]> git.sur5r.net Git - openldap/log
openldap
6 years agoITS#8100 fixes for delta-syncrepl with empty accesslog
Howard Chu [Tue, 30 Jan 2018 12:12:32 +0000 (12:12 +0000)]
ITS#8100 fixes for delta-syncrepl with empty accesslog

Update syncprov contextCSNs when context entry is added.
Fix accesslog to properly tag Add op when adding context entry.

6 years agoCleanup warnings
Howard Chu [Thu, 25 Jan 2018 15:36:00 +0000 (15:36 +0000)]
Cleanup warnings

6 years agoITS#8791
Quanah Gibson-Mount [Fri, 9 Feb 2018 17:42:30 +0000 (17:42 +0000)]
ITS#8791

6 years agoITS#8791 fix OpenSSL 1.1.1 BIO_method compat
Bradley Baetz [Fri, 8 Dec 2017 00:46:40 +0000 (11:46 +1100)]
ITS#8791 fix OpenSSL 1.1.1 BIO_method compat

Use the new methods unconditionally, define helper functions for older versions.

6 years agoITS#8796
Quanah Gibson-Mount [Fri, 9 Feb 2018 17:39:17 +0000 (17:39 +0000)]
ITS#8796

6 years agoITS#8796 Fix SSF reset
Ondřej Kuzník [Mon, 15 Jan 2018 16:07:59 +0000 (16:07 +0000)]
ITS#8796 Fix SSF reset

Maintain the SSF across SASL binds.

6 years agoITS#8484
Quanah Gibson-Mount [Fri, 9 Feb 2018 17:38:30 +0000 (17:38 +0000)]
ITS#8484

6 years agoITS#8484 - Fix MozNSS initialization
Soohoon Lee [Wed, 24 Aug 2016 02:07:42 +0000 (19:07 -0700)]
ITS#8484 - Fix MozNSS initialization

6 years agoITS#8782
Quanah Gibson-Mount [Fri, 9 Feb 2018 17:36:40 +0000 (17:36 +0000)]
ITS#8782

6 years agoITS#8782 plug memleaks in cancel
Howard Chu [Mon, 4 Dec 2017 15:59:33 +0000 (15:59 +0000)]
ITS#8782 plug memleaks in cancel

6 years agoITS#8778
Quanah Gibson-Mount [Fri, 9 Feb 2018 17:35:10 +0000 (17:35 +0000)]
ITS#8778

6 years agoITS#8778 Fix telephoneNumberNormalize("-" or " ")
Hallvard Furuseth [Sun, 26 Nov 2017 20:22:23 +0000 (21:22 +0100)]
ITS#8778 Fix telephoneNumberNormalize("-" or " ")

6 years agoBuild internal avl testing tools correctly
Ondřej Kuzník [Thu, 26 Oct 2017 10:49:16 +0000 (11:49 +0100)]
Build internal avl testing tools correctly

6 years agoITS#8650
Quanah Gibson-Mount [Fri, 9 Feb 2018 17:22:56 +0000 (17:22 +0000)]
ITS#8650

6 years agoITS#8650 retry gnutls_handshake after GNUTLS_E_AGAIN
Ryan Tandy [Sat, 6 May 2017 22:50:13 +0000 (22:50 +0000)]
ITS#8650 retry gnutls_handshake after GNUTLS_E_AGAIN

7 years agoITS#8752
Quanah Gibson-Mount [Tue, 17 Oct 2017 17:11:32 +0000 (10:11 -0700)]
ITS#8752

7 years agoITS#8752 accesslog: cleanup should only be called on failures
Howard Chu [Sat, 14 Oct 2017 10:22:53 +0000 (11:22 +0100)]
ITS#8752 accesslog: cleanup should only be called on failures

7 years agoITS#8752 fix syncrepl deadlock from updateCookie
Howard Chu [Fri, 13 Oct 2017 16:25:29 +0000 (17:25 +0100)]
ITS#8752 fix syncrepl deadlock from updateCookie

Must release cookieState->cs_mutex before invoking backend.
Add a condvar to serialize calls of updateCookie, so we can
release the mutex and still update sequentially.

Also added tid logging, useful in conjunction with
7ab0e1aff0cc48cdfb299ca7dbd27900a9e3d1a8

7 years agoITS#8752 additional debug info, thread ID of rmutex lockers
Howard Chu [Fri, 13 Oct 2017 16:24:19 +0000 (17:24 +0100)]
ITS#8752 additional debug info, thread ID of rmutex lockers

7 years agoITS#8752 fix syncrepl null_callback
Howard Chu [Thu, 5 Oct 2017 21:13:39 +0000 (22:13 +0100)]
ITS#8752 fix syncrepl null_callback

Make sure it's last in callback stack

7 years agoITS#8752 - Add regression test
Quanah Gibson-Mount [Thu, 5 Oct 2017 03:36:25 +0000 (20:36 -0700)]
ITS#8752 - Add regression test

7 years agoITS#8444 - Add regression test
Quanah Gibson-Mount [Tue, 10 Jan 2017 19:30:15 +0000 (11:30 -0800)]
ITS#8444 - Add regression test

7 years agoITS#8692
Quanah Gibson-Mount [Wed, 11 Oct 2017 20:08:53 +0000 (13:08 -0700)]
ITS#8692

7 years agoITS#8692 let back-sock generate increment: line in case of LDAP_MOD_INCREMENT (see...
Michael Ströder [Wed, 12 Jul 2017 18:18:22 +0000 (20:18 +0200)]
ITS#8692 let back-sock generate increment: line in case of LDAP_MOD_INCREMENT (see RFC 4525, section 3)

7 years agoITS#7389
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:47:24 +0000 (12:47 -0700)]
ITS#7389

7 years agoITS#7389 - MozNSS: load certificates from certdb, fallback to PEM
Jan Vcelak [Fri, 14 Sep 2012 12:24:29 +0000 (14:24 +0200)]
ITS#7389 - MozNSS: load certificates from certdb, fallback to PEM

If TLS_CACERT pointed to a PEM file and TLS_CACERTDIR was set to NSS
certificate database, the backend assumed that the certificate is always
located in the certificate database. This assumption might be wrong.

This patch makes the library to try to load the certificate from NSS
database and fallback to PEM file if unsuccessfull.

7 years agoITS#8167 Fix non-blocking TLS with referrals
Ian Puleston [Fri, 19 Sep 2014 01:48:50 +0000 (18:48 -0700)]
ITS#8167 Fix non-blocking TLS with referrals

7 years agoITS#8687
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:45:11 +0000 (12:45 -0700)]
ITS#8687

7 years agoITS#8687 - EGD is disabled by default in OpenSSL 1.1. We need to comment out this...
Quanah Gibson-Mount [Fri, 22 Sep 2017 21:25:20 +0000 (14:25 -0700)]
ITS#8687 - EGD is disabled by default in OpenSSL 1.1. We need to comment out this block if it is not detected. Particularly affects cross compilation.

7 years agoITS#8583
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:43:29 +0000 (12:43 -0700)]
ITS#8583

7 years agoITS#8583 - Fix C++ LDAP Control structure
Quanah Gibson-Mount [Wed, 5 Jul 2017 20:14:54 +0000 (13:14 -0700)]
ITS#8583 - Fix C++ LDAP Control structure

7 years agoITS#8578
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:41:57 +0000 (12:41 -0700)]
ITS#8578

7 years agoITS#8578 - remove unused-variables in RE24 testing call (2.4.45)
sca+openldap@andreasschulze.de [Fri, 1 Sep 2017 23:31:52 +0000 (16:31 -0700)]
ITS#8578 - remove unused-variables in RE24 testing call (2.4.45)

7 years agoITS#8404
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:40:07 +0000 (12:40 -0700)]
ITS#8404

7 years agoITS#8404 Fix an assertion failure during modify of olcDbRewrite in back-meta
Nadezhda Ivanova [Tue, 12 Sep 2017 14:14:30 +0000 (17:14 +0300)]
ITS#8404 Fix an assertion failure during modify of olcDbRewrite in back-meta

7 years agoITS#8121
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:39:03 +0000 (12:39 -0700)]
ITS#8121

7 years agoITS#8121 - Note ldap_sasl_bind and ldap_sasl_bind_s can be used to make simple binds...
Quanah Gibson-Mount [Sun, 23 Apr 2017 22:30:07 +0000 (15:30 -0700)]
ITS#8121 - Note ldap_sasl_bind and ldap_sasl_bind_s can be used to make simple binds via the LDAP_SASL_SIMPLE mechanism

7 years agoITS#7520
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:37:48 +0000 (12:37 -0700)]
ITS#7520

7 years agoITS#7520 - back-ldap omit-unknown-schema changes
Ted C. Cheng [Fri, 6 Feb 2015 01:19:39 +0000 (17:19 -0800)]
ITS#7520 - back-ldap omit-unknown-schema changes

7 years agoITS#7374
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:36:00 +0000 (12:36 -0700)]
ITS#7374

7 years agoITS#7374 - MozNSS: better file name matching for hashed CA certificate directory
Jan Vcelak [Wed, 29 Aug 2012 14:23:52 +0000 (16:23 +0200)]
ITS#7374 - MozNSS: better file name matching for hashed CA certificate directory

CA certificate files in OpenSSL compatible CACERTDIR were loaded if the
file extension was '.0'. However the file name should be 8 letters long
certificate hash of the certificate subject name, followed by a numeric
suffix which is used to differentiate between two certificates with the
same subject name.

Wit this patch, certificate file names are matched correctly (using
regular expressions).

7 years agoITS#7373
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:34:13 +0000 (12:34 -0700)]
ITS#7373

7 years agoITS#7373 - TLS: do not reuse tls_session if hostname check fails
Jan Vcelak [Tue, 28 Aug 2012 14:57:54 +0000 (16:57 +0200)]
ITS#7373 - TLS: do not reuse tls_session if hostname check fails

If multiple servers are specified, the connection to the first one
succeeds, and the hostname verification fails, *tls_session is not
dropped, but reused when connecting to the second server.

This is a problem with Mozilla NSS backend because another handshake
cannot be performed on the same file descriptor. From this reason,
hostname checking was moved into ldap_int_tls_connect() before
connection error handling.

7 years agoITS#7100
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:29:45 +0000 (12:29 -0700)]
ITS#7100

7 years agoITS#7100 Update entryTtl behaviour to match RFC 2589
Ondřej Kuzník [Sun, 22 Nov 2015 18:32:43 +0000 (18:32 +0000)]
ITS#7100 Update entryTtl behaviour to match RFC 2589

7 years agoITS#7100 Test for entryTtl reflecting time to live
Ondřej Kuzník [Sun, 22 Nov 2015 18:31:30 +0000 (18:31 +0000)]
ITS#7100 Test for entryTtl reflecting time to live

7 years agoITS#5048
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:28:36 +0000 (12:28 -0700)]
ITS#5048

7 years agoITS#5048 - index on entryCSN is mandatory
Quanah Gibson-Mount [Thu, 7 Sep 2017 15:44:28 +0000 (08:44 -0700)]
ITS#5048 - index on entryCSN is mandatory

7 years agoITS#8717, ITS#8720, ITS#8226
Quanah Gibson-Mount [Wed, 11 Oct 2017 19:16:35 +0000 (12:16 -0700)]
ITS#8717, ITS#8720, ITS#8226

7 years agoITS#8717 call connection delete callbacks
Howard Chu [Wed, 6 Sep 2017 20:46:09 +0000 (21:46 +0100)]
ITS#8717 call connection delete callbacks

When TLS fails to start

7 years agoITS#8720 use the configured exop timeout for StartTLS
Howard Chu [Thu, 31 Aug 2017 15:53:45 +0000 (16:53 +0100)]
ITS#8720 use the configured exop timeout for StartTLS

Also, there's no need for a retry loop here. Just wait for
the specified timeout or give up.

7 years agoITS#8226 optimization
Howard Chu [Tue, 1 Aug 2017 21:08:50 +0000 (22:08 +0100)]
ITS#8226 optimization

Don't release read txn unless there has actually been a new write txn

7 years agoFix typo "errror" -> "error"
Quanah Gibson-Mount [Fri, 8 Sep 2017 19:03:02 +0000 (12:03 -0700)]
Fix typo "errror" -> "error"

7 years agoITS#8444
Quanah Gibson-Mount [Tue, 12 Sep 2017 23:40:05 +0000 (16:40 -0700)]
ITS#8444

7 years agoITS#8444 Do not clear the pending operation when checkpointing
Ondřej Kuzník [Fri, 25 Aug 2017 15:25:23 +0000 (16:25 +0100)]
ITS#8444 Do not clear the pending operation when checkpointing

When a checkpoint happens, if we remove the CSN from the pending list,
accesslog won't pass it onto the accesslog DB. But in a delta-mmr
scenario, an accesslog entry without a CSN faces a race where it might
be applied twice - that usually fails and causes a full refresh, other
times it can cause a silent desync - both are undesirable.

7 years agoITS#8690
Quanah Gibson-Mount [Tue, 12 Sep 2017 23:38:28 +0000 (16:38 -0700)]
ITS#8690

7 years agoITS#8690 plug memleak on Delete ops
Howard Chu [Fri, 21 Jul 2017 18:04:08 +0000 (19:04 +0100)]
ITS#8690 plug memleak on Delete ops

7 years agoITS#8715
Quanah Gibson-Mount [Tue, 12 Sep 2017 23:33:45 +0000 (16:33 -0700)]
ITS#8715

7 years agoITS#8715 Fix typo with olcTLSCiphersuite
Quanah Gibson-Mount [Mon, 21 Aug 2017 16:19:12 +0000 (09:19 -0700)]
ITS#8715 Fix typo with olcTLSCiphersuite

7 years agoITS#8713
Quanah Gibson-Mount [Tue, 12 Sep 2017 23:32:58 +0000 (16:32 -0700)]
ITS#8713

7 years agoITS#8713 Delete stub man page for LDBM
Quanah Gibson-Mount [Wed, 16 Aug 2017 15:50:22 +0000 (08:50 -0700)]
ITS#8713 Delete stub man page for LDBM

7 years agoITS#8705
Quanah Gibson-Mount [Tue, 12 Sep 2017 23:30:50 +0000 (16:30 -0700)]
ITS#8705

7 years agoITS#8697
Quanah Gibson-Mount [Tue, 12 Sep 2017 23:28:38 +0000 (16:28 -0700)]
ITS#8697

7 years agoITS#8705 fix service pathname
Howard Chu [Thu, 3 Aug 2017 11:42:21 +0000 (12:42 +0100)]
ITS#8705 fix service pathname

Strip trailing space of last pathname component, if any. Not first.

7 years agoITS#8697 - For Windows builds with newer MINGW, remove refptr symbols
Quanah Gibson-Mount [Fri, 21 Jul 2017 00:11:01 +0000 (17:11 -0700)]
ITS#8697 - For Windows builds with newer MINGW, remove refptr symbols
mappings from slapd.def

7 years agoFix missing index on reqResult
Quanah Gibson-Mount [Fri, 23 Jun 2017 16:44:46 +0000 (09:44 -0700)]
Fix missing index on reqResult

7 years agoFix minor typo
Quanah Gibson-Mount [Thu, 1 Jun 2017 23:27:53 +0000 (16:27 -0700)]
Fix minor typo

7 years agoRemove whitespace
Quanah Gibson-Mount [Thu, 1 Jun 2017 21:38:01 +0000 (14:38 -0700)]
Remove whitespace

7 years agoReturn to Release Engineering
Quanah Gibson-Mount [Thu, 1 Jun 2017 21:37:41 +0000 (14:37 -0700)]
Return to Release Engineering

7 years agoITS#7700 - Fix missing end brace OPENLDAP_REL_ENG_2_4_45
Quanah Gibson-Mount [Thu, 1 Jun 2017 20:01:07 +0000 (13:01 -0700)]
ITS#7700 - Fix missing end brace

7 years agoPrep for release
Quanah Gibson-Mount [Thu, 1 Jun 2017 17:18:26 +0000 (10:18 -0700)]
Prep for release

7 years agoMerge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_4
Quanah Gibson-Mount [Thu, 1 Jun 2017 17:09:45 +0000 (10:09 -0700)]
Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_4

7 years agoRelease 0.9.21 LMDB_0.9.21
Howard Chu [Thu, 1 Jun 2017 16:51:10 +0000 (17:51 +0100)]
Release 0.9.21

7 years agoITS#8655
Quanah Gibson-Mount [Mon, 22 May 2017 19:08:55 +0000 (12:08 -0700)]
ITS#8655

7 years agoITS#8655 fix double free on paged search with pagesize 0
Ryan Tandy [Thu, 18 May 2017 03:07:39 +0000 (20:07 -0700)]
ITS#8655 fix double free on paged search with pagesize 0

Fixes a double free when a search includes the Paged Results control
with a page size of 0 and the search base matches the filter.

7 years agoITS#8648
Quanah Gibson-Mount [Wed, 10 May 2017 16:52:39 +0000 (09:52 -0700)]
ITS#8648

7 years agoITS#8648 check result of ldap_int_initialize in ldap_{get,set}_option
Ryan Tandy [Sun, 7 May 2017 20:16:00 +0000 (20:16 +0000)]
ITS#8648 check result of ldap_int_initialize in ldap_{get,set}_option

7 years agoITS#8648 init SASL library in global init
Ryan Tandy [Fri, 5 May 2017 03:08:07 +0000 (03:08 +0000)]
ITS#8648 init SASL library in global init

7 years agoITS#8592
Quanah Gibson-Mount [Wed, 26 Apr 2017 20:12:38 +0000 (13:12 -0700)]
ITS#8592

7 years agoITS#8592 Fix double free in sssvlv overlay
Kevin Lam [Tue, 21 Feb 2017 04:20:38 +0000 (12:20 +0800)]
ITS#8592 Fix double free in sssvlv overlay

7 years agoITS#8123
Quanah Gibson-Mount [Wed, 26 Apr 2017 20:07:29 +0000 (13:07 -0700)]
ITS#8123

7 years agoITS#8123 - Fix wording to match examples
Quanah Gibson-Mount [Sun, 23 Apr 2017 22:13:23 +0000 (15:13 -0700)]
ITS#8123 - Fix wording to match examples

7 years agoFix slapo-pcache to use mdb as the example backend
Quanah Gibson-Mount [Tue, 25 Apr 2017 23:09:22 +0000 (16:09 -0700)]
Fix slapo-pcache to use mdb as the example backend

7 years agoITS#8644 fix previous commit: initialize KILLPIDS
Ryan Tandy [Tue, 25 Apr 2017 01:53:56 +0000 (01:53 +0000)]
ITS#8644 fix previous commit: initialize KILLPIDS

7 years agoITS#8644
Quanah Gibson-Mount [Wed, 26 Apr 2017 20:05:16 +0000 (13:05 -0700)]
ITS#8644

7 years agoITS#8644 wait for slapd to start in test064
Ryan Tandy [Tue, 25 Apr 2017 01:28:25 +0000 (01:28 +0000)]
ITS#8644 wait for slapd to start in test064

7 years agoITS#8635
Quanah Gibson-Mount [Wed, 26 Apr 2017 20:04:12 +0000 (13:04 -0700)]
ITS#8635

7 years agoITS#8635 - Note that non-zero serverID's are required for MMR, and that serverID...
Quanah Gibson-Mount [Mon, 24 Apr 2017 20:15:56 +0000 (13:15 -0700)]
ITS#8635 - Note that non-zero serverID's are required for MMR, and that serverID 0 is specific to single master replication only

7 years agoITS#8613
Quanah Gibson-Mount [Wed, 26 Apr 2017 20:02:59 +0000 (13:02 -0700)]
ITS#8613

7 years agoITS#8613 - Note that slapo-memberOf should not be used in a replicated environment
Quanah Gibson-Mount [Sun, 23 Apr 2017 19:23:56 +0000 (12:23 -0700)]
ITS#8613 - Note that slapo-memberOf should not be used in a replicated environment

7 years agoITS#8344
Quanah Gibson-Mount [Wed, 26 Apr 2017 20:01:32 +0000 (13:01 -0700)]
ITS#8344

7 years agoITS#8344 - accesslog database should not be replicated
Jephte CLAIN [Thu, 31 Dec 2015 08:03:56 +0000 (12:03 +0400)]
ITS#8344 - accesslog database should not be replicated

7 years agoITS#8643 - Fix typo
Quanah Gibson-Mount [Tue, 18 Apr 2017 15:01:26 +0000 (08:01 -0700)]
ITS#8643 - Fix typo

7 years agoITS#8634
Quanah Gibson-Mount [Fri, 14 Apr 2017 19:38:39 +0000 (12:38 -0700)]
ITS#8634

7 years agoITS#8634 - Fix DES API function calls to current DES API
Quanah Gibson-Mount [Fri, 14 Apr 2017 17:50:46 +0000 (10:50 -0700)]
ITS#8634 - Fix DES API function calls to current DES API

7 years agoITS#8631
Quanah Gibson-Mount [Fri, 14 Apr 2017 19:37:07 +0000 (12:37 -0700)]
ITS#8631

7 years agoITS#8631 Initialize sal
Ondřej Kuzník [Mon, 10 Apr 2017 09:42:46 +0000 (10:42 +0100)]
ITS#8631 Initialize sal

7 years agoITS#6545
Quanah Gibson-Mount [Fri, 7 Apr 2017 21:41:23 +0000 (14:41 -0700)]
ITS#6545

7 years agoITS#6545 Update accesslog format and syncrepl consumer
Ondřej Kuzník [Tue, 4 Apr 2017 17:24:57 +0000 (18:24 +0100)]
ITS#6545 Update accesslog format and syncrepl consumer

Make two successive modifications of the same attribute separate. This
lets the consumer interpret the log entry the same way as the server
that produced it.

Still depends on the log entry attributes being read in the same order
as they were written.

7 years agoITS#8353, ITS#8533 - Cleanup for libldap_r
Quanah Gibson-Mount [Fri, 7 Apr 2017 20:39:11 +0000 (13:39 -0700)]
ITS#8353, ITS#8533 - Cleanup for libldap_r