilenga
0a41618ee7 Misc updates 2004-06-04 23:33:00 +00:00
Kurt Zeilenga
07f316fb22 Adjust for HEAD 2004-05-30 23:20:52 +00:00
Kurt Zeilenga
84f44b1b5a More SASL updates. Not yet fully consistent with HEAD. 2004-05-30 23:20:39 +00:00
Kurt Zeilenga
fd228e0d95 misc tweaks 2004-05-30 22:24:00 +00:00
Pierangelo Masarati
a18e199e0d more on identity assertion 2004-05-22 17:26:02 +00:00
Howard Chu
725ca08f8d Add note about syncrepl Persist retries 2004-05-21 23:58:26 +00:00
Pierangelo Masarati
46b27edc3b more on idassert 2004-05-15 10:10:09 +00:00
Kurt Zeilenga
ecd5089453 Add LDAP IMR RFC 2004-05-14 17:25:28 +00:00
Pierangelo Masarati
8b954144d6 reflect Kurt's comments on ID assertion 2004-05-14 10:01:22 +00:00
Pierangelo Masarati
f035e1f18f document proxyauthz{dn|pw} and idassert-* 2004-05-13 23:35:39 +00:00
Pierangelo Masarati
bbbe0db326 helper for unlimited time/size limits request 2004-05-07 17:43:22 +00:00
Pierangelo Masarati
03c64541d4 add granular op restriction 2004-05-01 17:53:37 +00:00
Pierangelo Masarati
ff0df4b6aa add group authz 2004-04-25 23:59:06 +00:00
Kurt Zeilenga
6366a0ca61 cleanup 2004-04-24 02:27:31 +00:00
Pierangelo Masarati
02ac6941d3 document slapacl tool 2004-04-20 09:18:10 +00:00
Pierangelo Masarati
9c10415919 - clarify when $$ must be used in regex;
- clarify access privileges of rootdn;
- clarify that auth access is always required when performing authz-regexp,
  not only for proxyAuthz
2004-04-19 01:19:41 +00:00
Pierangelo Masarati
05a84fb025 typo 2004-04-19 00:08:32 +00:00
Pierangelo Masarati
80c34cf27e typos 2004-04-18 21:36:32 +00:00
Howard Chu
8da6bf194a Added referential integrity and attribute uniqueness overlays 2004-04-17 08:17:43 +00:00
Pierangelo Masarati
9b3a3d5fce improve tool mode selection by slapd switch 2004-04-16 18:54:15 +00:00
Kurt Zeilenga
35329394de Remove redundant material (ITS#3095) covered in main README 2004-04-16 18:11:15 +00:00
Kurt Zeilenga
349c7834ce Rename config options and attribute names (for 2.3). 2004-04-16 02:29:55 +00:00
Kurt Zeilenga
a479b3b119 fix link 2004-04-16 02:10:21 +00:00
Kurt Zeilenga
2676c2fde1 for 2.2 2004-04-16 02:09:39 +00:00
Kurt Zeilenga
765a6bd5d4 rename 2004-04-16 01:51:25 +00:00
Kurt Zeilenga
460510be0a rename function and config parameters 2004-04-16 01:50:29 +00:00
Pierangelo Masarati
6624f68725 fix braindead config option (mostly harmless) 2004-04-15 20:27:43 +00:00
Kurt Zeilenga
cb127ff2dc Add RFC 2926 2004-04-15 03:43:00 +00:00
Kurt Zeilenga
6469c6c31d Add RFC 3703 2004-04-15 01:56:14 +00:00
Kurt Zeilenga
9b66997e37 relevant I-Ds 2004-04-15 01:35:13 +00:00
Kurt Zeilenga
cb6364f682 rename 2004-04-15 01:30:10 +00:00
Pierangelo Masarati
8ea2f6e157 further clarify size limits 2004-04-15 01:16:53 +00:00
Pierangelo Masarati
9bad466a37 added schema from draft-joslin-config-schema-07.txt 2004-04-15 00:59:18 +00:00
Pierangelo Masarati
6b2347be6a document lastmod overlay 2004-04-14 23:35:17 +00:00
Pierangelo Masarati
8bf68bc796 clarify the use of the fail_if_no_mapping switch and minor cleanup 2004-04-14 13:10:00 +00:00
Pierangelo Masarati
3ea4368913 add slapsaslauth test tool 2004-04-13 17:18:03 +00:00
Kurt Zeilenga
818eba0db8 Add poll(2) project 2004-04-13 01:38:45 +00:00
Pierangelo Masarati
25c672a844 document search disable feature (spin-off of limit on unchecked entries) 2004-04-09 17:57:48 +00:00
Pierangelo Masarati
2e13fbeea1 completion of limits w/ paged results control 2004-04-09 15:54:46 +00:00
Hallvard Furuseth
6b45e32da3 Add NEW_LOGGING note for the commented-out "debug" and "logfile" options. 2004-04-09 05:27:04 +00:00
Pierangelo Masarati
85b078a3cb clarify what rewrite rules suffixmassage corresponds to 2004-04-07 20:55:32 +00:00
Kurt Zeilenga
bd7cd42669 clarify updatedn (again) 2004-04-07 03:32:55 +00:00
Kurt Zeilenga
fd149ed4ec Minor updates 2004-04-07 00:48:29 +00:00
Kurt Zeilenga
6a96ec96bd Reword Berkeley DB requirement to be less specific.
Likely should do this across the board (e.g., rely more on README)
2004-04-02 22:21:40 +00:00
Kurt Zeilenga
bd765b849d ITS#2768: configuring slurpd's interval between replog checks
based upon a patch submitted by Jason Townsend (Apple).
2004-03-23 01:12:11 +00:00
Howard Chu
d4d5e253d9 Fix header 2004-03-19 20:23:26 +00:00
Howard Chu
057a385346 Rename slapd-ppolicy.5 to slapo-ppolicy.5 2004-03-19 20:18:46 +00:00
Kurt Zeilenga
0525d18485 Latest LDAP Sync I-D (this revision was submitted to the RFC Editor
for publication)
2004-03-19 02:18:21 +00:00
Kurt Zeilenga
4ac04744e3 Update LDAPBIS I-Ds 2004-03-19 02:16:37 +00:00
Kurt Zeilenga
abd39c093b Add references to new RFCs 2004-03-18 21:52:36 +00:00
Pierangelo Masarati
9e159e2382 remove outdated comment 2004-03-18 21:48:21 +00:00
Kurt Zeilenga
99b72e9cfa Add RFC3698 implementation to TODO 2004-03-18 21:41:21 +00:00
Pierangelo Masarati
fa3baaeae9 overlays reworking 2004-03-18 18:59:46 +00:00
Howard Chu
d1292c1b14 Added ppolicy_use_lockout keyword; Default behavior is not to issue the
PP_accountLocked error for locked accounts. (Gives too much information
to attackers.)
2004-03-18 10:35:54 +00:00
Pierangelo Masarati
32a3311156 typo 2004-03-18 00:40:31 +00:00
Pierangelo Masarati
cd105fab4e man page 2004-03-18 00:36:50 +00:00
Pierangelo Masarati
f970303799 document new tools and remove deprected switches 2004-03-18 00:11:40 +00:00
Pierangelo Masarati
732ad4a3da document new tools 2004-03-18 00:07:24 +00:00
Howard Chu
cdb34dc6c3 Demote cacheable queries section 2004-03-18 00:02:39 +00:00
Howard Chu
d063c911f8 Fix typo in prev commit 2004-03-18 00:00:50 +00:00
Howard Chu
b941de792c ITS#3024 add rootdn 2004-03-17 23:49:41 +00:00
Howard Chu
7082b33acc ITS#2945 fix typo, add more examples 2004-03-17 23:48:33 +00:00
Kurt Zeilenga
c71721f79f Fix typo 2004-03-17 22:01:55 +00:00
Howard Chu
e5ec72c2b9 Add note about overlay directive 2004-03-16 22:25:08 +00:00
Howard Chu
9e39c5e0b6 Docs for ppolicy overlay 2004-03-16 22:00:30 +00:00
Kurt Zeilenga
95459fef7f New LDAP RFCs 2004-03-11 21:10:05 +00:00
Pierangelo Masarati
65b49dd312 add "searchFilterAttrDN" rewrite context, and allow filterstring rewrite 2004-03-10 21:11:14 +00:00
Pierangelo Masarati
006745430e allow "expand" style in peername, sockname, sockurl as well; more sanity checks 2004-03-09 19:44:14 +00:00
Pierangelo Masarati
042869366d use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks 2004-03-09 16:33:05 +00:00
Pierangelo Masarati
4645eeb5ec cleanup DN style in limits 2004-03-08 13:13:30 +00:00
Pierangelo Masarati
f69c249892 fix program name (ITS#3003) 2004-03-06 15:48:21 +00:00
Pierangelo Masarati
5716b7f1b2 document saslAuthzTo/saslAuthzFrom new syntax; add onelevel style to DN type 2004-03-06 11:00:49 +00:00
Howard Chu
5f9a87c041 password-hash now takes a list of mechanisms 2004-03-02 22:17:20 +00:00
Howard Chu
c519390c82 Add -T option for invoking in tool mode 2004-02-26 19:26:12 +00:00
Kurt Zeilenga
b927f86e3f Clarify updatedn 2004-02-25 17:37:59 +00:00
Kurt Zeilenga
f5ad88f58a More updatedn/rootdn clarification 2004-02-25 17:20:49 +00:00
Pierangelo Masarati
4e57108991 allow search limits based on groups (ITS#2967) 2004-02-18 16:40:36 +00:00
Pierangelo Masarati
cf5e2496f7 map type/name were swapped 2004-02-05 18:17:27 +00:00
Kurt Zeilenga
1fa73dad3b Reworded -r description from Quanah (ITS#2941) 2004-01-30 01:19:54 +00:00
Howard Chu
a7bd9dc4f8 ITS#2890 fix Sleepycat URL 2004-01-24 04:08:18 +00:00
Kurt Zeilenga
e476580d85 clarify -t 2004-01-21 00:51:09 +00:00
Pierangelo Masarati
f5a9f62578 clarify that's useless to give write privileges to the roodn of a database... 2004-01-14 23:11:48 +00:00
