Should SLAP_AUTH_DN be #defined in release now?

Rich Megginson authored 13 years ago and Howard Chu committed 13 years ago

OpenLDAP built with OpenSSL allows most any value of cacertdir - directory
is a file, directory does not contain any CA certs, directory does not
exist - users expect if they specify TLS_REQCERT=never, no matter what
the TLS_CACERTDIR setting is, TLS/SSL will just work.
TLS_CACERT, on the other hand, is a hard error.  Even if TLS_REQCERT=never,
if TLS_CACERT is specified and is not a valid CA cert file, TLS/SSL will
fail.  This patch makes CACERT errors hard errors, and makes CACERTDIR
errors "soft" errors.  The code checks CACERT first and, even though
the function will return an error, checks CACERTDIR anyway so that if the
user sets TRACE mode they will get CACERTDIR processing messages.

Handle interrupted write() again.  Fix warnings/types.  #ifdef LDAP_DEBUG.

to return the name of the underlying TLS implementation

Currently just logs a complaint on checksum mismatch. Could get
more obnoxious later.

This reverts commit 53bb95a2.
Code was working as designed/documented. Changing now will
probably break other users.

cmikk@qwest.net authored 14 years ago and Howard Chu committed 13 years ago

Perform the internal FIND_CSN search based at the backend's suffix with the
privileges of the backend's root DN.

SATOH Fumiyasu authored 13 years ago and Howard Chu committed 13 years ago

Fix typo -- hyc

From ksmith @ ycp.edu, with fixes by hyc

Tim Mooney authored 13 years ago and Howard Chu committed 13 years ago

to remove references to indexes in Hash format

Fix whitespace error -- hyc

Tim Mooney authored 13 years ago and Howard Chu committed 13 years ago

Tweak wording -- hyc

Ondrej Kuznik authored 13 years ago and Howard Chu committed 13 years ago

Document the uniqueness changes

Fix whitespace in original patch -- hyc

tag read entry response control value with [APPLICATION 4] (SearchResultEntry)