]>
git.sur5r.net Git - openldap/log
Howard Chu [Tue, 20 Oct 2015 20:27:21 +0000 (21:27 +0100)]
ITS#8277 simpler check for syncrepl on config DB
Windows mutexes are recursive so the trylock test will succeed
even though the mutex is already locked. Just compare be pointers.
Quanah Gibson-Mount [Tue, 20 Oct 2015 16:20:26 +0000 (11:20 -0500)]
mdb is the recommended backend to OpenLDAP
Howard Chu [Mon, 19 Oct 2015 07:52:28 +0000 (08:52 +0100)]
ITS#8273 Windows file:// URL fixup
Howard Chu [Sun, 4 Oct 2015 01:50:50 +0000 (02:50 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'
Howard Chu [Sun, 4 Oct 2015 00:56:25 +0000 (01:56 +0100)]
ITS#8258 fix rebalance/split
The tree height can also increase during rebalance, not just shrink.
This can happen if update_key needs to split a parent branch page.
Howard Chu [Fri, 2 Oct 2015 04:14:53 +0000 (05:14 +0100)]
ITS#8262 more
extended ops
Howard Chu [Fri, 2 Oct 2015 04:02:15 +0000 (05:02 +0100)]
ITS#8262 add ldap_build_*_req functions
Basic ops except abandon and unbind; since they get no reply
it's not important for the caller to know their msgID.
Howard Chu [Thu, 1 Oct 2015 22:55:10 +0000 (23:55 +0100)]
ITS#8261 change sl_mem_detach to sl_mem_setctx
Howard Chu [Wed, 30 Sep 2015 17:11:20 +0000 (18:11 +0100)]
ITS#8259 fix usage ordering
Howard Chu [Tue, 29 Sep 2015 17:16:11 +0000 (18:16 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'
Howard Chu [Tue, 29 Sep 2015 16:31:56 +0000 (17:31 +0100)]
ITS#8221 fix typos
Howard Chu [Sun, 27 Sep 2015 21:38:18 +0000 (22:38 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'
Howard Chu [Sun, 27 Sep 2015 21:37:28 +0000 (22:37 +0100)]
ITS#8221, #8256
Howard Chu [Sat, 26 Sep 2015 15:50:28 +0000 (16:50 +0100)]
ITS#8221 don't merge branch pages needlessly
Luke Yeager [Sat, 19 Sep 2015 01:06:43 +0000 (18:06 -0700)]
ITS#8256 Create install directories if needed
Howard Chu [Fri, 25 Sep 2015 18:28:18 +0000 (19:28 +0100)]
ITS#8230 add GnuTLS/nettle support
Howard Chu [Fri, 25 Sep 2015 17:53:05 +0000 (18:53 +0100)]
ITS#8230 fix padding count
Howard Chu [Fri, 25 Sep 2015 17:52:24 +0000 (18:52 +0100)]
ITS#8230 Don't skip tval on big-endian
Howard Chu [Tue, 22 Sep 2015 20:43:02 +0000 (21:43 +0100)]
ITS#8233 (#8251)
Schema parsing ignores some slapd.conf rules
Howard Chu [Thu, 17 Sep 2015 19:41:58 +0000 (20:41 +0100)]
ITS#8249 add option to return search entry
Ryan Tandy [Mon, 14 Jul 2014 16:42:14 +0000 (09:42 -0700)]
ITS#7897 fix admin guide syncrepl TLS defaults
In 2.4 syncrepl was changed to take its TLS defaults from the slapd
configuration (commit
1cc1f9b ) and the man page was updated to document
that (commit
27dd7a5 ). This updates the admin guide to match.
Howard Chu [Mon, 14 Sep 2015 04:42:20 +0000 (05:42 +0100)]
ITS#8244 skip client controls in ldap_back_entry_get()
Howard Chu [Sat, 12 Sep 2015 22:08:14 +0000 (23:08 +0100)]
ITS#7377, 8237
Howard Chu [Sun, 6 Sep 2015 18:18:19 +0000 (19:18 +0100)]
ITS#8237 fix ITS#7589 regression
Hallvard Furuseth [Sun, 23 Aug 2015 09:12:45 +0000 (11:12 +0200)]
ITS#7377 mdb_env_init_meta(): Catch calloc error
Howard Chu [Sat, 12 Sep 2015 21:18:22 +0000 (22:18 +0100)]
Revert "Revert "ITS#8240 remove obsolete assert""
We have never documented our use of assert, so can't expect
builders to do the right thing.
This reverts commit
55dd4d3275d24c5190fdfada8dfae0320628b993 .
Howard Chu [Sat, 12 Sep 2015 09:07:16 +0000 (10:07 +0100)]
Revert "ITS#8240 remove obsolete assert"
Not a bug.
