openldap-commit October 2026

openldap-commit@openldap.org

1 participants
88 discussions

[Git][openldap/openldap][OPENLDAP_REL_ENG_2_6] 2 commits: Revert "ITS#10607 slapd-config: fix concurrency for mod/modrdn/del"
by Quanah Gibson-Mount (＠quanah) 01 Oct '26

01 Oct '26

Quanah Gibson-Mount pushed to branch OPENLDAP_REL_ENG_2_6 at openldap / OpenLDAP Commits: 33756444 by Quanah Gibson-Mount at 2026-10-02T00:39:50+00:00 Revert "ITS#10607 slapd-config: fix concurrency for mod/modrdn/del" This reverts commit 4cdb8f68ad0c74aaf02000ac0e6f98d53d326cc0. - - - - - 900cb80a by Quanah Gibson-Mount at 2026-10-02T00:40:00+00:00 Remove 10607 - - - - - 2 changed files: - CHANGES - servers/slapd/bconfig.c View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/23402b82e7d50d1c5c8b3a… -- View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/23402b82e7d50d1c5c8b3a… You're receiving this email because of your account on git.openldap.org. Manage all notifications: https://git.openldap.org/-/profile/notifications | Help: https://git.openldap.org/help

1 0

[Git][openldap/openldap][OPENLDAP_REL_ENG_2_7] 58 commits: ITS#10455 memberof: drop unnecessary assert()
by Quanah Gibson-Mount (＠quanah) 01 Oct '26

01 Oct '26

Quanah Gibson-Mount pushed to branch OPENLDAP_REL_ENG_2_7 at openldap / OpenLDAP Commits: 12f052b6 by Ondřej Kuzník at 2026-10-01T18:45:35+00:00 ITS#10455 memberof: drop unnecessary assert() - - - - - 7b40fa59 by Ondřej Kuzník at 2026-10-01T18:45:41+00:00 ITS#10455 back-ldap: correct sender's RFC4511 violations - - - - - c13c1e08 by Quanah Gibson-Mount at 2026-10-01T18:45:54+00:00 ITS#10455 - - - - - a20b57ed by Howard Chu at 2026-10-01T18:47:47+00:00 ITS#10587 libldap: fix ldap_parse_entrychange_control() BER buffer - - - - - 820fd554 by Quanah Gibson-Mount at 2026-10-01T18:48:18+00:00 ITS#10587 - - - - - 3b69ce14 by Howard Chu at 2026-10-01T18:48:56+00:00 ITS#10588: clients: truncate psearch output if DN is too long - - - - - c8ef5a1c by Quanah Gibson-Mount at 2026-10-01T18:49:20+00:00 ITS#10588 - - - - - a306f3f2 by Ondřej Kuzník at 2026-10-01T18:49:34+00:00 ITS#10596 Remove tainted connection from cache - - - - - f1266985 by Quanah Gibson-Mount at 2026-10-01T18:50:04+00:00 ITS#10596 - - - - - 3fe8963c by Dimitar Stoychev at 2026-10-01T18:51:36+00:00 ITS#10599 libldap: fix tls_o.c for old compilers Caused by code added in ITS#10149 - - - - - 1c89727d by Quanah Gibson-Mount at 2026-10-01T18:51:45+00:00 ITS#10599 - - - - - 0e943abd by Howard Chu at 2026-10-01T19:49:26+00:00 ITS#10585 slapd: check filter depth in str2filter() - - - - - 2fa560e7 by Quanah Gibson-Mount at 2026-10-01T19:50:41+00:00 ITS#10585 - - - - - 4f1a20f8 by Howard Chu at 2026-10-01T19:53:27+00:00 ITS#10586 libldap: more buffer checks for ldap_domain2hostlist_proto() - - - - - 68b58b0f by Quanah Gibson-Mount at 2026-10-01T19:54:31+00:00 ITS#10586 - - - - - 1c19a6fe by Howard Chu at 2026-10-01T20:07:04+00:00 ITS#10597 slapo-accesslog: don't store per-op info in global state Never belonged there. Also fix redundant nop checks. - - - - - b0a06f55 by Quanah Gibson-Mount at 2026-10-01T20:07:40+00:00 ITS#10597 - - - - - 15df24fb by Howard Chu at 2026-10-01T20:08:58+00:00 ITS#10595 ldap_sort_entries: check for invalid DN Note: this function has been deprecated for many years. - - - - - 15fcdf04 by Quanah Gibson-Mount at 2026-10-01T20:35:31+00:00 ITS#10595 - - - - - a3066912 by Ondřej Kuzník at 2026-10-01T20:37:06+00:00 ITS#10602 sssvlv: fix concurrent management of sort_ops - - - - - 1b864b2e by Quanah Gibson-Mount at 2026-10-01T20:37:14+00:00 ITS#10602 - - - - - 52cd7250 by Ondřej Kuzník at 2026-10-01T20:43:59+00:00 ITS#10606 libldap: Allow resetting a connection's OPT_DEFBASE - - - - - eaea612d by Quanah Gibson-Mount at 2026-10-01T20:44:22+00:00 ITS#10606 - - - - - 5a22bffd by Howard Chu at 2026-10-01T20:45:30+00:00 ITS#10609 slapo-remouteauth: fix delete of olcRemoteAuthDNAttribute - - - - - f4f8633a by Quanah Gibson-Mount at 2026-10-01T20:45:39+00:00 ITS#10609 - - - - - fff1cb26 by Howard Chu at 2026-10-01T20:47:27+00:00 ITS#10607 slapd-config: fix concurrency for mod/modrdn/del - - - - - f6c0a563 by Quanah Gibson-Mount at 2026-10-01T20:47:39+00:00 ITS#10607 - - - - - b2b1b65f by Howard Chu at 2026-10-01T22:48:56+00:00 ITS#10605 slapo-auditlog: tighten privs on logfile Should never have world access. Should not have group write access. - - - - - 0ca93d83 by Howard Chu at 2026-10-01T23:26:13+00:00 ITS#10608 slapd-mdb: purge all env keys when deleting DB from config - - - - - 31e21d01 by Howard Chu at 2026-10-01T23:26:18+00:00 ITS#10608 slapd-mdb: fix Bind error code on txn failure - - - - - 9696e8bc by Quanah Gibson-Mount at 2026-10-01T23:27:49+00:00 ITS#10608 - - - - - 021c94f7 by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: Do not try to log operation on startup when there is none - - - - - 7e85b722 by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: Plug config-time leaks - - - - - d79ea85f by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: Do not preempt idle-time check when no pwdLastSuccess - - - - - e6e57501 by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: Store a reference to member/groupOfNames - - - - - c3a30194 by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: Fix cn=config handling - - - - - b4596bd8 by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: Fix backend_group usage - - - - - d8a24ff7 by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: fix typo - - - - - 7cd31140 by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: fix parsing/cn=config conversion - - - - - 48397108 by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: Fix continue rule handling vs. default rules - - - - - 0dfd5fae by Ondřej Kuzník at 2026-10-01T23:33:13+00:00 ITS#10589 slapo-ppolicy: Also rehash on pwmod extop if appropriate - - - - - 4670d095 by Quanah Gibson-Mount at 2026-10-01T23:34:19+00:00 ITS#10589 - - - - - f57db068 by Howard Chu at 2026-10-01T23:37:10+00:00 ITS#10592 clients: check SSS response parsing - - - - - 252dffff by Quanah Gibson-Mount at 2026-10-01T23:37:28+00:00 ITS#10592 - - - - - c453078d by Howard Chu at 2026-10-01T23:38:20+00:00 ITS#10593 clients: check VLV response parsing - - - - - 05dd3106 by Quanah Gibson-Mount at 2026-10-01T23:38:28+00:00 ITS#10593 - - - - - 50ef9df0 by Ondřej Kuzník at 2026-10-01T23:39:06+00:00 ITS#10610 daemon: fix ldapi:// error handling - - - - - 7d2504d0 by Quanah Gibson-Mount at 2026-10-01T23:39:17+00:00 ITS#10610 - - - - - 95ee791d by Howard Chu at 2026-10-01T23:43:38+00:00 ITS#10594 libldap: honor specified timeout when chasing referrals - - - - - 491f7e20 by Quanah Gibson-Mount at 2026-10-01T23:45:46+00:00 ITS#10594 - - - - - ad250578 by Howard Chu at 2026-10-01T23:49:45+00:00 ITS#10600 libldap: extend rebind referral queue Keep track of which request is associated with a queued referral - - - - - b6fab0ef by Quanah Gibson-Mount at 2026-10-01T23:49:52+00:00 ITS#10600 - - - - - a14d4648 by OpenLDAP MSVC at 2026-10-01T23:50:35+00:00 ITS#10573 build: skip symbol version maps on Windows - - - - - af720eef by Quanah Gibson-Mount at 2026-10-01T23:50:55+00:00 ITS#10573 - - - - - 599943eb by Howard Chu at 2026-10-01T23:53:05+00:00 ITS#10590 slapo-sssvlv: refix control parsing Broken by ITS#10564. Check number of bytes actually consumed matches what we expected. - - - - - 2b158e0b by Quanah Gibson-Mount at 2026-10-01T23:53:32+00:00 ITS#10590 - - - - - b6894cad by Howard Chu at 2026-10-01T23:55:07+00:00 ITS#8884 slapo-rwm: don't strip entryDN in rwm_operational() It only needs to be stripped if it occurs in the main entry. In rs_operational it needs to be mapped, not stripped. - - - - - 0fd66887 by Quanah Gibson-Mount at 2026-10-01T23:55:50+00:00 ITS#8884 - - - - - 33 changed files: - CHANGES - clients/tools/common.c - doc/man/man5/slapo-ppolicy.5 - include/lutil.h - include/openldap.h - libraries/liblber/Makefile.in - libraries/libldap/Makefile.in - libraries/libldap/dnssrv.c - libraries/libldap/filter.c - libraries/libldap/ldap-int.h - libraries/libldap/ldap.map.in - libraries/libldap/open.c - libraries/libldap/options.c - libraries/libldap/psearchctrl.c - libraries/libldap/request.c - libraries/libldap/result.c - libraries/libldap/sort.c - libraries/libldap/tls_o.c - libraries/liblutil/utils.c - servers/slapd/back-ldap/bind.c - servers/slapd/back-ldap/search.c - servers/slapd/back-mdb/bind.c - servers/slapd/back-mdb/init.c - servers/slapd/bconfig.c - servers/slapd/daemon.c - servers/slapd/overlays/accesslog.c - servers/slapd/overlays/auditlog.c - servers/slapd/overlays/memberof.c - servers/slapd/overlays/ppolicy.c - servers/slapd/overlays/remoteauth.c - servers/slapd/overlays/rwmmain.c - servers/slapd/overlays/sssvlv.c - servers/slapd/str2filter.c View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/6c3e78b6d3b4e4d203ca4f… -- View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/6c3e78b6d3b4e4d203ca4f… You're receiving this email because of your account on git.openldap.org. Manage all notifications: https://git.openldap.org/-/profile/notifications | Help: https://git.openldap.org/help

1 0

[Git][openldap/openldap][OPENLDAP_REL_ENG_2_6] 33 commits: ITS#10587 libldap: fix ldap_parse_entrychange_control() BER buffer
by Quanah Gibson-Mount (＠quanah) 01 Oct '26

01 Oct '26

Quanah Gibson-Mount pushed to branch OPENLDAP_REL_ENG_2_6 at openldap / OpenLDAP Commits: e7e78ef1 by Howard Chu at 2026-10-01T18:48:31+00:00 ITS#10587 libldap: fix ldap_parse_entrychange_control() BER buffer - - - - - 45439cd6 by Quanah Gibson-Mount at 2026-10-01T18:48:43+00:00 ITS#10587 - - - - - 05734071 by Howard Chu at 2026-10-01T18:49:04+00:00 ITS#10588: clients: truncate psearch output if DN is too long - - - - - 8edf94e7 by Quanah Gibson-Mount at 2026-10-01T18:49:12+00:00 ITS#10588 - - - - - e149e1fc by Ondřej Kuzník at 2026-10-01T18:50:17+00:00 ITS#10596 Remove tainted connection from cache - - - - - ed2d2714 by Quanah Gibson-Mount at 2026-10-01T18:50:23+00:00 ITS#10596 - - - - - 8a53dd59 by Howard Chu at 2026-10-01T19:53:47+00:00 ITS#10586 libldap: more buffer checks for ldap_domain2hostlist_proto() - - - - - 51184a60 by Quanah Gibson-Mount at 2026-10-01T19:54:45+00:00 ITS#10586 - - - - - c0b77e08 by Howard Chu at 2026-10-01T20:07:46+00:00 ITS#10597 slapo-accesslog: don't store per-op info in global state Never belonged there. Also fix redundant nop checks. - - - - - e3d53fbc by Quanah Gibson-Mount at 2026-10-01T20:07:56+00:00 ITS#10597 - - - - - a8c7de51 by Howard Chu at 2026-10-01T20:35:38+00:00 ITS#10595 ldap_sort_entries: check for invalid DN Note: this function has been deprecated for many years. - - - - - f6e1445a by Quanah Gibson-Mount at 2026-10-01T20:35:44+00:00 ITS#10595 - - - - - dee50426 by Ondřej Kuzník at 2026-10-01T20:42:12+00:00 ITS#10602 sssvlv: fix concurrent management of sort_ops - - - - - 06d137b7 by Quanah Gibson-Mount at 2026-10-01T20:42:30+00:00 ITS#10602 - - - - - a9ac56c6 by Ondřej Kuzník at 2026-10-01T20:44:08+00:00 ITS#10606 libldap: Allow resetting a connection's OPT_DEFBASE - - - - - 5cafcb68 by Quanah Gibson-Mount at 2026-10-01T20:44:14+00:00 ITS#10606 - - - - - 42925585 by Howard Chu at 2026-10-01T20:45:44+00:00 ITS#10609 slapo-remouteauth: fix delete of olcRemoteAuthDNAttribute - - - - - e15cd113 by Quanah Gibson-Mount at 2026-10-01T20:45:50+00:00 ITS#10609 - - - - - 4cdb8f68 by Howard Chu at 2026-10-01T20:47:55+00:00 ITS#10607 slapd-config: fix concurrency for mod/modrdn/del - - - - - 549c39ce by Quanah Gibson-Mount at 2026-10-01T20:48:06+00:00 ITS#10607 - - - - - 7d6c9f86 by Howard Chu at 2026-10-01T23:27:55+00:00 ITS#10608 slapd-mdb: purge all env keys when deleting DB from config - - - - - defe4718 by Howard Chu at 2026-10-01T23:27:57+00:00 ITS#10608 slapd-mdb: fix Bind error code on txn failure - - - - - c20bf5e5 by Quanah Gibson-Mount at 2026-10-01T23:28:05+00:00 ITS#10608 - - - - - d9c1ce43 by Howard Chu at 2026-10-01T23:37:36+00:00 ITS#10592 clients: check SSS response parsing - - - - - 8316ea2b by Quanah Gibson-Mount at 2026-10-01T23:37:47+00:00 ITS#10592 - - - - - f9c6874f by Howard Chu at 2026-10-01T23:38:12+00:00 ITS#10593 clients: check VLV response parsing - - - - - 7c945a3f by Quanah Gibson-Mount at 2026-10-01T23:40:06+00:00 ITS#10593 - - - - - 557141bc by Ondřej Kuzník at 2026-10-01T23:40:13+00:00 ITS#10610 daemon: fix ldapi:// error handling - - - - - 4ea1e038 by Quanah Gibson-Mount at 2026-10-01T23:40:20+00:00 ITS#10610 - - - - - c21ddf10 by Howard Chu at 2026-10-01T23:49:59+00:00 ITS#10600 libldap: extend rebind referral queue Keep track of which request is associated with a queued referral - - - - - b08a6268 by Quanah Gibson-Mount at 2026-10-01T23:50:08+00:00 ITS#10600 - - - - - 46562ac5 by Howard Chu at 2026-10-01T23:54:02+00:00 ITS#10590 slapo-sssvlv: refix control parsing Broken by ITS#10564. Check number of bytes actually consumed matches what we expected. - - - - - 23402b82 by Quanah Gibson-Mount at 2026-10-01T23:54:19+00:00 ITS#10590 - - - - - 18 changed files: - CHANGES - clients/tools/common.c - include/lutil.h - libraries/libldap/dnssrv.c - libraries/libldap/ldap-int.h - libraries/libldap/options.c - libraries/libldap/psearchctrl.c - libraries/libldap/request.c - libraries/libldap/sort.c - libraries/liblutil/utils.c - servers/slapd/back-ldap/bind.c - servers/slapd/back-mdb/bind.c - servers/slapd/back-mdb/init.c - servers/slapd/bconfig.c - servers/slapd/daemon.c - servers/slapd/overlays/accesslog.c - servers/slapd/overlays/remoteauth.c - servers/slapd/overlays/sssvlv.c View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/c09cfdc59a535481e26bfb… -- View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/c09cfdc59a535481e26bfb… You're receiving this email because of your account on git.openldap.org. Manage all notifications: https://git.openldap.org/-/profile/notifications | Help: https://git.openldap.org/help

