ITS#6955 smbk5pwd: Support shadowLastChange

Fix typo -- hyc

ITS#6872

ITS#6872

Perform the internal FIND_CSN search based at the backend's suffix with the
privileges of the backend's root DN.

ITS#6936

ITS#6936 add connID and peername to auditlog

From ksmith @ ycp.edu, with fixes by hyc

ITS#6906

ITS#6906 Update cachesize recommendations

to remove references to indexes in Hash format

Fix whitespace error -- hyc

ITS#6905

ITS#6905 Update intro of slapd-config/slapd.conf

ITS#6904

ITS#6904 Update to reflect that hdb is preferred

Tweak wording -- hyc

ITS#6934

ITS#6934 fix typo

ITS#6901

ITS#6901 fix filter with zero-length values

ITS#6889 regenerate configure

ITS#6889

ITS#6889 libfetch is a libldap dependency

ITS#6828

ITS#6828 fix TLS setup with async connect

ITS#6641

ITS#6641 Bypass checks on ops with managedsait

Document the uniqueness changes

Fix whitespace in original patch -- hyc

it really was for 6717, fixing

ITS#6717 refine mincsn check for MMR

Fix ITS 6717 to be ITS6716 in CHANGES

ITS#6711

Cleanup priv/idassert choice: check for configured bind method, not authcDN

ITS#6711 use idassert TLS conf for priv connection if aclbind not set

fix commit 1.268, related to ITS#6817

use (noncritical) whoami extop during SASL bind (ITS#6817)

use (noncritical) authzid control during SASL bind (ITS#6817)

ITS#6711 minimal tweaks for aclbind/idassertbind for privileged connection
in dobind_int().

ITS#6815 logbase keyword

ITS#6815

More for ITS#6815, Unbind and Abandon

Fix uninit'd var

Fix prev commit

ITS#6815 add logbase option, to only log requests matching a given suffix

ignore attrs in search request that do not conform to RFC 4511 4.5.1.8. or standard track extensions (ITS#6819)

ignore empty attrs in search requests (ITS#6819; see also ITS#6652)

ITS#6843

ITS#6843 Fix cn=config slapadd for global overlays with private
database instances (e.g. slapo-chain)

ITS#6899

ITS#6899

tag read entry response control value with [APPLICATION 4] (SearchResultEntry)

fix typo in previous commit

ITS#6948 partial revert of #6837, unnecessary

First underlying LDAP database needs special treatment upon deletion

Allow deletion of chain overlay's back-ldap databases

ITS#6948 fix ITS#6837 patch

ITS#6963

ITS#6963 config entries' objectclass is read-only

ITS#6831 don't push stack unless needed

Fix ce9bbd2 missing success return

ITS#6831 additional filter cmp fixes

ITS#6946

ITS#6946 fix double-free, broken by 77a7ef0

ITS#6831

ITS#6831 fix filter comparison

ITS#6959

ITS#6959 document ldap_dnfree()

Drop note about slapcat for mirrormode

slapcat will always be self-consistent since the contextCSN is
snapshotted at the beginning of the dump.

More for ITS#6961 - deadlock checking

ITS#6961

Fix for sparse ranges, get next ID from DB

Instead of iterating thru potentially many nonexistent IDs

ITS#6954

ITS#6954 fix consistency checker prematurely deleting cached queries

fix uninitialized bindref_time (found with valgrind)

ITS#6953

ITS#6953 do not use the cache db when refreshing

ITS#6915 document replication behavior

ITS#6915 and related reverts

ITS#6915 Don't replicate internal operations

Revert "update entryCSN (and operational attrs in general) when changing memberOf (ITS#6329)"

This reverts commit 716eaf0e8b3554d8a1629970cab5490c9ffab97c.

Revert "force the generation of a new CSN (ITS#6766)"

This reverts commit 53343b421cddb808f03fb4639e57ed52850b53d9.

Revert "ITS#6915 fix op timestamps"

This reverts commit 81687b321ca878e27824e017a111455e47c6231b.

ITS#6935

ITS#6935 Fix uninitialized cert-syntax vars.

serialNumberAndIssuerNormalize():    s3,
attributeCertificateExactNormalize():sn2,i_sn2.

ITS#6933

ITS#6933 Add missing strdup of lutil_getRegParam()

Add GSS naming extensions ACL plugin

Add GSS naming extensions ACL plugin

ITS#6932: Move assert(str) before Debug(..str).

ITS#6932

ITS#6932: Clean up strange asserts & nearby code.

Mostly found by Klocwork: Issues #213,298-300,331,342-343,374,390,410.

ITS#6931

ITS#6931 Catch NULL ld for LDAP_OPT_SESSION_REFCNT.

Klocwork issue#111, ldap_get_option().

ITS#6929
ITS#6930

ITS#6930 Plug ldapi://too-long-path socket leak.

Klocwork issue#117, ldap_connect_to_path().

klocwork#255 Fix sprintf(%d, u_int32_t)

ITS#6929 fclose(password file) on failure.

lutil_get_filed_password() bug; klocwork issue#203.

ITS#6870 .gitignore += libldap_r/<ldif.c,fetch.c>.

Followup to moving these files to libldap/.

ITS#6950
ITS#6951

ITS#6951 Fix two buffersize issue in "pcacheBind" config processing

Found with valgrind

ITS#6950 Fix '1.1', '+' and '*' in pcacheAttrSets

ITS#6823

prefix undef attrs with undef: (ITS#6823)

ITS#6943

check sat_equality before using it (ITS#6943)

ITS#6909

ITS#6909 blind fix. re-init creds for retry.

Move retry so that cred validity is also re-checked.

ITS#6915