]>
git.sur5r.net Git - openldap/log
Hallvard Furuseth [Sat, 2 Jan 2010 21:05:11 +0000 (21:05 +0000)]
ITS#6437: Fix alignment after slap_sl_realloc().
Also use -Align instead of ~pad: Valid also for non-twos complement.
Hallvard Furuseth [Sat, 2 Jan 2010 18:42:33 +0000 (18:42 +0000)]
ITS#6437 cleanup (noop change): Simplify slap_sl_free() code reclaiming space
Hallvard Furuseth [Sat, 2 Jan 2010 18:27:51 +0000 (18:27 +0000)]
ITS#6437 cleanup (noop change): Compute pad,order_start at compile time
Hallvard Furuseth [Sat, 2 Jan 2010 18:05:56 +0000 (18:05 +0000)]
ITS#6437, slap_sl_mem_create():
Bugfix: Switching implementation stack<->pool on an old context could
crash or leak, it ran the wrong implementation's cleanup code.
Cleanup: Factor out identical stack/pool code. Call
slap_sl_mem_destroy(NULL,) instead of copying its pool code.
API change: slap_sl_mem_destroy(key=NULL,) gets a new meaning. Does
not affect current OpenLDAP code, it never passed NULL.
Quanah Gibson-Mount [Thu, 3 Nov 2011 00:27:58 +0000 (17:27 -0700)]
ITS#6972
Howard Chu [Tue, 1 Nov 2011 20:40:57 +0000 (13:40 -0700)]
ITS#6972 fix double-free in autogroup
Quanah Gibson-Mount [Thu, 3 Nov 2011 00:26:10 +0000 (17:26 -0700)]
ITS#7063
Howard Chu [Tue, 1 Nov 2011 19:48:26 +0000 (12:48 -0700)]
ITS#7063 add auto-converted LDIFs for missing schema
Howard Chu [Tue, 1 Nov 2011 19:46:10 +0000 (12:46 -0700)]
Syntaxes must come before attributetypes in schema object
Quanah Gibson-Mount [Thu, 3 Nov 2011 00:24:55 +0000 (17:24 -0700)]
ITS#7071
Howard Chu [Tue, 1 Nov 2011 19:09:01 +0000 (12:09 -0700)]
ITS#7071 check for socket() in -lnet
Quanah Gibson-Mount [Thu, 3 Nov 2011 00:23:55 +0000 (17:23 -0700)]
ITS#7065
Howard Chu [Tue, 1 Nov 2011 18:40:04 +0000 (11:40 -0700)]
ITS#7065 fix cn=config modify replace/delete crash
Quanah Gibson-Mount [Thu, 3 Nov 2011 00:22:45 +0000 (17:22 -0700)]
ITS#7061
Howard Chu [Tue, 1 Nov 2011 18:23:59 +0000 (11:23 -0700)]
ITS#7061 only return requested attrs in sssvlv response
Replaces commit
8eecc9a017584ea0b56b25f0e4750e3b16929de6
Quanah Gibson-Mount [Thu, 3 Nov 2011 00:11:36 +0000 (17:11 -0700)]
ITS#6763,7053
Hallvard Furuseth [Sun, 23 Oct 2011 12:47:38 +0000 (14:47 +0200)]
ITS#6763,7053 Cleanup after sending entry/searchref.
slap_send_search_entry(), slap_send_search_reference(): Never skip
the cleanup code. Sending an entry did on sizeLimitExceeded/busy.
Sending a ref dropped rs_flush_entry() on error.
Howard Chu [Thu, 20 Oct 2011 17:39:56 +0000 (10:39 -0700)]
slaptest checks a configuration, not necessarily slapd.conf
Ralf Haferkamp [Thu, 20 Oct 2011 09:07:01 +0000 (11:07 +0200)]
ITS#7066 Reworked fix
Seems simpler this way. No need for a back-config specific
bi_access_allowed() handler.
Ralf Haferkamp [Wed, 19 Oct 2011 09:46:00 +0000 (11:46 +0200)]
plugged mem-leak introduced by last commit
more for ITS#7066
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:47:28 +0000 (16:47 -0700)]
Delete non-release file
Howard Chu [Wed, 19 Oct 2011 10:52:07 +0000 (03:52 -0700)]
This ought to have been here a long time ago
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:45:48 +0000 (16:45 -0700)]
ITS#7066
Ralf Haferkamp [Tue, 18 Oct 2011 15:08:05 +0000 (17:08 +0200)]
ITS#7066 reworked default deny ACL for cn=config
Dynamically adding ACL for cn=config didn't work correctly, when no
ACLs where present for that database upon startup. Delete the last
ACL from the DB could also lead to unexpected results.
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:38:23 +0000 (16:38 -0700)]
ITS#7059
Howard Chu [Thu, 6 Oct 2011 22:22:40 +0000 (15:22 -0700)]
ITS#7059 replace previous patch
Bug was caused by postalAddressNormalize sending 0-length values
to UTF8StringNormalize.
Howard Chu [Thu, 6 Oct 2011 21:05:31 +0000 (14:05 -0700)]
Fix UTF8StringNormalize overrun on zero-length string
Detected by valgrind
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:22:04 +0000 (16:22 -0700)]
ITS#7006
Howard Chu [Fri, 30 Sep 2011 10:27:19 +0000 (03:27 -0700)]
ITS#7006 fix MozNSS wildcard cert match
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:21:16 +0000 (16:21 -0700)]
ITS#7034
Rich Megginson [Tue, 6 Sep 2011 18:59:26 +0000 (12:59 -0600)]
ITS#7034 use mutex for connection handshake when using PEM nss
PEM nss is not thread safe when establishing the initial connection
using SSL_ForceHandshake. Create a new mutex - tlsm_pem_mutex - to
protect this function call.
The call to SSL_ConfigServerSessionIDCache() is not thread-safe - move it
to the init section and protect it with the init mutex.
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:19:55 +0000 (16:19 -0700)]
ITS#7040
Howard Chu [Fri, 30 Sep 2011 10:04:10 +0000 (03:04 -0700)]
ITS#7040 don't complain about other server's CSNs
Only worry if consumer has newer state for our SID. Fixes breakage
caused by ITS#6606.
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:17:55 +0000 (16:17 -0700)]
ITS#7037
Howard Chu [Fri, 30 Sep 2011 09:27:04 +0000 (02:27 -0700)]
ITS#7037 restart consumer on Persist errors
Consumer should never get NO_SUCH_OBJECT for an Add to the underlying DB
during Persist phase.
Howard Chu [Fri, 30 Sep 2011 09:10:37 +0000 (02:10 -0700)]
ITS#7037 fix syncrepl_add_glue for empty suffix
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:16:35 +0000 (16:16 -0700)]
ITS#7051
Howard Chu [Fri, 30 Sep 2011 07:41:13 +0000 (00:41 -0700)]
ITS#7051 fix GNUtls cert dn parse
Quanah Gibson-Mount [Wed, 2 Nov 2011 23:15:23 +0000 (16:15 -0700)]
ITS#7052
Howard Chu [Fri, 30 Sep 2011 07:09:01 +0000 (00:09 -0700)]
ITS#7052 syncrepl deletes need a non-empty CSN
Must not let the underlying DB generate its own.
Hallvard Furuseth [Tue, 13 Sep 2011 07:39:28 +0000 (09:39 +0200)]
back-bdb/back-mdb IDL cleanup.
Parenthesize macros. Microoptimize IDL search. Use RANGE_<FIRST/LAST>
when IDL is known to be a range.
Hallvard Furuseth [Sun, 18 Sep 2011 19:49:25 +0000 (21:49 +0200)]
Cleanup ISO C compatibility for recent commits
Howard Chu [Sun, 18 Sep 2011 20:24:24 +0000 (13:24 -0700)]
Support single parameter substitution in filter
Howard Chu [Sat, 17 Sep 2011 10:08:02 +0000 (03:08 -0700)]
deltasync test tweaks
Check replication success before stopping consumer.
Set retry/interval to make sure consumer reconnects after provider restart.
Howard Chu [Fri, 9 Sep 2011 06:41:06 +0000 (23:41 -0700)]
Add a few NULL checks to defend against dumb API checkers.
Unfortunately automated checkers don't seem to read the documentation
for how APIs are expected to be used, and the C declaration syntax
isn't expressive enough to encode the documented usage.
Quanah Gibson-Mount [Wed, 2 Nov 2011 21:22:57 +0000 (14:22 -0700)]
ITS#7039
Pierangelo Masarati [Thu, 8 Sep 2011 21:31:21 +0000 (23:31 +0200)]
fix uninit'ed vars (ITS#7039)
Quanah Gibson-Mount [Wed, 2 Nov 2011 21:11:03 +0000 (14:11 -0700)]
ITS#6925
Pierangelo Masarati [Thu, 8 Sep 2011 23:08:05 +0000 (01:08 +0200)]
silence warning
Pierangelo Masarati [Thu, 8 Sep 2011 23:07:17 +0000 (01:07 +0200)]
import ITS#6925 patch; fix peeraddr variable name clash in LDAP_CONNECTIONLESS code; fix scope of addr[] when inet_ntop(3) is used
Howard Chu [Fri, 2 Sep 2011 20:22:41 +0000 (13:22 -0700)]
Fix log parsing, broken by
8d74f71
Hallvard Furuseth [Thu, 1 Sep 2011 11:43:55 +0000 (13:43 +0200)]
tests/data/: #bdb,hdb# -> #maindb/indexdb#.
