CVS log for clients/tools/ldappasswd.c

Up to [OpenLDAP] / clients / tools

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Happy New Year

Allow all common controls (namely for ppolicy)

happy belated New Year

move getpassphrase inside tool_bind; make sure password is always malloc'd and freed

ITS#6005 strings from ber_scanf must be ber_memfree'd

Update copyright notices

ITS#5812 add SASL_NOCANON / -N option

silence warnings

Happy New Year (belated)

Send common request controls with extended request.
Only bitch about missing genPassword in success response.

Ppolicy control should be sent with every request...
handle returns in ldappasswd(1) and ldapwhoami(1).  Likely needs to be
added to other ldap*(1) commands.

Revert last commit
Purports to remove kbind, but adds a ldap_search_s() request.

ITS#4799 remove kbind

happy new year

Add common -o nettimeout option to specify network timeout

fix confused comment

ITS#4403 don't unbind a NULL ld.

rework control response handling

Happy new year!

complain if new password is not returned when expected

check reponse tags in ldapmodify; other functions rely on client library, which might need further work.  Also, remove or silence all deprecated API calls

Provide unique error message for ldap_parse_extended_result

allow abandon/cancel for all tools

ITS#3620: Initial Unbind control fix
A better fix would be to use the _ext interface
Also add and use a tool_destroy() function (to destroy SASL/TLS contexts).

Happy New Year!

Fix typo

-E/-e are not just for controls

Happy new year

Use ldap_unbind_ext(3)

Remove -C(hasing) option.  Doesn't make sense for update operations
(at least not with a secure authentication framework).

Notice/Acknowledge updates

Notice updates

-y should not require -W

ITS#2696:
  ldappasswd -T and -t options don't work, they try to open the file ldappasswd
  instead of the argument passed.

Applied patch provided by Nicolas Schodet.

ITS#2657: authzid (and assertion) should apply to most everything
(preliminary modify/incr client-side code)

Add -y support

Mark translatable strings.  Needs work.

Add additional password file support.

Add -y support to ldappasswd.c
s/passwd/password/ in usage description

Revert previous commit

Use ol_version.h

First cut at -V (version) argument.  Needs work.

Insert missing initializers, to silence gcc warnings.

Happy new year

Use ber_flatten2 to avoid excess mallocs

Factor out common client code to file common.c

First-cut proxy authorization support.

Esthetic change:  Move break; out of if() to before the next case:

Clean up error messages

Add -e authzid argument processing

proxy authz control (client only)
Misc control cleanups (client only)

Add client-side subentries control support.
Make sure client controls are not specified multiple times.
NT port updates.

Remove those #ifdefs NOOP just added.

Place NOOP behind #ifdef

Add manageDsaIt/NOOP control support to every tool.
Update NT build.

Rework client control parsing...  need to implement
common controls across all tools.

Use lutil_progname, #include <lutil.h> to get it.

Return EXIT_FAILURE if result code is not success.

Fix misplaced "search" references

Add whoami extended operation.
Add no-op control (needs backend implementation)
Updated modify password extended option API
Kludged control infrastructure to support frontend only controls

Update copyright statements

Fix ITS#1497 use strcmp instead of strncmp

From jon@symas.com - patches for consistent use of directory separators
in pathnames.

Use parens for clarity

use "authcid" instead of "username".

Change start tls warning message

Fix passwd clearing bug

Fix encoding of old password

Don't print bind dn, it's confusing when using SASL

Use LDAP_VERSION3 instead of 3

Update ldappasswd binddn bug, man page and error reporting

Fix spelling error

Fix fprintf\'s, missing `prog\' argument

Fix ldap_init/initialize error checking

Fix -R processing

user argument should be optional

segfault by ldappasswd -A -S  (ITS#714) fix
suggested by Fumitoshi UKAI <ukai@debian.or.jp>

Add missing fprintf param

Fix typo which escaped my obviously flawed midnight test
(I must have been dreamed that the 'make test' completed
successfully)

Add support of "-H uri"

Clean up lint.

Clean up usage()

Expose sasl flags to -lldap (so they can be quiet)
Fix interactive and automatic modes.  Quiet needs work.

First cut SASL "interactive" and "quiet" modes (default is "automatic")

Update usage to note that user may not be represented by a DN

Fix authmethod defaulting

Add -x (simple authentication)

Make it all work.

Cleanup previous commit

Rework SASL command line arguments.  Default is now to authenticate
using best available mechanism.  (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.

Update SASL code to reuse context through life of session.
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters

Correct improper ldap_result() result checking...

Improved but still broken client tools.

Add reporting of LDAPv3 referrals. Should also report returned controls.
Also, as written, the code will behave better in the face of unsolicited
noticifications (such as notice of disconnect).  However, code needs to
be improved to better distinguished such from expected result response.
Delete improvements are limited to base object delete.  Should be applied
to -p[rune] option as well.

Fail if ldap_set_option fails

Round 2 of tools work.
-R now ignored
-C added to chase.  No rebind proc yet, no checking of appropriate authentication.
complain if non-critical TLS was not started.
Fail if requested version is not supported.
ldapdelete:
  deletechildren modified to use ldap_search_ext_s()
  fixed deletechildren dn memory leak
ldapsearch:
  modified to use ldap_search_ext()

Added -llber 'N' ber_printf format which inserts a NULL if
an internal flag set.  Used for SEQUENCE testing.  Flag must
be set using debugger.  Modified ber_printf to use new format
were needed for extensibility testing.

Added first cut -lldap support for extended responses.
Modified ldapsearch(1) to handle v3 search references when not
chasing.  Also added extended/unsolicited notification handling
and extended partial response handling.  Changes include a
number of LDIF enhancements.

Fixed getpassphrase() returns NULL bugs

Adjust -Z[Z] usage statements
Change ldapsearch to only produce LDIF.

Rename ldap_start_tls() to ldap_start_tls_s() for consistency sake.
Misc other header changes.

Use getpassphrase() instead of getpass() if available.

s/bindpw/passwd/

Fix password handling for SASL

Y2k copyright update

StartTLS requires LDAPv3
Set version to required protocol.

ITS#503: Extend ldap tools to support SASL/TLS
Submitted by Gabor Gombas <gombasg@inf.elte.hu>

Wrap request/response bervals in a sequence.

Update usage and man page.

Fix slapd SASL/ExternalOps encoding
Add controls to extended ops API signatures, need impl.
Update password to support optional server side generation of
new password, verification of old password, and changing of
non-bound user's passwords.

Modify password code such that backend end routine calls into
frontend to complete parsing of extended op reqdata.
Modify password extended operation to allow optional id (DN)
entry to change (not tested).  Also, provide room to allow
server side password generation (not implemented).  Added optional old
password field to support proxying (not implemented).
Need to implement replog() support.

Update for new password codes for MSVC5

Reengineered ldappasswd(1).  Uses extended operation to set
user password.  Likely to be modified to use bind control
instead.  Use of modify deprecated in favor mechanisms that
support passwords stored externally to the directory (such
as in a SASL service).
Modified slapd extended operation infrastructure to support
backend provided extended operations.

Add macros to compute base64 encode/decode lengths.

Move crypt(3) prototypes from <ac/unistd.h> to <ac/crypt.h> (new) to
avoid clashes with Kth Kerberos.

Add OpenLDAP RCSid to *.[ch] in clients, libraries, and servers.
Replace old Id as needed (back-tcl).
Leave updating of contribWare to contributors (for now).

Disable REFERRALS.  Should add -C/-CC/-R options (chase w/ prompting,
chase w/o prompting, disable referrals).

Cleanup:
Fix printf formats, remove unused variables, add missing prototypes in slapd,
add static/const, add some return types or change to void return type.

Fix tv.sec typo in last commit.  srand(tv.tv_sec * (tv.tv_usec+1))

Wrap prints of DN and other strings in double quotes so user can easily
determine if string contains leading/trailing whitespace.

Add copyright notices.

s/exit(1)/exit(EXIT_FAILURE)/
s/exit(0)/exit(EXIT_SUCCESS)/
add <ac/stdlib.h> where needed and other minor header adjustments

s/NULL/'\0'/ where appropriate

Attempt to whip user password from command line.

Check for not LDAP_OPT_SUCCESS instead of LDAP_OPT_ERROR.

Separate autoconf generated values from "defaults".
	ldap_defaults.h incorporates non-generated ldapconfig.h values.
	ldap_config.h.in is new template for autoconf generated defaults
		(namely directories and paths)
	ldap_config.h.nt, NT template (must be manually copied)
	s/<ldapconfig.h>/<ldap_defaults.h>/
	s/DIRSEP/LDAP_DIRSEP/ & s/DEFAULT_/LDAP_/

s/<stdlib.h>/<ac/stdlib.h>/

No anonymous unions.

Correct minor oversights from last commit.

Add warnings if ldap_set_option() fails.
Check for ldap_set_option() error using LDAP_OPT_ERROR, not -1.
(probably should check != LDAP_OPT_SUCCESS instead).
Added additional usage errors.
Used return(EXIT_FAILURE) instead of exit(1).
Used DIRSEP instead of '/' && '\\'
Moved verbose output to stderr.

s/NULLMSG/NULL/
Fix ldappasswd timeval.

Vienna Bulk Commit
This commit includes many changes.  All changes compile under NT but
have not been tested under UNIX.

A Summary of changes (likely incomplete):

NT changes:
	Removed lint.
	Clean up configuration support for "Debug", "Release", "SDebug",
		and "SRelease" configurations.
	Share output directories for clients, libraries,
		and slapd.  (maybe they should be combined further
		and moved to build/{,S}{Debug,Release}).
	Enable threading when _MT is defined.
	Enable debuging when _DEBUG is defined.
	Disable setting of NDEBUG under Release/SRelease.  Asserts
		are disabled in <ac/assert.h> when LDAP_DEBUG is not
		defined.
	Added 'build/main.dsp' Master project.
	Removed non-slapd projects from slapd.dsp (see main.dsp).
	Removed replaced many uses of _WIN32 macro with feature based
		macros.

ldap_cdefs.h changes
	#define LDAP_CONST const
		(see below)
	#define LDAP_F(type) LDAP_F_PRE type LDAP_F_POST
		To allow specifiers to be added before and after
		the type declaration.  (For DLL handling)

LBER/LDAP changes
	Namespace changes:
		s/lber_/ber_/ for here and there.
		s/NAME_ERROR/LDAP_NAME_ERROR/g
	Deleted NULLMSG and other NULL* macros for namespace reasons.
	"const" libraries.  Installed headers (ie: lber.h, ldap.h)
		use LDAP_CONST macro.  Normally set to 'const' when
		__STDC__.  Can be set externally to enable/disable
		'constification' of external interface.  Internal
		interface always uses 'const'.  Did not fix warnings
		in -lldif (in lieu of new LDIF parser).

	Added _ext API implementations (excepting search and bind).
		Need to implement ldap_int_get_controls() for reponses
		with controls.

	Added numberous assert() checks.

LDAP_R
	_MT defines HAVE_NT_THREADS
	Added numberous assert() checks.
	Changed ldap_pthread_t back to unsigned long.  Used cast
	to HANDLE in _join().

LDBM
	Replaced _WIN32 with HAVE_SYSLOG

ud
	Added version string if MKVERSION is not defined.  (MKVERSION
		needs to be set under UNIX).

slapd
	Made connection sockbuf field a pointer to a sockbuf.  This
		removed slap.h dependency on lber-int.h.  lber-int.h now only
		included by those files needing to mess with the sockbuf.
	Used ber_* functions/macros to access sockbuf internals whenever
		possible.
	Added version string if MKVERSION is not defined.  (MKVERSION
		needs to be set under UNIX).
	Removed FD_SET unsigned lint

slapd/tools
	Used EXEEXT to added ".exe" to routines.  Need to define EXEEXT
		under UNIX.

ldappasswd
	Added ldappasswd.dsp.  Ported to NT.  Used getpid() to seed rand().

nt_debug
	Minor cleanup.  Added "portable.h" include and used <ac/*.h> where
	appropriate.  Added const to char* format argument.

Enclose CEILING/STRDUP macro args in ()

Lint removal:  signed i < unsigned j

Remove initialization of auto arrays

Remove a few typos in comments

cast pw_in to const unsigned char *

Drop the _s from the ldap_perror argument to be consistent with other
ldap commands.

Fix ldap_send_initial_request() to open connection if not already
openned (by ldap_open()).  This allows ldap_init() to function
properly!

ignore SIGPIPE

Don't use initializers for auto vars.

Fix --disable-crypt and --disable-cleartext
mutex declaration should be moved from slapd/main.c to slapd/init.c
so we don't have ripple changes through slapd/tools.

Should have left 'scope' alone.

Make ldap_set_option options optional.

Add support for -P protocol_version.

Don't use initializers for auto arrays

Code cleanups.  MD5 and SHA1 routines should be a little faster and easier to read.

Added lber_get/set_option.  Removed lber_debug/ldap_debug.
Updated other codes as needed.

Added Kerberos support.
Added Password auto-generation.
Added salts for md5 and sha.
Rewrote make_salt().
Made ldap-devel conformity changes.

Backout previous changes made by Dave as they excessive reformatting,
reindentation, and use of spaces instead of tab.  Diffs will be reviewed
to identify and commit only functional changes as time permits.
Note: this is more my fault than Dave's.   I should have provided
clearer guidance.   Live and learn.

