openldap-commit October 2017

openldap-commit@openldap.org

1 participants
26 discussions

openldap.git branch master updated. 0d7489b9089c8cb5766cc689d8c414f166b4d84e
by openldap-commit2devel＠OpenLDAP.org 13 Oct '17

13 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, master has been updated via 0d7489b9089c8cb5766cc689d8c414f166b4d84e (commit) via 4a574324fd8c35c9ceffecd149bb14ab84b59a85 (commit) via b0ad788b8aaad7d5e75827dacd4bbba203ae69ff (commit) via 065b315f0da07e2d30308316ae38fe62dd488539 (commit) from d7b2c768313f2fd72e660df3bef6f344e3b90403 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 0d7489b9089c8cb5766cc689d8c414f166b4d84e Author: Howard Chu <hyc(a)openldap.org> Date: Fri Oct 13 17:25:29 2017 +0100 ITS#8752 fix syncrepl deadlock from updateCookie Must release cookieState->cs_mutex before invoking backend. Add a condvar to serialize calls of updateCookie, so we can release the mutex and still update sequentially. Also added tid logging, useful in conjunction with 7ab0e1aff0cc48cdfb299ca7dbd27900a9e3d1a8 commit 4a574324fd8c35c9ceffecd149bb14ab84b59a85 Author: Howard Chu <hyc(a)openldap.org> Date: Fri Oct 13 17:24:19 2017 +0100 ITS#8752 additional debug info, thread ID of rmutex lockers commit b0ad788b8aaad7d5e75827dacd4bbba203ae69ff Author: Howard Chu <hyc(a)openldap.org> Date: Fri Oct 13 17:22:34 2017 +0100 ITS#8752 make sure all cleanups are called in overlay_op_walk commit 065b315f0da07e2d30308316ae38fe62dd488539 Author: Howard Chu <hyc(a)openldap.org> Date: Fri Oct 13 17:16:25 2017 +0100 fix syncprov_qtask race, test062 crashes Keep s_mutex locked until we know we're removed from queue. Remember qtask cookie so we can retract if ineeded when deleting the overlay from running slapd. config_delete is still unsafe, overlay_remove is running with active threadpool instead of paused pool. ----------------------------------------------------------------------- Summary of changes: servers/slapd/backover.c | 3 +-- servers/slapd/overlays/accesslog.c | 15 +++++++++++++ servers/slapd/overlays/syncprov.c | 43 +++++++++++++++++++++++++------------- servers/slapd/syncrepl.c | 20 ++++++++++++++++-- 4 files changed, 63 insertions(+), 18 deletions(-) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch master updated. d7b2c768313f2fd72e660df3bef6f344e3b90403
by openldap-commit2devel＠OpenLDAP.org 12 Oct '17

12 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, master has been updated via d7b2c768313f2fd72e660df3bef6f344e3b90403 (commit) from 10566c8be384c6435476ec54e842382841cb84b6 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit d7b2c768313f2fd72e660df3bef6f344e3b90403 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Thu Oct 12 13:42:37 2017 -0700 Update script that does random modifications on random masters. Better reproduces the problem. ----------------------------------------------------------------------- Summary of changes: tests/data/regressions/its8752/its8752 | 48 +++++++++++++++++++++++++++++++++- 1 file changed, 47 insertions(+), 1 deletion(-) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch master updated. 10566c8be384c6435476ec54e842382841cb84b6
by openldap-commit2devel＠OpenLDAP.org 11 Oct '17

