(root)/head : changes from revision 95

From Revision 95 to 76

Rev	Summary	Authors	Date	Diff	Files
95	update changelog for pubkey support update changelog for pubkey support	John Morrissey	2010-02-28
94	- ssh pubkey support was broken, since nothing was setting - ssh pubkey support was broken, since nothing was setting ldap_ssh_pubkey_{basedn,filter}. use ldap_auth_{basedn,filter} instead, since it seems reasonable to keep pubkeys on the account that's authenticating. - add support for multiple pubkeys for a user - always initialize cached_ssh_pubkeys in pr_ldap_ssh_pubkey_lookup(), since we're only called if we don't have any pubkeys cached or need ot explicitly fetch pubkeys for a different user	John Morrissey	2010-02-28
93	add ssh public key support (for mod_sftp_ldap) from TJ Saund... add ssh public key support (for mod_sftp_ldap) from TJ Saunders <tj@castaglia.org>	John Morrissey	2010-02-02
92	nuke unused variable nuke unused variable	John Morrissey	2010-02-02
91	release 2.8.22 release 2.8.22	John Morrissey	2010-02-02
90	* Add support for quota profiles. If a user entry doesn't ha... * Add support for quota profiles. If a user entry doesn't have an ftpQuota attribute, search for the DN contained in the user's ftpQuotaProfileDN attribute (if present) and use the ftpQuota attribute present on that DN. (Bug #2617)	John Morrissey	2009-12-07
89	* Fix segfaults in debug logging on platforms whose printf()... * Fix segfaults in debug logging on platforms whose printf() does not gracefully handle NULL string pointers. (Bug #3346)	John Morrissey	2009-12-05
88	cast ldap_querytimeout_tp.tv_sec to quell a compiler warning cast ldap_querytimeout_tp.tv_sec to quell a compiler warning	John Morrissey	2009-12-05
87	* Emit correct LDAP timeout in debug message, accounting for... * Emit correct LDAP timeout in debug message, accounting for the default if none was specified. Reported by Nikos Voutsinas <nvoutsin@noc.uoa.gr>.	John Morrissey	2009-12-05
86	thanks to Bug 2922 (Auth API allows one auth module to authe... thanks to Bug 2922 (Auth API allows one auth module to authenticate user data provided by a different auth module), we don't need to worry about passing a locked crypted password ("*") to pr_auth_check(), since our authz handler will only be called if we supplied the original user information. as a result, if the UserPassword directive is in effect, we need to avoid doing auth binds and fall through to verifying the crypted password ourselves instead of declining the authz request and letting mod_auth_unix handle it. bump the required proftpd version to 1.3.1rc3, since #2922 was resolved in that version. this seems reasonable, since nobody ought to be running 1.2.10rc2 any more and 1.3.1rc3 has been available for almost 2.5y now.	John Morrissey	2009-11-20
85	add intermediary #ifdefs instead of littering the code with ... add intermediary #ifdefs instead of littering the code with ldap api version- and openldap-specific preprocessor directives	John Morrissey	2009-11-20
84	use a common pr_ldap_search() to avoid duplicate code in _l... use a common pr_ldap_search() to avoid duplicate code in _lookup()	John Morrissey	2009-11-20
83	release 2.8.21 (2.8.20+r{71,77,78}) release 2.8.21 (2.8.20+r{71,77,78})	John Morrissey	2009-11-20
82	- cached_quota should be declared static - cached_quota should be declared static - return PR_HANDLED() in stub LDAPUseSSL config directive handler	John Morrissey	2009-11-12
81	emit a debug warning if the search scope is 'base'. ldap url... emit a debug warning if the search scope is 'base'. ldap urls default to this scope, and specifying: LDAPServer ldap://127.0.0.1/ has bitten me several times when I forget that the search scope is 'base', not 'sub'.	John Morrissey	2009-11-12
80	re-add a stub for LDAPUseSSL that only logs a notice that it... re-add a stub for LDAPUseSSL that only logs a notice that it's been removed, so older configurations don't fail to start. [followon to r75]	John Morrissey	2009-11-12
79	quell a discarded-const compiler warning quell a discarded-const compiler warning	John Morrissey	2009-11-12
78	fix LDAP server failover by implementing our own failover me... fix LDAP server failover by implementing our own failover mechanism instead of relying on the LDAP SDK's. ldap server failover (space-separated list of hostnames in the argument to LDAPServer) has been broken since 2.8.19 when ldap_init() was replaced with ldap_initialize(), if available. as of that commit, a LDAP URL is constructed if simple hostname(s) are passed to LDAPServer, so: 'LDAPServer "127.0.0.1 172.16.0.5" was passed to ldap_initailize() as: ldap://127.0.0.1 172.16.0.5/ Unfortunately, ldap_url_parse() treats this as a valid URL, but ldap_intiailize() will not fail over to subsequent LDAP servers should the first be unreachable. ldap_initialize() will take a whitespace-separated list of LDAP URLs and will fail over successfully, just not when whitespace-separated hostname are passed to a single url (even if the whitespace in the hostname portion of the URL is urlencoded as %20). forget all of this SDK-based failover and implement our own failover support, since afaict Sun's ancient LDAP SDK doesn't implement failover and it's nice to be able to control it ourselves. for that matter, we need to control it ourselves since we need to use the search scope indicated by the URL at hand. chances are, the search scope will be the same for all URLs passed to LDAPServer, but to be completely correct, we should use the scope corresponding to the current URL and ldap_initialize() provides no way to tell what URL it wound up connecting to. [oops, fired off the editor prematurely on the last commit.]	John Morrissey	2009-11-12
77	Bug 3301 - LDAP server failover does not work when ldap_ini... Bug 3301 - LDAP server failover does not work when ldap_initialize() is available	John Morrissey	2009-11-12
76	only allow ldaps:// url schemes if we have ldap_initialize() only allow ldaps:// url schemes if we have ldap_initialize()	John Morrissey	2009-11-11

Older

Loggerhead 1.17 is a web-based interface for Bazaar branches