Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Clarify the map option in the manual pageHEADmasterArthur de Jong2024-03-031-15/+18
| | | | | This tries to make it a little clearer how expressions in the map statement may be used.
* Update files from latest automakeArthur de Jong2024-02-244-1876/+2240
| | | | | This also updates the autogen.sh script to just use the latest version of automake (tested with automake 1.16).
* Add an option to test the configuration fileArthur de Jong2024-02-242-1/+29
|
* Make configuration file to use configurableArthur de Jong2024-02-242-10/+36
|
* Define NETDB_INTERNAL for musl libcArthur de Jong2023-08-061-0/+5
| | | | | | | | musl libc doesn't define ```NETDB_INTERNAL```. Add that definition when it's missing. Thanks Cristian Othón Martínez Vera. Closes https://github.com/arthurdejong/nss-pam-ldapd/pull/60
* Update GitHub checkout action to latest versionArthur de Jong2023-06-171-2/+2
|
* Update Pylint configuration fileArthur de Jong2023-06-171-46/+1
| | | | | Some options do not appear to be present in Pylint 2.16.2 but this used to work in version 1.9.4 (this config works with both versions).
* Fix compilation issues on NetBSDBrett Lymn2023-06-171-6/+1
| | | | Fixes da63099
* Use closefrom() if availableArthur de Jong2022-10-103-6/+14
| | | | | | One some systems _SC_OPEN_MAX can be *very* large. Closes https://github.com/arthurdejong/nss-pam-ldapd/issues/53
* Fix off-by one error in closing file descriptorsArthur de Jong2022-10-101-1/+1
| | | | | This could leave file descriptor 3 open from the parent process starting nslcd.
* Increase password buffer lengthArthur de Jong2022-09-041-1/+1
| | | | | | | This allows passwords to contain up to 255 characters even though they are most likely don't add any meaningful password security. Closes https://github.com/arthurdejong/nss-pam-ldapd/issues/52
* Don't force password change during testsArthur de Jong2022-08-271-1/+1
| | | | | | | | | | Change the configuration of the password policy in the test suite to not set pwdMustChange to TRUE. Between OpenLDAP 2.4 and 2.5 the behaviour of the LDAP server was changed to force a password change whenever the administrator changed a user's password. This change ensures that the old behaviour is maintained. See https://bugs.openldap.org/show_bug.cgi?id=7084
* Fix pylint config for newer versions of pylintArthur de Jong2022-08-271-1/+1
| | | | | Apparently newer versions of pylint parse the evaluation option differently.
* Upgrade to CodeQL Action v2Arthur de Jong2022-08-271-2/+2
| | | | https://github.blog/changelog/2022-04-27-code-scanning-deprecation-of-codeql-action-v1/
* Get files ready for 0.9.12 release0.9.12Arthur de Jong2021-11-2010-21/+243
|
* Support DNSLDAPS in uriArthur de Jong2021-11-192-10/+33
| | | | | | This supports both `uri DNSLDAPS` and `uri DNSLDAPS:some.domain` variants alongside the pre-existing `uri DNS` that was already supported generating ldaps URIs for all SRV records found.
* Fix internal assertion function detection on SolarisArthur de Jong2021-11-152-5/+11
|
* Update files from latest automakeArthur de Jong2021-11-157-23/+26
|
* Do not use user arthur in testsArthur de Jong2021-11-143-48/+48
| | | | | This makes it more complicated to run the tests on an environment where a local user arthur exists.
* Fix running pynslcd without uid optionArthur de Jong2021-11-141-3/+4
| | | | Fixes 65695aa
* Support running tests with OpenLDAP 2.5Ryan Tandy2021-11-142-10/+10
| | | | | - Change database backend to LMDB - Load external ppolicy schema conditionally
* Configure CodeQL code scanningArthur de Jong2021-11-031-0/+47
|
* Support an empty search baseArthur de Jong2021-11-023-12/+14
| | | | | | | | | | | | This allows putting `base ""` in nslcd.conf to specify an empty search base. Note that the LDAP server needs to support this. With slapd this requires setting up an olcDefaultSearchBase attribute in the olcFrontendConfig object under cn=config or have the database have an empty suffix. Closes https://github.com/arthurdejong/nss-pam-ldapd/issues/50
* Support minus character in attribute expressionsArthur de Jong2021-10-172-11/+23
| | | | | This requires the attribute name is contained within a ${var-name} expression.
* Retry connecting to the first URI after idle_timelimitArthur de Jong2021-05-261-0/+2
| | | | | | | | | | | This ensures that a connection to the first URI listed in the config file will be re-established once the connection is closed cleanly after the idle time. This ensures that the listed URIs are handled more in a primary/fallback manner if an idle time is configured. Closes https://github.com/arthurdejong/nss-pam-ldapd/issues/46
* Replace Travis with GitHub actionsArthur de Jong2021-05-264-54/+77
| | | | | This includes a few tweaks to the test scripts to make debugging easier and to avoid issues on Github action runners.