This reverts commit
6fe51a9ab04fd28bbc171da3cf12f1c1040d6629 .
Howard Chu [Wed, 9 Sep 2015 23:37:32 +0000 (00:37 +0100)]
ITS#8240 remove obsolete assert
Ryan Tandy [Mon, 7 Sep 2015 04:09:51 +0000 (21:09 -0700)]
ITS#7964 avoid double-unescaping rewrite rules
config_fp_parse_line processes backslash escapes. When existing rewrite
rules were reloaded while inserting a new rule, this caused backslashes
to be lost from every rule except the most recently inserted one.
config_parse_ldif performs similar splitting, but leaves backslashes
alone.
Ryan Tandy [Sun, 6 Sep 2015 00:59:38 +0000 (17:59 -0700)]
ITS#7889 add olcDropUnrequested to olcRwmConfig
Ryan Tandy [Wed, 2 Sep 2015 20:15:23 +0000 (13:15 -0700)]
ITS#8235 fix compiler warnings
Ryan Tandy [Wed, 2 Sep 2015 02:19:57 +0000 (19:19 -0700)]
ITS#8234 revert to default policy on failure
Ryan Tandy [Wed, 2 Sep 2015 01:56:19 +0000 (18:56 -0700)]
ITS#7537 release entry on failure
Howard Chu [Tue, 1 Sep 2015 00:09:46 +0000 (01:09 +0100)]
ITS#8233 reject lines with unbalanced quotes
Howard Chu [Mon, 31 Aug 2015 13:55:35 +0000 (14:55 +0100)]
ITS#8226 leave nested ops alone
Howard Chu [Sun, 30 Aug 2015 04:46:01 +0000 (05:46 +0100)]
More for batched writes
Only usable if backend supports txns
Howard Chu [Sun, 30 Aug 2015 04:34:42 +0000 (05:34 +0100)]
More for batched writes
Howard Chu [Sun, 30 Aug 2015 04:14:17 +0000 (05:14 +0100)]
More for batched write
Howard Chu [Sun, 30 Aug 2015 04:01:59 +0000 (05:01 +0100)]
ITS#8226 revert unintended commit
Howard Chu [Thu, 27 Aug 2015 13:47:04 +0000 (14:47 +0100)]
ITS#8226 limit size of read txns in searches
Howard Chu [Sat, 29 Aug 2015 18:44:33 +0000 (19:44 +0100)]
ITS#8232 avoid redundant abandon processing
Howard Chu [Sat, 29 Aug 2015 17:29:32 +0000 (18:29 +0100)]
ITS#8231 fix ITS#8042 regression
Ryan Tandy [Sun, 23 Aug 2015 01:59:13 +0000 (18:59 -0700)]
ITS#8198 use #elif instead of #else for gnutls cases
Reserve #else for actual fallback cases.
Luca Bruno [Wed, 5 Nov 2014 14:32:33 +0000 (15:32 +0100)]
ITS#8198 Optionally use libnettle instead of OpenSSL for crypto
OpenLDAP can be configured to be either built with OpenSSL or
GnuTLS. This commit adds support for building pw-pbkbdf2 module
without OpenSSL, by using PBKDF2 crypto primitives provided by
libnettle.
Closes hamano/openldap-pbkdf2#2
Signed-off-by: Luca Bruno <luca.bruno@rocket-internet.de>
Luca Bruno [Wed, 5 Nov 2014 15:15:55 +0000 (16:15 +0100)]
ITS#8198 Fix an always-true check
Fixed asprintf return value check, in order to properly catch
error conditions. This has been caught by clang -Wtautological-compare:
pw-pbkdf2.c:132:17: warning: comparison of unsigned expression < 0 is always false
if(msg->bv_len < 0){
~~~~~~~~~~~ ^ ~
Signed-off-by: Luca Bruno <luca.bruno@rocket-internet.de>
Howard Chu [Sat, 22 Aug 2015 16:53:43 +0000 (17:53 +0100)]
Threadqueues - remove obsolete comment
Howard Chu [Sat, 22 Aug 2015 13:00:12 +0000 (14:00 +0100)]
Doc tweak - MDB_RESERVE / DUPSORT incompat
For those people who insist on ignoring the obvious.
Howard Chu [Sat, 22 Aug 2015 12:50:40 +0000 (13:50 +0100)]
More for threadqueues
Revert previous patch, just delete all the associated juggling.
No longer serves any purpose.
Howard Chu [Fri, 21 Aug 2015 20:42:25 +0000 (21:42 +0100)]
Return to release engineering
Howard Chu [Fri, 21 Aug 2015 20:40:33 +0000 (21:40 +0100)]
Another MDB_APPEND doc tweak
Missed this in
7ce29b9edbdaf34b7aeb545324008ed4dff62952
Howard Chu [Fri, 21 Aug 2015 20:19:16 +0000 (21:19 +0100)]
More for threadqueues
Catch threads that are finishing while pool was pausing
Howard Chu [Fri, 21 Aug 2015 10:39:05 +0000 (11:39 +0100)]
ITS#8220 fix prev commit
Dynamic startup was failing
HAMANO Tsukasa [Mon, 27 Apr 2015 01:27:58 +0000 (10:27 +0900)]
ITS#8114 OpenLDAP WiredTiger Backend
Howard Chu [Wed, 19 Aug 2015 16:44:08 +0000 (17:44 +0100)]
ITS#8082 plug benign memleak
Howard Chu [Wed, 19 Aug 2015 14:25:46 +0000 (15:25 +0100)]
ITS#8218 zero filter after freeing
This appears to be cruft leftover from rev
e8c58b4e7f21caa6c0b6006e3528cbad9b8aed45
Howard Chu [Wed, 19 Aug 2015 13:04:15 +0000 (14:04 +0100)]
ITS#8220 restore refint performance
Howard Chu [Sat, 15 Aug 2015 00:42:12 +0000 (01:42 +0100)]
ITS#8185 fix OID collision
Howard Chu [Fri, 14 Aug 2015 23:56:50 +0000 (00:56 +0100)]
ITS#8185 missing schema reference
Howard Chu [Wed, 3 Dec 2014 15:19:01 +0000 (15:19 +0000)]
Strip down even more
syslogd always overrides the timestamp, so just omit it
Don't use *printf if we don't need to.
Howard Chu [Tue, 3 Feb 2015 08:21:13 +0000 (08:21 +0000)]
Use batched write txns in refresh
Experimental - write 500 updates per txn instead of 1:1
Ryan Tandy [Thu, 7 May 2015 04:39:10 +0000 (21:39 -0700)]
ITS#8133 avoid mods during dds_db_open
If dds is present early in the overlay stack, the modify ops from
dds_expire can trigger other overlays before they have initialized.
Avoid that by delaying the first expiry until startup has finished.
Howard Chu [Fri, 14 Aug 2015 14:33:32 +0000 (15:33 +0100)]
Fix copy/paste error in prev commit
Howard Chu [Fri, 14 Aug 2015 14:19:46 +0000 (15:19 +0100)]
ITS#8185 add pwdMaxRecordedFailure
Limit the number of pwdFailureTime stamps to record, regardless
of lockout settings.
Howard Chu [Fri, 14 Aug 2015 00:03:42 +0000 (01:03 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'
Howard Chu [Fri, 14 Aug 2015 00:00:38 +0000 (01:00 +0100)]
Release 0.9.16
Howard Chu [Mon, 10 Aug 2015 18:36:06 +0000 (19:36 +0100)]
More filter tweaks
Howard Chu [Sun, 9 Aug 2015 19:56:23 +0000 (20:56 +0100)]
Shortcut name mapping
If the naming attribute is in the RDN we don't need to look it up.
Ryan Tandy [Fri, 7 Aug 2015 21:03:45 +0000 (14:03 -0700)]
ITS#8213 fix deleting rewrite rules
From ITS#5940. Add path has the same code.
Howard Chu [Fri, 7 Aug 2015 01:49:33 +0000 (02:49 +0100)]
More filter mapping
Was only handling (objectclass=<group>)(<memberUid>=bar).
Now handles (objectclass=<group>)(<groupname>=bar) too.
Howard Chu [Tue, 4 Aug 2015 12:27:01 +0000 (13:27 +0100)]
Avoid timing issues in pcache
Howard Chu [Tue, 4 Aug 2015 12:24:52 +0000 (13:24 +0100)]
Avoid hex timestamp in middle of lines
Tweaks commit
8d74f717ff8390e5ba611b170d8cf4b427e59114
Don't worry about threading/race conditions here, it's not important
Howard Chu [Fri, 31 Jul 2015 23:35:44 +0000 (00:35 +0100)]
Fix interaction with rwm
Howard Chu [Fri, 31 Jul 2015 23:20:49 +0000 (00:20 +0100)]
Also remap explicitly requested attr names
Howard Chu [Wed, 29 Jul 2015 23:55:37 +0000 (00:55 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'
Howard Chu [Wed, 29 Jul 2015 19:01:34 +0000 (20:01 +0100)]
ITS#8192 fix reference to EINTR on WIN32 from ITS#8106
Howard Chu [Tue, 28 Jul 2015 14:20:43 +0000 (15:20 +0100)]
Updated for ITS#8181, #8190, #8200
Howard Chu [Tue, 28 Jul 2015 14:14:10 +0000 (15:14 +0100)]
Merge remote-tracking branch 'origin/mdb.RE/0.9'
Hallvard Furuseth [Sun, 19 Jul 2015 19:18:31 +0000 (21:18 +0200)]
ITS#8200 Fix mdb_midl_shrink() usage, return void
Hallvard Furuseth [Sat, 11 Jul 2015 19:01:40 +0000 (21:01 +0200)]
ITS#8181 Verify that records are/aren't DBs.
Except we don't catch the user passing F_SUBDATA to
mdb_cursor_<put/del>, like an internal LMDB call.
Howard Chu [Tue, 7 Jul 2015 12:41:32 +0000 (13:41 +0100)]
ITS#8190 fix cursor EOF bug
Howard Chu [Tue, 28 Jul 2015 11:10:54 +0000 (12:10 +0100)]
Fix filter init
compound filters f_next is not ignored
Howard Chu [Sat, 25 Jul 2015 22:23:41 +0000 (23:23 +0100)]
More tweaks
Check for error on internal search, init AttributeAssertions in
constructed filter
Howard Chu [Sat, 25 Jul 2015 21:31:43 +0000 (22:31 +0100)]
tweak filter mapping in prev commit
Don't bypass downcasing
Howard Chu [Sat, 25 Jul 2015 21:23:46 +0000 (22:23 +0100)]
Add filter remapping
Howard Chu [Fri, 24 Jul 2015 18:32:19 +0000 (19:32 +0100)]
ITS#8203 plug leak in prev commit
Howard Chu [Fri, 24 Jul 2015 17:34:11 +0000 (18:34 +0100)]
ITS#8203 more fixes for #8036/#7904.
Ryan Tandy [Fri, 17 Jul 2015 22:46:32 +0000 (15:46 -0700)]
ITS#8199 fix NULL ptr dereference in at_next
Deleting all values of olcAttributeTypes and then adding a value with
index > 0 triggers a NULL dereference when config_generic tries to
append to a list that doesn't exist yet.
Already fixed for olcObjectClasses in ITS#5388.
Howard Chu [Thu, 16 Jul 2015 17:58:23 +0000 (18:58 +0100)]
ITS#8201 LDAPSTACKGUARD feature
Howard Chu [Thu, 16 Jul 2015 02:29:06 +0000 (03:29 +0100)]
ITS#8173 fix SEGV after failed retry
Howard Chu [Thu, 16 Jul 2015 02:28:37 +0000 (03:28 +0100)]
Fix setting authTimestamp on non-TOTP binds
Howard Chu [Mon, 13 Jul 2015 16:17:42 +0000 (17:17 +0100)]
Plug memleak on mismatched length
Howard Chu [Sun, 12 Jul 2015 10:14:33 +0000 (11:14 +0100)]
ITS#8195 fix ITS#7027 regression, port number sign bit overflow
Another bug from
5de85b922aaa5bfa6eb53db6000adf01ebdb0736
Howard Chu [Thu, 9 Jul 2015 18:11:22 +0000 (19:11 +0100)]
ITS#8184 avoid redundant mod ops
If multiple ppolicy overlays are present on a glued tree, they all
attempt to update the policy operational attributes in response to
password-related activities. The redundant mod ops will cause the
entire op to fail. Check for these ops before inserting new ones.
Howard Chu [Wed, 8 Jul 2015 13:25:52 +0000 (14:25 +0100)]
Revert unintended commit
Howard Chu [Wed, 8 Jul 2015 13:22:29 +0000 (14:22 +0100)]
Experimental syslog() replacement
2-3x faster than libc. Add it to the Makefile yourself if you want to test it.
Howard Chu [Tue, 7 Jul 2015 18:08:54 +0000 (19:08 +0100)]
Fix whitespace in manpage
Quanah Gibson-Mount [Mon, 6 Jul 2015 16:49:24 +0000 (11:49 -0500)]
ITS#8056
Regenerate configure
Howard Chu [Fri, 3 Jul 2015 19:11:25 +0000 (20:11 +0100)]
New ADremap overlay
Howard Chu [Fri, 3 Jul 2015 09:52:20 +0000 (10:52 +0100)]
Fix cfg OID typos
Howard Chu [Thu, 2 Jul 2015 19:12:51 +0000 (20:12 +0100)]
Merge authTimestamp from lastbind overlay
This code duplicates the basic function of lastbind. The two overlays
cannot be used together. The timestamp Mod op is changed to require
the old value to still be present at the end of the Bind. This allows
us to detect collisions (multiple successful Binds in the same time
window) and properly fail the extra Bind attempts.