1 0

[Git][openldap/openldap][master] ITS#8884 slapo-rwm: don't strip entryDN in rwm_operational()
by Howard Chu (＠hyc) 01 Oct '26

01 Oct '26

Howard Chu pushed to branch master at openldap / OpenLDAP Commits: 2b8cbe0a by Howard Chu at 2026-10-01T17:27:59+01:00 ITS#8884 slapo-rwm: don't strip entryDN in rwm_operational() It only needs to be stripped if it occurs in the main entry. In rs_operational it needs to be mapped, not stripped. - - - - - 1 changed file: - servers/slapd/overlays/rwmmain.c View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/2b8cbe0aace6d7eea7a8b93… -- View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/2b8cbe0aace6d7eea7a8b93… You're receiving this email because of your account on git.openldap.org. Manage all notifications: https://git.openldap.org/-/profile/notifications | Help: https://git.openldap.org/help

1 0

[Git][openldap/openldap][master] ITS#10590 slapo-sssvlv: cleanup prev commit
by Howard Chu (＠hyc) 01 Oct '26

01 Oct '26

Howard Chu pushed to branch master at openldap / OpenLDAP Commits: 29de0119 by Howard Chu at 2026-10-01T16:46:25+01:00 ITS#10590 slapo-sssvlv: cleanup prev commit - - - - - 1 changed file: - servers/slapd/overlays/sssvlv.c View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/29de0119f9c7f05cc8aa9f3… -- View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/29de0119f9c7f05cc8aa9f3… You're receiving this email because of your account on git.openldap.org. Manage all notifications: https://git.openldap.org/-/profile/notifications | Help: https://git.openldap.org/help

1 0

[Git][openldap/openldap][master] ITS#10590 slapo-sssvlv: simplify prev commit
by Howard Chu (＠hyc) 01 Oct '26

01 Oct '26

Howard Chu pushed to branch master at openldap / OpenLDAP Commits: 3cf5f5e3 by Howard Chu at 2026-10-01T16:39:44+01:00 ITS#10590 slapo-sssvlv: simplify prev commit - - - - - 1 changed file: - servers/slapd/overlays/sssvlv.c View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/3cf5f5e3ed2904c8581cf75… -- View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/3cf5f5e3ed2904c8581cf75… You're receiving this email because of your account on git.openldap.org. Manage all notifications: https://git.openldap.org/-/profile/notifications | Help: https://git.openldap.org/help

1 0

[Git][openldap/openldap][master] ITS#10590 slapo-sssvlv: refix control parsing
by Howard Chu (＠hyc) 01 Oct '26

01 Oct '26

Howard Chu pushed to branch master at openldap / OpenLDAP Commits: 8a2a486d by Howard Chu at 2026-10-01T16:28:23+01:00 ITS#10590 slapo-sssvlv: refix control parsing Broken by ITS#10564. Check number of bytes actually consumed matches what we expected. - - - - - 1 changed file: - servers/slapd/overlays/sssvlv.c View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/8a2a486d7034287f0c78abb… -- View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/8a2a486d7034287f0c78abb… You're receiving this email because of your account on git.openldap.org. Manage all notifications: https://git.openldap.org/-/profile/notifications | Help: https://git.openldap.org/help

1 0

[Git][openldap/openldap][master] ITS#10573 build: skip symbol version maps on Windows
by Howard Chu (＠hyc) 01 Oct '26

01 Oct '26

Howard Chu pushed to branch master at openldap / OpenLDAP Commits: 83989665 by OpenLDAP MSVC at 2026-10-01T15:17:19+01:00 ITS#10573 build: skip symbol version maps on Windows - - - - - 2 changed files: - libraries/liblber/Makefile.in - libraries/libldap/Makefile.in View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/83989665a4c5512db5f2ccd… -- View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/83989665a4c5512db5f2ccd… You're receiving this email because of your account on git.openldap.org. Manage all notifications: https://git.openldap.org/-/profile/notifications | Help: https://git.openldap.org/help

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-commit October 2026