Arthur de Jong

Open Source / Free Software developer

summaryrefslogtreecommitdiffstats
path: root/nslcd
Commit message (Collapse)AuthorAgeFilesLines
* various typo and other comment fixes (4b01125, b0785de, ↵Arthur de Jong2013-04-286-12/+12
| | | | | | bfdf7cd, 4689d5f, dba048b, ebe5705 and 122c38d from 0.9) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1950 ef36b2f9-881f-0410-afb5-c4e39611909c
* the argument to nss_min_uid must be numericArthur de Jong2013-04-281-1/+2
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1948 ef36b2f9-881f-0410-afb5-c4e39611909c
* handle the case where getpwuid() returns NULLArthur de Jong2013-04-281-5/+8
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1947 ef36b2f9-881f-0410-afb5-c4e39611909c
* only log protocol name if it is present (6a92621 and ↵Arthur de Jong2013-04-281-3/+3
| | | | | | 402d3f3 from 0.9) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1943 ef36b2f9-881f-0410-afb5-c4e39611909c
* retry updating the lastChange attribute with the normal ↵Arthur de Jong2013-04-281-3/+6
| | | | | | nslcd LDAP connection if the update with the user's connection failed (2f6f6a2 from 0.9) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1938 ef36b2f9-881f-0410-afb5-c4e39611909c
* extra sanity check to ensure not too many file ↵Arthur de Jong2013-02-231-2/+7
| | | | | | descriptors are open (a9aea20f136026d6553295727350c88fe2431e0c from 0.9) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1935 ef36b2f9-881f-0410-afb5-c4e39611909c
* check result of set_tolist() to ensure that memory ↵Arthur de Jong2013-02-234-3/+23
| | | | | | allocation problems are logged (r1911 from 0.9) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1934 ef36b2f9-881f-0410-afb5-c4e39611909c
* fix memory leak in myldap_get_values_len() when using ↵Arthur de Jong2013-02-231-0/+6
| | | | | | ranged attributes (very unlikely to occur) (r1910 from 0.9) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1933 ef36b2f9-881f-0410-afb5-c4e39611909c
* fix a problem in memory handling in ↵Arthur de Jong2013-02-231-2/+4
| | | | | | myldap_get_values_len() if malloc() would fail (r1909 from 0.9) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1932 ef36b2f9-881f-0410-afb5-c4e39611909c
* correctly handle the case where the gid option is before ↵Arthur de Jong2013-01-111-2/+2
| | | | | | the uid option in the configuration (fixes r1723) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1907 ef36b2f9-881f-0410-afb5-c4e39611909c
* don't process the passwd_byuid request at all for uids < ↵Arthur de Jong2012-12-201-0/+1
| | | | | | nss_min_uid (r1870 from trunk) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1871 ef36b2f9-881f-0410-afb5-c4e39611909c
* fix logic error (use && instead of & for logical and) ↵Arthur de Jong2012-12-201-1/+1
| | | | | | (r1868 from trunk) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd-0.8@1869 ef36b2f9-881f-0410-afb5-c4e39611909c
* fix comment in headerArthur de Jong2012-11-161-1/+1
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1827 ef36b2f9-881f-0410-afb5-c4e39611909c
* to only set LDAP_OPT_X_SASL_NOCANON if the ↵Arthur de Jong2012-11-132-3/+6
| | | | | | sasl_canonicalize option is explicitly set in the configuration file git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1824 ef36b2f9-881f-0410-afb5-c4e39611909c
* log connection message before clearing error indicators ↵Arthur de Jong2012-11-111-3/+3
| | | | | | to not hide these log messages in most configurations (fixes r1095) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1814 ef36b2f9-881f-0410-afb5-c4e39611909c
* if nslcd creates the state directory, try to set the ↵Arthur de Jong2012-10-141-2/+8
| | | | | | right ownership git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1795 ef36b2f9-881f-0410-afb5-c4e39611909c
* use poll() instead of select() for checking file ↵Arthur de Jong2012-10-121-7/+7
| | | | | | descriptor activity to also correctly work if more than FD_SETSIZE files are already open git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1783 ef36b2f9-881f-0410-afb5-c4e39611909c
* fix problem storing negative hit to dn2uid cache (thanks ↵Arthur de Jong2012-09-161-1/+1
| | | | | | scan-build) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1771 ef36b2f9-881f-0410-afb5-c4e39611909c
* fix logic error when falling back to getting ranged ↵Arthur de Jong2012-09-161-1/+4
| | | | | | attribute values for possibly binary attributes (thanks scan-build) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1770 ef36b2f9-881f-0410-afb5-c4e39611909c
* swap values and buf assignment to avoid compiler ↵Arthur de Jong2012-09-161-3/+3
| | | | | | alignment warnings git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1769 ef36b2f9-881f-0410-afb5-c4e39611909c
* only check nsswitch.conf for shadow mapping on glibc ↵Arthur de Jong2012-09-151-0/+10
| | | | | | (Solaris shadow map follows passwd's mapping and FreeBSD doesn't have shadow at all) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1768 ef36b2f9-881f-0410-afb5-c4e39611909c
* grow all search filter buffers to 4096 bytes (thanks flavio)Arthur de Jong2012-09-1411-22/+22
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1763 ef36b2f9-881f-0410-afb5-c4e39611909c
* rename filter_buffer to filter for consistencyArthur de Jong2012-09-141-6/+6
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1762 ef36b2f9-881f-0410-afb5-c4e39611909c
* provide an alternative do_rebind() for Netscape LDAPArthur de Jong2012-09-011-0/+29
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1745 ef36b2f9-881f-0410-afb5-c4e39611909c