11 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, master has been updated via 10566c8be384c6435476ec54e842382841cb84b6 (commit) via fd5ad3ef399dc281e78b06a36162a58a95518c34 (commit) via cc99da182f53d3d4f3874703643b277773717af3 (commit) via 3258bf40eb7c2dc9c0e8ac66c2fc47db4f4fe70f (commit) via 5e531214b5b7fc3e031a16b60640d4d719181d58 (commit) via 77408ac781d65097300aff78576aa45c4ff34673 (commit) via cb9a4d01bc1ecf1eeb3fb7ef39067b2b30b6c545 (commit) via 44e9bda0e42f40e0baf0a2c0ef733eb757abd366 (commit) via 29f6260364df588c876d922ffcc3c429e3b4f062 (commit) via 9bef3574038a99a2c16ac54dab1ec352fc61c6fe (commit) from 636b63b5fd18d16fec97eaf3deb34706647ab898 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 10566c8be384c6435476ec54e842382841cb84b6 Author: Josh Soref <jsoref(a)users.noreply.github.com> Date: Sun Feb 26 07:49:31 2017 +0000 ITS#8605 - spelling fixes * javascript * kernel * ldap * length * macros * maintained * manager * matching * maximum * mechanism * memory * method * mimic * minimum * modifiable * modifiers * modifying * multiple * necessary * normalized * objectclass * occurrence * occurring * offered * operation * original * overridden * parameter * permanent * preemptively * printable * protocol * provider * really * redistribution * referenced * refresh * regardless * registered * request * reserved * resource * response * sanity * separated * setconcurrency * should * specially * specifies * structure * structures * subordinates * substitution * succeed * successful * successfully * sudoers * sufficient * superiors * supported * synchronization * terminated * they're * through * traffic * transparent * unsigned * unsupported * version * absence * achieves * adamson * additional * address * against * appropriate * architecture * associated * async * attribute * authentication * authorized * auxiliary * available * begin * beginning * buffered * canonical * certificate * charray * check * class * compatibility * compilation * component * configurable * configuration * configure * conjunction * constraints * constructor * contained * containing * continued * control * convenience * correspond * credentials * cyrillic * database * definitions * deloldrdn * dereferencing * destroy * distinguish * documentation * emmanuel * enabled * entry * enumerated * everything * exhaustive * existence * existing * explicitly * extract * fallthru * fashion * february * finally * function * generically * groupname * happened * implementation * including * initialization * initializes * insensitive * instantiated * instantiation * integral * internal * iterate commit fd5ad3ef399dc281e78b06a36162a58a95518c34 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Tue Sep 12 10:09:44 2017 -0700 ITS#8527 - Add additional debug logging on consumer/provider state when the consumer has a newer cookie than the provider commit cc99da182f53d3d4f3874703643b277773717af3 Author: Zebediah Figura <z.figura12(a)gmail.com> Date: Fri Sep 30 21:26:59 2016 -0500 ITS#8508 - Allow ucgendat.c to recognize title-case characters even if they do not have lower-case equivalents I, Zebediah Figura, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. commit 3258bf40eb7c2dc9c0e8ac66c2fc47db4f4fe70f Author: Ondřej Kuzník <ondra(a)mistotebe.net> Date: Wed Dec 16 13:47:17 2015 +0100 ITS#8291 Reopen cursor after delete commit 5e531214b5b7fc3e031a16b60640d4d719181d58 Author: Ondřej Kuzník <ondra(a)mistotebe.net> Date: Sun Nov 22 18:41:28 2015 +0000 ITS#8291 Enable slapmodify logging in tests commit 77408ac781d65097300aff78576aa45c4ff34673 Author: Emmanuel Lécharny <elecharny(a)gmail.com> Date: Fri Sep 30 21:26:59 2016 -0500 ITS#8153 - olcTimeLimit should be Single Value commit cb9a4d01bc1ecf1eeb3fb7ef39067b2b30b6c545 Author: Ivan Nejgebauer <ian(a)uns.ac.rs> Date: Tue Aug 28 16:57:54 2012 +0200 ITS#8037 - Add support for relax control to delta-syncrepl commit 44e9bda0e42f40e0baf0a2c0ef733eb757abd366 Author: ck(a)test-centos64.cksoft.de <ck(a)test-centos64.cksoft.de> Date: Tue Oct 8 23:14:45 2013 +0200 ITS#7721 - Allow authTimestamp updates to be forwarded via updateref commit 29f6260364df588c876d922ffcc3c429e3b4f062 Author: Nathaniel McCallum <npmccallum(a)redhat.com> Date: Wed Feb 27 13:44:57 2013 -0500 ITS#7532 - Add new function ldap_connect(). This function is used to manually establish a connection after a call to ldap_initialize(). This is primarily so that a file descriptor can be obtained before any requests are sent for the purposes of polling for writability. commit 9bef3574038a99a2c16ac54dab1ec352fc61c6fe Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 14:31:01 2017 -0700 ITS#6475 - Man page updates to slapd.conf/slapd-config for the new olcSaslAuxpropsDontUseCopy and olcSaslAuxpropsDontUseCopyIgnore parameters for use with SASL/OTP ----------------------------------------------------------------------- Summary of changes: build/openldap.m4 | 8 +-- build/shtool | 6 +-- clients/tools/ldapvc.c | 2 +- configure.in | 10 ++-- contrib/ldapc++/README | 4 +- contrib/ldapc++/doxygen.rc | 4 +- contrib/ldapc++/examples/main.cpp | 2 +- contrib/ldapc++/src/LDAPAsynConnection.h | 10 ++-- contrib/ldapc++/src/LDAPAttribute.h | 2 +- contrib/ldapc++/src/LDAPAttributeList.cpp | 10 ++-- contrib/ldapc++/src/LDAPConnection.h | 24 ++++----- contrib/ldapc++/src/LDAPConstraints.cpp | 10 ++-- contrib/ldapc++/src/LDAPControlSet.h | 4 +- contrib/ldapc++/src/LDAPEntry.h | 2 +- contrib/ldapc++/src/LDAPException.h | 8 +-- contrib/ldapc++/src/LDAPMessage.h | 4 +- contrib/ldapc++/src/LDAPRebind.h | 2 +- contrib/ldapc++/src/LDAPRebindAuth.h | 2 +- contrib/ldapc++/src/LDAPRequest.h | 2 +- contrib/ldapc++/src/LDAPResult.h | 6 +-- contrib/ldapc++/src/LDAPUrl.h | 6 +-- contrib/ldapc++/src/LdifReader.cpp | 4 +- contrib/ldapc++/src/LdifWriter.cpp | 2 +- contrib/ldaptcl/CHANGES | 2 +- contrib/ldaptcl/ldap.n | 4 +- contrib/ldaptcl/neoXldap.c | 4 +- contrib/slapd-modules/README | 2 +- contrib/slapd-modules/allop/slapo-allop.5 | 2 +- contrib/slapd-modules/autogroup/autogroup.c | 10 ++-- contrib/slapd-modules/cloak/cloak.c | 2 +- contrib/slapd-modules/cloak/slapo-cloak.5 | 2 +- contrib/slapd-modules/comp_match/asn.h | 4 +- contrib/slapd-modules/comp_match/componentlib.c | 12 ++--- contrib/slapd-modules/comp_match/componentlib.h | 6 +-- contrib/slapd-modules/comp_match/init.c | 10 ++-- contrib/slapd-modules/lastbind/lastbind.c | 46 ++++++++++++++++- contrib/slapd-modules/lastbind/slapo-lastbind.5 | 11 ++++ contrib/slapd-modules/nops/slapo-nops.5 | 2 +- contrib/slapd-modules/nssov/nss-pam-ldapd/attrs.h | 2 +- .../slapd-modules/nssov/nss-pam-ldapd/nslcd-prot.h | 2 +- contrib/slapd-modules/nssov/nss-pam-ldapd/nslcd.h | 6 +-- contrib/slapd-modules/nssov/nss-pam-ldapd/tio.c | 4 +- contrib/slapd-modules/passwd/sha2/sha2.c | 4 +- doc/devel/utfconv.txt | 4 +- doc/drafts/README | 2 +- doc/guide/admin/access-control.sdf | 2 +- doc/guide/admin/appendix-common-errors.sdf | 2 +- doc/guide/admin/preface.sdf | 2 +- doc/guide/admin/quickstart.sdf | 2 +- doc/guide/admin/sasl.sdf | 2 +- doc/guide/admin/tls.sdf | 6 +-- doc/guide/images/src/ldap-sync-refreshonly.svg | 2 +- doc/man/man1/ldapexop.1 | 2 +- doc/man/man3/ldap_open.3 | 11 ++++ doc/man/man5/slapd-asyncmeta.5 | 2 +- doc/man/man5/slapd-config.5 | 13 ++++- doc/man/man5/slapd-ldap.5 | 2 +- doc/man/man5/slapd-meta.5 | 2 +- doc/man/man5/slapd-sql.5 | 4 +- doc/man/man5/slapd.conf.5 | 13 ++++- doc/man/man8/slapcat.8 | 2 +- include/ldap.h | 3 ++ include/ldap_config.hin | 2 +- include/ldap_features.hin | 2 +- include/ldap_pvt_uc.h | 2 +- include/slapi-plugin.h | 4 +- libraries/liblber/options.c | 4 +- libraries/libldap/apitest.c | 2 +- libraries/libldap/delete.c | 4 +- libraries/libldap/error.c | 2 +- libraries/libldap/getdn.c | 2 +- libraries/libldap/gssapi.c | 4 +- libraries/libldap/open.c | 23 +++++++++ libraries/libldap/passwd.c | 2 +- libraries/libldap/ppolicy.c | 2 +- libraries/libldap/references.c | 2 +- libraries/libldap/request.c | 2 +- libraries/libldap/result.c | 2 +- libraries/libldap/sasl.c | 2 +- libraries/libldap/schema.c | 2 +- libraries/libldap/sortctrl.c | 2 +- libraries/libldap/test.c | 2 +- libraries/libldap/tls_m.c | 4 +- libraries/libldap/tls_o.c | 2 +- libraries/libldap/turn.c | 2 +- libraries/libldap/txn.c | 2 +- libraries/libldap/vc.c | 2 +- libraries/libldap/vlvctrl.c | 2 +- libraries/libldap/whoami.c | 2 +- libraries/libldap_r/rdwr.c | 2 +- libraries/libldap_r/thr_debug.c | 4 +- libraries/libldap_r/tpool.c | 2 +- libraries/liblmdb/Doxyfile | 10 ++-- libraries/liblmdb/lmdb.h | 2 +- libraries/liblunicode/ucdata/bidiapi.txt | 2 +- libraries/liblunicode/ucdata/ucdata.man | 2 +- libraries/liblunicode/ucdata/ucgendat.c | 13 ++++- libraries/liblunicode/ucdata/ucpgba.man | 2 +- libraries/liblunicode/ucdata/uctable.h | 58 +++++++++++----------- libraries/liblunicode/utbm/README | 4 +- libraries/liblutil/entropy.c | 2 +- libraries/librewrite/context.c | 2 +- servers/slapd/aci.c | 6 +-- servers/slapd/at.c | 4 +- servers/slapd/back-asyncmeta/back-asyncmeta.h | 2 +- servers/slapd/back-bdb/tools.c | 9 ++-- servers/slapd/back-dnssrv/referral.c | 2 +- servers/slapd/back-dnssrv/search.c | 2 +- servers/slapd/back-ldap/TODO.proxy | 4 +- servers/slapd/back-ldap/monitor.c | 4 +- servers/slapd/back-monitor/init.c | 2 +- servers/slapd/back-monitor/log.c | 2 +- servers/slapd/back-null/null.c | 2 +- servers/slapd/back-passwd/search.c | 4 +- servers/slapd/back-perl/README | 2 +- servers/slapd/back-perl/init.c | 2 +- servers/slapd/back-sql/add.c | 2 +- servers/slapd/back-sql/docs/bugs | 2 +- servers/slapd/back-sql/entry-id.c | 2 +- servers/slapd/back-sql/rdbms_depend/README | 2 +- .../rdbms_depend/timesten/dnreverse/Makefile | 2 +- .../rdbms_depend/timesten/dnreverse/dnreverse.cpp | 2 +- servers/slapd/back-sql/search.c | 2 +- servers/slapd/back-wt/config.c | 2 +- servers/slapd/back-wt/delete.c | 2 +- servers/slapd/backover.c | 4 +- servers/slapd/bconfig.c | 2 +- servers/slapd/mr.c | 2 +- servers/slapd/overlays/constraint.c | 4 +- servers/slapd/overlays/ppolicy.c | 2 +- servers/slapd/overlays/refint.c | 2 +- servers/slapd/overlays/rwmdn.c | 2 +- servers/slapd/overlays/sssvlv.c | 2 +- servers/slapd/overlays/syncprov.c | 4 ++ servers/slapd/overlays/unique.c | 2 +- servers/slapd/proto-slap.h | 2 +- servers/slapd/schema/collective.schema | 2 +- servers/slapd/schema/cosine.ldif | 4 +- servers/slapd/schema/cosine.schema | 6 +-- servers/slapd/schema/duaconf.schema | 2 +- servers/slapd/schema/pmi.ldif | 2 +- servers/slapd/schema/pmi.schema | 2 +- servers/slapd/schema/ppolicy.schema | 2 +- servers/slapd/slap.h | 8 +-- servers/slapd/slapi/plugin.c | 4 +- servers/slapd/slapi/slapi.h | 2 +- servers/slapd/slapi/slapi_overlay.c | 2 +- servers/slapd/slapmodify.c | 2 +- servers/slapd/syncrepl.c | 30 +++++++++-- tests/data/regressions/README | 2 +- tests/data/slapd-syncrepl-slave-persist-ldap.conf | 2 +- tests/scripts/test007-slapmodify | 2 +- tests/scripts/test024-unique | 2 +- tests/scripts/test055-valregex | 2 +- tests/scripts/test058-syncrepl-asymmetric | 4 +- tests/scripts/test061-syncreplication-initiation | 2 +- 156 files changed, 432 insertions(+), 284 deletions(-) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch OPENLDAP_REL_ENG_2_4 updated. OPENLDAP_REL_ENG_2_4_45-47-g11f2283
by openldap-commit2devel＠OpenLDAP.org 11 Oct '17

11 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, OPENLDAP_REL_ENG_2_4 has been updated via 11f228325342ccb967b53f121f47393502f18a2c (commit) via b1147424473240b559b709d625e453af570559fe (commit) from ff09609f3e133bb0fda3bee1c5d691db149110f7 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 11f228325342ccb967b53f121f47393502f18a2c Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 13:08:53 2017 -0700 ITS#8692 commit b1147424473240b559b709d625e453af570559fe Author: Michael Ströder <michael(a)stroeder.com> Date: Wed Jul 12 20:18:22 2017 +0200 ITS#8692 let back-sock generate increment: line in case of LDAP_MOD_INCREMENT (see RFC 4525, section 3) ----------------------------------------------------------------------- Summary of changes: CHANGES | 1 + servers/slapd/back-sock/modify.c | 4 ++++ 2 files changed, 5 insertions(+) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch master updated. 636b63b5fd18d16fec97eaf3deb34706647ab898
by openldap-commit2devel＠OpenLDAP.org 11 Oct '17

11 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, master has been updated via 636b63b5fd18d16fec97eaf3deb34706647ab898 (commit) from cbf5f034766c0b1c02e5d87f60c1e3626430cc71 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 636b63b5fd18d16fec97eaf3deb34706647ab898 Author: Michael Ströder <michael(a)stroeder.com> Date: Wed Jul 12 20:18:22 2017 +0200 ITS#8692 let back-sock generate increment: line in case of LDAP_MOD_INCREMENT (see RFC 4525, section 3) ----------------------------------------------------------------------- Summary of changes: servers/slapd/back-sock/modify.c | 4 ++++ 1 file changed, 4 insertions(+) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch OPENLDAP_REL_ENG_2_4 updated. OPENLDAP_REL_ENG_2_4_45-45-gff09609
by openldap-commit2devel＠OpenLDAP.org 11 Oct '17

11 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, OPENLDAP_REL_ENG_2_4 has been updated via ff09609f3e133bb0fda3bee1c5d691db149110f7 (commit) via 0fbe92dcdfc37b79dfe910c39e7989d24b26d171 (commit) via a8cf2fb10047794c83873f5ff5c125ecd0e53168 (commit) via 49e7fb84cd6e92936ece5459dfd71a3f5b644c8d (commit) via 9db93a138932ddbe68f2a4215d136383d4f3dc46 (commit) via 9b777110ffe5b3f37ce4d9e13cd1d3c4130b5a89 (commit) via 0b70535007ee1121597a860f0b1aa3755551c0ee (commit) via 36839b3ea1aea81d199792d0c7002730880ae8c9 (commit) via 738d62fa4163706924ac3db3227944211190da86 (commit) via 5b2625c5509e8c57b29d59d6669c6adf78aec393 (commit) via 07aa06b4aca389fdc8b93ad968787a262720a7fd (commit) via cac7a95b5a9918959ff316ef878b6513e9cebc7b (commit) via dae0dac07e4ff54de975860ae1a99643f46d7b43 (commit) via f53258cf2f78b99adde56d9a9f4697a9f9c06823 (commit) via 0568ddb0395eb907273017ddde70175a62ce7d1f (commit) via f465c18c45d1d1a97e0db0153b21eaf8792f1c85 (commit) via 1292dc90e933184ffadb3213f0a342c916d9b81d (commit) via 99421d328d1f8c60169c1b7f13130d4d55b825c1 (commit) via 73d483243c1b09adcc209f1a19281c3cb0c3e440 (commit) via 9733303d999aab403086f65664a5afa245519145 (commit) via 2ea49579c4833bc178c169ec575d6bd135fb9660 (commit) via 3ce6a2d0c86725a5f4205ec001a86a5f86a5db75 (commit) via 70dbc04d6674c9dcc948e1c6e79f2e7c3a69006f (commit) via a50b39d8036ac9276cc1ce00d3823f67cd91c16e (commit) from 66928d6b992575c019995d2225e8441bfb83ec9f (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit ff09609f3e133bb0fda3bee1c5d691db149110f7 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:47:24 2017 -0700 ITS#7389 commit 0fbe92dcdfc37b79dfe910c39e7989d24b26d171 Author: Jan Vcelak <jvcelak(a)redhat.com> Date: Fri Sep 14 14:24:29 2012 +0200 ITS#7389 - MozNSS: load certificates from certdb, fallback to PEM If TLS_CACERT pointed to a PEM file and TLS_CACERTDIR was set to NSS certificate database, the backend assumed that the certificate is always located in the certificate database. This assumption might be wrong. This patch makes the library to try to load the certificate from NSS database and fallback to PEM file if unsuccessfull. commit a8cf2fb10047794c83873f5ff5c125ecd0e53168 Author: Ian Puleston <ipuleston(a)SonicWALL.com> Date: Thu Sep 18 18:48:50 2014 -0700 ITS#8167 Fix non-blocking TLS with referrals commit 49e7fb84cd6e92936ece5459dfd71a3f5b644c8d Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:45:11 2017 -0700 ITS#8687 commit 9db93a138932ddbe68f2a4215d136383d4f3dc46 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Fri Sep 22 14:25:20 2017 -0700 ITS#8687 - EGD is disabled by default in OpenSSL 1.1. We need to comment out this block if it is not detected. Particularly affects cross compilation. commit 9b777110ffe5b3f37ce4d9e13cd1d3c4130b5a89 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:43:29 2017 -0700 ITS#8583 commit 0b70535007ee1121597a860f0b1aa3755551c0ee Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Jul 5 13:14:54 2017 -0700 ITS#8583 - Fix C++ LDAP Control structure commit 36839b3ea1aea81d199792d0c7002730880ae8c9 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:41:57 2017 -0700 ITS#8578 commit 738d62fa4163706924ac3db3227944211190da86 Author: sca+openldap(a)andreasschulze.de <sca+openldap(a)andreasschulze.de> Date: Fri Sep 1 16:31:52 2017 -0700 ITS#8578 - remove unused-variables in RE24 testing call (2.4.45) commit 5b2625c5509e8c57b29d59d6669c6adf78aec393 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:40:07 2017 -0700 ITS#8404 commit 07aa06b4aca389fdc8b93ad968787a262720a7fd Author: Nadezhda Ivanova <nivanova(a)symas.com> Date: Tue Sep 12 17:14:30 2017 +0300 ITS#8404 Fix an assertion failure during modify of olcDbRewrite in back-meta commit cac7a95b5a9918959ff316ef878b6513e9cebc7b Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:39:03 2017 -0700 ITS#8121 commit dae0dac07e4ff54de975860ae1a99643f46d7b43 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Sun Apr 23 15:30:07 2017 -0700 ITS#8121 - Note ldap_sasl_bind and ldap_sasl_bind_s can be used to make simple binds via the LDAP_SASL_SIMPLE mechanism commit f53258cf2f78b99adde56d9a9f4697a9f9c06823 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:37:48 2017 -0700 ITS#7520 commit 0568ddb0395eb907273017ddde70175a62ce7d1f Author: Ted C. Cheng <tedcheng(a)symas.com> Date: Thu Feb 5 17:19:39 2015 -0800 ITS#7520 - back-ldap omit-unknown-schema changes commit f465c18c45d1d1a97e0db0153b21eaf8792f1c85 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:36:00 2017 -0700 ITS#7374 commit 1292dc90e933184ffadb3213f0a342c916d9b81d Author: Jan Vcelak <jvcelak(a)redhat.com> Date: Wed Aug 29 16:23:52 2012 +0200 ITS#7374 - MozNSS: better file name matching for hashed CA certificate directory CA certificate files in OpenSSL compatible CACERTDIR were loaded if the file extension was '.0'. However the file name should be 8 letters long certificate hash of the certificate subject name, followed by a numeric suffix which is used to differentiate between two certificates with the same subject name. Wit this patch, certificate file names are matched correctly (using regular expressions). commit 99421d328d1f8c60169c1b7f13130d4d55b825c1 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:34:13 2017 -0700 ITS#7373 commit 73d483243c1b09adcc209f1a19281c3cb0c3e440 Author: Jan Vcelak <jvcelak(a)redhat.com> Date: Tue Aug 28 16:57:54 2012 +0200 ITS#7373 - TLS: do not reuse tls_session if hostname check fails If multiple servers are specified, the connection to the first one succeeds, and the hostname verification fails, *tls_session is not dropped, but reused when connecting to the second server. This is a problem with Mozilla NSS backend because another handshake cannot be performed on the same file descriptor. From this reason, hostname checking was moved into ldap_int_tls_connect() before connection error handling. commit 9733303d999aab403086f65664a5afa245519145 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:29:45 2017 -0700 ITS#7100 commit 2ea49579c4833bc178c169ec575d6bd135fb9660 Author: Ondřej Kuzník <ondra(a)mistotebe.net> Date: Sun Nov 22 18:32:43 2015 +0000 ITS#7100 Update entryTtl behaviour to match RFC 2589 commit 3ce6a2d0c86725a5f4205ec001a86a5f86a5db75 Author: Ondřej Kuzník <ondra(a)mistotebe.net> Date: Sun Nov 22 18:31:30 2015 +0000 ITS#7100 Test for entryTtl reflecting time to live commit 70dbc04d6674c9dcc948e1c6e79f2e7c3a69006f Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:28:36 2017 -0700 ITS#5048 commit a50b39d8036ac9276cc1ce00d3823f67cd91c16e Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Thu Sep 7 08:44:28 2017 -0700 ITS#5048 - index on entryCSN is mandatory ----------------------------------------------------------------------- Summary of changes: CHANGES | 16 +++++++-- contrib/ldapc++/src/LDAPControl.cpp | 5 +-- doc/man/man3/ldap_bind.3 | 6 ++++ doc/man/man5/slapd-ldap.5 | 7 ++++ doc/man/man5/slapo-syncprov.5 | 2 +- libraries/libldap/add.c | 2 +- libraries/libldap/extended.c | 1 - libraries/libldap/modify.c | 2 +- libraries/libldap/os-local.c | 2 +- libraries/libldap/tls2.c | 40 +++++++++++----------- libraries/libldap/tls_m.c | 68 +++++++++++++++++++++++++------------ libraries/libldap/tls_o.c | 6 ++-- servers/slapd/back-ldap/back-ldap.h | 3 +- servers/slapd/back-ldap/config.c | 27 +++++++++++++++ servers/slapd/back-ldap/distproc.c | 3 ++ servers/slapd/back-ldap/search.c | 34 +++++++++++++++---- servers/slapd/back-ldif/ldif.c | 1 - servers/slapd/back-mdb/id2entry.c | 6 +--- servers/slapd/back-mdb/index.c | 2 +- servers/slapd/back-mdb/init.c | 1 - servers/slapd/back-mdb/monitor.c | 4 ++- servers/slapd/back-mdb/search.c | 2 -- servers/slapd/back-mdb/tools.c | 2 -- servers/slapd/back-meta/config.c | 62 +++++++++++++++++++++++++++++---- servers/slapd/overlays/dds.c | 67 ++++++++++++++++++++++++++++++++++++ servers/slapd/overlays/syncprov.c | 3 +- servers/slapd/syncrepl.c | 5 +-- tests/progs/slapd-mtread.c | 4 +-- tests/scripts/defines.sh | 1 + tests/scripts/test046-dds | 32 +++++++++++++++-- 30 files changed, 326 insertions(+), 90 deletions(-) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch OPENLDAP_REL_ENG_2_4 updated. OPENLDAP_REL_ENG_2_4_45-21-g66928d6
by openldap-commit2devel＠OpenLDAP.org 11 Oct '17

11 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, OPENLDAP_REL_ENG_2_4 has been updated via 66928d6b992575c019995d2225e8441bfb83ec9f (commit) via cf2b647d15d15096a2c06a6d7d080cb3647e49a7 (commit) via a1df76d9539e43662a89be05da4a59589fe0886c (commit) via e6fe81a1a5cf101935069288a295df0c5af38fc7 (commit) from 669a4d29c3e8258a9411d36dcb4cece23ad0908f (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 66928d6b992575c019995d2225e8441bfb83ec9f Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Oct 11 12:16:35 2017 -0700 ITS#8717, ITS#8720, ITS#8226 commit cf2b647d15d15096a2c06a6d7d080cb3647e49a7 Author: Howard Chu <hyc(a)openldap.org> Date: Wed Sep 6 21:46:09 2017 +0100 ITS#8717 call connection delete callbacks When TLS fails to start commit a1df76d9539e43662a89be05da4a59589fe0886c Author: Howard Chu <hyc(a)openldap.org> Date: Thu Aug 31 16:53:45 2017 +0100 ITS#8720 use the configured exop timeout for StartTLS Also, there's no need for a retry loop here. Just wait for the specified timeout or give up. commit e6fe81a1a5cf101935069288a295df0c5af38fc7 Author: Howard Chu <hyc(a)openldap.org> Date: Tue Aug 1 22:08:50 2017 +0100 ITS#8226 optimization Don't release read txn unless there has actually been a new write txn ----------------------------------------------------------------------- Summary of changes: CHANGES | 3 +++ libraries/libldap/open.c | 25 +++++++++++++++++++++++++ servers/slapd/back-ldap/back-ldap.h | 2 ++ servers/slapd/back-ldap/bind.c | 29 +++++++++++------------------ servers/slapd/back-mdb/search.c | 5 ++++- 5 files changed, 45 insertions(+), 19 deletions(-) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch master updated. cbf5f034766c0b1c02e5d87f60c1e3626430cc71
by openldap-commit2devel＠OpenLDAP.org 06 Oct '17

06 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, master has been updated via cbf5f034766c0b1c02e5d87f60c1e3626430cc71 (commit) via 46c93e41f43da7f16270179c6eff75e450617329 (commit) via 35a880c53ed0d06b9d0010c9a3ddca04f66dfa9c (commit) from a795d7cc0b6583ed3eb5313b9203087af6d336c3 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit cbf5f034766c0b1c02e5d87f60c1e3626430cc71 Author: Jan Vcelak <jvcelak(a)redhat.com> Date: Fri Sep 14 14:24:29 2012 +0200 ITS#7389 - MozNSS: load certificates from certdb, fallback to PEM If TLS_CACERT pointed to a PEM file and TLS_CACERTDIR was set to NSS certificate database, the backend assumed that the certificate is always located in the certificate database. This assumption might be wrong. This patch makes the library to try to load the certificate from NSS database and fallback to PEM file if unsuccessfull. commit 46c93e41f43da7f16270179c6eff75e450617329 Author: Ian Puleston <ipuleston(a)SonicWALL.com> Date: Thu Sep 18 18:48:50 2014 -0700 ITS#8167 Fix non-blocking TLS with referrals commit 35a880c53ed0d06b9d0010c9a3ddca04f66dfa9c Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Fri Sep 22 14:25:20 2017 -0700 ITS#8687 - EGD is disabled by default in OpenSSL 1.1. We need to comment out this block if it is not detected. Particularly affects cross compilation. ----------------------------------------------------------------------- Summary of changes: libraries/libldap/tls2.c | 6 +++--- libraries/libldap/tls_m.c | 39 +++++++++++++++++++++++++++------------ libraries/libldap/tls_o.c | 6 ++++-- 3 files changed, 34 insertions(+), 17 deletions(-) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch mdb.master updated. bb8502f08800a44a6b91a94d6478aa7101c4cc77
by openldap-commit2devel＠OpenLDAP.org 06 Oct '17

06 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, mdb.master has been updated via bb8502f08800a44a6b91a94d6478aa7101c4cc77 (commit) from 8c2c5e2b4bf2e4504694aa9684922d505af9ba75 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit bb8502f08800a44a6b91a94d6478aa7101c4cc77 Author: Quanah Gibson-Mount <quanah(a)symas.com> Date: Wed Jun 7 13:42:51 2017 -0700 ITS#8612 Fix Solaris builds with liblmdb This patch fixes liblmdb builds on Solaris and derivatives by defining _POSIX_PTHREAD_SEMANTICS ----------------------------------------------------------------------- Summary of changes: libraries/liblmdb/mdb.c | 4 ++++ 1 file changed, 4 insertions(+) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

openldap.git branch master updated. a795d7cc0b6583ed3eb5313b9203087af6d336c3
by openldap-commit2devel＠OpenLDAP.org 06 Oct '17

