summaryrefslogtreecommitdiff
path: root/nslcd/myldap.c
AgeCommit message (Collapse)Author
2011-12-09Fix a typo in disconnect logicJakub Hrozek
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1560 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-08-30move LDAP_DEPRECATED and LDAP_REFERRALS to configure.ac to ensure that tests ↵Arthur de Jong
from configure see the same API git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1529 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-08-27pass a statically allocated callback structure to OpenLDAP because it ↵Arthur de Jong
doesn't make it's own copy (thanks Jakub Hrozek) (fixes a problem in r1490) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1522 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-08-07set the socket timeout in a connection callback to avoid timeout issues ↵Arthur de Jong
during the SSL handshake (based on a patch by Stefan Völkel) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1490 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-08-05implementation of myldap_get_values_len() to use ldap_get_values_len() ↵Arthur de Jong
instead of ldap_get_values() to fix some problems with binary data in returned attribute values (patch by Wesley Mason) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1485 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-06-05fix r1468Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1470 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-06-05simplify and correct find_rdn_value() to handle splitting attribute and ↵Arthur de Jong
value correctly git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1468 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-05-21fix problem with partial attribute name matches in DN (e.g. uid vs. ↵Arthur de Jong
uidNumber) (thanks to Timothy White for the fix) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1464 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-04-22report correct reported error from ldap_abandon()Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1431 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-03-11fix problem with endless loop on incorrect passwordArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1388 ef36b2f9-881f-0410-afb5-c4e39611909c
2011-01-01include definition of rc in all code paths because it's used most of the timeArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1362 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-26try to update the shadowLastChange attribute of a user on password change ↵Arthur de Jong
(the update is only tried if the attribute is present to begin with) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1345 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-12pass the ld to do_bind() instead of the session to use the correct ld from ↵Arthur de Jong
do_rebind() git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1328 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-12fix commentArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1325 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-12-08in each worker wake up once in a while to check whether any existing LDAP ↵Arthur de Jong
connections should be closed git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1319 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-11-03call myldap_session_check() before adding a new search to the session so the ↵Arthur de Jong
connection actually gets closed on timeout (the connection isn't closed when there are active searches) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1294 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-15set a longer socket timout for the normal connection (just in case mostly) ↵Arthur de Jong
and a short one to use when shutting down the connection (also see http://www.openldap.org/its/index.cgi?selectid=6673) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1276 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-14simplify SASL includesArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1271 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-12set timeout options on LDAP socket to avoid problems when the LDAP library ↵Arthur de Jong
hangs on a read() (e.g. at ldap_unbind()) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1264 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-10-10make use of UNUSED() consistent throughout the codeArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1256 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-09-27remove variables which are no longer necessary due to r1220Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1221 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-09-27remove disabling keepalives since we handle SIGPIPE anywayArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1220 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-09-26remove ugly empty lineArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1219 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-09-23add some more error cases which should trigger a disconnectArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1208 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-09-20handle errors from ldap_result() consistently and also retry in case it ↵Arthur de Jong
times out git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1207 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-06-19add logging to SASL interaction functionArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1154 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-06-19improve debug logging of SASL bind callsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1153 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-06-18make SASL binding code a little earier to readArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1149 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-06-18remove the use_sasl option and instead rely on sasl_mech being specifiedArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1148 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-05-09only log "connected to LDAP server" if the previous connect failed or we are ↵Arthur de Jong
failing over to a different server git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1095 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-05-09rename reconnect_maxsleeptime option to reconnect_retrytimeArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1094 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-05-09don't log errno if it is not set (make error less confusing)Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1093 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-05-09handle authentication searches a little differently (only try once if an ↵Arthur de Jong
authentication error is returned) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1092 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-05-09refactor retry timing mechanism to use time between first and last error to ↵Arthur de Jong
determin when to rerty and only try once (and don't sleep) when we have been failing for a long time git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1091 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-05-07fix buffer overflowArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1085 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-04-13don't have myldap_set_credentials() try to open a connection but have the ↵Arthur de Jong
PAM code perform a search with the new credentials so we re-use the fail-over mechanism in myldap_search() git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1079 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-04-13also have myldap_search() return an LDAP status codeArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1078 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-02-28have less warnings when LDAP_OPT_X_TLS isn't definedArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1074 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-02-17first try password modification without the old password and if that fails ↵Arthur de Jong
with the old password git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1064 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-01-25fix for type mismatch (thanks to Jan Schampera)Arthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1061 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-01-24make logging of passwords consistent and support a NULL oldpassword value in ↵Arthur de Jong
myldap_passwd() git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1057 ef36b2f9-881f-0410-afb5-c4e39611909c
2010-01-24free data returned from ldap_passwd_s() call if needed and add missing castsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1056 ef36b2f9-881f-0410-afb5-c4e39611909c
2009-12-29some small simplifcations and clarificationsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1046 ef36b2f9-881f-0410-afb5-c4e39611909c
2009-12-13change dict and set API to perform loops with a list of strings instead of ↵Arthur de Jong
loop_first() and loop_next() functions git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1028 ef36b2f9-881f-0410-afb5-c4e39611909c
2009-11-01also log uri when ldap_start_tls_s() failsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1012 ef36b2f9-881f-0410-afb5-c4e39611909c
2009-10-17provide replacement functions for ldap_initialize() and ldap_passwd_s() and ↵Arthur de Jong
centralise LDAP compatibility hacks into ldap_compat.h git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1007 ef36b2f9-881f-0410-afb5-c4e39611909c
2009-10-08fix some header checks in configure and fix ldap_set_rebind_proc() return ↵Arthur de Jong
type check git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1003 ef36b2f9-881f-0410-afb5-c4e39611909c
2009-10-07implement password changing in the PAM module by performing an LDAP password ↵Arthur de Jong
modify EXOP request git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1000 ef36b2f9-881f-0410-afb5-c4e39611909c
2009-10-05some compatibility improvementsArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@998 ef36b2f9-881f-0410-afb5-c4e39611909c
2009-08-31rename software to nss-pam-ldapdArthur de Jong
git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-ldapd@978 ef36b2f9-881f-0410-afb5-c4e39611909c