* Add tls_reqsan to check certificate SANArthur de Jong2021-01-232-13/+62
| | | | This option is passed to the LDAP library if it is supported.
* Add tls_crlfile to check local CRL fileArthur de Jong2021-01-232-3/+36
| | | | This option is passed to the LDAP library if it is supported.
* Add tls_crlcheck to check Certificate Revocation Listsebastienblavier2021-01-183-0/+68
| | | | | | This option is passed to the LDAP library if it is supported. Closes https://github.com/arthurdejong/nss-pam-ldapd/pull/41
* Use the provided Python for `make distcheck`Arthur de Jong2021-01-171-1/+2
| | | | | | This ensures that if a Python interpreter was previously supplied to configure it is also used for subsequent calls to run a distribution check.
* Update files from latest automakeArthur de Jong2021-01-178-105/+150
|
* Fix handling of the pam_authc_ppolicy optionArthur de Jong2020-09-111-17/+13
| | | | | | | | | | | | | | Check the result of the BIND operation instead of that of the ldap_result() call when pam_authc_ppolicy is set to "no". This could have resulted in successful authentication if the BIND operation to the LDAP server timed out and pam_authc_ppolicy was set to "no" but should not result in successful authentication otherwise so it is unlikely that setting pam_authc_ppolicy to "no" ever worked as intended. The timeout also would have to occur on the BIND operation, not on setting up the connection. Fixes 31cd2cf
* Fix typoArthur de Jong2020-04-191-1/+1
| | | | | | Thanks Filip Dvorak See https://bugzilla.redhat.com/show_bug.cgi?id=1825240
* Fix typo in manual pageArthur de Jong2020-02-101-1/+1
| | | | | | | Thanks Benedict Reuschling for pointing this out. Closes https://github.com/arthurdejong/nss-pam-ldapd/issues/39 Fixes b93838d
* Log the correct timeout valueArthur de Jong2019-12-271-3/+3
| | | | | | This fixes logging of the LDAP_OPT_TIMEOUT, LDAP_OPT_NETWORK_TIMEOUT and LDAP_X_OPT_CONNECT_TIMEOUT options to actually log the value of the bind_timelimit option instead of the timelimit option.
* Add pam_authc_ppolicy support in pynslcdArthur de Jong2019-10-132-3/+6
| | | | See https://bugs.debian.org/900253
* Fix Python 3 compatibility in chsh.ldapArthur de Jong2019-10-132-4/+4
|
* Get files ready for 0.9.11 release0.9.11Arthur de Jong2019-10-0612-25/+150
|
* Fix Python interpreter detection in testsArthur de Jong2019-10-061-1/+1
| | | | Fixes 644bc62
* Portability improvements to test suiteArthur de Jong2019-10-061-11/+13
| | | | | Some test systems have more local users and some systems prefer IPv4 addresses over IPv6 addresses.
* Various spelling fixesArthur de Jong2019-09-1730-68/+68
|
* Fix Python interpreter detectionArthur de Jong2019-09-112-2/+3
| | | | | Apparently some environments provide certain Python executables which are not working Python interpreters.
* Remove confinc.out which is left behind by aclocal.m4Arthur de Jong2019-09-082-0/+3
|
* Correctly validate shadow requests and responsesArthur de Jong2019-09-081-3/+10
|
* Update Python interpreter in installed scriptsArthur de Jong2019-09-082-3/+5
| | | | | | | | Ensure that the Python interpreter that is passed to configure ends up in the shebang of the Python scripts. This allows one to pass PYTHON=python3 to configure to install the scripts using the Python 3 interpreter.
* Improve Python code styleArthur de Jong2019-09-0831-513/+828
| | | | | | This also adds a flake8 test that checks code style. Note that this test is not run by default because it requires network access to create the virtualenv with the test software.
* Add Python 3 supportArthur de Jong2019-09-0823-118/+222
| | | | | | | | | This ensures that both pynslcd and the command-line utilities work with Python3 as interpreter and runs some tests with all installed Python interpreters. This drops support for Python 2.6 and extends 5a84be2 to perform more testing with Python 3.
* Avoid logging unknown socket peer informationArthur de Jong2018-09-081-3/+15
| | | | | This avoids logging the client PID when the underlying socker layer cannot provide the relevant information.
* Fix crash in chsh.ldapMizunashi Mana2018-09-051-1/+3
| | | | | | Specify result type of getusershell. Closes https://github.com/arthurdejong/nss-pam-ldapd/pull/31
* Get files ready for 0.9.10 release0.9.10Arthur de Jong2018-09-0110-14/+96
|