openldap-devel

openldap-devel@openldap.org

1416 discussions

Re: ITS review 9/29/2017
by Quanah Gibson-Mount 06 Oct '17

06 Oct '17

--On Saturday, October 07, 2017 1:13 AM +0200 Michael Ströder <michael(a)stroeder.com> wrote: > Quanah Gibson-Mount wrote: >>>> its8692 - Support LDAP_MOD_INCREMENT with back-sock >>>> <https://github.com/quanah/openldap-scratch/tree/its8692> >>> >>> Why is this super-trivial patch postponed to RE25? >> >> It's a new feature. > > This is debatable: > > 1. OpenLDAP 2.4.x accepts modify operations with LDAP_MOD_INCREMENT > > 2. OpenLDAP 2.4.x sends modify operations via back-sock to external > listeners > > Therefore I'd consider this rather a fix than a new feature. Convince Howard. ;) --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

recent commits review
by Quanah Gibson-Mount 06 Oct '17

06 Oct '17

The following commits may be applicable for the next RE24 release 8678 - 375db33d13ab1fe414419a6f9cfb0b41c999862d Note: Says it's a hack, and the underlying issue was resolved at the location that stemmed this issue by using sortvals on the related attribute. Not sure if we should push it to RE24 8226 - 221dd433995a480599d3038d109e63e0b570d84d Further fix for an issue fixed in 2.4.44. Seems worthwhile 8720 - 221dd433995a480599d3038d109e63e0b570d84d Commit has wrong ITS. Fixes an observed issue in the field. Seems worthwhile 8709 - 2c36a37f908cd2e7297b1bd5621fea2f0d32451a contrib module fix for OpenSSL 1.1, which is supported in RE24. Seems worthwhile 8717 - 738723866ed6858cb694b0a770300d781e09e333 Fixes an observed issue in the field. Seems worthwhile 5adcdb7642dbafae484b8f3feb391490ff9be087 - Fix warnings issued by autoconf 2.68+ No related ITS. Not sure if this is relevant to RE24 or not, given we're unlikely to regenerate configure for it. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: ITS review 9/29/2017
by Quanah Gibson-Mount 06 Oct '17

06 Oct '17

--On Saturday, September 30, 2017 11:42 AM +0200 Michael Ströder <michael(a)stroeder.com> wrote: > Quanah Gibson-Mount wrote: >> ----------------------- >> Purely for RE25: >> ----------------------- >> >> its8692 - Support LDAP_MOD_INCREMENT with back-sock >> <https://github.com/quanah/openldap-scratch/tree/its8692> > > Why is this super-trivial patch postponed to RE25? It's a new feature. New features are RE25 only. We are actively working on solidifying RE25 so it can go into alpha and eventual full release. RE24 is purely maintenance. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

2 1

Re: ITS review 9/29/2017
by Howard Chu 06 Oct '17

06 Oct '17

Quanah Gibson-Mount wrote: > Howard -- Looking for a thumbs up/down on these. > > The following ITSes were mostly supplied with patches and are IPR ok. I've > imported them into my openldap-scratch repo for easy review. If they didn't > have a supplied patch, I did the related work. Branch names are by ITS. > > ----------------------- > Suggested for LMDB 0.9: > ----------------------- > its8612 - Fix LMDB builds on Solaris & derivative OSes > <https://github.com/quanah/openldap-scratch/tree/its6035> OK. > > ----------------------- > > Suggested for RE24: > ----------------------- > > its5048 - Fix documentation for entryCSN with syncprov > <https://github.com/quanah/openldap-scratch/tree/its5048> OK > > its7100 - Fix slapo-dds with entryTTL currently not decreasing > <https://github.com/quanah/openldap-scratch/tree/its7100> OK > > its7373 - Fix tls_session reuse when hostname check fails > <https://github.com/quanah/openldap-scratch/tree/its7373> OK > its7374 - Fix MozNSS file matching for hashed CA cert directory (RE24 ONLY) > <https://github.com/quanah/openldap-scratch/tree/its7374> OK > > its7389 - Fix MozNSS to fallback to PEM if cert not found in certdb (RE24 ONLY) > <https://github.com/quanah/openldap-scratch/tree/its7389> Questionable, since the required PEM support module is 3rd party and not included in MozNSS. We have no way to test or support this patch. > its7442 - Add debug statements when index_intlen values are out of range > <https://github.com/quanah/openldap-scratch/tree/its7442> Looks pointless. > > its7520 - Omit unknown schema option for back-ldap > <https://github.com/quanah/openldap-scratch/tree/its7520> OK > > its8037 - Fix delta-syncrepl with relax > <https://github.com/quanah/openldap-scratch/tree/its8037> Looks like an enhancement, not a bugfix > > its8121 - Add LDAP_SASL_SIMPLE to ldap_bind(3) > <https://github.com/quanah/openldap-scratch/tree/its8121> OK > > its8167 - Fix nonblocking TLS with referrals > <https://github.com/quanah/openldap-scratch/tree/its8167> OK, but non-blocking TLS was LDAP_DEVEL, not supported in RE24. This patch should be master/RE25 only. > > its8404 - Fix assertion with back-meta when olcDbRewrite is changed > <https://github.com/quanah/openldap-scratch/tree/its8404> OK > > its8578 - Remove unused variables in RE24 > <https://github.com/quanah/openldap-scratch/tree/its8578> OK > > its8583 - Fix C++ LDAPCtrl structure > <https://github.com/quanah/openldap-scratch/tree/its8583> OK > its8605 - Fix various spelling errors > <https://github.com/quanah/openldap-scratch/tree/its8605> Introduces trailing whitespace - kill that before committing. In general, this patch falls under the "do not improve" rule http://www.openldap.org/devel/programming.html and should be rejected for not fixing any actual bugs. Many of the typos being fixed are in comments that are never user-visible anyway. Pollutes git history for a large number of files without any significant benefit. Better leave it out of re24. > its8687 - OpenSSL 1.1 compatibility, fix build when cross-compiling > <https://github.com/quanah/openldap-scratch/tree/its8687> Squash into a single commit. > > ----------------------- > Purely for RE25: > ----------------------- > > its6035 - Fix slapd so it doesn't require restart after modifying olcAuthzRegexp > <https://github.com/quanah/openldap-scratch/tree/its6035> OK > > its6300 - Add support for kqueue > <https://github.com/quanah/openldap-scratch/tree/its6300> OK > > its6475 - Add documentation to slapd.conf(5) and slapd-config(5) for > SASLDONTUSECOPY > <https://github.com/quanah/openldap-scratch/compare/its6475> OK > its7042 - Make it possible to unset TLS options with syncrepl > <https://github.com/quanah/openldap-scratch/tree/its7042> OK > > its7532 - Add ldap_connection function for asynchronous clients > <https://github.com/quanah/openldap-scratch/tree/its7532> OK Ondrej was just asking about this one yesterday anyway. > > its7721 - Allow authTimestamp to be forwarded via updateref > <https://github.com/quanah/openldap-scratch/tree/its7721> OK > > its8037 - Fixes delta-sync replication when "relax" is used to modify the > structural OC of an entry > <https://github.com/quanah/openldap-scratch/tree/its8037> OK > > its8153 - olcTimeLimit should be SINGLE-VALUE > <https://github.com/quanah/openldap-scratch/tree/its8153> OK > > its8291 - Fix slapmodify with BDB backends > <https://github.com/quanah/openldap-scratch/tree/its8291> OK > > its8508 - ucgendat.c properly add title-case characters without upper-case > equivalents (e.g. greek letters with iota subscript) > <https://github.com/quanah/openldap-scratch/tree/its8508> OK > > its8511 - Fix documentation for multimaster, deprecate mirrormode > <https://github.com/quanah/openldap-scratch/tree/its8511> Gratuitous change, existing docs and practices are already established. Hard enough to get people to update their docs, this is a bad idea. > its8527 - Improve SYNC debug output in certain situations > <https://github.com/quanah/openldap-scratch/tree/its8527> OK > > its8573 - Add TLS options to ldap* tools > <https://github.com/quanah/openldap-scratch/tree/its8573-tables> The manpage updates are a bit excessive. Maybe we need a single manpage just for common options, that we can refer to from all of the individual commands' pages. > > its8692 - Support LDAP_MOD_INCREMENT with back-sock > <https://github.com/quanah/openldap-scratch/tree/its8692> OK > > --Quanah > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

2 1

Load balancer
by Ondřej Kuzník 28 Sep '17

28 Sep '17

I'd like to have the load balancer prototype merged in the project and I've just created a ticket for that, ITS#8747. This server (lloadd for lack of a better name that you could still find in your friendly search engine) is a PDU-centric LDAP proxy. It will only handle operations that affect the connection itself (abandon, unbind, ...) and distribute the rest across connections established the configured backend servers. You can find more information in the (slightly disorganised) design notes in doc/devel/lloadd/design.md in the repo. I welcome anyone to help during the review and hope this can be merged soon and extended further. Regards, -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP

1 0

Re: LDAP_FEATURE_SUBORDINATE_SCOPE
by Quanah Gibson-Mount 26 Sep '17

26 Sep '17

--On Tuesday, September 26, 2017 11:51 PM +0100 Howard Chu <hyc(a)symas.com> wrote: > Michael Ströder wrote: >> HI! >> >> Does the commit below mean that this feature is not supported at all? To be clear, we're leaving the state unchanged vs RE24 and prior releases, where the feature is not advertised in the Root DSE. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: LDAP_FEATURE_SUBORDINATE_SCOPE
by Howard Chu 26 Sep '17

26 Sep '17

Michael Ströder wrote: > HI! > > Does the commit below mean that this feature is not supported at all? > > IIRC search with subordinate scope even works in 2.4.x. > IMHO it would be ok to also announce that feature in rootDSE. > > BTW: There are many expired I-Ds (e.g. draft-behera-ldap-password-policy) > implemented in OpenLDAP server. > > Ciao, Michael. > > commit 0d4cd897867e177a6e209b59cfb2330f32dc0355 (HEAD -> master, > origin/master, origin/HEAD) > Author: Quanah Gibson-Mount <quanah(a)openldap.org> > Date: Tue Sep 26 11:51:27 2017 -0700 > > LDAP_FEATURE_SUBORDINATE_SCOPE is from expired > draft-sermersheim-ldap-subordinate-scope, leave behind LDAP_DEVEL > The feature has been implemented a long time, we just never advertise it. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

LDAP_FEATURE_SUBORDINATE_SCOPE
by Michael Ströder 26 Sep '17

26 Sep '17

HI! Does the commit below mean that this feature is not supported at all? IIRC search with subordinate scope even works in 2.4.x. IMHO it would be ok to also announce that feature in rootDSE. BTW: There are many expired I-Ds (e.g. draft-behera-ldap-password-policy) implemented in OpenLDAP server. Ciao, Michael. commit 0d4cd897867e177a6e209b59cfb2330f32dc0355 (HEAD -> master, origin/master, origin/HEAD) Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: Tue Sep 26 11:51:27 2017 -0700 LDAP_FEATURE_SUBORDINATE_SCOPE is from expired draft-sermersheim-ldap-subordinate-scope, leave behind LDAP_DEVEL

1 0

whitespace cleanup
by Quanah Gibson-Mount 26 Sep '17

26 Sep '17

There are a number of files that have empty lines comprising of spaces and/or tabs, and code blocks that start with spaces rather than tabs, which break formatting. I would like to clean these up, but wanted to check if there were any objections to this. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

LDAP_DEVEL and 2.5
by Quanah Gibson-Mount 26 Sep '17

26 Sep '17

I've revisited my commit (1a712bf18e6a37ede91aa7014cd3df5e81558375), and moved a number of features that were not yet ready for release back behind LDAP_DEVEL. The remaining items that are exposed are considered ready for release. Note that there are documentation updates on the way for the following new features: slapo-pcache: PCACHE_CONTROL_PRIVDB and PCACHE_EXOP_QUERY_DELETE. LDAP_TCP_BUFFER SLAP_AUXPROP_DONTUSECOPY Please let me know if you feel there are still items that need to go back behind LDAP_DEVEL. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-devel