Commit Graph

4 Commits

Author SHA1 Message Date
Chris F Ravenscroft 0ec6f15957 Capabilities -- part 2 (#214) + do not dump config at startup 2021-09-05 20:54:47 -07:00
Chris F Ravenscroft 10b0191818 Variable "unixid" is now respectively "UIDNumber" and "GIDNumber" for… (#201) 2021-08-02 17:20:42 -07:00
Chris F Ravenscroft 9c197cc35e Stronger, salted paswords using bcrypt. (#195) 2021-07-25 17:00:20 -07:00
Chris F Ravenscroft 2eb2215ae4 Database plugins (#133)
This commit actually covers a few items. In future commits, I will keep features distinct. This is only happening this time around due to how long it took to merge this branch.

Covered:

- Database plugins (at this time: SQLite, MySQL, Postgres)
- Backends acting as middleware: added the [[Backends]] configuration directive while retaining backward compatibility with [Backend]
- Schema introspection (root DSE query with base scope)
- When proxying, insert queried attribute back in upstream response, if absent, so that the LDAP library does not filter out all entries
- When chaining backends, any backend can be used to inject OTP value in password, before reaching a non-OTP-aware backend (currently guarded by a True statement in case we find an issue (I did thoroughly test but you never know))
- Handling of special "1.1" attributes filter meaning "I do not want attributes" (RFC 4511, 4.5.1.8)
- Support for "want types only" queries, even when proxying
2021-07-17 11:45:36 -07:00