]> git.sur5r.net Git - openldap/log
openldap
9 years agoITS#8244 skip client controls in ldap_back_entry_get()
Howard Chu [Mon, 14 Sep 2015 04:42:20 +0000 (05:42 +0100)]
ITS#8244 skip client controls in ldap_back_entry_get()

9 years agoRevert "Revert "ITS#8240 remove obsolete assert""
Howard Chu [Sat, 12 Sep 2015 21:18:22 +0000 (22:18 +0100)]
Revert "Revert "ITS#8240 remove obsolete assert""

We have never documented our use of assert, so can't expect
builders to do the right thing.
This reverts commit 55dd4d3275d24c5190fdfada8dfae0320628b993.

9 years agoRevert "ITS#8240 remove obsolete assert"
Howard Chu [Sat, 12 Sep 2015 09:07:16 +0000 (10:07 +0100)]
Revert "ITS#8240 remove obsolete assert"

Not a bug.
This reverts commit 6fe51a9ab04fd28bbc171da3cf12f1c1040d6629.

9 years agoITS#8240 remove obsolete assert
Howard Chu [Wed, 9 Sep 2015 23:37:32 +0000 (00:37 +0100)]
ITS#8240 remove obsolete assert

9 years agoITS#7964 avoid double-unescaping rewrite rules
Ryan Tandy [Mon, 7 Sep 2015 04:09:51 +0000 (21:09 -0700)]
ITS#7964 avoid double-unescaping rewrite rules

config_fp_parse_line processes backslash escapes. When existing rewrite
rules were reloaded while inserting a new rule, this caused backslashes
to be lost from every rule except the most recently inserted one.
config_parse_ldif performs similar splitting, but leaves backslashes
alone.

9 years agoITS#7889 add olcDropUnrequested to olcRwmConfig
Ryan Tandy [Sun, 6 Sep 2015 00:59:38 +0000 (17:59 -0700)]
ITS#7889 add olcDropUnrequested to olcRwmConfig

9 years agoITS#8235 fix compiler warnings
Ryan Tandy [Wed, 2 Sep 2015 20:15:23 +0000 (13:15 -0700)]
ITS#8235 fix compiler warnings

9 years agoITS#8234 revert to default policy on failure
Ryan Tandy [Wed, 2 Sep 2015 02:19:57 +0000 (19:19 -0700)]
ITS#8234 revert to default policy on failure

9 years agoITS#7537 release entry on failure
Ryan Tandy [Wed, 2 Sep 2015 01:56:19 +0000 (18:56 -0700)]
ITS#7537 release entry on failure

9 years agoITS#8233 reject lines with unbalanced quotes
Howard Chu [Tue, 1 Sep 2015 00:09:46 +0000 (01:09 +0100)]
ITS#8233 reject lines with unbalanced quotes

9 years agoITS#8226 leave nested ops alone
Howard Chu [Mon, 31 Aug 2015 13:55:35 +0000 (14:55 +0100)]
ITS#8226 leave nested ops alone

9 years agoMore for batched writes
Howard Chu [Sun, 30 Aug 2015 04:46:01 +0000 (05:46 +0100)]
More for batched writes

Only usable if backend supports txns

9 years agoMore for batched writes
Howard Chu [Sun, 30 Aug 2015 04:34:42 +0000 (05:34 +0100)]
More for batched writes

9 years agoMore for batched write
Howard Chu [Sun, 30 Aug 2015 04:14:17 +0000 (05:14 +0100)]
More for batched write

9 years agoITS#8226 revert unintended commit
Howard Chu [Sun, 30 Aug 2015 04:01:59 +0000 (05:01 +0100)]
ITS#8226 revert unintended commit

9 years agoITS#8226 limit size of read txns in searches
Howard Chu [Thu, 27 Aug 2015 13:47:04 +0000 (14:47 +0100)]
ITS#8226 limit size of read txns in searches

9 years agoITS#8232 avoid redundant abandon processing
Howard Chu [Sat, 29 Aug 2015 18:44:33 +0000 (19:44 +0100)]
ITS#8232 avoid redundant abandon processing

9 years agoITS#8231 fix ITS#8042 regression
Howard Chu [Sat, 29 Aug 2015 17:29:32 +0000 (18:29 +0100)]
ITS#8231 fix ITS#8042 regression

9 years agoITS#8198 use #elif instead of #else for gnutls cases
Ryan Tandy [Sun, 23 Aug 2015 01:59:13 +0000 (18:59 -0700)]
ITS#8198 use #elif instead of #else for gnutls cases

Reserve #else for actual fallback cases.

9 years agoITS#8198 Optionally use libnettle instead of OpenSSL for crypto
Luca Bruno [Wed, 5 Nov 2014 14:32:33 +0000 (15:32 +0100)]
ITS#8198 Optionally use libnettle instead of OpenSSL for crypto

OpenLDAP can be configured to be either built with OpenSSL or
GnuTLS. This commit adds support for building pw-pbkbdf2 module
without OpenSSL, by using PBKDF2 crypto primitives provided by
libnettle.
Closes hamano/openldap-pbkdf2#2

Signed-off-by: Luca Bruno <luca.bruno@rocket-internet.de>
9 years agoITS#8198 Fix an always-true check
Luca Bruno [Wed, 5 Nov 2014 15:15:55 +0000 (16:15 +0100)]
ITS#8198 Fix an always-true check

Fixed asprintf return value check, in order to properly catch
error conditions. This has been caught by clang -Wtautological-compare:

pw-pbkdf2.c:132:17: warning: comparison of unsigned expression < 0 is always false
        if(msg->bv_len < 0){
           ~~~~~~~~~~~ ^ ~

Signed-off-by: Luca Bruno <luca.bruno@rocket-internet.de>
9 years agoThreadqueues - remove obsolete comment
Howard Chu [Sat, 22 Aug 2015 16:53:43 +0000 (17:53 +0100)]
Threadqueues - remove obsolete comment

9 years agoMore for threadqueues
Howard Chu [Sat, 22 Aug 2015 12:50:40 +0000 (13:50 +0100)]
More for threadqueues

Revert previous patch, just delete all the associated juggling.
No longer serves any purpose.

9 years agoMore for threadqueues
Howard Chu [Fri, 21 Aug 2015 20:19:16 +0000 (21:19 +0100)]
More for threadqueues

Catch threads that are finishing while pool was pausing

9 years agoITS#8220 fix prev commit
Howard Chu [Fri, 21 Aug 2015 10:39:05 +0000 (11:39 +0100)]
ITS#8220 fix prev commit

Dynamic startup was failing

9 years agoITS#8114 OpenLDAP WiredTiger Backend
HAMANO Tsukasa [Mon, 27 Apr 2015 01:27:58 +0000 (10:27 +0900)]
ITS#8114 OpenLDAP WiredTiger Backend

9 years agoITS#8082 plug benign memleak
Howard Chu [Wed, 19 Aug 2015 16:44:08 +0000 (17:44 +0100)]
ITS#8082 plug benign memleak

9 years agoITS#8218 zero filter after freeing
Howard Chu [Wed, 19 Aug 2015 14:25:46 +0000 (15:25 +0100)]
ITS#8218 zero filter after freeing

This appears to be cruft leftover from rev e8c58b4e7f21caa6c0b6006e3528cbad9b8aed45

9 years agoITS#8220 restore refint performance
Howard Chu [Wed, 19 Aug 2015 13:04:15 +0000 (14:04 +0100)]
ITS#8220 restore refint performance

9 years agoITS#8185 fix OID collision
Howard Chu [Sat, 15 Aug 2015 00:42:12 +0000 (01:42 +0100)]
ITS#8185 fix OID collision

9 years agoITS#8185 missing schema reference
Howard Chu [Fri, 14 Aug 2015 23:56:50 +0000 (00:56 +0100)]
ITS#8185 missing schema reference

9 years agoStrip down even more
Howard Chu [Wed, 3 Dec 2014 15:19:01 +0000 (15:19 +0000)]
Strip down even more

syslogd always overrides the timestamp, so just omit it
Don't use *printf if we don't need to.

9 years agoUse batched write txns in refresh
Howard Chu [Tue, 3 Feb 2015 08:21:13 +0000 (08:21 +0000)]
Use batched write txns in refresh

Experimental - write 500 updates per txn instead of 1:1

9 years agoITS#8133 avoid mods during dds_db_open
Ryan Tandy [Thu, 7 May 2015 04:39:10 +0000 (21:39 -0700)]
ITS#8133 avoid mods during dds_db_open

If dds is present early in the overlay stack, the modify ops from
dds_expire can trigger other overlays before they have initialized.
Avoid that by delaying the first expiry until startup has finished.

9 years agoFix copy/paste error in prev commit
Howard Chu [Fri, 14 Aug 2015 14:33:32 +0000 (15:33 +0100)]
Fix copy/paste error in prev commit

9 years agoITS#8185 add pwdMaxRecordedFailure
Howard Chu [Fri, 14 Aug 2015 14:19:46 +0000 (15:19 +0100)]
ITS#8185 add pwdMaxRecordedFailure

Limit the number of pwdFailureTime stamps to record, regardless
of lockout settings.

9 years agoMerge remote-tracking branch 'origin/mdb.RE/0.9'
Howard Chu [Fri, 14 Aug 2015 00:03:42 +0000 (01:03 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'

9 years agoRelease 0.9.16 LMDB_0.9.16
Howard Chu [Fri, 14 Aug 2015 00:00:38 +0000 (01:00 +0100)]
Release 0.9.16

9 years agoMore filter tweaks
Howard Chu [Mon, 10 Aug 2015 18:36:06 +0000 (19:36 +0100)]
More filter tweaks

9 years agoShortcut name mapping
Howard Chu [Sun, 9 Aug 2015 19:56:23 +0000 (20:56 +0100)]
Shortcut name mapping

If the naming attribute is in the RDN we don't need to look it up.

9 years agoITS#8213 fix deleting rewrite rules
Ryan Tandy [Fri, 7 Aug 2015 21:03:45 +0000 (14:03 -0700)]
ITS#8213 fix deleting rewrite rules

From ITS#5940. Add path has the same code.

9 years agoMore filter mapping
Howard Chu [Fri, 7 Aug 2015 01:49:33 +0000 (02:49 +0100)]
More filter mapping

Was only handling (objectclass=<group>)(<memberUid>=bar).
Now handles (objectclass=<group>)(<groupname>=bar) too.

9 years agoAvoid timing issues in pcache
Howard Chu [Tue, 4 Aug 2015 12:27:01 +0000 (13:27 +0100)]
Avoid timing issues in pcache

9 years agoAvoid hex timestamp in middle of lines
Howard Chu [Tue, 4 Aug 2015 12:24:52 +0000 (13:24 +0100)]
Avoid hex timestamp in middle of lines

Tweaks commit 8d74f717ff8390e5ba611b170d8cf4b427e59114
Don't worry about threading/race conditions here, it's not important

9 years agoFix interaction with rwm
Howard Chu [Fri, 31 Jul 2015 23:35:44 +0000 (00:35 +0100)]
Fix interaction with rwm

9 years agoAlso remap explicitly requested attr names
Howard Chu [Fri, 31 Jul 2015 23:20:49 +0000 (00:20 +0100)]
Also remap explicitly requested attr names

9 years agoMerge remote-tracking branch 'origin/mdb.RE/0.9'
Howard Chu [Wed, 29 Jul 2015 23:55:37 +0000 (00:55 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'

9 years agoITS#8192 fix reference to EINTR on WIN32 from ITS#8106
Howard Chu [Wed, 29 Jul 2015 19:01:34 +0000 (20:01 +0100)]
ITS#8192 fix reference to EINTR on WIN32 from ITS#8106

9 years agoUpdated for ITS#8181, #8190, #8200
Howard Chu [Tue, 28 Jul 2015 14:20:43 +0000 (15:20 +0100)]
Updated for ITS#8181, #8190, #8200

9 years agoMerge remote-tracking branch 'origin/mdb.RE/0.9'
Howard Chu [Tue, 28 Jul 2015 14:14:10 +0000 (15:14 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'

9 years agoITS#8200 Fix mdb_midl_shrink() usage, return void
Hallvard Furuseth [Sun, 19 Jul 2015 19:18:31 +0000 (21:18 +0200)]
ITS#8200 Fix mdb_midl_shrink() usage, return void

9 years agoITS#8181 Verify that records are/aren't DBs.
Hallvard Furuseth [Sat, 11 Jul 2015 19:01:40 +0000 (21:01 +0200)]
ITS#8181 Verify that records are/aren't DBs.

Except we don't catch the user passing F_SUBDATA to
mdb_cursor_<put/del>, like an internal LMDB call.

9 years agoITS#8190 fix cursor EOF bug
Howard Chu [Tue, 7 Jul 2015 12:41:32 +0000 (13:41 +0100)]
ITS#8190 fix cursor EOF bug

9 years agoFix filter init
Howard Chu [Tue, 28 Jul 2015 11:10:54 +0000 (12:10 +0100)]
Fix filter init

compound filters f_next is not ignored

9 years agoMore tweaks
Howard Chu [Sat, 25 Jul 2015 22:23:41 +0000 (23:23 +0100)]
More tweaks

Check for error on internal search, init AttributeAssertions in
constructed filter

9 years agotweak filter mapping in prev commit
Howard Chu [Sat, 25 Jul 2015 21:31:43 +0000 (22:31 +0100)]
tweak filter mapping in prev commit

Don't bypass downcasing

9 years agoAdd filter remapping
Howard Chu [Sat, 25 Jul 2015 21:23:46 +0000 (22:23 +0100)]
Add filter remapping

9 years agoITS#8203 plug leak in prev commit
Howard Chu [Fri, 24 Jul 2015 18:32:19 +0000 (19:32 +0100)]
ITS#8203 plug leak in prev commit

9 years agoITS#8203 more fixes for #8036/#7904.
Howard Chu [Fri, 24 Jul 2015 17:34:11 +0000 (18:34 +0100)]
ITS#8203 more fixes for #8036/#7904.

9 years agoITS#8199 fix NULL ptr dereference in at_next
Ryan Tandy [Fri, 17 Jul 2015 22:46:32 +0000 (15:46 -0700)]
ITS#8199 fix NULL ptr dereference in at_next

Deleting all values of olcAttributeTypes and then adding a value with
index > 0 triggers a NULL dereference when config_generic tries to
append to a list that doesn't exist yet.

Already fixed for olcObjectClasses in ITS#5388.

9 years agoITS#8201 LDAPSTACKGUARD feature
Howard Chu [Thu, 16 Jul 2015 17:58:23 +0000 (18:58 +0100)]
ITS#8201 LDAPSTACKGUARD feature

9 years agoITS#8173 fix SEGV after failed retry
Howard Chu [Thu, 16 Jul 2015 02:29:06 +0000 (03:29 +0100)]
ITS#8173 fix SEGV after failed retry

9 years agoFix setting authTimestamp on non-TOTP binds
Howard Chu [Thu, 16 Jul 2015 02:28:37 +0000 (03:28 +0100)]
Fix setting authTimestamp on non-TOTP binds

9 years agoPlug memleak on mismatched length
Howard Chu [Mon, 13 Jul 2015 16:17:42 +0000 (17:17 +0100)]
Plug memleak on mismatched length

9 years agoITS#8195 fix ITS#7027 regression, port number sign bit overflow
Howard Chu [Sun, 12 Jul 2015 10:14:33 +0000 (11:14 +0100)]
ITS#8195 fix ITS#7027 regression, port number sign bit overflow

Another bug from 5de85b922aaa5bfa6eb53db6000adf01ebdb0736

9 years agoITS#8184 avoid redundant mod ops
Howard Chu [Thu, 9 Jul 2015 18:11:22 +0000 (19:11 +0100)]
ITS#8184 avoid redundant mod ops

If multiple ppolicy overlays are present on a glued tree, they all
attempt to update the policy operational attributes in response to
password-related activities. The redundant mod ops will cause the
entire op to fail. Check for these ops before inserting new ones.

9 years agoRevert unintended commit
Howard Chu [Wed, 8 Jul 2015 13:25:52 +0000 (14:25 +0100)]
Revert unintended commit

9 years agoExperimental syslog() replacement
Howard Chu [Wed, 8 Jul 2015 13:22:29 +0000 (14:22 +0100)]
Experimental syslog() replacement

2-3x faster than libc. Add it to the Makefile yourself if you want to test it.

9 years agoFix whitespace in manpage
Howard Chu [Tue, 7 Jul 2015 18:08:54 +0000 (19:08 +0100)]
Fix whitespace in manpage

9 years agoITS#8056
Quanah Gibson-Mount [Mon, 6 Jul 2015 16:49:24 +0000 (11:49 -0500)]
ITS#8056
Regenerate configure

9 years agoNew ADremap overlay
Howard Chu [Fri, 3 Jul 2015 19:11:25 +0000 (20:11 +0100)]
New ADremap overlay

9 years agoFix cfg OID typos
Howard Chu [Fri, 3 Jul 2015 09:52:20 +0000 (10:52 +0100)]
Fix cfg OID typos

9 years agoMerge authTimestamp from lastbind overlay
Howard Chu [Thu, 2 Jul 2015 19:12:51 +0000 (20:12 +0100)]
Merge authTimestamp from lastbind overlay

This code duplicates the basic function of lastbind. The two overlays
cannot be used together. The timestamp Mod op is changed to require
the old value to still be present at the end of the Bind. This allows
us to detect collisions (multiple successful Binds in the same time
window) and properly fail the extra Bind attempts.

9 years agoReturn to Release Engineering
Howard Chu [Thu, 2 Jul 2015 17:04:25 +0000 (18:04 +0100)]
Return to Release Engineering

9 years agoAdd TOTP pw mechanism
Howard Chu [Thu, 2 Jul 2015 16:05:14 +0000 (17:05 +0100)]
Add TOTP pw mechanism

9 years agoMerge remote-tracking branch 'origin/mdb.RE/0.9'
Quanah Gibson-Mount [Sun, 21 Jun 2015 00:18:13 +0000 (19:18 -0500)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'

9 years agoRelease 0.9.15 LMDB_0.9.15
Howard Chu [Fri, 19 Jun 2015 13:10:32 +0000 (14:10 +0100)]
Release 0.9.15

9 years agoITS#8158 Fix sendto() address length for CLDAP
Hallvard Furuseth [Mon, 15 Jun 2015 17:57:48 +0000 (19:57 +0200)]
ITS#8158 Fix sendto() address length for CLDAP

9 years agoMerge remote-tracking branch 'origin/mdb.RE/0.9'
Quanah Gibson-Mount [Fri, 5 Jun 2015 20:50:26 +0000 (15:50 -0500)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'

9 years agoUpdate for mdb_env_open
Hallvard Furuseth [Tue, 2 Jun 2015 19:07:33 +0000 (21:07 +0200)]
Update for mdb_env_open

9 years agoClarify mdb_env_open() doc of 'mode' param
Hallvard Furuseth [Tue, 2 Jun 2015 18:49:33 +0000 (20:49 +0200)]
Clarify mdb_env_open() doc of 'mode' param

9 years agoMerge remote-tracking branch 'origin/mdb.RE/0.9'
Quanah Gibson-Mount [Mon, 1 Jun 2015 21:28:24 +0000 (16:28 -0500)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'

9 years agomore CHANGES
Hallvard Furuseth [Fri, 29 May 2015 01:08:32 +0000 (03:08 +0200)]
more CHANGES

9 years agoITS#8156
Hallvard Furuseth [Thu, 28 May 2015 19:13:24 +0000 (21:13 +0200)]
ITS#8156

9 years agoITS#8156 Fix MDB_MAXKEYSIZE doc
Hallvard Furuseth [Thu, 28 May 2015 18:51:24 +0000 (20:51 +0200)]
ITS#8156 Fix MDB_MAXKEYSIZE doc

9 years agoITS#8157
Hallvard Furuseth [Wed, 27 May 2015 22:12:53 +0000 (00:12 +0200)]
ITS#8157

9 years agoITS#8157 mdb_txn_renew0(): init after error checks
Hallvard Furuseth [Wed, 27 May 2015 20:26:54 +0000 (22:26 +0200)]
ITS#8157 mdb_txn_renew0(): init after error checks

9 years agomtest*.c: Fix MDB_NOOVERWRITE, plug cursor leak
Hallvard Furuseth [Wed, 20 May 2015 01:17:47 +0000 (03:17 +0200)]
mtest*.c: Fix MDB_NOOVERWRITE, plug cursor leak

9 years agoITS#8117 Fix MDB_INTEGERDUP keysize doc + md_dcmp
Hallvard Furuseth [Tue, 19 May 2015 18:33:35 +0000 (20:33 +0200)]
ITS#8117 Fix MDB_INTEGERDUP keysize doc + md_dcmp

9 years agoITS#7769 Fix typo in slapd-meta manpage.
Jan Synacek [Tue, 17 Dec 2013 11:21:57 +0000 (12:21 +0100)]
ITS#7769 Fix typo in slapd-meta manpage.

9 years agoITS#8142 cleanup prev commit
Howard Chu [Thu, 21 May 2015 00:20:16 +0000 (01:20 +0100)]
ITS#8142 cleanup prev commit

Only drop connection if user originally bound to this backend,
and rebind-as-user was set. Sessions from other backends would
use idassert-bind so loss of creds doesn't affect them.

9 years agoITS#8129 fix typo from ITS#6613
Howard Chu [Wed, 20 May 2015 22:46:51 +0000 (23:46 +0100)]
ITS#8129 fix typo from ITS#6613

9 years agoITS#8150 let check_name_index handle frontend
Ryan Tandy [Wed, 20 May 2015 21:39:08 +0000 (14:39 -0700)]
ITS#8150 let check_name_index handle frontend

The fix for ITS#7016 only adjusted the frontend entry's DN, but not the
naming attribute in the entry. check_name_index knows how to do both.

9 years agoITS#8146 fix off-by-1 in prev commit
Howard Chu [Tue, 19 May 2015 20:21:54 +0000 (21:21 +0100)]
ITS#8146 fix off-by-1 in prev commit

9 years agoITS#8142 drop client connection on remote failure
Howard Chu [Tue, 19 May 2015 14:37:24 +0000 (15:37 +0100)]
ITS#8142 drop client connection on remote failure

also cleanup of return-code handling

9 years agoITS#8146 tweak prev commit
Howard Chu [Mon, 18 May 2015 17:06:58 +0000 (18:06 +0100)]
ITS#8146 tweak prev commit

Test less likely condition first

9 years agoITS#8146 fix mdb_filter_candidates for unindexed attr
Howard Chu [Mon, 18 May 2015 16:55:04 +0000 (17:55 +0100)]
ITS#8146 fix mdb_filter_candidates for unindexed attr

Change result of MDB_IDL_ALL() to use the last entryID in the DB
instead of NOID.

9 years agoITS#8127 fix ftello for Win32
Howard Chu [Thu, 7 May 2015 09:45:28 +0000 (10:45 +0100)]
ITS#8127 fix ftello for Win32

9 years agoITS#8131 fix typo in prev commit
Emmanuel Lécharny [Wed, 6 May 2015 15:47:28 +0000 (16:47 +0100)]
ITS#8131 fix typo in prev commit

9 years agoITS#8131 improve back-meta logs
Howard Chu [Wed, 6 May 2015 15:36:32 +0000 (16:36 +0100)]
ITS#8131 improve back-meta logs