Pierangelo Masarati
4dbc0b842a spacing (ITS#2916) 2004-01-10 11:17:52 +00:00
Kurt Zeilenga
62a0746126 Fix formating 2004-01-09 20:36:24 +00:00
Kurt Zeilenga
c8408d3c6a ITS#2906: report invalid userPassword schemes, clarify documentation 2004-01-09 04:11:57 +00:00
Kurt Zeilenga
3c598e89fb Happy new year 2004-01-01 19:15:16 +00:00
Kurt Zeilenga
b613a3d57d crypt(3) is not portable... 2003-12-30 01:37:38 +00:00
Kurt Zeilenga
f03c29257f Add new CSN draft
Remove GSER drafts (now available as RFCs)
2003-12-29 23:39:55 +00:00
Kurt Zeilenga
6776a17bee Collective Attributes and Subentries are now RFCs. 2003-12-29 18:40:10 +00:00
Pierangelo Masarati
3994dc645a allow to set max passes per rule 2003-12-29 18:02:49 +00:00
Pierangelo Masarati
9e86d9ffe2 clarify field description in rewriteRule statement 2003-12-29 17:12:29 +00:00
Pierangelo Masarati
c860ba6a23 fix, clarify and document previous commit 2003-12-29 17:06:43 +00:00
Pierangelo Masarati
3ddfddb1a7 typo 2003-12-29 15:22:10 +00:00
Jong Hyuk Choi
4d4eeb1fd2 misc updates 2003-12-21 20:00:14 +00:00
Jong Hyuk Choi
8fa4ca5893 rewrite of the syncrepl section 2003-12-21 19:54:29 +00:00
Jong Hyuk Choi
cd16a93244 update syncrepl and session log info 2003-12-21 16:32:00 +00:00
Pierangelo Masarati
8e89944abc for consistency, always allow 'onelevel' as an alias for 'one' in dnstyle 2003-12-20 15:29:05 +00:00
Jong Hyuk Choi
4894623e4d replica promotion / demotion 2003-12-19 23:12:44 +00:00
Kurt Zeilenga
35574210d7 document +0 2003-12-19 05:08:41 +00:00
Kurt Zeilenga
aabcce3e58 Document +0 2003-12-19 05:06:51 +00:00
Kurt Zeilenga
492aee7cd1 Domain Administrative Data in LDAP 2003-12-19 02:36:54 +00:00
Kurt Zeilenga
082087691e supportedFeatures and "+" are now RFCs 2003-12-19 01:51:02 +00:00
Kurt Zeilenga
2284f101fc Print UNDEFINED on compare error 2003-12-18 23:24:49 +00:00
Pierangelo Masarati
113727ba53 allow 'all' vs. 'any' sasl-authz-policy 2003-12-18 18:28:43 +00:00
Kurt Zeilenga
7f4ff18bd4 Update index to encourage "proper" use 2003-12-18 02:12:44 +00:00
Kurt Zeilenga
30bd8ce3c6 Latest 2003-12-18 00:36:45 +00:00
Pierangelo Masarati
ca52621c1b some notes on access required by proxyAuthz control;
note that other controls may need different access
privileges via, e.g., backend_attribute() (syncrepl?)
2003-12-18 00:27:01 +00:00
Kurt Zeilenga
0752b23e13 More updatedn != rootdn recommendations 2003-12-18 00:06:55 +00:00
Kurt Zeilenga
c4c6a38a0b Dont mention bare oc in list. 2003-12-17 17:48:56 +00:00
Kurt Zeilenga
30a1ff596d s/+/@/ in OC attr lists 2003-12-17 17:36:41 +00:00
Howard Chu
be550a37e4 Some text tweaks 2003-12-17 04:22:40 +00:00
Pierangelo Masarati
947f41832e more clarifications on dnstyle usage 2003-12-16 11:20:59 +00:00
Kurt Zeilenga
925db26754 Formating 2003-12-16 06:52:52 +00:00
Kurt Zeilenga
37465b1f3a Rework for overlay (should be checked by someone who knows this
stuff).
2003-12-16 03:59:24 +00:00
Pierangelo Masarati
ee34f3fb64 add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication 2003-12-16 00:49:10 +00:00
Kurt Zeilenga
75b9f8acdc Make a few OPERATIONAL REQUIREMENT clarifications
Clean up formating
2003-12-15 18:41:23 +00:00
Pierangelo Masarati
7444352358 describe detailed access levels required for each operation 2003-12-15 17:55:55 +00:00
Kurt Zeilenga
eec0f83fd7 Fix typos 2003-12-14 21:00:52 +00:00
Pierangelo Masarati
529a03df53 use dedicated admin identity to proxyAuthz 2003-12-13 10:57:42 +00:00
Kurt Zeilenga
0df311ed00 Clarify 2003-12-07 07:54:38 +00:00
Kurt Zeilenga
43ffeda85d Suck in latest I-D revisions 2003-12-07 07:50:23 +00:00
Kurt Zeilenga
e96063d9e8 minor updates 2003-12-07 07:38:07 +00:00
Howard Chu
2f06437348 Updated for proxycache overlay. Probably belongs on its own now... 2003-12-07 04:30:39 +00:00
Kurt Zeilenga
5e11340ccf misc updates 2003-12-06 23:48:30 +00:00
Kurt Zeilenga
9425092087 Reword things a bit. 2003-12-04 19:34:02 +00:00
Jong Hyuk Choi
f24bafd55a editorial fix for access control section 2003-12-03 18:56:39 +00:00
Kurt Zeilenga
17939ccdca Clarify that the updatedn should not be same as the rootdn. 2003-12-02 21:18:19 +00:00
Kurt Zeilenga
f1411d693f Mostly formating... 2003-12-02 21:03:21 +00:00
Kurt Zeilenga
4f406bc7d4 Misc updates 2003-12-02 19:41:19 +00:00
Pierangelo Masarati
f0ea4161ba add administrative bind and proxyAuthz control to enable bound operations in distributed directories (need to manually #define LDAP_BACK_PROXY_AUTHZ and patches from ITS#2851 and ITS#2852) 2003-12-01 08:29:06 +00:00
Kurt Zeilenga
c38b987499 Misc. updates 2003-12-01 05:43:27 +00:00
Jong Hyuk Choi
4ae382fd79 misc updates
- syncrepl : id -> rid
 - man page update
2003-11-26 21:37:44 +00:00
Jong Hyuk Choi
5a8047288b reflect multi syncrepl thread update 2003-11-26 21:10:50 +00:00
Jong Hyuk Choi
1fdda703e6 Support multiple sync replication at the consumer :
1) simultaneous operation of multiple active sync replication threads
2) cookie management for individual sync replication thread
   (include rid=%3d to the slapd cookie command line option (-c))
2003-11-26 19:49:47 +00:00
Kurt Zeilenga
944f6a9903 Moved to servers/slurpd/NOTES 2003-11-26 18:19:22 +00:00
Kurt Zeilenga
e3a4c4ec9c Notice/Acknowledge updates 2003-11-26 02:58:56 +00:00
Jong Hyuk Choi
4eee5c8595 another update to the chapter 5 of the admin guide 2003-11-24 23:18:06 +00:00
Jong Hyuk Choi
c204f4061f keeps syncrepl manpage sections current 2003-11-24 23:16:45 +00:00
Kurt Zeilenga
f2f195ac8f Fix SDF warnings 2003-11-24 20:50:23 +00:00
Kurt Zeilenga
b0d7f59a20 Minor cleanup 2003-11-24 20:34:45 +00:00
Kurt Zeilenga
5f2d317ec9 Update files 2003-11-24 20:33:28 +00:00
Kurt Zeilenga
d23516c6a2 Another round of minor tweaks 2003-11-24 20:29:21 +00:00
Jong Hyuk Choi
897fed0967 add the description of the sessionlog directive 2003-11-24 19:43:43 +00:00
Kurt Zeilenga
9203182e74 Minor tweak 2003-11-24 19:37:36 +00:00
Kurt Zeilenga
80f0a62710 This file serves as a template for new files. 2003-11-24 19:23:13 +00:00
Jong Hyuk Choi
d6073762fa syncrepl update 2003-11-24 18:57:22 +00:00
Jong Hyuk Choi
7a98b64255 update of the syncrepl directive 2003-11-24 14:44:30 +00:00
Howard Chu
f23c5d9565 ITS#2823 delete extraneous argument 2003-11-15 08:40:51 +00:00
Howard Chu
470345e993 ITS#2822 fix typos 2003-11-15 08:34:36 +00:00
Pierangelo Masarati
9620cacd34 clarify the usage of the <modifier> field in 'dn' and 'domain' clauses of <who> access directive 2003-11-01 14:14:09 +00:00
Kurt Zeilenga
d0c05e814d Add a basic DIT content rule test.
Fix DIT rules to allow extensibleObject in AUX
unifdef -DSLAP_EXTENDED_SCHEMA
2003-10-24 04:40:32 +00:00
Kurt Zeilenga
dc3944b591 add a few misc projects 2003-10-18 22:16:13 +00:00
Kurt Zeilenga
f6c1163eea clarify that replacement, but not expression evaluation,
is done on the string in group.regex=string
We really should rename the style, in this case, to "replacement".
2003-10-15 08:04:25 +00:00
Kurt Zeilenga
53081446ed Rework Kerberos principals (ITS#2695) 2003-10-13 03:18:17 +00:00
Luke Howard
976f61f0ed Update SLAPI manual page 2003-10-12 06:36:29 +00:00
Kurt Zeilenga
d03c83f077 ITS#2621, reference slapd.plugin 2003-10-12 04:22:26 +00:00
Kurt Zeilenga
fd445970fb document ditcontentrule directive 2003-10-12 04:20:20 +00:00
Kurt Zeilenga
7094fd6c08 Update filter representations to conform to RFC 2254. 2003-10-07 22:41:45 +00:00
Kurt Zeilenga
86ebc402e1 Add native SASL support to do. 2003-10-06 17:26:29 +00:00
Howard Chu
96314dce23 ITS#2600 replica uri= docs 2003-09-27 07:14:29 +00:00
Howard Chu
878bff913a Added description for idlcachesize, shm_key 2003-09-27 07:06:48 +00:00
Howard Chu
14745b74d2 ITS#2497 value-level ACLs 2003-09-21 11:07:32 +00:00
Howard Chu
0eca4fa42f More for dynamic groups 2003-09-21 10:52:44 +00:00
Howard Chu
11148522ec ITS#2573 dynamic group support 2003-09-21 10:45:57 +00:00
Howard Chu
b93a0f45d5 ITS#2497 value-level ACLs 2003-09-21 10:34:40 +00:00
Jong Hyuk Choi
0d31f9a251 correction of binddn= requirement in the example section 2003-09-17 23:30:43 +00:00
Kurt Zeilenga
f5cabd3a68 Update refs 2003-09-16 05:27:20 +00:00
Kurt Zeilenga
34d6b50e45 Initial proxy cache and syncrepl chapters 2003-09-16 05:16:33 +00:00
Kurt Zeilenga
6489aaa08b s/mech/saslmech/ in sasl directives 2003-09-16 04:39:14 +00:00
Jong Hyuk Choi
7f882daf15 Schema checking option for LDAP Sync replication 2003-09-03 21:42:52 +00:00
Jong Hyuk Choi
8dc1ac85dd manual update for proxy cache (apurva) 2003-09-03 16:26:17 +00:00
Jong Hyuk Choi
372cb876a0 slapd.conf man page update (LDAP Sync replication configuration) 2003-08-28 22:29:55 +00:00
Kurt Zeilenga
9b0de44b91 Add clarification about authzDN which don't exist in the DIT 2003-08-14 18:38:20 +00:00
Kurt Zeilenga
bd98f4c2a2 ITS#2644: fix inconsistent domain names used in example 2003-08-09 03:23:03 +00:00
Kurt Zeilenga
443d4c8999 sasl-regexp clarifications 2003-07-29 15:28:52 +00:00
Hallvard Furuseth
c1270ba4d5 Rename LDAP_OPT_ERROR_NUMBER to LDAP_OPT_RESULT_CODE. 2003-07-22 18:49:40 +00:00
Hallvard Furuseth
7c5d23dd05 ldap_msgfree() can take a result chain, not just a single result. 2003-07-22 18:30:59 +00:00
Kurt Zeilenga
0a1be4b126 ITS#2622: ucdata is in DATADIR 2003-06-30 18:39:17 +00:00
Hallvard Furuseth
d0582fb4c2 Replace some tabs with spaces.
Split some too long preformatted lines.
2003-06-29 15:34:32 +00:00
Hallvard Furuseth
c20dbfb4f6 Remove SEE ALSO locale(5); the locale option has been gone for ages. 2003-06-27 17:30:13 +00:00
Hallvard Furuseth
e613b1a353 Add BACKENDS section in slapd.conf(5).
Briefly compare back-bdb and back-ldbm.
Remove mention of MDBM and NDBM.  Rename GNU DBM to GDBM.
Fix spacing typos.  Prefix an octal file mode with 0.
Mention "notags" (new name for "nolang" from the attribute options patch).
Add SEE ALSO slapd-monitor(5) to slapd.conf(5).
2003-06-27 12:22:27 +00:00
Hallvard Furuseth
7d57eb4c03 Fix spacing typos. 2003-06-27 12:16:29 +00:00
Pierangelo Masarati
ade4642f85 Document proxy cache extensions (by way of Jong Hyuk Choi) 2003-06-24 11:49:56 +00:00
Kurt Zeilenga
b593522c11 Assertion control is now implemented 2003-06-23 17:57:38 +00:00
Howard Chu
44e32b3f7f ITS#2594 add URI support for replica config 2003-06-14 00:06:36 +00:00
Kurt Zeilenga
256732f2ce s/tls/starttls/ 2003-06-10 18:32:36 +00:00
Kurt Zeilenga
29eaea5745 Clean up syntaxes and matching rules 2003-06-09 20:58:38 +00:00
Hallvard Furuseth
feef99c760 Axe abandon support (ITS#2564) 2003-06-03 12:02:00 +00:00
Kurt Zeilenga
304410c7a0 Update drafts 2003-05-31 22:47:07 +00:00
Kurt Zeilenga
0954351565 Change ACL default style to exact (from regex) 2003-05-30 05:24:39 +00:00
Howard Chu
5ce0e3afb1 Add authors 2003-05-25 03:50:59 +00:00
Kurt Zeilenga
52e88a36a4 Fix typos ITS#2544 2003-05-24 05:20:15 +00:00
Kurt Zeilenga
d6bfa4ab8f remove documentation for bind_simple_unprotected
(which was axed log ago)
2003-05-24 01:26:38 +00:00
Kurt Zeilenga
df025639e3 TLS hard updates 2003-05-22 00:37:01 +00:00
Kurt Zeilenga
b378944fc1 Zap "TLS hard" 2003-05-22 00:15:57 +00:00
Hallvard Furuseth
437e179098 Fix typo. 2003-05-19 17:30:14 +00:00
Pierangelo Masarati
ea8e28c6c1 update back-monitor man page 2003-05-18 23:26:30 +00:00
Kurt Zeilenga
c8a6d52e04 Rework CAVEATS 2003-05-17 18:37:40 +00:00
Pierangelo Masarati
904f513028 clarify DN regex match quirks 2003-05-17 12:39:10 +00:00
Kurt Zeilenga
7c8f3b351f Warn folks that setting TLS option may break some applications.
URI should be used instead.
2003-05-17 01:08:09 +00:00
Kurt Zeilenga
92b99a4133 Add a few more "nice to haves" 2003-05-09 02:12:42 +00:00
Hallvard Furuseth
7e8ff6df6b Implement slapcat -s <dn>: Only dump a subtree of the database. 2003-04-29 20:47:21 +00:00
Hallvard Furuseth
fa915adb5b Minor nroff tweaks. 2003-04-29 15:14:35 +00:00
Kurt Zeilenga
c661a77268 axe suffixAlias 2003-04-26 23:52:28 +00:00
Kurt Zeilenga
26badc8174 Add some comments about DB_CONFIG 2003-04-24 16:22:46 +00:00
Howard Chu
5642e54117 Fix file: URL examples 2003-04-23 03:35:37 +00:00
Howard Chu
a58190e2b1 Fix missing slash in file: URL 2003-04-23 03:32:05 +00:00
Kurt Zeilenga
099c2426b8 clarify that updatedn permits replica updating subject to access controls. 2003-04-21 02:29:46 +00:00
Pierangelo Masarati
ab9f7108f1 add caveats to man page; cleanup and small improvements 2003-04-16 22:23:46 +00:00
Pierangelo Masarati
9a39dcb7d4 add slurpd pid/args files 2003-04-15 21:56:21 +00:00
Pierangelo Masarati
8563681f18 document recent changes 2003-04-15 20:55:29 +00:00
Kurt Zeilenga
06da0f5e6f Clarify "users" terminology 2003-04-15 02:20:01 +00:00
Pierangelo Masarati
3e3e5fdec5 first cut at documenting back-monitor 2003-04-08 23:46:56 +00:00
Pierangelo Masarati
250934254b cleanup 2003-04-07 21:42:51 +00:00
Howard Chu
f2293e0486 One more typo 2003-04-07 11:35:58 +00:00
Howard Chu
37767962f2 Fix typo 2003-04-07 11:13:57 +00:00
Pierangelo Masarati
d275fee025 new rewrite example 2003-04-03 21:17:09 +00:00
Pierangelo Masarati
430077e2ed partially revert previous commit 2003-04-02 23:01:21 +00:00
Pierangelo Masarati
a67b41eb69 fix listener mod handling 2003-04-02 20:27:58 +00:00
Kurt Zeilenga
02028df6c6 Add additional password file support. 2003-03-31 06:29:59 +00:00
Howard Chu
2c2bf67cea ITS#2389, describe conn_max_pending/auth keywords 2003-03-27 04:18:16 +00:00
Hallvard Furuseth
1f00bd3c7f Manpage nitpicks 2003-03-23 16:37:06 +00:00
Kurt Zeilenga
98e5afc28f Remove cache stuff 2003-03-20 19:50:22 +00:00
Pierangelo Masarati
c4b925f343 document -u option 2003-03-18 10:38:23 +00:00
Kurt Zeilenga
f4bb9a5d64 Fix typo (ITS#2379) 2003-03-15 23:36:23 +00:00
Howard Chu
bd935956f4 ITS#2366 typos 2003-03-12 21:51:17 +00:00
Kurt Zeilenga
bdf02dde71 clarify "by anonymous auth" semantics 2003-03-12 16:25:20 +00:00
Kurt Zeilenga
63041611c5 Add comment about LDAPv2 2003-03-10 15:41:55 +00:00
Kurt Zeilenga
472a79f211 LDAPv2 is Historic 2003-03-10 15:34:14 +00:00
Kurt Zeilenga
6fb4582d5c suffixalias is no longer supported 2003-03-07 18:57:30 +00:00
Howard Chu
a60f6fe1a3 Added proxy-whoami keyword and some mention of connection pooling. Depends
on libldap_r, proxy authz control...
2003-02-26 16:35:09 +00:00
Kurt Zeilenga
63efc41728 clarify global ACL use
clarify root and subschema DSE ACLs
2003-02-24 19:53:03 +00:00
Kurt Zeilenga
607215a8d6 Some dn.regex clarifications 2003-02-23 19:38:32 +00:00
Kurt Zeilenga
f620aa08f9 Max workers was lowered to 16. 2003-02-21 07:18:43 +00:00
Kurt Zeilenga
85fe59c830 Misc updates 2003-02-10 20:33:49 +00:00
Kurt Zeilenga
bfa3448128 Remove domain= ACL examples, add security consideration. 2003-02-09 07:07:39 +00:00
Kurt Zeilenga
5abec40030 Document URI and SASL directives 2003-02-09 06:49:34 +00:00
Kurt Zeilenga
698d73d5f3 Disable reverse lookups by default for security
(and performance) reasons.
2003-02-08 07:40:19 +00:00
Pierangelo Masarati
f19df0a307 add 'rebind-as-user' according to back-ldap's implementation 2003-02-05 22:04:20 +00:00
Kurt Zeilenga
1aae1854ac delete (7) after UTF-8 2003-02-05 20:42:50 +00:00
Kurt Zeilenga
81d533571b fix syntax error 2003-02-05 20:38:58 +00:00
Pierangelo Masarati
eed2d5db4d only document 'subtree', but also allow 'sub' 2003-02-05 20:38:42 +00:00
Pierangelo Masarati