Done for keywords index,limits. (Also do 'mode' if there were any cases.)
Change generated by: perl -i -pw0777e '
INIT { $q=qr/\#(?:[bh]|index|main)db\#/im; $k=qr/(?:index|limits|mode)\b/ }
0 while s/^$q($k.*\n)((?:$q.*\n)*?)\n?$q\1/\#maindb\#$1$2/imo;
s/^\#maindb\#index/\#indexdb\#index/igm;
' tests/data/*.* tests/data/regressions/*/*.*
Hallvard Furuseth [Thu, 1 Sep 2011 11:08:06 +0000 (13:08 +0200)]
tests: Add $MAINDB, $INDEXDB for [bhn]db tests.
Simplifies tests for the DB storage backends.
Adds indexing etc to ndb in some cases, to match bdb/hdb.
This also fixes some broken back-null/back-ldif settings.
Quanah Gibson-Mount [Thu, 8 Sep 2011 21:05:56 +0000 (14:05 -0700)]
Fix loglevel <integer> to be loglevel <level> to match reality (and olcLogLevel description too!)
Howard Chu [Thu, 1 Sep 2011 00:35:06 +0000 (17:35 -0700)]
Also track skipped (non-executable) tests
Howard Chu [Wed, 31 Aug 2011 22:15:39 +0000 (15:15 -0700)]
Add NOEXIT envvar to run all tests and tally failures
Quanah Gibson-Mount [Fri, 28 Oct 2011 02:41:32 +0000 (19:41 -0700)]
ITS#7035
Howard Chu [Wed, 7 Sep 2011 04:13:49 +0000 (21:13 -0700)]
ITS#7035 don't loop forever in wait4msg
Quanah Gibson-Mount [Fri, 28 Oct 2011 02:34:25 +0000 (19:34 -0700)]
ITS#7073
Howard Chu [Sat, 27 Aug 2011 21:35:31 +0000 (14:35 -0700)]
Relax entry_header, zero-length entries are valid.
Howard Chu [Fri, 26 Aug 2011 21:31:35 +0000 (14:31 -0700)]
Fix moduleload path
Quanah Gibson-Mount [Fri, 28 Oct 2011 02:19:57 +0000 (19:19 -0700)]
ITS#7030
Howard Chu [Fri, 26 Aug 2011 03:51:30 +0000 (20:51 -0700)]
ITS#7030 fix overlay_insert() with specific index
Quanah Gibson-Mount [Fri, 28 Oct 2011 02:17:29 +0000 (19:17 -0700)]
ITS#6983
Howard Chu [Thu, 25 Aug 2011 21:47:23 +0000 (14:47 -0700)]
ITS#6983 fix duplicate entry in HDB subtree IDL
Quanah Gibson-Mount [Fri, 28 Oct 2011 02:14:38 +0000 (19:14 -0700)]
ITS#7014
ITS#7022
ITS#7023
ITS#7028
Jan Vcelak [Wed, 24 Aug 2011 17:21:35 +0000 (19:21 +0200)]
ITS#7028 man: ldap_sync(3) ldap_sync_destroy type
Jan Vcelak [Wed, 24 Aug 2011 17:19:09 +0000 (19:19 +0200)]
ITS#7028 man: slapo-unique(5) quoting keywords
Francis Swasey [Thu, 18 Aug 2011 16:01:35 +0000 (12:01 -0400)]
ITS#7023 document TLSCACertificateFile in the man page as it is in the Admin Guide
Howard Chu [Wed, 24 Aug 2011 22:37:52 +0000 (15:37 -0700)]
ITS#7022 cleanup prev commit
Rich Megginson [Tue, 16 Aug 2011 18:01:16 +0000 (12:01 -0600)]
ITS#7022 NSS_Init* functions are not thread safe
The NSS_InitContext et. al, and their corresponding shutdown functions,
are not thread safe. There can only be one thread at a time calling
these functions. Protect the calls with a mutex. Create the mutex
using a PR_CallOnce to ensure that the mutex is only created once and
not used before created. Move the registration of the nss shutdown
callback to also use a PR_CallOnce. Removed the call to
SSL_ClearSessionCache() because it is always called at shutdown, and we must
not call it more than once.
Jan Vcelak [Tue, 9 Aug 2011 13:21:34 +0000 (15:21 +0200)]
ITS#7014 TLS: don't check hostname if reqcert is 'allow'
If server certificate hostname does not match the server hostname,
connection is closed even if client has set TLS_REQCERT to 'allow'. This
is wrong - the documentation says, that bad certificates are being
ignored when TLS_REQCERT is set to 'allow'.
Howard Chu [Wed, 24 Aug 2011 21:57:36 +0000 (14:57 -0700)]
More abandon paranoia
Howard Chu [Mon, 22 Aug 2011 21:05:58 +0000 (14:05 -0700)]
Don't replicate refint repair ops
Pierangelo Masarati [Mon, 22 Aug 2011 14:43:21 +0000 (08:43 -0600)]
error messages from ldapsearch changed
Pierangelo Masarati [Mon, 22 Aug 2011 17:18:07 +0000 (11:18 -0600)]
further cleanup of ldapsearch response
Pierangelo Masarati [Mon, 22 Aug 2011 15:07:54 +0000 (09:07 -0600)]
referral is a legitimate result
Pierangelo Masarati [Mon, 22 Aug 2011 15:02:02 +0000 (09:02 -0600)]
make sure size limits are passed to ldapsearch
Quanah Gibson-Mount [Thu, 6 Oct 2011 23:51:40 +0000 (16:51 -0700)]
ITS#7021
Pierangelo Masarati [Sun, 21 Aug 2011 01:02:06 +0000 (19:02 -0600)]
add notes about pwdAllowUserChange (more about ITS#7021)
Pierangelo Masarati [Sun, 21 Aug 2011 00:50:33 +0000 (18:50 -0600)]
according to draft-behera, this attribute only affects password modifies by self (ITS#7021)
Howard Chu [Thu, 18 Aug 2011 08:52:52 +0000 (01:52 -0700)]
Quanah Gibson-Mount [Wed, 5 Oct 2011 23:58:19 +0000 (16:58 -0700)]
ITS#7017
Pierangelo Masarati [Wed, 17 Aug 2011 18:56:55 +0000 (12:56 -0600)]
fix TTL tolerance (ITS#7017, patch by jvcelak@redhat.com)
Quanah Gibson-Mount [Wed, 5 Oct 2011 23:57:21 +0000 (16:57 -0700)]
ITS#7016
Pierangelo Masarati [Wed, 17 Aug 2011 04:17:43 +0000 (22:17 -0600)]
make sure frontend gets the {-1} (ITS#7016)
Howard Chu [Tue, 16 Aug 2011 20:51:10 +0000 (13:51 -0700)]
hack for #6982 - keep o_abandon set in op_free
Howard Chu [Tue, 16 Aug 2011 20:49:27 +0000 (13:49 -0700)]
Revert "More for ITS#6892"
This reverts commit
3cb2ca8bbd1ec8da8f27a608deefc7a2d45aa538 .
Patch has no benefit
Quanah Gibson-Mount [Wed, 5 Oct 2011 23:52:12 +0000 (16:52 -0700)]
ITS#6892 again
Howard Chu [Mon, 15 Aug 2011 22:40:46 +0000 (15:40 -0700)]
More for ITS#6892
Quanah Gibson-Mount [Wed, 5 Oct 2011 23:50:32 +0000 (16:50 -0700)]
ITS#7018
Pierangelo Masarati [Sat, 13 Aug 2011 21:33:19 +0000 (23:33 +0200)]
host part of unique URI must be empty (ITS#7018)
Quanah Gibson-Mount [Wed, 5 Oct 2011 23:48:57 +0000 (16:48 -0700)]
ITS#7015
Pierangelo Masarati [Thu, 11 Aug 2011 15:33:08 +0000 (17:33 +0200)]
cleanup slapd.ldif; install it (ITS#7015)
Pierangelo Masarati [Thu, 11 Aug 2011 15:02:25 +0000 (17:02 +0200)]
typo in comment
Pierangelo Masarati [Thu, 11 Aug 2011 10:16:01 +0000 (12:16 +0200)]
use ldap_search_ext(timelimit) instead of ldap_set_option(LDAP_OPT_TIMELIMIT) (related to ITS#7009)
Quanah Gibson-Mount [Wed, 5 Oct 2011 23:46:29 +0000 (16:46 -0700)]
ITS#7009
Pierangelo Masarati [Wed, 10 Aug 2011 20:39:16 +0000 (22:39 +0200)]
honor TIMEOUT when appropriate (ITS#7009); also honor timelimit (was broken)
Quanah Gibson-Mount [Wed, 5 Oct 2011 23:45:20 +0000 (16:45 -0700)]
ITS#7012
Pierangelo Masarati [Wed, 10 Aug 2011 18:22:33 +0000 (20:22 +0200)]
make sure 2-arg statements have exactly 2 args (related to ITS#7012)