]> git.sur5r.net Git - openldap/log
openldap
13 years agoDynamic config for back-shell
Howard Chu [Fri, 4 Feb 2011 13:09:15 +0000 (13:09 +0000)]
Dynamic config for back-shell

13 years agoFix typo
Howard Chu [Fri, 4 Feb 2011 12:22:55 +0000 (12:22 +0000)]
Fix typo

13 years agoDynamic config for back-passwd
Howard Chu [Fri, 4 Feb 2011 12:22:17 +0000 (12:22 +0000)]
Dynamic config for back-passwd

13 years agoAdd overlay config stuff, handle overlay responses
Howard Chu [Fri, 4 Feb 2011 11:09:00 +0000 (11:09 +0000)]
Add overlay config stuff, handle overlay responses

13 years agoAdd overlay config stuff, handle overlay responses
Howard Chu [Fri, 4 Feb 2011 10:52:34 +0000 (10:52 +0000)]
Add overlay config stuff, handle overlay responses

13 years agouse (noncritical) whoami extop during SASL bind (ITS#6817)
Pierangelo Masarati [Thu, 3 Feb 2011 23:35:56 +0000 (23:35 +0000)]
use (noncritical) whoami extop during SASL bind (ITS#6817)

13 years agouse (noncritical) authzid control during SASL bind (ITS#6817)
Pierangelo Masarati [Thu, 3 Feb 2011 23:20:15 +0000 (23:20 +0000)]
use (noncritical) authzid control during SASL bind (ITS#6817)

13 years agoJust use back-sock OID arc for overlay
Howard Chu [Thu, 3 Feb 2011 21:54:11 +0000 (21:54 +0000)]
Just use back-sock OID arc for overlay

13 years agoResult as overlay is always ignored
Howard Chu [Thu, 3 Feb 2011 21:35:03 +0000 (21:35 +0000)]
Result as overlay is always ignored

13 years agoAs an overlay, always return SLAP_CB_CONTINUE
Howard Chu [Thu, 3 Feb 2011 21:34:45 +0000 (21:34 +0000)]
As an overlay, always return SLAP_CB_CONTINUE

13 years agoMore sock overlay stuff
Howard Chu [Thu, 3 Feb 2011 21:25:42 +0000 (21:25 +0000)]
More sock overlay stuff

13 years agoAdd response message for overlays
Howard Chu [Thu, 3 Feb 2011 21:24:26 +0000 (21:24 +0000)]
Add response message for overlays

13 years agoNote use as an overlay
Howard Chu [Thu, 3 Feb 2011 20:53:19 +0000 (20:53 +0000)]
Note use as an overlay

13 years agoMore for overlay use, add connid extension
Howard Chu [Thu, 3 Feb 2011 20:47:38 +0000 (20:47 +0000)]
More for overlay use, add connid extension

13 years agoAdd overlay wrapper, use for triggers etc.
Howard Chu [Thu, 3 Feb 2011 20:17:23 +0000 (20:17 +0000)]
Add overlay wrapper, use for triggers etc.

13 years agodo not set c_authz_backend unless needed (ITS#6824, thanks to Howard)
Pierangelo Masarati [Thu, 3 Feb 2011 20:04:56 +0000 (20:04 +0000)]
do not set c_authz_backend unless needed (ITS#6824, thanks to Howard)

13 years agoFix typo
Howard Chu [Thu, 3 Feb 2011 19:20:48 +0000 (19:20 +0000)]
Fix typo

13 years agoITS#6821 make sure objectclass is processed before other mods
Howard Chu [Thu, 3 Feb 2011 00:15:09 +0000 (00:15 +0000)]
ITS#6821 make sure objectclass is processed before other mods

13 years agoRevert last ITS#6532 commit, it is incomplete.
Hallvard Furuseth [Wed, 2 Feb 2011 23:28:42 +0000 (23:28 +0000)]
Revert last ITS#6532 commit, it is incomplete.

Needs better MUTATION support in filter.c first.

13 years agoMore ITS#6532: Support (:UUIDOrderingMatch:=foo)
Hallvard Furuseth [Wed, 2 Feb 2011 23:15:17 +0000 (23:15 +0000)]
More ITS#6532: Support (:UUIDOrderingMatch:=foo)

13 years agoFix last ldapwhoami commit.
Hallvard Furuseth [Wed, 2 Feb 2011 22:48:12 +0000 (22:48 +0000)]
Fix last ldapwhoami commit.

Ensure message is initialized before freeing it.

13 years agoMore ITS#6532: Support (:csnOrderingMatch:=foo)
Hallvard Furuseth [Wed, 2 Feb 2011 22:24:39 +0000 (22:24 +0000)]
More ITS#6532: Support (:csnOrderingMatch:=foo)

13 years agoprefix undef attrs with undef: (ITS#6823)
Pierangelo Masarati [Wed, 2 Feb 2011 21:45:34 +0000 (21:45 +0000)]
prefix undef attrs with undef: (ITS#6823)

13 years agoITS#6711 minimal tweaks for aclbind/idassertbind for privileged connection
Howard Chu [Wed, 2 Feb 2011 20:56:58 +0000 (20:56 +0000)]
ITS#6711 minimal tweaks for aclbind/idassertbind for privileged connection
in dobind_int().

13 years agoCleanup priv/idassert choice: check for configured bind method, not authcDN
Howard Chu [Wed, 2 Feb 2011 20:32:48 +0000 (20:32 +0000)]
Cleanup priv/idassert choice: check for configured bind method, not authcDN

13 years agoITS#6711 use idassert TLS conf for priv connection if aclbind not set
Howard Chu [Wed, 2 Feb 2011 20:06:28 +0000 (20:06 +0000)]
ITS#6711 use idassert TLS conf for priv connection if aclbind not set

13 years agoITS#6822 fix back-config's default ACL when overlays are in place
Ralf Haferkamp [Wed, 2 Feb 2011 19:56:08 +0000 (19:56 +0000)]
ITS#6822 fix back-config's default ACL when overlays are in place

13 years agoignore attrs in search request that do not conform to RFC 4511 4.5.1.8. or standard...
Pierangelo Masarati [Tue, 1 Feb 2011 23:13:58 +0000 (23:13 +0000)]
ignore attrs in search request that do not conform to RFC 4511 4.5.1.8. or standard track extensions (ITS#6819)

13 years agomake sure data is reset
Pierangelo Masarati [Tue, 1 Feb 2011 22:58:41 +0000 (22:58 +0000)]
make sure data is reset

13 years agoUse larger key buffer
Howard Chu [Tue, 1 Feb 2011 21:24:38 +0000 (21:24 +0000)]
Use larger key buffer

13 years agoITS#6806 fix uninit'd NA.txn
Howard Chu [Tue, 1 Feb 2011 21:21:31 +0000 (21:21 +0000)]
ITS#6806 fix uninit'd NA.txn

13 years agodo not return void (ITS#6820)
Pierangelo Masarati [Tue, 1 Feb 2011 17:49:27 +0000 (17:49 +0000)]
do not return void (ITS#6820)

13 years agoignore empty attrs in search requests (ITS#6819; see also ITS#6652)
Pierangelo Masarati [Tue, 1 Feb 2011 13:09:11 +0000 (13:09 +0000)]
ignore empty attrs in search requests (ITS#6819; see also ITS#6652)

13 years agoITS#6755 pagedresults loop was accessing a closed FILE*.
Howard Chu [Tue, 1 Feb 2011 05:24:53 +0000 (05:24 +0000)]
ITS#6755 pagedresults loop was accessing a closed FILE*.

13 years agofirst cut at SASL bind issues in idassert (related to ITS#6817)
Pierangelo Masarati [Mon, 31 Jan 2011 22:07:04 +0000 (22:07 +0000)]
first cut at SASL bind issues in idassert (related to ITS#6817)

13 years agoUpdate recommended BDB versions
Quanah Gibson-Mount [Mon, 31 Jan 2011 22:06:11 +0000 (22:06 +0000)]
Update recommended BDB versions

13 years agogive the caller a chance to use undefined filters (more about ITS#6814)
Pierangelo Masarati [Mon, 31 Jan 2011 21:53:56 +0000 (21:53 +0000)]
give the caller a chance to use undefined filters (more about ITS#6814)

13 years agoITS#6816 cleanup
Howard Chu [Mon, 31 Jan 2011 21:45:24 +0000 (21:45 +0000)]
ITS#6816 cleanup

13 years agodo not cause f_result to override undefined ava (more about ITS#6814; forced commit)
Pierangelo Masarati [Mon, 31 Jan 2011 21:34:41 +0000 (21:34 +0000)]
do not cause f_result to override undefined ava (more about ITS#6814; forced commit)

13 years agodo not cause f_result to override undefined ava
Pierangelo Masarati [Mon, 31 Jan 2011 21:33:54 +0000 (21:33 +0000)]
do not cause f_result to override undefined ava

13 years agoITS#6816 cleanup
Howard Chu [Mon, 31 Jan 2011 21:27:17 +0000 (21:27 +0000)]
ITS#6816 cleanup

13 years agodo not denormalize attrs without equality rule (ITS#6818)
Pierangelo Masarati [Mon, 31 Jan 2011 21:20:33 +0000 (21:20 +0000)]
do not denormalize attrs without equality rule (ITS#6818)

13 years agoITS#6816 MozNSS doc additions from Rich Megginson @ Red Hat. Needs cleanup.
Howard Chu [Mon, 31 Jan 2011 21:13:11 +0000 (21:13 +0000)]
ITS#6816 MozNSS doc additions from Rich Megginson @ Red Hat. Needs cleanup.

13 years agoRe-fix ITS#6793 (back-ldap bad free of matchedDN).
Hallvard Furuseth [Mon, 31 Jan 2011 05:30:05 +0000 (05:30 +0000)]
Re-fix ITS#6793 (back-ldap bad free of matchedDN).

Previous fix opened for a ITS#6758-style double free if the
caller was broken.  Using REP_MATCHED_MUSTBEFREED is more robust.

13 years agoFix agi_entry race conditions
Howard Chu [Sat, 29 Jan 2011 21:42:39 +0000 (21:42 +0000)]
Fix agi_entry race conditions

13 years ago#6684 cleanup unneeded agi_mutex locks
Howard Chu [Sat, 29 Jan 2011 21:23:22 +0000 (21:23 +0000)]
#6684 cleanup unneeded agi_mutex locks

13 years ago#6684 cleanup, acknowledgements
Howard Chu [Sat, 29 Jan 2011 21:15:19 +0000 (21:15 +0000)]
#6684 cleanup, acknowledgements

13 years agoITS#6684 preliminary from Norbert Pueschel and Christian Manal
Howard Chu [Sat, 29 Jan 2011 21:12:51 +0000 (21:12 +0000)]
ITS#6684 preliminary from Norbert Pueschel and Christian Manal

13 years agoITS#6811, more for #6802 PKCS11 fork() handling from Rich Megginson @ Red Hat
Howard Chu [Sat, 29 Jan 2011 20:40:20 +0000 (20:40 +0000)]
ITS#6811, more for #6802 PKCS11 fork() handling from Rich Megginson @ Red Hat

13 years agoalso handle RFC 4526 t-f filters in back-ldap (more about ITS#6814)
Pierangelo Masarati [Sat, 29 Jan 2011 14:23:53 +0000 (14:23 +0000)]
also handle RFC 4526 t-f filters in back-ldap (more about ITS#6814)

13 years agoalso handle RFC 4526 t-f filters in back-ldap (more about ITS#6814)
Pierangelo Masarati [Sat, 29 Jan 2011 14:16:02 +0000 (14:16 +0000)]
also handle RFC 4526 t-f filters in back-ldap (more about ITS#6814)

13 years agohandle undefined filters in back-ldap (more about ITS#6814)
Pierangelo Masarati [Sat, 29 Jan 2011 12:29:20 +0000 (12:29 +0000)]
handle undefined filters in back-ldap (more about ITS#6814)

13 years agodo not hijack loop counter (ITS#6813; blind fix)
Pierangelo Masarati [Sat, 29 Jan 2011 11:05:08 +0000 (11:05 +0000)]
do not hijack loop counter (ITS#6813; blind fix)

13 years agohandle undefined objectClass values in search filters (ITS#6814)
Pierangelo Masarati [Sat, 29 Jan 2011 10:30:17 +0000 (10:30 +0000)]
handle undefined objectClass values in search filters (ITS#6814)

13 years agoITS#6812 cleanup error codes
Howard Chu [Sat, 29 Jan 2011 03:30:22 +0000 (03:30 +0000)]
ITS#6812 cleanup error codes

13 years agoMore for ITS#6807, make sure to check_syncprov() after initial startup
Howard Chu [Fri, 28 Jan 2011 22:01:18 +0000 (22:01 +0000)]
More for ITS#6807, make sure to check_syncprov() after initial startup

13 years agocleanup: Rename rs_ensure_entry_modifiable().
Hallvard Furuseth [Fri, 28 Jan 2011 16:33:55 +0000 (16:33 +0000)]
cleanup: Rename rs_ensure_entry_modifiable().

The name rs_entry2modifiable() is more reasonably sized.
For now, leave behind a macro rs_ensure_entry_modifiable in proto-slap.h.

13 years agoFix a couple FIXMEs: use ldif_put to allow for binary values in
Howard Chu [Fri, 28 Jan 2011 09:40:52 +0000 (09:40 +0000)]
Fix a couple FIXMEs: use ldif_put to allow for binary values in
compare and modify. Note that line wrapping is disabled; presumably
existing code expects the compare argument to use only a single line.
The manpage should be updated to note whether standard LDIF with
default line wrapping is expected or not. (Add uses default width already.)

13 years agoITS#6809 add missing newline
Howard Chu [Fri, 28 Jan 2011 09:11:18 +0000 (09:11 +0000)]
ITS#6809 add missing newline

13 years agocleanup monitor unregister (ITS#6808)
Pierangelo Masarati [Thu, 27 Jan 2011 22:27:22 +0000 (22:27 +0000)]
cleanup monitor unregister (ITS#6808)

13 years agoCleanup version checking
Howard Chu [Thu, 27 Jan 2011 21:43:22 +0000 (21:43 +0000)]
Cleanup version checking

13 years agoITS#6802 restart modules for fork() - from Rich Megginson @ Red Hat
Howard Chu [Thu, 27 Jan 2011 21:38:40 +0000 (21:38 +0000)]
ITS#6802 restart modules for fork() - from Rich Megginson @ Red Hat

13 years agoITS#6791 fix cert usage types/values - from Rich Megginson @ Red Hat
Howard Chu [Thu, 27 Jan 2011 21:34:35 +0000 (21:34 +0000)]
ITS#6791 fix cert usage types/values - from Rich Megginson @ Red Hat

13 years agoITS#6790 fix default cipher suites - from Rich Megginson @ Red Hat
Howard Chu [Thu, 27 Jan 2011 21:32:39 +0000 (21:32 +0000)]
ITS#6790 fix default cipher suites - from Rich Megginson @ Red Hat

13 years agoITS#6807 always use complete cookie on refresh requests
Howard Chu [Thu, 27 Jan 2011 20:50:08 +0000 (20:50 +0000)]
ITS#6807 always use complete cookie on refresh requests

13 years agoITS#6804 fix ACL_RECORD_VALUE_STATE macro, was skipping past the ACL
Howard Chu [Thu, 27 Jan 2011 00:50:26 +0000 (00:50 +0000)]
ITS#6804 fix ACL_RECORD_VALUE_STATE macro, was skipping past the ACL
instead of resuming from the intended one

13 years agoadd support for subtree-include (ITS#6801); improve support for subtree-exclude
Pierangelo Masarati [Sat, 22 Jan 2011 15:47:37 +0000 (15:47 +0000)]
add support for subtree-include (ITS#6801); improve support for subtree-exclude

13 years agoITS#6794 Fixed slapadd -q for glued databases
Ralf Haferkamp [Fri, 21 Jan 2011 17:11:21 +0000 (17:11 +0000)]
ITS#6794 Fixed slapadd -q for glued databases

Cleanup memory/threads more thoroughly in bdb_tool_entry_close() so that a
subsequent bdb_tool_entry_open() (e.g. for a glued database) can setup
things correctly again.

13 years agoITS#6794 Testcase for multi-threaded slapadd -q
Ralf Haferkamp [Fri, 21 Jan 2011 17:10:12 +0000 (17:10 +0000)]
ITS#6794 Testcase for multi-threaded slapadd -q

13 years agoITS#6758 whitespace fix for rev 1.350
Hallvard Furuseth [Fri, 21 Jan 2011 12:09:47 +0000 (12:09 +0000)]
ITS#6758 whitespace fix for rev 1.350

13 years agoITS#6758 Remove comment; broken rs.sr_type idea
Hallvard Furuseth [Fri, 21 Jan 2011 11:43:20 +0000 (11:43 +0000)]
ITS#6758 Remove comment; broken rs.sr_type idea

13 years agoSupport $NO_RS_ASSERT. Add comments.
Hallvard Furuseth [Fri, 21 Jan 2011 11:41:45 +0000 (11:41 +0000)]
Support $NO_RS_ASSERT.  Add comments.

Use a private rs_assert_() helper function instead of libc assert.

13 years agoITS#6758 Support rs_reinit(rs, rs->sr_type).
Hallvard Furuseth [Fri, 21 Jan 2011 11:23:00 +0000 (11:23 +0000)]
ITS#6758 Support rs_reinit(rs, rs->sr_type).

rs_reinit() looks like a function call, so it should act like one.

13 years agoITS#5421 comment ldapoptions vs ldapoptions_prefix
Hallvard Furuseth [Thu, 20 Jan 2011 10:45:14 +0000 (10:45 +0000)]
ITS#5421 comment ldapoptions vs ldapoptions_prefix

13 years agoITS#5421 drop ldap-int.h
Howard Chu [Wed, 19 Jan 2011 21:27:16 +0000 (21:27 +0000)]
ITS#5421 drop ldap-int.h

13 years agoITS#5421 export ldap_debug define in <ldap_log.h>
Howard Chu [Wed, 19 Jan 2011 21:20:10 +0000 (21:20 +0000)]
ITS#5421 export ldap_debug define in <ldap_log.h>

13 years agomove deprecated statements to a separate block (ITS#6800)
Pierangelo Masarati [Wed, 19 Jan 2011 20:22:08 +0000 (20:22 +0000)]
move deprecated statements to a separate block (ITS#6800)

13 years agofix and improve candidate selection (ITS#6799)
Pierangelo Masarati [Wed, 19 Jan 2011 17:36:35 +0000 (17:36 +0000)]
fix and improve candidate selection (ITS#6799)

13 years agoincrement lconn_refcnt so connection does not get closed (ITS#6788)
Pierangelo Masarati [Tue, 18 Jan 2011 23:53:24 +0000 (23:53 +0000)]
increment lconn_refcnt so connection does not get closed (ITS#6788)

13 years agoempty query UUID means negative caching (ITS#6796)
Pierangelo Masarati [Tue, 18 Jan 2011 20:44:45 +0000 (20:44 +0000)]
empty query UUID means negative caching (ITS#6796)

13 years agocount attr values; don't free dangling pointers (ITS#6797)
Pierangelo Masarati [Tue, 18 Jan 2011 20:33:12 +0000 (20:33 +0000)]
count attr values; don't free dangling pointers (ITS#6797)

13 years agoITS#6795 plug sr_ctrls memleak
Howard Chu [Tue, 18 Jan 2011 02:24:35 +0000 (02:24 +0000)]
ITS#6795 plug sr_ctrls memleak

13 years agofix previous commit
Pierangelo Masarati [Mon, 17 Jan 2011 15:06:11 +0000 (15:06 +0000)]
fix previous commit

13 years agovc: Fix last commit (checked for impossible error)
Hallvard Furuseth [Mon, 17 Jan 2011 13:59:51 +0000 (13:59 +0000)]
vc: Fix last commit (checked for impossible error)

13 years agomake sure rwm_response returns SLAP_CB_CONTINUE (ITS#6792, as indicated by Hallvard)
Pierangelo Masarati [Mon, 17 Jan 2011 13:15:28 +0000 (13:15 +0000)]
make sure rwm_response returns SLAP_CB_CONTINUE (ITS#6792, as indicated by Hallvard)

13 years agoCatch ber errors in vc (Verify Credentials)
Hallvard Furuseth [Mon, 17 Jan 2011 13:15:27 +0000 (13:15 +0000)]
Catch ber errors in vc (Verify Credentials)

13 years agoITS#6738 Catch ber errors in libldap/ldap_sync.c.
Hallvard Furuseth [Mon, 17 Jan 2011 12:20:56 +0000 (12:20 +0000)]
ITS#6738 Catch ber errors in libldap/ldap_sync.c.

Also remove variable tag in ldap_sync_search_intermediate()
and reduce  ber_scanf("tm", &tag, foo)  to  tag=ber_scanf("m", foo).

13 years agoITS#6793 Fix back-ldap bad free on matchedDN change
Hallvard Furuseth [Mon, 17 Jan 2011 10:55:41 +0000 (10:55 +0000)]
ITS#6793 Fix back-ldap bad free on matchedDN change

13 years agoITS#6717 refine mincsn check for MMR
Howard Chu [Thu, 13 Jan 2011 22:45:59 +0000 (22:45 +0000)]
ITS#6717 refine mincsn check for MMR

13 years agoITS#6716 partial revert, initialize sl_mincsn at db_open
Howard Chu [Thu, 13 Jan 2011 22:23:05 +0000 (22:23 +0000)]
ITS#6716 partial revert, initialize sl_mincsn at db_open

13 years agoMore cleanup
Howard Chu [Thu, 13 Jan 2011 02:23:04 +0000 (02:23 +0000)]
More cleanup

13 years agoITS#6787 release entry locks before sending entries
Howard Chu [Thu, 13 Jan 2011 01:11:08 +0000 (01:11 +0000)]
ITS#6787 release entry locks before sending entries

13 years agoFix typo
Howard Chu [Wed, 12 Jan 2011 22:54:58 +0000 (22:54 +0000)]
Fix typo

13 years agoMinor cleanup
Howard Chu [Wed, 12 Jan 2011 22:53:43 +0000 (22:53 +0000)]
Minor cleanup

13 years agoMore for prev commit
Howard Chu [Wed, 12 Jan 2011 22:48:30 +0000 (22:48 +0000)]
More for prev commit

13 years agoITS#6783 fix abandon processing, cleanup
Howard Chu [Wed, 12 Jan 2011 22:28:46 +0000 (22:28 +0000)]
ITS#6783 fix abandon processing, cleanup

13 years agonoop change: Silence signed vs unsigned warnings
Hallvard Furuseth [Wed, 12 Jan 2011 14:44:03 +0000 (14:44 +0000)]
noop change: Silence signed vs unsigned warnings

13 years agoCatch ber_scanf errors properly
Hallvard Furuseth [Wed, 12 Jan 2011 14:41:33 +0000 (14:41 +0000)]
Catch ber_scanf errors properly

13 years agoFix ITS#6672: Do not return LDAP_MUTEX_LOCK().
Hallvard Furuseth [Wed, 12 Jan 2011 14:25:37 +0000 (14:25 +0000)]
Fix ITS#6672: Do not return LDAP_MUTEX_LOCK().
It has type void.

13 years agoremove cruft (ITS#6784)
Pierangelo Masarati [Wed, 12 Jan 2011 14:23:24 +0000 (14:23 +0000)]
remove cruft (ITS#6784)