1 OpenLDAP 2.4 Change Log
3 OpenLDAP 2.4.20 Engineering
4 Fixed client tools with LDAP options (ITS#6283)
5 Fixed liblber embedded NUL values in BerValues (ITS#6353)
6 Fixed liblber inverted LBER_USE_DER test (ITS#6348)
7 Fixed liblber to return failure on certain failures (ITS#6344)
8 Fixed libldap connection initialization (ITS#6386)
9 Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334)
10 Fixed libldap uninitialized return value (ITS#6355)
11 Fixed libldap unlimited timeout (ITS#6388)
12 Fixed liblutil constant (ITS#5909)
13 Added slapd handling of hex server IDs (ITS#6297)
14 Added slapd syncrepl contextCSN storing in subentry (ITS#6373)
15 Fixed slapd asserts in minimal environment (ITS#6361)
16 Fixed slapd configArgs initialization (ITS#6363)
17 Fixed slapd debug handling of LDAP_DEBUG_ANY (ITS#6324)
18 Fixed slapd db_open with connection_fake_init (ITS#6381)
19 Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379)
20 Fixed slapd inclusion of ac/unistd.h (ITS#6342)
21 Fixed slapd invalid dn log message (ITS#6309)
22 Fixed slapd lockup on shutdown (ITS#6372)
23 Fixed slapd sl_free to better reclaim memory (ITS#6380)
24 Fixed slapd syncrepl deletes in MirorMode (ITS#6368)
25 Fixed slapd syncrepl to use correct SID (ITS#6367)
26 Fixed slapd termination for one level DNs (ITS#6338)
27 Fixed slapd tls_accept to retry in certain cases (ITS#6304)
28 Fixed slapd unused parameter (ITS#6356)
29 Fixed slapd-bdb/hdb cache corruption (ITS#6341)
30 Fixed slapd-bdb/hdb entry cache (ITS#6360)
31 Fixed slapd-ldap leak (ITS#6326)
32 Fixed slapd-relay bind segfault (ITS#6337)
33 Fixed slapo-memberof operational attr updates (ITS#6329)
34 Fixed slapo-pcache entry dupe (ITS#6310)
35 Fixed slapo-syncprov checkpoint conversion (ITS#6370)
36 Fixed slapo-syncprov deadlock (ITS#6335)
37 Fixed slapo-syncprov memory leak (ITS#6376)
38 Fixed slapo-syncprov out of order changes (ITS#6346)
40 Added additional operations for ITS#6332
41 Fixed memrchr define (ITS#6351)
42 Fixed slapd MAXPATHLEN handling (ITS#6342)
43 Fixed test057 handling of memberof/refint (ITS#6343)
44 Fixed slapd test error ignoring (ITS#6345)
46 ldap_get_dn(3) typos (ITS#5366)
47 ldap.conf(5) clarify comment usage (ITS#6384)
48 slapd.conf(5) note hex server IDs (ITS#6297)
49 slapd-config(5) note hex server IDs (ITS#6297)
51 OpenLDAP 2.4.19 Release (2009/10/06)
52 Fixed client tools with null timeouts (ITS#6282)
53 Fixed slapadd to warn about missing attrs for replicas (ITS#6281)
54 Fixed slapd acl cache (ITS#6287)
55 Fixed slapd tools to allow -n for conversion (ITS#6258)
56 Fixed slapd-ldap with null timeouts (ITS#6282)
57 Fixed slapd-ldap with strong binds with relay/translucent (ITS#6296)
58 Fixed slapd-ldif buffer overflow (ITS#6303)
59 Fixed slapo-auditlog comments when modifying (ITS#6286)
60 Fixed slapo-dynlist lock leak (ITS#6308)
61 Fixed slapo-pcache cache corruption (ITS#6242)
62 Fixed slapo-sssvlv sort control dereferencing (ITS#6288)
63 Fixed contrib/autogroup segfaults (ITS#6279)
64 Fixed contrib/nssov getgroupbymembers (ITS#6291)
65 Fixed contrib/smbk5pwd rpath linking (ITS#6323)
67 Fixed --enable-deref support (ITS#6311)
68 Fixed contrib/autogroup default libtool path (ITS#6284)
69 Deleted nadf.schema (ITS#6140)
71 OpenLDAP 2.4.18 Release (2009/09/06)
72 Fixed client tools common options (ITS#6049)
73 Fixed liblber speed and other problems (ITS#6215)
74 Added libldap MozNSS PEM support (ITS#6278)
75 Added libldap option for SASL_USERNAME (ITS#6257)
76 Fixed libldap error parsing (ITS#6197)
77 Fixed libldap native getpass usage (ITS#4643)
78 Fixed libldap tls_check_hostname for OpenSSL and MozNSS (ITS#6239)
79 Added slapd tcp buffers support (ITS#6234)
80 Fixed slapd allow mirrormode to be set to FALSE (ITS#5946)
81 Fixed slapd certificate list parsing (ITS#6241)
82 Fixed slapd writers blocking (ITS#6276)
83 Fixed slapd dncachesize behavior to unlimited by default (ITS#6222)
84 Fixed slapd incorrectly applying writetimeout when not set (ITS#6220)
85 Fixed slapd with duplicate empty lines for olcDbConfig (ITS#6240)
86 Fixed slapd server URL matching (ITS#5942)
87 Fixed slapd subordinate needs a suffix (ITS#6216)
88 Fixed slapd syncrepl decrement on possible NULL value (ITS#6256)
89 Fixed slapd tools to properly close database (ITS#6214)
90 Fixed slapd uninitialized SlapReply components (ITS#6101)
91 Fixed slapd-meta starttls with targets (ITS#6190)
92 Fixed slapd-monitor stats with glued subordinates (ITS#6243)
93 Fixed slapd-ndb startup (ITS#6203)
94 Fixed slapd-relay various issues (ITS#6133)
95 Fixed slapd-relay response/cleanup callback mismatch (ITS#6154)
96 Fixed slapd-sql with baseObject query (ITS#6172)
97 Fixed slapd-sql with empty attribute (ITS#6163)
98 Fixed slapo-dynlist uninitialized var (ITS#6266)
99 Fixed slapo-pcache multiple enhancements (ITS#6152,ITS#5178)
100 Fixed slapo-ppolicy updating operational attributes (ITS#6265)
101 Fixed slapo-translucent attribute return (ITS#6254)
102 Fixed slapo-translucent filter matching (ITS#6255)
103 Fixed slapo-translucent to honor sizelimit (ITS#6253)
104 Fixed slapo-unique filter matching (ITS#6077)
105 Fixed tools off by one error (ITS#6233)
106 Fixed tools resource leaks (ITS#6145)
107 Added contrib/allowed (ITS#4730)
108 Fixed contrib/autogroup with RE24 (ITS#6227)
109 Fixed contrib/nss symbols (ITS#6273)
111 Tests note which backend is being tested (ITS#5810)
112 Fixed test056-monitor with custom ports (ITS#6213)
114 admin24 fix broken link (ITS#6264)
115 ldap_open(3) document URI (ITS#6261)
117 OpenLDAP 2.4.17 Release (2009/07/13)
118 Fixed liblber to use ber_strnlen (ITS#6080)
119 Fixed libldap GnuTLS private key init (ITS#6053)
120 Fixed libldap openssl digest initialization (ITS#6192)
121 Fixed libldap tls NULL error messages (ITS#6079)
122 Fixed libldap_r missing stub (ITS#6188)
123 Fixed liblutil opendir/closedir on windows (ITS#6041)
124 Fixed liblutil for _GNU_SOURCE (ITS#5464,ITS#5666)
125 Added slapd sasl auxprop support (ITS#6147)
126 Added slapd schema checking tool (ITS#6150)
127 Added slapd writetimeout keyword (ITS#5836)
128 Fixed slapd abandon/cancel handling for some ops (ITS#6157)
129 Fixed slapd access setstyle to expand (ITS#6179)
130 Fixed slapd assert with closing connections (ITS#6111)
131 Fixed slapd bind race condition (ITS#6189)
132 Fixed slapd cancel behavior (ITS#6137)
133 Fixed slapd cert validation (ITS#6098)
134 Fixed slapd connection_destroy assert (ITS#6089)
135 Fixed slapd csn normalization (ITS#6195)
136 Fixed slapd errno handling (ITS#6037)
137 Fixed slapd global alloc handling (ITS#6054)
138 Fixed slapd hung writers (ITS#5836)
139 Fixed slapd ldapi issues (ITS#6056)
140 Fixed slapd moduleload with static backends and modules (ITS#6016)
141 Fixed slapd normalization of updated schema attributes (ITS#5540)
142 Fixed slapd olcLimits handling (ITS#6159)
143 Fixed slapd olcLogLevel with hex levels (ITS#6162)
144 Fixed slapd pagedresults stacked control with overlays (ITS#6056)
145 Fixed slapd password-hash incorrect limit on arg length (ITS#6139)
146 Fixed slapd readonly restrictions (ITS#6109)
147 Fixed slapd sending cancelled operations results (ITS#6103)
148 Fixed slapd slapi_entry_has_children (ITS#6132)
149 Fixed slapd sockets usage on windows (ITS#6039)
150 Fixed slapd some abandon and cancel race conditions (ITS#6104)
151 Fixed slapd tls context after changes (ITS#6135)
152 Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176)
153 Fixed slapd-bdb/hdb crashes during delete (ITS#6177)
154 Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196)
155 Fixed slapd-hdb freeing of already freed entries (ITS#6074)
156 Fixed slapd-hdb entryinfo cleanup (ITS#6088)
157 Fixed slapd-hdb dncache lockups (ITS#6095)
158 Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167)
159 Fixed slapd-relay to return failure on failure (ITS#5328)
160 Fixed slapd-sql with BACKSQL_ARBITRARY_KEY defined (ITS#6100)
161 Fixed slapo-collect collectinfo ordering (ITS#6076)
162 Fixed slapo-collect missing equality match rule (ITS#6075)
163 Fixed slapo-dds entry expiration (ITS#6169)
164 Fixed slapo-perl symbols (ITS#5658)
165 Fixed slapo-ppolicy to honor pwdLockout (ITS#6168)
166 Fixed slapo-ppolicy to return check modules error message (ITS#6082)
167 Fixed slapo-refint refint_repair handling (ITS#6056)
168 Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057)
169 Fixed slapo-rwm dn passing (ITS#6070)
170 Fixed slapo-rwm entry free (ITS#6058)
171 Fixed slapo-rwm entry release (ITS#6081)
172 Fixed slapo-translucent entry gathering (ITS#6156)
173 Fixed tools returning ldif errors (ITS#5892)
174 Fixed contrib/smbk5pwd use of private functions (ITS#5535)
176 Added test056-monitor (ITS#5540)
177 Added test057-memberof-refint (ITS#5395)
178 Fixed winsock detection for windows (ITS#6102, ITS#6078)
179 Removed GSSAPI configure option (ITS#6091,ITS#6092,ITS#6093,ITS#5369)
181 admin24 relocate configuration examples (ITS#6183)
182 admin24 fixed example regex (ITS#6052)
183 admin24 removed temporary back-monitor note (ITS#6130)
184 admin24 slapd.conf to cn=config conversion process (ITS#6060)
185 man page consistency fixes (ITS#6023)
186 ldapcompare(1) note -e option (ITS#6107)
187 ldapdelete(1) note -e option (ITS#6107)
188 ldapmodify(1) note -e option (ITS#6107)
189 ldapmodrdn(1) note -e option (ITS#6107)
190 ldapsearch(1) output format description (ITS#6146)
191 ldapurl(1) note -e option (ITS#6107)
192 ldapwhoami(1) note -e option (ITS#6107)
193 ldap_result(3) Add RETURN VALUE heading (ITS#6180)
194 ldap.conf(5) improve sizelimit/timelimit limits (ITS#6127)
195 slapd.access(5) Fix <setstyle> to use expand (ITS#6179)
