diff options
author | Nathan Kinder <nkinder@redhat.com> | 2009-10-02 13:47:38 -0700 |
---|---|---|
committer | Nathan Kinder <nkinder@redhat.com> | 2009-10-02 13:47:38 -0700 |
commit | 5593a5f7da88ae37ae032b95c7a3a369e8d61a1a (patch) | |
tree | ee0802fd37f211498a7fe5c462c97dbf7cbff9ad /ldap/servers/slapd/slapi-plugin.h | |
parent | ab6e5a77de769f55d55e70d7754ec732385e7067 (diff) | |
download | ds-5593a5f7da88ae37ae032b95c7a3a369e8d61a1a.tar.gz ds-5593a5f7da88ae37ae032b95c7a3a369e8d61a1a.tar.xz ds-5593a5f7da88ae37ae032b95c7a3a369e8d61a1a.zip |
Add ssf bind rule to access control plug-in.
This patch adds a new ssf bind rule keyword to the access control
plug-in. This allows you to write ACIs that require a specific
level of encryption for the rule to apply. The new keyword can
be used with '=', '!=', '<', '>', '<=' and '>=' comparators.
I added code that stores the SSF in effect for an operation into
the operation struct. The value that we store is the higher of
the two between the SASL SSF and the SSL/TLS SSF.
Diffstat (limited to 'ldap/servers/slapd/slapi-plugin.h')
-rw-r--r-- | ldap/servers/slapd/slapi-plugin.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ldap/servers/slapd/slapi-plugin.h b/ldap/servers/slapd/slapi-plugin.h index 5ed054d9..1d545a0a 100644 --- a/ldap/servers/slapd/slapi-plugin.h +++ b/ldap/servers/slapd/slapi-plugin.h @@ -3052,6 +3052,7 @@ int slapi_reslimit_get_integer_limit( Slapi_Connection *conn, int handle, #define SLAPI_OPERATION_TYPE 590 #define SLAPI_OPERATION_AUTHTYPE 741 #define SLAPI_OPERATION_ID 744 +#define SLAPI_OPERATION_SSF 750 #define SLAPI_IS_REPLICATED_OPERATION 142 #define SLAPI_IS_MMR_REPLICATED_OPERATION 153 #define SLAPI_IS_LEGACY_REPLICATED_OPERATION 154 |