CVS log for servers/slapd/back-meta/config.c

Up to [OpenLDAP] / servers / slapd / back-meta

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

add support for subtree-include (ITS#6801); improve support for subtree-exclude

ITS#5421 drop ldap-int.h

Happy New Year

use Paged Results when talking to targets (in response to ITS#6664)

add per-target tls options; start tls if required by idassert (ITS#6642)

happy belated New Year

honor per-target tls/chase referrals/rebind as user (ITS#6190)

Update copyright notices

Warning cleanup: signed meets unsigned.

make sure objectClass is not filtered out by 'map attribute *' (ITS#5647)

do not propagate undefined or otherwise broken search filters (ITS#5614)

allow proxies to filter out search references (ITS#5593)

More symbols for ITS#5355

revert test logic

make pseudoroot-bind-defer TRUE by default (part of ITS#5440 fix)

Happy New Year (belated)

silence warnings

don't leak in case of error

HEADS-UP: now the list of URIs is better set by using separate arguments

further rework URI parsing

Fix DEVEL dependency

also improve massaged DN containment check

improve URI DN containment check

add support for session tracking (draft-wahl-ldap-sessio) to proxy backends requests

Fallout from ITS#4986 - remove unused param of select_backend()

cleanup back-meta according to back-ldap

implement search timeout when the remote server does not respond in the specified timeout

happy new year

pool privileged connections (ITS#4791)

- add support for "use-temporary-conn" much like back-ldap
- fix various connection creation/setup concurrency issues
- use shared connection when always idasserting (similar to ITS#4781)
- reduce the impact of schema mapping when not used (tnx to gprof)
- fix temporary/tainted connection leak in abnormal conditions

add "report" to "onerr" modes: continue a search in case one target returns an error, and only propagate the error at the end

improve timeout support (ITS#4157, ITS#4663)

more cleanup for previous commit

port identity assertion to back-meta; share as much code as possible with back-ldap; misc cleanup

rework quarantine locking and so

implement proxy quarantine (ITS#4569)

add cancel strategies (ITS#4560)

line up back-meta to ITS#4546

plug leak

add URI list resorting feature (ITS#4524)

cleanup version parsing

meta_back_db_config: lutil_atou(version,) -> lutil_atoi

address protocol version issues (ITS#4488)

seems to fix the equivalent of ITS#4429 in back-meta; had to give up per-target conn-ttl and idle-timeout

be conservative in reading subtree-exclude

add support for "subtree-exclude"

implement proxy long-lived connection TTL

unifdef -DSLAPD_CONF_UNKNOWN_BAILOUT -DSLAPD_CONF_UNKNOWN_IGNORED=""
	-DSLAPD_DEBUG_CONFIG_ERROR=LDAP_DEBUG_ANY

Happy new year!

silence warning

add (and document) customizable bind-timeout

implement (per-target) per-conn proxy-side idle-timeout (ITS#4115); revitalize (per-target) network-timeout in back-meta; fix issue with connection initialization error in ldap_back_retry(); cleanup configuration of back-ldap

Remove some unnecessary #ifdefs

use friendly form for timeouts

first round of number/time parsing fixes

set the berval length\! (ITS#4196)

fix dangling resources issue in slapd-ldap; completely rework slapo-chain to fix the resource leak/concurrency issue; add support for multiple well-known URIs to set credentials for, and deal with unknown URIs anonymously; similar reworking and cleanup for slapd-meta

backport write operation timeouts from back-meta to back-ldap; minor cleanup & silence warnings

import leak plug from slapo-rwm

fix error message for invalid "uri" args

fix ITS#4071

cleanup states/timeout handling in back-ldap/meta; add connection pooling and defer of pseudoroot bind to back-meta

allow undefined attrs to be "proxied" (ITS#3959)

implement overlapping targets enhancement (ITS#3711)

plug yet another one-time leak

fix previous commit

implement per-target, per-operation timeouts

add "onerr" flag

more on strict config parsing (ITS#3705)

honor T-F filters (ITS#3706) and lots of cleanup

use safe(r) default

work around the last issue: some times the result times out while the other party is not willing to send any response; give it a second chance

fix retry; add per-target configurable number of retries; addresses ITS#3672, ITS#3676 & ITS#3680

more on error handling reworking; should address ITS#3672 and ITS#3676

a) implement a new candidate selection procedure, based on target naming
   context checking and multiple match resolution via an internal search
b) move the candidate listing in a persistent per-thread buffer
c) fix bind procedure
d) minor cleanup

(a) and (b) should address ITS#2935; (b) and (c) should address ITS#3171

A test is also added

import selected improvements from back-ldap: use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup

import referral chaing options from back-ldap

don't add the trailing '??base' to URIs

improve parsing of acl-authcDN/acl-passwd

major namespace cleanup & minor fixes

Happy New Year!

works now

import stuff removed from back-ldap

"searchFilter" by default must be empty

Happy new year

notices and acknowledgements

Cleanup unknown config directive handling.

