Commit Graph

106 Commits

Author SHA1 Message Date
leitner
53e0ec0ad8 remove unused arguments 2023-01-18 12:21:24 +00:00
leitner
187eda5860 support pipelining, requests > 8k
support modify requests on records in data (not the journal)
2023-01-18 12:18:01 +00:00
leitner
336118b774 introduce environment-settable one-shot mode 2022-10-06 11:14:17 +00:00
leitner
41b1bb0349 add some cheap sanity checks 2022-10-06 10:51:14 +00:00
leitner
28e75ee2bd make seccomp filter more pedantic (only allow O_APPEND on journal)
update seccomp filter to newest glibc (newfsstatat)
2022-10-04 11:47:53 +00:00
leitner
e29be46197 fix a few gcc 11 -fanalyzer complaints 2021-04-27 17:54:31 +00:00
leitner
83ab78d62e bring debug search filter output closer to being pastable
fix infinite loop found by oec
2018-10-10 18:51:55 +00:00
leitner
f81f29b6d4 move debug output behind #ifdef DEBUG 2018-09-09 11:26:27 +00:00
leitner
51b1fa283d $PORT 2018-09-09 11:19:45 +00:00
leitner
977e656d55 drop privileges if $USER or $UID/$GID are set 2018-09-09 11:08:31 +00:00
leitner
f45346d608 remove debug printf from acl
add return value comment to ldap.h
actually double-check index "maybe" hits in lookupdn
2018-09-09 10:42:43 +00:00
leitner
c52d6b8ad6 add clang static analyzer target in makefile
free hash table in addindex (not strictly necessary but shuts up memory leak false positives)
add openat to seccomp jail so glibc compiled tinyldap works, too
2018-09-02 10:49:05 +00:00
leitner
d177cd15aa we used addreponse instead of modifyresponse opcode in response to
modify requests
2018-08-28 16:11:17 +00:00
leitner
a3dfae5e7c use -1 instead of 0 as hash table empty marker 2018-08-27 14:11:05 +00:00
leitner
f67e5361c7 more comments :) 2018-08-27 12:24:57 +00:00
leitner
22b0942762 also allow munmap *facepalm* 2018-04-08 09:27:19 +00:00
leitner
11536f5b2b remove more gcc 7 warnings 2017-05-06 22:40:42 +00:00
leitner
1d95650489 change #include to move foo.h to libowfat/foo.h (needs current libowfat now) 2017-04-21 16:23:38 +00:00
leitner
decd4273e4 if useindex returns error, don't fail 2017-03-29 14:42:49 +00:00
leitner
7a2ea8bd51 faking an index for present queries actually made things slower
fail parsing for decoding errors
2017-03-29 12:52:24 +00:00
leitner
0570db01d5 update seccomp for i386 socketcall syscall horror 2017-03-13 10:49:26 +00:00
leitner
483069ce51 allow ftruncate
allow mremap for glibc, too
2017-03-03 16:18:21 +00:00
leitner
6ef84457cc fix two bugs in the indexing code found by Georg Lehner
silence if statement indentation warnings (gcc has become more picky)
2017-02-25 08:40:23 +00:00
leitner
eb8bf7c2ac fix for infinite loop in case of query return limit 2016-01-22 15:40:05 +00:00
leitner
4a12975f61 off by one 2015-06-13 12:05:16 +00:00
leitner
ed9c3d238e use seccomp-filter to reduce privileges 2015-05-08 00:26:37 +00:00
leitner
4631d35709 fix read av 2015-05-07 22:46:50 +00:00
leitner
da36873b76 mmap_read now returns const char*, remove warnings
reject non-minimal encodings for lengths and tags
catch too-large-value overflows in tags
2014-04-15 20:40:01 +00:00
leitner
218df43e66 reload ACLs when reloading the data file 2013-09-16 18:43:59 +00:00
leitner
46899d6ad1 fix make clean
fix acl matching in tinyldap
give ldapclient a way to do basic authentication
2013-09-16 18:35:04 +00:00
leitner
e04ca78ff8 add "generic" format string based encoder and decoder (scan_asn1generic,
fmt_asn1generic, see t10.c for example usage)
add "generic" asn.1 dumper (in t10.c)
fix some read off-by-one errors, minor cleanups
add real OID support
add bitstring support
2011-04-28 19:50:11 +00:00
leitner
a216b19483 allow binding to a specific IP in tinyldap_standalone (via $IP env) 2010-01-20 20:31:00 +00:00
leitner
0baffda48f int underflow in indexing code (thx Andreas Stührk) 2008-07-28 13:24:27 +00:00
leitner
a134707b07 disable nagle algorithm in ldapclient and server
add a benchmark mode to ldapbench that does not reconnect for each query
but does all the queries over the same connection.
2008-06-18 00:16:57 +00:00
leitner
7e2d134462 no acls, no write access 2008-04-20 07:19:46 +00:00
leitner
b40e2c8644 detect unsanctioned journal editing (and react by re-reading journal
from start)
2008-04-20 07:09:44 +00:00
leitner
05d388f122 add journal rereading
add DelRequest support
add little delete test tool ldapdelete
2008-04-20 06:59:11 +00:00
leitner
fcf6ed51f2 implement modifyrequest
rewrite bindrequest handling (reuse lookupdn)
update acl filter cache when bind succeeds
handle authenticating against a record in the journal
2007-11-01 00:43:29 +00:00
leitner
8a456f57b8 fix off-by-one 2007-07-24 15:26:26 +00:00
leitner
766eee0f8e remove gcc warning 2007-06-29 14:31:59 +00:00
leitner
b04b25a4a8 keep order of database and journal entries 2007-06-29 14:30:29 +00:00
leitner
35f2b3b745 first shot at "addrequest" support 2007-06-28 22:17:33 +00:00
leitner
90f7ea6bb5 Fix sizeLimit off-by-one (Marco Reichwald) 2006-09-16 19:53:48 +00:00
leitner
64eac4153f convert socket_tcp[46] to socket_tcp[46]b 2006-07-15 23:19:04 +00:00
leitner
91db2bf04f remove warning 2005-12-19 14:21:49 +00:00
leitner
aa5a3e16f2 whoops, broke something? 2005-12-07 01:43:45 +00:00
leitner
7a16e24794 Thomas Walpuski:
fix search requests with sizelimit
  fix scan_ldapaddrequest
2005-10-27 11:54:56 +00:00
leitner
7966fa0c86 remove lots of gcc 4 warnings 2005-10-14 14:35:16 +00:00
leitner
aee44036c5 case insensitive hashing also works 2005-10-13 16:55:10 +00:00
leitner
7376f0342c add hash table index type 2005-10-13 16:51:44 +00:00