Commit graph

5099 commits

Author SHA1 Message Date
Kurt Zeilenga
8a7114e152 ITS#2390 fix for back-bdb 2003-03-22 16:38:31 +00:00
Howard Chu
90332c2de2 ITS#2390 - freeing uninit'd ndn 2003-03-22 16:26:38 +00:00
Howard Chu
23d69c1d1f Still need DB_AUTO_COMMIT flag 2003-03-22 16:21:44 +00:00
Kurt Zeilenga
c37a3b37b8 namingCSN 2003-03-22 16:12:59 +00:00
Kurt Zeilenga
61dffba479 ITS#2847: fix cn=#,... 2003-03-22 16:12:39 +00:00
Howard Chu
a63b8908cd ITS#2389 - stop reading requests on a conn if it has more than
connection_pool_max/2 operations already executing. May want to tune
this to a higher value, e.g. connection_pool_max - XX, etc. Fix in
result.c throttles the connection too late, all threads are already
consumed by the time the send buffer blocks.
2003-03-20 12:40:11 +00:00
Howard Chu
546d5cb3a0 ITS#2389 - stop reading requests on a connection when we are blocked
writing responses. This may not be the right fix.
2003-03-20 11:54:17 +00:00
Howard Chu
f23c71c03c ITS#2385 fix typo in comment terminator 2003-03-18 17:52:48 +00:00
Pierangelo Masarati
26e6e44bec value is parsed in place; minor cleanup 2003-03-18 14:38:40 +00:00
Pierangelo Masarati
c4b925f343 document -u option 2003-03-18 10:38:23 +00:00
Howard Chu
a0c58e5f40 Don't use DB_AUTO_COMMIT when opening a database 2003-03-18 00:04:16 +00:00
Kurt Zeilenga
c79c13d480 replace get_substring_filter with get_ssa() 2003-03-17 06:06:02 +00:00
Kurt Zeilenga
86fdee6de7 SLAP_NVALUES: fix values_find_ex call 2003-03-17 00:30:35 +00:00
Kurt Zeilenga
1a55430c65 SLAP_NVALUES: more fixes 2003-03-17 00:27:33 +00:00
Kurt Zeilenga
e0c2e71a7c SLAP_NVALUES updates 2003-03-17 00:10:43 +00:00
Kurt Zeilenga
9ac9102b55 Undo last commit 2003-03-16 23:54:40 +00:00
Kurt Zeilenga
8b6e1db2d3 SLAP_NVALUES: remove all the extra frees 2003-03-16 23:54:22 +00:00
Kurt Zeilenga
b1d245d9de SLAP_NVALUES: fix extraneous free bug. 2003-03-16 23:52:44 +00:00
Kurt Zeilenga
e3b1020e75 Fix typos in last commit
Still chasing SLAP_NVALUES trashed filter bug
2003-03-16 21:58:00 +00:00
Kurt Zeilenga
261d127281 Rewrite filter routines to malloc() late. 2003-03-16 21:50:39 +00:00
Kurt Zeilenga
19ddf0d63d SLAP_NVALUES: still chasing an extranous free... this just saves
an unneccessary malloc.  (Actually, we should likely use local
filter structure to read things into and then malloc/copy once
we're sure there are no errors.)
2003-03-16 19:09:07 +00:00
Kurt Zeilenga
6c7a1194c3 reorder to statements for debugging purposes 2003-03-16 18:48:44 +00:00
Kurt Zeilenga
8873006105 SLAP_NVALUES changes
and misc cleanup
2003-03-16 18:10:16 +00:00
Howard Chu
d18e0989d9 ITS#2382 use ch_calloc 2003-03-16 12:34:40 +00:00
Kurt Zeilenga
e1980876f4 SLAP_NVALUES updates 2003-03-16 06:41:53 +00:00
Kurt Zeilenga
676349481f SLAP_NVALUES updates 2003-03-16 06:03:23 +00:00
Kurt Zeilenga
338355d30b SLAP_NVALUES: value_find v value_find_ex 2003-03-16 01:39:39 +00:00
Kurt Zeilenga
52fb5b1342 Not sure why these asserts are failing... too tired to figure it...
so #ifdef for now.
2003-03-15 23:59:14 +00:00
Kurt Zeilenga
c0477e1532 Fix test006-acls 2003-03-15 23:02:55 +00:00
Kurt Zeilenga
3972e13fc3 NVALUES: fix a couple of value_find_ex() calls 2003-03-15 22:47:17 +00:00
Kurt Zeilenga
776e3f2248 Add some additional error checking...
but haven't yet figured out why NVALUES crashes in test003
2003-03-15 19:45:36 +00:00
Howard Chu
55fea9715e Plug leaks in controls_destroy() 2003-03-14 09:42:18 +00:00
Howard Chu
9ccecd3907 Plug leaks. (benign. slap_controls and root_dse need a destroy() still,
also still need to clear mr's from the ad_map.)
2003-03-14 09:37:27 +00:00
Howard Chu
44be38c0f0 ITS#2371, fix BDB_SUBDIRs 2003-03-13 15:53:19 +00:00
Kurt Zeilenga
e12aec25f4 minor cleanup 2003-03-13 04:16:18 +00:00
Howard Chu
30c5915460 Fix version check in previous 2003-03-13 02:01:14 +00:00
Howard Chu
573349a318 ITS#2356 - support Perl newer than 5.6 2003-03-13 01:58:26 +00:00
Kurt Zeilenga
0bfcfbf5fa Minor tweaks 2003-03-13 01:29:49 +00:00
Kurt Zeilenga
e88b84d6db Use BER_BVC 2003-03-13 01:05:40 +00:00
Kurt Zeilenga
c4feadbd4f Fix typo in last commit 2003-03-13 00:53:40 +00:00
Kurt Zeilenga
12139ae223 Another comment. 2003-03-13 00:51:06 +00:00
Kurt Zeilenga
3bffd98e9d Add comment that this schema is invalid 2003-03-13 00:50:30 +00:00
Howard Chu
a2a5ef48be ITS#2368 - fix deleting key from range IDL 2003-03-12 21:18:39 +00:00
Howard Chu
f2223ede5b Fix error messages 2003-03-12 21:16:43 +00:00
Jong Hyuk Choi
c1da85eba0 Error checking code for ITS#2367 2003-03-12 16:37:04 +00:00
Jong Hyuk Choi
0d0d5ffddf declaration of bdb_idl_entry_cmp() 2003-03-12 16:36:28 +00:00
Jong Hyuk Choi
2e31af9ca1 AVL delete upon shutdown (ITS#2367) 2003-03-12 16:34:17 +00:00
Howard Chu
009afb4bd7 Fix cache consistency problems on txn retry 2003-03-12 15:20:51 +00:00
Howard Chu
21a95f4309 ITS#2348 - revert previous patch, use patch from ITS 2003-03-12 13:40:54 +00:00
Howard Chu
c2fd1b8a3f Added lutil_passwd_init(), lutil_passwd_destroy() 2003-03-12 13:10:22 +00:00
Howard Chu
6aab531d66 #ifndef SLAP_NVALUES asserted berval was leaked 2003-03-12 13:05:19 +00:00
Howard Chu
1e5de87e10 Plug memory leaks:
retrying a modrdn leaked DNs, rdns, etc.
	modifying a cached entry leaked attrs
2003-03-12 13:04:23 +00:00
Howard Chu
97a805415d ITS#2348, additional check to prevent re-inserting IDs that are
already present. Hopefully the final fix...
2003-03-12 10:45:00 +00:00
Howard Chu
6694db8fd4 ITS#2253 - when StartTLS fails, slapd closes the connection so slurpd
must unbind and re-initialize the LDAP session.
2003-03-12 04:38:12 +00:00
Pierangelo Masarati
1277616c40 use an "unknown" listener name/url when faking connections 2003-03-11 18:25:51 +00:00
Pierangelo Masarati
fc87692576 fix ITS#2362 and other leaks/unhandled massaged DN memory 2003-03-11 18:09:38 +00:00
Kurt Zeilenga
72b6f82cc4 Tweak SLAP_OP_BLOCKS 2003-03-11 17:26:57 +00:00
Pierangelo Masarati
4a862018eb #include reordering 2003-03-11 12:26:05 +00:00
Pierangelo Masarati
f6a47ac9ea silence warning 2003-03-11 12:25:39 +00:00
Pierangelo Masarati
3415b384e2 cleanup cache search 2003-03-11 12:24:38 +00:00
Pierangelo Masarati
5c7e6e872d cleanup bind 2003-03-11 12:24:14 +00:00
Pierangelo Masarati
bfe6d806d9 (ultimately?) fix ITS#2361 2003-03-11 12:23:20 +00:00
Howard Chu
ed884fe0ee Added proposed request parameters to Operation. #ifdef'd, not active.
Replaces "be, conn, op" triple with just "op" for most functions. Removes
individual arguments from backend op functions. Please review/comment.
2003-03-11 10:39:32 +00:00
Howard Chu
bbad1de8e1 Added lutil_passwd_init, _destroy, _add for dynamically adding passwd
schemes. Declarations in lutil.h require lutil.h never be included before
lber.h, always after.
2003-03-11 05:58:53 +00:00
Howard Chu
5c3909f567 ITS#2361, skip sockname, peername, peerdomain, sockurl ACLs if the
corresponding conn->field is NULL. (overwrites previous commit.)
2003-03-10 22:28:35 +00:00
Pierangelo Masarati
11c225d40c check conn->c_listener before use (hack to fix ITS#2361; need to review this part of slapi) 2003-03-10 22:19:32 +00:00
Howard Chu
40454ccec8 Added op->o_is_auth_check; use ACL_AUTH instead of ACL_SEARCH/ACL_READ
in access_allowed() if flag is set. Set in sasl/saslauth searches.
2003-03-10 22:07:21 +00:00
Howard Chu
d6bbe2dba5 Blind fix - remove suffixalias.c 2003-03-10 19:13:38 +00:00
Pierangelo Masarati
998ab2f441 fix log message (ITS#2359) 2003-03-10 07:36:42 +00:00
Kurt Zeilenga
0f0122abdd need to use ch_malloc/realloc 2003-03-09 20:15:30 +00:00
Kurt Zeilenga
e4b507dfe9 Use ch_malloc instead of malloc for unchecked allocations 2003-03-09 20:11:12 +00:00
Kurt Zeilenga
cc96deee75 Redefine queryid 2003-03-06 20:20:13 +00:00
Jong Hyuk Choi
6f81235386 Commit of the Proxy Cache contribution (ITS#2062)
from IBM India Research (Apurva Kumar)
Code review by Pierangelo, Kurt, and Jong.
2003-03-06 19:44:41 +00:00
Howard Chu
aa84264fc2 Technically, since the authid is expected to be a normalized DN, uidNumber
and gidNumber should be all lower case: uidnumber,gidnumber. Is it too late
to fix this, would it break compatibility for anything major?
2003-03-06 12:08:39 +00:00
Kurt Zeilenga
e906747d51 call LDAPv2 what it is (historical) 2003-03-06 01:00:05 +00:00
Howard Chu
31a4149f02 ITS#2348: fix previous commit 2003-03-06 00:16:32 +00:00
Howard Chu
f2800036fa ITS#2348: cont_alloc/cont_free cleanup in idl_insert_key 2003-03-05 23:10:32 +00:00
Jong Hyuk Choi
5db7e20cf1 misc : not activating idl cache in tool mode run 2003-03-05 03:34:59 +00:00
Howard Chu
3955eaede2 Fix LDAP_DEBUG/LDAP_SYSLOG test 2003-03-05 02:22:58 +00:00
Howard Chu
b21e69db0e Use ldap_pvt_get_hname instead of ldap_pvt_gethostbyaddr_a 2003-03-05 01:53:32 +00:00
Howard Chu
a0b1fb1f9c Multiple-suffix fail msg should be logged at ERR/ANY, not ARGS. 2003-03-04 21:17:31 +00:00
Pierangelo Masarati
4a658ee581 more improvements ... 2003-03-04 09:46:48 +00:00
Pierangelo Masarati
95b115394d improve last commit 2003-03-04 09:43:12 +00:00
Pierangelo Masarati
118bf1e9f9 apply a different fix for ITS#2342 2003-03-03 23:06:58 +00:00
Pierangelo Masarati
a62d86cbe0 improve checks 2003-03-03 22:56:21 +00:00
Pierangelo Masarati
51849d6ecb fix ITS#2343 2003-03-03 22:25:28 +00:00
Pierangelo Masarati
498f8a7454 init var 2003-03-03 21:33:29 +00:00
Pierangelo Masarati
cd41bb1a06 set return code 2003-03-03 21:32:58 +00:00
Pierangelo Masarati
40622232f7 silence warning 2003-03-03 21:32:08 +00:00
Pierangelo Masarati
74960cc52f initialize var 2003-03-03 21:31:47 +00:00
Howard Chu
3cbcf01cfd Added NT service support 2003-03-03 11:47:16 +00:00
Howard Chu
3b01c9a99e Cleanup slapd-specific NT service support 2003-03-03 11:46:05 +00:00
Howard Chu
d9dbbeb87f Add explicit "service" argument, only change cwd if running as a service. 2003-03-03 06:42:16 +00:00
Kurt Zeilenga
2d942d7035 Use renamed initializers 2003-03-02 03:15:16 +00:00
Howard Chu
9beaa08d79 Fix slap_sasl_authorized, c_authz_backend may be NULL 2003-03-02 00:21:24 +00:00
Kurt Zeilenga
f172e06cc0 SLAP_NVALUES: substrings indexing/filterring 2003-03-01 20:21:39 +00:00
Kurt Zeilenga
bafe8044ab more OPERATIONS v. OTHER error cleanup 2003-03-01 20:20:53 +00:00
Kurt Zeilenga
c981ebcb61 Don't return LDAP_OPERATIONS_ERROR for internal errors 2003-03-01 20:17:52 +00:00
Pierangelo Masarati
9702e837e8 fix attr_merge_one hack 2003-03-01 15:41:54 +00:00
Pierangelo Masarati
9bd043277b fix memory free 2003-03-01 12:28:45 +00:00
Pierangelo Masarati
46a841870f add 'next[/prev]' initializer 2003-03-01 12:28:07 +00:00
Pierangelo Masarati
14d64852e8 trim unnecessary varaible 2003-03-01 12:12:12 +00:00
Pierangelo Masarati
bf35f8e37f improved filter mapping/rewrite; improved result rewriting; improved attribute/objectclass mapping configuration 2003-03-01 11:08:53 +00:00
Kurt Zeilenga
009a9640d4 enable indexing 2003-03-01 05:21:51 +00:00
Kurt Zeilenga
47b18c9a51 SLAP_NVALUES: index normalized values 2003-03-01 05:17:44 +00:00
Kurt Zeilenga
2bd7c30d5f SLAP_NVALUES: test005-modrdn works... 2003-03-01 04:51:31 +00:00
Kurt Zeilenga
c24ebfe014 SLAP_NVALUE: misc updates 2003-03-01 04:14:17 +00:00
Kurt Zeilenga
603543ca26 SLAP_NVALUES: test004 works 2003-03-01 03:37:16 +00:00
Kurt Zeilenga
208971a65f SLAP_NVALUES: A couple of more normalizers... 2003-03-01 01:27:09 +00:00
Kurt Zeilenga
16c9e81c80 SLAP_NVALUES: test003 now passes (with help of a substr mr hack) 2003-03-01 00:14:32 +00:00
Kurt Zeilenga
eb6ccefabf Remove deadwood 2003-02-28 22:32:12 +00:00
Kurt Zeilenga
806c9bfe84 SLAP_NVALUES: Use a_nvals 2003-02-28 21:05:19 +00:00
Kurt Zeilenga
cd6657fdf0 SLAP_NVALUES: fix UTF8StringNormalize
tests 0-2 now run correctly
2003-02-28 20:00:54 +00:00
Kurt Zeilenga
64b621620b ITS#2324: Allow extended operation plugin to override default
from jenarusa@us.ibm.com
2003-02-28 19:21:38 +00:00
Howard Chu
0423ec0bd6 Fix ITS#2335, RFC1798 sequence layout was wrong. 2003-02-28 13:04:16 +00:00
Luke Howard
2c98342192 Fix typo 2003-02-28 12:55:01 +00:00
Luke Howard
cc39f75261 Support for dynamic registration of controls, both through native and
SLAPI plugins.
2003-02-28 12:34:35 +00:00
Pierangelo Masarati
e0a70010d9 missing OpenLDAPaciMatch definition 2003-02-28 12:05:48 +00:00
Howard Chu
507781eeb3 Partial fix of ITS#2335, restore proper CLDAP msg format for LDAPv2 2003-02-28 08:34:31 +00:00
Kurt Zeilenga
7735c44167 Use add_merge_one to add schema elements to subschema 2003-02-28 07:06:06 +00:00
Kurt Zeilenga
3600aac0fb SLAP_NVALUES: fix a FIX ME 2003-02-28 05:44:03 +00:00
Howard Chu
22e88ffb75 Fix LDAP_LOG arg 2003-02-28 05:24:08 +00:00
Howard Chu
4e01c67966 ITS#2336 - Don't allow rename on subtrees. 2003-02-28 05:18:29 +00:00
Kurt Zeilenga
840f3644f4 SLAP_NVALUES: a couple of basic normalizers... but not working yet. 2003-02-28 05:13:29 +00:00
Kurt Zeilenga
70f5bd5d9d SLAP_NVALUES: More preparation for new normalization routines 2003-02-27 17:35:23 +00:00
Luke Howard
9eb008ab16 Implemented slapi_dup_control(). 2003-02-27 13:00:25 +00:00
Pierangelo Masarati
df57840626 more hacks/comments for SLAP_NVALUES 2003-02-27 09:52:47 +00:00
Kurt Zeilenga
7a7f482623 SLAP_NVALUES: prepare for new schema routines
(hopefully I didn't break -USLAP_NVALUES)
2003-02-27 06:51:53 +00:00
Kurt Zeilenga
511a94d98c SLAP_NVALUES: disable indexing for now 2003-02-27 06:37:10 +00:00
Kurt Zeilenga
32399d9bd9 axe mr_ptr in favor or schema_prep 2003-02-27 03:29:07 +00:00
Kurt Zeilenga
82c403cb7f Fix typo in last commit 2003-02-27 03:03:54 +00:00
Kurt Zeilenga
152829be87 SLAP_NVALUES:
schema engine updated (but not schema routines so things don't run yet)
	nvalues mostly populated, enough for tests 0-2 to pass
	schema routines needs lots of work
	modify/mods codes needs lots of work
2003-02-27 01:54:43 +00:00
Pierangelo Masarati
dd6870515b quick fix to allow -DSLAP_NVALUES with -DLDAP_SLAPI 2003-02-27 00:41:46 +00:00
Pierangelo Masarati
216bcd948e more SLAP_NVALUES cleanup 2003-02-26 22:58:46 +00:00
Pierangelo Masarati
87f48aab93 improve previous commit 2003-02-26 22:12:14 +00:00
Pierangelo Masarati
955d298a25 fix ITS#2330; free rdn after usage 2003-02-26 21:47:47 +00:00
Pierangelo Masarati
937475efbf blind fix 2003-02-26 21:45:56 +00:00
Pierangelo Masarati
7ab954d516 blind fix (accrding to back-monitor hack) 2003-02-26 19:41:27 +00:00
Kurt Zeilenga
baa5c88d75 whoops (again). Don't define SLAP_NOVALUES yet. 2003-02-26 16:48:31 +00:00
Pierangelo Masarati
f32e8ee7e7 blind fix (accrding to back-monitor hack) 2003-02-26 15:59:36 +00:00
Kurt Zeilenga
f1441afbac Backout prototype rename 2003-02-26 15:53:31 +00:00
Howard Chu
321780eb66 Complain about holes in database at end of slapadd 2003-02-26 15:33:20 +00:00
Howard Chu
1e718b1815 Delete extraneous log msg 2003-02-26 12:57:15 +00:00
Howard Chu
d7aac0a9d5 Only check opinfo.boi_err when ACL check failed. 2003-02-26 12:49:21 +00:00
Howard Chu
18554e7511 Fix attribute/group to allow TXN to abort on lock failure. Save and
restore op->o_do_not_cache on TXN retry, bdb_group will set it if it
fails to get a lock.
2003-02-26 12:09:10 +00:00
Howard Chu
00837465c4 Don't need TXN/opinfo support in read-only operations 2003-02-26 11:45:30 +00:00
Howard Chu
bda79780ce ITS#2122 - actually use the passed in txn handle!! 2003-02-26 10:48:02 +00:00
Howard Chu
3505c326da bdb_entry_return must explicitly check for/free attr nvals. 2003-02-26 10:10:13 +00:00
Howard Chu
e13246b965 Fix previous commit 2003-02-26 09:59:08 +00:00
Howard Chu
6d0dadc0bf Fix modify_delete_values. This stuff should be completely rewritten
to take full advantage of SLAP_NVALUES.
2003-02-26 09:55:07 +00:00
Howard Chu
284ef10e6e In slap_mods_check, must null-terminate sm_nvalues array 2003-02-26 09:24:01 +00:00
Howard Chu
01c56e0044 In entry_decode, must null-terminate a_nvals array 2003-02-26 09:11:56 +00:00
Howard Chu
64be098f28 Sync with MR flags in slap.h 2003-02-26 08:40:33 +00:00
Kurt Zeilenga
dd66e6e929 SLAP_NVALUES, round 3 2003-02-26 07:39:30 +00:00
Kurt Zeilenga
46a2616b83 Fix -USLAP_NVALUES 2003-02-26 03:12:02 +00:00
Kurt Zeilenga
25886d989a Change MR flag names and add comments as to what they mean to slap.h 2003-02-26 02:55:28 +00:00
Kurt Zeilenga
a5e883a886 SLAP_NVALUE more add tweaks 2003-02-26 01:57:07 +00:00
Kurt Zeilenga
2cdbd25a60 SLAP_NVALUES mostly populated now 2003-02-26 01:41:22 +00:00
Kurt Zeilenga
793dada79c Populate nvals via entry_decode 2003-02-26 01:09:20 +00:00
Kurt Zeilenga
88990a5c6a SLAP_BVALUES fixes 2003-02-26 00:48:37 +00:00
Kurt Zeilenga
51e841c694 Whoops, SLAP_NVALUES should be off for now 2003-02-25 23:46:40 +00:00
Kurt Zeilenga
122f5d4299 *** empty log message *** 2003-02-25 23:16:21 +00:00
Kurt Zeilenga
a65a55d385 SLAP_NVALUES: fix up modify password exop 2003-02-25 22:57:53 +00:00
Kurt Zeilenga
6390e947b0 SLAP_NVALUES, round 2 2003-02-25 22:49:41 +00:00
Kurt Zeilenga
2a8dec95ba SLAP_NVALUES back-monitor temporary hack 2003-02-25 21:19:42 +00:00
Jong Hyuk Choi
71ca4d51f1 log message fix 2003-02-25 21:15:26 +00:00
Kurt Zeilenga
8502301b00 Round one of SLAP_NVALUES code 2003-02-25 21:08:48 +00:00
Kurt Zeilenga
5b4e69a564 Fix monitorContext description 2003-02-25 20:41:28 +00:00
Kurt Zeilenga
627de4de15 Additional indexer normalization (need to check all Indexers) 2003-02-25 19:21:18 +00:00
Kurt Zeilenga
ec9db8dec1 Quick (and incomplete) fix to " foo " indexing 2003-02-25 19:01:33 +00:00
Kurt Zeilenga
02b98006f0 Add comment about subschema ACLs 2003-02-25 19:00:59 +00:00
Howard Chu
4c760dfc18 Fix? For bdb_cache_find_entry*, COMMITTED entries are usable, not just
READY entries. This change eliminates a retry bottleneck, and looks safe
to me, but please review.
2003-02-22 12:39:49 +00:00
Howard Chu
d3fafb16b2 Fix ITS#2319, use "," comma to delimit port number in rej filename
on Windows instead of ":" colon.
2003-02-22 01:14:24 +00:00
Howard Chu
c756bf0590 Change - bdb_tool_entry_put always "sorts" entries:
instead of just calling bdb_next_id, it calls bdb_dn2id to see if the
    current entry already has an ID. If so, it uses it.
  if not, it recurses to see if its parent exists, and does dn2id_add from
    the database suffix back to the current entry.
2003-02-21 10:13:20 +00:00
Howard Chu
9c701c8861 Fix ITS#2320, check for NULL re->re_replicas 2003-02-21 02:14:46 +00:00
Kurt Zeilenga
13b63911a4 ITS#2318: unlink pid file (and args file) 2003-02-19 20:47:57 +00:00
Kurt Zeilenga
05619c6ec7 ITS#2236. Add missing connections_shutdown() call. 2003-02-19 20:39:04 +00:00
Kurt Zeilenga
fb73fea612 More understandable error text 2003-02-19 16:19:13 +00:00
Howard Chu
9f0598034e Fix do/don't send result logic 2003-02-19 00:01:22 +00:00
Kurt Zeilenga
6d6bed3bc0 Fix -ULDAP_CLIENT_UPDATE bug (mine) 2003-02-17 17:57:19 +00:00
Kurt Zeilenga
4d9a4174f5 Lower SLAP_MAX_WORKER_THREAD to 16 (from 32) 2003-02-17 17:36:01 +00:00
Howard Chu
979e5073cf Revert previous kludge in controls.c, use ldap_pvt_thread_pool_context
instead if c_sasl_bindop is NULL.
2003-02-16 19:34:29 +00:00
Howard Chu
09585ad3d0 Kludge - set conn->c_sasl_bindop before calling slap_sasl_getdn, otherwise
op->o_threadctx is inaccessible.
2003-02-16 12:23:00 +00:00
Howard Chu
d6dab5dfb4 Suppress warning 2003-02-16 12:22:06 +00:00
Howard Chu
187f1d2ad4 Added proxy-whoami keyword for forwarding whoami requests. 2003-02-16 11:21:15 +00:00
Howard Chu
7e1a566391 Use struct berval * instead of ** for newpasswd 2003-02-16 09:42:04 +00:00
Howard Chu
532eea87c9 Added passwd_exop, added matchedDN rewrite for results. 2003-02-16 09:22:44 +00:00
Howard Chu
65bf90ff73 Use struct berval for exop reqoid everywhere. Define berval constants
for the known exops.
2003-02-16 06:15:28 +00:00
Howard Chu
8f88bc1f8f Free default_passwd_hash on cleanup 2003-02-16 06:13:34 +00:00
Kurt Zeilenga
4ae637a08d Update comment 2003-02-15 16:38:32 +00:00
Kurt Zeilenga
619f9a72ec Fix typo in last commit 2003-02-14 23:14:19 +00:00
Howard Chu
1756206598 Use bdb_unlocked_cache_return; lock ended when TXN ended. 2003-02-14 22:30:07 +00:00
Kurt Zeilenga
1a14def903 Use function pointers to get at backend routines. 2003-02-14 20:51:35 +00:00
Howard Chu
c04f3e7706 Fix previous commit 2003-02-14 09:17:42 +00:00
Howard Chu
0b6772492f Use extended async APIs to allow direct parsing of results. Otherwise
they will be interleaved in LDAP*. Avoid setting any options on the handle.
2003-02-14 05:23:45 +00:00
Howard Chu
202cf8af75 Implemented connection pooling. Requires libldap_r to allow multiple threads
to access the same LDAP* handle.
2003-02-13 23:29:56 +00:00
Howard Chu
b228caa723 Revert previous, wasn't broken. 2003-02-13 23:19:51 +00:00
Kurt Zeilenga
074b1a0d3a Place SLAP_EXTENDED_SCHEMA behind defined(LDAP_DEVEL) 2003-02-13 20:47:46 +00:00
Howard Chu
568829d821 Fix uninit'd timeout value 2003-02-13 10:24:32 +00:00
Pierangelo Masarati
628bcc7174 improve error handling 2003-02-10 22:34:06 +00:00
Pierangelo Masarati
1db0725502 partially fix ITS#2310 2003-02-10 21:37:30 +00:00
Pierangelo Masarati
06b981429a fix ITS#2309 2003-02-10 18:15:36 +00:00
Kurt Zeilenga
aaf253318b Move include <slapi.h> behind #ifdef 2003-02-10 02:09:00 +00:00
Kurt Zeilenga
737f4b0d34 Misc LCUP cleanup 2003-02-09 08:43:20 +00:00
Kurt Zeilenga
db427d725d no more suffix_alias 2003-02-09 07:28:15 +00:00
Kurt Zeilenga
8f82e9f772 ITS#2117: remove suffixalias support until someone fixes it 2003-02-09 07:20:03 +00:00
Kurt Zeilenga
282f6bc32d Cancel exop updates 2003-02-09 05:54:45 +00:00
Kurt Zeilenga
c04e9ac993 rename "permit modify" control to "permissive modify"
rename "no referrals" controls to "domain scope"
misc cleanup
2003-02-09 05:39:21 +00:00
Kurt Zeilenga
48d47954a6 Rework #ifdef'ing of expermental controls to ease release engineering
using LDAP_DEVEL (to indicate experimental) to enable experimental features
(true for HEAD unless LDAP_REL_ENG is defined)
2003-02-08 21:53:05 +00:00
Kurt Zeilenga
a256e5035d extern'ize 2003-02-08 19:18:46 +00:00
Kurt Zeilenga
698d73d5f3 Disable reverse lookups by default for security
(and performance) reasons.
2003-02-08 07:40:19 +00:00
Kurt Zeilenga
1862077b24 Use DB_VERSION_ to set BDB_ENOUGH 2003-02-08 07:38:22 +00:00
Kurt Zeilenga
d1287dd341 Reword BDB 4.0 bug comment now that configure requires BDB 4.1 2003-02-08 01:34:27 +00:00
Kurt Zeilenga
cca15d41c9 minor code cleanup 2003-02-08 00:57:21 +00:00
Kurt Zeilenga
3737a1c8c4 cleanup 2003-02-07 20:33:05 +00:00
Jong Hyuk Choi
886179fbca cleanup 2003-02-07 20:16:09 +00:00
Kurt Zeilenga
c315e28779 Move RDN checks to entry_schema_check() so that it is consistently
applied (and disabled via schemacheck off).  Removed add-rdn-values flag.
2003-02-07 20:12:26 +00:00
Kurt Zeilenga
2fccb8d68e really put SLAPI behind its #ifdef 2003-02-07 19:06:15 +00:00
Kurt Zeilenga
5192938964 code cleanup 2003-02-07 19:05:45 +00:00
Jong Hyuk Choi
82115be0fb use of normalized dn (fix for a deadlock case ITS#2195) 2003-02-07 15:59:24 +00:00
Jong Hyuk Choi
55cf8bbd88 use of pre-assigned locker in bdb_group() / bdb_attribute() 2003-02-07 15:47:32 +00:00
Pierangelo Masarati
6cf0c94845 some (poor) index cleanup 2003-02-07 15:20:57 +00:00
Pierangelo Masarati
7a97f37bd4 add 'add-rdn-values {on|off}' (default off) switch 2003-02-07 15:19:58 +00:00
Pierangelo Masarati
982969a4ce cleanup 2003-02-07 15:18:43 +00:00
Pierangelo Masarati
08d9d56721 more exaustive logging in case of trouble 2003-02-07 13:46:17 +00:00
Pierangelo Masarati
f8a1007994 (mostly blind) fix of possible leak/dangling pointer and cleanup 2003-02-07 00:46:11 +00:00
Pierangelo Masarati
9f28f12346 make sure the DN is null-terminated before normalizing it 2003-02-06 19:15:14 +00:00
Pierangelo Masarati
1b499a7d7c add helper 2003-02-05 22:06:22 +00:00
Pierangelo Masarati
f19df0a307 add 'rebind-as-user' according to back-ldap's implementation 2003-02-05 22:04:20 +00:00
Pierangelo Masarati
eed2d5db4d only document 'subtree', but also allow 'sub' 2003-02-05 20:38:42 +00:00
Pierangelo Masarati
381e293b41 allow 'sub' and 'subtree' in acl (fix ITS#2300) 2003-02-05 19:39:34 +00:00
Pierangelo Masarati
fae57fcd15 partially fixes ITS#2299 2003-02-05 19:33:01 +00:00
Jong Hyuk Choi
85bdf79337 Filename change : servers/slapd/back-bdb/lcup.c -> servers/slapd/back-bdb/psearch.c 2003-02-05 07:43:00 +00:00
Jong Hyuk Choi
85b1783d5c LDAP Sync Operation (draft-zeilenga-ldup-sync) as a groundwork for an LDAP replication design 2003-02-05 07:37:02 +00:00
Pierangelo Masarati
1b4401ff53 handle attr delete appropriately (pass test004) 2003-02-04 22:33:51 +00:00
Pierangelo Masarati
677f13a846 handle NULL mod_[b]values case 2003-02-04 21:52:43 +00:00
Pierangelo Masarati
e5a1418756 improve last commit 2003-02-04 19:27:56 +00:00
Pierangelo Masarati
c432154ad1 allow multiple URIs (need to backport to back-ldap) 2003-02-04 18:49:58 +00:00
Luke Howard
f894db3be2 Cleanup #ifdefs 2003-02-04 00:40:46 +00:00
Jong Hyuk Choi
e1bf8cc437 Intermediate Response 2003-02-03 17:28:19 +00:00
Luke Howard
17f2953e40 Do not crash when more than one attribute is passed to
slapi_search_internal_bind()
2003-02-02 12:20:38 +00:00
Luke Howard
750cbb7026 Ensure normalized root DN is available to internal SLAPI operations for
authorization to work.