381e293b41 allow 'sub' and 'subtree' in acl (fix ITS#2300) 2003-02-05 19:39:34 +00:00
Pierangelo Masarati
ac895cd4d5 document the multiple URI feature 2003-02-04 19:50:17 +00:00
Pierangelo Masarati
55d21236d1 comment a useful feature of using URIs 2003-02-04 19:43:10 +00:00
Kurt Zeilenga
b53eef9b81 -V updates 2003-01-20 21:16:58 +00:00
Kurt Zeilenga
3202e544e3 Added -V support 2003-01-20 20:50:15 +00:00
Hallvard Furuseth
1fbbc11811 Fix LBER_ERROR vs. -1 confusion. 2003-01-19 13:10:17 +00:00
Kurt Zeilenga
d2bb1b5691 Add a few notes about intended usage of these backends 2003-01-09 12:07:14 +00:00
Kurt Zeilenga
6939c53170 Happy new year 2003-01-03 20:20:47 +00:00
Kurt Zeilenga
968fced135 Happy new year! 2003-01-03 20:04:17 +00:00
Hallvard Furuseth
3dca6b67a5 Fix typo. 2002-12-16 07:32:06 +00:00
Hallvard Furuseth
5ca8773a8b Fix typos. 2002-12-16 07:31:13 +00:00
Hallvard Furuseth
09df53687e Make links to ber_bvfree and others, and add them to NAME section. 2002-12-16 07:29:43 +00:00
Hallvard Furuseth
7ce4a611dc Fix ldap_extended_s(3) -> ldap_extended_operation(3) 2002-12-16 07:28:10 +00:00
Pierangelo Masarati
df5d69df8f allow a custom error log file for plugins by means of a slapd.conf directive; add very bare-bone back-monitor info about installed plugins 2002-12-14 15:04:37 +00:00
Howard Chu
143603690f Added searchstack keyword description. (Sorry, I don't like the word "slab"...) 2002-12-12 23:39:21 +00:00
Hallvard Furuseth
54728f367e Implement user-defined tagging attribute options and ranges 2002-12-12 13:56:05 +00:00
Pierangelo Masarati
9cce5e4c98 a skeleton of slapd.conf directives for SLAPI configuration (lot to do) 2002-12-07 18:03:13 +00:00
Kurt Zeilenga
01660fbdd9 Minor cleanup 2002-12-05 03:30:20 +00:00
Kurt Zeilenga
4a0bfbdd64 Add ldapwhoami/ldapcompre to flags map 2002-12-05 00:19:21 +00:00
Kurt Zeilenga
618877cd39 remove proxy authorization (as first-cut was committed) 2002-12-03 18:45:42 +00:00
Kurt Zeilenga
b41ab2502f Revamp TODO list a bit 2002-11-27 19:56:58 +00:00
Kurt Zeilenga
e27d7a0d5a Remove autoconf task, best left to a committer (or me) 2002-11-26 17:57:32 +00:00
Pierangelo Masarati
65efd6a185 fix -h option example for multi-URI handling (as suggested by Roland Bauerschmidt <rb@debian.org>) 2002-11-24 21:52:48 +00:00
Pierangelo Masarati
8473f6e778 set keyword to noEstimate and document it 2002-11-21 20:57:00 +00:00
Pierangelo Masarati
59aea47963 improve limits handling and consistency; return "Admin limit exceeded" instead of "Unwilling to perform" 2002-11-21 12:58:59 +00:00
Pierangelo Masarati
b9e442d7de clarify how to specify no limits 2002-10-31 11:26:19 +00:00
Pierangelo Masarati
53e1930fd0 use keyword "unlimited" instead of -1 for no limits 2002-10-31 09:57:24 +00:00
Kurt Zeilenga
492c5b83f8 Misc cleanup 2002-10-27 21:45:17 +00:00
Kurt Zeilenga
f72dbc212f forced change for testing 2002-10-26 02:58:31 +00:00
Kurt Zeilenga
c14cbc1fb7 Update anon 2002-10-26 02:53:36 +00:00
Pierangelo Masarati
86dbdc1ddb document socket permission extension to ldapi:// 2002-10-23 14:22:21 +00:00
Kurt Zeilenga
54570d22ca Misc updates 2002-10-17 05:59:57 +00:00
Kurt Zeilenga
6bc33d28c0 Note --without-threads limitation 2002-10-16 16:54:27 +00:00
Kurt Zeilenga
dd3279eab0 Clarify new "entry" ACLs 2002-10-10 04:27:23 +00:00
Kurt Zeilenga
1ca552dff7 Add DIT Structure Rules and Name Forms 2002-10-10 04:19:46 +00:00
Kurt Zeilenga
f914c0545c Fix multiple NAME example 2002-10-10 01:34:55 +00:00
Kurt Zeilenga
023d0e2a5c Rework unprotected simple bind checks 2002-10-08 19:03:18 +00:00
Kurt Zeilenga
2fd41add70 Clarify unprotected simple bind settings 2002-10-08 01:07:12 +00:00
Kurt Zeilenga
36fca96695 if "disallow bind_simple_unprotected", require at least SSF of 2 2002-10-08 01:06:49 +00:00
Kurt Zeilenga
90e320398a Clarify that "security ssf=n" applies to "disallow bind_simple_unprotected". 2002-10-08 00:51:19 +00:00
Kurt Zeilenga
880eced255 Clarify that v2 is disabled by default 2002-10-06 03:32:43 +00:00
Kurt Zeilenga
c46e00a34c Misc. cleanup 2002-10-04 19:08:10 +00:00
Kurt Zeilenga
de6ed4fde4 Undocument -C (chase referrals)
(already removed from usage statements)
2002-09-23 21:33:26 +00:00
Kurt Zeilenga
044b39f4ec Add Steven's I-Ds on LDAP/X.500 admin models
Correct naming of older drafts
2002-09-23 04:35:05 +00:00
Kurt Zeilenga
048d43512d -05 2002-09-22 18:21:23 +00:00
Kurt Zeilenga
b1cb903351 Add "IANA Considerations for LDAP" (rfc3383) 2002-09-20 20:50:53 +00:00
Kurt Zeilenga
68aebc05c9 Clean up hash password scheme stuff 2002-09-20 17:27:08 +00:00
Kurt Zeilenga
11a07153d6 Add some clarification as to what hash algorithms are used
with each password-hash scheme.
2002-09-20 17:12:58 +00:00
Kurt Zeilenga
e4d05f386a Add new LDAP RFCs 2002-09-19 04:43:28 +00:00
Kurt Zeilenga
bec2237439 Add the LDAPv3 TS. 2002-09-18 02:04:59 +00:00
Kurt Zeilenga
043e5c5a13 latest dupent I-D 2002-09-17 21:05:41 +00:00
Kurt Zeilenga
07a6d6c208 (re)insert reference to rfc2253 2002-09-09 07:01:51 +00:00
Kurt Zeilenga
b41d7df452 Add clarification 2002-09-09 06:59:51 +00:00
Kurt Zeilenga
be39bfd36a Update access control section to avoid regex usage 2002-09-09 06:53:11 +00:00
Kurt Zeilenga
64fcd8b043 Add note about "children" to access controls section.
Clarify cut-n-past in quickstart.
2002-09-09 00:47:01 +00:00
Kurt Zeilenga
f0a3a7bb47 Add reference to ldap.conf(5) 2002-09-04 21:00:11 +00:00
Kurt Zeilenga
2ca678ea2e More LDAPNOINIT statement to top of DESCRIPTION 2002-09-04 20:59:57 +00:00
Kurt Zeilenga
3cb2dc149d Document -R 2002-09-02 19:25:10 +00:00
Kurt Zeilenga
8f09321eb9 Clarify that rootpw is not needed when rootdn is not within database 2002-09-01 02:54:56 +00:00
Kurt Zeilenga
b67986cdde Format tweaks 2002-09-01 01:49:25 +00:00
Kurt Zeilenga
7901bc8f5b Reflect latest contributions 2002-09-01 01:47:59 +00:00
Pierangelo Masarati
5a0ba6e429 document another (optional) config directive 2002-08-31 10:27:49 +00:00
Kurt Zeilenga
d912c2c711 Rework client control parsing... need to implement
common controls across all tools.
2002-08-29 21:36:36 +00:00
Kurt Zeilenga
20ef1d9fe4 Misc updates... 2002-08-29 04:56:05 +00:00
Kurt Zeilenga
4114c96ccd More clarifications 2002-08-28 04:22:12 +00:00
Kurt Zeilenga
1e0cc6da35 Fix typo 2002-08-28 04:08:02 +00:00
Kurt Zeilenga
7c283a6685 Fix tables numbering. Add note able system schema extensions. 2002-08-28 04:05:07 +00:00
Kurt Zeilenga
22d3c7f24e Clarify that manageDsaIT is not to specified when managing
entry DSEs.
2002-08-28 01:20:03 +00:00
Kurt Zeilenga
4ef042fee4 Clean up filters 2002-08-28 01:16:25 +00:00
Kurt Zeilenga
44c214d4a0 Fix some formatting issues 2002-08-28 01:11:47 +00:00
Kurt Zeilenga
bb172cb518 clarify "authorization" feature as "proxy authorization". 2002-08-27 23:24:43 +00:00
Kurt Zeilenga
22915aac93 More OID clarifications. 2002-08-27 20:20:52 +00:00
Kurt Zeilenga
8c03d7ed4b Fix typos 2002-08-27 19:20:29 +00:00
Kurt Zeilenga
8889129762 Warn about hijacking. 2002-08-27 18:17:09 +00:00
Kurt Zeilenga
09e64b6fe8 Add note regard StartTLS over 389. 2002-08-26 22:10:32 +00:00
Kurt Zeilenga
bdcba5ad3a Add link to SDF tools at CPAN. 2002-08-24 23:37:59 +00:00
Kurt Zeilenga
18e4362b07 Add ldapwhoami(1) 2002-08-24 06:28:10 +00:00
Kurt Zeilenga
dabbefd908 Add -y. 2002-08-24 06:19:39 +00:00
Kurt Zeilenga
8de258d2e2 Patch: 'ldapmodify -y file' reads password from file (ITS#2031)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
            ================
Adapted by Kurt Zeilenga for inclusion in OpenLDAP.  My comments are
marked with enclosed with square brackets (e.g. [Kurt's comment] below.
            ================

If I run ldapmodify & co from a script, I don't want to use '-W password'
because the password shows up in the output of 'ps' for everyone,
and I can't pipe the password to 'ldapmodify -w' because -w uses
getpassphrase() which reads from the tty instead of stdin.
So I added '-y file' which reads the password from file.  The programs
exit if the file cannot be read.

[Complete contents of file is used as password.  Use:
	echo -n "secret" > password
to create a file with "secret" as the password.  The -n avoids
adding a newline (which would invalidate the password).  Note
that echo is a builtin and hence its arguments are not visible
to 'ps'.]

I changed ldapmodify, ldapmodrdn, ldapdelete, ldapsearch, ldapcompare.
I did not bother to change ldappasswd and ldapwhoami, because they
prompt for many passwords.  [I fixed up ldapwhoami.]

Rerun autoconf after applying this patch. [Done.]

Note:  I do not know if Windows NT has fstat(), so I set HAVE_FSTAT to
undef in portable.nt.  (fstat() is used to warn if the file is publicly
readable or writeable.)  [I used fstat() to set the buffer size to
read.]

[Note: using the contents of a file extends the tools to support
passwords which could not normally be provided using getpassphrase()
or via the command line.]

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
[Kurt D. Zeilenga <kurt@openldap.org>, Aug 2002.]
2002-08-24 05:47:17 +00:00
Pierangelo Masarati
f11c6b27e7 Final run of changes to back-sql; IBM db2 support has been tested.
Now related ITSes need be audited and possibly closed.