196 slapd.conf(5) document default modulepath (ITS#5829)
197 slapd.conf(5) pidfile/argsfile description fix (ITS#5975)
198 slapd-config(5) document default modulepath (ITS#5829)
199 slapd-config(5) pidfile/argsfile description fix (ITS#5975)
200 slapo-constraint(5) clarify URI example (ITS#6118)
201 slapo-unique(5) explicitly note rootdn requirement (ITS#6108)
202 slapadd(8) note it does indexing (ITS#6160)
204 OpenLDAP 2.4.16 Release (2009/04/05)
205 Fixed libldap GnuTLS with x509v1 CA certs (ITS#5992)
206 Fixed libldap GnuTLS with CA chains (ITS#5991)
207 Fixed libldap GnuTLS TLSVerifyClient try (ITS#5981)
208 Fixed libldap segfault in checking cert/DN (ITS#5976)
209 Fixed libldap peer cert double free (ITS#5849)
210 Fixed libldap referral chasing (ITS#5980)
211 Fixed slapd backglue with empty DBs (ITS#5986)
212 Fixed slapd ctxcsn race condition (ITS#6001)
213 Fixed slapd debug message (ITS#6027)
214 Fixed slapd redundant module loading (ITS#6030)
215 Fixed slapd schema_init freed value (ITS#6036)
216 Fixed slapd syncrepl newCookie sync messages (ITS#5972)
217 Fixed slapd syncrepl hang during shutdown (ITS#6011)
218 Fixed slapd syncrepl too many MMR messages (ITS#6020)
219 Fixed slapd syncrepl skipped entries with MMR (ITS#5988)
220 Fixed slapd-bdb/hdb cachesize handling (ITS#5860)
221 Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006)
222 Fixed slapd-bdb/hdb with NULL transactions (ITS#6012)
223 Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916)
224 Fixed slapd-ldap/meta with broken AD results (ITS#5977)
225 Fixed slapd-ldap/meta with invalid attrs again (ITS#5959)
226 Fixed slapo-accesslog interaction with ppolicy (ITS#5979)
227 Fixed slapo-dynlist conversion to cn=config (ITS#6002)
228 Fixed slapo-syncprov newCookie sync messages (ITS#5972)
229 Fixed slapd-syncprov too many MMR messages (ITS#6020)
230 Fixed slapo-syncprov replica lockout (ITS#5985)
231 Fixed slapo-syncprov modtarget tracking (ITS#5999)
232 Fixed slapo-syncprov multiple CSN propagation (ITS#5973)
233 Fixed slapo-syncprov race condition (ITS#6045)
234 Fixed slapo-syncprov sending cookies without CSN (ITS#6024)
235 Fixed slapo-syncprov skipped entries with MMR (ITS#5988)
236 Fixed tools passphrase free (ITS#6014)
238 Cleaned up alloc/free functions for Windows (ITS#6005)
239 Fixed running of autosave files in testsuite (ITS#6026)
241 admin24 clarified MMR URI requirements (ITS#5942,ITS#5987)
242 Added ldapexop(1) manual page (ITS#5982)
243 slapd-ldap/meta(5) added missing TLS options (ITS#5989)
245 OpenLDAP 2.4.15 Release (2009/02/24)
246 Fixed libldap alias dereferencing in C API again (ITS#5916)
247 Fixed libldap GnuTLS compilation (ITS#5955)
248 Fixed slapd bconfig conversion again (ITS#5346)
249 Fixed slapd behavior with superior objectClasses again (ITS#5517)
250 Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968)
251 Fixed slapd corrupt contextCSN (ITS#5947)
252 Fixed slapd syncrepl order to match on add/delete (ITS#5954)
253 Fixed slapd adding rdn with other values (ITS#5965)
254 Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956)
255 Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959)
256 Fixed slapd-relay control initialization (ITS#5724)
257 Fixed slapo-pcache caching invalid entries (ITS#5927)
258 Fixed slapo-syncprov csn updates (ITS#5969)
259 Fixed slapo-rwm objectClass preservation (ITS#5760)
260 Fixed slapo-rwm rwm_bva_rewrite handling (ITS#5960)
262 Fixed tester library linking for windows (ITS#5740)
264 OpenLDAP 2.4.14 Release (2009/02/14)
265 Added libldap option to disable SASL host canonicalization (ITS#5812)
266 Added libldap TLS_PROTOCOL_MIN (ITS#5655)
267 Added libldap GnuTLS support for TLS_CIPHER_SUITE (ITS#5887)
268 Added libldap GnuTLS setting random file (ITS#5462)
269 Added libldap alias dereferencing in C API (ITS#5916)
270 Fixed libldap chasing multiple referrals (ITS#5853)
271 Fixed libldap deref handling (ITS#5768)
272 Fixed libldap NULL pointer deref (ITS#5934)
273 Fixed libldap peer cert memory leak (ITS#5849)
274 Fixed libldap interaction with GnuTLS CN IP-based matches (ITS#5789)
275 Fixed libldap intermediate response behavior (ITS#5896)
276 Fixed libldap IPv6 address handling (ITS#5937)
277 Fixed libldap_r deref building (ITS#5768)
278 Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841)
279 Added slapd syncrepl default retry setting (ITS#5825)
280 Added slapd val.regex expansion (ITS#5804)
281 Added slapd TLS_PROTOCOL_MIN (ITS#5655)
282 Added slapd slapi_pw_find (ITS#2615,ITS#4359)
283 Added slapd compatibility with MSAD ranged values (ITS#5927)
284 Fixed slapd bconfig to return error codes (ITS#5867)
285 Fixed slapd bconfig encoding incorrectly (ITS#5897)
286 Fixed slapd bconfig dangling pointers (ITS#5924)
287 Fixed slapd behavior with superior objectClasses (ITS#5517)
288 Fixed slapd connection assert (ITS#5835)
289 Fixed slapd epoll handling (ITS#5886)
290 Fixed slapd frontend/backend options handling (ITS#5857)
291 Fixed slapd glue with MMR (ITS#5925)
292 Fixed slapd logging on Windows (ITS#5392)
293 Fixed slapd listener comparison (ITS#5613)
294 Fixed slapd manageDSAit with glue entries (ITS#5921)
295 Fixed slapd relax behavior with structuralObjectClass (ITS#5792)
296 Fixed slapd syncrepl rename handling (ITS#5809)
297 Fixed slapd syncrepl MMR when adding new server (ITS#5850)
298 Fixed slapd syncrepl MMR with deleted entries (ITS#5843)
299 Fixed slapd syncrepl replication with glued DB (ITS#5866)
300 Fixed slapd syncrepl replication with moddn (ITS#5901)
301 Fixed slapd syncrepl replication with referrals (ITS#5881)
302 Fixed slapd syncrepl replication with config tree (ITS#5935)
303 Fixed slapd wake_sds close on Windows (ITS#5855)
304 Fixed slapd-bdb/hdb dncachesize handling (ITS#5860)
305 Fixed slapd-bdb/hdb RFC4528 control support (ITS#5861)
306 Fixed slapd-bdb/hdb trickle task usage (ITS#5864)
307 Fixed slapd-hdb idlcache with empty suffix (ITS#5859)
308 Fixed slapd-ldap idassert-bind validity checking (ITS#5863)
309 Fixed slapd-ldap/meta RFC4525 increment support (ITS#5912)
310 Fixed slapd-ldap/meta search dereferencing (ITS#5916)
311 Fixed slapd-ldap/meta with intermediate response (ITS#5931)
312 Fixed slapd-ldif numerous bugs (ITS#5408)
313 Fixed slapd-ldif rename on same DN (ITS#5319)
314 Fixed slapd-ldif deadlock (ITS#5329)
315 Fixed slapd-meta double response sending (ITS#5854)
316 Fixed slapd-meta alias deref for retry (ITS#5889)
317 Fixed slapd-relay recursion detection (ITS#5943)
318 Fixed slapd-sock descriptor leak (ITS#5939)
319 Fixed slapo-accesslog on glued dbs (ITS#5907)
320 Fixed slapo-dynlist handling of flags (ITS#5898)
321 Fixed slapo-memberof multiple instantiation (ITS#5903)
322 Fixed slapo-pcache filter sorting (ITS#5756)
323 Fixed slapo-ppolicy to not be global (ITS#5858)
324 Fixed slapo-rwm double free (ITS#5923)
325 Fixed slapo-rwm with back-config (ITS#5906)
326 Fixed slapo-rwm olcRwmRewrite modification (ITS#5940)
327 Added slapo-rwm newRDN rewriting (ITS#5834)
328 Added slapadd progress meter (ITS#5922)
329 Updated contrib/addpartial module (ITS#5764)
330 Added contrib/cloak module (ITS#5872)
331 Added contrib/smbk5pwd gcrypt support (ITS#5410)
332 Added contrib/passwd sha2 support (ITS#5660)
334 Fixed test006 appending to log file (ITS#5910)
335 Fixed test036,test039 behavior on error (ITS#5893)
336 Fixed test048 sed pathname substitution (ITS#5910)
337 Fixed test049,test050 to work on windows (ITS#5842)
338 Updated test017,test018,test019 to cover more cases (ITS#5883)
339 Removed patch for BerkeleyDB 4.7.25 (Official patch available)
340 Fixed MSVC 9.0 build issues (ITS#5888)
341 Fixed gss detection on Solaris (ITS#5846)
342 Fixed uuid_create/uuid_unparse_lower detection (ITS#5905)
343 Fixed liblutil tavl_delete to macroize constants (ITS#5909)
345 admin24 added limits chapter (ITS#5818)
346 admin24 access-control clarify global ACLS (ITS#5851,ITS#5852)
347 admin24 search on nested naming contexts (ITS#5788)
348 admin24 consistent loglevel documentation (ITS#5904)
349 slapd-bdb/hdb expansion on dncachesize behavior (ITS#5721)
350 slapo-constraint(5) example fix (ITS#5895)
351 slap*(8) man pages should mention slapd-config (ITS#5828)
352 slapacl(8c) fix wording (ITS#5918)
353 slapd(8) document sid (ITS#5873)
354 slapd.access(5) clarify global ACLS (ITS#5851,ITS#5852)
355 slapadd/cat/index(8) note -n 0 for slapd-config (ITS#5891)
356 Added SEE ALSO slapd-config(5) to relevant man pages (ITS#5914)
358 OpenLDAP 2.4.13 Release (2008/11/24)
359 Added libldap dereference control support (ITS#5768)
360 Fixed libldap parameter checking (ITS#5817)
361 Fixed liblutil hex conversion (ITS#5699)
362 Fixed liblutil returning undefined data (ITS#5748)
363 Fixed libldap error code return (ITS#5762)
364 Fixed libldap interaction with GnuTLS CN IP-based matches (ITS#5789)
365 Fixed libldap MAXHOSTNAMELEN typo (ITS#5815)
366 Fixed libldap Ipv6 detection (ITS#5739)
367 Fixed libldap setuid usage with .ldaprc (ITS#4750)
368 Fixed slapacl crasher (ITS#5820)
369 Fixed slapd acl checks on ADD (ITS#4556,ITS#5723)
370 Fixed slapd acl application to newly created backends (ITS#5572)
371 Fixed slapd #if/#elif issues in thread includes (ITS#5824)
372 Added slapd keyword add_content_acl for add checks (ITS#4556,ITS#5723)
373 Fixed slapd concurrent access to connections (ITS#5814)
374 Fixed slapd config backend olcLogFile support (ITS#5765)
375 Fixed slapd contextCSN pending list (ITS#5709)
376 Fixed slapd control criticality (ITS#5785)
377 Added slapd dn.this search limits (ITS#5734)
378 Fixed slapd error status on shutdown (ITS#5745)
