Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-09-09 | Hide YP-specific xdr_* functions, and have the YP tools link -lrpcsvc | Theo de Raadt | |
as needed. ok miod guenther | |||
2015-07-27 | use file system path (.Pa) semantic markup macros where appropriate. | Igor Sobrado | |
ok jmc@ | |||
2015-02-12 | ber_printf_elements should return NULL if any of its parts fail. | Martin Pelikan | |
Leave the error handling up to its callers. ok reyk | |||
2015-02-11 | YPPROC_XFR will trigger a crash, even if using it doesn't make sense. | Martin Pelikan | |
ok deraadt miod | |||
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt | |
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | |||
2014-11-20 | Don't allow embedded nul characters in strings. | Jonathan Gray | |
Fixes a pfctl crash with an anchor name containing an embedded nul found with the afl fuzzer. pfctl parse.y patch from and ok deraadt@ | |||
2014-11-16 | use sa_family instead of hard coded inet. from Yury Konovalov | Ted Unangst | |
2014-11-14 | Add gcc printf format attributes to yyerror() in parse.y files. | Doug Hogan | |
No yyerror() calls needed to be changed. ok bluhm@ | |||
2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
format string, create a temporary message. OK claudio@ | |||
2014-09-08 | obvious cases of missing .An; | Ingo Schwarze | |
found with the new mandoc(1) MANDOCERR_AN_MISSING warning; no text changes | |||
2014-07-13 | Since the event(s) passed to a callback can be a mask of all events | Kenneth R Westerback | |
of interest and EV_WRITE is or'ed into the interesting events, it is more correct to check both events each time. Pointed out by Claudio. ok henning@ claudio@ | |||
2014-07-13 | Close connection/remove event handler when msgbuf_write() hits an | Kenneth R Westerback | |
EOF. ok jmatthew@ claudio@ | |||
2014-01-22 | relax the cfg file secrecy check slightly to allow group readability | Henning Brauer | |
default permissions and mtree NOT changed. prodded by benno, ok phessler benno jmatthew theo pelikan florian | |||
2014-01-18 | Remove -Wbounded: it is now the compiler default. | Martynas Venckus | |
2013-11-26 | msgbuf_write EAGAIN, ok gilles benno | Henning Brauer | |
all of these from a long train ride | |||
2013-11-25 | use u_char for buffers in yylex, for ctype calls | Sebastian Benoit | |
found by millert@, ok deraadt@ | |||
2013-10-01 | avoid a fd_set overflow by calling a different rpc svc function | Theo de Raadt | |
ok jmatthew millert | |||
2013-08-14 | no longer any need to quote macro lines with >9 args; | Jason McIntyre | |
From: Jan Stary | |||
2013-04-30 | ignore SIGPIPE so we don't fall over if an ldap connection breaks | Jonathan Matthew | |
ok dlg@ | |||
2013-03-06 | as done in ospf{,6}d/relayd, sync yyerror in various other daemons with | Stuart Henderson | |
that from bgpd, so that it logs to syslog when daemonized. | |||
2012-04-30 | Use paged searches so we can handle larger directories. Servers that don't | Jonathan Matthew | |
understand paging, such as ldapd(8), ignore it and return a single set of results as before. from Jim Smith, some tweaks and fixes by me, ok dlg@ | |||
2012-04-30 | add 'groupdn' option for specifying a separate base DN for group searches. | Jonathan Matthew | |
from Jim Smith, ok dlg@ | |||
2012-04-24 | take a stab at documenting when arguments need quoted, and valid macro | Jason McIntyre | |
characters; prompted by a diff from robert peichaer org thanks gilles and henning for feedback ok deraadt zinke | |||
2012-03-16 | don't leak ypldap_addr structures when doing dns lookups | Jonathan Matthew | |
ok dlg@ | |||
2012-03-15 | Accept empty/nonexistant ldap attributes when we want a list. This allows | Jonathan Matthew | |
empty groups to show up, which is helpful if they're used as primary groups. ok dlg@ | |||
2012-03-15 | don't leak ue_netid_line when freeing the old user tree | Jonathan Matthew | |
ok dlg@ | |||
2012-03-10 | ldap doesnt necessarily do referential checks on the users in a | David Gwynne | |
group, so it is possible for them to list users that dont exist as members. they should just skip such entries instead of fail horribly. diff from jim smith ok aschrijver@ | |||
2011-08-28 | Use the correct terminology, replace the term "entry" with the term ↵ | aschrijver | |
"attribute" where applicable. OK martinh@ pyr@ | |||
2011-08-28 | Add support for the netid.byname YP map. This map is used by getgrouplist(3), | aschrijver | |
which is used by (amongst other things) initgroups(3) to set the supplemantary groups on login. OK pyr@ | |||
2011-07-07 | Install a default ypldap.conf(5) based on the one from the man page | Antoine Jacoutot | |
(which we remove now) with a couple of tweaks; use the same base DN and admin user as our default ldap.conf(5). | |||
2011-04-06 | Avoid using NULL in non-pointer contexts: use 0 for integer values and '\0' | Miod Vallat | |
for chars. | |||
2011-01-17 | Refactor ldap searches for passwd and group queries into a common | Martin Hedenfal | |
client_search_idm function. ok pyr@ | |||
2011-01-17 | extract common code for building the idm_req struct for passwords | Martin Hedenfal | |
and groups in a new function client_build_req ok pyr@ CV: ---------------------------------------------------------------------- | |||
2011-01-13 | Remove forward declarations of non-existant functions. | Martin Hedenfal | |
ok pyr@ | |||
2011-01-13 | Remove double 'to' in comment, ok pyr@ | Martin Hedenfal | |
2011-01-13 | Log match requests at debug level. | Martin Hedenfal | |
ok pyr@ | |||
2011-01-13 | Extract common preparation of key in ypmatch handling, and check the | Martin Hedenfal | |
argument length. ok pyr@ | |||
2010-11-20 | clean up cases of ;; | Theo de Raadt | |
2010-10-11 | zap unused definitions | Pierre-Yves Ritschard | |
2010-08-03 | fix linecount bug with comments spanning multiple lines | Henning Brauer | |
problem reported with the obvious fix for bgpd by Sebastian Benoit <benoit-lists at fb12.de>, also PR 6432 applied to all the others by yours truly. ok theo isn't it amazing how far this parser (and more) spread? | |||
2010-08-03 | Fix a leak in ypldap. Found (and correct diff) from | Pierre-Yves Ritschard | |
plalonde (at) overnet.qc.ca Prompted by deraadt@ | |||
2010-07-21 | Search filter BER tags use a context-specific class, not an application | Martin Hedenfal | |
class. This allows ypldap to talk to ldapd, which otherwise refuses the search filter. ok gilles@ | |||
2010-07-21 | fix NULL-deref, ok martinh@ | Gilles Chehade | |
2010-07-09 | use macro defines for magical numbers, instead hardcoded values | zinovik | |
ok krw@ | |||
2010-07-05 | original `for' loop has bug `use after free'. At first iteration we are | zinovik | |
checking h != NULL, then we free(h) and then we do `h = h->next', but `h' is not valid anymore. ok @krw | |||
2010-06-14 | Fixes unlinking the first element inside a set or a sequence, and | Martin Hedenfal | |
fix reading empty sequences/sets. This minimizes the changes against ldapd. "looks good" pyr@, ok reyk@ | |||
2010-06-14 | fix a memory leak, from aschrivjer | Pierre-Yves Ritschard | |
2010-06-12 | at line 445 `al' is allocated via `aldap_init' in `client_aldap_open' | zinovik | |
function, but when further in code we might do `goto bad', `al' is not freed with `aldap_close', so plug memory leak on error path tested by jasper@ ok pyr@, jasper@ | |||
2010-06-08 | ber_calc_len() is not an internal function, so adjust the comment. | Martin Hedenfal | |
from Dawe | |||
2010-06-03 | Don't hardcode /bin/ksh in the example, but use "loginShell" instead. | Antoine Jacoutot | |
ok pyr@ |