Enhancements:
  - re-styled code for better readability
  - upgraded backend API to reflect recent changes
  - LDAP schema is checked when loading SQL/LDAP mapping
  - AttributeDescription/ObjectClass pointers used for more efficient
    mapping lookup
  - bervals used where string length is required often
  - atomized write operations by committing at the end of each operation
    and defaulting connection closure to rollback
  - added LDAP access control to write operations
  - fully implemented modrdn (with rdn attrs change, deleteoldrdn,
    access check, parent/children check and more)
  - added parent access control, children control to delete operation
  - added structuralObjectClass operational attribute check and
    value return on search
  - added hasSubordinate operational attribute on demand
  - search limits are appropriately enforced
  - function backsql_strcat() has been made more efficient
  - concat function has been made configurable by means of a pattern
  - added config switches:
      - fail_if_no_mapping	write operations fail if there is no mapping
      - has_ldapinfo_dn_ru	overrides autodetect
      - concat_pattern		a string containing two '?' is used
				(note that "?||?" should be more portable
				than builtin function "CONCAT(?,?)")
      - strcast_func		cast of string constants in "SELECT DISTINCT					statements (needed by PostgreSQL)
      - upper_needs_cast	cast the argument of upper when required
				(basically when building dn substring queries)

Todo:
  - add security checks for SQL statements that can be injected (?)
  - re-test with previously supported RDBMs
  - replace dn_ru and so with normalized dn (no need for upper() and so
    in dn match)
  - implement a backsql_normalize() function to replace the upper()
    conversion routines
  - note that subtree deletion, subtree renaming and so could be easily
    implemented (rollback and consistency checks are available :)
  - implement "lastmod" and other operational stuff (ldap_entries table ?)
2002-08-23 08:54:08 +00:00
Howard Chu
33d5c0abd7 Fix errors in replica directive 2002-08-22 20:32:09 +00:00
Kurt Zeilenga
1b6c3fc57f Add dumpasn1 logging to TODO. 2002-08-21 18:45:08 +00:00
Kurt Zeilenga
22ec2b9e19 cleanup 2002-08-17 02:52:39 +00:00
Pierangelo Masarati
76e936e274 reflect recent additions to backend configuration 2002-08-13 17:13:57 +00:00
Kurt Zeilenga
d945a5aed9 minor updates 2002-08-12 18:07:24 +00:00
Howard Chu
1be4ab9d07 ITS#1893 Add (terse) schemadn description 2002-08-10 04:09:28 +00:00
Kurt Zeilenga
e2b8a3b139 Remove reference to getfilter(3) 2002-08-08 03:03:48 +00:00
Kurt Zeilenga
9c28c9b361 Zap LDAPv2-only stuff 2002-08-08 03:01:14 +00:00
Howard Chu
c3ca53cdfe Fix typo 2002-08-07 03:12:47 +00:00
Howard Chu
8971c2b730 ITS#1958 from Andrew Findlay with minor adjustments 2002-08-07 03:00:00 +00:00
Kurt Zeilenga
aab1f5b0a4 Minor updates 2002-08-05 20:05:25 +00:00
Kurt Zeilenga
884b476c32 Add note regarding user/system checks and operational attributes. 2002-08-02 00:55:50 +00:00
Kurt Zeilenga
fcae7e4286 namedref is now a Proposed Standard RFC 2002-07-24 15:48:27 +00:00
Kurt Zeilenga
65b5f64a0e Clarify use of slapd.conf(5) v ldap.conf(5). 2002-07-24 03:11:58 +00:00
Kurt Zeilenga
99133f7944 Fix a few typos 2002-07-10 03:12:47 +00:00
Kurt Zeilenga
b839e6fc8b Remove misleading (untrue) text about known syntax OID macros. 2002-06-27 16:27:07 +00:00
Kurt Zeilenga
0cd54a7d27 Fix typo in last commit 2002-06-21 21:25:38 +00:00
Kurt Zeilenga
2893a78d0a Add LIBRARY section to each man page 2002-06-21 07:32:54 +00:00
Kurt Zeilenga
95a835be51 Detail simple method 2002-06-19 01:39:26 +00:00
Howard Chu
55521da9cb Minor cleanup, add mention of BDB to tests 2002-06-18 19:35:29 +00:00
Kurt Zeilenga
39071ff932 SSF updates 2002-06-18 08:02:36 +00:00
Kurt Zeilenga
0d21db2858 SSF discussion 2002-06-18 07:41:56 +00:00
Kurt Zeilenga
2119d34ec6 More security considerations 2002-06-18 07:11:58 +00:00
Kurt Zeilenga
a50f336032 Add some basic network security information 2002-06-18 00:55:39 +00:00
Howard Chu
63b948806d In rootdn, add ref to SASL Authentication identities 2002-06-18 00:23:40 +00:00
Kurt Zeilenga
4c3f1fea00 Add initial security chapter (intro only). 2002-06-18 00:11:36 +00:00
Kurt Zeilenga
a4bcf4c630 Reorganize chapters 2002-06-18 00:05:23 +00:00
Kurt Zeilenga
cbaf9f6649 Make it clear that ldap_explode_dn() and friends are deprecated. 2002-06-17 22:45:34 +00:00
Kurt Zeilenga
9a38d98d37 Add option to disallow unprotected simple authentication.
Add protected simple authentication as a "strong" mechanism.
2002-06-17 22:18:27 +00:00
Kurt Zeilenga
7cfb89cf96 Formatting fix 2002-06-17 05:57:09 +00:00
Kurt Zeilenga
647d1ad562 Some LDBM v BDB cleanup 2002-06-17 05:56:55 +00:00
Kurt Zeilenga
9cee733563 add rootpw hash password comments 2002-06-17 05:33:32 +00:00
Kurt Zeilenga
b818a12f03 Reference slapd-bdb and slapd-ldbm man pages.
Update index examples
2002-06-16 18:59:17 +00:00
Howard Chu
38de8a8483 Added CA and PEM terms 2002-06-16 12:31:17 +00:00
Howard Chu
4405c1ab27 Added TLS configuration, mostly the same as the man pages but fleshed
out a little more.
2002-06-16 12:24:16 +00:00
Howard Chu
98b1e09c44 Note that TLS_CERT and TLS_KEY are user-only options. 2002-06-16 12:10:23 +00:00
Howard Chu
5d8ce71c83 More minor cleanup 2002-06-16 08:46:41 +00:00
Howard Chu
dca986280e Fix typo in previous commit 2002-06-16 07:29:06 +00:00
Howard Chu
0f0c268c6d Minor cleanup and reformat, added TLS options. 2002-06-16 07:19:31 +00:00
Kurt Zeilenga
7d14f78c0e Fix invalid search filter 2002-06-16 06:12:26 +00:00
Kurt Zeilenga
acb2efde53 Add SSF access control example. 2002-06-16 00:11:51 +00:00
Kurt Zeilenga
3925c471f9 Reserve digit flags 2002-06-15 22:18:51 +00:00
Kurt Zeilenga
27fdd04153 Add -4/-6 flags to slapd to force use of IPv4 or IPv6 2002-06-15 22:01:39 +00:00
Howard Chu
bdd0c38571 Cleanup grammar, etc. 2002-06-15 01:00:50 +00:00
Kurt Zeilenga
1c88e892fe Use host-less LDAP URLs 2002-06-14 22:12:27 +00:00
Howard Chu
e0a359ef6c Changed "saslRegexp" to "sasl-regexp". (Both are valid, but this is
more consistent with the other sasl directives.)
2002-06-14 22:06:23 +00:00
Howard Chu
09d093698c Typos - "TCP" backend should be "TCL" 2002-06-14 21:59:23 +00:00
Kurt Zeilenga
db77cbdc35 Misc formatting changes 2002-06-14 21:47:09 +00:00
Kurt Zeilenga
b8f8869432 Remove extra BDB define 2002-06-14 21:42:55 +00:00
Kurt Zeilenga
045a8fb8be LDBM->BDB updates 2002-06-14 21:19:42 +00:00
Kurt Zeilenga
76cb3243d3 Misc cleanup 2002-06-14 20:53:52 +00:00
Kurt Zeilenga
220b41bc91 Patch: Bugs with back-ldap/meta mappings (ITS#1787)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

