From 885bd6999b7b4d87d41352a8a40530391e4a185e Mon Sep 17 00:00:00 2001
From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Mon, 6 Jul 2020 22:16:35 +0000
Subject: [PATCH] Updated announcement for 2.5

---
 ANNOUNCEMENT | 94 +++++++++++++++++++++++++++++++++++-----------------
 1 file changed, 64 insertions(+), 30 deletions(-)

diff --git a/ANNOUNCEMENT b/ANNOUNCEMENT
index a46b94b786..20393fd65d 100644
--- a/ANNOUNCEMENT
+++ b/ANNOUNCEMENT
@@ -7,36 +7,70 @@ A N N O U N C E M E N T -- OpenLDAP 2.5
 
     This release contains the following major enhancements:
 
-General slapd bits:
-#define LDAP_COLLECTIVE_ATTRIBUTES
-#define LDAP_COMP_MATCH
-#define LDAP_SYNC_TIMESTAMP
-#define SLAP_CONTROL_X_WHATFAILED
-#define SLAP_CONFIG_DELETE
-#define SLAP_AUXPROP_DONTUSECOPY
-threadpool queues
-slapmodify
-non-blocking TLS
-gmtime_mutex
-LDAP_TCP_BUFFER
-Simplify write waiter handling
-
-back-ldap: FEATURE_CANCHAINOPS
-back-meta: SLAPD_META_CLIENT_PR
-overlays/syncprov: CHECK_CSN
-overlays/pcache: PCACHE_CONTROL_PRIVDB, PCACHE_EXOP_QUERY_DELETE, PCACHE_MONITOR
-
-ldap.h bits:
-#define LDAP_X_TXN                                             "1.3.6.1.4.1.4203.666.11.7" /* tmp */
-#define LDAP_EXOP_X_TXN_START                  LDAP_X_TXN ".1"
-#define LDAP_CONTROL_X_TXN_SPEC                        LDAP_X_TXN ".2"
-#define LDAP_EXOP_X_TXN_END                            LDAP_X_TXN ".3"
-#define LDAP_EXOP_X_TXN_ABORTED_NOTICE LDAP_X_TXN ".4"
-
-libldap
-channel binding support for OpenSSL, GnuTLS
-Elliptic Curve support for OpenSSL
-
+        * Slapd(8) enhancements
+            - kqueue support for BSD based OSes
+            - cn=config delete support
+            - Don't use copy control support
+            - Threadpool queues
+            - non-blocking TLS support
+            - Configurable TCP read and write buffers
+               for listeners.
+            - LDAP Transaction support
+            - MS AD Lazy commit control
+            - MS AD replication support
+            - DSEE replication support
+            - Sun/Netscape draft persistent search support
+        * New backends
+            - back-wt: Wiredtiger backend to slapd
+            - back-asyncmeta: Async version of back-meta
+        * Backend updates
+            - back-ldap: CANCHAINOPS
+            - back-meta META_CLIENT_PR
+        * Retired backends
+            - back-bdb
+            - back-hdb
+            - back-ndb
+            - back-sql
+            - back-perl
+            - back-shell
+        * New overlays
+            - autoca
+        * Overlay updates
+            - pcache can access private DB with control
+            - pcache can remove a query from the cache
+               with exop
+            - back-monitor support for pcache
+            - ppolicy updated with password policy
+               draft 10 support
+            - dynlist can now generate (is)memberOf
+               dynamically
+            - dynlist do reverse lookups to find all
+               groups a user belongs to
+            - unique can now do db wide locking to avoid
+               race conditions
+        * New Library
+            - libldif provides an LDIF parsing API
+        * Library updates
+            - libldap_r has been merged with libldap
+            - libldap has TLS channel binding support
+            - libldap has TLS public key pinning support
+            - libldap has TLS SNI support
+            - libldap has GSASPI channel binding support
+        * Clients and tools
+            - slapmodify for offline updates to cn=config
+        * Significant performance enhancements throughout
+            the client and server code base
+        * New contrib overlays
+            - adremap remaps attributes for PAM/NSS MS AD
+               support
+            - authzid implements RFC 3829 support
+            - usn adds MS AD usnCreated and usnChanged
+               operational attributes to entries
+            - vc provides the verified credentials
+               extended operation
+            - pw-radius allows bind operations to be
+               passed to the specified radius server(s)
+            - totp provides one time password support
 
     This release includes the following major components: