A ref change was pushed to the OpenLDAP (openldap.git) repository. It will be available in the public mirror shortly.

The annotated tag, OPENLDAP_RELEASE has been updated to ece3c2b547a54efa53fc5aba06edd60eebe80a16 (tag) from 2e4cb1b157008993e42fc17c9ea71bd230e5341a (which is now obsolete) tagging 65a49595f563573f91da936ea27f5eaf6b21a48d (commit) replaces OPENLDAP_REL_ENG_2_4_26 tagged by Kurt Zeilenga on Wed Nov 23 21:51:45 2011 -0800

- Log ----------------------------------------------------------------- Latest Release

David Adam (1): ITS#7082 Fix smbk5pwd:olcSmbK5PwdEnable

Francis Swasey (1): ITS#7023 document TLSCACertificateFile in the man page as it is in the Admin Guide

Hallvard B Furuseth (19): .gitignore Makefile DPRINTF(): Fix format, handle non-gcc, simplify. Fix memncmp(): Do not memcmp twice Compact memnrcmp, just for fun Fix formats, reduce PAGEHDRSZ size_t->unsigned. Fix P_INVALID signedness Warning cleanup: Drop unneeded 'unsigned >= 0' Warning cleanup: if(rc = mdb_<func>()) & co Warning cleanup: printf(%p, struct*) Warning cleanup: Make parent index unsigned Drop unused vars #define _XOPEN_SOURCE for random() Private: make.sh Drop gcc extension ,##__VA_ARGS__. Add DPUTS(). Macro cleanup: Parenthesize, simplify, remove a ; Simplify: Replace IDL*_CMP() with CMP() Wrap O_DSYNC in MDB_DSYNC. Avoid cast-away-const for errstr[]

Hallvard Furuseth (42): libmdb/.gitignore += test[45], Doxygen output Cleanup mdb macros. C90 compatibility cleanup in mdb. Put MDB_node.<mn_lo,mn_hi> in host byte order. Check some mdb integer type assumptions Fix memn(r)cmp of key sizes > INT_MAX. Simplify. explain mdl_midl_sort() istack size mdb type cleanup: Consistent reader count types. Add mdb.c:txnid_t for readability. Drop ULONG in favor of size_t. mdb integer type cleanup: Use MDB_dbi consistently. Restore missing LAZY_LOCKS semicolon. Fix mdb debug formats libmdb IDL cleanup. tests: Add $MAINDB, $INDEXDB for [bhn]db tests. tests/data/: #bdb,hdb# -> #maindb/indexdb#. Cleanup ISO C compatibility for recent commits back-bdb/back-mdb IDL cleanup. ITS#6763,7053 Cleanup after sending entry/searchref. ITS#6437, slap_sl_mem_create(): ITS#6437 cleanup (noop change): Compute pad,order_start at compile time ITS#6437 cleanup (noop change): Simplify slap_sl_free() code reclaiming space ITS#6437: Fix alignment after slap_sl_realloc(). ITS#6437, fixes for stack implementation of slap_sl_realloc(): ITS#6437 cleanup (noop change): ITS#6437, slap_sl_calloc(): Add comments ITS#6437, follow up previous fixes: ITS#6437 cleanup (noop patch): Join SLAP_NO_SL_MALLOC code with identical ITS#6437, save space: Do not allocate the tail, except if size==0. ITS#6437, move structs slab_object and slab_heap from slap.h to sl_malloc.c ITS#6437: Fix pool version misalignment: It aligned heads, not returned blocks back-mdb/Makefile.in += variable MDB_SUBDIR. Tweak back-mdb integer types to match libmdb. More libmdb vs back-mdb C type tweaks. Cleanup ISO C compatibility for recent commits back-bdb/back-mdb IDL cleanup. Exclude .git* files from releases Tweak CHANGES wordings .gitignore -= Makefile in libmdb,slapd-modules/*/* make alltests += back-ldif tests Fix uninitialized variable in ldapmodify.

Howard Chu (338): Checkpoint Use header when some fields are unspecified Use NOSYNC flag Return statistics for a DB Fix splits, cursor navigation, newpage flags Cursor testing Fix P_INVALID def Add locking support Use shmat for lock region instead of mmap Use toggling meta page instead of always appending Log txnID in msgs meta init Save a byte in nodesz More cursor tests, fail... Drop header page Re-use old pages More fixes for seeking Fix db_stat stuff No longer need -lssl Use an environment directory Tweak comment about overflow allocations More prep for subdatabases Replace ulong with ULONG macro Start DB restructuring More subDBs, compiles now Tweaks to txn handling Fixup metapage writes Fix free page re-use Tweak mt_dbxs array More subdb stuff, add cursor_last() Use STAILQ instead of SIMPLEQ More sub-db stuff Save free-list in DB Additional debug, fixes Add some legalese Use BDB cursor terminology Add cursor_prev Add explicit md_dirty flag to dbxs Setup context for sorted dups Don't malloc the free_pgs list every time Fix reader txn locking Add mdb_put for sorted dups Add mdb_del for sorted dups Add mdb_get for sorted dups Added cursor_get for sorted dups Sorted dups basically completed, needs testing Make sure subDB info is saved after writes More subDB stuff Valgrind complaints Parameter cleanup More subDB fixes Header cleanup Consolidate stat functions More DB checks Cleanup, add mdb_cursor_count() Allow setting DB flags on main DB Add MDB_INTEGERKEY db flag Sorted dup fixes Start using as a library Make a shared library too Portability tweak Add mtest2 and 3 Add another FIXME comment Rename idl to midl Tweak MDB_val to match struct berval Move MDB_VERSION to mdb.h, use major/minor/patch Rationalize mdbenv namespace Add mdb_version() Silence stupid warning Better defs for locker structures Minor cleanup Use O_DSYNC on metafd. Use IDL2 for dirty page list Get rid of AC_MEMCPY Error cleanup Protect err codes allow silent commit of read-only TXNs Add mdb_strerror(), mdb_env_set_flags() Update DB tables on commit even if no dirty pages More txn/cursor cleanup Fix dupsort fetch Sub-DB init/dirty fixes Fix overflow page read Fix multi-page commits Don't alloc in cursor_push/pop Sorted dups fix Fix cursor_set for dups Keep re-using dpages instead of freeing them Set MINKEYS to 2 First cut at DUPFIXED support Add txn_reset / txn_renew More debug output More debug, fix MDB_DEL_DUP Fix free page reclaim and dbs table update Fix update of big data items Fix mdb_split, tweak split_indx if space is tight Reduce excessive memcpy in mdb_split Tweak locks, fix race conditions Cleanup, fix freelist alloc API cleanup, doxygen docs for public API Ugly-as-sin initial Windows port Tweak docs Cleanup midl, start documenting internals Fix mdb_split, fix MDB_GET_BOTH Add MDB_{FIRST,LAST}_DUP for cursor_get Begin reimplementing basic ops as cursor ops Use cursor->mc_flags Cursors in-progress, broken Cursor stuff working, no major perf gain mdb_cmp refactoring Use mdb_midl_append/sort instead of _insert Minor cleanup Fix for mdb_cmp refactoring Change MDB_node to depend on 2-byte alignment More for #6561 - delete returns NO_SUCH_ATTRIBUTE, not TYPE_OR_VALUE_EXISTS Setup delta-mmr using an overlay More for conflict detection delta-mmr conflict resolution More tweaks for delta-mmr Fix missing si_syncCookie numcsns More fixes, add test script ITS#7029 fix uninit'd nvalue ITS#7029,#7031 More for prev commit For test063 Guarantee nodes are 2-byte aligned Fix search_node, add cintcmp ITS#6982 fix md5 memset invocation ITS#6985 fix sssvlv target offset, ordering match Only return requested attrs in sssvlv response Fix mdb_move_node again Cleanup unused code Further cursor-based restructuring Forgot to commit this Forgot to commit this Merge branch 'mdb.cursor' into mdb.master Fix previous commit Speedup cintcmp More docs More docs Partial revert, fix MDB_page definition Minor typos, additional clarification If put(NOOVERWRITE) exists, return existing data Fix 2e3bc39fa94f21d692d8e94183f57aef9122c487 Merge branch 'mdb.master' of ssh://git-master.openldap.org/~git/git/openldap into mdb.master One more sub-cursor fix More cursor_init cleanup Minor tweaks, update relfunc behavior cursor_set/search_node tweaks, use intcmp when possible Tweak search_node inner loop to avoid LEAF2 checks Namespace cleanup More docs Minor doc cleanup Add MacOSX support MacOSX semaphore names are limited to 31 chars Doc tweak - txn flags Use FNV-1A hash to generate unique mutex names New sorted-dup subpage support API change, consistency check Add mdb_drop() for deleting a DB Fix typo, minor cleanup Fix mdb_drop() if not deleting the DB record Fix 09006ccec7928c9cf53bca6abe741e8d4d466c98 Fix last delete from a subpage Make sure 2 subpages fit in one real page Additional fix for prev commit Add support for nested transactions. Track changes to all cursors. Only free malloc'd cursors txn_abort/commit free all their cursors now. assert cleanup Reader table notes Add MDB_NOSUBDIR option Doc for the MDB_NOSUBDIR env option Make sure mdb_open actually got a sub-db record Tweak cursor adjustment code Add MDB_RESERVE mode Add mdb_cursor_txn() and mdb_cursor_dbi() for querying the cursor Fix 6e05ca17e988754ae90fde1921765ba130bb90b2 Add MDB_APPEND to avoid splitting full pages Add rudimentary MDB_MULTIPLE support for puts Fix freelist bug on page split Don't use Append mode when splits are caused by sub-page inserts ITS#7003 fix typo ITS#7000 fix bad patch in ITS#6472 ITS#6999 fix syncrepl timeout in refreshAndPersist More for ITS#6892 Revert "More for ITS#6892" hack for #6982 - keep o_abandon set in op_free For #6982 fix a66fb16 Fix subcursor initialization Don't replicate refint repair ops Fix page_split with MDB_RESERVE Android/ARM portability More abandon paranoia ITS#7022 cleanup prev commit ITS#6983 fix duplicate entry in HDB subtree IDL ITS#7030 fix overlay_insert() with specific index Fix moduleload path Relax entry_header, zero-length entries are valid. ITS#7035 don't loop forever in wait4msg Add NOEXIT envvar to run all tests and tally failures Also track skipped (non-executable) tests Fix log parsing, broken by 8d74f71 Add a few NULL checks to defend against dumb API checkers. deltasync test tweaks Support single parameter substitution in filter ITS#7052 syncrepl deletes need a non-empty CSN ITS#7051 fix GNUtls cert dn parse ITS#7037 fix syncrepl_add_glue for empty suffix ITS#7037 restart consumer on Persist errors ITS#7040 don't complain about other server's CSNs ITS#7006 fix MozNSS wildcard cert match Fix UTF8StringNormalize overrun on zero-length string ITS#7059 replace previous patch This ought to have been here a long time ago slaptest checks a configuration, not necessarily slapd.conf ITS#7061 only return requested attrs in sssvlv response ITS#7065 fix cn=config modify replace/delete crash ITS#7071 check for socket() in -lnet Syntaxes must come before attributetypes in schema object ITS#7063 add auto-converted LDIFs for missing schema ITS#6972 fix double-free in autogroup Fix NO_THREADS typo Add Valgrind mempool support. Use a thread for LDIF parsing in slapadd -q Additional change for prev commit Additional tweaks for double-threaded slapadd Android defines wctomb but doesn't provide it Define S_IWRITE if needed ITS#7062 call response callbacks even if connection was dropped ITS#7060 fix str2result return code parsing ITS#6981 don't flush entries until after cleanup callbacks Revert "ITS#6981 don't flush entries until after cleanup callbacks" ITS#6981 don't free entries prematurely Revert "ITS#6981 don't free entries prematurely" ITS#6981 pcache: don't reference rs->sr_entry in op_cleanup ITS#7081 fix prev commit LIBSLAPITOOLS is obsolete since tools subdir is long gone ITS#3272 link against libslapi.la ITS#6826 from Devin J. Pohly Use lutil_passwd_string64 instead of pw_string64 Export pw_string64 as lutil_passwd_string64 Replace pw_string64 with lutil_passwd_string64 Add APR1 to Makefile/README. Add {BSDMD5} mechanism. Drop unneeded scheme param Add CVS ID Add overlay wrapper, use for triggers etc. More for overlay use, add connid extension Add response message for overlays As an overlay, always return SLAP_CB_CONTINUE Just use back-sock OID arc for overlay Add overlay config stuff, handle overlay responses Overlay result is in rs->sr_err ITS#6848 Add -w option to wait for DB startup before parent exits More for #6848 - drop -w option, just make it default behavior Import back-mdb Fix conversion of IDL to range Cursor updates Fix from key_change consolidation Debug helper for index Use AD-indexes More search optimizations Fix 6c8e4f2 for empty suffixes More error msgs Fix 6c8e4f2671b6aed41cd5098725048dbe2513612c Drop referral.c Use tmpmem-based entries Keep cursor open for id2entry Fix bogus error codes Fix out-of-order slapadd Fix - slapcat doesn't set op->o_hdr for tmpmemctx Just use memcpy since we know it's non-overlapping mdb_db_close() should not force env_sync in quick mode Tentative speedup - use plain ints for entry_encode/decode More search optimization Fix onelevel search from last commit Fix entry_alloc with no attrs New mdb_close() signature Support index truncation Fix prev commit Updated for mdb_txn_begin API change. Use MDB_RESERVE for id2entry_put Use IDL caching in tool/quick mode Use MDB_APPEND mode where possible Tweak tool IDL cache, use MDB_MULTIPLE Turn off tool IDL caching Keep some dn2i/id2e cursors open longer More for cursor reuse Only use tool IDL cache when multithreaded Minor tweaks before ITS#7079 Note use as an overlay More sock overlay stuff Result as overlay is always ignored Add overlay config stuff, handle overlay responses Fix typo Add AttributeDescription counter More for prev commit - none of this is necessary if no_detach is true ITS#6405 in ldap_pvt_gettime, also check for microsecs going backward More for ITS#5326 - don't free ora_e->e_name if same as o_req_dn Tests updates for mdb More for cn=config support Print loop counter on failure Fix Quickmode crash ITS#7019 fix dsa-specific attr check for Persist updates ITS#7083 fix verb_to_mask usage Fix mdb_drop return Add Solaris byte-order detection Fix u_intX -> uintX Add dummy DKEY define More pgno alignment tweaks Key alignment tweaks for Sparc Avoid stack overrun in mdb_search Check for NULL DN Check for NULL DN in debug msg More Solaris warning cleanup More debug msg null pointer checks Fix size check ITS#7087 fix mdb_online_index endless loop Use <inttypes.h> instead of <stdint.h> Add MDB_FDATASYNC to allow override to fsync if needed. s/DEBUG/MDB_DEBUG/ Alignment fixes for debug msgs More s/DEBUG/MDB_DEBUG/ More cleanup for previous slapadd tweaks Fix typo ITS#7025 fix syncprov crash ITS#7025 handle Abandon in backglue Cleanup syncprov_db_close/CONFIG_DELETE code Add $(SOLIBS) macro for shared lib dependencies ITS#6548,#7092 don't pass hangup events to reader thread Dynamic config support - not fully backward compatible More cleanup / old perl compat Cleanup config items on destroy Fixup config init Backward compatibility - treat unknown directives as perlModuleConfig's Cleanup PERL_5_6 ifdefs Cleanup ASPERL ifdefs Dynamic config support for back-sql (untested)

Jan Vcelak (4): ITS#6998 MozNSS: when cert not required, ignore issuer expiration ITS#7014 TLS: don't check hostname if reqcert is 'allow' ITS#7028 man: slapo-unique(5) quoting keywords ITS#7028 man: ldap_sync(3) ldap_sync_destroy type

Kurt Zeilenga (1): update year on personal notice (just to inject a commit for testing)

Pierangelo Masarati (27): add support for ADD_IF_NOT_PRESENT and SOFTDEL internal modification types (ITS#6561) response tag is [1] according to RFC 2589 (ITS#6886) authTimestamp should be manageable (ITS#6873) fix config emit (ITS#6986) blind fix build on solaris native compilers (ITS#6992) TLS config statements always need an argument (related to ITS#7012) make sure 2-arg statements have exactly 2 args (related to ITS#7012) honor TIMEOUT when appropriate (ITS#7009); also honor timelimit (was broken) use ldap_search_ext(timelimit) instead of ldap_set_option(LDAP_OPT_TIMELIMIT) (related to ITS#7009) typo in comment cleanup slapd.ldif; install it (ITS#7015) host part of unique URI must be empty (ITS#7018) make sure frontend gets the {-1} (ITS#7016) fix TTL tolerance (ITS#7017, patch by jvcelak@redhat.com) according to draft-behera, this attribute only affects password modifies by self (ITS#7021) add notes about pwdAllowUserChange (more about ITS#7021) make sure size limits are passed to ldapsearch referral is a legitimate result further cleanup of ldapsearch response error messages from ldapsearch changed import ITS#6925 patch; fix peeraddr variable name clash in LDAP_CONNECTIONLESS code; fix scope of addr[] when inet_ntop(3) is used silence warning fix uninit'ed vars (ITS#7039) move ctxcsn and schema check code in helpers; also apply to slapmodify (ITS#6737) release mutex only *after* backend connection initialization (ITS#6993) build entry's pretty DN from parent's (ITS#5326) make sure data is reset

Quanah Gibson-Mount (99): Return to release engineering ITS#6561 (Required for delta-syncrepl MMR support) ITS#6734,ITS#7029,ITS#7031: Add support for delta-syncrepl based MMR ITS#6980 ITS#6886 ITS#6873 ITS#6982 ITS#6986 ITS#6992,ITS#6998,ITS#7003 ITS#7000 ITS#7001 ITS#6999 ITS#7012 ITS#7009 ITS#7015 ITS#7018 ITS#6892 again ITS#7016 ITS#7017 ITS#7021 ITS#7014 ITS#6983 ITS#7030 ITS#7073 ITS#7035 Fix loglevel <integer> to be loglevel <level> to match reality (and olcLogLevel description too!) ITS#6925 ITS#7039 ITS#7052 ITS#7051 ITS#7037 ITS#7040 ITS#7034 ITS#7006 ITS#7059 ITS#7066 Delete non-release file ITS#6763,7053 ITS#7061 ITS#7065 ITS#7071 ITS#7063 ITS#6972 ITS#6437, failure/fallback/debug handling: ITS#6437 ITS#6737 ITS#7078 ITS#7062 ITS#7060 ITS#6981 ITS#3272 ITS#6826 ITS#6993 ITS#6666 ITS#6848 Merge remote branch 'origin/mdb.master' into OPENLDAP_REL_ENG_2_4 Resolve MDB/HDB monitor OID clashes ITS#7079 Add MDB support to configure and test framework. delete unused variables (Missed merge from commit c02131a8b88d494e183d5f56250f59ed5878ba88) white space cleanup to match with master Fix missing image bits from commit 86afc76f8e2067cfb30fec78b3af3d2b0d1eb8dc Fix missed bit from 7af319a5715222f70b5a7da881ef5214e4bebffd More for ITS#5696 (missed parts of 4b8485c47aecdbab39db77a4ec21bf61d18ca0cf) Missing copyright bit from e0bcb7b571bcaf62bad89ca7a290e8a92f8cb714 Dynamic config for back-passwd Dynamic config for back-shell Note dyanmic config support for slapd-passwd, slapd-shell ITS#5326 Missed portion of 04f8fa5619fed389f238d780129d535a0947ee6f Fix bad merge of fa428ed25994d8c3366fc323dbe87226662c22f2 Fix missed portion of 2fef543ef97644054c4348ab6d92020df8f8e399 Delete whitespace (sync with master) Fix missed merge (93529d26c5b0866a38e35613305fc7bc373171e3) Match whitespace to master Fix missed part of 4ed4c3a28ff96121c6cfa19c13cd80b3c23ca8f1 Experimental code for delete support in back-config. Only overlays Disallow removing global and cn=config overlays for now. Allow deleting Cft_Misc config entries by setting a delete Sync remaining LDAP_CONFIG_DELETE portions with master unregister controls when removing syncprov, ppolicy, valsort, chain or SLAP_CONFIG_DELETE updates SLAP_CONFIG_DELETE sync ITS#7077 preserve mirrorMode setting when deleting syncrepl ITS#7082 ITS#6984 enable draft-wahl-ldap-session ITS#6984 More for ITS#6984 ITS#7019 ITS#6059 was fixed by ITS#7062 ITS#7083 ITS#7086 Fix typo (where -> were) ITS#7086 ITS#7025 fix syncprov crash free LDIF handler in case of failure ITS#6548,#7092 Unbind,cleanup before client exit. ITS#6548,#7092 Unbind,cleanup before client exit. Prep for release Note dynamic config support for slapd-perl, slapd-sql

Ralf Haferkamp (11): ITS#7066 reworked default deny ACL for cn=config plugged mem-leak introduced by last commit ITS#7066 Reworked fix New call to unregister controls registered form overlays use be_ctrls[cid] for counting the number of overlay instances that have Fixed the overlay delete code to allow removing removing global overlays should work now as well silence warning new call unregister_supported_control(), will be Fixed last commit. gcc was complaining about defined behavior. Fix compile problems with older gcc releases

Rich Megginson (5): ITS#6980 free the result of SSL_PeerCertificate ITS#7001 MozNSS: free the return of tlsm_find_and_verify_cert_key ITS#7002 MozNSS: fix VerifyCert allow/try behavior ITS#7022 NSS_Init* functions are not thread safe ITS#7034 use mutex for connection handshake when using PEM nss

-----------------------------------------------------------------------

--- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git