OpenLDAP 2.4 Change Log
-OpenLDAP 2.4.45 Engineering
- Added slapd support for OpenSSL 1.1.0 series (ITS#8353, ITS#8533)
+OpenLDAP 2.4.46 Engineering
+ Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
+ Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
+ Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
+ Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
+ Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
+ Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
+ Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
+ Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
+ Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
+ Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
+ Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
+ Build Environment
+ Fixed Windows build with newer MINGW version (ITS#8697)
+ Fixed compiler warnings and removed unused variables (ITS#8578)
+ Contrib
+ Fixed ldapc++ Control structure (ITS#8583)
+ Documentation
+ Delete stub manpage for back-ldbm (ITS#8713)
+ Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
+ Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
+ Fixed slapo-syncprov(5) indexing requirements (ITS#5048)
+
+OpenLDAP 2.4.45 Release (2017/06/01)
+ Added slapd support for OpenSSL 1.1.0 series (ITS#8353, ITS#8533, ITS#8634)
Fixed libldap to fail ldap_result if the handle is already bad (ITS#8585)
Fixed libldap to expose error if user specified CA doesn't exist (ITS#8529)
Fixed libldap handling of Diffie-Hellman parameters (ITS#7506)
Fixed libldap GnuTLS use after free (ITS#8385)
+ Fixed libldap SASL initialization (ITS#8648)
Fixed slapd bconfig rDN escape handling (ITS#8574)
+ Fixed slapd segfault with invalid hostname (ITS#8631)
Fixed slapd sasl SEGV rebind in same session (ITS#8568)
Fixed slapd syncrepl filter handling (ITS#8413)
Fixed slapd syncrepl infinite looping mods with delta-sync MMR (ITS#8432)
Custom modules may need to be updated for sc_writewait callback (ITS#8435)
Fixed slapd-ldap/meta broken LDAP_TAILQ macro (ITS#8576)
Fixed slapd-mdb so it passes ITS6794 regression test (ITS#6794)
+ Fixed slapd-mdb double free with size zero paged result (ITS#8655)
Fixed slapd-meta uninitialized diagnostic message (ITS#8442)
Fixed slapo-accesslog to honor pauses during purge for cn=config update (ITS#8423)
+ Fixed slapo-accesslog with multiple modifications to the same attribute (ITS#6545)
Fixed slapo-relay to correctly initialize sc_writewait (ITS#8428)
+ Fixed slapo-sssvlv double free (ITS#8592)
Fixed slapo-unique with empty modifications (ITS#8266)
Build Environment
Added test065 for proxyauthz (ITS#8571)
Fix test008 to be portable (ITS#8414)
+ Fix test064 to wait for slapd to start (ITS#8644)
Fix its4336 regression test (ITS#8534)
Fix its4337 regression test (ITS#8535)
Fix regression tests to execute on all backends (ITS#8539)
Documentation
admin24 fixed tls_cipher_suite bindconf option (ITS#8099)
admin24 fixed typo cn=config to be slapd.d (ITS#8449)
- admin24 fixed slapo-syncprov information to be curent (ITS#8253)
+ admin24 fixed slapo-syncprov information to be current (ITS#8253)
admin24 fixed typo in access control docs (ITS#7341, ITS#8391)
admin24 fixed minor typo in tuning guide (ITS#8499)
admin24 fixed information about the limits option (ITS#7700)
admin24 fixed missing options for syncrepl configuration (ITS#7700)
+ admin24 fixed accesslog documentation to note it should not be replicated (ITS#8344)
Fixed ldap.conf(5) missing information on SASL_NOCANON option (ITS#7177)
Fixed ldapsearch(1) information on the V[V] flag behavior (ITS#7177, ITS#6339)
Fixed slapd-config(5), slapd.conf(5) clarification on interval keyword for refreshAndPersist (ITS#8538)
+ Fixed slapd-config(5), slapd.conf(5) clarify serverID requirements (ITS#8635)
+ Fixed slapd-config(5), slapd.conf(5) clarification on loglevel settings (ITS#8123)
Fixed slapo-ppolicy(5) to clearly note rootdn requirement (ITS#8565)
+ Fixed slapo-memberof(5) to note it is not safe to use with replication (ITS#8613)
Fixed slapo-syncprov(5) documentation to be current (ITS#8253)
Fixed slapadd(8) manpage to note slapd-mdb (ITS#8215)
Fixed various minor grammar issues in the man pages (ITS#8544)
Fixed slapo-seqmod connection destroy logic (ITS#7906,ITS#7923)
Fixed slapo-slapover connection destroy logic (ITS#7906,ITS#7923)
Fixed slapo-sock db_init (ITS#7868)
- Fixed slapo-sssvlv fix olcSssVlvMaxPerConn (ITS#7908)
+ Fixed slapo-sssvlv fix olcSssVlvMaxPerConn (ITS#7908)
Fixed slapo-translucent double free (ITS#7587)
Fixed slapo-translucent to work with manageDSAit (ITS#7864)
Fixed slapo-translucent to use local backend with local entries (ITS#7915)
Added slapd handling of hex server IDs (ITS#6297)
Added slapd syncrepl contextCSN storing in subentry (ITS#6373)
Fixed slapd asserts in minimal environment (ITS#6361)
- Fixed slapd authid-rewrite parsing (ITS#6392)
+ Fixed slapd authid-rewrite parsing (ITS#6392)
Fixed slapd checks of str2filter (ITS#6391)
Fixed slapd configArgs initialization (ITS#6363)
Fixed slapd debug handling of LDAP_DEBUG_ANY (ITS#6324)