manpage patch for ITS#1787.
2002-06-14 20:41:40 +00:00
Howard Chu
3ee908649a Added a bit about client and server certificates. 2002-06-14 13:35:09 +00:00
Howard Chu
4082c7a12d Another typo, mistake in previous commit 2002-06-14 13:18:15 +00:00
Howard Chu
286c97f20a Fix typos, add a brief mention of Authorization Policy configuration 2002-06-14 13:03:20 +00:00
Howard Chu
75012bf5ac Fix EX: typo 2002-06-14 13:01:48 +00:00
Howard Chu
0d6c14b41d *** empty log message *** 2002-06-14 12:38:32 +00:00
Howard Chu
48c2f5e86b Added X.509 term 2002-06-14 12:32:36 +00:00
Howard Chu
7b9d3b4a26 Added sasl-authz-policy 2002-06-14 11:02:57 +00:00
Kurt Zeilenga
c5de2fd6fd Update I-Ds. 2002-06-13 16:14:10 +00:00
Kurt Zeilenga
b43ad1dd0e Generate man page date from version.sh 2002-06-13 03:59:10 +00:00
Kurt Zeilenga
8aee3e5113 Add pointer to JLDAP TODO list 2002-06-12 16:32:29 +00:00
Kurt Zeilenga
8473308922 Clarify that client side items refer to client/tools and/or ldap(3) work 2002-06-12 16:28:05 +00:00
Kurt Zeilenga
faf91f1f1f Update to the 'gentle SIGHUP' patch. (ITS#1679)
- Let write operations return unwilling-to-perform after
  'gentle shutdown' has been initiated.
- Change -1 to 2 in slapd_gentle_shutdown and slapd_shutdown, since
  sig_atomic_t can be unsigned (ITS#1736).  The 'gentle SIGHUP' patch
  is older than ITS#1736 but was applied later, so it reintroduced
  the problem.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, June 2002.
2002-06-12 15:43:19 +00:00
Kurt Zeilenga
ffe5b623cc add reference to "Software Bugs" issues 2002-06-12 03:42:01 +00:00
Kurt Zeilenga
31157b9cca Rework todo 2002-06-12 03:36:05 +00:00
Kurt Zeilenga
dfeac21baa Add {CLEARTEXT} to password-hash possibilities 2002-06-12 00:50:28 +00:00
Kurt Zeilenga
9bfcc3b4e2 Fix preamble 2002-06-09 19:11:53 +00:00
Kurt Zeilenga
4df6501bc7 Misc updates 2002-06-09 18:57:35 +00:00
Kurt Zeilenga
fe86a81e25 VLV clean 2002-06-09 06:12:24 +00:00
Kurt Zeilenga
af744d8f1e Update 2002-06-08 18:40:58 +00:00
Kurt Zeilenga
133a4ebbc4 Note that rootpw can only be set if rootdn is under suffix. 2002-06-08 18:40:36 +00:00
Kurt Zeilenga
018ace0c50 More I-D. 2002-06-07 01:58:40 +00:00
Kurt Zeilenga
536fafdb39 Update VLV I-D and add proxy auth I-D. 2002-06-07 01:44:32 +00:00
Kurt Zeilenga
91088eaa84 Full_Name: Norbert Klasen
Version: head
OS: SuSE Linux 7.3
URL: ftp://ftp.openldap.org/incoming/norbert.klasen.rejects.20020605.patch
Submission from: (NULL) (62.104.216.66)

This patch adds an '-S' option to ldapmodify. If a filename is specified with
this option, records which could not successfully be added/modified/deleted from
the LDAP server will be written to the specified file. Most useful in
conjunction with '-c' option.
2002-06-06 00:31:09 +00:00
Kurt Zeilenga
951ca2bd68 Patch: Non-unique msgid for abandon in back-<shell,tcl> (ITS#1793)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

It has just occurred to me - duh - that the process ID of a back-shell
command is a perfectly good unique ID for it, and more useful than
any connection id/message id thingy.  Doesn't need extra arguments
to the shell commands either, except a pid: line to abandon.
And msgid: can still be removed in a future version.
Here is a patch.


Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
2002-06-05 16:40:16 +00:00
Kurt Zeilenga
94ef44e463 param error comment is incorrect 2002-06-05 15:56:55 +00:00
Kurt Zeilenga
19eca33ca3 Gentile HUP shutdown from Hallvard 2002-06-03 16:47:43 +00:00
Kurt Zeilenga
bd137c60a3 detail table to better indicate reserved/used args 2002-06-02 04:21:59 +00:00
Kurt Zeilenga
4543536bdb Fix up -f description 2002-06-01 21:41:09 +00:00
Kurt Zeilenga
15e6a98bba Patch: Non-unique msgid for abandon in back-<shell,tcl> (ITS#1793)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Here is a patch which does what I described.  Of course, someone has
to decide if that is the right solution:-)
- Add an "opid:" line to the input to back-shell commands.
- Add an "abandonid: <opid> line to back-shell/abandon input.
- Replace message id with opid in back-tcl arguments.
- Add an abandonid = <opid> argument to back-tcl/abandon.
An opid (operation ID) is a "connection ID/message ID" string.  I
would have liked to use another name to avoid confusion with struct
slap_op->o_opid, but I could not think of another apt word.

This also fixes ITS#1784 and ITS#1792.  Since calling conventions
changed anyway, I fixed back-shell by adding abandonid: and making
opid: always be the ID of the current operation.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
2002-05-09 02:11:39 +00:00
Kurt Zeilenga
2ab8810555 Documentation patch #4 (ITS#1749)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Small changes:
- Fix typo slapd_meta -> slapd-meta in slapd-meta(5).
- Add slapd-dnssrv(5) to SEE ALSO in slapd.conf(5).
- Add descriptions of the files in FILES sections.
- Add $HOME/.udrc to FILES in ud(1) and ud.conf(5).
- Add ldaprc (without ".") and ENVIRONMENT VARIABLES in ldap.conf(5).
- Change manpage references to proper ".BR name (section)".

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
2002-05-09 02:07:41 +00:00
Kurt Zeilenga
46e33e4634 Fix typos 2002-05-04 04:35:41 +00:00
Kurt Zeilenga
7b1d619a58 Basic dnssrv man page 2002-05-04 04:34:58 +00:00
Pierangelo Masarati
71aa1c5dc9 clarifications 2002-05-02 16:49:47 +00:00
Pierangelo Masarati
4f24ebbb8d 3rd step at updating docs by hallvard Furuseth (with minor changes in slapd-meta.5) 2002-05-02 16:35:16 +00:00
Howard Chu
d879fb351b Added config keyword descriptions from ITS#966. Minor cleanup. 2002-05-01 20:24:56 +00:00
Pierangelo Masarati
4ad033a298 couple of fixes 2002-05-01 19:36:24 +00:00
Howard Chu
0bb46f937b From Hallvard, with slight changes 2002-05-01 19:21:21 +00:00
Pierangelo Masarati
1aa96af216 second round at ITS#1749 2002-05-01 16:38:30 +00:00
Pierangelo Masarati
22c45ec87b couple of fixes 2002-04-29 20:36:04 +00:00
Pierangelo Masarati
d019bff7b8 First commit of Hallvard's backend documentation effort
Backend documentation patch, version 1

================
Most of this text is taken from OpenLDAP.  The work of rewriting it
to manual pages is done by by Hallvard B. Furuseth and placed into
the public domain.  This software is not subject to any license of
the University of Oslo.
================

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-29 20:24:29 +00:00
Howard Chu
5de276fa25 ITS#1749 added maxderefdepth, suffiaxalias, TLSCACertificatePath,
ucdata-path, moduleload, modulepath. sasl-external-x509dn-convert has
been deleted from the code.
2002-04-20 10:06:23 +00:00
Howard Chu
e265b47181 Comment out "logfile", its code is behind #ifdef NEW_LOGGING in config.c. 2002-04-20 09:23:19 +00:00
Howard Chu
5770a81595 ITS#1749 added "debug" description, commented out because it has no effect
without NEW_LOGGING. Added logfile.
2002-04-20 09:07:24 +00:00
Howard Chu
510f57c8dd ITS#1749 added BDB options 2002-04-20 08:12:03 +00:00
Howard Chu
e94d18e501 DN consistency, lowercase, etc. 2002-04-20 07:44:02 +00:00
Howard Chu
45cac8e03f Typos, slight rearrangement 2002-04-20 07:24:14 +00:00
Howard Chu
39ec9cf91b ITS#1438 typos 2002-04-20 06:33:22 +00:00
Howard Chu
7abb4ee49f ITS#1271 typos 2002-04-20 06:18:55 +00:00
Kurt Zeilenga
c90a10465e Need to include <ldap_schema.h>. 2002-04-17 19:03:01 +00:00
Pierangelo Masarati
bd0fa7c579 document the -t switch 2002-04-15 19:18:54 +00:00
Kurt Zeilenga
fc71d62b92 trim finger from release 2002-04-15 18:14:02 +00:00
Pierangelo Masarati
d9748f0b06 updates SEE ALSO section 2002-04-13 15:08:03 +00:00
Pierangelo Masarati
4906410ca5 fix typo 2002-04-13 15:07:40 +00:00
Howard Chu
bf6fccd7bb ITS#1740 2002-04-13 10:56:16 +00:00
Howard Chu
491c0f22e0 ITS#1735 fix typos 2002-04-11 07:39:51 +00:00
Pierangelo Masarati
4a8ab5dbf2 Mostly based on patches provided by Hallvard B. Furuseth
ITS#1677 - cast away const warnings
ITS#1678 - unsigned char args to ctype funcs
ITS#1682 - don't redefine ldap_debug
ITS#1683 - uninitialized vars
ITS#1703 - ldo_debug initialization
ITS#1705 - unsigned testing
ITS#1706 - socklen_t args
ITS#1719 - back-tcl update (other cleanups/fixes/improvements; yet untested)
ITS#1724 - integerNormalize/integerFilter/integerIndexer bugs
ITS#1725 - libdes not required

Implement back-null (/dev/null style backend)
Cleanup some misc warnings ("%lu" format, unused/uninitialized vars,
        ambiguous operator precedence)

Kurt, please regenerate configure
2002-04-08 09:43:22 +00:00
Pierangelo Masarati
704ed641eb allow attribute exclusion list in selective replica 2002-03-30 08:57:41 +00:00
Pierangelo Masarati
53e28a63a9 fix typo 2002-03-30 08:46:35 +00:00
Kurt Zeilenga
6440556956 finish zapping url_search 2002-03-29 21:06:31 +00:00
Kurt Zeilenga
dedb97ece8 A few updates 2002-03-26 19:04:09 +00:00
Kurt Zeilenga
95691dc8b4 ITS#1680: Fix idle timeout typo 2002-03-25 17:26:07 +00:00
Pierangelo Masarati
f11a682c6f fix ITS#1668 2002-03-23 16:55:46 +00:00
Kurt Zeilenga
66f6ba4df9 Updates to reflect recent contributions 2002-03-04 18:50:38 +00:00
Kurt Zeilenga
e310bd0c86 obsoleted by smith-psearch 2002-03-01 20:31:15 +00:00
Kurt Zeilenga
aae22fbc61 Updates from -devel 2002-02-18 18:09:26 +00:00
Kurt Zeilenga
8cbb01f638 More 2002-02-18 18:05:11 +00:00
Kurt Zeilenga
cf3ddbe263 Misc updates 2002-02-18 18:02:26 +00:00
Kurt Zeilenga
409398ea2d s/rootDSEfile/rootDSE/ 2002-02-07 18:17:24 +00:00
Kurt Zeilenga
1808f5e28b Add LDIFv1 "control" task 2002-02-02 20:30:31 +00:00
Kurt Zeilenga
6f6c0d73ce Add autoconf update to TODO list (I'll likely have to do this myself)
Add shtool use to TODO list
2002-02-01 22:24:23 +00:00
Kurt Zeilenga
cb1b52101b Add no-op control to list 2002-01-31 23:23:35 +00:00
Kurt Zeilenga
400af27afa Add clarification to password-hash directive 2002-01-30 00:41:36 +00:00
Kurt Zeilenga
abf91ca1ff Initial ldapcompare(1) implementation. Adapted from patch
submitted by Jeff Costlow <j.costlow@f5.com> (ITS#1560).

Portions:
Copyright 2002, F5 Networks, Inc, All rights reserved.
This software is not subject to any license of F5 Networks.

This is free software; you can redistribute and use it
under the same terms as OpenLDAP itself.
2002-01-29 07:33:11 +00:00
Kurt Zeilenga
ed070291e2 Misc updates 2002-01-27 20:08:49 +00:00
Howard Chu
7f68a95bac Added TLSVerifyClient configuration notes 2002-01-27 04:49:32 +00:00
Kurt Zeilenga
d28c4af9b3 Add language tag/range option I-D 2002-01-27 00:14:23 +00:00
Howard Chu
5d927e7bb2 More updates. Need to add lber-sockbuf.3 ... 2002-01-25 12:34:57 +00:00
Kurt Zeilenga
a119d25a2d Misc updates 2002-01-20 03:32:48 +00:00
Howard Chu
916dec0d79 Mostly up to date. 2002-01-20 01:10:51 +00:00
Kurt Zeilenga
7ac207dc05 rm noautosubtypes 2002-01-15 02:47:06 +00:00
Howard Chu
b17f72ef8a More updates 2002-01-13 14:45:29 +00:00
Howard Chu
0e847131e0 Minor updates, mention extended requests, server and client controls.
Please review and comment.
2002-01-13 12:55:55 +00:00
Kurt Zeilenga
fda6569ae0 Fix grammar errors 2002-01-13 02:56:36 +00:00
Kurt Zeilenga
b5b198535c Misc updates to the todo list 2002-01-12 04:14:32 +00:00
Howard Chu
93d9a11089 Mention that objectClass names are valid in the attrs=<attrlist> clause. 2002-01-10 10:02:51 +00:00
Kurt Zeilenga
879733f9f7 Trim some old/experimental RFCs 2002-01-05 02:40:10 +00:00
Kurt Zeilenga
0e2af54a3f Update copyright statements 2002-01-04 21:17:25 +00:00
Kurt Zeilenga
3c415e0807 Refer to ldap_get/set_option, not ld_errno 2002-01-04 19:20:33 +00:00
Kurt Zeilenga
614ff3e18b Some misc cleanup 2002-01-04 19:09:36 +00:00
Kurt Zeilenga
ab5d60dc74 Defunct 2002-01-03 18:29:53 +00:00
Kurt Zeilenga
02700a4f14 Trim RFCs 2001-12-27 01:09:58 +00:00
Kurt Zeilenga
acf57308c1 Trim RFCs 2001-12-27 01:02:40 +00:00
Kurt Zeilenga
9465ef0616 Zap some old I-Ds which are not terrible relevant anymore.
Note that old I-Ds can always be found on www.watersprings.com
2001-12-27 01:00:24 +00:00
Kurt Zeilenga
76524f6c50 Misc updates 2001-12-27 00:55:42 +00:00
Kurt Zeilenga
af92beb21e a misc. few updates... 2001-12-27 00:42:04 +00:00
Kurt Zeilenga
6c44ac070c Zap man pages of deprecated routines 2001-12-22 20:51:27 +00:00
Kurt Zeilenga
f021404b41 disallow bind_v2 is now default 2001-12-21 04:45:04 +00:00
Kurt Zeilenga
c84b2b5cfd Req't documents should be born historic... 2001-12-20 18:21:55 +00:00
Kurt Zeilenga
6905533757 Zap RFCs being moved to Historical status 2001-12-20 18:20:34 +00:00
Kurt Zeilenga
9a000a86bd Misc updates 2001-12-20 16:49:46 +00:00
Kurt Zeilenga
7caa803b59 Undocument 'schemacheck off' 2001-12-19 21:28:34 +00:00
Kurt Zeilenga
ff723903c5 Some index clarifications 2001-12-18 02:24:09 +00:00
Howard Chu
dfd26b8d95 Added description of "subordinate" keyword. 2001-12-15 07:15:32 +00:00
Kurt Zeilenga
a250bc7890 Replication notes
written by Ganesan Rajagopal <rganesan@debian.org>
2001-12-08 07:35:48 +00:00
Kurt Zeilenga
8362bc91f5 Misc I-D updates
Misc schema updates
2001-12-05 23:16:35 +00:00
Kurt Zeilenga
a83ba7b69d Reserve -E/-e for extensions, syntax yet to be defined. 2001-12-05 17:56:34 +00:00
Kurt Zeilenga
680fe39891 rev-05 2001-12-05 17:50:37 +00:00
Kurt Zeilenga
dffcf0be27 zap friendly 2001-12-05 00:07:04 +00:00
Kurt Zeilenga
493b415255 Rework indexing code, removing "autolang" and making
"subtypes" and "lang" default behavior.
2001-12-05 00:06:03 +00:00
Pierangelo Masarati
ae74c1c97c small adjustment 2001-12-04 17:13:25 +00:00
Pierangelo Masarati
6d3df52af9 update limits stuff 2001-12-04 17:10:17 +00:00
Kurt Zeilenga
be88d37840 misc updates 2001-11-28 02:04:00 +00:00
Kurt Zeilenga
e48861cf78 Add additional projects 2001-11-27 22:02:27 +00:00
Mark Adamson
bd091ce276 Allow size and time limits in slapd.conf for anonymous bound search operations 2001-11-21 20:28:15 +00:00
Kurt Zeilenga
b9269f30e8 Add dnsReferral to TO DO list 2001-11-05 17:57:09 +00:00
Kurt Zeilenga
74300deaab Some minor adjustments 2001-11-03 21:53:44 +00:00
Kurt Zeilenga
57a5439d6c Remove derived file 2001-11-03 19:07:05 +00:00
Pierangelo Masarati
cf13ded4fe access control man page 2001-11-03 18:03:10 +00:00
Pierangelo Masarati
64c7e39aa8 More compliant version of str2dn/dn2str;
may need optimization;
uncomment #define USE_LDAP_DN_PARSING in libraries/libldap/getdn.c
to enable its use.
The ava/rdn/dn handling routines (append, insert, free and so) must
be made available thru declaration in some header.
2001-10-29 08:05:23 +00:00
Kurt Zeilenga
8cc0b83319 Misc updates 2001-10-27 18:20:52 +00:00
Kurt Zeilenga
30af73da75 draft 04 2001-10-26 02:10:30 +00:00
Kurt Zeilenga
fcd1ce0e28 Use defined Root DSE attributes.
Developed by Julius Enarusai/IBM
Copyright IBM Corp. 2001

Use of this source code is subject to the terms of The OpenLDAP
Public License Version 2.7, 7 September 2001.  No trademarks of the
IBM Corporation are to be used to identify, endorse or promote any
products derived from this code without the prior written consent
of IBM.
2001-10-23 23:29:41 +00:00
Kurt Zeilenga
850d8eba67 Minor update 2001-10-16 01:16:39 +00:00
Kurt Zeilenga
6469f75c26 Minor updates 2001-10-16 01:16:08 +00:00