summaryrefslogtreecommitdiffstats
path: root/src/ldap_helper.c
Commit message (Collapse)AuthorAgeFilesLines
* Don't loop if the connection fails at startMartin Nagy2010-03-231-0/+2
| | | | Resolves ticket #25
* Fail over to passwordless login if other method failsMartin Nagy2010-03-231-1/+14
| | | | Resolves ticket #26
* Add a fake_mname optionMartin Nagy2010-03-231-4/+15
| | | | | | | | The fake_mname option is optional and will cause the LDAP driver to ignore idnsSOAmName LDAP attribute and use the value of this option instead. Resolves ticket #17
* Remove duplicate get_soa_record() callMartin Nagy2009-09-161-2/+0
|
* Fix a typo in previous commitMartin Nagy2009-09-041-1/+1
|
* Fix the reconnection codeMartin Nagy2009-09-041-5/+5
| | | | | | | | We only did a new ldap bind with the old ldap handle, which didn't work. We fix this by getting rid of the old handle and do a brand new init and bind. Resolves ticket #20
* Fix a memory leak in ldap instance creationMartin Nagy2009-09-041-0/+1
| | | | | When destroying an ldap instance we didn't destroy the sasl_realm setting string.
* Use uppercase LDAP booleans according to RFC 2252Martin Nagy2009-08-311-1/+1
| | | | | | The search filter for active zones used value "True" for attribute "idnsZoneActive". This is incorrect according to section 6.4 of RFC 2252 which states that boolean syntax is either "TRUE" or "FALSE".
* Change license: GPLv2 or laterMartin Nagy2009-08-041-2/+3
| | | | | Allow publishing the code under GPL version 2 or later. Before that, we only allowed to use version 2.
* Consolidate the SASL authenticationMartin Nagy2009-08-041-8/+15
| | | | | | | | * Change the default authentication method to GSSAPI * Add "sasl_auth_name" setting for SASL_CB_AUTHNAME * Add "sasl_password" setting for SASL_CB_PASS to be used instead of ordinary password, which will now be only used for simple authentication
* Cleanup of authentication codeMartin Nagy2009-08-041-29/+18
| | | | Mostly adding logging statements and removing some olds stuff.
* Gracefully fail if no zones are found in the initial lookupMartin Nagy2009-08-041-4/+11
| | | | | | | | If the initial search fails to find any zones, destroy the database instance, but return ISC_R_SUCCESS to BIND, since this is not technically a fault because of which BIND should abort. We do this because there is no point in refreshing zones if there are not any and it is not possible to add them later.
* Periodically refresh zone settingsMartin Nagy2009-08-041-21/+22
| | | | | | | | | | | | | | The original intent was to add and remove zones periodically, based on changes in the LDAP database. It seems, however, that this is not possible with the way BIND views are working. Each view can have zones added during the configuration phase, but not after that. Luckily, we can at least change their SSU table without the need to reload named. This commit also has some changes to the function interfaces and makes the whole thing a lot simpler. Creation of the ldap instances and cache instances is now left on the zone manager. Additionally, we now put view and zonemgr pointers right into into the ldap instance. This makes the API for refresh_zones_from_ldap() and create_zone() much more simpler.
* Use the zone register for internal storage of zonesMartin Nagy2009-08-041-170/+124
| | | | | | | | | | | Moving the zone registration into a separate file will make the code more modular and easier to read and change. Also, we are preparing the refresh_zones_from_ldap() function for it's intended purpose of being able to add zones and later modify them if something has changed. Unfortunately, we will only be able to change some of the zone attributes (for now the update policy). We will not be able to create new zones as they are added to LDAP because that requires a reload of the name server.
* Allow updating of the SOA recordMartin Nagy2009-08-041-11/+49
| | | | | | | | | Since the SOA record is special for us, as we store it in multiple LDAP attributes, it was ignored until now. This is now fixed, but we only allow changes to the numeric attributes: serial, refresh, retry, expire and minimum. Resolves ticket #5
* Cosmetic changes to ldap_rdttl_to_ldapmod()Martin Nagy2009-08-041-6/+4
|
* Fix memory leak in ldap_rdttl_to_ldapmod()Martin Nagy2009-08-041-2/+1
|
* Improve addition operation by using ldap_add_ext_s()Martin Nagy2009-08-041-12/+46
| | | | | | | | | Until now, we only used ldap_modify_ext_s() when adding a new record. This is not right, because the label might have not existed before. We solve this now by checking for LDAP_NO_SUCH_OBJECT error and using ldap_add_ext_s() if needed. Partially resolves ticket #1
* Add annotations to printf-like functionsMartin Nagy2009-08-041-1/+1
| | | | | | The ISC_FORMAT_PRINTF() macro will make sure that gcc checks if these functions are used correctly. Also fix bugs that were found along the way.
* Remove unneeded castsMartin Nagy2009-08-041-4/+4
|
* Rename ldap_record_to_rdatatype to ldap_attribute_to_rdatatypeMartin Nagy2009-08-041-1/+1
|
* Rename ldap_db_t to ldap_instance_tMartin Nagy2009-08-041-154/+154
| | | | | | | | | Equivalent to: s/new_ldap_db/new_ldap_instance/ s/destroy_ldap_db/destroy_ldap_instance/ s/manager_get_ldap_db_and_cache/manager_get_ldap_instance_and_cache/ s/ldap_db_t/ldap_instance_t/ s/ldap_db/ldap_db/
* Rename ldap_instance_t to ldap_connection_tMartin Nagy2009-08-041-171/+172
| | | | | | | | | Equivalent to: s/ldap_instance/ldap_connection s/ldap_inst/ldap_conn This commit starts a series of larger code refactoring effort. More changes and renames will follow.
* Add basic support to get a tgt autonomouslySimo Sorce2009-05-251-0/+36
| | | | | Use mutex to serialize kinit. Reuse existing valid creedentials if any.
* Let DNS Updates set the TTLSimo Sorce2009-05-251-4/+60
| | | | A bit hackish, but it does the job.
* Enable reading TTL for ldap entrySimo Sorce2009-05-251-14/+17
|
* Re-enable SASL/GSSAPI with fixes to make it work.Simo Sorce2009-05-221-11/+18
| | | | | | Still requires a manual kinit as the named user. also requires to set the sasl user in named.conf ex: arg "sasl_user DNS/ipaserver.example.com";
* ldap_helper.c: Shut up gcc warningsMartin Nagy2009-04-281-2/+3
|
* Add reconnection logic.Martin Nagy2009-04-271-54/+142
|
* Make ldap_rdata_to_char_array() static.Martin Nagy2009-04-241-1/+3
|
* Add update ACL capabilities.Martin Nagy2009-04-241-24/+69
|
* Fix rdata parsing.Martin Nagy2009-04-231-8/+8
|
* Change the setting name 'host' to 'uri'.Martin Nagy2009-04-231-8/+8
|
* Disable SASL for now, it doesn't work properly.Martin Nagy2009-04-231-0/+7
|
* Prepare the tree for conversion to autoconf.Martin Nagy2009-03-301-0/+1707
All source files are now moved to src/ and the old Makefile is removed.
generated by cgit (git 2.34.1) at 2025-09-26 12:32:39 +0000