| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Protect against fd exhaustion when reopening database files. Only accept |   jmatthew | 2012-06-16 | 9 | -18/+135 |
| | | | | | | | | | client or control connections when there are at least 8 fds available, and close a connection before calling imsg_read if it would be unable to accept an fd from the parent process. ok gilles@ | ||||
| * | take a stab at documenting when arguments need quoted, and valid macro |   jmc | 2012-04-24 | 1 | -4/+7 |
| | | | | | | | | | | characters; prompted by a diff from robert peichaer org thanks gilles and henning for feedback ok deraadt zinke | ||||
| * | rate limiting of accept() in various cases. Testing by jmatthew. there |   deraadt | 2012-04-11 | 4 | -19/+72 |
| | | | | | | maybe still be a corner case where it needs one more file descriptor beyond the limit.. | ||||
| * | use our umask() before AF_UNIX bind() semantics; ok pyr | deraadt | 2012-04-01 | 1 | -3/+11 |
| | | |||||
| * | Use a common text explaining how the various configuration parsers using |   sthen | 2011-06-23 | 1 | -3/+8 |
| | | | | | | | | | | the standard OpenBSD-style parse.y handle continuing lines with backslashes, paying particular attention to how comments are handled (which can cause nasty side-effects if you're not expecting it). Most wording from jmc@, with suggestions from fgsch@, marc@, Richard Toohey, patrick keshishian and Florian Obser, ok jmc@. | ||||
| * | document available authentication types and formats. |   martinh | 2011-01-28 | 2 | -4/+56 |
| | | | | | with tweaks from jmc@ | ||||
| * | Change detection of indefinite BER lenghts (which is not allowed). Only a | martinh | 2011-01-08 | 1 | -7/+7 |
| | | | | | | | | length byte of 0x80 is now treated as meaning indefinite. This fixes empty sets sent by the winldap api. Makes authentication through pGina work. with william@ | ||||
| * | Unbreak simple passwords with SHA and salted SHA hashes. Revision 1.7 | martinh | 2010-12-17 | 1 | -11/+15 |
| | | | | | introduced a bug that reversed the check. Found by MERIGHI Marcus. | ||||
| * | Unbreak re-indexing by checking if an index entry already exists. | martinh | 2010-11-26 | 1 | -3/+3 |
| | | |||||
| * | Make -dvv flags produce debug traces of decoded BER messages on stderr. | martinh | 2010-11-10 | 7 | -9/+309 |
| | | | | | | Also shows a hexdump of the input buffer if BER decoding fails. Useful when debugging protocol issues. | ||||
| * | Prefix debug logging on stderr with time and pid, like syslog. | martinh | 2010-11-10 | 1 | -2/+17 |
| | | |||||
| * | If the base DN in a search request doesn't exist, return early. | martinh | 2010-11-05 | 1 | -2/+7 |
| | | |||||
| * | When draining the input buffer of more than two complete requests, an | martinh | 2010-11-05 | 1 | -2/+2 |
| | | | | | | additional incomplete request would be truncated. This fixes the number of bytes consumed from the input buffer. | ||||
| * | Change to read better after suggestion from jmc. | martinh | 2010-11-05 | 1 | -3/+3 |
| | | |||||
| * | Only LDAP version 3 is implemented. | martinh | 2010-11-04 | 1 | -3/+3 |
| | | |||||
| * | Document the syntax of schema files. Only a brief synopsis of the attribute | martinh | 2010-11-04 | 1 | -2/+68 |
| | | | | | type and object class syntax is given, the rest is referred to the RFC. | ||||
| * | Publish matching rules in the cn=schema subentry as the matchingRules | martinh | 2010-11-04 | 4 | -6/+42 |
| | | | | | | attribute. This is an operational attribute and only returned if explicitly asked for. Required by RFC 4517. | ||||
| * | Update the internal btree documentation to reflect the current api. | martinh | 2010-11-03 | 1 | -20/+38 |
| | | |||||
| * | Validate matching rules against attribute syntaxes. All matching rules from | martinh | 2010-11-03 | 4 | -13/+228 |
| | | | | | | | RFC 4517 are recognized, except the optional wordMatch and keywordMatch. Requires a current core.schema file. | ||||
| * | caseExactIA5Match is not an appropriate matching rule for directory strings | martinh | 2010-11-03 | 1 | -2/+2 |
| | | | | | | (syntax oid 1.3.6.1.4.1.1466.115.121.1.15). Use caseExactMatch instead. Prepares for upcoming validation of matching rules. | ||||
| * | An index can now also be used for a presence filter. | martinh | 2010-11-03 | 1 | -3/+3 |
| | | |||||
| * | Evaluate filters according to the three-valued logic of X.511, as required | martinh | 2010-11-03 | 3 | -101/+162 |
| | | | | | | | | | by RFC 4511. A filter term can now be evaluated as undefined if the attribute description is not recognized, the attribute type doesn't define the appropriate matching rule, or the filtering is not implemented. This also implements the NOT filter in the query planner. | ||||
| * | Clarify the current state of ldapd as not fully LDAPv3 compliant. | martinh | 2010-11-02 | 1 | -3/+3 |
| | | |||||
| * | Allow the userPassword attribute to specify a login class when using |   william | 2010-10-26 | 1 | -2/+42 |
| | | | | | | | | | | | | simple binds with BSD Authentication, using '#' as the delimiter, such as: userPassword: {BSDAUTH}username#loginclass Useful for auth modules that require parameters such as login_radius. ok martinh | ||||
| * | Fix a segmentation fault when adding an attribute to an empty entry. | martinh | 2010-10-19 | 1 | -2/+4 |
| | | |||||
| * | When checking if the input buffer is large enough to hold an LDAP request, | martinh | 2010-10-19 | 1 | -2/+2 |
| | | | | | | compare with available space, not the total space. This fixes rejection of messages when there are multiple requests queued in the input buffer. | ||||
| * | Remember the bind DN after BSD authentication. This makes access control | martinh | 2010-10-19 | 3 | -8/+24 |
| | | | | | work for SASL and BSDAUTH binds as it does for simple binds. | ||||
| * | Missing ; to appease yyextract, ok martinh@ | sthen | 2010-10-18 | 1 | -7/+7 |
| | | |||||
| * | aginst -> against; from Luca Corti | jmc | 2010-10-07 | 1 | -3/+3 |
| | | |||||
| * | add missing .Ar; | jmc | 2010-09-24 | 1 | -2/+2 |
| | | |||||
| * | add -s option. ok martinh@ |   lum | 2010-09-24 | 1 | -2/+5 |
| | | |||||
| * | Warn if schema file can't be opened. | martinh | 2010-09-21 | 1 | -2/+4 |
| | | |||||
| * | Implement support for bsdauth authentication via simple binds, not only | martinh | 2010-09-20 | 1 | -45/+60 |
| | | | | | | | | | SASL. This works by prefixing the userPassword attribute with {BSDAUTH}, followed by the (bsd) username. For example: userPassword: {BSDAUTH}username Idea by william@. Tested by william@. | ||||
| * | RFC2247 -> RFC 2247; | jmc | 2010-09-10 | 1 | -3/+3 |
| | | |||||
| * | Resolve matching rules from superior attribute types at schema load time | martinh | 2010-09-03 | 2 | -13/+24 |
| | | | | | instead of when each attribute is validated. | ||||
| * | Implement attribute syntaxes from RFC4517. This adds validation to the most | martinh | 2010-09-03 | 5 | -16/+410 |
| | | | | | | | common attribute types. Specialized attribute types like Delivery Method or Teletex Terminal Identifier are recognized for completeness, but not validated. | ||||
| * | Add missing leading string quote character in attribute type description. | martinh | 2010-09-01 | 1 | -2/+2 |
| | | | | | Caused syntax errors when parsing schema from the subschema. | ||||
| * | Move generic imsg/libevent glue to a separate file. | martinh | 2010-09-01 | 9 | -216/+303 |
| | | | | | with eric@ at c2k10 | ||||
| * | Do not use FP arithmetic. Variation on a diff from Mike Belopuhov some time ago. | martinh | 2010-09-01 | 1 | -6/+6 |
| | | |||||
| * | fix linecount bug with comments spanning multiple lines |   henning | 2010-08-03 | 1 | -3/+4 |
| | | | | | | | | problem reported with the obvious fix for bgpd by Sebastian Benoit <benoit-lists at fb12.de>, also PR 6432 applied to all the others by yours truly. ok theo isn't it amazing how far this parser (and more) spread? | ||||
| * | Revert parts of previous change leading to assertion failure for | martinh | 2010-07-28 | 1 | -6/+7 |
| | | | | | | certain modify operations. Also fix logic error when replacing an attribute with the empty set. | ||||
| * | Fix a sigbus due to unaligned memory access, found when compacting on | martinh | 2010-07-26 | 1 | -5/+6 |
| | | | | | | | sparc64. reads ok to gilles@ | ||||
| * | Add a history section saying that ldapd/ldapctl first appeared in 4.8. | martinh | 2010-07-21 | 2 | -4/+14 |
| | | |||||
| * | Fix an unaligned memory access. | martinh | 2010-07-18 | 1 | -2/+2 |
| | | |||||
| * | Avoid double free in ldap modify requests. The values received in the | martinh | 2010-07-13 | 2 | -13/+35 |
| | | | | | | modify request is linked into the stored ber structure, and then both are freed. Fix this by unlinking the values from the request. | ||||
| * | Retry requests when the btree is busy. Without this, clients will just hang | martinh | 2010-07-10 | 3 | -11/+17 |
| | | | | | | waiting for a response if the btree was being reopened when the request was received. | ||||
| * | Send empty statistics rather than segfault if "ldapctl stats" is run when a | martinh | 2010-07-06 | 2 | -6/+10 |
| | | | | | database is being reopened due to compaction. | ||||
| * | Plug another memory leak. Forgot to reset key returned from cursor, having | martinh | 2010-07-06 | 1 | -1/+3 |
| | | | | | a reference to a cached page. | ||||
| * | Clarify differences between the 'include' and 'schema' keyword. And stress | martinh | 2010-07-06 | 1 | -3/+12 |
| | | | | | the 'secure' keyword. Looks fine to jmc@, gilles@ | ||||
| * | When moving a node between pages during rebalance, find the source page | martinh | 2010-07-06 | 1 | -1/+3 |
| | | | | | | prefix before finding any child page prefix. This fixes an inconsistency during rebalance. | ||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |