summaryrefslogtreecommitdiff
path: root/usr.sbin/ypldap
AgeCommit message (Collapse)Author
2015-09-09Hide YP-specific xdr_* functions, and have the YP tools link -lrpcsvcTheo de Raadt
as needed. ok miod guenther
2015-07-27use file system path (.Pa) semantic markup macros where appropriate.Igor Sobrado
ok jmc@
2015-02-12ber_printf_elements should return NULL if any of its parts fail.Martin Pelikan
Leave the error handling up to its callers. ok reyk
2015-02-11YPPROC_XFR will trigger a crash, even if using it doesn't make sense.Martin Pelikan
ok deraadt miod
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol)
2014-11-20Don't allow embedded nul characters in strings.Jonathan Gray
Fixes a pfctl crash with an anchor name containing an embedded nul found with the afl fuzzer. pfctl parse.y patch from and ok deraadt@
2014-11-16use sa_family instead of hard coded inet. from Yury KonovalovTed Unangst
2014-11-14Add gcc printf format attributes to yyerror() in parse.y files.Doug Hogan
No yyerror() calls needed to be changed. ok bluhm@
2014-11-03Convert the logic in yyerror(). Instead of creating a temporaryAlexander Bluhm
format string, create a temporary message. OK claudio@
2014-09-08obvious cases of missing .An;Ingo Schwarze
found with the new mandoc(1) MANDOCERR_AN_MISSING warning; no text changes
2014-07-13Since the event(s) passed to a callback can be a mask of all eventsKenneth R Westerback
of interest and EV_WRITE is or'ed into the interesting events, it is more correct to check both events each time. Pointed out by Claudio. ok henning@ claudio@
2014-07-13Close connection/remove event handler when msgbuf_write() hits anKenneth R Westerback
EOF. ok jmatthew@ claudio@
2014-01-22relax the cfg file secrecy check slightly to allow group readabilityHenning Brauer
default permissions and mtree NOT changed. prodded by benno, ok phessler benno jmatthew theo pelikan florian
2014-01-18Remove -Wbounded: it is now the compiler default.Martynas Venckus
2013-11-26msgbuf_write EAGAIN, ok gilles bennoHenning Brauer
all of these from a long train ride
2013-11-25use u_char for buffers in yylex, for ctype callsSebastian Benoit
found by millert@, ok deraadt@
2013-10-01avoid a fd_set overflow by calling a different rpc svc functionTheo de Raadt
ok jmatthew millert
2013-08-14no longer any need to quote macro lines with >9 args;Jason McIntyre
From: Jan Stary
2013-04-30ignore SIGPIPE so we don't fall over if an ldap connection breaksJonathan Matthew
ok dlg@
2013-03-06as done in ospf{,6}d/relayd, sync yyerror in various other daemons withStuart Henderson
that from bgpd, so that it logs to syslog when daemonized.
2012-04-30Use paged searches so we can handle larger directories. Servers that don'tJonathan Matthew
understand paging, such as ldapd(8), ignore it and return a single set of results as before. from Jim Smith, some tweaks and fixes by me, ok dlg@
2012-04-30add 'groupdn' option for specifying a separate base DN for group searches.Jonathan Matthew
from Jim Smith, ok dlg@
2012-04-24take a stab at documenting when arguments need quoted, and valid macroJason McIntyre
characters; prompted by a diff from robert peichaer org thanks gilles and henning for feedback ok deraadt zinke
2012-03-16don't leak ypldap_addr structures when doing dns lookupsJonathan Matthew
ok dlg@
2012-03-15Accept empty/nonexistant ldap attributes when we want a list. This allowsJonathan Matthew
empty groups to show up, which is helpful if they're used as primary groups. ok dlg@
2012-03-15don't leak ue_netid_line when freeing the old user treeJonathan Matthew
ok dlg@
2012-03-10ldap doesnt necessarily do referential checks on the users in aDavid Gwynne
group, so it is possible for them to list users that dont exist as members. they should just skip such entries instead of fail horribly. diff from jim smith ok aschrijver@
2011-08-28Use the correct terminology, replace the term "entry" with the term ↵aschrijver
"attribute" where applicable. OK martinh@ pyr@
2011-08-28Add support for the netid.byname YP map. This map is used by getgrouplist(3),aschrijver
which is used by (amongst other things) initgroups(3) to set the supplemantary groups on login. OK pyr@
2011-07-07Install a default ypldap.conf(5) based on the one from the man pageAntoine Jacoutot
(which we remove now) with a couple of tweaks; use the same base DN and admin user as our default ldap.conf(5).
2011-04-06Avoid using NULL in non-pointer contexts: use 0 for integer values and '\0'Miod Vallat
for chars.
2011-01-17Refactor ldap searches for passwd and group queries into a commonMartin Hedenfal
client_search_idm function. ok pyr@
2011-01-17extract common code for building the idm_req struct for passwordsMartin Hedenfal
and groups in a new function client_build_req ok pyr@ CV: ----------------------------------------------------------------------
2011-01-13Remove forward declarations of non-existant functions.Martin Hedenfal
ok pyr@
2011-01-13Remove double 'to' in comment, ok pyr@Martin Hedenfal
2011-01-13Log match requests at debug level.Martin Hedenfal
ok pyr@
2011-01-13Extract common preparation of key in ypmatch handling, and check theMartin Hedenfal
argument length. ok pyr@
2010-11-20clean up cases of ;;Theo de Raadt
2010-10-11zap unused definitionsPierre-Yves Ritschard
2010-08-03fix linecount bug with comments spanning multiple linesHenning Brauer
problem reported with the obvious fix for bgpd by Sebastian Benoit <benoit-lists at fb12.de>, also PR 6432 applied to all the others by yours truly. ok theo isn't it amazing how far this parser (and more) spread?
2010-08-03Fix a leak in ypldap. Found (and correct diff) fromPierre-Yves Ritschard
plalonde (at) overnet.qc.ca Prompted by deraadt@
2010-07-21Search filter BER tags use a context-specific class, not an applicationMartin Hedenfal
class. This allows ypldap to talk to ldapd, which otherwise refuses the search filter. ok gilles@
2010-07-21fix NULL-deref, ok martinh@Gilles Chehade
2010-07-09use macro defines for magical numbers, instead hardcoded valueszinovik
ok krw@
2010-07-05original `for' loop has bug `use after free'. At first iteration we arezinovik
checking h != NULL, then we free(h) and then we do `h = h->next', but `h' is not valid anymore. ok @krw
2010-06-14Fixes unlinking the first element inside a set or a sequence, andMartin Hedenfal
fix reading empty sequences/sets. This minimizes the changes against ldapd. "looks good" pyr@, ok reyk@
2010-06-14fix a memory leak, from aschrivjerPierre-Yves Ritschard
2010-06-12at line 445 `al' is allocated via `aldap_init' in `client_aldap_open'zinovik
function, but when further in code we might do `goto bad', `al' is not freed with `aldap_close', so plug memory leak on error path tested by jasper@ ok pyr@, jasper@
2010-06-08ber_calc_len() is not an internal function, so adjust the comment.Martin Hedenfal
from Dawe
2010-06-03Don't hardcode /bin/ksh in the example, but use "loginShell" instead.Antoine Jacoutot
ok pyr@