Moved proxy caching to overlay

notices and acknowledges

unifdef LDAP_CACHING

remove unused arg from fprintf (ITS#2516)

add network timeout (ITS#2413 reworked)

remove dnNormalize2
replace calls to dnNormalize2 with calls to dnNormalize

Fix compilation errors (caching must still be undefined though)

first cut at grouping rewrite/map stuff; needs work

Don't segfault on malformed configuration

Commit of the Proxy Cache contribution (ITS#2062)
from IBM India Research (Apurva Kumar)
Code review by Pierangelo, Kurt, and Jong.

silence warning

improved filter mapping/rewrite; improved result rewriting; improved attribute/objectclass mapping configuration

add 'rebind-as-user' according to back-ldap's implementation

improve last commit

allow multiple URIs (need to backport to back-ldap)

Happy new year

Date: Thu, 2 May 2002 08:54:59 GMT
From: h.b.furuseth@usit.uio.no
To: openldap-its@OpenLDAP.org
Subject: Patch: Bugs with back-ldap/meta mappings

Full_Name: Hallvard B. Furuseth
Version: HEAD
OS: Linux
URL: http://folk.uio.no/hbf/OpenLDAP/back-ldap.txt
Submission from: (NULL) (158.36.148.34)


The source claims the 'map' attribute has syntax
map {objectclass | attribute}   {<source> | *}      [<dest> | *]
while it actually has syntax
map {objectclass | attribute} [<local name> | *] {<foreign name> |
*}
except that the code is confused about it.  Removed attributes are
put in both the maps for local and foreign names:
	# Remove description and present title as description instead
	map attribute	description
	map attribute	description title
-->
	slapd.conf: line 10: duplicate mapping found (ignored)

Also, map.c:ldap_back_map_attrs() loops forever on removed attributes
(ie. if one asks ldapsearch for an attribute which has been removed).

- trim check for real naming context already defined as suffix
- improve automatic massaging (prettify once)
- add (optimistic) automatic filter massaging
- cleanup of massaging stuff

consistently use dn_match macro throughout slapd

Update copyright statements

hide mapping initialization

lots of migration to struct berval; unfortunately it seems to be broken

cleanup

Added dnPretty2/dnNormalize2 using preallocated destination berval

conversion to berval DN

Changed backglue configuration. Added noSubordinates arg to select_backend
to deal with glued subordinates.

semicolon after colon in goto labels; no C++ style comments; unused vars removed or #ifdef'd

pseudo-root dn bind; a couple of minor fixes

added new logging to back-meta

This is the commit of:
  - librewrite, for string rewriting; it may be used in back-ldap
    by configuring with '--enable-rewrite'. It must be used in
    back-meta. There's a text file, 'libraries/librewrite/RATIONALE',
    that explains the usage and the features. More comprehensive
    documentation will follow.
  - enhancements of back-ldap (ITS#989,ITS#998,ITS#1002,ITS#1054 and ITS#1137)
    including dn rewriting, a fix to group acl matching and so
  - back-meta: a new backend that proxies a set of remote servers
    by spawning queries. It uses portions of back-ldap and the rewrite
    capabilities of librewrite. It can be compiled by configuring
    with `--enable-ldap --enable-rewrite --enable-meta'.
    There's a text file, 'servers/slapd/back-meta/Documentation', that
    describes the main features and config statements.

Note: someone (Kurt?) should run 'autoconf' and commit 'configure' as
my autoconf version must be different: my configures contain a number
of differences and I didn't feel comfortable in adding them :)

Numerous minor fixes from HEAD, see CHANGES

First round of imports from HEAD

Suck in changes from HEAD
    Fix slapd schema error alignment bug
    Update slapd SASL proxy policy code
    Update slapd require "strong" check
    Update back-bdb entry locking
    Add slapd disallow bind_simple_unprotected directive
    Add back-monitor added monitorContext support
    Add slapd IPv4/v6 only options
    Ass slapd SASL setpass support
    Remove lint
    Build Environment
        Add monitor backend test
        Update <ac/socket.h> SHUT_RDWR
        Fix SASL-less build issues
        Fix back-perl build issues

Suck in latest changes from HEAD

Happy new year!

Sync with HEAD as of 14-March-2004

Happy new year

Sync with HEAD

Sync with HEAD

Changes from HEAD for beta

Fix test logic for quarantine

Happy new year! (belated)

import URI parsing fix from HEAD

import DN containment checks from HEAD

import back-ldap/back-meta improvements from HEAD

import selected fixes/improvements to proxy backends from HEAD:

        Fixed slapd-ldap/meta privileged conn caching (ITS#4547)
        Fixed slapd-ldap chase-referrals switch (ITS#4557)
        Fixed slapd-ldap bind behavior when idassert is always used (ITS#4781)
        Fixed slapd-ldap response handling bugs (ITS#4782)
        Fixed slapd-ldap/meta privileged connections handling (ITS#4791)
        Fixed slapd-meta retrying (ITS#4594, 4762)
        Fixed slapo-chain referral DN use (ITS#4776)

happy new year

import fixes to ITS#4488,4497 and related documentation

Changes suggested by Ando.

import selected fixes/enhancements from HEAD (ITS#4387, partial ITS#4390)

Happy new year!

ITS#4115 fixes for back-meta/ldap

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD
Ready for release?

Sync with HEAD
Changes needs updating for release...

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Merge from HEAD

Initial round of changes for 2.3 beta

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

ITS#6801

More for ITS#5421

Happy New Year!

ITS#6664

ITS#6642

happy belated new year

ITS#6190

Update copyright for next release

Warnings cleanup

ITS#5647

ITS#5614

ITS#5593

ITS#5355

revert test logic for quarantine

ITS#5440

Happy new year! (belated)

Silence warnings

import URI parsing fix from HEAD

Sync with HEAD for OL 2.4.5

Quick merge: everything from HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD