Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-11-20 | Don't allow embedded nul characters in strings. | Jonathan Gray | |
Fixes a pfctl crash with an anchor name containing an embedded nul found with the afl fuzzer. pfctl parse.y patch from and ok deraadt@ | |||
2014-11-16 | use sa_family instead of hard coded inet. from Yury Konovalov | Ted Unangst | |
2014-11-14 | Add gcc printf format attributes to yyerror() in parse.y files. | Doug Hogan | |
No yyerror() calls needed to be changed. ok bluhm@ | |||
2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
format string, create a temporary message. OK claudio@ | |||
2014-09-08 | obvious cases of missing .An; | Ingo Schwarze | |
found with the new mandoc(1) MANDOCERR_AN_MISSING warning; no text changes | |||
2014-07-13 | Since the event(s) passed to a callback can be a mask of all events | Kenneth R Westerback | |
of interest and EV_WRITE is or'ed into the interesting events, it is more correct to check both events each time. Pointed out by Claudio. ok henning@ claudio@ | |||
2014-07-13 | Close connection/remove event handler when msgbuf_write() hits an | Kenneth R Westerback | |
EOF. ok jmatthew@ claudio@ | |||
2014-01-22 | relax the cfg file secrecy check slightly to allow group readability | Henning Brauer | |
default permissions and mtree NOT changed. prodded by benno, ok phessler benno jmatthew theo pelikan florian | |||
2014-01-18 | Remove -Wbounded: it is now the compiler default. | Martynas Venckus | |
2013-11-26 | msgbuf_write EAGAIN, ok gilles benno | Henning Brauer | |
all of these from a long train ride | |||
2013-11-25 | use u_char for buffers in yylex, for ctype calls | Sebastian Benoit | |
found by millert@, ok deraadt@ | |||
2013-10-01 | avoid a fd_set overflow by calling a different rpc svc function | Theo de Raadt | |
ok jmatthew millert | |||
2013-08-14 | no longer any need to quote macro lines with >9 args; | Jason McIntyre | |
From: Jan Stary | |||
2013-04-30 | ignore SIGPIPE so we don't fall over if an ldap connection breaks | Jonathan Matthew | |
ok dlg@ | |||
2013-03-06 | as done in ospf{,6}d/relayd, sync yyerror in various other daemons with | Stuart Henderson | |
that from bgpd, so that it logs to syslog when daemonized. | |||
2012-04-30 | Use paged searches so we can handle larger directories. Servers that don't | Jonathan Matthew | |
understand paging, such as ldapd(8), ignore it and return a single set of results as before. from Jim Smith, some tweaks and fixes by me, ok dlg@ | |||
2012-04-30 | add 'groupdn' option for specifying a separate base DN for group searches. | Jonathan Matthew | |
from Jim Smith, ok dlg@ | |||
2012-04-24 | take a stab at documenting when arguments need quoted, and valid macro | Jason McIntyre | |
characters; prompted by a diff from robert peichaer org thanks gilles and henning for feedback ok deraadt zinke | |||
2012-03-16 | don't leak ypldap_addr structures when doing dns lookups | Jonathan Matthew | |
ok dlg@ | |||
2012-03-15 | Accept empty/nonexistant ldap attributes when we want a list. This allows | Jonathan Matthew | |
empty groups to show up, which is helpful if they're used as primary groups. ok dlg@ | |||
2012-03-15 | don't leak ue_netid_line when freeing the old user tree | Jonathan Matthew | |
ok dlg@ | |||
2012-03-10 | ldap doesnt necessarily do referential checks on the users in a | David Gwynne | |
group, so it is possible for them to list users that dont exist as members. they should just skip such entries instead of fail horribly. diff from jim smith ok aschrijver@ | |||
2011-08-28 | Use the correct terminology, replace the term "entry" with the term ↵ | aschrijver | |
"attribute" where applicable. OK martinh@ pyr@ | |||
2011-08-28 | Add support for the netid.byname YP map. This map is used by getgrouplist(3), | aschrijver | |
which is used by (amongst other things) initgroups(3) to set the supplemantary groups on login. OK pyr@ | |||
2011-07-07 | Install a default ypldap.conf(5) based on the one from the man page | Antoine Jacoutot | |
(which we remove now) with a couple of tweaks; use the same base DN and admin user as our default ldap.conf(5). | |||
2011-04-06 | Avoid using NULL in non-pointer contexts: use 0 for integer values and '\0' | Miod Vallat | |
for chars. | |||
2011-01-17 | Refactor ldap searches for passwd and group queries into a common | Martin Hedenfal | |
client_search_idm function. ok pyr@ | |||
2011-01-17 | extract common code for building the idm_req struct for passwords | Martin Hedenfal | |
and groups in a new function client_build_req ok pyr@ CV: ---------------------------------------------------------------------- | |||
2011-01-13 | Remove forward declarations of non-existant functions. | Martin Hedenfal | |
ok pyr@ | |||
2011-01-13 | Remove double 'to' in comment, ok pyr@ | Martin Hedenfal | |
2011-01-13 | Log match requests at debug level. | Martin Hedenfal | |
ok pyr@ | |||
2011-01-13 | Extract common preparation of key in ypmatch handling, and check the | Martin Hedenfal | |
argument length. ok pyr@ | |||
2010-11-20 | clean up cases of ;; | Theo de Raadt | |
2010-10-11 | zap unused definitions | Pierre-Yves Ritschard | |
2010-08-03 | fix linecount bug with comments spanning multiple lines | Henning Brauer | |
problem reported with the obvious fix for bgpd by Sebastian Benoit <benoit-lists at fb12.de>, also PR 6432 applied to all the others by yours truly. ok theo isn't it amazing how far this parser (and more) spread? | |||
2010-08-03 | Fix a leak in ypldap. Found (and correct diff) from | Pierre-Yves Ritschard | |
plalonde (at) overnet.qc.ca Prompted by deraadt@ | |||
2010-07-21 | Search filter BER tags use a context-specific class, not an application | Martin Hedenfal | |
class. This allows ypldap to talk to ldapd, which otherwise refuses the search filter. ok gilles@ | |||
2010-07-21 | fix NULL-deref, ok martinh@ | Gilles Chehade | |
2010-07-09 | use macro defines for magical numbers, instead hardcoded values | zinovik | |
ok krw@ | |||
2010-07-05 | original `for' loop has bug `use after free'. At first iteration we are | zinovik | |
checking h != NULL, then we free(h) and then we do `h = h->next', but `h' is not valid anymore. ok @krw | |||
2010-06-14 | Fixes unlinking the first element inside a set or a sequence, and | Martin Hedenfal | |
fix reading empty sequences/sets. This minimizes the changes against ldapd. "looks good" pyr@, ok reyk@ | |||
2010-06-14 | fix a memory leak, from aschrivjer | Pierre-Yves Ritschard | |
2010-06-12 | at line 445 `al' is allocated via `aldap_init' in `client_aldap_open' | zinovik | |
function, but when further in code we might do `goto bad', `al' is not freed with `aldap_close', so plug memory leak on error path tested by jasper@ ok pyr@, jasper@ | |||
2010-06-08 | ber_calc_len() is not an internal function, so adjust the comment. | Martin Hedenfal | |
from Dawe | |||
2010-06-03 | Don't hardcode /bin/ksh in the example, but use "loginShell" instead. | Antoine Jacoutot | |
ok pyr@ | |||
2010-05-26 | Move imsg into libutil and add a man page. | Nicholas Marriott | |
Minor bump for libutil. Previous versions of this diff and man page looked at by various people. "you should just commit" deraadt | |||
2010-05-26 | Rename some imsg bits to make namespace collisions less likely buf to | Nicholas Marriott | |
ibuf, buf_read to ibuf_read, READ_BUF_SIZE to IBUF_READ_SIZE. ok henning gilles claudio jacekm deraadt | |||
2010-05-24 | now that we can handle >9 args, put "-D name=value" on one line: it's a bit | Jason McIntyre | |
more readable, and fixes a spacing bug we had in smtpd.8; | |||
2010-05-06 | Use YPMAXRECORD instead of _PW_NAME_LEN here too. | Antoine Jacoutot | |
ok robert@ pyr@ | |||
2010-04-28 | - plug memleak (in #if 0'd code) | Jasper Lievisse Adriaanse | |
ok pyr@ |