Howard Chu pushed to branch master at openldap / OpenLDAP
Commits:
a323284c by Howard Chu at 2024-07-04T18:35:45+01:00
ITS#10237 back-ldap: fix usage of multi-precision add for op counters
- - - - -
8 changed files:
- servers/slapd/back-ldap/add.c
- servers/slapd/back-ldap/bind.c
- servers/slapd/back-ldap/compare.c
- servers/slapd/back-ldap/delete.c
- servers/slapd/back-ldap/extended.c
- servers/slapd/back-ldap/modify.c
- servers/slapd/back-ldap/modrdn.c
- servers/slapd/back-ldap/search.c
View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/a323284c0671240e46fbe9d…
--
View it on GitLab: https://git.openldap.org/openldap/openldap/-/commit/a323284c0671240e46fbe9d…
You're receiving this email because of your account on git.openldap.org.
Quanah Gibson-Mount pushed to branch OPENLDAP_REL_ENG_2_5 at openldap / OpenLDAP
Commits:
248d7402 by Howard Chu at 2024-06-28T16:50:47+00:00
ITS#10223 libldap: check for OpenSSL SSL_CTX_set_ciphersuites failure
- - - - -
07dc2133 by Quanah Gibson-Mount at 2024-06-28T16:52:07+00:00
ITS#10223
- - - - -
bee6e76c by Howard Chu at 2024-06-28T16:52:18+00:00
ITS#10224 libldap: check for OpenSSL EVP_Digest* failure
- - - - -
979eed81 by Quanah Gibson-Mount at 2024-06-28T16:52:36+00:00
ITS#10224
- - - - -
08a78a02 by François Kooman at 2024-06-28T16:52:53+00:00
ITS#9827 update Argon2 defaults
- switch to argon2id by default (from argon2i)
- use OWASP recommended parameters as defaults
This only affects builds that use libargon2, e.g. Debian, and
not builds that use libsodium as argon2id is already the
default there, and better parameters are used
References: https://bugs.openldap.org/show_bug.cgi?id=9827
Signed-off-by: François Kooman <fkooman(a)tuxed.net>
- - - - -
412d897c by Quanah Gibson-Mount at 2024-06-28T16:53:05+00:00
ITS#9827 - Use 7MB memory/5 iterations as default
This has the same protections as 19MB/2 iterations, but requires less system memory
- - - - -
a85ed561 by Quanah Gibson-Mount at 2024-06-28T16:53:20+00:00
ITS#9827
- - - - -
230bd39c by Nadezhda Ivanova at 2024-06-28T16:58:05+00:00
ITS#10219 Modify of olcDisabled by removing and adding a value invokes db_open twice
Do not invoke db_open if the database is not actually disabled
- - - - -
910c2be2 by Quanah Gibson-Mount at 2024-06-28T16:58:36+00:00
ITS#10219
- - - - -
5baa8723 by Nadezhda Ivanova at 2024-06-28T16:59:11+00:00
ITS#10227 Asyncmeta will not reset a connection if a bind operation fails with LDAP_OTHER, leaving the connection in invalid state
- - - - -
66117ce8 by Quanah Gibson-Mount at 2024-06-28T17:02:41+00:00
ITS#10227
- - - - -
12d105b1 by Howard Chu at 2024-06-28T17:02:46+00:00
ITS#10231 slapadd: check for NULL suffix in error message
- - - - -
d161fa7f by Quanah Gibson-Mount at 2024-06-28T17:02:52+00:00
ITS#10231
- - - - -
6 changed files:
- CHANGES
- libraries/libldap/tls_o.c
- servers/slapd/back-asyncmeta/bind.c
- servers/slapd/bconfig.c
- servers/slapd/pwmods/argon2.c
- servers/slapd/slapadd.c
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/9f48f3f3b618f484447217…
--
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/9f48f3f3b618f484447217…
You're receiving this email because of your account on git.openldap.org.
Quanah Gibson-Mount pushed to branch OPENLDAP_REL_ENG_2_6 at openldap / OpenLDAP
Commits:
a45e1fc4 by Howard Chu at 2024-06-28T16:46:13+00:00
ITS#10223 libldap: check for OpenSSL SSL_CTX_set_ciphersuites failure
- - - - -
0e7dbc99 by Quanah Gibson-Mount at 2024-06-28T16:47:27+00:00
ITS#10223
- - - - -
1d556f23 by Howard Chu at 2024-06-28T16:47:32+00:00
ITS#10224 libldap: check for OpenSSL EVP_Digest* failure
- - - - -
9d07c21d by Quanah Gibson-Mount at 2024-06-28T16:47:55+00:00
ITS#10224
- - - - -
d13a07bf by François Kooman at 2024-06-28T16:48:57+00:00
ITS#9827 update Argon2 defaults
- switch to argon2id by default (from argon2i)
- use OWASP recommended parameters as defaults
This only affects builds that use libargon2, e.g. Debian, and
not builds that use libsodium as argon2id is already the
default there, and better parameters are used
References: https://bugs.openldap.org/show_bug.cgi?id=9827
Signed-off-by: François Kooman <fkooman(a)tuxed.net>
- - - - -
3516e19b by Quanah Gibson-Mount at 2024-06-28T16:49:04+00:00
ITS#9827 - Use 7MB memory/5 iterations as default
This has the same protections as 19MB/2 iterations, but requires less system memory
- - - - -
d0d0470f by Quanah Gibson-Mount at 2024-06-28T16:50:21+00:00
ITS#9827
- - - - -
dc358cbc by Nadezhda Ivanova at 2024-06-28T16:56:38+00:00
ITS#10218 Disabling and re-enabling an asyncmeta database via cn=config leaks memory
Make sure asyncmeta frees the pending operations structures, resets all connections, frees connection structures and stops the timeout-loop.
- - - - -
8f05e9ed by Quanah Gibson-Mount at 2024-06-28T16:57:22+00:00
ITS#10218
- - - - -
532b2e60 by Nadezhda Ivanova at 2024-06-28T16:58:12+00:00
ITS#10219 Modify of olcDisabled by removing and adding a value invokes db_open twice
Do not invoke db_open if the database is not actually disabled
- - - - -
f30d23a9 by Quanah Gibson-Mount at 2024-06-28T16:58:22+00:00
ITS#10219
- - - - -
1ea9880a by Nadezhda Ivanova at 2024-06-28T16:59:06+00:00
ITS#10227 Asyncmeta will not reset a connection if a bind operation fails with LDAP_OTHER, leaving the connection in invalid state
- - - - -
c8e2fbf3 by Quanah Gibson-Mount at 2024-06-28T17:00:39+00:00
ITS#10227
- - - - -
5cd67e37 by Quanah Gibson-Mount at 2024-06-28T17:01:22+00:00
ITS#10230
- - - - -
8350e24c by Howard Chu at 2024-06-28T17:01:55+00:00
ITS#10231 slapadd: check for NULL suffix in error message
- - - - -
9937d5b9 by Quanah Gibson-Mount at 2024-06-28T17:02:02+00:00
ITS#10231
- - - - -
74f0e83e by Howard Chu at 2024-06-28T17:03:29+00:00
ITS#10235 slapo-nestgroup: silence extraneous register_at message
- - - - -
743ece89 by Quanah Gibson-Mount at 2024-06-28T17:03:55+00:00
ITS#10235
- - - - -
10 changed files:
- CHANGES
- libraries/libldap/tls_o.c
- servers/slapd/back-asyncmeta/back-asyncmeta.h
- servers/slapd/back-asyncmeta/bind.c
- servers/slapd/back-asyncmeta/init.c
- servers/slapd/back-asyncmeta/meta_result.c
- servers/slapd/bconfig.c
- servers/slapd/overlays/nestgroup.c
- servers/slapd/pwmods/argon2.c
- servers/slapd/slapadd.c
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/d24499a93aede6b22e440a…
--
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/d24499a93aede6b22e440a…
You're receiving this email because of your account on git.openldap.org.
Quanah Gibson-Mount pushed to branch mdb.RE/0.9 at openldap / OpenLDAP
Commits:
b84c3505 by Zach Vonler at 2024-06-28T14:55:01+00:00
ITS#10222 LMDB: Updated mdb_dump man page
The -a option to mdb_load makes the previous text obsolete.
- - - - -
c6a49d79 by Howard Chu at 2024-06-28T14:55:06+00:00
LMDB: tweak mdb_load.1 manpage
Add missing -a option to Synopsis
- - - - -
f6d015dd by Quanah Gibson-Mount at 2024-06-28T15:55:18+00:00
ITS#10222
- - - - -
3 changed files:
- libraries/liblmdb/CHANGES
- libraries/liblmdb/mdb_dump.1
- libraries/liblmdb/mdb_load.1
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/54f00bd01f37e252cf01c6…
--
View it on GitLab: https://git.openldap.org/openldap/openldap/-/compare/54f00bd01f37e252cf01c6…
You're receiving this email because of your account on git.openldap.org.