379 Fixed slapd filter substring handling (ITS#5803)
380 Fixed slapd nameUIDPretty bitstring parsing (ITS#5750)
381 Fixed slapd null termination of password (ITS#5794)
382 Fixed slapd overlay/database open with real structure (ITS#5724)
383 Fixed slapd parsing of read entry control (ITS#5741)
384 Added slapd PMI schema (ITS#5695)
385 Added slapd private databases in global overlays (ITS#5735,ITS#5736)
386 Fixed slapd rdn generation when it isn't specified (ITS#5819)
387 Fixed slapd slapd.conf validation to LDIF (ITS#5755)
388 Fixed slapd startup scan for CSN (ITS#5640)
389 Fixed slapd statslog printing of released entry (ITS#5775)
390 Added slapd support for certificateListExactMatch (ITS#5700)
391 Fixed slapd syncrepl event loss (ITS#5710)
392 Fixed slapd syncrepl MOD of attrs with no EQ rule (ITS#5781)
393 Fixed slapd syncrepl rename handling (ITS#5809)
394 Fixed slapd syncrepl schema checking (ITS#5798)
395 Fixed slapd syncrepl filter leak (ITS#5826)
396 Fixed slapd undef promote (ITS#5783,ITS#5795)
397 Added slapd What failed? control (ITS#5784)
398 Fixed slapd-bdb/hdb invalid db crash (ITS#5698)
399 Added slapd-bdb/hdb dbpagesize keyword
400 Added slapd-bdb/hdb checksum keyword
401 Fixed slapd-bdb/hdb indexing of entryDN (ITS#5790)
402 Fixed slapd-bdb/hdb lookup of entryDN with equality (ITS#5791)
403 Fixed slapd-bdb/hdb uninitialized bli_flag
404 Fixed slapd-ldap snprintf buffer overflow test (ITS#4467)
405 Fixed slapd-ldap search stop on minor failure (ITS#5816)
406 Fixed slapd-ldif file rename on windows (ITS#5774)
407 Fixed slapd-null read controls support (ITS#5757)
408 Fixed slapd-sql value length with right index (ITS#5779)
409 Fixed slapo-chain/translucent back-config support (ITS#5736)
410 Fixed slapo-chain segv with search references (ITS#5742)
411 Fixed slapo-collect compile with C89 (ITS#5747)
412 Added slapo-constraint support for LDAP URI constraints (ITS#5704)
413 Added slapo-constraint support for constraining rename (ITS#5703)
414 Added slapo-constraint support for relax control (ITS#5705)
415 Added slapo-constraint "set" type (ITS#5702)
416 Fixed slapo-constraint filter parsing error (ITS#5751)
417 Added slapo-dynlist URI restriction ability (ITS#5761)
418 Fixed slapo-ppolicy unaligned BerElement (ITS#5770)
419 Fixed slapo-rwm objectClass preservation (ITS#5760)
420 Fixed slapo-rwm rewriting undefined filter (ITS#5731)
421 Fixed slapo-rwm rewritten DN-valued attrs (ITS#5772)
422 Fixed slapo-rwm reusing freed filter (ITS#5732)
423 Fixed slapo-rwm entry get (ITS#5773)
424 Fixed slapo-syncprov runqueue removal (ITS#5776)
425 Fixed slapo-syncprov unreplicatable ops (ITS#5709)
426 Fixed slapo-syncprov psearch leak (ITS#5827)
427 Added slapo-translucent try local bind when remote fails (ITS#5656)
428 Added slapo-translucent support for PasswordModify exop (ITS#5656)
429 Fixed tools simple bind without SASL (ITS#5753)
430 Fixed tools unaligned BerElement (ITS#5770)
431 Fixed contrib nssov crash on empty groups (ITS#5800)
432 Fixed contrib nssov crash with nssov-map (ITS#5801)
433 Fixed contrib nssov filter and search limits (ITS#5802)
434 Added contrib smbk5pwd honor principal expiration (ITS#5766)
436 Added ldapurl command
437 Added slapd GSSAPI refactoring (ITS#5369)
438 Added slapo-deref overlay (ITS#5768)
440 admin24 added olcLimits to example (ITS#5746)
441 admin24 consolidated on whitespace (ITS#5759)
442 slapd.conf,config(5) subordinate/olcSubordinate keyword (ITS#5788)
443 slapd.conf(5) fixed disable keyword for limits (ITS#5821)
444 slapo-dds(5) manageDIT to relax (ITS#5780)
445 slapo-dds(5) rootdn requirement added (ITS#5811)
446 slapo-syncprov(5) sessionlog clarification (ITS#5806)
448 OpenLDAP 2.4.12 Release (2008/10/12)
449 Fixed libldap ldap_utf8_strchar arguments (ITS#5720)
450 Fixed libldap TLS_CRLFILE (ITS#5677)
451 Fixed liblutil executables on Windows (ITS#5604)
452 Fixed liblutil microsecond overflows on Windows (ITS#5668)
453 Fixed librewrite memory handling (ITS#5691)
454 Fixed slapd aci performance (ITS#5636)
455 Fixed slapd aci's with sets (ITS#5627)
456 Fixed slapd attribute leak (ITS#5683)
457 Fixed slapd config backend with index greater than sibs (ITS#5684)
458 Fixed slapd custom attribute inheritance (ITS#5642)
459 Fixed slapd dynacl mask handling (ITS#5637)
460 Fixed slapd firstComponentMatch normalization (ITS#5634)
461 Added slapd caseIgnoreListMatch (ITS#5608)
462 Fixed slapd connection events enabled twice (ITS#5725)
463 Fixed slapd memory handling (ITS#5691)
464 Fixed slapd objectClass canonicalization (ITS#5681)
465 Fixed slapd objectClass termination (ITS#5682)
466 Fixed slapd overlay control registration (ITS#5649)
467 Fixed slapd runqueue checking (ITS#5726)
468 Fixed slapd spurious text output (ITS#5688)
469 Fixed slapd socket closing on Windows (ITS#5606)
470 Fixed slapd sortvals comparison (ITS#5578)
