8 Commits

Author	SHA1	Message	Date
Chris F Ravenscroft	0ec6f15957	Capabilities -- part 2 (#214) + do not dump config at startup	2021-09-05 20:54:47 -07:00
Chris F Ravenscroft	7c7934aea3	Support for userPrincipalName binding and browsing. (#206) ... * Support for userPrincipalName binding and browsing. * Fixed travis CI test for userprincipalname * fixing travis tests for more users	2021-08-11 18:12:45 -07:00
Chris F Ravenscroft	4cf38893ac	Introducing goconvey testing and refactoring of config and ... (#204) ... * Introducing goconvey testing and refactoring of config and plugin backends. * gofmt, oops * Refactored re-insertion of requested attributes	2021-08-10 20:48:14 -07:00
Chris F Ravenscroft	10b0191818	Variable "unixid" is now respectively "UIDNumber" and "GIDNumber" for… (#201)	2021-08-02 17:20:42 -07:00
Jörn Friedrich Dreyer	53ddd3c4f4	the config struct is only needed by the config backend (#199)	2021-07-29 14:50:47 -07:00
Chris F Ravenscroft	9c197cc35e	Stronger, salted paswords using bcrypt. (#195)	2021-07-25 17:00:20 -07:00
Chris F Ravenscroft	cbb84b8641	Mac M1 Support and LDAP Req Attributes (#192) ... * Mac M1 Support * Augmented root DSS and schema discovery based on content of schema directory * LDAP workaround where req. attribute gets injected in response now works with combined filters * SubSchema query can return a minimal set, freeipa or openldap's schemas	2021-07-25 00:36:18 -07:00
Chris F Ravenscroft	2eb2215ae4	Database plugins (#133) ... This commit actually covers a few items. In future commits, I will keep features distinct. This is only happening this time around due to how long it took to merge this branch. Covered: - Database plugins (at this time: SQLite, MySQL, Postgres) - Backends acting as middleware: added the [[Backends]] configuration directive while retaining backward compatibility with [Backend] - Schema introspection (root DSE query with base scope) - When proxying, insert queried attribute back in upstream response, if absent, so that the LDAP library does not filter out all entries - When chaining backends, any backend can be used to inject OTP value in password, before reaching a non-OTP-aware backend (currently guarded by a True statement in case we find an issue (I did thoroughly test but you never know)) - Handling of special "1.1" attributes filter meaning "I do not want attributes" (RFC 4511, 4.5.1.8) - Support for "want types only" queries, even when proxying	2021-07-17 11:45:36 -07:00