summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* [172411] Use system SASL on RHELNoriko Hosoi2005-11-041-3/+0
| | | | Back off "%config line", which is not needed on DS7.2.
* [172411] Use system SASL on RHELNoriko Hosoi2005-11-041-1/+30
| | | | | | Added "cyrus-sasl >= 2.1.19" to the spec file: +Requires: perl,java-1.4.2-ibm,cyrus-sasl >= 2.1.19 Note: this diff contains the upgrade pre operaton to shutdown the servers before unpacking the files.
* Fixed the build: removed __attribute__ from the previous checkin.Noriko Hosoi2005-11-041-7/+7
|
* [172411] Use system SASL on RHELNoriko Hosoi2005-11-042-12/+14
|
* Bug(s) fixed: 166229, 166081Rich Megginson2005-11-031-0/+54
| | | | | | | | | | | | | | | | | | | | | | | | Bug Description: slapd crashes during SASL authentication Reviewed by: Noriko (Thanks!) Branch: HEAD and Directory71RtmBranch Fix Description: When we build cyrus-sasl on RHEL, we tell it to use berkeley db for its sasldb database. It uses whatever version of berkeley db is installed in the system. On RHEL3, this is usually libdb-4.1. However, at runtime, slapd uses 4.2, leading to conflicts. This doesn't happen on RHEL4 because it already has 4.2 on it. The db is used to lookup auxiliary properties (auxprop) related to the user, such as password or whatever. This happens in sasl after the user is looked up. In our server, the way we use it, we don't care about these auxprops, or we get them in another way. If you don't tell sasl which auxprop plugin you want to use, it tries to use all of them, which means it will attempt to use the sasldb plugin, which will lead to the crash. The solution is to add our own auxprop plugin which is just a dummy that does nothing, and tell sasl to use our plugin. Platforms tested: RHEL3, RHEL4 Flag Day: no Doc impact: no QA impact: retest New Tests integrated into TET: none
* Pull ldapconsole from integration areaNathan Kinder2005-11-011-2/+2
|
* Bug(s) fixed: 172056Rich Megginson2005-10-316-63/+103
| | | | | | | | | | | | | | | | Bug Description: Fix internal component versions and formats for initial FDS 1.0 build Reviewed by: Noriko (Thanks!) Fix Description: Some of the naming conventions needed to change e.g. /s/b/c/ldapconsole10ext became /fedora/components/directoryconsole/1.0. Made the ds onlinehelp docs available to build externally. Perldap has no zip file anymore, just the dirs we copy over. Adminserver includes the unzipped directories - we need to fix that eventually, but in the meantime, I made tar skip those unzipped directories. I also merged Noriko's fix for the assecure.txt problem in setup into Fedora DS. Noriko also pointed out an unused Makefile variable. Platforms tested: RHEL3 Flag Day: no Doc impact: no
* Bug(s) fixed: 172005Rich Megginson2005-10-2947-136/+150
| | | | | | | | | | | | | Bug Description: Change ldapserver version to 1.0 Reviewed by: Noriko (Thanks!) Fix Description: This also fixes some lingering build issues involving perldap, which is no longer a separate setup package, but just gets included into DS in a similar manner to nspr, nss, etc. Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* Bug(s) fixed: 171892Rich Megginson2005-10-296-56/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | Bug Description: parameterize ldapjdk and crimson jar locations Reviewed by: Noriko, Nathan (Thanks!) Fix Description: This is also needed for GAR. The xmltools also ldapjdk.jar, and needs crimson.jar. DSMLGW does not need crimson.jar. It makes sense to separate these out of the dsmlgw jars. I changed the dsmlgw build.xml to be able to pickup ldapjdk.jar from a different location - defaults to the usual dist/classes. Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none Bug(s) fixed: 172005 Bug Description: Change ldapserver version to 1.0 Reviewed by: Noriko (Thanks!) Fix Description: This also fixes some lingering build issues involving perldap, which is no longer a separate setup package, but just gets included into DS in a similar manner to nspr, nss, etc. Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* 163064 - It appears that Active Directory has a problem where it allows ↵Nathan Kinder2005-10-271-2/+5
| | | | duplicate values for system-only multivalued attributes. This change just skips the dscorepropagationdata attibute when receiving a change from DirSync.
