src - OpenBSD base system

Age	Commit message (Collapse)	Author
2015-01-16	change to <limits.h> universe. The only changes in the binary are due	Theo de Raadt
	to the heavy use of assert. ok millert
2012-06-16	Protect against fd exhaustion when reopening database files. Only accept	Jonathan Matthew
	client or control connections when there are at least 8 fds available, and close a connection before calling imsg_read if it would be unable to accept an fd from the parent process. ok gilles@
2012-04-11	rate limiting of accept() in various cases. Testing by jmatthew. there	Theo de Raadt
	maybe still be a corner case where it needs one more file descriptor beyond the limit..
2010-11-10	Make -dvv flags produce debug traces of decoded BER messages on stderr.	Martin Hedenfal
	Also shows a hexdump of the input buffer if BER decoding fails. Useful when debugging protocol issues.
2010-11-03	Evaluate filters according to the three-valued logic of X.511, as required	Martin Hedenfal
	by RFC 4511. A filter term can now be evaluated as undefined if the attribute description is not recognized, the attribute type doesn't define the appropriate matching rule, or the filtering is not implemented. This also implements the NOT filter in the query planner.
2010-10-19	Remember the bind DN after BSD authentication. This makes access control	Martin Hedenfal
	work for SASL and BSDAUTH binds as it does for simple binds.
2010-09-01	Move generic imsg/libevent glue to a separate file.	Martin Hedenfal
	with eric@ at c2k10
2010-07-10	Retry requests when the btree is busy. Without this, clients will just hang	Martin Hedenfal
	waiting for a response if the btree was being reopened when the request was received.
2010-07-01	Implement the LDAP compare operation.	Martin Hedenfal

2010-06-30	Add a global root user that is allowed to read/write entries in all local	Martin Hedenfal
	namespaces. Useful for dump/restore of all namespaces.
2010-06-29	Add support for referrals. Referrals are configured in the config file,	Martin Hedenfal
	either in the global context or in a namespace. The latter can be used to delegate requests to different servers for specific parts of the DIT. The former is a global catch-all referral.
2010-06-29	Remember on what listener a connection got from, and return protocol error	Martin Hedenfal
	if trying to use starttls without a configured certificate, instead of just blocking the client.
2010-06-29	Rewrite the schema parser, as it's not a context-free grammar.	Martin Hedenfal
	This also brings the config parser more in line with other parse.y in the tree. The new schema parser also supports symbolic OID names. You need to update your /etc/ldapd.conf. Schema files are no longer included with the 'include' keyword, you have to use 'schema' for that. Moves schema-related structures to a separate include file to ease reuse.
2010-06-27	return value unused, found by lint	Martin Hedenfal

2010-06-27	Remove unused code.	Martin Hedenfal

2010-06-27	remove an unused typedef	Martin Hedenfal

2010-06-23	remove leftovers from old compaction code	Martin Hedenfal

2010-06-23	Remove compaction and indexing from ldapd. It is better done by a separate	Martin Hedenfal
	process now that the btree can pick up the changes automatically.
2010-06-15	Move around some functions to ease re-use from ldapctl.	Martin Hedenfal

2010-06-15	Make modify and simple auth requests open their own transactions, as search	Martin Hedenfal
	already does. Trigger a reopen imsg request if either the data or index databases are compacted. Queue the failed request and try again when the file is reopened. Compaction can now be done by a separate process, and ldapd will pick up the change and reopen the file.
2010-06-15	Implement support in the parent to (re-)open database files on behalf of	Martin Hedenfal
	the unprivileged child over imsg. Part of a larger change that will fix database compaction.
2010-06-11	Wrap searches in a read-only transaction so it is guaranteed to see a	Martin Hedenfal
	consistent snapshot of the database. Also fixes a couple of format string errors for long long ints.
2010-06-03	Open database files before chrooting, and use an absolute path to	Martin Hedenfal
	the database files, instead of relying on the chrooted-to path. This breaks compaction as the ldape process can't re-open the database files. This is being worked on. ok gilles@
2010-05-31	Initial import of ldapd, a small LDAP daemon. Work in progress.	Martin Hedenfal
	ok deraadt@ jacekm@ gilles@ back@ henning@ blambert@