summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2010-11-04Publish matching rules in the cn=schema subentry as the matchingRulesMartin Hedenfal
attribute. This is an operational attribute and only returned if explicitly asked for. Required by RFC 4517.
2010-11-04Rewrite all packet parsers to be more careful about alignment. UntilClaudio Jeker
now ldpd had no chance to run on a strict alignment architecture but this makes ldpd happy on sparc64. Be careful to do all needed overflow checks and try to make all parsing functions look similar. OK michele@
2010-11-04Only consider pathes with highest priority when replying to labelClaudio Jeker
requests. Else a priority inversion may happen that would build label switching pathes that use inactive routes. OK michele@
2010-11-04Make sure we don't end up using /usr/src/etc if we forget to pass theAntoine Jacoutot
correct option (e.g. 'sysmerge /tmp/etc48.tgz'). Use OPTIND as all args are handled by getopts we can catch misusage and we exit with an error. from Brian Poole, thanks. ok sthen@
2010-11-04badspec match_locations must return a ref, fixes pkg_add -nz bzrMarc Espie
(sorry, I don't remember your name, I misplaced that email)
2010-11-03Update the internal btree documentation to reflect the current api.Martin Hedenfal
2010-11-03Validate matching rules against attribute syntaxes. All matching rules fromMartin Hedenfal
RFC 4517 are recognized, except the optional wordMatch and keywordMatch. Requires a current core.schema file.
2010-11-03caseExactIA5Match is not an appropriate matching rule for directory stringsMartin Hedenfal
(syntax oid 1.3.6.1.4.1.1466.115.121.1.15). Use caseExactMatch instead. Prepares for upcoming validation of matching rules.
2010-11-03$OpenBSD$Jonathan Gray
2010-11-03An index can now also be used for a presence filter.Martin Hedenfal
2010-11-03Evaluate filters according to the three-valued logic of X.511, as requiredMartin Hedenfal
by RFC 4511. A filter term can now be evaluated as undefined if the attribute description is not recognized, the attribute type doesn't define the appropriate matching rule, or the filtering is not implemented. This also implements the NOT filter in the query planner.
2010-11-02Clarify the current state of ldapd as not fully LDAPv3 compliant.Martin Hedenfal
2010-10-31cant start a line with a single quote. ok @schwarzeJanne Johansson
2010-10-29malloc -> calloc for ctl_connHenning Brauer
pt out by cppcheck/jasper, ok sthen claudio
2010-10-29smtpd no longer knows a map called "secrets" which holds credentials forGilles Chehade
authenticated relaying. one can create many maps holding credentials and name them however he/she wants, just like any other map. teach smtpd how to select a credentials map at the rule-level allowing a setup to relay through the same MX with different credentials depending on the source. smtpd.conf.5 updated to reflect changes with help from jmc@
2010-10-28:-PMarc Espie
2010-10-28more roff removal;Jason McIntyre
2010-10-28teach smtpd how to handle per-rule delays for message expiry, this allowsGilles Chehade
some rules to have a longer expiry delay than the default: accept for [...] relay expire 8d # will stay 8 days in queue I added the man page bits so I don't forget but I need to reword it a bit
2010-10-28knock out some "-*- nroff -*-" lines;Jason McIntyre
2010-10-28wording clarification; from Jan StaryJason McIntyre
ok deraadt
2010-10-28this can't be right, as it takes out check_for_loops entirely...Marc Espie
(fixes cyrus-sasl install/updates, but not deinstall yet)
2010-10-27document @rcscriptMarc Espie
2010-10-27initial scaffolding for @rcscript: for now, acts like normal files,Marc Espie
but allow absolute pathnames (treat that as an implicit @cwd).
2010-10-26no need for .Pp before lists;Jason McIntyre
2010-10-26redirects are loaded as "pass in quick ... rdr-to" pf rules by default. InReyk Floeter
some cases it is desired to load the rules as "match in" without "quick" to allow additional filtering or applying additional rule/state options, eg. to add an overload table for DOS mitigation. Add the optional "match" keyword for the redirect "tag" option to change the pf rule type accordingly. ok jsg@ mikeb@
2010-10-26Implement the optional label request message ID TLV.Claudio Jeker
Currently on the genaration side is done.