471 Added slapd substitute syntax support (ITS#5663)
472 Fixed slapd syncrepl contextCSN detection (ITS#5675)
473 Fixed slapd syncrepl error logging (ITS#5618)
474 Fixed slapd syncrepl runqueue interval (ITS#5719)
475 Fixed slapd-bdb entry return if attr not present (ITS#5650)
476 Fixed slapd-bdb olcDbMode syntax (ITS#5713)
477 Fixed slapd-bdb/hdb release search entries earlier (ITS#5728,ITS#5730)
478 Fixed slapd-bdb/hdb subtree search with empty suffix (ITS#5729)
479 Fixed slapd-dnssrv memory handling (ITS#5691)
480 Fixed slapd-ldap,slapd-meta invalid filter behavior (ITS#5614)
481 Fixed slapd-meta memory handling (ITS#5691)
482 Fixed slapd-meta objectClass filtering (ITS#5647)
483 Fixed slapd-meta quarantine behavior (ITS#5592)
484 Added slapd-ndb experimental backend
485 Fixed slapd-relay initialization (ITS#5643)
486 Fixed slapd-sql freeing of connection (ITS#5607)
487 Fixed slapd-sql fault on NULL fields (ITS#5653)
488 Fixed slapo-accesslog entryCSN generation on purge (ITS#5694)
489 Fixed slapo-constraint string termination (ITS#5609)
490 Fixed slapo-dynlist expansion with mapped attributes (ITS#5717)
491 Fixed slapo-memberof internal operations DN (ITS#5622)
492 Fixed slapo-pcache attrset crash (ITS#5665)
493 Fixed slapo-pcache caching with invalid schema (ITS#5680)
494 Fixed slapo-ppolicy control return on password modify exop (ITS#5711)
495 Fixed slapo-rwm callback cleanup (ITS#5601,ITS#5687)
496 Fixed slapo-rwm attr mapping and merging (ITS#5624)
497 Fixed slapo-rwm objectClass filtering (ITS#5647)
498 Fixed slapo-translucent back-config support (ITS#5689)
499 Fixed slapo-translucent filter usage on merged entries (ITS#5679)
500 Fixed slapo-unique filter validation (ITS#5581)
501 Fixed slapo-unique suffix testing (ITS#5641)
503 Fixed ODBC library detection (ITS#5602)
504 Removed pre-BerkeleyDB 4.4 support
505 Added BerkeleyDB 4.7 support (ITS#5523)
506 Included patch for BerkeleyDB 4.7.25 (build/db.4.7.25.patch)
507 Added slapo-collect overlay with enhancements(ITS#5659)
509 Added slapd-ldap(5), slapd-meta(5) noundeffilter (ITS#5614)
510 Fixed slapd-ldap(5), slapd-meta(5), slapo-pcache(5) schema requirements (ITS#5680)
511 Added slapo-collect(5) man page (ITS#5706)
512 Added slapo-pcache(5) proxycheckcacheability option (ITS#5680)
513 Added slapo-retcode(5) retcode.conf location (ITS#5633)
514 admin24 dontusecopy control update (ITS#5718)
515 admin24 guide updates (ITS#5616)
516 admin24 octetString fix (ITS#5670)
518 OpenLDAP 2.4.11 Release (2008/07/16)
519 Fixed liblber ber_get_next length decoding (ITS#5580)
520 Added libldap assertion control (ITS#5560)
521 Fixed libldap GnuTLS CRL result handling (ITS#5577)
522 Fixed libldap GnuTLS SSF computation (ITS#5585)
523 Fixed liblutil missing return code (ITS#5615)
524 Fixed slapd cert serial number parsing (ITS#5588)
525 Fixed slapd check for structural_class failures (ITS#5540)
526 Fixed slapd config backend renumbering (ITS#5571)
527 Fixed slapd configContext OID (ITS#5383)
528 Fixed slapd crash with no listeners (ITS#5563)
529 Fixed slapd equality rules for olcRootDN/olcSchemaDN (ITS#5540)
530 Fixed slapd sets memory leak (ITS#5557)
531 Fixed slapd sortvals binary search (ITS#5578)
532 Fixed slapd syncrepl updates with multiple masters (ITS#5597)
533 Fixed slapd syncrepl superior objectClass delete/add (ITS#5600)
534 Fixed slapd syncrepl/slapo-syncprov contextCSN updates as internal ops (ITS#5596)
535 Added slapd-ldap/slapd-meta option to filter out search references (ITS#5593)
536 Fixed slapd-meta link to slapd-ldap (ITS#5355)
537 Fixed slapd-sock, back-shell buffer count (ITS#5558)
538 Fixed slapo-dynlist dg attrs lookup (ITS#5583)
539 Fixed slapo-dynlist entry release (ITS#5135)
540 Fixed slapo-memberof replace handling (ITS#5584)
541 Added slapo-nssov contrib module
542 Fixed slapo-pcache handling of negative search caches (ITS#5546)
543 Fixed slapo-ppolicy DNs with whitespaces (ITS#5552)
544 Fixed slapo-ppolicy modify with internal ops (ITS#5569)
545 Fixed slapo-syncprov ACL evaluation (ITS#5548)
546 Fixed slapo-syncprov crash with delcsn (ITS#5589)
547 Fixed slapo-syncprov full reload (ITS#5564)
548 Fixed slapo-syncprov missing olcSpReloadHint attr(ITS#5591)
549 Fixed slapo-unique filter normalization (ITS#5581)
550 Fixed contrib smbk5pwd terminator (ITS#5575)
552 Fixed test048 to skip if threads is not available (ITS#5529)
554 Added slapo-pcache(5) sizelimit caching (ITS#5559)
555 Added slapd-access(5) add and delete privs (ITS#5566)
556 admin24 GnuTLS documentation (ITS#5554)
558 OpenLDAP 2.4.10 Release (2008/06/08)
559 Fixed libldap file descriptor leak with SELinux (ITS#5507)
560 Fixed libldap ld_defconn cleanup if it was freed (ITS#5518, ITS#5525)
561 Fixed libldap msgid handling (ITS#5318)
562 Fixed libldap t61 infinite loop (ITS#5542)
563 Fixed libldap_r missing stubs (ITS#5519)
564 Fixed slapd initialization of sr_msgid, rs->sr_tag (ITS#5461)
565 Fixed slapd missing termination of integerFilter keys (ITS#5503)
566 Fixed slapd multiple attrs in URI (ITS#5516)
567 Fixed slapd sasl_ssf retrieval (ITS#5403)
568 Fixed slapd socket assert (ITS#5489)
569 Fixed slapd syncrepl cookie (ITS#5536)
570 Fixed slapd-bdb/hdb MAXPATHLEN (ITS#5531)
571 Fixed slapd-bdb indexing in single ADD/MOD (ITS#5521)
572 Fixed slapd-ldap entry_get() op-dependent behavior (ITS#5513)
573 Fixed slapd-meta quarantine crasher (ITS#5522)
574 Fixed slapo-refint to allow setting modifiers name (ITS#5505)
575 Fixed slapo-syncprov contextCSN passing on syncprov consumers (ITS#5488)
576 Fixed slapo-syncprov csn update with delta-syncrepl (ITS#5493)
577 Fixed slapo-syncprov op2.o_extra reset (ITS#5501, #5506)
578 Fixed slapo-syncprov searching wrong backend (ITS#5487)
579 Fixed slapo-syncprov sending ops without queued CSNs (ITS#5465)
580 Fixed slapo-syncprov max csn search on startup (ITS#5537)
581 Fixed slapo-unique config structs (ITS#5526)
582 Fixed slapo-unique filter terminator (ITS#5511)
584 Add search privileges documentation (ITS#5512)
585 admin24 security document updates (ITS#5524)
587 OpenLDAP 2.4.9 Release (2008/05/07)
588 Fixed libldap to use unsigned port (ITS#5436)
589 Fixed libldap error message for missing close paren (ITS#5458)
590 Fixed libldap_r tpool pause checks (ITS#5364, #5407)
591 Fixed slapcat error checking (ITS#5387)
592 Fixed slapd abstract objectClass inheritance check (ITS#5474)
593 Fixed slapd add operations requiring naming attrs (ITS#5412)
594 Fixed slapd connection handling (ITS#5469)
595 Fixed slapd delta-syncrepl resync (ITS#5378)
596 Fixed slapd frontendDB backend selection (ITS#5419)
597 Fixed slapd pagedresults stale state (ITS#5409)
598 Fixed slapd pointer dereference (ITS#5388)
599 Fixed slapd null argument dereference (ITS#5435)
600 Fixed slapd REP_ENTRY flags (ITS#5340)
601 Fixed slapd sets attribute description parsing (ITS#5402)
602 Fixed slapd syncrepl hang on back-config (ITS#5407)
603 Fixed slapd syncrepl compare_csns crash (ITS#5413)
604 Fixed slapd syncrepl contextCSN update clash (ITS#5426)
605 Fixed slapd syncrepl/glue failure (ITS#5430)
606 Fixed slapd syncrepl crash on empty CSN (ITS#5432)
607 Fixed slapd syncrepl refreshAndPersist (ITS#5454)
608 Fixed slapd syncrepl modrdn processing (ITS#5397)
609 Fixed slapd syncrepl MMR partial refresh (ITS#5470)
610 Fixed slapd value list termination (ITS#5450)
611 Fixed slapd/slapo-accesslog rq mutex usage (ITS#5442)
612 Fixed slapd-bdb ID_NOCACHE handling (ITS#5439)
613 Fixed slapd-bdb entryinfo state if db_lock fails (ITS#5455)
614 Fixed slapd-bdb referral rewrite (ITS#5339)
615 Fixed slapd-config overlay stacking (ITS#5346)
616 Fixed slapd-config attribute publishing (ITS#5383)
617 Fixed slapd-ldap connection handler (ITS#5404)
618 Fixed slapd-ldif file name handling & multi-suffix/dir catch (ITS#5408)
619 Fixed slapd-meta connections on error (ITS#5440)
620 Fixed slapd-meta crash on search (ITS#5481)
621 Fixed slapo-accesslog null callback stack crash (ITS#5490)
622 Fixed slapo-auditlog unnecessary syscall (ITS#5441)
623 Added slapo-dynlist mapping to dynamic attrs generation (ITS#5466)
624 Fixed slapo-refint dnSubtreeMatch (ITS#5427)
625 Fixed slapo-refint global referential integrity (ITS#5428)
626 Fixed slapo-syncprov psearch on closed connection (ITS#5401)
627 Fixed slapo-syncprov psearch task delay (ITS#5405)
628 Fixed slapo-syncprov psearch filter identity (ITS#5418, #5486)
629 Fixed slapo-syncprov/glue contextCSN update (ITS#5433)
630 Fixed slapo-syncprov/glue search ops (ITS#5434)
631 Fixed slapo-syncprov null cookie (ITS#5437,#5444)
632 Fixed slapo-syncprov double-free (ITS#5445)
633 Fixed slapo-syncprov free syncop correctly (ITS#5484)
634 Fixed slapo-syncprov glue deadlock (ITS#5451)
636 Fixed leave function naming for OSF1 (ITS#5411)
638 Fixed slapd.access(5) authz-regexp documented behavior (ITS#5400)
639 Fixed slapd.meta(5) idassert-* documentation (ITS#5406)
640 admin24 delta-syncrepl documentation (ITS#5476)
641 admin24 set documentation (ITS#5278,ITS#5279,ITS#5281)
642 admin24 slapo-ppolicy documentation (ITS#5479)
643 admin24 syncrepl directives update (ITS#5425)
645 OpenLDAP 2.4.8 Release (2008/02/19)
646 Fixed ldapmodify verbose logging (ITS#5247)
647 Fixed ldapdelete with sizelimit (ITS#5294)
648 Fixed ldapdelete with subentries control (ITS#5293)
649 Fixed ldapsearch exit code init (ITS#5317)
650 Fixed libldap extended decoding (ITS#5304)
651 Fixed libldap filter abort (ITS#5300)
652 Fixed libldap ldap_parse_sasl_bind_result (ITS#5263)
653 Fixed libldap result codes for open (ITS#5338)
654 Fixed libldap search timeout crash (ITS#5291)
655 Fixed libldap paged results crash (ITS#5315)
