OpenBSD CVS

CVS log for src/usr.sbin/ldapd/auth.c


[BACK] Up to [local] / src / usr.sbin / ldapd

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.15 / (download) - annotate - [select for diffs], Wed Jun 29 09:10:13 2022 UTC (23 months, 1 week ago) by martijn
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, HEAD
Changes since 1.14: +5 -5 lines
Diff to previous 1.14 (colored)

Use strncasecmp instead of strncmp when comparing the password scheme.
This change could theoretically affect some people who actually have one
of the scheme's in lower case in their password, but this is extremely
unlikely in the real world.

Pointed out by David Diggles (david <at> elven <dot> com <dot> au)
OK sthen@

Revision 1.13.6.1 / (download) - annotate - [select for diffs], Sun Oct 27 20:05:13 2019 UTC (4 years, 7 months ago) by tb
Branch: OPENBSD_6_6
Changes since 1.13: +5 -5 lines
Diff to previous 1.13 (colored) next main 1.14 (colored)

The ber_* namespace is used by liblber since time immemorial,
so move our BER API to the unused ober_* prefix to avoid some
breakage in ports.

Problem diagnosed by jmatthew with ber_free() in samba, but
there are many others as pointed out by sthen.

tests & ok rob
ok sthen (who had an almost identical diff for libutil)
"go head hit it" deraadt

OpenBSD 6.6 errata 002

Revision 1.14 / (download) - annotate - [select for diffs], Thu Oct 24 12:39:26 2019 UTC (4 years, 7 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.13: +5 -5 lines
Diff to previous 1.13 (colored)

The ber_* namespace is used by liblber since time immemorial,
so move our BER API to the unused ober_* prefix to avoid some
breakage in ports.

Problem diagnosed by jmatthew with ber_free() in samba, but
there are many others as pointed out by sthen.

tests & ok rob
ok sthen (who had an almost identical diff for libutil)
"go head hit it" deraadt

Revision 1.13 / (download) - annotate - [select for diffs], Mon May 14 07:53:47 2018 UTC (6 years ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_5_BASE, OPENBSD_6_5, OPENBSD_6_4_BASE, OPENBSD_6_4
Branch point for: OPENBSD_6_6
Changes since 1.12: +24 -9 lines
Diff to previous 1.12 (colored)

Add support to filter on attributes.

This can be used to allow users to change their password (and a few
other things) but not their entire dn. For example:

        allow read access to any by self
        allow write access to any attribute userPassword by self

This is currently only supported for "write" (modify, add, delete) and
not "read" (search) filter rules.

OK jmatthew@

Revision 1.12 / (download) - annotate - [select for diffs], Fri Jan 20 11:55:08 2017 UTC (7 years, 4 months ago) by benno
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2, OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.11: +2 -1 lines
Diff to previous 1.11 (colored)

work on making log.c similar in all daemons:

move daemon-local functions into new logmsg.c, and reduce
the (mostly whitespace) differences so that log.c's can be diffed easily.

ok krw@ jmatthew@

Revision 1.11 / (download) - annotate - [select for diffs], Thu Dec 24 17:47:57 2015 UTC (8 years, 5 months ago) by mmcc
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.10: +3 -3 lines
Diff to previous 1.10 (colored)

bzero -> memset. No binary change.

Revision 1.10 / (download) - annotate - [select for diffs], Sun Sep 21 05:33:49 2014 UTC (9 years, 8 months ago) by daniel
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8, OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.9: +7 -7 lines
Diff to previous 1.9 (colored)

eliminate the use of a gcc C extension (conditionals with omitted
operands).

ok deraadt@

Revision 1.9 / (download) - annotate - [select for diffs], Fri Dec 17 07:17:38 2010 UTC (13 years, 5 months ago) by martinh
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4, OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.8: +15 -11 lines
Diff to previous 1.8 (colored)

Unbreak simple passwords with SHA and salted SHA hashes. Revision 1.7
introduced a bug that reversed the check. Found by MERIGHI Marcus.

Revision 1.8 / (download) - annotate - [select for diffs], Tue Oct 19 09:10:12 2010 UTC (13 years, 7 months ago) by martinh
Branch: MAIN
Changes since 1.7: +20 -6 lines
Diff to previous 1.7 (colored)

Remember the bind DN after BSD authentication. This makes access control
work for SASL and BSDAUTH binds as it does for simple binds.

Revision 1.7 / (download) - annotate - [select for diffs], Mon Sep 20 17:26:47 2010 UTC (13 years, 8 months ago) by martinh
Branch: MAIN
Changes since 1.6: +60 -45 lines
Diff to previous 1.6 (colored)

Implement support for bsdauth authentication via simple binds, not only
SASL. This works by prefixing the userPassword attribute with {BSDAUTH},
followed by the (bsd) username. For example:
userPassword: {BSDAUTH}username

Idea by william@. Tested by william@.

Revision 1.6 / (download) - annotate - [select for diffs], Wed Sep 1 17:34:15 2010 UTC (13 years, 9 months ago) by martinh
Branch: MAIN
Changes since 1.5: +2 -3 lines
Diff to previous 1.5 (colored)

Move generic imsg/libevent glue to a separate file.

with eric@ at c2k10

Revision 1.5 / (download) - annotate - [select for diffs], Wed Jun 30 19:26:39 2010 UTC (13 years, 11 months ago) by martinh
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.4: +17 -6 lines
Diff to previous 1.4 (colored)

Add a global root user that is allowed to read/write entries in all local
namespaces. Useful for dump/restore of all namespaces.

Revision 1.4 / (download) - annotate - [select for diffs], Tue Jun 29 21:54:38 2010 UTC (13 years, 11 months ago) by martinh
Branch: MAIN
Changes since 1.3: +4 -2 lines
Diff to previous 1.3 (colored)

Add support for referrals. Referrals are configured in the config file,
either in the global context or in a namespace. The latter can be used to
delegate requests to different servers for specific parts of the DIT. The
former is a global catch-all referral.

Revision 1.3 / (download) - annotate - [select for diffs], Wed Jun 23 13:10:14 2010 UTC (13 years, 11 months ago) by martinh
Branch: MAIN
Changes since 1.2: +3 -4 lines
Diff to previous 1.2 (colored)

Set errno to appropriate values when returning failure in btree. Make btree
functions only return success or failure (-1 or NULL). Update callers to
check errno.

Revision 1.2 / (download) - annotate - [select for diffs], Tue Jun 15 15:47:56 2010 UTC (13 years, 11 months ago) by martinh
Branch: MAIN
Changes since 1.1: +12 -3 lines
Diff to previous 1.1 (colored)

Make modify and simple auth requests open their own transactions, as search
already does. Trigger a reopen imsg request if either the data or index
databases are compacted. Queue the failed request and try again when the
file is reopened.

Compaction can now be done by a separate process, and ldapd will pick up
the change and reopen the file.

Revision 1.1 / (download) - annotate - [select for diffs], Mon May 31 17:36:31 2010 UTC (14 years ago) by martinh
Branch: MAIN

Initial import of ldapd, a small LDAP daemon. Work in progress.

ok deraadt@ jacekm@ gilles@ back@ henning@ blambert@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.