]>
git.sur5r.net Git - openldap/log
Howard Chu [Wed, 22 Jun 2011 07:29:47 +0000 (00:29 -0700)]
ITS#6716 Use sorted CSNs in syncrepl too
Howard Chu [Wed, 22 Jun 2011 04:42:44 +0000 (21:42 -0700)]
ITS#6716 use sorted CSNs, fix sessionlog
track a CSN per SID in the log->sl_mincsn
Howard Chu [Wed, 22 Jun 2011 03:44:53 +0000 (20:44 -0700)]
ITS#6716 Keep CSN lists sorted by SID
Quanah Gibson-Mount [Wed, 22 Jun 2011 00:54:02 +0000 (17:54 -0700)]
ITS#6817
Howard Chu [Wed, 22 Jun 2011 00:05:53 +0000 (17:05 -0700)]
ITS#6817 fix RE24 build breakage
Should SLAP_AUTH_DN be #defined in release now?
Quanah Gibson-Mount [Wed, 22 Jun 2011 00:51:41 +0000 (17:51 -0700)]
ITS#6862
ITS#6975
Rich Megginson [Tue, 21 Jun 2011 22:58:49 +0000 (15:58 -0700)]
ITS#6862 MozNSS - workaround PR_SetEnv bug
Rich Megginson [Tue, 21 Jun 2011 00:28:48 +0000 (18:28 -0600)]
ITS#6975 MozNSS - allow cacertdir in most cases
OpenLDAP built with OpenSSL allows most any value of cacertdir - directory
is a file, directory does not contain any CA certs, directory does not
exist - users expect if they specify TLS_REQCERT=never, no matter what
the TLS_CACERTDIR setting is, TLS/SSL will just work.
TLS_CACERT, on the other hand, is a hard error. Even if TLS_REQCERT=never,
if TLS_CACERT is specified and is not a valid CA cert file, TLS/SSL will
fail. This patch makes CACERT errors hard errors, and makes CACERTDIR
errors "soft" errors. The code checks CACERT first and, even though
the function will return an error, checks CACERTDIR anyway so that if the
user sets TRACE mode they will get CACERTDIR processing messages.
Quanah Gibson-Mount [Tue, 21 Jun 2011 20:06:59 +0000 (13:06 -0700)]
ITS#6973
Howard Chu [Tue, 21 Jun 2011 09:40:38 +0000 (02:40 -0700)]
ITS#6973 need limits_check if overlay is global
Quanah Gibson-Mount [Tue, 21 Jun 2011 20:05:27 +0000 (13:05 -0700)]
ITS#6947
Jan Vcelak [Mon, 20 Jun 2011 15:31:57 +0000 (17:31 +0200)]
ITS#6947 Handle missing '\n' termination in LDIF input
Quanah Gibson-Mount [Tue, 21 Jun 2011 20:04:22 +0000 (13:04 -0700)]
ITS#6974
Ondrej Kuznik [Thu, 16 Jun 2011 09:12:27 +0000 (11:12 +0200)]
ITS#6974 (Re)moving stray cleanup code.
Hallvard Furuseth [Mon, 20 Jun 2011 19:33:50 +0000 (21:33 +0200)]
Tweak back-ldif messages about CRC checksums.
Hallvard Furuseth [Mon, 20 Jun 2011 19:20:29 +0000 (21:20 +0200)]
Cleanup back-ldif CRC code.
Handle interrupted write() again. Fix warnings/types. #ifdef LDAP_DEBUG.
Ralf Haferkamp [Wed, 15 Jun 2011 13:28:55 +0000 (15:28 +0200)]
Additional getter methods for LDAPModification
Quanah Gibson-Mount [Tue, 14 Jun 2011 21:35:09 +0000 (14:35 -0700)]
ITS#6892
Howard Chu [Fri, 10 Jun 2011 08:44:30 +0000 (01:44 -0700)]
ITS#6892 shortcut for non-replicated ops
Quanah Gibson-Mount [Mon, 13 Jun 2011 21:42:58 +0000 (14:42 -0700)]
ITS#6513
Pierangelo Masarati [Thu, 15 Apr 2010 05:26:21 +0000 (05:26 +0000)]
allow to specify a per-database list of attributes that need to be always collected, even if not explicitly requested by clients (addresses ITS#6513)
Quanah Gibson-Mount [Mon, 13 Jun 2011 21:02:12 +0000 (14:02 -0700)]
ITS#6657,ITS#6691
Howard Chu [Mon, 13 Jun 2011 20:54:56 +0000 (13:54 -0700)]
ITS#6657/6691 use proper SQL length data type (From Timo Teras @ iki.fi)
Quanah Gibson-Mount [Mon, 13 Jun 2011 20:47:47 +0000 (13:47 -0700)]
ITS#6971
Quanah Gibson-Mount [Mon, 13 Jun 2011 20:46:01 +0000 (13:46 -0700)]
ITS#6971 correct option is --enable-wrappers
Quanah Gibson-Mount [Mon, 13 Jun 2011 19:55:32 +0000 (12:55 -0700)]
ITS#6944
Howard Chu [Fri, 10 Jun 2011 10:27:40 +0000 (03:27 -0700)]
ITS#6944 limit op cache to 10 ops per thread
Quanah Gibson-Mount [Mon, 13 Jun 2011 19:54:20 +0000 (12:54 -0700)]
ITS#6969
Howard Chu [Fri, 10 Jun 2011 09:11:26 +0000 (02:11 -0700)]
Add LDAP_OPT_X_TLS_PACKAGE
to return the name of the underlying TLS implementation
Quanah Gibson-Mount [Mon, 13 Jun 2011 19:52:48 +0000 (12:52 -0700)]
ITS#6967
Howard Chu [Fri, 10 Jun 2011 08:35:19 +0000 (01:35 -0700)]
ITS#6967 normalize schema RDN
Howard Chu [Fri, 10 Jun 2011 04:09:41 +0000 (21:09 -0700)]
Add CRC32 checksum to back-ldif files
Currently just logs a complaint on checksum mismatch. Could get
more obnoxious later.
Howard Chu [Fri, 10 Jun 2011 01:07:13 +0000 (18:07 -0700)]
Fix prev commit
Howard Chu [Fri, 10 Jun 2011 00:59:08 +0000 (17:59 -0700)]
Try to discourage editing back-ldif files
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:29:58 +0000 (11:29 -0700)]
ITS#6955
SATOH Fumiyasu [Thu, 26 May 2011 15:41:54 +0000 (00:41 +0900)]
ITS#6955 smbk5pwd: Support shadowLastChange
Fix typo -- hyc
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:27:54 +0000 (11:27 -0700)]
ITS#6872
cmikk@qwest.net [Tue, 29 Mar 2011 21:49:53 +0000 (21:49 +0000)]
ITS#6872
Perform the internal FIND_CSN search based at the backend's suffix with the
privileges of the backend's root DN.
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:24:40 +0000 (11:24 -0700)]
ITS#6936
Howard Chu [Thu, 9 Jun 2011 08:01:06 +0000 (01:01 -0700)]
ITS#6936 add connID and peername to auditlog
From ksmith @ ycp.edu, with fixes by hyc
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:15:57 +0000 (11:15 -0700)]
ITS#6906
Tim Mooney [Tue, 12 Apr 2011 22:57:57 +0000 (17:57 -0500)]
ITS#6906 Update cachesize recommendations
to remove references to indexes in Hash format
Fix whitespace error -- hyc
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:14:08 +0000 (11:14 -0700)]
ITS#6905
Tim Mooney [Tue, 12 Apr 2011 20:54:03 +0000 (15:54 -0500)]
ITS#6905 Update intro of slapd-config/slapd.conf
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:12:41 +0000 (11:12 -0700)]
ITS#6904
Tim Mooney [Tue, 12 Apr 2011 16:31:31 +0000 (11:31 -0500)]
ITS#6904 Update to reflect that hdb is preferred
Tweak wording -- hyc
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:10:18 +0000 (11:10 -0700)]
ITS#6934
Howard Chu [Thu, 9 Jun 2011 07:21:47 +0000 (00:21 -0700)]
ITS#6934 fix typo
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:08:24 +0000 (11:08 -0700)]
ITS#6901
Howard Chu [Thu, 9 Jun 2011 02:17:50 +0000 (19:17 -0700)]
ITS#6901 fix filter with zero-length values
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:05:43 +0000 (11:05 -0700)]
ITS#6889 regenerate configure
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:03:55 +0000 (11:03 -0700)]
ITS#6889
Howard Chu [Thu, 9 Jun 2011 01:52:52 +0000 (18:52 -0700)]
ITS#6889 libfetch is a libldap dependency
Quanah Gibson-Mount [Thu, 9 Jun 2011 18:01:21 +0000 (11:01 -0700)]
ITS#6828
Howard Chu [Thu, 9 Jun 2011 01:27:54 +0000 (18:27 -0700)]
ITS#6828 fix TLS setup with async connect
Quanah Gibson-Mount [Wed, 8 Jun 2011 23:33:51 +0000 (16:33 -0700)]
ITS#6641
Ondrej Kuznik [Fri, 6 May 2011 11:07:53 +0000 (13:07 +0200)]
ITS#6641 Bypass checks on ops with managedsait
Document the uniqueness changes
Fix whitespace in original patch -- hyc
Quanah Gibson-Mount [Wed, 8 Jun 2011 23:09:13 +0000 (16:09 -0700)]
it really was for 6717, fixing
Quanah Gibson-Mount [Wed, 8 Jun 2011 23:03:33 +0000 (16:03 -0700)]
ITS#6717 refine mincsn check for MMR
Fix ITS 6717 to be ITS6716 in CHANGES
Quanah Gibson-Mount [Wed, 8 Jun 2011 23:01:08 +0000 (16:01 -0700)]
ITS#6711
Howard Chu [Wed, 2 Feb 2011 20:32:48 +0000 (20:32 +0000)]
Cleanup priv/idassert choice: check for configured bind method, not authcDN
Howard Chu [Wed, 2 Feb 2011 20:06:28 +0000 (20:06 +0000)]
ITS#6711 use idassert TLS conf for priv connection if aclbind not set
Pierangelo Masarati [Sat, 5 Mar 2011 10:30:21 +0000 (10:30 +0000)]
fix commit 1.268, related to ITS#6817
Pierangelo Masarati [Thu, 3 Feb 2011 23:35:56 +0000 (23:35 +0000)]
use (noncritical) whoami extop during SASL bind (ITS#6817)
Pierangelo Masarati [Thu, 3 Feb 2011 23:20:15 +0000 (23:20 +0000)]
use (noncritical) authzid control during SASL bind (ITS#6817)
Howard Chu [Wed, 2 Feb 2011 20:56:58 +0000 (20:56 +0000)]
ITS#6711 minimal tweaks for aclbind/idassertbind for privileged connection
in dobind_int().
Howard Chu [Wed, 23 Feb 2011 03:13:56 +0000 (03:13 +0000)]
ITS#6815 logbase keyword
Quanah Gibson-Mount [Wed, 8 Jun 2011 22:39:57 +0000 (15:39 -0700)]
ITS#6815
Howard Chu [Wed, 20 Apr 2011 19:31:27 +0000 (12:31 -0700)]
More for ITS#6815, Unbind and Abandon
Howard Chu [Fri, 25 Feb 2011 05:32:05 +0000 (05:32 +0000)]
Fix uninit'd var
Howard Chu [Thu, 24 Feb 2011 13:22:57 +0000 (13:22 +0000)]
Fix prev commit
Howard Chu [Wed, 23 Feb 2011 02:47:19 +0000 (02:47 +0000)]
ITS#6815 add logbase option, to only log requests matching a given suffix
Pierangelo Masarati [Tue, 1 Feb 2011 23:13:58 +0000 (23:13 +0000)]
ignore attrs in search request that do not conform to RFC 4511 4.5.1.8. or standard track extensions (ITS#6819)
Pierangelo Masarati [Tue, 1 Feb 2011 13:09:11 +0000 (13:09 +0000)]
ignore empty attrs in search requests (ITS#6819; see also ITS#6652)
Quanah Gibson-Mount [Wed, 8 Jun 2011 22:31:46 +0000 (15:31 -0700)]
ITS#6843
Ralf Haferkamp [Thu, 24 Feb 2011 17:50:08 +0000 (17:50 +0000)]
ITS#6843 Fix cn=config slapadd for global overlays with private
database instances (e.g. slapo-chain)
Quanah Gibson-Mount [Wed, 8 Jun 2011 21:34:51 +0000 (14:34 -0700)]
ITS#6899
Pierangelo Masarati [Wed, 8 Jun 2011 20:14:54 +0000 (22:14 +0200)]
ITS#6899
tag read entry response control value with [APPLICATION 4] (SearchResultEntry)
Pierangelo Masarati [Tue, 7 Jun 2011 22:29:39 +0000 (00:29 +0200)]
fix typo in previous commit
Howard Chu [Tue, 7 Jun 2011 02:55:09 +0000 (19:55 -0700)]
ITS#6948 partial revert of #6837, unnecessary
Ralf Haferkamp [Tue, 22 Mar 2011 16:14:02 +0000 (16:14 +0000)]
First underlying LDAP database needs special treatment upon deletion
Ralf Haferkamp [Tue, 22 Mar 2011 15:37:11 +0000 (15:37 +0000)]
Allow deletion of chain overlay's back-ldap databases
Howard Chu [Sun, 5 Jun 2011 20:59:19 +0000 (13:59 -0700)]
ITS#6948 fix ITS#6837 patch
Quanah Gibson-Mount [Wed, 8 Jun 2011 21:26:56 +0000 (14:26 -0700)]
ITS#6963
Howard Chu [Sat, 4 Jun 2011 20:40:57 +0000 (13:40 -0700)]
ITS#6963 config entries' objectclass is read-only
Howard Chu [Sat, 4 Jun 2011 05:22:48 +0000 (22:22 -0700)]
ITS#6831 don't push stack unless needed
Howard Chu [Sat, 4 Jun 2011 04:55:22 +0000 (21:55 -0700)]
Fix
ce9bbd2 missing success return
Howard Chu [Sat, 4 Jun 2011 04:40:27 +0000 (21:40 -0700)]
ITS#6831 additional filter cmp fixes
Quanah Gibson-Mount [Wed, 8 Jun 2011 21:22:13 +0000 (14:22 -0700)]
ITS#6946
Howard Chu [Sat, 4 Jun 2011 02:31:29 +0000 (19:31 -0700)]
ITS#6946 fix double-free, broken by
77a7ef0
Quanah Gibson-Mount [Wed, 8 Jun 2011 21:20:13 +0000 (14:20 -0700)]
ITS#6831
Howard Chu [Sat, 4 Jun 2011 02:13:24 +0000 (19:13 -0700)]
ITS#6831 fix filter comparison
Quanah Gibson-Mount [Wed, 8 Jun 2011 21:19:19 +0000 (14:19 -0700)]
ITS#6959
Howard Chu [Fri, 3 Jun 2011 18:51:11 +0000 (11:51 -0700)]
ITS#6959 document ldap_dnfree()
Howard Chu [Fri, 3 Jun 2011 18:24:19 +0000 (11:24 -0700)]
Drop note about slapcat for mirrormode
slapcat will always be self-consistent since the contextCSN is
snapshotted at the beginning of the dump.
Howard Chu [Wed, 1 Jun 2011 18:29:39 +0000 (11:29 -0700)]
More for ITS#6961 - deadlock checking
Quanah Gibson-Mount [Wed, 8 Jun 2011 21:14:15 +0000 (14:14 -0700)]
ITS#6961
Howard Chu [Wed, 1 Jun 2011 08:44:51 +0000 (01:44 -0700)]
Fix for sparse ranges, get next ID from DB
Instead of iterating thru potentially many nonexistent IDs
Quanah Gibson-Mount [Wed, 8 Jun 2011 21:12:47 +0000 (14:12 -0700)]
ITS#6954
Ralf Haferkamp [Thu, 26 May 2011 12:49:23 +0000 (14:49 +0200)]
ITS#6954 fix consistency checker prematurely deleting cached queries