summaryrefslogtreecommitdiffstats
path: root/config.h.in
Commit message (Collapse)AuthorAgeFilesLines
* OpenLDAP supportcleanupRich Megginson2009-07-071-0/+12
| | | | | | | | | | These changes allow the server to be built with OpenLDAP (2.4.17+). A brief summary of the changes: * #defines not provided by OpenLDAP were copied into slapi-plugin.h and protected with #ifndef blocks * where it made sense, I created slapi wrapper functions for things like URL and LDIF processing to abstract way the differences in the APIs * I created a new file utf8.c which contains the UTF8 functions from MozLDAP - this is only compiled when using OpenLDAP * I tried to clean up the code - use the _ext versions of LDAP functions everywhere since the older versions should be considered deprecated * I removed some unused code NOTE that this should still be considered a work in progress since it depends on functionality not yet present in a released version of OpenLDAP, for NSS crypto and for the LDIF public API.
* Generated autotools files for syntax validation feature.Nathan Kinder2009-05-111-1/+1
| | | | | | | A change was also made to Makefile.am to avoid library versioning for our C++ plug-in libraries. This change should allow us to use autogen.sh on recent platforms without running into issues during build-time.
* Added capability to validate syntax of values being added to the database. ↵Nathan Kinder2009-05-081-0/+3
| | | | | | Also added numericstring syntax support. For more details, see the design doc at http://directory.fedoraproject.org/wiki/Syntax_Validation_Design
* Resolves: bug 469261Rich Megginson2008-11-121-0/+12
| | | | | | | | | | | | | | | | | | | | | | | | Bug Description: Support server-to-server SASL - kerberos improvements Reviewed by: ssorce (Thanks!) Fix Description: I made several improvements to the kerberos code at Simo's suggestion First look for the principal in the ccache. If not found, use the username if it does not look like a DN. If still not found, construct a principal using the krb5_sname_to_principal() function to construct "ldap/fqdn@REALM". Next, see if the credentials for this principal are still valid. In order to grab the credentials from the ccache, I needed to construct the server principal, which in this case is the TGS service principal (e.g. krbtgt/REALM@REALM). If the credentials are present and not expired, then the code assumes they are ok and does not acquire new credentials. If the credentials are expired or not found, the code will then use the keytab to authenticate. Based on more feedback from Simo, I made some additional changes: * Go ahead and reacquire the creds if they have expired or will expire in 30 seconds - this is not configurable but could be made to be - 30 seconds should be long enough so that the credentials will not expire by the time they are actually used deep in the ldap/sasl/gssapi/krb code, and short enough so that this won't cause unnecessary credential churn * Retry the bind in the case of Ticket expired. There is no way that I can see to get the actual error code - fortunately the extended ldap error message has this information Platforms tested: Fedora 8, Fedora 9 Flag Day: no Doc impact: oh yes
* Resolves: 207457Nathan Kinder2008-10-291-0/+10
| | | | Summary: Added 64-bit atomic functions for platforms lacking built-ins.
* Resolves: 207457Nathan Kinder2008-10-241-0/+3
| | | | Summary: Convert counters to 64-bit capable Slapi_Counter type.
* Resolves: #468248Noriko Hosoi2008-10-231-0/+3
| | | | | | | | | | Summary: LDAPI: when nsslapd-ldapiautodnsuffix doesn't exist - Bind is incorrect Description: - introducing --enable-auto-dn-suffix option to configure (disabled by default) - building the auto-dn-suffix code only when the option is set ====================== autoconf version 2.59 automake version 1.9.6
* reran autogen.sh (automake V1.9.6, autoconf V2.59)Noriko Hosoi2008-10-191-1/+1
|
* Related: 207457Nathan Kinder2008-10-171-1/+1
| | | | Summary: Add support for 64-bit counters (phase 1).
* fix inttypes build breakage on HP-UXRich Megginson2008-10-131-0/+3
|
* Resolves: #450753Noriko Hosoi2008-07-021-1/+1
| | | | Summary: Add CLI for dynamic reload schema file task
* Resolves: 450746Nathan Kinder2008-06-101-1/+1
| | | | Summary: Added CLI for creating memberOf fix-up task entry.
* Resolves: #436388Noriko Hosoi2008-05-161-0/+3
| | | | | | Summary: LDAPI: introduce --enable-autobind to support AUTOBIND Description: --enable-autobind is supported. Unless it's set, the auto-bind code is not compiled in.
* Resolves bug 434403Rich Megginson2008-02-271-1/+4
|
* Initial import of memberof plugin from FreeIPA (refactored from changeset ↵Nathan Kinder2008-02-191-1/+1
| | | | 640:9c57bd91b32f if ipa-memberof.c).
* Resolves: 188320Nathan Kinder2007-10-191-3/+0
| | | | Summary: Don't define _XOPEN_SOURCE_EXTENDED on HP-UX.
* Resolves: #339031Noriko Hosoi2007-10-191-0/+3
| | | | Summary: Solaris: warnings reported by the Solaris compiler
* Resolves: #188320Noriko Hosoi2007-10-181-0/+3
| | | | Summary: HP-UX: warnings reported by the HP-UX compiler
* revert back to using autoconf 2.59 - 2.61 causes the -avoid-version flag to ↵Rich Megginson2007-08-091-1/+1
| | | | be ignored, which causes rpm packaging errors
* forgot to commit the autotool generated filesRich Megginson2007-08-081-1/+1
|
* Resolves: bug 239764Rich Megginson2007-05-161-0/+3
| | | | | | | | | | | Description: bitwise matching plugin Fix Description: Samba requires backend LDAP servers to support bitwise operations. This is to support search filters like this: (|(|(&(!(groupType:1.2.840.113556.1.4.803:=1))(groupType:1.2.840.113556.1.4.803:=2147483648)(groupType:1.2.840.113556.1.4.804:=10))(samAccountType=805306368))(samAccountType=805306369)) Note: This patch works for Samba's tests, but hasn't been more broadly or specifically tested. This commit also adds an --enable-bitwise option to configure (enabled by default - use --disable-bitwise to disable it) and adds the plugin entry to the configuration during new instance creation. Platforms tested: FC5/FC6
* Resolves: 236612Nathan Kinder2007-04-261-0/+3
| | | | Summary: Modified the with-fhs and with-fhs-opt configure options
* Resolves: bug 229691Rich Megginson2007-02-221-0/+9
| | | | | | | | | Bug Description: Add enable switches for optional/experimental features Reviewed by: nkinder, nhosoi, prowley (Thanks!) Fix Description: Added --enable-pam-passthru, --enable-dna, and --enable-ldapi. They are all on by default and must be explicitly disabled (--disable-pam-passthru). These all cause ENABLE_xxx to be defined for C code so that we can enclose the code in #ifdef ENABLE_PAM_PASSTHRU blocks, for example. For the first two, these also cause the plugins to be built - so that if you specify --disable-pam-passthru, the plugin code will not be built at all. I discovered a nifty autoconf macro called AS_HELP_STRING - this nicely formats the help messages output by configure --help. I don't know if it's worth going through all of our m4 code to use this, but I went ahead and fixed configure.ac. Create instance will now add plugin configuration entries (but disabled) for pam passthru and dna if the corresponding ENABLE_ macros are defined. I also fixed a bug with passthru (not pam passthru) - the plugin configuration entry was not being added. Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: no
* Resolves: 229095Nathan Kinder2007-02-161-0/+6
| | | | Summary: Fixed build flags for compiling with pthread on HP-UX.
* Resolves: #215452Noriko Hosoi2006-11-151-0/+72
| | | | Summary: Replacing -D<DEFINE> with AC_DEFINE to reduce the compile command line length
* Auto-generated by autoheader; needs to be in CVS.Noriko Hosoi2006-11-141-0/+285