summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-12-26also support the tls_cacert option as an alias for tls_cacertfileArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1342 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-26add notes on ignored options when using GnuTLS (based on #513270 which was ↵Arthur de Jong
reported against the openldap package by Peter Palfrader) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1341 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-24also support tilde (~) in user and group names, except as first characterArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1340 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-24make logic of character tests easier to readArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1339 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-20implement a nss_min_uid option to filter user entries returned by LDAPArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1338 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-18sort group members by alphabet to not be dependant on the order of ↵Arthur de Jong
attributes returned and the internal softing of the set git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1337 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-18update tests with current test set-up (with chasing a referral and some ↵Arthur de Jong
other minor changes) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1336 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-17move LDAP_BE() definitionArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1335 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-16remove debugging left-oversArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1334 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-16switch to a common back-end with a common constructor and destructor and put ↵Arthur de Jong
file pointer shared between {set,get,end}ent() calls in there git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1333 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-16split NSS notes into a Glibc and a Solaris section and add Solaris ↵Arthur de Jong
documentation pointers git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1332 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-13have a more consistent naming convention for static lookup functionsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1331 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-13fix assignment in if statement (was broken in r1262)Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1330 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-12merge changes from trunkArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1329 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-12pass the ld to do_bind() instead of the session to use the correct ld from ↵Arthur de Jong
do_rebind() git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1328 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-12always return a positive authorisation result during authentication because ↵Arthur de Jong
we don't do any authorisation checks during authentication and this may confuse the PAM module if it's only used for authorisation git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1327 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-12fallback to standard PAM error message if one wasn't returned by nslcdArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1326 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-12fix commentArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1325 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-11include extra assertion checksArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1322 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-08in each worker wake up once in a while to check whether any existing LDAP ↵Arthur de Jong
connections should be closed git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1319 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-03in try_bind(), perform the search ourselves instead of using lookup_dn2uid() ↵Arthur de Jong
to also be able to match administrator DNs (thanks to Thaddeus J. Kollar for spotting this) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1318 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-03fix handling of try_bind() result code in nslcd_pam_authc() (patch by ↵Arthur de Jong
Thaddeus J. Kollar) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1317 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-26close all open file descriptors on startArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1316 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-17return correct PAM status code for when LDAP server is unavailable (based on ↵Arthur de Jong
a patch by Pierre Gambarotto) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1315 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-17switch all internal functions to return an LDAP status codeArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1314 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-17return correct kind of error code from try_pwmod() (bug)Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1313 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-10implement configuring SASL authentication using Debconf, based on a patch by ↵Arthur de Jong
Daniel Dehennin git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1312 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-10fix for problem with undefined values in read_config() functionArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1311 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07split reading values from a configfile into a separate function and also ↵Arthur de Jong
ensure that tls_reqcert is correctly read git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1310 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07add comment describing functionArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1309 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07split updating configuration file based on debconf value to separate ↵Arthur de Jong
function and make config option renaming consistent git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1308 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07fix installation directory for PAM module (was broken in r1239)Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1307 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07move special casing of handling bindpw removal to cfg_disable() functionArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1306 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07handle tls_reqcert option consistently with other optionsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1305 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07remove extra slash characterArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1304 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07guess NSS SONAME on freebsdArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1303 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07use NSS flavour to determine which exports file to useArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1302 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07log the request with any logged messagesArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1301 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-07SASL compatibility definitionArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1300 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-04merge changes from trunkArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1299 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-04move acceptconnection() function body inside the worker() so we can more ↵Arthur de Jong
easily break out of the connection handling thread, close the server socket inside the signal handler to cause all threads waiting on accept() to fail and ensure that signals are handled in the main thread by blocking them in the worker threads (r1290 from -solaris branch) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1298 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-04avoid unneeded strdup()s by using a passed buffer to lookup_dn2uid() and ↵Arthur de Jong
using strcmp() in dn2uid() to see if the existing cached value is ok git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1297 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-04fix race condition that could cause a memory leakArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1296 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-04pass the actual size of the address family and the path length to bind() and ↵Arthur de Jong
connect() for named sockets git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1295 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-03call myldap_session_check() before adding a new search to the session so the ↵Arthur de Jong
connection actually gets closed on timeout (the connection isn't closed when there are active searches) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1294 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-28move acceptconnection() function body inside the worker() so we can more ↵Arthur de Jong
easily break out of the connection handling thread, close the server socket inside the signal handler to cause all threads waiting on accept() to fail and ensure that signals are handled in the main thread by blocking them in the worker threads git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1290 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-28remove redundant backslashArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-solaris@1289 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-16chage test for compiling with gcc to be simpler and not use deprecated ↵Arthur de Jong
ac_cv_prog_gcc git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1288 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-16fix log messageArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1287 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-16remove obsolete noteArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1286 ef36b2f9-881f-0410-afb5-c4e39611909c