GitLab

at 2020-03-20T19:08:22+00:00

ITS#7074 - change olcDatabaseDummy initialization for windows

ITS#8675 - Fix tools to not continue on TLS error

The spec says that upon StartTLS 'success', both TLS communications is
established on the octet following the Start TLS response (and the
request)... and that once one starts TLS communications, one can never
go back to LDAP without TLS. So if there's a TLS failure (whether as
part of TLS nego or later), LDAP communications cannot be continued
(without TLS).

Only ignoring LDAP errors (rc > 0) ensures that if TLS negotiation
fails, we don't attempt to send LDAP operations without TLS.

thr_posix.c: fix implicit function declaration for 'pthread_setconcurrency'

thr_posix.c: In function 'ldap_pvt_thread_set_concurrency':
thr_posix.c:96:9: error: implicit declaration of function 'pthread_setconcurrency'
  return pthread_setconcurrency( n );
         ^~~~~~~~~~~~~~~~~~~~~~
         pthread_setcanceltype

Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>

ITS#8837 Fix pw-pbkdf2 manpage name to get it installed

ITS#9003

Note that with slapd-ldap, the special character "*" actually allows anonymous rather than denies, as is the case with authz-policy

ITS#8628 - contrib/passwd/pbkdf2: new Makefile variables SSL_LIB & SSL_INC

ITS#9086 Add debug logging for more GnuTLS errors

ITS#6035 saslauthz cleanups (no functional change)

- give authid-rewrite's argument a name
- tidy saslauthz.c whitespace (mixed spaces/tabs)
- always declare slap_sasl_regexp_destroy: fixes an implicit declaration
  warning when configured without librewrite
- delete dead code: ENABLE_REWRITE implies SLAP_AUTH_REWRITE, so this
  code is never compiled
- make slap_sasl_regexp_rewrite_config static
- omit sasl_regexp unused fields when built with librewrite

ITS#6035 olcAuthzRegexp insert/delete support

ITS#6035 olcAuthIDRewrite insert/delete support

ITS#6035 Create test script

ITS#6035 - regenerate configure

Merge remote-tracking branch 'origin/master' into OPENLDAP_REL_ENG_2_5

ITS#9194 - regenerate configure

Quanah Gibson-Mount pushed to branch OPENLDAP_REL_ENG_2_5 at openldap / OpenLDAP

Commits:

19 changed files: