OpenLDAP 2.4 Change Log
-OpenLDAP 2.4.45 Engineering
+OpenLDAP 2.4.47 Engineering
+ Added slapd-sock DN qualifier for subtrees to be processed (ITS#8051)
+ Added slapd-sock ability to send extended operations to external listeners (ITS#8714)
+ Fixed slapd slapcat to correctly honor -g option (ITS#8667)
+ Fixed slapd cn=config when modifying slapo-syncprov config (ITS#8616)
+ Fixed slapd domainScope control to match Microsoft specification (ITS#8840)
+ Fixed slapd-bdb/hdb/mdb to not convert certain IDLs to ranges (ITS#8868)
+ Fixed slapo-syncprov will NULL modlist (ITS#8843)
+
+OpenLDAP 2.4.46 Release (2018/03/22)
+ Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
+ Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
+ Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
+ Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
+ Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
+ Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
+ Fixed libldap MozNSS initialization (ITS#8484)
+ Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
+ Fixed libldap memory leak with cancel operations (ITS#8782)
+ Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
+ Fixed slapd to maintain SSF across SASL binds (ITS#8796)
+ Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
+ Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
+ Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
+ Fixed slapd CSN queue processing (ITS#8801)
+ Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
+ Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
+ Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
+ Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
+ Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
+ Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
+ Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
+ Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
+ Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
+ Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
+ Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
+ Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
+ Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
+ Build Environment
+ Fixed Windows build with newer MINGW version (ITS#8697)
+ Fixed compiler warnings and removed unused variables (ITS#8578)
+ Contrib
+ Fixed ldapc++ Control structure (ITS#8583)
+ Documentation
+ Delete stub manpage for back-ldbm (ITS#8713)
+ Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
+ Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
+ Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
+ Fixed slapo-syncprov(5) indexing requirements (ITS#5048)
+
+OpenLDAP 2.4.45 Release (2017/06/01)
+ Added slapd support for OpenSSL 1.1.0 series (ITS#8353, ITS#8533, ITS#8634)
+ Fixed libldap to fail ldap_result if the handle is already bad (ITS#8585)
+ Fixed libldap to expose error if user specified CA doesn't exist (ITS#8529)
Fixed libldap handling of Diffie-Hellman parameters (ITS#7506)
Fixed libldap GnuTLS use after free (ITS#8385)
+ Fixed libldap SASL initialization (ITS#8648)
+ Fixed slapd bconfig rDN escape handling (ITS#8574)
+ Fixed slapd segfault with invalid hostname (ITS#8631)
+ Fixed slapd sasl SEGV rebind in same session (ITS#8568)
Fixed slapd syncrepl filter handling (ITS#8413)
Fixed slapd syncrepl infinite looping mods with delta-sync MMR (ITS#8432)
+ Fixed slapd callback struct so older modules without writewait should function.
+ Custom modules may need to be updated for sc_writewait callback (ITS#8435)
+ Fixed slapd-ldap/meta broken LDAP_TAILQ macro (ITS#8576)
+ Fixed slapd-mdb so it passes ITS6794 regression test (ITS#6794)
+ Fixed slapd-mdb double free with size zero paged result (ITS#8655)
+ Fixed slapd-meta uninitialized diagnostic message (ITS#8442)
Fixed slapo-accesslog to honor pauses during purge for cn=config update (ITS#8423)
+ Fixed slapo-accesslog with multiple modifications to the same attribute (ITS#6545)
Fixed slapo-relay to correctly initialize sc_writewait (ITS#8428)
+ Fixed slapo-sssvlv double free (ITS#8592)
+ Fixed slapo-unique with empty modifications (ITS#8266)
Build Environment
+ Added test065 for proxyauthz (ITS#8571)
Fix test008 to be portable (ITS#8414)
+ Fix test064 to wait for slapd to start (ITS#8644)
+ Fix its4336 regression test (ITS#8534)
+ Fix its4337 regression test (ITS#8535)
+ Fix regression tests to execute on all backends (ITS#8539)
Contrib
+ Added slapo-autogroup(5) man page (ITS#8569)
Added passwd missing conversion scripts for apr1 (ITS#6826)
+ Fixed contrib modules where the writewait callback was not correctly initialized (ITS#8435)
+ Fixed smbk5pwd to build with newer OpenSSL releases (ITS#8525)
Documentation
admin24 fixed tls_cipher_suite bindconf option (ITS#8099)
+ admin24 fixed typo cn=config to be slapd.d (ITS#8449)
+ admin24 fixed slapo-syncprov information to be current (ITS#8253)
+ admin24 fixed typo in access control docs (ITS#7341, ITS#8391)
+ admin24 fixed minor typo in tuning guide (ITS#8499)
+ admin24 fixed information about the limits option (ITS#7700)
+ admin24 fixed missing options for syncrepl configuration (ITS#7700)
+ admin24 fixed accesslog documentation to note it should not be replicated (ITS#8344)
+ Fixed ldap.conf(5) missing information on SASL_NOCANON option (ITS#7177)
+ Fixed ldapsearch(1) information on the V[V] flag behavior (ITS#7177, ITS#6339)
+ Fixed slapd-config(5), slapd.conf(5) clarification on interval keyword for refreshAndPersist (ITS#8538)
+ Fixed slapd-config(5), slapd.conf(5) clarify serverID requirements (ITS#8635)
+ Fixed slapd-config(5), slapd.conf(5) clarification on loglevel settings (ITS#8123)
+ Fixed slapo-ppolicy(5) to clearly note rootdn requirement (ITS#8565)
+ Fixed slapo-memberof(5) to note it is not safe to use with replication (ITS#8613)
+ Fixed slapo-syncprov(5) documentation to be current (ITS#8253)
+ Fixed slapadd(8) manpage to note slapd-mdb (ITS#8215)
+ Fixed various minor grammar issues in the man pages (ITS#8544)
+ Fixed various typos (ITS#8587)
OpenLDAP 2.4.44 Release (2016/02/05)
Fixed slapd-bdb/hdb missing olcDbChecksum config attr (ITS#8337)
Fixed libldap microsecond timer for windows (ITS#8295)
Fixed slap tools minor one time memory leak (ITS#8082)
Fixed slapd to avoid redundant processing of abandon ops (ITS#8232)
- Fixed slapd syncrepl segv when present list is NULL (ITS#8231, ITS#8042)
+ Fixed slapd syncrepl SEGV when present list is NULL (ITS#8231, ITS#8042)
Fixed slapd segfault with invalid SASL URI (ITS#8218)
Fixed slapd configuration parser with unbalanced quotes (ITS#8233)
Fixed slapd syncrepl check with config db on windows (ITS#8277)
Fixed slapo-seqmod connection destroy logic (ITS#7906,ITS#7923)
Fixed slapo-slapover connection destroy logic (ITS#7906,ITS#7923)
Fixed slapo-sock db_init (ITS#7868)
- Fixed slapo-sssvlv fix olcSssVlvMaxPerConn (ITS#7908)
+ Fixed slapo-sssvlv fix olcSssVlvMaxPerConn (ITS#7908)
Fixed slapo-translucent double free (ITS#7587)
Fixed slapo-translucent to work with manageDSAit (ITS#7864)
Fixed slapo-translucent to use local backend with local entries (ITS#7915)
Fixed libldap libfetch dependancy (ITS#6889)
Documentation
ldap_get_dn(3) add man page (ITS#6959)
- slapo-nssov(5) Fixed typo (ITS#6934)
slapd-backends(5) update recommended database backend (ITS#6904)
slapd-bdb(5) update recommended database backend (ITS#6904)
slapd-hdb(5) update recommended database backend (ITS#6904)
+ slapo-nssov(5) Fixed typo (ITS#6934)
admin24 update that cn=config is preferred (ITS#6905)
admin24 update information about indexes (ITS#6906)
admin24 fix --enable-wrappers option (ITS#6971)
+ admin24 fix typos (ITS#8562)
+ admin24 fix replication sections to include back-mdb (ITS#8563)
OpenLDAP 2.4.25 Release (2011/03/26)
Fixed ldapsearch pagedresults loop (ITS#6755)
Added slapd handling of hex server IDs (ITS#6297)
Added slapd syncrepl contextCSN storing in subentry (ITS#6373)
Fixed slapd asserts in minimal environment (ITS#6361)
- Fixed slapd authid-rewrite parsing (ITS#6392)
+ Fixed slapd authid-rewrite parsing (ITS#6392)
Fixed slapd checks of str2filter (ITS#6391)
Fixed slapd configArgs initialization (ITS#6363)
Fixed slapd debug handling of LDAP_DEBUG_ANY (ITS#6324)
Fixed slapd-null read controls support (ITS#5757)
Fixed slapd-sql value length with right index (ITS#5779)
Fixed slapo-chain/translucent back-config support (ITS#5736)
- Fixed slapo-chain segv with search references (ITS#5742)
+ Fixed slapo-chain SEGV with search references (ITS#5742)
Fixed slapo-collect compile with C89 (ITS#5747)
Added slapo-constraint support for LDAP URI constraints (ITS#5704)
Added slapo-constraint support for constraining rename (ITS#5703)
Fixed slapd overlay ordering when moving to slapd.d (ITS#5284)
Fixed slapd NULL printf (ITS#5264)
Fixed slapd NULL set values (ITS#5286)
- Fixed slapd segv with SASL/OTP (ITS#5259)
+ Fixed slapd SEGV with SASL/OTP (ITS#5259)
Fixed slapd timestamp race condition (ITS#5370)
Fixed slapd cn=config crash on delete (ITS#5343)
Fixed slapd cn=config global acls (ITS#5352)
Fixed slapd invalid entryUUID filter (ITS#5386)
Fixed slapd-bdb idlcache on adds (ITS#5086)
Fixed slapd-bdb crash with modrdn (ITS#5358)
- Fixed slapd-bdb segv with bdb4.6 (ITS#5322)
+ Fixed slapd-bdb SEGV with bdb4.6 (ITS#5322)
Fixed slapd-bdb modrdn to same dn (ITS#5319)
Fixed slapd-bdb MMR (ITS#5332)
Added slapd-bdb/slapd-hdb DB encryption (ITS#5359)