06 Oct '17

A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly. The branch, master has been updated via a795d7cc0b6583ed3eb5313b9203087af6d336c3 (commit) via 90835da72ffb18043abb809db31339bfbc643065 (commit) via da170cbe3b1f354ad1dcdf1e2d1ce8128e9ad642 (commit) via fba60ab2ed416507a562c956a03b4d0ac08619cc (commit) via e20ac6b5395e702d4089d97fac6d49972a403a4d (commit) via 19fd969d216c96e34a76e4fc7b325e93a9d7ed03 (commit) via acc5b8866192f899af2bb7012f5d423d5296cc03 (commit) via 08492987a0faf3d8d468d9c8fce2f670e130977c (commit) via 61cfb80f8d3c65a3782ce7793c996c4021f5f0ce (commit) via 44b9fd1c8144f651bbd0b86294f5d5ba06baeee1 (commit) from 70e54d2527edbdbd6216924f63214dbc4ef9a550 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit a795d7cc0b6583ed3eb5313b9203087af6d336c3 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Wed Jul 5 13:14:54 2017 -0700 ITS#8583 - Fix C++ LDAP Control structure commit 90835da72ffb18043abb809db31339bfbc643065 Author: sca+openldap(a)andreasschulze.de <sca+openldap(a)andreasschulze.de> Date: Fri Sep 1 16:31:52 2017 -0700 ITS#8578 - remove unused-variables in RE24 testing call (2.4.45) commit da170cbe3b1f354ad1dcdf1e2d1ce8128e9ad642 Author: Nadezhda Ivanova <nivanova(a)symas.com> Date: Tue Sep 12 17:14:30 2017 +0300 ITS#8404 Fix an assertion failure during modify of olcDbRewrite in back-meta commit fba60ab2ed416507a562c956a03b4d0ac08619cc Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Sun Apr 23 15:30:07 2017 -0700 ITS#8121 - Note ldap_sasl_bind and ldap_sasl_bind_s can be used to make simple binds via the LDAP_SASL_SIMPLE mechanism commit e20ac6b5395e702d4089d97fac6d49972a403a4d Author: Ted C. Cheng <tedcheng(a)symas.com> Date: Thu Feb 5 17:19:39 2015 -0800 ITS#7520 - back-ldap omit-unknown-schema changes commit 19fd969d216c96e34a76e4fc7b325e93a9d7ed03 Author: Jan Vcelak <jvcelak(a)redhat.com> Date: Wed Aug 29 16:23:52 2012 +0200 ITS#7374 - MozNSS: better file name matching for hashed CA certificate directory CA certificate files in OpenSSL compatible CACERTDIR were loaded if the file extension was '.0'. However the file name should be 8 letters long certificate hash of the certificate subject name, followed by a numeric suffix which is used to differentiate between two certificates with the same subject name. Wit this patch, certificate file names are matched correctly (using regular expressions). commit acc5b8866192f899af2bb7012f5d423d5296cc03 Author: Jan Vcelak <jvcelak(a)redhat.com> Date: Tue Aug 28 16:57:54 2012 +0200 ITS#7373 - TLS: do not reuse tls_session if hostname check fails If multiple servers are specified, the connection to the first one succeeds, and the hostname verification fails, *tls_session is not dropped, but reused when connecting to the second server. This is a problem with Mozilla NSS backend because another handshake cannot be performed on the same file descriptor. From this reason, hostname checking was moved into ldap_int_tls_connect() before connection error handling. commit 08492987a0faf3d8d468d9c8fce2f670e130977c Author: Ondřej Kuzník <ondra(a)mistotebe.net> Date: Sun Nov 22 18:32:43 2015 +0000 ITS#7100 Update entryTtl behaviour to match RFC 2589 commit 61cfb80f8d3c65a3782ce7793c996c4021f5f0ce Author: Ondřej Kuzník <ondra(a)mistotebe.net> Date: Sun Nov 22 18:31:30 2015 +0000 ITS#7100 Test for entryTtl reflecting time to live commit 44b9fd1c8144f651bbd0b86294f5d5ba06baeee1 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Thu Sep 7 08:44:28 2017 -0700 ITS#5048 - index on entryCSN is mandatory ----------------------------------------------------------------------- Summary of changes: contrib/ldapc++/src/LDAPControl.cpp | 5 +-- doc/man/man3/ldap_bind.3 | 6 ++++ doc/man/man5/slapd-ldap.5 | 7 ++++ doc/man/man5/slapo-syncprov.5 | 2 +- libraries/libldap/add.c | 2 +- libraries/libldap/extended.c | 1 - libraries/libldap/modify.c | 2 +- libraries/libldap/os-local.c | 2 +- libraries/libldap/tls2.c | 34 +++++++++---------- libraries/libldap/tls_m.c | 29 +++++++++++----- servers/slapd/back-ldap/back-ldap.h | 3 +- servers/slapd/back-ldap/config.c | 27 +++++++++++++++ servers/slapd/back-ldap/distproc.c | 3 ++ servers/slapd/back-ldap/search.c | 34 +++++++++++++++---- servers/slapd/back-ldif/ldif.c | 1 - servers/slapd/back-mdb/id2entry.c | 6 +--- servers/slapd/back-mdb/index.c | 2 +- servers/slapd/back-mdb/init.c | 1 - servers/slapd/back-mdb/monitor.c | 4 ++- servers/slapd/back-mdb/search.c | 2 -- servers/slapd/back-mdb/tools.c | 2 -- servers/slapd/back-meta/config.c | 62 ++++++++++++++++++++++++++++++---- servers/slapd/overlays/dds.c | 67 +++++++++++++++++++++++++++++++++++++ servers/slapd/overlays/syncprov.c | 3 +- servers/slapd/syncrepl.c | 5 +-- tests/progs/slapd-mtread.c | 4 +-- tests/scripts/defines.sh | 1 + tests/scripts/test046-dds | 32 ++++++++++++++++-- 28 files changed, 278 insertions(+), 71 deletions(-) --- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-commit October 2017