CVS log for include/ldap_pvt.h

Up to [OpenLDAP] / include

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Happy New Year

happy belated New Year

(ITS#6194) Patch - Enhancement - provide LDIF support as libldif

Prev commit: flags should be unsigned

Cleanup prev commit

ITS#6327 fix sb_sasl_generic_write retval for partial writes

More ITS#6262: Also define ldap_pvt_gmtime_[un]lock if localtime_r is missing

Fix previous commit: move struct lutil_tm declaration out of prototype scope

wrap gmtime for reentrancy (ITS#6262)

fix ldap namespace (part of ITS#5974)

fix misc warnings

ITS#5916 - externally callable functions are ldap_pvt, not ldap_int.

Update copyright notices

ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups

Happy New Year (belated)

fix declarations of buffers for numeric strings; other related cleanup

Fix spurious warnings in prev commit

ldap_control*_dup() is no longer private; add ldap_pvt_put_control

cleanup tools

cleanup

ITS#4948: '#if <undefined macro>' -> '#ifdef' warning cleanup

Preliminary GNUtls support. gnutls.c will merge back into tls.c later.

ITS#4707 added new ldap_init_fd() API

happy new year

s/ldap_int_discard/ldap_pvt_discard/

add scope helpers

add URI list resorting feature (ITS#4524)

Improved bignum detection/use

Prefer long long to BIGNUM or GMP

Happy new year!

add more versatile private API for filter escaping

ITS#4082 tls ctx requirements are only applicable to servers, or clients
with tls_opt_require_cert = TRY or DEMAND. Ignore requirements for clients.

silence warnings

use unsigned long long for counters, if available

Added ldap_pvt_sasl_secprops_unparse, slap_sasl_secprops_unparse

Happy New Year!

Add callbacks for client TLS connection establishment:
LDAP_OPT_X_TLS_CONNECT_CB and LDAP_OPT_X_TLS_CONNECT_ARG
with int (LDAP_TLS_CONNECT_CB) (LDAP *ld, SSL *ssl, SSL_CTX *ctx, void *arg)
To be called whenever the client library allocates a new SSL* handle.

Don't BN_init allocated BIGNUMs, they're already initialized

multiple precision with BIGNUM/gmp/ulong

A better find_connection() port fix

Allow LDAP_PVT_SASL_LOCAL_SSF to be set externally

Happy new year

Updated notices and acknowledgements

Really rename ldap_int_get_controls() to ldap_pvt_get_controls().

mv ldap_int_get_controls to ldap_pvt_get_controls

cleanup

ITS#2424 reset SASL on an existing connection

Make string parameter to ldap_charray_add() and ldap_charray_inlist() const.

remove lint

move ldap_get_message_ber() from ldap.h to ldap_pvt.h

Move ldap_dnfree_x etc. decls from ldap.h to ldap_pvt.h

Silence warning in prev commit

Added ldap_pvt_get_hname. Use instead of ldap_pvt_gethostbyaddr_a when
all you want is the hostname.

Happy new year

Move ldap_control_dup() to ldap_pvt.h

add upper/lower funcs that also compute the length of the string (not used yet)

Changed ldap_pvt_tls_get_my_dn and ldap_pvt_tls_get_peer_dn to store result
in dn parameter and return a result code.

  Added ldap_X509dn2bv()
  deleted ldap_pvt_tls_get_peer()
  changed ldap_pvt_tls_get_peer_dn() to use ldap_X509dn2bv()
  added ldap_pvt_tls_get_my_dn()

ITS#1708 ldap_pvt_tls_sb_ctx() et al

move ldap_int_put_filter to ldap_pvt_put_filter

Fix ASCII detection; can't use "< 0x80" on a signed char.

Update copyright notices

Rework filter code
Misc cleanup / lint removal

Mark more stuff as deprecated and remove some unused deprecated
routines.