2010-10-26For label release and withdraw messages make sure that a wildcardClaudio Jeker
FEC is the one and only FEC of that message. This is required by the RFC. While it is not correct to have multiple FEC in anything but label mapping messages ldpd will accept those since the RFC is extra vague about this feature and it does not hurt.
2010-10-26struct mapping_entry should just have a struct map instead of ownClaudio Jeker
definition of a FEC mapping. This makes extending struct map simpler and makes it possible to access the additional data in struct map.
2010-10-26Change lde_check_request(), lde_check_mapping(), lde_send_labelmapping(),Claudio Jeker
lde_send_labelrequest(), and lde_nbr_do_mappings() to follow the algorithms defined in Appendix A of RFC 5036. Added comments and markers for better understanding and to find missing bits. OK michele@
2010-10-26Shuffle the deck chairs to make the code more compact.Claudio Jeker
OK michele@
2010-10-26Allow the userPassword attribute to specify a login class when usingwilliam
simple binds with BSD Authentication, using '#' as the delimiter, such as: userPassword: {BSDAUTH}username#loginclass Useful for auth modules that require parameters such as login_radius. ok martinh
2010-10-25@symlink/@size/@link are generated automatically, make pkg_create(1) errorMarc Espie
out if we create them manually, instead of erroring later during pkg_add.
2010-10-25document fullwidthMarc Espie
2010-10-25use new system to do quietMarc Espie
2010-10-25don't use the fullwidth of the term by default, makes typing easier.Marc Espie
pass state thru so that we can check in /etc/pkg.conf and use it if we want.
2010-10-25just bail out of producing empty files.Marc Espie
*this will become an error eventually, please fix those*
2010-10-25separate "Term" part from "Real progressmeter" handling, so that one canMarc Espie
use the common part independently.
2010-10-24spacing and irrelevant glitches which disrupt lintTheo de Raadt
2010-10-24the subtype should be printed unsigned; ok claudioTheo de Raadt
2010-10-24use newer system for more efficient redirection, and chdir the way man(1)Marc Espie
does, so groff is happier with .so. (agreed by ingo)
2010-10-24redo ->system in a smarter way (fork+exec) so that we can sneak in a codeMarc Espie
reference to be run before the command.
2010-10-23Reorder the wording where we talk about tagging kernel route table prefixes,Stuart Henderson
following misc@ discussion with Tony Sarendal. ok phessler@
2010-10-22USE_GROFFMarc Espie
2010-10-22Free attributes that just got allocated beforehands and do not hold anyClaudio Jeker
reference in case attr_optadd() errors out. Found by and diff provided by Igor Zinovik, OK henning@
2010-10-21Start implementing the missing lablemapping messages in the LDE andClaudio Jeker
fix the existing ones to correctly track outstanding request and sent / recv mappings. Looks good to michele@
2010-10-20Since on shutdown fib_sync is forced to 1 to remove the multicast routeClaudio Jeker
it needs to be set to 0 afterwards again, because the FIB was decoupled right before and now no "route vanished before delete" messages are printed on shutdown.
2010-10-19fix a split() which was causing problems with the mbox.5 manpageStuart Henderson
in Mutt, as noticed by Andreas Kahari. ok espie@ "we'll fix the fix if it breaks".
2010-10-19Fix a segmentation fault when adding an attribute to an empty entry.Martin Hedenfal
2010-10-19When checking if the input buffer is large enough to hold an LDAP request,Martin Hedenfal
compare with available space, not the total space. This fixes rejection of messages when there are multiple requests queued in the input buffer.
2010-10-19Remember the bind DN after BSD authentication. This makes access controlMartin Hedenfal
work for SASL and BSDAUTH binds as it does for simple binds.