summaryrefslogtreecommitdiffstats
path: root/ldap/servers/slapd/proto-slap.h
diff options
context:
space:
mode:
authorRich Megginson <rmeggins@redhat.com>2010-03-05 12:13:08 -0700
committerRich Megginson <rmeggins@redhat.com>2010-03-05 13:00:09 -0700
commitf4b90ed5e43fa06ea6185cf17073b7a32db6ef4c (patch)
tree09d2f0165f61d38f9a583d559a307a2d9c6f147c /ldap/servers/slapd/proto-slap.h
parentd66eb3dd9fdb9648b5058161bf8a7740a16fb2d8 (diff)
downloadds-f4b90ed5e43fa06ea6185cf17073b7a32db6ef4c.tar.gz
ds-f4b90ed5e43fa06ea6185cf17073b7a32db6ef4c.tar.xz
ds-f4b90ed5e43fa06ea6185cf17073b7a32db6ef4c.zip
Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external
https://bugzilla.redhat.com/show_bug.cgi?id=554573 Resolves: bug 554573 Bug Description: ACIs use bind DN from bind req rather than cert mapped DN from sasl/external Reviewed by: nhosoi (Thanks!) Branch: HEAD Fix Description: Added a new config option - nsslapd-force-sasl-external (on/off) default is off - when set to on, a SIMPLE bind on a connection that has set a DN from a cert will be changed to be a SASL/EXTERNAL bind. Platforms tested: RHEL5 x86_64 Flag Day: no Doc impact: yes - new attribute to document
Diffstat (limited to 'ldap/servers/slapd/proto-slap.h')
-rw-r--r--ldap/servers/slapd/proto-slap.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/ldap/servers/slapd/proto-slap.h b/ldap/servers/slapd/proto-slap.h
index 9133958c..be3b9dde 100644
--- a/ldap/servers/slapd/proto-slap.h
+++ b/ldap/servers/slapd/proto-slap.h
@@ -370,6 +370,7 @@ int config_set_anon_access_switch(const char *attrname, char *value, char *error
int config_set_minssf(const char *attrname, char *value, char *errorbuf, int apply );
int config_set_accesslogbuffering(const char *attrname, char *value, char *errorbuf, int apply);
int config_set_csnlogging(const char *attrname, char *value, char *errorbuf, int apply);
+int config_set_force_sasl_external(const char *attrname, char *value, char *errorbuf, int apply );
#if !defined(_WIN32) && !defined(AIX)
int config_set_maxdescriptors( const char *attrname, char *value, char *errorbuf, int apply );
@@ -507,6 +508,7 @@ int config_get_mempool_maxfreelist();
long config_get_system_page_size();
int config_get_system_page_bits();
#endif
+int config_get_force_sasl_external();
int is_abspath(const char *);
char* rel2abspath( char * );