More struct berval DN changes
decrease dependency on dn_validate/dn_normalize

Delete ldap_build_filter(), it's broke.
Clean up headers.

Added ldap_pvt_tls_destroy() to cleanup TLS library on shutdown

Another round of TLS updates to support secure referral chasing

move TLS ctx to lconn struct in prep for supporting TLS with referrals
need to rework cert check to use per lconn host name

Update copyright (including with or without modification clarification)

Add ldap_pvt_tls_get_peer_dn() routine.  Returns peer as an LDAP DN.

Fix compilation problem when ldap.h is not included

Add ldap_url_parse_ext() prototype.  Routine should likely be renamed
into ldap_pvt_ name space.

remove lint
update bdb codes

Bandaid ucdata build problems

Bring UCdata infrastructure.

Raise ldapi:// SSF to 71.  ldapi:// is likely more secure than
DES or other low end encryption.

Remove CLDAP cruft

Implemented ldap_pvt_tls_get_peer() for use with SASL/EXTERNAL.
Added ldap_pvt_tls_get_strength() - return encryption strength, for
use as a SASL session security factor.

Add char* ldap_pvt_get_fqdn(char*) which returns the FQDN of the
input.  In input==NULL, returns FQDN of local host.
Fixed copy_hostent() uninitialized pointer bug.
Replaced gethostname calls with ldap_pvt_get_fqdn( NULL ) calls.

Update SASL code to reuse context through life of session.
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters

Clarify LDAP_ATTRCHAR

Include tab in LDAP_SPACE

Fix inclusion of <sasl.h>

Round one of LDAP_F() macro changes.  In this round we rename
macros into our namespace and limit use to headers.  A subsequent
round will add macros to separately handle forward declarations
of variables from declaration of function prototypes.  The last
round will add additional macros for declaring actual variables and
functions.

Rework URI parser to provide true scheme not proto/properties.
Plus more pthread rwlock code

Y2k copyright update

libldap/tls.c: change tls_verify_cb to no longer ignore verification errors.
This means a ldaps connection may drop before any LDAP protocol exchange
occurs (due to expired cert, unrecognized CAs, etc.).
  Change ldap_pvt_tls_connect to copy any TLS error string to ld_error upon
connection failure, otherwise client just sees "can't contact LDAP server."

slapd/connection.c: add flush/delay when SSL_accept fails, to allow any
TLS alerts we generated to propagate back to the client. (Which will then
be picked up by ldap_pvt_tls_connect on the client...)

Error handling changes including separation of client v. server
SASL to LDAP translation.  plus comments and other minor changes

ITS#503: Extend ldap tools to support SASL/TLS
Submitted by Gabor Gombas <gombasg@inf.elte.hu>

Another round of changes behind -DSLAPD_SCHEMA_NOT_COMPAT
plus these changes unhidden changes:
	remove now meaning --enable-discreteaci configure option
	fix ITS#451, slapd filters
	Add ber_bvecadd() to support above
	constify ldap_pvt_find_wildcard() and misc slapd routines
	renamed some slap.h macros
	likely broken something

Move ldap_unicode_t to ldap_pvt.h, typedef to ldap_ucs2_t for now.
ldap_ucs2_t is a short.  The unicode routines may break if
sizeof(short) != 2...

typedef ber_int_t ldap_ucs4_t

Make ldap_utf8_bytes() act like strlen() not sizeof()

Fix bugs in UTF-8 code.  Apply to getdn and charray.

Add some robustness to UTF-8 routines.

Add comments to UTF-8 declarations.
Add US ASCII optimizations macros.
#ifdef out unused routines
Ready to hack getdn.c and others to support UTF-8

Move ldap_utf8_*() declarations from ldap-int.h to ldap_pvt.h.
We may likely want to expose the routines at a later date (ldap_utf8.h?).

Imported <ldap.h> in <ldap_pvt.h> so ldap_pvt_sasl_bind() has necessary
types. Changed const sasl_callback_t * to LDAP_CONST sasl_callback_t *.

Added support for connecting to LDAP servers located using DNS
SRV records. Added lock around resolver library which is shared
by the DNS SRV code and the getdxbyname() code.

Added ldap_pvt_sasl_bind() prototype to ldap_pvt.h. This
required importing sasl.h into ldap_pvt.h, thus that import
was removed from ldap-int.h.

Merged in preliminary support for Cyrus SASL library;
support for DCE slash-delimited, left-to-right DNs;
support for a domain socket transport (enable with
--enable-ldapi); and extensions to URL parsing to
support the latter transport.

Adds for Start TLS functionality on slapd and LDAP C API.

Fixes for NT dynamic linking.

Add empty struct ldapoptions declaration to avoid pulling in headers.

Added ldap_pvt_tls_* prototypes.

Fixed the LDAP_F macro.
See README 1.27 log

Add OpenLDAP RCS Id

Export ldap_pvt_<find_wildcard,filter_value_unescape>() from libldap.
Use them in slapd/str2filter.c.

Implement ldap_dn_normalize and friends.  Should be used by clients
to validate input dn's BEFORE sending dn's to server.
Also fixed getfilter to use REG_EXTENDED|REG_NOSUB.  (and fixed one
case where REG_BASIC was still used).
s/strdup/LDAP_STRDUP/
Added ldap_pvt_str2lower/upper

s/exit(1)/exit(EXIT_FAILURE)/
s/exit(0)/exit(EXIT_SUCCESS)/
add <ac/stdlib.h> where needed and other minor header adjustments

Add charray (from slapd) to -lldap/-lldap_r (not yet used)
Add digest md5 codes to -lldap/-lldap_r (work in progress)

Eliminate DECL_STRDUP check in favor of simple fix to <ac/string.h> header.
Add #undef and other protection of macros.

Vienna Bulk Commit
This commit includes many changes.  All changes compile under NT but
have not been tested under UNIX.

A Summary of changes (likely incomplete):

NT changes:
	Removed lint.
	Clean up configuration support for "Debug", "Release", "SDebug",
		and "SRelease" configurations.
	Share output directories for clients, libraries,
		and slapd.  (maybe they should be combined further
		and moved to build/{,S}{Debug,Release}).
	Enable threading when _MT is defined.
	Enable debuging when _DEBUG is defined.
	Disable setting of NDEBUG under Release/SRelease.  Asserts
		are disabled in <ac/assert.h> when LDAP_DEBUG is not
		defined.
	Added 'build/main.dsp' Master project.
	Removed non-slapd projects from slapd.dsp (see main.dsp).
	Removed replaced many uses of _WIN32 macro with feature based
		macros.

ldap_cdefs.h changes
	#define LDAP_CONST const
		(see below)
	#define LDAP_F(type) LDAP_F_PRE type LDAP_F_POST
		To allow specifiers to be added before and after
		the type declaration.  (For DLL handling)

LBER/LDAP changes
	Namespace changes:
		s/lber_/ber_/ for here and there.
		s/NAME_ERROR/LDAP_NAME_ERROR/g
	Deleted NULLMSG and other NULL* macros for namespace reasons.
	"const" libraries.  Installed headers (ie: lber.h, ldap.h)
		use LDAP_CONST macro.  Normally set to 'const' when
		__STDC__.  Can be set externally to enable/disable
		'constification' of external interface.  Internal
		interface always uses 'const'.  Did not fix warnings
		in -lldif (in lieu of new LDIF parser).

	Added _ext API implementations (excepting search and bind).
		Need to implement ldap_int_get_controls() for reponses
		with controls.

	Added numberous assert() checks.

LDAP_R
	_MT defines HAVE_NT_THREADS
	Added numberous assert() checks.
	Changed ldap_pthread_t back to unsigned long.  Used cast
	to HANDLE in _join().

LDBM
	Replaced _WIN32 with HAVE_SYSLOG

ud
	Added version string if MKVERSION is not defined.  (MKVERSION
		needs to be set under UNIX).

slapd
	Made connection sockbuf field a pointer to a sockbuf.  This
		removed slap.h dependency on lber-int.h.  lber-int.h now only
		included by those files needing to mess with the sockbuf.
	Used ber_* functions/macros to access sockbuf internals whenever
		possible.
	Added version string if MKVERSION is not defined.  (MKVERSION
		needs to be set under UNIX).
	Removed FD_SET unsigned lint

slapd/tools
	Used EXEEXT to added ".exe" to routines.  Need to define EXEEXT
		under UNIX.

ldappasswd
	Added ldappasswd.dsp.  Ported to NT.  Used getpid() to seed rand().

nt_debug
	Minor cleanup.  Added "portable.h" include and used <ac/*.h> where
	appropriate.  Added const to char* format argument.

Use -lldap_r instead of -lldap -lthread.
	Likely broke things for non-posix threadings....

Update -lldap_r implementation to:
	remove attribute support
	hide thread detachment
	provide concurrency accessors
	provide initialization function
	fix gethostby{addr,name}_r codes (not coverred by HAVE_REENTRANT_FUNCTIONS)
Update servers/libraries to use ldap_pvt_thread_ calls.
Cleanup server codes (no #ifdef HAVE_PTHREAD_THIS or _THATs)!
Removed -llthread

add ldap_cdef'ing.

Move libldap/strdup.c to string.c.
libldap/string.c will hold various string.h replacements.
Removed liblutil/strdup.c
Moved ldap_pvt_strtok to string.c.
Moved prototype of ldap_pvt_strtok to <ac/string.h>.
Added #define strtok_r ldap_pvt_strtok (if strtok_r doesn't exist).

Updates for the new threading and utility stuff in libldap{_r}.

Update copyrights for year 2002

Add ldap_pvt_tls_destroy

Pull in a variety of bug fixes from HEAD including
	critical client control handling
	tls cert checking
	sasl/tls ref handling
	empty dn handling
Also removed ufn search (normally I would have left it
in but the merge was easier this way).

Sync with HEAD

Update TLS codes (cert checking, fix crash condition)
Update ref chasing code

Fix UTF-8 bugs (ITS#860)

Import latest from devel

Import latest changes from devel including removal of CLDAP and BDB2 cruft

Suck in SASL/EXTERNAL implementation

Import latest changes from devel

Import latest from devel

Import from devel

Merge latest devel codes into releng 2 branch.
Remove back-perl, back-sql, back-tcl from branch as they have yet
to be updated.
Additional changes are needed prior to release of alpha4.

Merge in all devel changes since 2.0-alpha2.
Move OPENLDAP_REL_ENG_2_MP forward.

Merge in all -devel changes made since branch was created.

Numerous minor fixes from HEAD, see CHANGES

Happy (belated) new year

Fix up headers

Additional string routines

Suck in latest changes from HEAD

More resyncing with HEAD

Suck in HEAD changes since 2.1alpha

Happy new year!

find_connections fix (ITS#3280) from HEAD
Add ldap_pvt_url_scheme_port()

Sync with HEAD

Happy new year

Sync with HEAD

First rounded of changes in prep for 2.2.beta3

Sync with HEAD

Happy new year! (belated)

happy new year

Updated multi-precision library detection from HEAD

Happy new year!

Select changes from HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Happy New Year!

ITS#6262

happy belated new year

ITS#6327,ITS#6334

ITS#5760
warnings fix

ITS#5916

Update copyright for next release

ITS#5369

Happy new year! (belated)

fix declarations of buffers for numeric strings; other related cleanup

Sync with HEAD for OL 2.4.5

Quick merge: everything from HEAD

Sync with HEAD

Sync with HEAD