* include an explicit cast to int when printing gid_t ↵Arthur de Jong2012-09-011-2/+2
| | | | | | (fixes r1723) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1744 ef36b2f9-881f-0410-afb5-c4e39611909c
* change the default value of sasl_canonicalize to yes ↵Arthur de Jong2012-08-311-1/+3
| | | | | | (thanks Marcus Moeller) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1735 ef36b2f9-881f-0410-afb5-c4e39611909c
* remove variable definition that was introduced in r1626 ↵Arthur de Jong2012-08-141-1/+0
| | | | | | but should have been removed in r1714 git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1734 ef36b2f9-881f-0410-afb5-c4e39611909c
* introduce a sasl_canonicalize option that will now, by ↵Arthur de Jong2012-08-143-0/+25
| | | | | | default, disable reverse host name lookups in OpenLDAP git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1733 ef36b2f9-881f-0410-afb5-c4e39611909c
* ensure that all places where stdint.h is included it is ↵Arthur de Jong2012-07-233-0/+6
| | | | | | surrounded by #ifdefs git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1731 ef36b2f9-881f-0410-afb5-c4e39611909c
* only inlude stdint.h if we have itArthur de Jong2012-07-211-0/+2
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1725 ef36b2f9-881f-0410-afb5-c4e39611909c
* add missing includes to ensure all types are defined in ↵Arthur de Jong2012-07-211-0/+2
| | | | | | header git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1724 ef36b2f9-881f-0410-afb5-c4e39611909c
* on startup have the gid option default to the primary ↵Arthur de Jong2012-07-203-12/+38
| | | | | | group of the specified user and load the user's supplementary groups git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1723 ef36b2f9-881f-0410-afb5-c4e39611909c
* implement a pam_password_prohibit_message nslcd.conf ↵Arthur de Jong2012-07-087-2/+102
| | | | | | option to deny password change introducing a NSLCD_ACTION_CONFIG_GET request thanks to Ted Cheng git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1715 ef36b2f9-881f-0410-afb5-c4e39611909c
* remove duplicate getting of LDAP_OPT_DIAGNOSTIC_MESSAGE ↵Arthur de Jong2012-07-081-5/+0
| | | | | | (should have been part of r1639) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1714 ef36b2f9-881f-0410-afb5-c4e39611909c
* log successful password change in nslcd and correctly ↵Arthur de Jong2012-06-151-0/+2
| | | | | | terminate protocol on password change failure git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1703 ef36b2f9-881f-0410-afb5-c4e39611909c
* implement extra range checking of all numeric valuesArthur de Jong2012-05-208-33/+38
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1694 ef36b2f9-881f-0410-afb5-c4e39611909c
* get rid of a few compiler warnings on FreeBSDArthur de Jong2012-05-182-1/+4
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1693 ef36b2f9-881f-0410-afb5-c4e39611909c
* provide a compatibility definition of SUN_LEN() for ↵Arthur de Jong2012-05-091-0/+1
| | | | | | systems that lack it git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1686 ef36b2f9-881f-0410-afb5-c4e39611909c
* remove duplicate debug from log messageArthur de Jong2012-05-091-1/+1
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1685 ef36b2f9-881f-0410-afb5-c4e39611909c
* allow the pam_authz_search option to be specified ↵Arthur de Jong2012-05-043-58/+84
| | | | | | multiple times git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1679 ef36b2f9-881f-0410-afb5-c4e39611909c
* don't try to close _SC_OPEN_MAX file descriptorArthur de Jong2012-05-041-1/+1
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1678 ef36b2f9-881f-0410-afb5-c4e39611909c
* increase buffer for pam_authz_search as suggested by ↵Arthur de Jong2012-03-231-2/+2
| | | | | | Chris J Arges git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1643 ef36b2f9-881f-0410-afb5-c4e39611909c
* always try to log the ldap error, the diagnostic message ↵Arthur de Jong2012-03-161-42/+68
| | | | | | and errno if available in a consistent format git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1639 ef36b2f9-881f-0410-afb5-c4e39611909c
* make whether or not to do case-sensitive filtering ↵Arthur de Jong2012-03-1310-11/+25
| | | | | | configurable (patch by Matthew L. Dailey) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1634 ef36b2f9-881f-0410-afb5-c4e39611909c
* when doing DNS queries for SRV records recognise default ↵Arthur de Jong2012-03-101-3/+14
| | | | | | ldap and ldaps ports git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1632 ef36b2f9-881f-0410-afb5-c4e39611909c
* add missing include for _POSIX_HOST_NAME_MAX (thanks Mel ↵Arthur de Jong2012-03-101-1/+2
| | | | | | Flynn) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1631 ef36b2f9-881f-0410-afb5-c4e39611909c
* fix log message for invalid pam_authz_search as reported ↵Arthur de Jong2012-03-101-1/+1
| | | | | | by Matt Rae git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1628 ef36b2f9-881f-0410-afb5-c4e39611909c
* remove extra newline from log messageArthur de Jong2012-03-051-4/+4
| | | | git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1627 ef36b2f9-881f-0410-afb5-c4e39611909c
* provide more detailed logging information for ↵Arthur de Jong2012-03-051-3/+11
| | | | | | ldap_start_tls_s() failures (based on a patch by Mel Flynn) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1626 ef36b2f9-881f-0410-afb5-c4e39611909c
* log the first 10 search results in debug mode to make ↵Arthur de Jong2012-02-291-1/+16
| | | | | | debugging easier (patch by Matthijs Kooijman) git-svn-id: http://arthurdejong.org/svn/nss-pam-ldapd/nss-pam-ldapd@1625 ef36b2f9-881f-0410-afb5-c4e39611909c