656 Fixed libldap cipher suite with GnuTLS (ITS#5341)
657 Fixed slapd support for 2.1 CSN (ITS#5348)
658 Fixed slapd include handling (ITS#5276)
659 Fixed slapd modrdn check for valid new DN (ITS#5344)
660 Fixed slapd multi-step SASL binds (ITS#5298)
661 Fixed slapd non-atomic signal variables (ITS#5248)
662 Fixed slapd overlay ordering when moving to slapd.d (ITS#5284)
663 Fixed slapd NULL printf (ITS#5264)
664 Fixed slapd NULL set values (ITS#5286)
665 Fixed slapd segv with SASL/OTP (ITS#5259)
666 Fixed slapd timestamp race condition (ITS#5370)
667 Fixed slapd cn=config crash on delete (ITS#5343)
668 Fixed slapd cn=config global acls (ITS#5352)
669 Fixed slapd truncated cookie (ITS#5362)
670 Fixed slapd sasl with CLEARTEXT (ITS#5368)
671 Fixed slapd str2entry with no attrs (ITS#5308)
672 Fixed slapd TLSVerifyClient default (ITS#5360)
673 Fixed slapd HAVE_TLS dependency (ITS#5379)
674 Fixed slapd delta-syncrepl refresh mode (ITS#5376)
675 Fixed slapd ACL sets URI attrs (ITS#5384)
676 Fixed slapd invalid entryUUID filter (ITS#5386)
677 Fixed slapd-bdb idlcache on adds (ITS#5086)
678 Fixed slapd-bdb crash with modrdn (ITS#5358)
679 Fixed slapd-bdb segv with bdb4.6 (ITS#5322)
680 Fixed slapd-bdb modrdn to same dn (ITS#5319)
681 Fixed slapd-bdb MMR (ITS#5332)
682 Added slapd-bdb/slapd-hdb DB encryption (ITS#5359)
683 Fixed slapd-ldif delete (ITS#5265)
684 Fixed slapd-meta link to slapd-ldap (ITS#5355)
685 Fixed slapd-meta setting of sm_nvalues (ITS#5375)
686 Fixed slapd-monitor crash (ITS#5311)
687 Fixed slapd-relay compare (ITS#4937)
688 Added slapd-sock (ITS#4094)
689 Fixed slapo-accesslog cleanup on successful response (ITS#5374)
690 Added slapo-autogroup contrib module (ITS#5145)
691 Added slapo-constraint cross-attribute constraints (ITS#4987)
692 Fixed slapo-memberof objectClass inheritance (ITS#5299)
693 Added slapo-memberof global overlay support (ITS#5301)
694 Fixed slapo-memberof leak (ITS#5302)
695 Fixed slapo-ppolicy only password check with policy (ITS#5285)
696 Fixed slapo-ppolicy del/replace password without new one (ITS#5373)
697 Fixed slapo-syncprov hang on checkpoint (ITS#5261)
698 Added slapo-translucent local searching (ITS#5283)
701 Fixed libldap_r threaded library linking (ITS#4982)
702 Fixed libldap use of %n (ITS#5324)
703 Fixed test047 to skip if rwm is not available (ITS#5292)
705 DB_CONFIG.example URL wrong in comments (ITS#5288)
706 Add cn=config example for auditlog (ITS#5245)
707 ldapmodify(1) clarification for RFC2849 (ITS#5312)
709 OpenLDAP 2.4.7 Release (2007/12/14)
710 Added slapd ordered indexing of integer attributes (ITS#5239)
711 Fixed slapd paged results control handling (ITS#5191)
712 Fixed slapd sasl-host parsing (ITS#5209)
713 Fixed slapd filter normalization (ITS#5212)
714 Fixed slapd multiple suffix checking (ITS#5186)
715 Fixed slapd paged results handling when using rootdn (ITS#5230)
716 Fixed slapd syncrepl presentlist handling (ITS#5231)
717 Fixed slapd core schema 'c' definition for RFC4519 (ITS#5236)
718 Fixed slapd 3-way Multi-Master Replication (ITS#5238)
719 Fixed slapd hash collisions in index slots (ITS#5183)
720 Fixed slapd replication of dSAOperation attributes (ITS#5268)
721 Fixed slapadd contextCSN updating (ITS#5225)
722 Fixed slapd-bdb/hdb to report and fail on internal errors (ITS#5232)
723 Fixed slapd-bdb/hdb dn2entry lock bug (ITS#5257)
724 Fixed slapd-bdb/hdb dn2id lock bug (ITS#5262)
725 Fixed slapd-hdb caching on rename ops (ITS#5221)
726 Fixed slapo-accesslog abandoned op cleanup (ITS#5161)
727 Fixed slapo-dds deleting from nonexistent db (ITS#5267)
728 Fixed slapo-memberOf deleted values saving (ITS#5258)
729 Fixed slapo-pcache op->o_abandon handling (ITS#5187)
730 Fixed slapo-ppolicy single password check on modify (ITS#5146)
731 Fixed slapo-ppolicy internal search (ITS#5235)
732 Fixed slapo-syncprov refresh and persist cookie sending (ITS#5210)
733 Fixed slapo-syncprov ignore invalid cookies (ITS#5211)
734 Fixed slapo-translucent interaction with slapo-rwm (ITS#4889)
735 Updated contrib addpartial module (ITS#3593)
737 Fixed liblber socket library linking (ITS#5224)
738 Fixed Windows slapd.def rules (ITS#5215)
740 Fixed grammar errors (ITS#5223)
741 Refint overlay doc contribution (ITS#5217)
742 Dynamic Lists doc contribution to the admin guide (ITS#5216)
743 Fixed ldappasswd(1) and ldapmodify(1) typos (ITS#5269)
744 Fixed domain factor typos (ITS#5237)
745 Fixed slapd.conf(5) maxderefdepth default value typo (ITS#5200)
746 Clarified slapd.conf(5) limits issues in syncrepl (ITS#5243)
747 Fixed slapd-config(5) maxderefdepth default value typo (ITS#5200)
748 Patches for minor typos in man pages (ITS#5228)
749 admin24/replication.sdf spelling (ITS#5270)
752 OpenLDAP 2.4.6 Release (2007/10/31)
753 Initial release for "general use".