* Bug(s) fixed: 171854Rich Megginson2005-10-274-9/+14
| | | | | | | | | | | | | | | Bug Description: Allow DSMLGW to build with GAR build scripts Reviewed by: nhosoi@redhat.com (Thanks!) Fix Description: Add a new macro DSMLGWJARS_BUILD_DIR which defaults to dist/classes for internal builds. For external builds, the developer can grab these jars from their respective locations, or grab the bundle from the fds download site, which is what the GAR builds will do. The location is then passed in on the make command line as DSMLGWJARS_BUILD_DIR=/path/to/dsmlgwjars. Regular internal builds should continue to work as always. Platforms tested: RHEL4 Flag Day: no Doc impact: no
* [167982] Service Pack frameworkNoriko Hosoi2005-10-256-19/+504
| | | | Reporting the patch generation code to the trunk.
* Bug(s) fixed: 171066Rich Megginson2005-10-2156-1360/+420
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug Description: Get rid of nsperl; use perldap with system perl Reviewed by: Noriko, Rob, Nathan (Thanks!) Branch: HEAD Fix Description: All perl scripts are made executable by using the #!/usr/bin/env perl *nix trick. This means that the correct version of perl must be in the user's PATH e.g. 5.6.1 or later. This version is either shipped with the OS or available on all platforms. On HP/ux, it is available as a depot which is installed in /opt/perl. For CGI perl scripts, the PATH can be set in the admserv.conf, so we may have to do that for HP/ux. To make perldap work, some ugly hacks are involved. Each perl script that uses perldap has a BEGIN section that figures out where it is in the server root, sets a server root variable, and sets LD_LIBRARY_PATH and SHLIB_PATH to point to serverroot/shared/lib. Perldap will be installed under serverroot/lib/perl. This directory will have 3 subdirectories: arch - containing the binary files; auto - containing autoloaded perl modules; and Mozilla - containing the base perldap .pm files. The BEGIN section also sets the perl INC path to find those modules. The directory gets rid of nsperl plus a lot of old crufty perl building code that we do not use anymore. Those are the removed files. The admin server code also gets rid of the perl.c wrapper. Noriko pointed out that this does not take care of upgrade install, so I added several more files and diffs to take care of that case. Basically, go through the tasks in o=netscaperoot and replace perl?scriptname with just scriptname. Also, go through all of the template generated scripts and replace the shebang line with #!/usr/bin/env perl, and make sure they are chmod +x. I also found a few more places that referenced nsperl and removed them. Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* also checkin fix for 170350 onto trunkRich Megginson2005-10-211-7/+29
|
* 170071 - Automatically add grouptype for new groups being synchd to NT4Nathan Kinder2005-10-202-1/+13
|
* 170816 - Don't consume password changes if modify failsNathan Kinder2005-10-141-0/+5
|
* 170556 - Make passsync obey backoff for retries when DS is downNathan Kinder2005-10-142-29/+28
|
* 170135 - Improved passsync logging facilitiesNathan Kinder2005-10-131-78/+111
|
* 170558 - Add certutil, pk12util and missing dlls to PassSync.msiNathan Kinder2005-10-121-0/+9
|
* 170558 - Add certutil, pk12util and missing dlls to PassSync.msiNathan Kinder2005-10-121-46/+56
|
* 170328 - Fixed modify type installation so it actually updates the registryNathan Kinder2005-10-121-0/+26
|
* 170321 - Increase winsync version to 1.0.1Nathan Kinder2005-10-113-5/+5
|
* 169954 - Moved illegal declaration to the top of code blockNathan Kinder2005-10-061-1/+3
|
* 169954 - Winsync initialization would hang with certain entries. Fixed ↵Nathan Kinder2005-10-061-2/+11
| | | | improper use of ldap_get_next.
