summaryrefslogtreecommitdiffstats
path: root/ldap/servers/slapd/slapi-plugin.h
diff options
context:
space:
mode:
authorNathan Kinder <nkinder@redhat.com>2009-10-02 13:47:38 -0700
committerNathan Kinder <nkinder@redhat.com>2009-10-02 13:47:38 -0700
commit5593a5f7da88ae37ae032b95c7a3a369e8d61a1a (patch)
treeee0802fd37f211498a7fe5c462c97dbf7cbff9ad /ldap/servers/slapd/slapi-plugin.h
parentab6e5a77de769f55d55e70d7754ec732385e7067 (diff)
downloadds-5593a5f7da88ae37ae032b95c7a3a369e8d61a1a.tar.gz
ds-5593a5f7da88ae37ae032b95c7a3a369e8d61a1a.tar.xz
ds-5593a5f7da88ae37ae032b95c7a3a369e8d61a1a.zip
Add ssf bind rule to access control plug-in.
This patch adds a new ssf bind rule keyword to the access control plug-in. This allows you to write ACIs that require a specific level of encryption for the rule to apply. The new keyword can be used with '=', '!=', '<', '>', '<=' and '>=' comparators. I added code that stores the SSF in effect for an operation into the operation struct. The value that we store is the higher of the two between the SASL SSF and the SSL/TLS SSF.
Diffstat (limited to 'ldap/servers/slapd/slapi-plugin.h')
-rw-r--r--ldap/servers/slapd/slapi-plugin.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/ldap/servers/slapd/slapi-plugin.h b/ldap/servers/slapd/slapi-plugin.h
index 5ed054d9..1d545a0a 100644
--- a/ldap/servers/slapd/slapi-plugin.h
+++ b/ldap/servers/slapd/slapi-plugin.h
@@ -3052,6 +3052,7 @@ int slapi_reslimit_get_integer_limit( Slapi_Connection *conn, int handle,
#define SLAPI_OPERATION_TYPE 590
#define SLAPI_OPERATION_AUTHTYPE 741
#define SLAPI_OPERATION_ID 744
+#define SLAPI_OPERATION_SSF 750
#define SLAPI_IS_REPLICATED_OPERATION 142
#define SLAPI_IS_MMR_REPLICATED_OPERATION 153
#define SLAPI_IS_LEGACY_REPLICATED_OPERATION 154