Added support for salted passwords.
Added password auto-generation capability.
Added Kerberos code.
Updated salt generator to be much more random().

Apply update from Dave with password prompting.

Fix ^I to \t in usage printf

Add ldappasswd program contributed by David E. Storey <dave@tamos.net>

Fix typo in last commit

A quick fix for ITS#598...  crypt(3) crashes

Remove -P 3 option.

Update build environment
	- remove OpenLDAP defaults from ldap.conf
	- add "edit configuration" step to INSTALL doc
	- update AC_TRY_LINK detections (mainly affects pthread detections)

A working ldap_init()!
Plus have --enable-dns imply --enable-referrals unless --disable-referrals.

lber_debug/ldap_debug are always defined and provided by the implementation.

Import auto init bug fix.

Import ldappasswd tool from devel.

Suck in all changes made on HEAD branch since branching.

s/search/...  as appropriate

Update copyrights for year 2002

ITS#1497 slap/ldappasswd strncmp bug fix

Align with HEAD

Import usage fixes from devel

authc/authz fixes

Update start tls error reporting

Fix passwd clearing

Fix encoding of ldappasswd's old passwd

Import minor changes from devel

Imported from devel
+ Fixed clients printf/usage bugs (ITS#749)
+ Fixed slapd spasswd support (ITS#751)
+ Fixed --enable-spasswd (ITS#751)
+ Fixed ldif(5) file:/// bug (ITS#750)

Fix fprintf\'s, missing `prog\' argument

Import changes from devel including:
+       Fixed -lldap SASL got_max_ssf bug
+       Fixed -lldap TCP_NODELAY bug
+       Fixed -llutil sa_flags never set bug
+       Removed lint
plus
	clients/tools ldap_init() fixes
	-lldap SASL fixes
	binary syntax ";binary" transfer change

Import changes from devel
  Fixed clients & -lldap KBIND (ITS#717)
  Fixed clients/tools -R handling
  Fixed slapd IPv6 issues (ITS#716)
  Fixed slapd kpasswd MIT Compatibility (ITS#715)
  Fixed slapd time syntax routines (ITS#713)
  Fixed ldappasswd -A -S crash (ITS#714)
  Fixed ldappasswd user argument usage and man page
  Fixed ldapmodify man page

Import -H support and other misc. changes

Remove lint

Import latest from devel

Import misc changes from devel including client/tools
ldap_result() call fixes

Import from devel

Additional updates for devel (NT builds, header changes, todo update)

Merge latest devel codes into releng 2 branch.
Remove back-perl, back-sql, back-tcl from branch as they have yet
to be updated.
Additional changes are needed prior to release of alpha4.

Merge in all devel changes since 2.0-alpha2.
Move OPENLDAP_REL_ENG_2_MP forward.

Merge in all -devel changes made since branch was created.

Disable anonymous -C for LDAP update tools

fix handling of -y

Add -y support from HEAD

Add more password file support
Update cache shell routines
Misc cleanup

New version management code
back-bdb cache/dbcache fixes
oidm destroy fix

Changes
    Updated libldap TLS certificate checking
    Updated client tool argument handling
    Updated test suite
    Updated liblutil detach handling
    Added libldap ldap_whoami routines
    Added liblber ber_flatten2 routine
    Added liblutil passwd sanity checks
    Fixed liblber PROTOS bugs
    Fixed ber_flush debug level
    Fixed libldap NULL cred bug
    Build Environment
        Check back-bdb requirement for BDB 4.1

Error message cleanup (already applied to HEAD)

ReSync with HEAD

import NOOP #ifdefs

control updates

progname, etc.

Suck in HEAD changes since 2.1alpha

Happy new year!

Fix typo

Sync with HEAD

Happy new year

Sync with HEAD

Sync with HEAD

Sync with HEAD

First rounded of changes in prep for 2.2.beta3

Changes from HEAD for beta

Happy new year! (belated)

ITS#5061
Support controls in ldap tools.

happy new year

Sync with HEAD

Happy new year!

Sync with HEAD

Initial round of changes for 2.3 beta

Sync with HEAD

Happy New Year!

Allow all common controls (namely for ppolicy)

move getpassphrase inside tool_bind; make sure password is always malloc'd and freed

happy belated new year

ITS#6005

Update copyright for next release

ITS#5812

silence warnings

Happy new year! (belated)

Sync with HEAD for OL 2.4.5

Quick merge: everything from HEAD

Sync with HEAD