* fixed internal build failure...Noriko Hosoi2005-10-051-1/+1
|
* [167982] Service Pack frameworkNoriko Hosoi2005-10-044-14/+75
| | | | Ported the patch making code from Directory71RtmBranch to the trunk.
* Bug(s) fixed: 169663Rich Megginson2005-10-0322-428/+216
| | | | | | | | | | | | | | | | | Bug Description: Build Cleanup - open source AS, other components; remove Fortezza; etc. Reviewed by: Noriko, Nathan, Rob C. (Thanks!) Fix Description: This allows us to build DS entirely outside of the firewall with entirely open source components, including setuputil, adminutil, adminserver, and java components. I still need to address some issues around nsperl, perldap, dsmlgw, xmltools, and general ease of build. This also gets rid of the crufty Fortezza build stuff and addresses some other minor build issues. Platforms tested: RHEL4 Flag Day: yes, but the internal builds should not be affected Doc impact: wiki QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* 169388 - Fixed attribute comparision helper function that was causing ↵Nathan Kinder2005-09-281-1/+1
| | | | certain changes to not get synched.
* [167982] Service Pack frameworkNoriko Hosoi2005-09-228-5/+450
| | | | Ported the patch making code to the trunk.
* 168322 - Check size of hash needed before base64 encoding password hashesNathan Kinder2005-09-141-2/+2
|
* 168309 - Removed setup wrappers used for Java packaging and added RPM ↵Nathan Kinder2005-09-142-27/+6
| | | | dependency for java-1.4.2-ibm package.
* upgrade winsync to 20050912 for bug 159037 and upgrade directory console to ↵Rich Megginson2005-09-141-3/+3
| | | | 20050913 for bug 167761
* Fix for NT build failure: undefined symbols in index.cNoriko Hosoi2005-09-091-2/+2
|
* 165228 - Don't have RPM auto-generate provides listNathan Kinder2005-09-071-0/+2
|
* [167679] modify upgradeServer to upgrade db2index.plNoriko Hosoi2005-09-071-2/+2
| | | | | | | To fix the bug "[160003] db2index.pl cannot find libldap50.so if only certain parameters are used", template-db2index.pl has been modified. When upgrading existing servers, the perl scripts are not touched unless forced to. This upgradeServer provides the framework.
* 167441 - Added SHA2 hashed password storage support.Nathan Kinder2005-09-066-79/+509
|
* Pull setuputil from sbsint, not sbc.Nathan Kinder2005-09-061-2/+2
|
* [167478] setup script needs to check the DS instanceNoriko Hosoi2005-09-021-1/+12
| | | | if the instance dir exists, run ns-config with "-r".
* Bug(s) fixed: 167453Rich Megginson2005-09-0216-138/+115
| | | | | | | | | | | | | | | | | | Bug Description: Use all open source components Reviewed by: Noriko (Thanks!) Fix Description: This changes the DS 72 build to pick up the new Admin Server open source candidate (using Apache, modules, etc), and the new adminutil and setuputil components. The code has been changed to reflect the new naming (adminsdk -> adminutil, setupsdk -> setuputil) and new versions of these components (7.1) and new /s/b/c disk layout where applicable. We don't really get very much from the admin server anymore, just the admin and base packages. All of the other setup stuff (setup, setup.inf, svrcore, etc.) come directly from the setuputil package. Platforms tested: RHEL3 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* [167264] Update branding script data to include the revision infoNoriko Hosoi2005-09-013-3/+9
| | | | | 1) Makefile: Added debrandDirectory target for debranding 2) nsdefs.mk: Introduced a new macro NOSP_DIR_VERSION.
* Bug(s) fixed: 165641Rich Megginson2005-08-302-2/+3
| | | | | | | | | | | | | | Bug Description: ./ns-slapd crashes on bind containing invalid dn and password Reviewed by: Noriko (Thanks!) Branch: HEAD Fix Description: It's really crashing on the search request. The problem is that the server assumes all strings are encoded in utf8 format, since that is the only encoding allowed by the LDAP standards. Non-utf8 works in most places except the function slapi_utf8StrToLower(), which returns NULL given a string of non-utf8 bytes. The fix for this particular problem is to check for a NULL return value and handle accordingly. The real solution to this problem would be for the server to check for valid utf8 strings in _all_ LDAP data, according to the syntax of the attribute (e.g. for binary or octet string syntax data, and other binary formats, all bets are off, but then we shouldn't be doing strtolower on these blobs either). And, while we're at it, add data validation based on syntax for _all_ attributes e.g. in a pre-op. Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* Bug(s) fixed: 166229Rich Megginson2005-08-291-3/+8
| | | | | | | | | | | | Bug Description: slapd crashes during SASL authentication Reviewed by: Noriko (Thanks!) Branch: HEAD Fix Description: I could not reproduce the crash. I tried several different ways - no password in entry, empty password in entry, SSHA hashed password in entry - no crashes. No useful information from the FDS bug reporter either. In fact I found that SASL Digest-MD5 was not working at all. We needed to use the SASL_AUX_PASSWORD_PROP define instead of hardcoding "userpassword" - I guess sasl is case sensitive. I also fixed some missing new lines in log messages. Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* Bug(s) fixed: 151678Rich Megginson2005-08-261-0/+1
| | | | | | | | | | | Bug Description: new instance creation creates error aci (2 types in RDN) Reviewed by: Nathan (Thanks!) Fix Description: This only seems to occur when logging in to the console as a user other than the Console Admin user (e.g. as Directory Manager in my tests). We need the Console Admin DN or user id to construct the ACIs. This value is held in the suitespot3x_uid form parameter. I had removed it while working on this bug or a related bug earlier, but now that I've added it back, everything seems to be working again. Platforms tested: RHEL4 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing New Tests integrated into TET: none
* [160003] db2index.pl cannot find libldap50.so if only certain parameters are ↵Noriko Hosoi2005-08-251-132/+130
| | | | | | | | used In the perl script db2index.pl, before executing any ldap client command line tools, should have chdir to the <dsroot>/shared/bin, where the rpath is set from.
* [Bug 164834] modify/replace allows multiple same valued attributes in an entryNoriko Hosoi2005-08-255-94/+113
| | | | | | | | 1) Eliminated SLAPD_MODUTIL_TREE_THREASHHOLD from attr.c as well as valueset.c. With this change, if an attribute has more than 1 value to add/replace/delete, it creates an AVL tree to check the duplicates. 2) Replace was not checking the duplicated value at all. Added a code to put the attribute values into the AVL tree as being done for add and delete.
* [Bug 166632] dbscan: not to truncate the entry even if it is larger than BUFSIZNoriko Hosoi2005-08-251-258/+292
| | | | | | By default, it dumps the entire entry. (it used to be truncated at the BUFSIZ size). In case no need to dump the entire entry, introduced the truncate option "-t".
* 166012 - Use of incorrect iterator in indexing code was causing illegal ↵Nathan Kinder2005-08-151-2/+6
| | | | access of memory which sometimes resulted in crashing.
* 165862 - Needed to set BE_INDEX_EQUALITY flag when doing a delete of an entry.Nathan Kinder2005-08-121-1/+1
|
* Bug(s) fixed: 165827Rich Megginson2005-08-121-1/+3
| | | | | | | | | | | | | Bug Description: Daily Acceptance: Directory Install failed to register Directory server as a Red Hat server (81) Reviewed by: Nathan (Thanks!) Fix Description: The index code, in the replace case, was not checking to see if there were actually any values to delete before attempting to delete them. This fix just checks to see if there are any values to delete. Platforms tested: RHEL3 Flag Day: no Doc impact: no QA impact: should be covered by regular nightly and manual testing with the new indexing tests New Tests integrated into TET: none
* 164843 - Modified indexing to deal with attribute subtypesNathan Kinder2005-08-124-37/+171
|