Do not crash when forming Modification list from LDAPMod array.
2003-02-02 11:00:52 +00:00
Luke Howard
becd81ebd9 Always pass normalized DN to select_backend() when performing operationals
internal to SLAPI
2003-02-02 10:02:25 +00:00
Luke Howard
e59d248858 Fix crasher in bvptr2obj
Fix hasvalue
2003-02-02 09:22:38 +00:00
Luke Howard
307f7fcc89 Ensure AttributeDescriptions are initialized to NULL 2003-02-02 09:04:43 +00:00
Luke Howard
eee0086ab2 Add search ref callback 2003-02-01 07:05:01 +00:00
Luke Howard
dfc7d338a6 Add sendreference callback 2003-02-01 07:04:13 +00:00
Howard Chu
6038e912dd Fix statslog of big attr names 2003-01-31 20:38:25 +00:00
Howard Chu
945c9fb1c7 Tweak previous commit 2003-01-31 19:44:52 +00:00
Howard Chu
f838a4bb53 Fix subtree and matched search in back-hdb 2003-01-31 19:43:14 +00:00
Howard Chu
5e7655d68d Fix for LDAP_SLAPI not def'd 2003-01-31 18:46:17 +00:00
Luke Howard
e212e59e28 Date PADL copyright notice 2003-01-31 01:06:30 +00:00
Pierangelo Masarati
e3dfb8e317 cleanup 2003-01-31 00:02:51 +00:00
Kurt Zeilenga
e6255466da Remove FIXME stuff (ITS#2243) 2003-01-30 23:14:10 +00:00
Howard Chu
3250cc8d19 Fix includes for VPATH builds 2003-01-30 22:58:39 +00:00
Howard Chu
23c575805a Disallow multiple suffixes by default. Otherwise subtree index optimization
breaks. #define BDB_MULTIPLE_SUFFIXES if you want multiple suffix support.
If you use it, subtree indexing will slow down by factor of 2.
2003-01-30 22:00:16 +00:00
Pierangelo Masarati
e3b9e0a565 do not treat extensibleObject as special; add comment about referral 2003-01-30 21:21:20 +00:00
Howard Chu
cbf7b063e3 ITS#2285 string_expand for acl set 2003-01-30 20:59:47 +00:00
Luke Howard
c464b299d8 Check for slapi_filter_dup() success in nested filters 2003-01-30 13:07:18 +00:00
Luke Howard
afc8ec976b Terminate f_sub_any array 2003-01-30 13:06:34 +00:00
Luke Howard
1be73d766c Added slapi_filter_dup() API from Sun ONE DS 5.x 2003-01-30 13:04:36 +00:00
Luke Howard
a0da326c97 Implemented slapi_filter_apply() API 2003-01-30 12:24:53 +00:00
Luke Howard
13c48d1f76 Ensure that, when an entry is actually being added to the directory,
the entry specified by SLAPI_ADD_ENTRY contains the attributes to be
added.
2003-01-29 22:43:19 +00:00
Luke Howard
e86fe9ade8 doPostSearchPluginFNs() should return void for clarity; postoperation
plugins have no mechanism by which they may signal an error condition
to the client.
2003-01-29 22:42:13 +00:00
Pierangelo Masarati
4010870f62 cleanup 2003-01-29 19:05:40 +00:00
Pierangelo Masarati
ffc343a485 allow special objectClasses to violate constraint (as suggested by Hallvard, who needs aliases :) 2003-01-29 18:01:15 +00:00
Pierangelo Masarati
683c237a54 bail out is now the default; use noSuchAttribute as error code, as suggested by Kurt 2003-01-29 17:01:04 +00:00
Pierangelo Masarati
6b5611cbac check for RDN attrs/vals when adding an entry (ITS#2243; need to choose whether to bail out or to add the RDN attr/vals to the entry; FIXME: is constraintViolation a reasonable error? 2003-01-29 15:54:24 +00:00
Pierangelo Masarati
07ad8cefed silence warning 2003-01-27 21:57:32 +00:00
Pierangelo Masarati
c3847a6136 slapi header cleanup 2003-01-27 21:53:23 +00:00
Pierangelo Masarati
e38e50646b silence warning 2003-01-27 21:51:33 +00:00
Pierangelo Masarati
ffde204880 trim unused var 2003-01-27 21:49:32 +00:00
Pierangelo Masarati
49c1ba60b7 slapi header cleanup 2003-01-27 21:35:34 +00:00
Pierangelo Masarati
71e35141e1 cleanup null mapping detection 2003-01-27 21:34:25 +00:00
Jong Hyuk Choi
4f64bd9402 LDAP cancel misc patch 2003-01-27 17:08:51 +00:00
Pierangelo Masarati
57e0ac008c cleanup 2003-01-27 16:48:55 +00:00
Pierangelo Masarati
985dc00b30 cleanup objectclass detection 2003-01-27 16:46:02 +00:00
Pierangelo Masarati
45f4e3602b clean up mapping api 2003-01-27 16:39:56 +00:00
Pierangelo Masarati
c1f84b5031 bring in slapi_cl.h 2003-01-27 16:39:22 +00:00
Pierangelo Masarati
a62249ed27 fix objectclass mapping (to nothing) 2003-01-27 16:07:10 +00:00
Pierangelo Masarati
d1cc80694f reworking of slapi headers 2003-01-27 14:44:39 +00:00
Luke Howard
7c41666c5e Ensure that global plugins are called after backend-specific plugins
(this was the intention of the existing code but it was buggy, and it
made sense to implement this logic inside getAllPluginFuncs() rather
than doPluginFNs() - not all plugin users call the latter)
2003-01-27 13:15:21 +00:00
Luke Howard
f989cfddb9 more Sun ONE DS 5.x harmonisation 2003-01-26 01:10:19 +00:00
Luke Howard
3652613cd8 Sun ONE DS 5.x filter harmonisation 2003-01-25 13:36:12 +00:00
Jong Hyuk Choi
0c43007e55 LDAP cancel operation 2003-01-25 00:36:50 +00:00
Hallvard Furuseth
bf8bbc27fe Fix typo in comment. 2003-01-24 20:12:50 +00:00
Pierangelo Masarati
a9cde92376 include ac/ headers 2003-01-24 12:33:12 +00:00
Luke Howard
9e6a9876b2 Grammar cleanup 2003-01-24 11:56:27 +00:00
Luke Howard
24e14748aa Fix memory smasher in slapi_x_modifications2ldapmods() 2003-01-24 11:09:20 +00:00
Luke Howard
1e8fd55cfb Fix uninitialized sl_is_udp 2003-01-24 11:08:54 +00:00
Luke Howard
498420dc26 Check for pPB == NULL (courtesy Pierangelo) 2003-01-24 10:29:24 +00:00
Luke Howard
fc55ee9edc Support slapi_entry_first_attr()/slapi_entry_next_attr() API 2003-01-24 09:23:06 +00:00
Luke Howard
f709f86bed include unistd.h for F_LOCK 2003-01-24 09:08:43 +00:00
Luke Howard
45289b09a7 Matching rule constants for future support 2003-01-24 09:00:18 +00:00
Luke Howard
a67c669583 Fix filter iteration bug 2003-01-24 07:51:26 +00:00
Luke Howard
66d38ab10a Plug memory leak 2003-01-24 06:57:12 +00:00
Luke Howard
146c0085d3 s/ldap_pvt_thread_pool_getcontext/ldap_pvt_thread_pool_context 2003-01-24 06:41:06 +00:00
Luke Howard
562b7fb8d9 fix typo 2003-01-24 05:57:20 +00:00
Luke Howard
6a54a9db0f Support Sun DS 5.x thread abstraction layer 2003-01-24 05:19:57 +00:00
Howard Chu
eb459f4339 Delete redundant ch_free(). 2003-01-24 04:26:04 +00:00
Luke Howard
819d4093ae Honour PermitModify control when adding or deleting values. This code needs
review although, with the control disabled, it should not affect existing
code paths.
2003-01-24 01:43:09 +00:00
Pierangelo Masarati
8d9629e1de fix logging and uninitialized value warning 2003-01-23 22:55:01 +00:00
Pierangelo Masarati
5a771fcac0 cleanup versioning 2003-01-23 22:45:17 +00:00
Pierangelo Masarati
d8756a1c98 fix ITS#2289 (don't use shared data for search state; use msgid instead) 2003-01-23 22:07:33 +00:00
Luke Howard
7759f75d76 Test PermitModify and NoReferrals controls (note that PermitModify is
ignored for the moment - will be fixed shortly)
2003-01-23 15:22:20 +00:00
Luke Howard
eec370af52 LDAPv3 over UDP disposition is now compatible with Active Directory
Stubs for PermitModify/NoReferrals controls; implementation coming soon
2003-01-23 15:12:53 +00:00
Luke Howard
2c40905b77 Pass normalized DN to select_backend() 2003-01-23 14:25:13 +00:00
Luke Howard
8621f955b2 Reference slapi_search_internal() due to linker error -- need to fix this
properly XXX
2003-01-23 11:29:52 +00:00
Luke Howard
8c18022b41 Install object type plugins 2003-01-23 09:22:32 +00:00
Luke Howard
0650e6ad52 Allow plugin to retrieve desired attribute list and state of manageDSAit control
Support search preop/rewrite/postop plugins for root DSE and subschema
2003-01-23 08:45:28 +00:00
Hallvard Furuseth
e384faf927 Return 0 or 1 from is_entry_*(), to kill 'signed vs. unsigned' warnings. 2003-01-22 22:01:21 +00:00
Kurt Zeilenga
58bff46c7c s/AUTHZ/BIND/ for consistency with other Statslog() messages 2003-01-22 21:37:04 +00:00
Luke Howard
12af6de4cf Clarification regarding compute search filter rewriting: only
SLAPI_SEARCH_FILTER needs to be updated
2003-01-22 15:46:45 +00:00
Luke Howard
3dad7cae7b To conform to the SLAPI spec, slapi_filter_get_ava() should not duplicate
for caller
2003-01-22 15:07:23 +00:00
Luke Howard
561ab80de0 Check for modified filter after calling search rewriter plugin 2003-01-22 14:57:35 +00:00
Luke Howard
2aeec166ff Call rewrite function after preop plugins (not before) - confirmed with Sun 2003-01-22 14:54:12 +00:00
Luke Howard
5b4b062dba Use ber_dupbv() to avoid crashing on binary values 2003-01-22 14:53:03 +00:00
Luke Howard
265261bf60 Added some OpenLDAP extensions for determining ldapi:// sock/peername
and whether connection is UDP
2003-01-22 14:41:51 +00:00
Luke Howard
214b79e740 Call search rewriter callback before first preop search plugin 2003-01-22 13:51:27 +00:00
Luke Howard
2bc4da9378 SLAPI fixes (better documentation) 2003-01-22 13:38:38 +00:00
Luke Howard
faf8d43a6f First pass at replacing proprietary OpenLDAP virtual attribute API
(which existed briefly for a day!) with Sun ONE DS 5.x computed
attribute API
2003-01-22 13:06:46 +00:00
Luke Howard
c76d37313b More DS 5.x harmonisation 2003-01-22 10:00:27 +00:00
Luke Howard
921d62c2ae Added slapi_entry_attr_get_charptr() API 2003-01-22 09:35:48 +00:00
Luke Howard
2107a4c1b3 New DS 5.x memory management API memory management API memory management API memory management API 2003-01-22 09:30:47 +00:00
Luke Howard
293c765c11 Added slapi_access_allowed() and slapi_acl_check_mods() API for Sun ONE
DS 5.x compat
This required exposing the mods array conversion functions so they
are now in slapi/slapi_utils.[ch]
2003-01-22 09:00:06 +00:00
Luke Howard
fb22bdeb58 Fixed crashed in slapi_value_free 2003-01-21 15:44:04 +00:00
Luke Howard
4fbd922a09 Make sure slapi_valueset_add_value() copies the input value 2003-01-21 15:32:43 +00:00
Luke Howard
e26749d76b Ensure AttributeDescriptions are initialized to NULL before calling slap_str2ad() 2003-01-21 15:24:28 +00:00
Luke Howard
6469f164a8 Allow coalesce pblock types.
Take care with pblock values that need to be duplicated
2003-01-21 15:21:55 +00:00
Luke Howard
7d5978b4aa Put #endif in correct place when commenting out backend directive check
for plugins (now that global plugins are nominally supported)
2003-01-21 15:14:07 +00:00
Luke Howard
17b761cf96 Allow global plugins. 2003-01-21 15:11:35 +00:00
Luke Howard
1e32bdbd69 Allow plugins not associated with a specific backend 2003-01-21 15:09:58 +00:00
Luke Howard
5883b270b8 If no plugins are registered, have front-end silently ignore 2003-01-21 14:52:33 +00:00
Luke Howard
8dd11efd39 Don't crash if no backend 2003-01-21 14:44:51 +00:00
Luke Howard
8de6186e54 Added OpenLDAP-specific SLAPI for getting entry ID 2003-01-21 14:08:58 +00:00
Luke Howard
97b9eb2e55 Set opattr plugin-specific pblock parameters to NULL after coalescing
returned attributes
2003-01-21 14:06:22 +00:00
Luke Howard
0edb0803d2 Add support for virtual operational attribute plugin type 2003-01-21 14:00:25 +00:00
Luke Howard
f327941341 Reserve pblock IDs for opattr plugin 2003-01-21 13:51:53 +00:00
Luke Howard
053672c6c0 Added Slapi_AttrSet accessors in order to implement virtual operational
attribute plugin
2003-01-21 13:48:37 +00:00
Luke Howard
e09f30179b First round of DS 5.x SLAPI functions 2003-01-21 12:16:53 +00:00
Luke Howard
f1fdb34fbe Added slapi_attr_get_flags() and slapi_attr_flag_is_set() API for
Sun ONE harmonisation.
2003-01-21 10:12:08 +00:00
Luke Howard
6f26183f20 Confusingly, make SLAPI_OPERATION_AUTHTYPE return a pointer to
SLAPI_CONN_AUTHMETHOD. From my understanding of the Sun ONE API
this is the correct behaviour.
2003-01-21 09:50:59 +00:00
Luke Howard
68ed72e4c7 Return LDAP_PARAM_ERROR when NULL passed to internal SLAPI functions 2003-01-21 09:48:28 +00:00
Luke Howard
ff263ec6a7 Return LDAP_OTHER instead of LDAP_OPERATIONS_ERROR for internal SLAPI
failure
2003-01-21 09:42:26 +00:00
Luke Howard
4a9213f752 Distinguish between AUTHTYPE and AUTHMETHOD (latter is static storage)
for Sun ONE harmonisation
2003-01-21 09:39:56 +00:00
Luke Howard
30d946959e Set SLAPI_BIND_CREDENTIALS for bind preoperation plugin 2003-01-21 08:35:48 +00:00
Luke Howard
313d3633e3 Further harmonisation with Sun ONE SLAPI: extra PBlock parameters
on connections and operations
2003-01-21 08:34:25 +00:00
Luke Howard
53ced8a648 Allow SLAPI bind plugins to set the authorization identity, at least for
simple binds
2003-01-21 06:30:38 +00:00
Luke Howard
8ab0c4d401 fix SLAPI_MODIFY_MODS pointer error 2003-01-21 05:56:46 +00:00
Luke Howard
84918362df Allow a modify preoperation plugin to insert additional modifications to
be applied by the backend.
2003-01-21 05:30:14 +00:00
Luke Howard
8e8b4093f5 Mark Sun ONE 5.x SLAPI plugin types to avoid collisions
Rename internal slapi_XXX API to slapi_x_XXX
Always set result code/matched/error text in operation parameter block
to make available to postoperation plugins
2003-01-21 02:46:55 +00:00
Luke Howard
45a66e2ed4 Harmonise slapi_ch_free() with Sun ONE API 2003-01-20 23:29:30 +00:00
Luke Howard
d484a9781c Conform SLAPI to Netscape, iPlanet and Sun ONE Directory Server
behaviour:

1. Plugins never return LDAP result codes, instead they return a
   small integer (0 or -1, others for special cases)
2. Preoperation plugins can abort processing by returning a non-
   zero value to the frontend
3. Postoperation plugins never abort processing (all are called)
   and their return values are ignored
2003-01-20 23:18:11 +00:00
Kurt Zeilenga
b5594b2750 Return the Start TLS error. 2003-01-20 22:37:42 +00:00
Luke Howard
27dba2226f Only non-postoperation plugins should be able to abort processing of further
plugins.
2003-01-20 22:33:50 +00:00
Kurt Zeilenga
6d1ca4c747 Remove values match v. filter struct field macro overloads
Use LDAP_SLISTs instead of per-struct list management for schema structs
misc cleanup and lint removal
2003-01-20 20:21:17 +00:00
Kurt Zeilenga
521d8384a1 works without SLAPI 2003-01-20 20:18:53 +00:00
Kurt Zeilenga
a190d15a60 cleanup 2003-01-20 20:17:12 +00:00
Kurt Zeilenga
b3705e69f4 Add LDAP_BEGIN/END_DECL 2003-01-20 20:16:42 +00:00
Kurt Zeilenga
5bbf08d3ff ITS#2266: -b option missing break 2003-01-20 19:13:00 +00:00
Kurt Zeilenga
bcd7306877 ITS#2268: SASL/ANONYMOUS fixes from kuenne@rentec.com 2003-01-20 18:09:46 +00:00
Luke Howard
c9278e54ec Fix up return values in new slapi private API 2003-01-20 00:11:56 +00:00
Luke Howard
d3292b83fa Style consistency in new SLAPI_MODIFY_MODS code 2003-01-19 22:49:21 +00:00
Luke Howard
fe4cd099c8 FreeLDAPMods() should be static 2003-01-19 22:45:10 +00:00
Luke Howard
8e8228f0b0 Fix libltdl link dependency causing link error on Linux 2003-01-19 22:43:29 +00:00
Luke Howard
6a5f29b60a Use new SLAPI API for setting associated parameters associated with the
Connection, Operation and Backend structures.

Ensure that SLAPI_MODIFY_MODS is set to an array of LDAPMods.
2003-01-19 15:30:10 +00:00
Luke Howard
d54548b9a0 Use strtol() not strtoul() in integerBit{And,Or}Match matching rules 2003-01-19 15:20:09 +00:00
Luke Howard
8866875e69 return error codes from new internal API 2003-01-19 15:04:19 +00:00
Hallvard Furuseth
6a51371fc5 Silence gcc warnings (signed vs. unsigned, implicit declarations, unused vars). 2003-01-19 15:03:25 +00:00
Luke Howard
cb61800ac6 added slapi_backend_set_pb 2003-01-19 14:55:10 +00:00
Luke Howard
17f95a3fd3 added slapi_operation_set_pb 2003-01-19 14:47:26 +00:00
Luke Howard
ec05ef7f22 Added slapi_connection_set_pb() API for front-end.
Implemented slapi_is_connection-ssl().
2003-01-19 14:32:49 +00:00
Hallvard Furuseth
3bd76701d1 Fix printf format errors. 2003-01-19 14:07:02 +00:00
Hallvard Furuseth
265b7e22c6 Insert missing initializers, to silence gcc warnings. 2003-01-19 13:38:44 +00:00
Hallvard Furuseth
1fbbc11811 Fix LBER_ERROR vs. -1 confusion. 2003-01-19 13:10:17 +00:00
Pierangelo Masarati
8d0711b08f slapi-plugin.h goes in include 2003-01-18 11:19:27 +00:00
Kurt Zeilenga
6939c53170 Happy new year 2003-01-03 20:20:47 +00:00
Hallvard Furuseth
aeaaa8c6ca Fix octetStringOrderingMatch(). It thought "b"<"aa", becuase "b" is shorter. 2003-01-03 17:06:01 +00:00
Hallvard Furuseth
b0f9305b66 Delete bitStringNormalize(). 2003-01-03 16:17:06 +00:00
Kurt Zeilenga
8f0dc1a4a3 Fix ocflags tests 2003-01-02 23:55:37 +00:00
Hallvard Furuseth
d96236b5ce Fix attribute value parsing in objectIdentifierFirstComponentMatch(). 2003-01-02 15:01:56 +00:00
Kurt Zeilenga
887c21c53e Fix typo in last commit 2002-12-30 04:23:31 +00:00
Kurt Zeilenga
a4ad2eea17 ACL cleanup
Likely needs more deadlock detection checks
2002-12-30 01:12:10 +00:00
Kurt Zeilenga
ed471a4d53 Fix access_allowed() error checking bug 2002-12-30 01:02:31 +00:00
Pierangelo Masarati
f148506bf6 reworking of error handling (should also fix ITS#2235) 2002-12-27 18:08:27 +00:00
Pierangelo Masarati
0baf5af19b reworking of error handling (should also fix ITS#2235) 2002-12-27 17:53:53 +00:00
Pierangelo Masarati
ddb17d592f use 'safe' functions 2002-12-27 17:24:47 +00:00
Pierangelo Masarati
9f269f2227 cleanup 2002-12-27 17:24:20 +00:00
Pierangelo Masarati
e9a74cffba slapi used the old version of the LDAP_LOG macro (caught by Howard) 2002-12-27 14:59:01 +00:00
Pierangelo Masarati
b793be6aca slapi cleanup 2002-12-27 14:58:20 +00:00
Pierangelo Masarati
8527127602 fix slapi build 2002-12-27 12:10:05 +00:00
Pierangelo Masarati
f83585952d misc slapi cleanup 2002-12-27 11:48:41 +00:00
Pierangelo Masarati
b027461b9d unsigned is good for all 2002-12-23 13:43:01 +00:00
Pierangelo Masarati
c7e5fba1a2 fix indirect idl block fetch failure (should be back-ported) 2002-12-23 12:51:21 +00:00
Kurt Zeilenga
b2a3ceb002 A few X.509 certificate tweaks... needs work (and testing) 2002-12-21 22:54:51 +00:00
Kurt Zeilenga
a3837b107a Minor cleanup 2002-12-21 22:54:25 +00:00
Kurt Zeilenga
539693f56c Correct fix 2002-12-20 17:57:00 +00:00
Kurt Zeilenga
b47d0d6b6a if 0 out bad statslog 2002-12-20 17:25:51 +00:00
Kurt Zeilenga
f43bf6b283 cleanup 2002-12-20 04:08:06 +00:00
Howard Chu
4e4818771c Plug memory leak 2002-12-18 22:44:13 +00:00
Howard Chu
89ab02479d Use ber_flatten2 2002-12-18 19:17:15 +00:00
Howard Chu
4ab720eefa Eliminate redundant steps 2002-12-18 19:00:23 +00:00
Howard Chu
06c223991f Fix previous commit, compare must return signed result 2002-12-18 07:55:27 +00:00
Howard Chu
bb9531eda6 Plug memory leak 2002-12-18 01:58:18 +00:00
Kurt Zeilenga
75757a5c82 Don't reeval expression 2002-12-17 05:25:05 +00:00
Howard Chu
870c3cb5c6 Revert previous, it was only masking the real problem. And caused more... 2002-12-17 04:56:41 +00:00
Howard Chu
0e69c86461 Fix Statslog messages 2002-12-17 00:23:36 +00:00
Howard Chu
48c8cebbe3 Fix typo in previous commit 2002-12-16 12:17:49 +00:00
Howard Chu
7c7daf8556 Statslog additions:
Added StatslogTest macro.
	Added attributes to modify and search Statslog.
	Added Statslog of SASL authcid.
2002-12-16 12:14:37 +00:00
Howard Chu
40b651afb1 Fix previous commit, was freeing name from rev-lookup too soon. 2002-12-16 00:58:05 +00:00
Hallvard Furuseth
2bcb48361d Remove casts of AVL function pointers. 2002-12-14 22:25:52 +00:00
Hallvard Furuseth
ff2a3201cb Call node_find_cmp() with (void *)&ulong instead of (void *)ulong.
The old code assumed sizeof(long) == sizeof(void *), among other things.
2002-12-14 21:01:08 +00:00
Pierangelo Masarati
df5d69df8f allow a custom error log file for plugins by means of a slapd.conf directive; add very bare-bone back-monitor info about installed plugins 2002-12-14 15:04:37 +00:00
Hallvard Furuseth
486eaa69b6 Rename "lang(uage)" to "tag(s)". (Cleanup after attribute options patch.) 2002-12-13 19:15:20 +00:00
Kurt Zeilenga
7be4d566d7 cleanup 2002-12-13 00:18:54 +00:00
Hallvard Furuseth
54728f367e Implement user-defined tagging attribute options and ranges 2002-12-12 13:56:05 +00:00
Howard Chu
88adbc8691 Fix ITS#2234 canonicalization bug 2002-12-12 13:49:25 +00:00
Kurt Zeilenga
854e447231 misc cleanup 2002-12-11 20:39:05 +00:00
Howard Chu
b40e40ec3c undef CONNECTION_INPUT_LOOP, use DATA_READY_LOOP. Seems to help prevent
hangs in heavy load situations.
2002-12-11 18:36:02 +00:00
Howard Chu
ee571c54a4 Must use reentrant gethostbyaddr for reverse lookups. Other threads may
be doing lookups too (e.g., SASL/GSSAPI)
2002-12-11 16:36:36 +00:00
Howard Chu
56c11f4a13 Fix ITS#2227, nameUIDNormalize fell behind the times... 2002-12-11 01:33:24 +00:00
Howard Chu
e39f9848ac Fix previous commit, check for dup in avl_insert 2002-12-10 20:56:08 +00:00
Howard Chu
349e05ff4d Added config keyword "searchstack" for setting search stack cache depth.
Default is still 16.

Added IDL caching, modified from ITS#2182. Uses "idlcachesize" config
keyword. Code is #ifdef'd, currently defined, with default cache of 0.
2002-12-10 20:33:49 +00:00
Howard Chu
d4a422329b From ITS#2183, use a long-lived IDL stack per thread. 2002-12-10 17:59:21 +00:00
Kurt Zeilenga
32f6c9ec6d Make digit a local static variable instead of a global 2002-12-10 16:44:02 +00:00
Hallvard Furuseth
fbbbdd8b94 ITS#2215: Let Statslog() work if only one of LDAP_DEBUG/LDAP_SYSLOG is #defined 2002-12-09 18:18:14 +00:00
Pierangelo Masarati
bc35e4bc0d another attempt to fix slapi build sequence ... 2002-12-09 12:17:23 +00:00
Kurt Zeilenga
56ebd53e51 expand authid buffer 2002-12-08 07:56:49 +00:00
Pierangelo Masarati
08710f80cd fix previous commit 2002-12-07 19:19:26 +00:00
Pierangelo Masarati
d19706634c fix previous commit 2002-12-07 19:00:34 +00:00
Kurt Zeilenga
e9ab2f8d06 Catch NULL control OID up front. 2002-12-07 18:35:22 +00:00
Kurt Zeilenga
7c4445aed4 Avoid magic constant (32) in allocation. Use sizeof instead 2002-12-07 18:34:25 +00:00
Pierangelo Masarati
5b87c4c448 some todo stuff 2002-12-07 18:31:25 +00:00
Pierangelo Masarati
1b70e16448 SLAPI - Netscape plugin API for slapd - based on patch contributed by Steve Omrani <somrani@us.ibm.com> as ITS#2073 2002-12-07 17:19:29 +00:00
Kurt Zeilenga
db98e44d6a Finish proxy authzid control 2002-12-05 18:14:02 +00:00
Luke Howard
6730080081 Allow the root DN to switch to any authorization identity. 2002-12-05 12:25:16 +00:00
Pierangelo Masarati
8e74ed4dfc fix initialization size and silence warning 2002-12-05 11:47:44 +00:00
Howard Chu
b1798f9160 Fix typo in prev commit value_find/_ex 2002-12-04 23:20:22 +00:00
Howard Chu
574090d184 Fix slap_sasl2dn(), performing internal search with wrong op.o_ndn. 2002-12-04 22:37:51 +00:00
Howard Chu
09679eb715 Added SLAP_MR_VALUE_NORMALIZED_MATCH, avoid redundant normalize when
calling value_find with already-normalized DNs
2002-12-04 18:19:46 +00:00
Kurt Zeilenga
eb41333e4c Use getpeereid(3) where available else use *_PEERCRED replacment function 2002-12-04 06:17:32 +00:00
Luke Howard
daf7d0c0eb Support SO_PEERCRED SASL EXTERNAL authorization. 2002-12-04 04:14:44 +00:00
Luke Howard
a6edb2ae36 Treat all EXTERNAL DNs are already normalized. 2002-12-04 04:13:20 +00:00
Howard Chu
827ea96e16 ITS#1523 enhanced ACL caching 2002-12-04 02:35:00 +00:00
Julius Enarusai
9b5ec8f43b Fixed minor compile errors in LDAP_LOG debug statements. 2002-12-03 17:06:58 +00:00
Kurt Zeilenga
da76c1951e First-cut proxy authorization support. 2002-12-03 06:11:32 +00:00
Hallvard Furuseth
416aeb9347 Never let ldif_parse_line() return a NULL value with success. 2002-12-02 22:46:07 +00:00
Hallvard Furuseth
b968317900 A search requesting 'cn;lang-en-' did not find 'cn;lang-en'. 2002-11-30 20:00:01 +00:00
Pierangelo Masarati
6ce1fc099a fix handling of anomalous databases, like subordinate ones (as suggested by Howard) 2002-11-29 17:43:28 +00:00
Howard Chu
0c5d1dc00f Fix ITS#2214, clear gs->matched after freeing it. 2002-11-28 17:20:17 +00:00
Howard Chu
3260b26717 Fix ITS#2200, must use SASL creds exactly as received 2002-11-28 16:16:05 +00:00
Howard Chu
ce581462bd More streamlining. 2002-11-28 15:47:06 +00:00
Howard Chu
5f4db0b47f Don't use be_private to point to our glueinfo. This allows underlying
backends to be called directly, instead of having to wrap every function.
Delete unneeded wrappers.
2002-11-28 15:17:26 +00:00
Pierangelo Masarati
a7c5307279 perhaps the assert can be removed; should work now 2002-11-28 08:25:12 +00:00
Kurt Zeilenga
8754c8f2a3 #unifdef paged results, remove lint 2002-11-28 04:38:41 +00:00
Howard Chu
ca4764ccfa ITS#2202, set SASL_SUCCESS_DATA on sasl_server_new(). 2002-11-27 03:49:04 +00:00
Howard Chu
36c915a134 Fix ITS#2200, revert patch in rev 1.128. SASL/Kerberos4 requires a patch
to Cyrus SASL lib/server.c, can't fix it here.
2002-11-27 03:46:42 +00:00
Kurt Zeilenga
4e223d588b Reorder header inclusion to resolve ITS#2204. 2002-11-26 20:22:24 +00:00
Kurt Zeilenga
5e572b5deb Clean up examples 2002-11-26 17:56:51 +00:00
Pierangelo Masarati
e178624b42 cleanup 2002-11-25 23:37:54 +00:00
Pierangelo Masarati
014ba5ac80 silence warning 2002-11-25 23:37:10 +00:00
Pierangelo Masarati
a62aa61544 much better fix for ITS#2196 (dnattr without sat_equality is bounced at config) 2002-11-25 18:37:04 +00:00
Pierangelo Masarati
95f75aaf15 mr should not be NULL; fixes ITS#2196 2002-11-24 21:36:14 +00:00
Pierangelo Masarati
7091853dfc ITS#2176: Change password on slave when multimaster is enabled (do not use multimaster) 2002-11-22 00:56:20 +00:00
Pierangelo Masarati
9ccf63f327 remove paged results cruft 2002-11-21 22:37:06 +00:00
Pierangelo Masarati
8473f6e778 set keyword to noEstimate and document it 2002-11-21 20:57:00 +00:00
Pierangelo Masarati
415a8d325f add limits to entries count for paged results 2002-11-21 20:49:02 +00:00
Pierangelo Masarati
2b639068b6 seems to be leaking a ber 2002-11-21 20:21:22 +00:00
Pierangelo Masarati
3ff7138cb2 improve limits handling and consistency 2002-11-21 14:23:39 +00:00
Pierangelo Masarati
59aea47963 improve limits handling and consistency; return "Admin limit exceeded" instead of "Unwilling to perform" 2002-11-21 12:58:59 +00:00
Pierangelo Masarati
b26ecba01a - allow interactive pagedResults size change
- implement pagedResults abandon by setting size=0
- misc code cleanup
2002-11-21 03:36:37 +00:00
Pierangelo Masarati
acab9b3266 remove cruft 2002-11-21 02:18:31 +00:00
Pierangelo Masarati
26d2ea1488 fix typo in comment :) 2002-11-21 02:18:13 +00:00
Pierangelo Masarati
6a917650e8 add supported controls to backend entries 2002-11-21 02:17:24 +00:00
Pierangelo Masarati
c354bb23bf Support for RFC 2696:
LDAP Control Extension for Simple Paged Results Manipulation

contributed by Lynn Moss <lynnmoss@us.ibm.com> (ITS#2189)

applied with changes.
2002-11-21 02:16:53 +00:00
Pierangelo Masarati
0f17b4f852 fix possible uninitialized use of nmods 2002-11-21 00:31:36 +00:00
Julius Enarusai
614e7d565d Converted ch_malloc and ch_calloc calls to SLAP_MALLOC and SLAP_CALLOC. 2002-11-19 21:26:09 +00:00
Julius Enarusai
3fddf93a7b Converted ch_malloc and ch_calloc calls to SLAP_MALLOC and SLAP_CALLOC. 2002-11-19 20:20:00 +00:00
Julius Enarusai
fe569dbb75 Converted ch_malloc and ch_calloc calls to SLAP_MALLOC and SLAP_CALLOC. 2002-11-19 18:24:18 +00:00
Julius Enarusai
d9e7a7190b Converted ch_calloc and ch_malloc calls to SLAP_CALLOC and SLAP_MALLOC. 2002-11-19 17:06:17 +00:00
Howard Chu
1385f29ebc Fix is_entry_objectclass flag comparisons (from Jason Townsend @ Apple) 2002-11-18 03:56:54 +00:00
Kurt Zeilenga
390cdcfbc2 Add AUTHZ stats logging 2002-11-11 18:55:45 +00:00
Kurt Zeilenga
e1f2ed9bc1 Delete some old (bad) statslog messages 2002-11-11 18:38:57 +00:00
Pierangelo Masarati
498d1f043d silence warnings; fix messages 2002-11-10 20:00:44 +00:00
Pierangelo Masarati
76bf91f553 remove #ifdef SLAP_FILTER_HASSUBORDINATES 2002-11-10 19:48:36 +00:00
Pierangelo Masarati
a9c902a7ca improve error messages 2002-11-10 18:16:43 +00:00
Kurt Zeilenga
b5b495a871 Remove extra entry_free() 2002-11-10 06:48:55 +00:00
Pierangelo Masarati
5794b3a2dd Add checks for SQL headers in configure.in (need to rerun autoheader
and autoconf); #include "ac/string.h" instead of <string.h>
2002-11-09 17:03:07 +00:00
Pierangelo Masarati
0491710fa7 Patch: Wrong args to Debug() and LDAP_LOG() (ITS#2170,2171)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================
2002-11-09 16:09:50 +00:00
Pierangelo Masarati
7400191ba8 cleanup str2adlist 2002-11-09 14:46:00 +00:00
Julius Enarusai
8669824fd5 Converted ch_calloc calls to SLAP_CALLOC. 2002-11-08 18:17:21 +00:00
Julius Enarusai
6e9c21cff8 Converted ch_malloc, ch_calloc and ch_realloc calls to SLAP_MALLOC,
SLAP_CALLOC and SLAP_REALLOC respectively.
2002-11-08 17:13:20 +00:00
Pierangelo Masarati
a777c53564 fix attribute delete (ITS#2158) patch provided by Timofey B. Nickonov <ntb@mts.ru> 2002-11-02 16:00:21 +00:00
Julius Enarusai
2d98b19bf7 Converted ch_malloc, ch_calloc and ch_realloc calls to SLAP_MALLOC and
SLAP_CALLOC in add_value/add_value_one functions and propagated errors to
all functions that use these functions.
2002-11-01 18:59:52 +00:00
Howard Chu
24f1a11cde Fix sasl_server_start invocation, must pass NULL cred when credlen is 0. 2002-11-01 02:14:55 +00:00
Stig Venaas
0f86bbde87 Fix referrals and alias. For ldbm and I think for bdb, this is necessary
now that we normalize to lower case. Should be merged into 2.1.
2002-10-31 16:48:04 +00:00
Pierangelo Masarati
53e1930fd0 use keyword "unlimited" instead of -1 for no limits 2002-10-31 09:57:24 +00:00
Jong Hyuk Choi
ca8ab9d809 changes in bdb_psearch() - search scope check 2002-10-29 08:05:45 +00:00
Jong Hyuk Choi
2e1809d76f change due to removal of servers/slapd/lcup.c 2002-10-29 04:39:05 +00:00
Jong Hyuk Choi
3d4a915f2b Removal of servers/slapd/lcup.c 2002-10-29 00:00:47 +00:00
Jong Hyuk Choi
3a9229a3e9 Use of slap_schema.si_ad_entryUUID in bdb_psearch() 2002-10-28 23:57:54 +00:00
Kurt Zeilenga
6f59ca0e5b Add superiorUUID to system schema 2002-10-28 20:01:55 +00:00
Kurt Zeilenga
293158f432 code cleanup 2002-10-27 03:42:32 +00:00
Kurt Zeilenga
886f60f822 Fix typo 2002-10-27 00:41:52 +00:00
Howard Chu
322a800c26 Fix ITS#2157, server should never attempt to unlink the client's socket.
It likely has no name anyway, and the client owns it after all.
2002-10-26 22:41:26 +00:00
Pierangelo Masarati
dea2420569 beautify "unknown" 2002-10-26 18:51:24 +00:00
Pierangelo Masarati
f07cabad0f need to move #define here; on by default 2002-10-26 16:32:11 +00:00
Pierangelo Masarati
7b3f889ec1 fix hasSubordinate filtering; now it can be safely turned on 2002-10-26 16:18:31 +00:00
Pierangelo Masarati
69343add5a use more appropriate error code 2002-10-26 10:05:35 +00:00
Pierangelo Masarati
8558b8808e actually, get_perms is needed by ldapi:// rgeardless of -DSLAP_X_LISTENER_MOD 2002-10-26 10:02:41 +00:00
Kurt Zeilenga
36569048ff Add "allow update_anon"
Fix -USLAP_X_LISTENER_MOD builds
2002-10-25 18:47:24 +00:00
Jong Hyuk Choi
15c5943edd Addition of servers/slapd/lcup.c and servers/slapd/back-bdb/lcup.c for persistent search 2002-10-25 17:57:03 +00:00
Jong Hyuk Choi
8074294f1d LCUP persistent search code drop 2002-10-25 17:51:30 +00:00
Pierangelo Masarati
97e526cb2d add restrictions related to listeners in form of file permissions
(see in slapd(8) the description on how to enforce file permissions
on sockets in ldapi schema); at present, only user permissions are
used as follows: the url extension x-mod=-rwxrwxrwx is used; only
the user permisisons are considered, e.g. the first set of rwx;
	"r" means read is allowed from that listener
	"w" means write is allowed on that listener
	"x" means bind is not required on that listener
these restrictions ADD to those already present, and are actually
checked AFTER the other restrictions, but BEFORE ACLs, so they can
be used to apply gross restrictions but should not be viewed as
a replacement of ACLs. To compile this, #define SLAP_X_LISTENER_MOD
2002-10-25 16:43:44 +00:00
Kurt Zeilenga
6d199506bb ber_write error message cleanup 2002-10-25 05:47:08 +00:00
Kurt Zeilenga
2b2e406b46 Make sure that newSuperior isn't old superior 2002-10-25 01:09:50 +00:00
Pierangelo Masarati
956f1d16aa listener:
- use bervals for url and sockname
- pass connection_init() the listener struct pointer instead of each value
- don't copy them in the Connection struct 'cause they're not going to change
- define macros for legacy usage of c_listener_url and c_sockname
2002-10-24 10:03:52 +00:00
Pierangelo Masarati
fdd586a6b7 change socket permission syntax (to reuse function for other purposes) 2002-10-23 14:12:01 +00:00
Pierangelo Masarati
456a561b65 prevent use of uninitialized var 2002-10-23 14:11:02 +00:00
Pierangelo Masarati
665cb3e86e fix typo 2002-10-23 14:10:21 +00:00
Kurt Zeilenga
ff9dd56587 Add comment attributing origin of the Metaphone algorithm 2002-10-22 04:52:57 +00:00
Kurt Zeilenga
c382c5efa2 blind fix for NULL pointer in Debug() bug (ITS#2143) 2002-10-17 17:45:44 +00:00
Kurt Zeilenga
ac66a219d0 Fix comment 2002-10-17 04:35:55 +00:00
Kurt Zeilenga
c64d28aa4e correct security sample 2002-10-12 05:10:41 +00:00
Howard Chu
9d2a8ba1b4 More fixes for ITS#2136, make sure all error returns set *text. 2002-10-11 17:12:56 +00:00
Kurt Zeilenga
40b685b70d Patch: Delete the buggy surrogate parent code (ITS#1815)
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
2002-10-10 20:28:36 +00:00
Kurt Zeilenga
5504bed852 More OBSOLETE checks 2002-10-10 02:38:32 +00:00
Kurt Zeilenga
857165b1bf Add some OBSOLETE schema checks 2002-10-10 02:07:24 +00:00
Kurt Zeilenga
b5020aa16d Don't mask error text variables 2002-10-09 23:36:28 +00:00
Kurt Zeilenga
27cb98d28d Remove lint 2002-10-09 23:35:45 +00:00
Kurt Zeilenga
1aa829922f Implement content rule checks
w/ implicit default rules allowing any auxiliary class to be mixed in
2002-10-09 23:02:01 +00:00
Howard Chu
e6d10b9590 Revert previous commit. More thought needed re: IPV4 vs IPv6 failures 2002-10-09 21:18:51 +00:00
Howard Chu
2e538e19d4 ITS#2132, give up at first bind failure 2002-10-09 20:45:13 +00:00
Kurt Zeilenga
5060ebb36d Fix bad sup error 2002-10-09 19:24:02 +00:00
Kurt Zeilenga
dff7315edf Need ../cr.o 2002-10-09 19:11:12 +00:00
Howard Chu
b9bd44b047 Fix ITS#2132, give up if listener fails to open 2002-10-09 18:57:50 +00:00
Kurt Zeilenga
acc32b9d9e Basic framework for DIT Content Rules (not yet enforced) 2002-10-09 07:11:50 +00:00
Kurt Zeilenga
023d0e2a5c Rework unprotected simple bind checks 2002-10-08 19:03:18 +00:00
Kurt Zeilenga
06f69e603c Add security restrictions examples 2002-10-08 01:15:20 +00:00
Kurt Zeilenga
36fca96695 if "disallow bind_simple_unprotected", require at least SSF of 2 2002-10-08 01:06:49 +00:00
Kurt Zeilenga
df6c69ffd6 More entry level access control for back-shell
(should be applied to back-perl and other programmable backends)
2002-10-07 21:56:43 +00:00
Kurt Zeilenga
3a17376dfd s/256/LBER_ELEMENT_SIZEOF/
set LBER_ELEMENT_SIZEOF to 256
maybe this should be set to N*sizeof(size_t) or something
2002-10-07 21:01:47 +00:00
Kurt Zeilenga
cb73d243fb More "entry" level ACLs for entry add, delete, and rename. 2002-10-07 19:19:29 +00:00
Kurt Zeilenga
d19db4b7ed Fix up last commits 2002-10-04 23:42:27 +00:00
Kurt Zeilenga
9fbcc90bd5 Add "entry" ACL checks for add/delete/rename ops 2002-10-04 23:26:28 +00:00
Kurt Zeilenga
8975676fa4 Clean up some #else #if 'ing 2002-10-04 18:36:44 +00:00
Kurt Zeilenga
5b591d0dec Fix subentry OIDs 2002-10-02 01:18:46 +00:00
Kurt Zeilenga
33248a02e1 Code cleanup (no functional changes) 2002-10-01 04:07:55 +00:00
Kurt Zeilenga
f5e6d1db41 #unifdef -DSCHEMA_DN 2002-09-29 04:30:38 +00:00
Kurt Zeilenga
4ef4c9eb06 Return default referral if DN maps to empty domain. 2002-09-26 16:12:39 +00:00
Kurt Zeilenga
b4e1ea15f3 benign buffer overflow fix (ITS#1964) 2002-09-25 04:34:33 +00:00
Kurt Zeilenga
bbbf2f4ca7 Fix handling of non-critical controls for backends which
support no controls.
2002-09-24 18:20:59 +00:00
Kurt Zeilenga
d0a4fee37a Minor updates 2002-09-22 19:09:47 +00:00
Kurt Zeilenga
976c35fbf0 fix possible uninit bug 2002-09-21 04:33:19 +00:00
Howard Chu
bdf9b3ae1b Fix ITS#1033 slapd hangs with GNU Pth - don't write to the wakefd
more than once at any given time.
2002-09-21 03:52:16 +00:00
Kurt Zeilenga
f558b6b02f Add experimental +/- AttributeName support. 2002-09-21 00:11:43 +00:00
Kurt Zeilenga
d9d58ae02f Save "-" for no subtypes 2002-09-20 19:58:25 +00:00
Howard Chu
9ba829436e Add dummy reference to lutil_uuidstr() for dynamically loaded back-bdb
and back-ldbm.
2002-09-20 01:02:33 +00:00
Howard Chu
104f8cc409 Simpler fix for NO_THREADS 2002-09-19 06:34:53 +00:00
Howard Chu
ff9e580d33 Updated BDB_HIER for current API 2002-09-19 06:08:12 +00:00
Howard Chu
6fa0363d09 Don't set bdb yield with NO_THREADS 2002-09-19 01:38:00 +00:00
Howard Chu
919274432b Fixes for NO_THREADS
Use a per-env locker ID
	Always set lock_detect, since we allow slapadd etc. concurrently
Also removed unused lock_detect_task code. lockdetect config keyword only
needs <policy>, no <seconds> argument.
2002-09-19 01:13:27 +00:00
Howard Chu
7666bb7482 Add calls to module_init/module_kill to support dynamically loaded backends. 2002-09-18 11:58:19 +00:00
Kurt Zeilenga
3eb21d8a6c Misc cleanup 2002-09-16 21:50:55 +00:00
Kurt Zeilenga
f0364e25d1 Fix sizeof [r]buf typo 2002-09-16 21:35:33 +00:00
Kurt Zeilenga
cc7d1433bb For object classes in attribute lists, use '+' (or '-') to indicate
name is an objectClass.
2002-09-16 20:48:08 +00:00
Kurt Zeilenga
a1da292989 Wrap csn filter frees with sync mode check. 2002-09-15 22:42:50 +00:00
Kurt Zeilenga
88c8cca820 Fix return value 2002-09-15 22:42:07 +00:00
Kurt Zeilenga
0ad91236fd Add LDAP_CONTROL_CLIENT_UPDATE to list of supported controls 2002-09-15 22:28:38 +00:00
Kurt Zeilenga
1d0e916c6f Misc CLIENT_UPDATE cleanups 2002-09-15 22:22:51 +00:00
Kurt Zeilenga
2a9783bd5e Fix typos in last commit 2002-09-15 22:13:25 +00:00
Kurt Zeilenga
629a0219f2 Cleanup up LDAP_CLIENT_UPDATE code... including some bug fixing. 2002-09-15 21:08:34 +00:00
Jong Hyuk Choi
1509e321de LCUP Response Control Code 2002-09-14 00:29:06 +00:00
Howard Chu
3e61f0630d Fix ITS#2082, bdb_idl_intersection 2002-09-13 20:19:56 +00:00
Howard Chu
7e493b87be Fix debug messages 2002-09-13 20:19:15 +00:00
Howard Chu
a8297e6d22 Fix test of uninit'd rc at LOCK_ID 2002-09-13 12:32:08 +00:00
Howard Chu
1263e40b55 Set BDB's global allocators to ber_*, don't bother with the per-env setting. 2002-09-12 02:47:18 +00:00
Pierangelo Masarati
ae2cd84d16 trim c++ style comments 2002-09-11 17:15:55 +00:00
Howard Chu
7823832770 Fix ITS#2075, NULL moddn->newsup->bv_val 2002-09-11 10:59:41 +00:00
Pierangelo Masarati
8758a30bf2 #undef SLAP_X_FILTER_HASSUBORDINATES while I fix the entry lock problem ... 2002-09-10 10:10:11 +00:00
Howard Chu
35e8b8325d Unifdef BDB_IDL_MULTI. 2002-09-10 04:20:45 +00:00
Kurt Zeilenga
e6fdfd4cee only optimize objectClass filters when (objectClass=*) is
presented... avoids (&(objectClass=*)(objectClass=foo)) problems.
2002-09-09 23:25:22 +00:00
Howard Chu
9953574b47 Fix: if slapadd was used with an un-ordered LDIF file, we can't rely on
entries having ascending entry IDs. Always start from the beginning of
the candidate list. (This should be fine in the general case as well,
since the subtree index will also have refined the candidates.)
2002-09-09 04:24:38 +00:00
Howard Chu
30de884223 More memory cleanup 2002-09-09 00:56:57 +00:00
Howard Chu
a4b30ce455 Plug memleaks from -r1.45 2002-09-09 00:55:52 +00:00
Pierangelo Masarati
b8240724ad optimize also duplicate/existence check in value delete operations 2002-09-07 16:08:30 +00:00
Howard Chu
b623e4495b Fix typo in one-level searches, left over from -r1.23 cleanup 2002-09-06 12:37:24 +00:00
Kurt Zeilenga
37d9880495 Some LCUP clean up 2002-09-06 00:29:20 +00:00
Howard Chu
73207c7110 Replace HACK in slap_sasl_canonicalize with safer test. 2002-09-05 11:01:12 +00:00
Kurt Zeilenga
ab80b03057 back_attribute() should use ACL_AUTH not ACL_READ (at
least for current callers, may need to pass it the
permission level)
2002-09-05 02:37:10 +00:00
Howard Chu
62ceae250c ITS#2065 omit libbackends.a when no static backends configured.
Also fixed dependencies for dynamic backends and tools.
2002-09-04 10:58:25 +00:00
Jong Hyuk Choi
4b48c05a8e LDAP Client Update Protocol - non-persistent update (TODO: response control ...) 2002-09-04 02:00:42 +00:00
Pierangelo Masarati
5d50463376 optimize duplicate detection based on mods and existing values count 2002-09-03 15:12:36 +00:00
Kurt Zeilenga
69ba1a21bc Extend checks to substrings rules. Need to kludge around
LDAP's kludged builtin substrings rules.
2002-09-03 07:28:57 +00:00
Kurt Zeilenga
8a5b200c44 Add appropriate matching rule checks.
Clean up syntax error reporting.
2002-09-03 07:01:09 +00:00
Howard Chu
3099d89d9e Don't use sasl_set_alloc on Cyrus 2, it manages all of its memory
internally and we don't want to get in the way.
2002-09-02 22:25:26 +00:00
Kurt Zeilenga
3e1a896928 Update comment 2002-09-02 22:07:23 +00:00
Pierangelo Masarati
d3ca441ae8 /*
* The original code performs ( n ) normalizations
 * and ( n * ( n - 1 ) / 2 ) matches, which hide
 * the same number of normalizations.  The new code
 * performs the same number of normalizations ( n )
 * and ( n * ( n - 1 ) / 2 ) mem compares, far less
 * expensive than an entire match, if a match is
 * equivalent to a normalization and a mem compare ...
 *
 * This is far more memory expensive than the previous,
 * but it can heavily improve performances when big
 * chunks of data are added (typical example is a group
 * with thousands of DN-syntax members; on my system:
 * for members of 5-RDN DNs,

 members         orig            bvmatch (dirty) new
 1000            0m38.456s       0m0.553s        0m0.608s
 2000            2m33.341s       0m0.851s        0m1.003s

 * Moreover, 100 groups with 10000 members each were
 * added in 37m27.933s (an analogous LDIF file was
 * loaded into Active Directory in 38m28.682s, BTW).
 *
 * Maybe we could switch to the new algorithm when
 * the number of values overcomes a given threshold?
 */
2002-09-02 19:41:03 +00:00
Pierangelo Masarati
eb38db1be5 various fixes and improvements 2002-09-02 19:39:31 +00:00
Pierangelo Masarati
857d08ea21 use bvmatch() instead of ber_bvcmp() when testing for match without ordering 2002-09-02 19:39:06 +00:00
Kurt Zeilenga
132506e13c Add NOOP search support. 2002-09-02 17:38:17 +00:00
Kurt Zeilenga
af183089b8 unifdef -DSLAP_X_MRA_MATCH_DNATTRS 2002-09-01 00:33:20 +00:00
Kurt Zeilenga
b5f51ed4a5 have get_mra use mr_usable_with_at() as well 2002-08-31 21:39:42 +00:00
Kurt Zeilenga
c6052ac8b0 Add mr_usable_with_at() routine. Use both in generation
of rule uses, but also in test_filter_mra()
2002-08-31 21:23:45 +00:00
Kurt Zeilenga
5c61f55faa Make sure we don't expose hidden attribute types in rule uses 2002-08-31 20:49:50 +00:00
Kurt Zeilenga
e9a71156cc Add matching rule use support where assertion syntax != value syntax 2002-08-31 20:42:25 +00:00
Kurt Zeilenga
04c71ce9b2 List approximates as well in rule uses.
Don't yet list ordering rules yet, these require special attention (and
hence are not marked MR_EXT yet)
2002-08-31 19:25:41 +00:00
Kurt Zeilenga
d6ac7ac544 Fix last commit.
Also add uses where mr is the attribute's equality rule.
2002-08-31 19:17:54 +00:00
Kurt Zeilenga
2908cdff11 MR_EXT rules can be used with any type whose syntax is same as
the syntax's assertion syntax.
2002-08-31 19:05:36 +00:00
Kurt Zeilenga
6c7104c82b Don't hide matchingRuleUse's description (now implemented)
Use attribute's cname not oid in matching rule uses
2002-08-31 18:41:21 +00:00
Pierangelo Masarati
966dd1bdca definitely fix NOOP in back-bdb 2002-08-31 17:03:42 +00:00
Pierangelo Masarati
0d5fe062e2 improved support for NOOP; add is fine, the other write funcs still need work 2002-08-31 12:00:39 +00:00
Pierangelo Masarati
a0c54f1625 use ldap_charray_add instead of dedicated helper; get rid of dependency from ldap-int.h 2002-08-31 11:14:15 +00:00
Pierangelo Masarati
71aecea2aa fix bitwise matching (courtesy of Luke Howard) 2002-08-31 10:56:27 +00:00
Pierangelo Masarati
804a111fbd add {create,modify}Timestamp to subschema subentry (SHOULD per RFC2251; use server startup time to be conservative) 2002-08-31 10:49:03 +00:00
Pierangelo Masarati
aea52e5bc9 define macros for appropriate sizing of lutil buffers 2002-08-31 10:48:02 +00:00
Pierangelo Masarati
e2ec62f09f add matchingRuleUse to schema; use a berval instead of _oidlen in syntax and matching rule 2002-08-31 10:45:22 +00:00
Pierangelo Masarati
c76b36254c cleanup comments 2002-08-31 10:41:49 +00:00
Pierangelo Masarati
c8cfbca64d fix extendedMatch and approx hfilter andling; get rid of subtree_cond (argh, need to trim it from config and docs ...) 2002-08-31 10:39:23 +00:00
Pierangelo Masarati
a1bb43946b better handling of children_cond 2002-08-31 10:38:29 +00:00
Pierangelo Masarati
95a99bd522 trace illegal condition in backsql_strfcat 2002-08-31 10:37:42 +00:00
Pierangelo Masarati
685363e880 add 'children_cond' config statement 2002-08-31 10:36:16 +00:00
Pierangelo Masarati
b0dfd89e1b added referral support to back-{ldap,meta}; need to allow send_serch_reference() handle NULL entry pointer 2002-08-31 10:35:23 +00:00
Pierangelo Masarati
501cd4c611 fix extendedMatch values return filter control 2002-08-31 10:29:03 +00:00
Kurt Zeilenga
b04483a6a2 We don't support substrings matching via extensibleMatch 2002-08-30 19:30:58 +00:00
Howard Chu
70673417f2 Fix debug statement 2002-08-30 14:28:45 +00:00
Howard Chu
c4f74ac639 Fix crash in mra_free, freeing ber-private value. 2002-08-30 12:38:50 +00:00
Howard Chu
0614b5fdbf Fix unindent commit 2002-08-30 11:48:47 +00:00
Howard Chu
4a3a557827 Use DB_NODUPDATA when adding IDs. Silence log for DB_NOTFOUND in delete_key,
let caller log it if they care.
2002-08-30 11:37:43 +00:00
Howard Chu
9d4f5e13e8 Unindented a level. Fixed logging of keys. 2002-08-30 11:21:20 +00:00
Howard Chu
f32803e738 Don't mask DB_KEYEXIST errors in bdb_idl_insert_key, let dn2id see them.
Ignore DB_KEYEXIST and DB_NOTFOUND errors in key_change.
2002-08-30 10:41:46 +00:00
Kurt Zeilenga
81420d4f91 Yet another bug fix... this one from Luke. 2002-08-29 19:54:17 +00:00
Pierangelo Masarati
a8bf275221 cleaner handling of unchecked limit support 2002-08-29 19:43:29 +00:00
Kurt Zeilenga
ecfb311f8f Fix objectSubClassIndexer bug 2002-08-29 18:05:49 +00:00
Pierangelo Masarati
58b860a15e fix server-size controls handling in back-{ldap,meta} 2002-08-29 15:07:18 +00:00
Pierangelo Masarati
7e2317c842 add server side controls to back-ldap and back-meta 2002-08-29 14:39:31 +00:00
Pierangelo Masarati
e7d2d0a9f5 avoid zero size ch_malloc() when no attributes are present in vrFilter 2002-08-29 13:32:28 +00:00
Pierangelo Masarati
82cb585d32 trim unused var 2002-08-29 12:41:07 +00:00
Pierangelo Masarati
c38f1a63b0 this test is useless, since noop is masked SLAP_CTRL_UPDATE 2002-08-29 12:17:28 +00:00
Howard Chu
20f6bae612 Use sockbuf_max_incoming_auth after successful Bind 2002-08-29 11:53:37 +00:00
Pierangelo Masarati
fbc11bd16a - added the capability to filter based on hasSubordinate attribute
to back-bdb, back-ldbm and back-sql (the latter with limitations);
- added handling of ":dn" attributes to extended rfc2254 filters
  and to matched value filter
- altered the behavior of get_mra() when a matching rule is given:
  now it checks whether it is compatible with the attribute syntax
  and, in case it is, the given mr is used.  In case of no type,
  the check is delayed when filtering
2002-08-29 10:55:48 +00:00
Pierangelo Masarati
f4c5362955 add bdb_hasSubordinates() helper 2002-08-29 10:50:53 +00:00
Pierangelo Masarati
d855f97372 cleanup 2002-08-29 10:50:12 +00:00
Pierangelo Masarati
a32f8c079a cleanup hasSubordinate operational attr merge 2002-08-29 10:49:41 +00:00
Pierangelo Masarati
b16ee02a49 optimize subschema attribute merge 2002-08-29 10:49:11 +00:00
Pierangelo Masarati
f1eb3e39ec use appropriate attr list when matching value of operational attrs 2002-08-29 10:45:48 +00:00
Pierangelo Masarati
24171e1fe2 fix match result bug 2002-08-29 10:45:24 +00:00
Pierangelo Masarati
e53d272b3f cleanup error check logic; don't deref be->controls when it's NULL 2002-08-29 10:43:39 +00:00
Pierangelo Masarati
9ee916bdec fix backend initialization (including ITS#2048) 2002-08-29 10:32:48 +00:00
Howard Chu
7cdb6866cf Two more bervals instead of strings... 2002-08-29 08:47:53 +00:00
Howard Chu
4d36fd5a3e Fix ITS#1991 - referrals with sarch base == target (wasn't sure at first,
but see diff -r1.6 -r1.7 and it's obvious.)
2002-08-29 08:43:23 +00:00
Kurt Zeilenga
923d033c99 Finish adding subclassing indexing support 2002-08-29 02:27:15 +00:00
Kurt Zeilenga
1086ffb438 Round one of subclass indexing for objectClass and structualObjectClasss.
add soc_cname to ObjectClass structure
2002-08-29 01:12:59 +00:00
Kurt Zeilenga
bfa89d6e15 Include lber_pvt.h 2002-08-28 16:47:04 +00:00
Howard Chu
9c4f89c6f7 Added no-op sasl_client_auth if SASL_VERSION_MAJOR < 2. 2002-08-28 08:33:24 +00:00
Kurt Zeilenga
aa36f5d049 cleanup 2002-08-28 07:30:57 +00:00
Howard Chu
3cb7a09eb0 Added check for Cyrus SASL sasl_version() 2002-08-28 07:12:22 +00:00
Howard Chu
1602bc3aa1 Fix ITS#2047 - link ldbm.lo directly when building back-ldbm as a module 2002-08-28 02:50:30 +00:00
Kurt Zeilenga
288f0f4f6d Add another safety check 2002-08-27 17:51:35 +00:00
Howard Chu
9fa8eded08 ITS#2040 - in bdb_idl_fetch_key() use a large enough buffer to get the
entire IDL at once, to avoid triggering BDB resource leaks.
2002-08-27 15:11:04 +00:00
Kurt Zeilenga
aa602e0adc Return other. 2002-08-27 05:51:35 +00:00
Kurt Zeilenga
6ec6115119 Fix bug in last commit 2002-08-27 02:43:00 +00:00
Kurt Zeilenga
433eb54dc7 no structuralObjectClass is not a schema violation, but an
internal error.  It *should* have been added.
2002-08-27 02:28:15 +00:00
Kurt Zeilenga
11236eae56 Clean up some structuralObject checks to improve readability.
Functionality not changed (excepting one error message).
2002-08-27 01:55:09 +00:00
Kurt Zeilenga
00003ac539 Fix comment 2002-08-27 01:35:43 +00:00
Kurt Zeilenga
522ee4a038 Only add LASTMOD attributes if they don't exist in input. 2002-08-27 01:27:42 +00:00
Howard Chu
9f5b28baf3 Remove c_sasl_bindmutex, Binds are already serialized. 2002-08-26 22:20:30 +00:00
Kurt Zeilenga
2c4cfd7c27 remove lint 2002-08-26 20:11:19 +00:00
Kurt Zeilenga
9be4df6b7c Prevent buffer overflow 2002-08-26 20:10:45 +00:00
Kurt Zeilenga
1c5725010e Add a Connection pointer to the Operation. 2002-08-26 19:29:34 +00:00
Kurt Zeilenga
fb7ac08ada cleanup 2002-08-26 19:13:44 +00:00
Kurt Zeilenga
6f8a3919a1 Fix last commit. 2002-08-26 18:07:58 +00:00
Kurt Zeilenga
af4cb85d8b Prevent unlocking unlocked sasl_bindmutex... 2002-08-26 18:06:55 +00:00
Pierangelo Masarati
d9da0f2bb8 silence annoying warning (BTW: who initializes be?) 2002-08-26 17:37:33 +00:00
Howard Chu
53b194fa32 Fix oc_filter, it could exit early before counting the full depth of the
filter tree. Also, only give special treatment to objectclass=*.
2002-08-26 12:04:53 +00:00
Kurt Zeilenga
08059f1633 zap charray 2002-08-25 16:53:20 +00:00
Howard Chu
5ff509f2d3 Fix previous commit, BDB_REUSE_LOCKERS was inside a BDB version #ifdef
but is not version-dependent.
2002-08-25 11:06:35 +00:00
Howard Chu
1524f86778 Fix ITS#2044 duplicate search results due to broken bdb_idl_union 2002-08-25 10:18:01 +00:00
Howard Chu
5d9479a3e8 Add debug if bdb_cache_entry_db_lock fails to get a lock
to assist in diagnosing ITS#1986
2002-08-24 19:23:30 +00:00
Howard Chu
d6449b1d57 Experimental code that uses one locker ID per thread. Seems to work OK,
is enabled by default. #undef BDB_REUSE_LOCKERS in back-bdb.h to disable.
Probably needs to be disabled when built with NO_THREADS.
2002-08-24 08:11:08 +00:00
Howard Chu
925714ceef Experimental cruft to propagate valid Operation to SASL callbacks.
If you have a better way, jupm on in...
2002-08-24 07:34:50 +00:00
Howard Chu
1d7ee4471f Pass Operation to backend_attribute - should have been doing this all along. 2002-08-24 07:31:14 +00:00
Howard Chu
8c30114d84 Added thread-pool getkey/setkey functions 2002-08-24 05:39:43 +00:00
Kurt Zeilenga
e259c3c938 Zap 2002-08-24 00:55:56 +00:00
Kurt Zeilenga
23efa07a99 use ldap_charray_*() instead of charray_*() 2002-08-24 00:55:24 +00:00
Kurt Zeilenga
c67781d0ea use ldap_charray_free() instead of slapd's charray_free() 2002-08-24 00:40:25 +00:00
Howard Chu
77783bb4b7 Fix typo in previous commit. (Benign, code was #if'd out anyway.) 2002-08-23 22:29:08 +00:00
Pierangelo Masarati
f11c6b27e7 Final run of changes to back-sql; IBM db2 support has been tested.
Now related ITSes need be audited and possibly closed.

Enhancements:
  - re-styled code for better readability
  - upgraded backend API to reflect recent changes
  - LDAP schema is checked when loading SQL/LDAP mapping
  - AttributeDescription/ObjectClass pointers used for more efficient
    mapping lookup
  - bervals used where string length is required often
  - atomized write operations by committing at the end of each operation
    and defaulting connection closure to rollback
  - added LDAP access control to write operations
  - fully implemented modrdn (with rdn attrs change, deleteoldrdn,
    access check, parent/children check and more)
  - added parent access control, children control to delete operation
  - added structuralObjectClass operational attribute check and
    value return on search
  - added hasSubordinate operational attribute on demand
  - search limits are appropriately enforced
  - function backsql_strcat() has been made more efficient
  - concat function has been made configurable by means of a pattern
  - added config switches:
      - fail_if_no_mapping	write operations fail if there is no mapping
      - has_ldapinfo_dn_ru	overrides autodetect
      - concat_pattern		a string containing two '?' is used
				(note that "?||?" should be more portable
				than builtin function "CONCAT(?,?)")
      - strcast_func		cast of string constants in "SELECT DISTINCT					statements (needed by PostgreSQL)
      - upper_needs_cast	cast the argument of upper when required
				(basically when building dn substring queries)

Todo:
  - add security checks for SQL statements that can be injected (?)
  - re-test with previously supported RDBMs
  - replace dn_ru and so with normalized dn (no need for upper() and so
    in dn match)
  - implement a backsql_normalize() function to replace the upper()
    conversion routines
  - note that subtree deletion, subtree renaming and so could be easily
    implemented (rollback and consistency checks are available :)
  - implement "lastmod" and other operational stuff (ldap_entries table ?)
2002-08-23 08:54:08 +00:00
Pierangelo Masarati
7b4b4b34c4 fixed bug in reading size/time limits without style, in the form 'size=number', 'time=number' 2002-08-23 08:50:34 +00:00
Pierangelo Masarati
a038ef68e6 added attr_merge/value_add functions that dela with single attribute; bervals for '*', '+' and '1.1' made available 2002-08-23 08:49:19 +00:00
Pierangelo Masarati
ff4edfa054 added assertions to catch helper function misuse 2002-08-23 08:46:45 +00:00
Howard Chu
b3ddb5734b Fix indexing bug in splitting indirect blocks 2002-08-23 03:07:33 +00:00
Howard Chu
cd60deb4a9 OS/390 EBCDIC support 2002-08-22 04:39:59 +00:00
Howard Chu
3b9f4a82ee Added support for BDB 4.1.17 2002-08-22 04:00:06 +00:00
Kurt Zeilenga
3a15afa057 Fix abstract schema check 2002-08-22 02:27:42 +00:00
Pierangelo Masarati
d4bc79864d fix previous commit 2002-08-21 18:11:30 +00:00
Jong Hyuk Choi
b81122d441 Slapadd is changed to include Operational Attributes (entryUUID, entryCSN,
creatorsName, modifiersName, createTimestamp, modifyTimestamp) when it adds
from ldif file. Month field in time format in entryCSN is changed to 1~12.
2002-08-21 00:11:32 +00:00
Kurt Zeilenga
65760c064e ITS#2004 AD lang bug fix 2002-08-20 19:08:18 +00:00
Howard Chu
505a141c75 Use search callbacks in slap_sasl_checkpass and slap_auxprop_lookup,
use ACL_AUTH for acl checks.
2002-08-20 05:32:54 +00:00
Kurt Zeilenga
e1536926b7 Quick check of LOCK_ID() return. Likely should retry... but not forever. 2002-08-20 03:10:08 +00:00
Kurt Zeilenga
9fc4a749dc More places where LOCK_ID() calls need to be checked. 2002-08-20 02:57:06 +00:00
Kurt Zeilenga
041c3700e1 fix typo in last commit 2002-08-19 07:08:59 +00:00
Kurt Zeilenga
930ecd3930 Normalized form should be pretty. 2002-08-19 07:07:25 +00:00
Howard Chu
e5091f5926 Updated register_syntax, register_matching_rule for more convenient
calling from other modules
2002-08-17 01:29:18 +00:00
Kurt Zeilenga
6e02fe2e8a Remove #if 0 code 2002-08-16 18:58:39 +00:00
Pierangelo Masarati
05348c5fc5 CHANGES:
- now all write operations appear to work correctly with PostgeSQL 7.0
- all write operations have been made transactional (atomic writes to
  entries are committed separately only in case of complete^1 success
  while all other operations are rolled-back by default)
- more cleanup and handling of exceptional conditions

TODO:
- deen to check with different databases and more up to date versions
  of both unixODBC and PostgreSQL.

^1: attribute add/modify/delete operations silently succeed if the
    appropriate add/delete proc does not exist for each attribute;
    this may be correct to hide undesired/unimplemented correspondence
    between LDAP and SQL databases; however, a more appropriate
    LDAP behavior would be a failure with LDAP_UNAVAILABLE if a
    single write operation cannot be executed for such reason
2002-08-16 16:45:24 +00:00
Pierangelo Masarati
b95ab4ac64 add function slap_modrdn2mods that prepares modifications list for delete/add old/new rdn values 2002-08-16 16:35:16 +00:00
Pierangelo Masarati
3a26ef5bbb silence warnings 2002-08-16 16:33:22 +00:00
Pierangelo Masarati
a7349c100e fix printableStringValidate return value bug 2002-08-16 16:32:42 +00:00
Pierangelo Masarati
115408986c changes:
- re-style according to the style giudelines for better readability
- updated to recent frontend/backend API changes
- fixed a few quirks about normalization
- "optimized" a few memory allocation/string handling functions
- fixed a few quirks about add/modify (still have to look ad modrdn)

todo:
- there is still something broken (at least with PostgreSQL and IBM db2,
  the two RDBMS O have at hand) when adding
- move everything to struct bervals and try to save a few strlen
- try some LDAP/SQL syntax relation to use appropriate value bind if possible
- ...
2002-08-13 17:12:27 +00:00
Pierangelo Masarati
7c2de5721a VERY PRELIMINARY support for PostgreSQL and IBM db2 2002-08-13 17:07:40 +00:00
Pierangelo Masarati
c4a8a3dce5 better error handling when returning results 2002-08-13 17:00:33 +00:00
Kurt Zeilenga
84fe0ad051 Log successful SASL bind (ITS#2017) 2002-08-13 03:49:21 +00:00
Kurt Zeilenga
a500feb4a6 Patch: lutil_progname() and lutil_strcopy() are not declared (ITS#2021)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

lutil_progname() and lutil_strcopy() are not declared, which can
be fatal since they do not return int.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
2002-08-13 02:33:20 +00:00
Kurt Zeilenga
c5b6a86502 Fix IRIX sc_mask conflict 2002-08-13 02:32:57 +00:00
Kurt Zeilenga
f8f1321760 Add support for response controls 2002-08-12 20:50:20 +00:00
Kurt Zeilenga
1c75a7f25c Fix inverted bvmatch logic in modrdn 2002-08-12 08:45:20 +00:00
Kurt Zeilenga
d250339576 Add back_bdb to modules 2002-08-11 21:06:03 +00:00
Kurt Zeilenga
f10699865e consistently reduce string_expand bv_len by 1 2002-08-11 20:26:01 +00:00
Howard Chu
9fad71dc9b Never use DB_RECOVER flag when opening DB_ENV. Recovery must be done
manually. Automatic recovery would interfere with gentlehup restarts.
2002-08-11 00:30:46 +00:00
Pierangelo Masarati
b063a50891 same as for back-meta 2002-08-10 14:25:41 +00:00
Pierangelo Masarati
328046248b initialize struct timeval (fixes ITS#2014);
also, check for return value of dnNormalize2: if the returned
DN contains undefined attributes, the normalization fails.
2002-08-10 14:13:46 +00:00
Howard Chu
07ebdca237 ITS#1893, use "schemadn" to configure subschemasubentry DN. (diff was
inaccessible, this is original code, not contributed.)
2002-08-10 03:10:52 +00:00
Pierangelo Masarati
1abb8cb339 rework connection pool handling (reduce amount of malloc) 2002-08-09 17:15:10 +00:00
Pierangelo Masarati
85a74efc71 remove dependency from LDAP_FILT_MAXSIZ (and handle arbitrary size filters) 2002-08-09 13:51:35 +00:00
Howard Chu
f7859e9913 ITS#2015 give correct index key back to presence_candidates 2002-08-08 17:27:50 +00:00
Kurt Zeilenga
e69c9067c2 Fix saslregex init bug 2002-08-07 19:17:22 +00:00
Howard Chu
44ac8a3564 Plug config leaks 2002-08-07 08:43:52 +00:00
Howard Chu
554311a4c8 Fix cargv leak in recursive read_config() 2002-08-07 08:22:43 +00:00
Kurt Zeilenga
4a4323e3b7 Move large string comment to just above UTF8StringValidate(). 2002-08-07 08:19:11 +00:00
Howard Chu
50d490be6c Revert previous commit 2002-08-07 06:37:11 +00:00
Howard Chu
13d13baeda In backend_operational don't add subschemaSubentry unless it was
requested. In send_search_entry don't malloc vrFilter flags unless
a matchedValue filter was given; malloc 1 contiguous block instead
of multiple sub-arrays.
2002-08-07 05:31:03 +00:00
Howard Chu
6862cfd97c Don't strdup conn->authz into op, just reference directly. (Conn cannot
be freed until after all associated ops are freed.)
2002-08-07 05:19:55 +00:00
Kurt Zeilenga
f1047b704e ITS#2010: use snprintf instead of strcpy to prevent buffer overflow 2002-08-06 19:31:00 +00:00
Kurt Zeilenga
3f2faa1a84 other->invalid 2002-08-06 05:38:49 +00:00
Kurt Zeilenga
a35d5b90fc For IA5, printable, telephone:
Don't allow empty string values.
Treat string values with only spaces as one space.
DirectoryString needs more work (space handling needs
to be done post normalization).
2002-08-06 05:35:59 +00:00
Kurt Zeilenga
6fdcdeb816 Add a summary to strings comment 2002-08-06 04:25:54 +00:00
Kurt Zeilenga
48f72b6862 Update string commment with examples. 2002-08-06 04:03:13 +00:00
Kurt Zeilenga
82540c5cc1 Add start of discussion of strings in LDAP/X.500 and OpenLDAP. 2002-08-06 03:52:02 +00:00
Kurt Zeilenga
3b3232f21c Fix nameAndOptionalUUID normalization,
now uses bitStringNormalize().
2002-08-06 03:18:02 +00:00
Kurt Zeilenga
3fbfd3064a Remove lint 2002-08-06 03:08:12 +00:00
Howard Chu
e14f471a27 Add #include "lutil.h" for lutil_str* functions 2002-08-06 02:36:34 +00:00
Howard Chu
61731500d0 ITS#1998 UTF8StringNormalize should accept all-space vals 2002-08-06 02:35:24 +00:00
Kurt Zeilenga
428c15d883 Misc clean up of last commit.
Still need to fix my devbox so I can test this....
2002-08-05 23:40:08 +00:00
Kurt Zeilenga
119462adfa Rework saslRegex code (not yet tested) 2002-08-05 23:16:28 +00:00
Kurt Zeilenga
64791571aa Prevent overflow in .rej creation (ITS#2007) 2002-08-05 19:44:24 +00:00
Kurt Zeilenga
c673b651e8 Set O_EXCL (ITS#2009) 2002-08-05 19:43:01 +00:00
Kurt Zeilenga
d38d19edc1 Fix lutil_str*() warnings 2002-08-05 17:56:13 +00:00
Kurt Zeilenga
526d010635 Patch: add OpenLDAPaci #public# access (ITS#2005)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

I couldn't find a way for an OpenLDAPaci to grant public access to an
entry, so I added a dnType #public# for that.  It is in the position
of subjectDn in the draft, which seems kind of stupid, so I put it
in the position of dnType instead.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
2002-08-05 17:53:39 +00:00
Kurt Zeilenga
f8c0481dd4 Patch: ACL #access-id#<invalid-DN> granted access to everyone (ITS#2006)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

There is a bug in OpenLDAPaci's "access-id":  If the specified DN is
invalid so dnNormalize2() fails, everyone gets access.
This means that e.g. "#access-id#[all]" gives public access, so it
might be considered a feature, but I fixed it anyway:-)  I guess that
means the change should be documented in the release notes, though.

See also ITS#2005 (add OpenLDAPaci #public# access).

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
2002-08-05 17:52:16 +00:00
Howard Chu
771f70eb0f Fix ITS#1994, Windows heap consistency 2002-08-03 02:57:52 +00:00
Pierangelo Masarati
40f3da36b0 need <lutil.h> for lutil_gentime 2002-08-02 10:24:03 +00:00
Pierangelo Masarati
540dbbe1ed fix previous commit 2002-08-02 10:00:44 +00:00
Kurt Zeilenga
d22612e8db ITS#1951: saslRegexp limits syntax of regular expressions
Don't normalize regex.
Also, s/LDAP_OPERATIONS_ERROR/LDAP_OTHER/
2002-08-01 01:10:55 +00:00
Howard Chu
d01375b200 Fix bdb_idl_union of range and list (related to ITS#1969 2002-07-31 23:43:56 +00:00
Kurt Zeilenga
838643d5ad operationsError != Internal Error
hence, s/LDAP_OPERATIONS_ERROR/LDAP_OTHER/
2002-07-31 22:49:02 +00:00
Kurt Zeilenga
182dcf27e2 clean up curly matching 2002-07-28 07:37:46 +00:00
Kurt Zeilenga
eb581e43e7 Fix for:
SASL regex segmentation faults with group based acls (ITS#1978)
based, in part, by patch submitted by Simon Wilkinson <simon@sxw.org.uk>.
2002-07-28 07:27:55 +00:00
Kurt Zeilenga
c054d8458a Fix pkiUser 2002-07-27 10:25:42 +00:00
Kurt Zeilenga
e53214b26f ITS#1965: use snprintf 2002-07-27 07:39:50 +00:00
Kurt Zeilenga
1677f178ce ITS#1985 fix: blind commit 2002-07-27 07:37:04 +00:00
Kurt Zeilenga
2f9b89b4af Improve schema error messages 2002-07-27 06:08:51 +00:00
Howard Chu
b6620f3d25 Use lutil_gentime 2002-07-27 02:10:43 +00:00
Howard Chu
5a01db28e3 Moved slap_strcopy, slap_strncopy to lutil_strcopy, lutil_strncopy 2002-07-27 00:24:02 +00:00
Kurt Zeilenga
e981dcbad5 use strongAuthRequired instead of operationsError to indicate
authentication required before modification.
2002-07-26 15:29:36 +00:00
Howard Chu
d6ae1d95de Include <sys/stat.h> for mkdir prototype 2002-07-26 13:24:37 +00:00
Pierangelo Masarati
90f127472d fix normalization bug; change time stamping by using createTimestamp and modifyTimestamp (related to ITS#1984) 2002-07-25 09:49:02 +00:00
Pierangelo Masarati
7e81297147 fix normalization bug (related to ITS#1984) 2002-07-25 09:48:29 +00:00
Kurt Zeilenga
4d22977f7f BootParamSyntax: be more liberal than the ABNF such that
examples in RFC 2307 are treated as valid.
2002-07-24 15:29:22 +00:00
Kurt Zeilenga
3b775fce8b Should allow keystring in bootParams 2002-07-24 15:19:40 +00:00
Kurt Zeilenga
8a3d02bf6b misc cleanup 2002-07-23 18:35:12 +00:00
Julius Enarusai
2168be2b4a Converted LDAP_LOG messages to use new Macro 2002-07-23 00:01:53 +00:00
Pierangelo Masarati
437014723c fix ITS#1953 2002-07-22 14:24:32 +00:00
Howard Chu
aab953ba3f Change list->range conversion again, avoid extra c_put. 2002-07-19 23:19:53 +00:00
Jong Hyuk Choi
db490b4cef change in the IDL conversion from a list to a range 2002-07-18 15:34:51 +00:00
Kurt Zeilenga
202e516450 krbName is now builtin 2002-07-16 02:42:29 +00:00
Howard Chu
e514685144 Tweak: For slap tools, don't set DB_RECOVERY flag when opening DB environment.
This allows slapcat to run while slapd is running, otherwise causes db
corruption.
2002-07-13 00:18:15 +00:00
Howard Chu
a073e28510 Fix setting c_authz_backend for SASL binds:
in slap_sasl2dn, make sure it's set for base DN searches as well.
  in do_bind, don't zero it during multi-stage binds.
2002-07-13 00:11:03 +00:00
Howard Chu
7fdb38bca9 Fix previous commit - the stub was never needed. 2002-07-12 23:43:46 +00:00
Howard Chu
f9cbbc6770 Fix order of params to sasl_setpass. Added initial stub for setpass to
change in-directory password.
2002-07-12 20:55:12 +00:00
Stig Venaas
bf5e3a15ca Use AF_INET instead of AF_UNSPEC when IPv6 disabled 2002-07-12 15:36:33 +00:00
Julius Enarusai
6107ba67d2 Coverted LDAP_LOG macro to use subsystem ID int values instead of string values 2002-07-11 20:33:24 +00:00
Kurt Zeilenga
ef3d895cb8 More ACL to dn="" bug fixing... and add test006-acl check 2002-07-11 01:45:22 +00:00
Kurt Zeilenga
98a2e41911 Fix ACL to dn="" bug 2002-07-11 01:35:37 +00:00
Kurt Zeilenga
32a2f291ee Change dn="" to dn.base="". 2002-07-11 01:17:41 +00:00
Kurt Zeilenga
0fffad53c3 get data if ready 2002-07-10 22:03:32 +00:00
Kurt Zeilenga
fffd84ff9f Fix matched values zero allocation bug (ITS#1931) 2002-07-09 00:20:30 +00:00
Kurt Zeilenga
4f48237d22 remove lint 2002-07-08 18:55:50 +00:00
Kurt Zeilenga
e6627e93d0 Add matchedValues 2002-07-08 18:54:52 +00:00
Stig Venaas
deb62446fe Added normalization to caseIgnoreIA5Indexer() 2002-07-07 13:22:45 +00:00
Stig Venaas
62139b6ef3 Set peeraddr also for IPv6, fixes ITS#1918 2002-07-05 20:29:15 +00:00
Stig Venaas
804490a8b1 Use IPV6_V6ONLY on IPv6 sockets if available. This way we only get IPv6
packets on the IPv6 socket, and we receive only IPv6 with -6.
2002-06-27 13:20:37 +00:00
Stig Venaas
6d025001da Ignore error if listen on socket bound to 0.0.0.0 fails and already
listening on socket bound to ::
2002-06-27 12:41:09 +00:00
Kurt Zeilenga
f708b4e94e Add krbName's definition (ITS#1913) 2002-06-26 18:43:55 +00:00
Kurt Zeilenga
0a2a381d07 Fix for "no structuralObjectClass" when lastmod is off (ITS#1904) 2002-06-25 01:04:54 +00:00
Kurt Zeilenga
3d90fcda3a authcId might be NULL 2002-06-22 21:27:38 +00:00
Howard Chu
7e8c77c5de Fix dynamic module linking 2002-06-21 01:34:53 +00:00
Kurt Zeilenga
54d5d65791 Yet another schema error bug fix 2002-06-20 20:48:19 +00:00
Kurt Zeilenga
a5f29741a6 Fix off by one error in erorr reporting 2002-06-20 20:46:16 +00:00
Kurt Zeilenga
03a4901b5f assert( e != NULL ) in entry2str() 2002-06-19 22:04:28 +00:00
Pierangelo Masarati
93dbac3caf use monitorContext for the monitor database 2002-06-19 07:57:01 +00:00
Kurt Zeilenga
0371c61073 Add monitorContext rootDSE attribute 2002-06-19 06:44:16 +00:00
Kurt Zeilenga
dec67d1ad9 Hide cn=Monitor from namingContexts
Should add a special DN pointer
2002-06-19 06:06:21 +00:00
Kurt Zeilenga
35749a2520 make curlies match 2002-06-18 22:41:03 +00:00
Kurt Zeilenga
ba4faad6e5 Use correct ssfs. 2002-06-18 07:31:20 +00:00
Howard Chu
cf61e03cb8 ITS#1891, debug msg in send_search_entry 2002-06-18 00:37:45 +00:00
Kurt Zeilenga
9a38d98d37 Add option to disallow unprotected simple authentication.
Add protected simple authentication as a "strong" mechanism.
2002-06-17 22:18:27 +00:00
Kurt Zeilenga
27fdd04153 Add -4/-6 flags to slapd to force use of IPv4 or IPv6 2002-06-15 22:01:39 +00:00
Pierangelo Masarati
bf449f33bd small cleanup 2002-06-15 18:20:41 +00:00
Pierangelo Masarati
d75249abfe define and normalize static bervals alltogether 2002-06-15 17:01:35 +00:00
Pierangelo Masarati
b9254b8ab4 should compile even without Cyrus SASL 2002-06-15 15:01:17 +00:00
Kurt Zeilenga
cbba11d7cd saslAuthzTo/From LDUP URLs should have hostnames 2002-06-14 22:03:52 +00:00
Kurt Zeilenga
04df89d972 zap unnecessary include 2002-06-14 09:10:02 +00:00
Kurt Zeilenga
3b695bc6c8 Use experimental OIDs for saslAuth attributes and hide 'em
make the usage distributedOperation
2002-06-14 08:25:14 +00:00
Howard Chu
077aea8127 Fix OID clash in previous commit 2002-06-14 08:16:06 +00:00
Howard Chu
07a34489c6 Added saslAuthzTo and saslAuthzFrom to system schema.
Added sasl-authz-policy config keyword to control proxy authorization.
Moved sasl-related config processing to sasl.c:slap_sasl_config().
Moved other global defs used only in saslauthz.c into saslauthz.c.
2002-06-14 08:10:14 +00:00
Kurt Zeilenga
ad673923a3 ITS#1882: fix typo 2002-06-13 14:50:33 +00:00
Kurt Zeilenga
b5e7208cb8 Date: Thu, 2 May 2002 08:54:59 GMT
From: h.b.furuseth@usit.uio.no
To: openldap-its@OpenLDAP.org
Subject: Patch: Bugs with back-ldap/meta mappings

Full_Name: Hallvard B. Furuseth
Version: HEAD
OS: Linux
URL: http://folk.uio.no/hbf/OpenLDAP/back-ldap.txt
Submission from: (NULL) (158.36.148.34)


The source claims the 'map' attribute has syntax
map {objectclass | attribute}   {<source> | *}      [<dest> | *]
while it actually has syntax
map {objectclass | attribute} [<local name> | *] {<foreign name> |
*}
except that the code is confused about it.  Removed attributes are
put in both the maps for local and foreign names:
	# Remove description and present title as description instead
	map attribute	description
	map attribute	description title
-->
	slapd.conf: line 10: duplicate mapping found (ignored)

Also, map.c:ldap_back_map_attrs() loops forever on removed attributes
(ie. if one asks ldapsearch for an attribute which has been removed).
2002-06-12 16:39:05 +00:00
Kurt Zeilenga
faf91f1f1f Update to the 'gentle SIGHUP' patch. (ITS#1679)
- Let write operations return unwilling-to-perform after
  'gentle shutdown' has been initiated.
- Change -1 to 2 in slapd_gentle_shutdown and slapd_shutdown, since
  sig_atomic_t can be unsigned (ITS#1736).  The 'gentle SIGHUP' patch
  is older than ITS#1736 but was applied later, so it reintroduced
  the problem.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, June 2002.
2002-06-12 15:43:19 +00:00
Howard Chu
c5c1ddb1ca Deleted Connection->c_cdn. Use conn->c_dn instead... 2002-06-12 08:38:59 +00:00
Howard Chu
a5cd5535e8 Fix typo in previous commit 2002-06-12 04:12:51 +00:00
Howard Chu
6d1a322f73 Finished slap_sasl_setpass for Cyrus 1.5; Cyrus 2.1 is incomplete.
Added conn->c_sasl_dn, streamlined slap_sasl_bind.
2002-06-12 04:05:48 +00:00
Kurt Zeilenga
1410b3e7d9 An almost complete slap_sasl_setpass() 2002-06-12 00:13:29 +00:00
Kurt Zeilenga
d6e7f0f630 Rework c_authzid_backend in preparation for sasl_setpass() support 2002-06-11 22:56:47 +00:00
Kurt Zeilenga
4d3b4f9eb8 return PROTOCOL_ERROR if reqdata is empty. 2002-06-10 19:56:17 +00:00
Jong Hyuk Choi
09a2a8fbce DB_RMW flag to dn2id and id2entry 2002-06-10 19:02:25 +00:00
Kurt Zeilenga
116e165a5c Be less forgiving (don't ignore so many configuration errors) 2002-06-08 18:38:52 +00:00
Kurt Zeilenga
a784e4d054 Add rootdn check when rootpw is set. 2002-06-08 18:04:43 +00:00
Kurt Zeilenga
aa46324462 Fix for ITS#1842 (applied blindly) 2002-06-08 06:09:30 +00:00
Kurt Zeilenga
964d1fdd90 userPassword/authPassword can be safely subtyped (though I wouldn't
recommend it).
2002-06-07 20:32:06 +00:00
Howard Chu
3304d125c4 ITS#1837, one-level searches on leaf entries 2002-06-06 11:27:52 +00:00
Howard Chu
b89c4539b9 Fix Listeners: handles multiple addresses for a given hostname, copies
sockaddr into Listener structure.
2002-06-06 10:33:18 +00:00
Jong Hyuk Choi
976fb2265f remove dbenv->lock_put() call from transaction-protected operations 2002-06-06 10:14:14 +00:00
Kurt Zeilenga
e958a4c780 Fix up abandon merge. Hallvard will holler if I get this wrong. :-) 2002-06-05 16:53:48 +00:00
Kurt Zeilenga
951ca2bd68 Patch: Non-unique msgid for abandon in back-<shell,tcl> (ITS#1793)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

It has just occurred to me - duh - that the process ID of a back-shell
command is a perfectly good unique ID for it, and more useful than
any connection id/message id thingy.  Doesn't need extra arguments
to the shell commands either, except a pid: line to abandon.
And msgid: can still be removed in a future version.
Here is a patch.


Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
2002-06-05 16:40:16 +00:00
Kurt Zeilenga
19eca33ca3 Gentile HUP shutdown from Hallvard 2002-06-03 16:47:43 +00:00
Kurt Zeilenga
5c5b5455fb VLV updates 2002-06-03 16:45:09 +00:00
Kurt Zeilenga
26649fb164 Minor cleanup 2002-06-01 20:21:59 +00:00
Kurt Zeilenga
d6d18049dc reference scope checks 2002-06-01 20:01:32 +00:00
Jong Hyuk Choi
7341dc5db6 redesign of back-bdb locking :
cache entry is locked by Berkeley DB lock primitives.
2002-05-31 20:49:19 +00:00
Kurt Zeilenga
55e925abe6 Add abstract/final system attribute types.
clean up error code macros
2002-05-31 20:24:26 +00:00
Kurt Zeilenga
4832cc09d3 Fix bogus assert. 2002-05-31 20:23:33 +00:00
Kurt Zeilenga
bdad40c696 Disallow addition of system schema via config files. 2002-05-30 05:23:37 +00:00
Kurt Zeilenga
aecf4033f6 Hide some yet-to-be-implemented schema 2002-05-29 06:14:55 +00:00
Kurt Zeilenga
02fb60d3da Delete extranous assert() 2002-05-23 03:17:58 +00:00
Kurt Zeilenga
9cdce9c0ed Add back-passwd.h to the mix 2002-05-22 16:22:24 +00:00
Howard Chu
8572d6f2fd Delete $(SLAPD_MODULES) 2002-05-18 03:52:46 +00:00
Howard Chu
561400dbe8 Delete $(SLAPD_MODULES) - we never implicitly link a dynamic module,
so this feature is unnecessary. Also it was breaking Unix dynamic builds.
2002-05-18 02:05:17 +00:00
Kurt Zeilenga
3abec7d8d7 From: h.b.furuseth@usit.uio.no
Patch: str2entry() dereferences NULL  (ITS#1822)

Sorry, last patch was wrong.  I didn't notice that e->e_dn
always is NULL at that point.  Here is a corrected patch.
2002-05-16 15:45:24 +00:00
Howard Chu
4ac8a54b56 Builds on both Unix and NT now. 2002-05-16 11:00:37 +00:00
Howard Chu
3d491808a8 Fixes for MingW: (passes test007, with LDAP_DIRSEP tweaks in slapd.conf)
must include <ac/stdlib.h> to get MAX_PATH defined.
  use LDAP_DIRSEP instead of '/' in paths
  define truncate/ftruncate macros, etc.
2002-05-16 10:51:45 +00:00
Kurt Zeilenga
54d93cc003 From: h.b.furuseth@usit.uio.no
Subject: Patch: str2entry() dereferences NULL  (ITS#1822)

entry.c:str2entry() prints pdn->bv_val even though pdn is always
NULL.  pdn was pretty dn before version 1.80.
2002-05-15 20:55:43 +00:00
Kurt Zeilenga
4e51bba217 Patch: Implement surrogate parent for back-shell (ITS#1815)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

A surrogate parent is supposed to keep back-shell children from
deadlocking due to resources locked by a threading parent.

Implementation note: The surrogate parent closes all unused file
descriptors, so it logs errors to stderr instead of via Debug() and
uses relloc() instead of ch_realloc().

Also close a file descriptor leak if fork() fails in fork.c.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
2002-05-15 06:18:14 +00:00
Kurt Zeilenga
36d9d9729c Fix typo in last commit. 2002-05-15 05:44:46 +00:00
Kurt Zeilenga
10a3a1b9c9 Patch: back-shell/searchexample.* nitpicks (ITS#1816)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

searchexample.conf needs core.schema, otherwise it fails on the suffix
DN.  searchexample.sh has a spurious 'sleep', probably from testing.
Also, I suggest 'chmod +x searchexample.sh'.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
2002-05-15 05:17:08 +00:00
Howard Chu
d2ee3d52a3 Once more, fix idl_intersection. Don't walk past end of arrays. 2002-05-15 03:05:05 +00:00
Howard Chu
a2d310f92e Fix nameUIDvalidate memfree 2002-05-15 00:48:47 +00:00
Howard Chu
856e21296a Cleanup log msg 2002-05-12 19:21:12 +00:00
Howard Chu
2d94a2016c Check for NULL before comparing authcid 2002-05-12 18:42:43 +00:00
Howard Chu
d7060d19f3 Skip processing if canonicalization is invoked redundantly (SASL PLAIN).
Truncate large username instead of failing with SASL_BUFOVER; we only care
about the DN anyway. (SASL 2 only)
2002-05-12 18:40:37 +00:00
Howard Chu
aea521bec2 Fix, SASL authzIDs might not be NUL-terminated. prop names must only be
set once; setting erases all existing values.
2002-05-11 20:19:55 +00:00
Howard Chu
da7a5a8e79 Fix typo in 1.97 2002-05-11 19:24:04 +00:00
Howard Chu
dfae2441eb Cleaned up getdn normalization 2002-05-11 08:07:18 +00:00
Howard Chu
379f84ba47 Fix previous commit, free in wrong place 2002-05-11 06:58:13 +00:00
Howard Chu
b057507e23 Cleanup HAVE_TLS dependencies, cleanup username with embedded realm handling 2002-05-10 19:26:35 +00:00
Kurt Zeilenga
445b7982d7 Patch: back-passwd needs pwent mutex (ITS#1794)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

back-passwd uses getpwent() and setpwfile(), which use static data.
It needs a mutex to make sure these operations can complete without
interference from another back-passwd call.  Here is a patch.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
2002-05-09 02:26:05 +00:00
Kurt Zeilenga
15e6a98bba Patch: Non-unique msgid for abandon in back-<shell,tcl> (ITS#1793)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Here is a patch which does what I described.  Of course, someone has
to decide if that is the right solution:-)
- Add an "opid:" line to the input to back-shell commands.
- Add an "abandonid: <opid> line to back-shell/abandon input.
- Replace message id with opid in back-tcl arguments.
- Add an abandonid = <opid> argument to back-tcl/abandon.
An opid (operation ID) is a "connection ID/message ID" string.  I
would have liked to use another name to avoid confusion with struct
slap_op->o_opid, but I could not think of another apt word.

This also fixes ITS#1784 and ITS#1792.  Since calling conventions
changed anyway, I fixed back-shell by adding abandonid: and making
opid: always be the ID of the current operation.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.
2002-05-09 02:11:39 +00:00
Howard Chu
da36670ea3 Don't use slap_empty_bv in structures that are expected to be free'able. 2002-05-08 23:16:17 +00:00
Howard Chu
9ba9ac4d9e Fix dnParent: must always return a pointer relative to the input pointer. 2002-05-08 23:04:11 +00:00
Howard Chu
fbe4785c5a Delete unused CANON_BUF_SIZE #define 2002-05-07 23:29:19 +00:00
Howard Chu
6f47e13147 Cyrus 2 support now requires Cyrus 2.1.3. Adds support for in-directory
SASL secrets. (Only works with plaintext userpassword tho.)
2002-05-07 23:08:23 +00:00
Howard Chu
3831d98237 Turn these functions on again. Need backend_attribute for SASLauthz stuff.
Fix to work with NULL op.
2002-05-07 22:35:01 +00:00
Howard Chu
a067d64c3a Fixes for slap_sasl_regexp parsing and normalization 2002-05-07 18:46:32 +00:00
Howard Chu
56f1355968 Added comment for future reference re: in-directory secrets 2002-05-07 02:17:34 +00:00
Howard Chu
a039bd97ea ITS#1803, bogus free() of lber-private memory. 2002-05-06 16:51:00 +00:00
Pierangelo Masarati
bffa43e743 fix formats 2002-05-04 11:07:28 +00:00
Pierangelo Masarati
b0d1a52975 remove unused variables 2002-05-04 11:07:04 +00:00
Howard Chu
55cefef7ee ITS#1797 err used unit'd in Debug statement. (removed) 2002-05-04 10:50:24 +00:00
Howard Chu
ef678b179c ITS#1795 authid is uninit'd if tls_get_cert fails 2002-05-04 01:28:56 +00:00
Howard Chu
846a5832bb Set tls_opt_require_cert to default to NEVER. libldap defaults to DEMAND
due to client needs, we change it back here.
2002-05-04 00:07:12 +00:00
Kurt Zeilenga
9d39e1e672 fix uninitialized counter in matched values 2002-05-03 19:00:52 +00:00
Howard Chu
a352bcaa16 Fix DN freeing in BDB_HIER case. (BDB_HIER is still broken, seems to have
a bad interaction with the entry cache.)
2002-05-03 14:47:29 +00:00
Howard Chu
203c410243 Fix dependency typo from 1.99 2002-05-03 14:42:14 +00:00
Howard Chu
640bc864fa Use specific msg id instead of ANY to retrieve search results 2002-05-03 14:23:55 +00:00
Pierangelo Masarati
033631f30a s/LDAP_UNWILLING_TO_PERFORM/LDAP_ADMINLIMIT_EXCEEDED/ when search candidates exceed unckecked limit 2002-05-03 10:27:37 +00:00
Kurt Zeilenga
8c152396b9 Matched Values implementation (ITS#1776) based upon submission
form Mikhail Sahalaev <M.Sahalayev@pgr.salford.ac.uk>.
Further work needed:
	add testxxx-matchedvalues
	rework ldapsearch(1) portion of patch to generalize use of options
---
Copyright 2001, Mikhail Sahalaev, All rights reserved.
This software is not subject to any license of University Of
Salford.

Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice
is preserved.
2002-05-02 18:56:56 +00:00
Pierangelo Masarati
b9d74aba5f broken berval after successful rewrite 2002-05-02 11:42:11 +00:00
Pierangelo Masarati
2ca323d2b5 Fixes ITS#1786: dynamically growing number of tokens in config line
for both slapd and slurpd

Copyright 2002, John Morrissey (jwm at horde dot net), All rights reserved.
This is free software; you can redistribute and use it under the same terms
as OpenLDAP itself.

Applied with changes
2002-05-02 08:48:14 +00:00
Howard Chu
b3d0ab87aa More cleanups for suffixmassage DNs 2002-05-01 19:05:09 +00:00
Howard Chu
7fae7fe155 Changed be_[n]suffix, be_[n]suffixAlias to BerVarray. No more bvec's anywhere. 2002-05-01 18:50:14 +00:00
Kurt Zeilenga
5b06af70bb Patch: Perl backend sends bind result twice (ITS#1783)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
            ================

perl_back_bind() should not send LDAP_SUCCESS, the frontend does that.
Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-05-01 18:10:14 +00:00
Pierangelo Masarati
c030dbfefd massage dn-valued attributes also when compiled without --enable-rewrite 2002-05-01 17:53:32 +00:00
Pierangelo Masarati
c1edf76e20 use BerVarray for suffix_massaging stuff 2002-05-01 17:45:03 +00:00
Pierangelo Masarati
1aa96af216 second round at ITS#1749 2002-05-01 16:38:30 +00:00
Pierangelo Masarati
6feec86e5d - trim check for real naming context already defined as suffix
- improve automatic massaging (prettify once)
- add (optimistic) automatic filter massaging
- cleanup of massaging stuff
2002-05-01 11:41:57 +00:00
Howard Chu
48fb754cc0 Added RFC 2459 PKCS9 emailAddress 2002-05-01 06:34:49 +00:00
Kurt Zeilenga
af02eee0d5 Reworking backend_check_restrictions for extensions
Should resolve ITS#1781.
2002-05-01 01:04:57 +00:00
Howard Chu
0f966d2fdb Changed ldap_pvt_tls_get_my_dn and ldap_pvt_tls_get_peer_dn to store result
in dn parameter and return a result code.

Changed dnX509peerNormalize as above. Added debug message on failure to
retrieve client DN.
2002-04-30 13:52:49 +00:00
Pierangelo Masarati
d019bff7b8 First commit of Hallvard's backend documentation effort
Backend documentation patch, version 1

================
Most of this text is taken from OpenLDAP.  The work of rewriting it
to manual pages is done by by Hallvard B. Furuseth and placed into
the public domain.  This software is not subject to any license of
the University of Oslo.
================

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-29 20:24:29 +00:00
Pierangelo Masarati
6b8828ed28 handle trivial cases 2002-04-29 19:14:42 +00:00
Jong Hyuk Choi
5291b41336 pointer initialization 2002-04-29 16:42:41 +00:00
Pierangelo Masarati
d3058532c9 honor limits if below soft limit 2002-04-29 10:12:50 +00:00
Howard Chu
cef9fcf78b Fix check for "anonymous" in sasl_getdn 2002-04-27 03:44:23 +00:00
Julius Enarusai
ed8f299245 ITS#1730: Misc typos in NEW_LOGGING code from Hallvard 2002-04-25 22:12:44 +00:00
Pierangelo Masarati
d2ee0b1758 fix off-by-one bug; use s/sprintf/snprintf/ 2002-04-25 19:23:37 +00:00
Howard Chu
43167d0fa6 Fix ITS#1774, BDB keys need ulen and flags to be initialized because BDB
tries to retrieve both the key and the data.
2002-04-25 05:16:15 +00:00
Howard Chu
c7262c7599 Added rebind-as-user option; saves bind credentials and sets a rebind_proc
to allow chasing referrals using the same user's credentials.
2002-04-25 02:05:34 +00:00
Kurt Zeilenga
3e3911247b Remove lint. 2002-04-22 23:03:33 +00:00
Kurt Zeilenga
0ca5d06f77 Re: PRIVATE: Patch: Passwords (ITS#1740)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
2002-04-22 17:31:16 +00:00
Jong Hyuk Choi
60b1ee1ba9 Patch for ITS# 1643 2002-04-19 21:41:32 +00:00
Howard Chu
8c917b8d68 Put dnX509 normalizers behind #ifdef HAVE_TLS 2002-04-19 01:25:15 +00:00
Kurt Zeilenga
96eda541e9 Blind commit:
Re: Untested patch: back-tcl used wrong types  (ITS#1719)

			================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

> I turned it into an automatic variable.

...and used a variable-length array.  That's a gcc extension, it is not
in ANSI C89.  (It is in C99 though.)  You seem to be compiling without
-pedantic:-)  Anyway, here is a patch to turn it back into ch_malloc(),
plus some README fixes
2002-04-18 19:28:26 +00:00
Howard Chu
0aa7c83a0e Fix memory leak in previous commit 2002-04-18 15:55:05 +00:00
Howard Chu
8a5423ea8d deleted sasl_external_x509dn_convert; X509 DNs are always converted to
normalized LDAP DNs now.

Changed dnDCEnormalize to dnX509normalize, added dnX509peerNormalize,
based on new ldap_X509dn2bv() etc.
2002-04-18 12:26:36 +00:00
Howard Chu
80f67ef11e Fix slap_bv2ad initializing with wrong bv_len 2002-04-18 12:21:33 +00:00
Howard Chu
b3c7c9e3ce Delete more unused code, no need to fetch REALM in slap_sasl_bind 2002-04-17 19:47:34 +00:00
Kurt Zeilenga
7ee5d2612b Fix ssf declaration 2002-04-17 17:56:30 +00:00
Kurt Zeilenga
84f4acf124 NEW_LOGGING bugs (ITS#1730)
Here a patch for another:  A spurious `"' in back-ldbm.
From Hallvard.
2002-04-17 17:54:52 +00:00
Howard Chu
1dea5905c6 More SASL DN simplification. No more "dn:" prefix used anywhere internally. 2002-04-17 07:56:46 +00:00
Julius Enarusai
98f3c3d43b Added LDAP_LOG Messages 2002-04-16 20:11:09 +00:00
Julius Enarusai
4ab3ce1651 Added LDAP_LOG Messages 2002-04-16 19:23:49 +00:00
Jong Hyuk Choi
b7f0983efa Hallvard B. Furuseth's patch for cache lock and mutex 2002-04-16 14:03:13 +00:00
Howard Chu
1bbd51da77 ITS#1712, rewritten dn_openssl2ldap(). Added dnDCEnormalize(), used by
dn_openssl2ldap() and sasl_external_x509dn_convert. Fixed realm handling
for foreign Kerberos realms embedded in usernames.
2002-04-16 08:46:25 +00:00
Luke Howard
03679b7ce5 correct sponsor name 2002-04-16 05:36:22 +00:00
Howard Chu
ababc07479 Add "nentries" to send_search_result() Statslog message. Suggested
by ITS#1360.
2002-04-16 04:58:41 +00:00
Luke Howard
dda2e4cee0 ITS#1646 2002-04-16 04:25:44 +00:00
Luke Howard
064319ae4e ITS#1659 - forgot to define n_a 2002-04-16 04:04:40 +00:00
Luke Howard
c517c23853 ITS#1659: s/na/n_a/ 2002-04-16 03:59:22 +00:00
Luke Howard
a045fc60a5 ITS#1729, #1659 2002-04-16 03:58:21 +00:00
Luke Howard
d2585491a0 ITS#1729 2002-04-16 03:56:23 +00:00
Luke Howard
9db008f08f ITS#1676 2002-04-16 03:51:51 +00:00
Luke Howard
7127e0887c ITS#1659 2002-04-16 03:47:39 +00:00
Kurt Zeilenga
8354160f8b Patch: aclparse.c bugs (ITS#1752)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Bug fixes:
- acl_regex_normalized_dn(pattern):
  * used pattern->bv_len even though it claimed not to,
  * would walk past the end of strings that ended (incorrectly)
    with a single '\'.
- style=regex checked for "^.*$$" twice but not for "^.*$".
- the code did not notice if dnNormalize2() failed, and would
  (at least in one case) treat a bad DN as '*'.
Some cleanup:
- changed regtest() to return void, since the return value was unused.
- changed acl_regex_normalized_dn() to take a string input argument
  instead of a half-filled berval, it looks saner that way.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-15 20:44:05 +00:00
Kurt Zeilenga
709ce4fa6c Re: Patch: ctype functions require 'unsigned char' args (ITS#1678)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Here are fixes for more places where the argument to ctype.h functions
should be in the range of `unsigned char'.

Explanation of the last patch (to schema_init.c:bvcasechr()):
TOLOWER() and TOUPPER() return values in the range of `unsigned char',
but bvcasechr() then compares those values with a plain `char'.  So I
convert the return values from TOLOWER()/TOUPPER() to `char' first.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-15 20:42:42 +00:00
Julius Enarusai
15fffedad7 Added LDAP_LOG Messages 2002-04-15 20:40:15 +00:00
Julius Enarusai
a1b4f71443 Added LDAP_LOG Messages 2002-04-15 20:28:16 +00:00
Julius Enarusai
7d162b6806 Added LDAP_LOG Messages 2002-04-15 20:18:47 +00:00
Julius Enarusai
714ec82ca0 Added LDAP_LOG Messages 2002-04-15 20:05:06 +00:00
Julius Enarusai
92d24de6e0 Added LDAP_LOG Messages 2002-04-15 19:37:49 +00:00
Julius Enarusai
ef4fe3fc4b Added LDAP_LOG Messages 2002-04-15 19:16:32 +00:00
Julius Enarusai
34ef718be8 Added LDAP_LOG Messages 2002-04-15 18:59:20 +00:00
Kurt Zeilenga
02e8527248 Patch: Escape character troubles (ITS#1753)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

maildap could address buf[-1] if len was < 2.

REWRITE_SUBMATCH_ESCAPE is '%', not '\'.

librewrite and saslautz could walk past the end of a string which
ended with an escape character.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.
2002-04-15 18:29:39 +00:00
Julius Enarusai
c7d183a19b Added LDAP_LOG messages 2002-04-15 17:57:44 +00:00
Pierangelo Masarati
a9b521cef4 add '-t' switch for clean config check; cleanup usage() messages 2002-04-15 17:32:08 +00:00
Kurt Zeilenga
ab3b125d1e Fix include order 2002-04-15 16:45:02 +00:00
Jong Hyuk Choi
efa7b93b23 concurrent cache access: separation of cache lock (reader/writer) and lru lock (mutex) 2002-04-15 16:40:04 +00:00
Howard Chu
66602e8faa Fix name canonicalization and authorization for Cyrus SASL 2.x 2002-04-14 04:27:46 +00:00
Howard Chu
a73ffbe3cd Previous commit included undesired changes. 2002-04-14 04:15:17 +00:00
Howard Chu
9b958147f8 Fix previous commit, == instead of != 2002-04-13 17:27:02 +00:00
Howard Chu
bf6fccd7bb ITS#1740 2002-04-13 10:56:16 +00:00
Jong Hyuk Choi
737aee17b0 fix: changing bdb_cache_return_entry_w() to bdb_cache_return_entry_r() 2002-04-11 23:17:36 +00:00
Howard Chu
17433a8412 Fix ITS#1722 - IPv4 addresses also need to be massaged for sasl_server_new. 2002-04-11 10:04:29 +00:00
Howard Chu
1dcbb23f5b ITS#1727 return allids on unknown filters to allow extended filtering 2002-04-11 08:59:30 +00:00
Howard Chu
170de200f8 ITS#1734 return error on bad config file 2002-04-11 08:51:35 +00:00
Howard Chu
d4465e376f ITS#1732 signed/unsigned integers 2002-04-11 08:46:34 +00:00
Howard Chu
98df4006b1 ITS#1733 eliminate o_abandonmutex 2002-04-11 08:08:42 +00:00
Howard Chu
efecf4e121 ITS#1733 eliminate o_abandonmutex 2002-04-11 08:03:40 +00:00
Howard Chu
0825e12b42 ITS#1570 - avoid overflowing array when dups are present in IDLs 2002-04-11 08:01:56 +00:00
Howard Chu
5c4a924f81 ITS#1735 unused conn.c_uthc_backend, include ldap_pvt.h 2002-04-11 07:42:57 +00:00
Howard Chu
98e3499b05 ITS#1736 slapd_shutdown can be unsigned 2002-04-11 07:28:30 +00:00
Howard Chu
14026284d0 ITS#1613, call ldap_pvt_tls_init after config file is read. ldap.conf doesn't
get read until much later, too late for TLS_RANDFILE to be useful.
2002-04-11 07:04:12 +00:00
Julius Enarusai
1649a3f832 Added/Updated LDAP_LOG messages 2002-04-10 22:17:09 +00:00
Julius Enarusai
0922553da2 Added/Updated LDAP_LOG messages 2002-04-10 22:10:22 +00:00
Kurt Zeilenga
63c9dd8280 SLAP_OP_LAST dependent code needs to be behind SLAP_MONITOR 2002-04-09 23:54:45 +00:00
Howard Chu
f516e34918 ITS#1681 - detect bad filter in slap_parseURI() - from Hallvard Furuseth 2002-04-09 10:41:15 +00:00
Pierangelo Masarati
c22f10f4ca don't count operations per request if back-monitor is not built 2002-04-08 19:13:13 +00:00
Pierangelo Masarati
b772987712 ... and log initiated/completed operations divided per request 2002-04-08 18:41:47 +00:00
Pierangelo Masarati
51e33154b3 count initiated/completed operations divided per request 2002-04-08 18:41:15 +00:00
Pierangelo Masarati
4a2b9b2195 ITS#1730 2002-04-08 18:39:23 +00:00
Pierangelo Masarati
4b9fa66188 use BVC() macro (changed in BER_BVC) to initialize constant bervals 2002-04-08 18:37:37 +00:00
Pierangelo Masarati
4ca97f4118 uniform temporary buf sizes; use automatic buffers instead of heap 2002-04-08 11:09:34 +00:00
Pierangelo Masarati
4a8ab5dbf2 Mostly based on patches provided by Hallvard B. Furuseth
ITS#1677 - cast away const warnings
ITS#1678 - unsigned char args to ctype funcs
ITS#1682 - don't redefine ldap_debug
ITS#1683 - uninitialized vars
ITS#1703 - ldo_debug initialization
ITS#1705 - unsigned testing
ITS#1706 - socklen_t args
ITS#1719 - back-tcl update (other cleanups/fixes/improvements; yet untested)
ITS#1724 - integerNormalize/integerFilter/integerIndexer bugs
ITS#1725 - libdes not required

Implement back-null (/dev/null style backend)
Cleanup some misc warnings ("%lu" format, unused/uninitialized vars,
        ambiguous operator precedence)

Kurt, please regenerate configure
2002-04-08 09:43:22 +00:00
Julius Enarusai
f57d33f636 Added LDAP_LOG messages 2002-04-05 18:38:59 +00:00
Howard Chu
ca4cbc4a49 ITS#1709 j was logged uninitialized 2002-04-05 06:55:25 +00:00
Howard Chu
11bbd076a8 ITS#1711 txn was uninitialized 2002-04-05 06:54:39 +00:00
Howard Chu
5c70106657 ITS#1708 ldap_pvt_tls_sb_ctx() et al 2002-04-05 06:48:03 +00:00
Howard Chu
70d4ef9a85 ITS#1714 dn->bv_val malloc len+1 2002-04-05 06:34:15 +00:00
Howard Chu
ba5a584729 ITS#1716 is_entry_subentr/ies/y/ 2002-04-05 06:28:52 +00:00
Howard Chu
380806eebe ITS#1726, always use bdb_db_hash(). 2002-04-05 05:59:04 +00:00
Howard Chu
1353ded30c Change slap_parseURI to use ldap_parse_url. Other struct berval changes. 2002-04-05 05:37:01 +00:00
Stig Venaas
891f987928 Changed to use lower case for case folding 2002-04-04 12:50:46 +00:00
Pierangelo Masarati
dd4f10de57 use ber_bvcmp where appropriate 2002-04-03 15:43:41 +00:00
Pierangelo Masarati
82d1c77722 missing description in current cunnections number 2002-04-03 15:42:54 +00:00
Pierangelo Masarati
440637dde7 various acl improvements/cleanups/speedups (need to be documented, though) 2002-04-03 15:42:19 +00:00
Pierangelo Masarati
f4dba925ff add a switch that enables/disables reverse lookups if configured with rlookups 2002-04-03 15:40:49 +00:00
Kurt Zeilenga
b0b8546f05 Patch: More format bugs (ITS#1702)
================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
2002-04-02 18:56:26 +00:00
Kurt Zeilenga
26b99bc35d ITS#1701. Fix ber_scanf() return tag handling.
Based upon patch submitted by Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>.
2002-04-02 18:40:04 +00:00
Pierangelo Masarati
32c2995ecc fix last part of ITS#1710 (commented code, though) 2002-04-02 14:38:57 +00:00
Pierangelo Masarati
068c73b01f appropriately detect the required conn 2002-04-02 14:25:01 +00:00
Pierangelo Masarati
6c589f2552 don't loop any more if connid is found :) 2002-04-02 13:44:30 +00:00
Pierangelo Masarati
090ef02589 partial fulfilment of ITS#1710 2002-04-02 12:27:06 +00:00
Pierangelo Masarati
49ab777bbb minor improvement 2002-04-02 11:51:05 +00:00
Pierangelo Masarati
7b2f5f0da7 use ber_bvcmp() whenever possible 2002-04-02 11:41:56 +00:00
Pierangelo Masarati
e847d6fdf2 fix ITS#1704 2002-04-02 11:16:00 +00:00
Pierangelo Masarati
ab6ad34692 the logic of this check was completely reversed; in case '*' is used, on't test the regula expression 2002-04-02 08:18:30 +00:00
Pierangelo Masarati
1658aa0893 fix counting twice the substitution length (caused berval to have wrong length, rejected by subsequent dnNormalize) 2002-03-30 15:44:30 +00:00
Pierangelo Masarati
9bf3ccd0bf allow attribute exclusion list in selective replica 2002-03-30 08:52:20 +00:00
Pierangelo Masarati
bcc486df2d initialize temporaries 2002-03-30 08:47:13 +00:00
Pierangelo Masarati
af3a65b924 do not print -1 as %lu 2002-03-30 08:45:21 +00:00
Pierangelo Masarati
031991e0b4 do not return a pointer to an automatic variable in case of success 2002-03-30 08:44:29 +00:00
Kurt Zeilenga
f9766f684b System loading can now be done in one place... 2002-03-30 01:28:34 +00:00
Kurt Zeilenga
e7523b1496 add si_syn_octetString to keep syntax load checks in one place. 2002-03-30 01:07:20 +00:00
Kurt Zeilenga
111b464642 move ldap_int_put_filter to ldap_pvt_put_filter
and other cleanup
2002-03-30 00:42:40 +00:00
Julius Enarusai
5f154f2e57 Added LDAP_LOG messages 2002-03-26 22:40:31 +00:00
Julius Enarusai
82cd035505 Added LDAP_LOG messages 2002-03-26 22:17:08 +00:00
Julius Enarusai
73fcfa6e59 Added LDAP_LOG messages to operational.c and fixed compile error in dn2id.c 2002-03-26 21:34:03 +00:00
Julius Enarusai
7b05699803 Added LDAP_LOG messages 2002-03-26 21:14:23 +00:00
Julius Enarusai
437bf1ba70 Added LDAP_LOG messages 2002-03-26 20:04:30 +00:00
Julius Enarusai
5f466ae128 Added LDAP_LOG messages 2002-03-26 18:52:36 +00:00
Julius Enarusai
bb38d574ac Added LDAP_LOG messages 2002-03-26 18:01:58 +00:00
Julius Enarusai
d881efa172 Added LDAP_LOG messages 2002-03-26 17:47:52 +00:00
Julius Enarusai
2027e7322a Added LDAP_LOG messages 2002-03-26 17:34:57 +00:00
Julius Enarusai
4d501cacd9 Added LDAP_LOG messages 2002-03-26 17:00:14 +00:00
Kurt Zeilenga
cf3f722c94 Now understand with Hallvard was commenting on in ITS#1669.
Removed "leading" comments and added a general caution statement.
This schema will be pulled from 2.1.
2002-03-25 17:13:11 +00:00
Kurt Zeilenga
9b26e48aa6 ITS#1674: integerOrderingMatch, integerFirstComponentMatch and then some. 2002-03-25 17:08:38 +00:00
Kurt Zeilenga
aa18b7a52e ITS#1686: fix typo in usage 2002-03-25 16:30:06 +00:00
Howard Chu
f20a6a27b3 Fix ITS#1675, make sure search results are initialized 2002-03-25 11:52:39 +00:00
Kurt Zeilenga
6033aeb6cf Fixup a few schema definitions 2002-03-24 17:37:27 +00:00
Kurt Zeilenga
0be4d842bc Update control framework
Misc cleanup
NT updates
2002-03-24 02:17:21 +00:00
Kurt Zeilenga
41138a8ca7 cleanlup 2002-03-24 02:15:17 +00:00
Kurt Zeilenga
4216f19ed1 cleanup 2002-03-24 02:14:00 +00:00
Pierangelo Masarati
49f324a1fa fix ITS#1671 and more 2002-03-23 16:53:44 +00:00
Pierangelo Masarati
724666c447 fix ITS#1667 2002-03-23 16:17:26 +00:00
Pierangelo Masarati
6174cb6529 improvement of permission handling of local sockets (ITS#1660, issue 2) 2002-03-23 16:07:19 +00:00
Pierangelo Masarati
fa654ae447 fix ITS#1660 (issue 1) 2002-03-23 16:06:22 +00:00
Pierangelo Masarati
50baa90139 port hasSubordinates handling to back-bdb 2002-03-23 11:04:09 +00:00
Howard Chu
f181388a5e Fix ITS#1655, don't retrieve sd until we've checked for valid c_sb. 2002-03-20 23:47:08 +00:00
Howard Chu
6b0fb09e0d Fix ITS#1607, longstanding bug in group and dnattr acls, gave access
to anonymous connections.
2002-03-20 13:11:37 +00:00
Howard Chu
780d427fa6 In bdb_idl_fetch_key, the DB_MULTIPLE buffer must be a multiple of 1024
bytes in size.
2002-03-20 01:27:08 +00:00
Howard Chu
9a154f89b0 Rewrote bdb_idl_insert_key and bdb_idl_delete_key for BDB_IDL_MULTI,
parses range IDLs directly to correctly handle changes to the range
boundaries. (bdb_idl_insert_key used to call bdb_idl_fetch_key to
handle ranges; bdb_idl_delete_key never handled ranges before.)
2002-03-20 00:51:34 +00:00
Julius Enarusai
5af8610ba0 Added LDAP_LOG messages 2002-03-19 17:44:11 +00:00
Howard Chu
cc21d814b3 Use a single malloc'd block for all the temporary IDL storage in the
filter processing, to avoid runtime stack blowout. Also removes the
need for gigantic thread stacks.
2002-03-18 11:40:58 +00:00
Howard Chu
bad62d2167 Fix backend_attribute trying to reference a NULL be. Neither backend_group
nor backend_attribute need to worry about the noSubs parameter of
select_backend().
2002-03-18 08:59:02 +00:00
Howard Chu
35554dadf3 use ber_str2bv() instead of ch_strdup/strlen. 2002-03-18 08:57:59 +00:00
Howard Chu
a1063a041d Fix previous commit, lutil_passwd_scheme() returns boolean, not pointer. 2002-03-18 08:56:47 +00:00
Howard Chu
7e68108d4a Fix previous commit, missing semicolon 2002-03-18 08:55:21 +00:00
Kurt Zeilenga
9fead9d2ce fix compilation error 2002-03-17 23:39:45 +00:00
Julius Enarusai
a61d2b914d Added LDAP_LOG messages 2002-03-15 18:57:12 +00:00
Julius Enarusai
e89c8b4f63 Added/Modified LDAP_LOG messages to match the existing Debug messages 2002-03-15 17:50:28 +00:00
Julius Enarusai
d8413fac32 Added LDAP_LOG messages to match existing Debug messages 2002-03-15 17:21:06 +00:00
Julius Enarusai
35bc1bf43c Added LDAP_LOG messages to these files to match the existing Debug messages 2002-03-14 22:23:44 +00:00
Julius Enarusai
02412251f1 Added LDAP_LOG messages to the above files to match the existing Debug messages 2002-03-14 16:34:24 +00:00
Kurt Zeilenga
a1d757a038 Check components of extensible match filter sooner than later. 2002-03-12 23:07:07 +00:00
Kurt Zeilenga
dbfc18985a Align with back-ldbm version 2002-03-12 22:46:13 +00:00
Kurt Zeilenga
9eac390e2f Return inappropriate matching if the syntaxes don't line up for
extensible matching
2002-03-11 16:29:01 +00:00
Kurt Zeilenga
815e2ac717 Add a comment to the check which needs extending to support
new extensible matching rules.
2002-03-11 16:12:36 +00:00
Kurt Zeilenga
5ea0bf2f9b Use put/get filter to convert string to filter 2002-03-11 05:21:49 +00:00
Kurt Zeilenga
b56f7c7222 Add no-op mru_schema_info()...
Not sure how best to populate matchingRuleUses...
2002-03-11 03:06:34 +00:00
Kurt Zeilenga
2f7858044e ITS#1636 fix 2002-03-11 03:05:43 +00:00
Kurt Zeilenga
c02f448a16 Misc extensible match clean up. 2002-03-11 01:48:37 +00:00
Kurt Zeilenga
c9c3a68496 Deprecate filter_print in favor of filter2bv. 2002-03-10 17:41:14 +00:00
Kurt Zeilenga
902350f991 Fix up handling of extended operations with no request data 2002-03-10 17:40:22 +00:00
Pierangelo Masarati
a1b65bcdfe detect unavailable hash algorithms at startup 2002-03-09 11:02:32 +00:00
Howard Chu
f0a453dfca Fix ITS#1615 2002-03-07 20:23:48 +00:00
Julius Enarusai
08d0a48ac5 The following file fails compile when NEW_LOGGING is enabled. 2002-03-07 17:50:56 +00:00
Kurt Zeilenga
1880c23029 Replace get_filter generation of fstr with filter2bv(). 2002-03-07 03:13:11 +00:00
Kurt Zeilenga
a4635f3ada CLDAP fixes 2002-03-06 20:58:20 +00:00
Kurt Zeilenga
93a45a02aa Update handling of AND/OR indexing where element is undefined. 2002-03-04 22:32:33 +00:00
Kurt Zeilenga
d9c93faac8 Fix typo 2002-03-04 22:26:47 +00:00
Kurt Zeilenga
3d89f398a9 Fix callback initializer. 2002-03-04 21:28:46 +00:00
Pierangelo Masarati
914d703714 backout previous change; validation has been added to dnNormalize functions 2002-03-02 17:28:19 +00:00
Kurt Zeilenga
ad0858dea4 Add validation. 2002-03-02 17:05:29 +00:00
Pierangelo Masarati
9dee603fdf null length string is not allowed 2002-03-02 14:28:08 +00:00
Kurt Zeilenga
ef7883c028 Fix substring index error handling 2002-03-01 19:07:15 +00:00
Kurt Zeilenga
faa9956446 Validate filter and compare inputs 2002-03-01 18:52:45 +00:00
Kurt Zeilenga
a71cd15182 Add normalize_validate_normalize() to be use instead of value_normalize()
where value has not yet been validated.
2002-03-01 18:05:47 +00:00
Kurt Zeilenga
c0fdb1aaca Add a value_validate() function to be used by prior to value_normalize
calls as needed (compare/filters).
2002-03-01 17:36:22 +00:00
Stig Venaas
c476878fde Using new UTF8bv* all over, getting rid of UTF8normalize() and
UTF8normcmp().
2002-02-27 16:11:24 +00:00
Stig Venaas
94983da942 Added code for approximate matching in UTF8bvnormalize() and changed to use
this in approxMatch etc in schema_init.c
2002-02-26 18:38:40 +00:00
Kurt Zeilenga
5d347b6153 tool install should not be dependent on $(BUILD_LDBM) 2002-02-25 16:57:29 +00:00
Kurt Zeilenga
d50eb2e959 C translator portability changes (ITS#1609) 2002-02-23 23:47:37 +00:00
Kurt Zeilenga
cea1746182 Return proper result codes for usage errors 2002-02-21 19:29:32 +00:00
Kurt Zeilenga
75d97a43eb Fix bug in unused function 2002-02-21 19:28:49 +00:00
Pierangelo Masarati
2d1eb56725 #ifdef local time hack 2002-02-19 09:11:55 +00:00
Kurt Zeilenga
33516fa9eb #ifdef ACI/authpasswd schema 2002-02-18 20:06:50 +00:00
Kurt Zeilenga
348e489b35 #ifdef experimental controls 2002-02-18 19:48:27 +00:00
Howard Chu
f9902a32b4 Changed supportedFeatures to array of struct bervals 2002-02-15 16:33:44 +00:00
Howard Chu
81c3c311a8 Changed reqoid to struct berval 2002-02-15 16:27:31 +00:00
Howard Chu
a0bfd8b058 Add basic objectClass filtering to filtered replicas 2002-02-15 15:21:13 +00:00
Howard Chu
ce4466655e Fix ad_inlist typo on oc->required 2002-02-15 14:48:01 +00:00
Pierangelo Masarati
2aec424646 use memchr in ber_bvchr 2002-02-14 21:10:13 +00:00
Pierangelo Masarati
215448ac83 substrings match works with NULs in UTF8 strings 2002-02-14 18:55:38 +00:00
Pierangelo Masarati
55993dc66a don't free dangling pointers :( 2002-02-14 18:15:56 +00:00
Pierangelo Masarati
ef607e65d7 first round at replacing UTF8normalize with UTF8bvnormalize 2002-02-14 16:01:48 +00:00
Howard Chu
933f6a5fdd For ITS#1601, add ber_init2() using given buffer in-place instead of
allocating a copy.
2002-02-14 13:32:40 +00:00
Pierangelo Masarati
39891e4e5b make UTF8STringNormalize handle NUL 2002-02-13 21:25:57 +00:00
Pierangelo Masarati
6e88ea7108 fix dnValidate (leak and return SUCCESS) 2002-02-13 19:25:58 +00:00
Pierangelo Masarati
3cc674589d DNs may include NULs 2002-02-13 19:18:31 +00:00
Kurt Zeilenga
6ebe49f1b6 Limit the length of [R]DNs on input to 8192. A lower limit,
especially for anonymous clients, might be even more reasonable.
2002-02-13 18:11:52 +00:00
Kurt Zeilenga
ee6d1a4d40 Check for NULs in DNs. 2002-02-13 16:41:41 +00:00
Pierangelo Masarati
33d5f0f8f8 honor the ber_len field to allow to exploit ldap_bv2[r]dn to handle DNs embedded in longer strings ... 2002-02-13 12:09:36 +00:00
Pierangelo Masarati
a117c5eee7 use ldap_bv2[r]dn and turn ldap_str2[r]dn into wrappers 2002-02-13 11:46:33 +00:00
Pierangelo Masarati
959edd88c0 prepare for ldap_bv2dn() 2002-02-13 10:05:22 +00:00
Kurt Zeilenga
2a2d6cc93e Add embedded NUL checks, fix last commit 2002-02-13 09:26:25 +00:00
Kurt Zeilenga
7c962f3dd4 dnValidate needs to check for embedded NULs. 2002-02-13 09:20:07 +00:00
Kurt Zeilenga
275f3be363 Misc. DN fixes and cleanups, namely don't muck with AVA_BINARY values
Also, pass empty_bv when bv_val is NULL.
2002-02-13 06:35:27 +00:00
Kurt Zeilenga
b2d948f0e5 Quick (and expensive) fix to detect DNs with embedded NULs 2002-02-13 04:20:11 +00:00
Kurt Zeilenga
fcf835558e improve log message 2002-02-12 22:55:36 +00:00
Kurt Zeilenga
9b18295f4f Don't print unprintable keys 2002-02-12 19:29:27 +00:00
Kurt Zeilenga
d88f1757ef Fix pointer initialization bug 2002-02-12 19:18:39 +00:00