Ondřej Kuzník
cb6e2e555e
ITS#9959 Nul-terminate addresses
...
Debug(LDAP_DEBUG_CONNS, ...) gets these passed as %s, reaching just
beyond the allocated buffer.
2025-12-18 23:27:24 +00:00
Ondřej Kuzník
dcbb48dec7
ITS#9959 Do not read c_auth without lock
2025-12-18 23:27:24 +00:00
Ondřej Kuzník
176680e824
ITS#10414 Do not replace tool's provided buffer
2025-12-16 16:33:10 +00:00
Ondřej Kuzník
1668b5c432
ITS#10414 Remember whether we have a frontend/back-config
2025-12-16 16:33:10 +00:00
Graham Leggett
f3b49ffa10
ITS#10149 - Allow certificates and keys to be read from URIs
2025-12-15 22:52:13 +00:00
Ondřej Kuzník
127b34eb0b
ITS#9577 Also exit when started with just -V
2025-12-13 00:22:53 +00:00
Ondřej Kuzník
93d7b9ef7a
ITS#7347 Allow subtractive -a/z/i to work as expected
2025-12-11 20:42:19 +00:00
Ondřej Kuzník
b8df689969
ITS#9640 Introduce the increment privilege
2025-12-11 20:42:19 +00:00
Quanah Gibson-Mount
8423637333
ITS#10306 - Regenerate configure
2025-12-11 20:41:22 +00:00
Ondřej Kuzník
b7d3e353ec
ITS#10413 Prepare cookie just before we actually send it
2025-12-10 19:48:51 +00:00
Howard Chu
09d24f1484
ITS#10306 configure: use cache for epoll/kqueue checks
2025-12-09 17:45:27 +00:00
Howard Chu
93a96ed2e7
ITS#9305 clients: print actual error from connect failure
...
Related to ITS#10371
2025-12-09 15:06:05 +00:00
Howard Chu
148e940fda
ITS#9305 libldap: don't mask ld_errno if set during connect failure
2025-12-09 15:06:05 +00:00
Howard Chu
b0e95d023a
ITS#9305 libldap: report errmsg from hostname lookup failures
...
Use new LDAP_X_SERVER_UNKNOWN error code for failed lookups.
2025-12-09 15:06:05 +00:00
Ondřej Kuzník
b3821e772a
ITS#10358 Retry if entry changed (use assert control to detect this)
2025-12-09 00:59:57 +00:00
Ondřej Kuzník
3d94d11c75
ITS#7441 Consider both parts of an X-ORDERED value
2025-12-08 18:52:59 +00:00
Ondřej Kuzník
0f2d23066e
ITS#10361 Standardise CONFIGPWF usage
2025-12-05 18:47:39 +00:00
Ondřej Kuzník
9c025b8aff
ITS#10361 Remove bashism
2025-12-05 18:47:39 +00:00
Ondřej Kuzník
9cb8701e3c
ITS#10408 Do not assume sop is still in the list
2025-12-04 22:46:36 +00:00
Ondřej Kuzník
aa3e8f34c3
ITS#6151 Regenerate cosine.ldif
2025-12-04 18:26:33 +00:00
Ondřej Kuzník
e6f666a1ac
ITS#6151 Update cosine.schema for RFC 4524
...
- adds a new substring match omitted previously (uniqueIdentifier)
- removes streetAddress duplication in domain objectclass
- prefers short names for MUST/MAY attributes
- long definitions (for 'co', 'drink', ...) are NOT removed here
- attributes/objectclasses removed by RFC 4524 are NOT removed here
Chooses not to remove DESC tags removed in RFC1274 in the interests of
keeping the diff small.
2025-12-04 18:26:33 +00:00
Quanah Gibson-Mount
e8a7203afd
ITS#6938, ITS#9739 - Regenerate configure
2025-12-02 16:26:54 +00:00
Howard Chu
f0999bdc22
ITS#6938 WIN32 IPv6: fix sockaddr_storage detection
...
It's defined in winsock2.h. Also remove error for missing INET6_ADDRSTRLEN
define, we already have it in our <ac/socket.h> if it's missing.
2025-12-01 16:18:46 +00:00
Howard Chu
90e6bfe0c6
ITS#6938 WIN32: silence warnings for redefined error codes
2025-12-01 16:18:46 +00:00
Howard Chu
7055e08841
ITS#10410 lutil_strncopy: refix prev commit
2025-12-01 16:16:10 +00:00
Howard Chu
a946853b12
ITS#10410 lutil_strncopy: fix prev commit
2025-12-01 15:56:36 +00:00
Howard Chu
a16f196903
ITS#10410 lutil_strncopy: fix off by one
2025-12-01 15:18:54 +00:00
Howard Chu
afafeaf407
ITS#10410 WIN32 logging: simplify buffer calculation
2025-12-01 15:09:21 +00:00
Howard Chu
ff0f9d94ac
ITS#10398 slapo-memberof manpage update
2025-11-20 16:53:01 +00:00
Howard Chu
1bc7cd0e2a
ITS#10398 slapo-memberof/refint: fix clash on subtree renames
...
memberof must ignore modify ops from refint overlay.
2025-11-18 16:35:59 +00:00
Ondřej Kuzník
81d5126b31
Clarify slapadd -w option to avoid common pitfall
2025-11-11 16:35:04 +00:00
Ondřej Kuzník
6bf78d4bfb
Clarify lloadd.conf example
2025-11-11 16:35:04 +00:00
Howard Chu
34813d9cba
ITS#10329 slapo-pcache: don't clobber original request DN
...
in merge_entry()
2025-11-04 18:36:40 +00:00
Andrew Elble
9ae2539170
ITS#10329 slapo-pcache: template match must be case insensitive
2025-11-04 18:36:40 +00:00
Andrew Elble
5359362de0
ITS#10329 slapo-pcache: (re)set expiry time if query is pos/neg
2025-11-04 18:36:40 +00:00
Andrew Elble
ba18e87102
ITS#10329 slapo-pcache: in refresh, set q_uuid on query if it changes pos/neg
2025-11-04 18:36:40 +00:00
Andrew Elble
326e088df6
ITS#10329 slapo-pcache: clear out already freed op req DN
2025-11-04 18:36:40 +00:00
Ondřej Kuzník
8651f98a08
ITS#9739 Let configure options influence the symbol version map
2025-11-04 16:23:58 +00:00
Quanah Gibson-Mount
32c2e5a451
Merge remote-tracking branch 'origin/mdb.RE/0.9'
2025-11-04 15:46:45 +00:00
Jonas Jelten
c8ed27ebd0
ITS#10399 pw-pbkdf2: fix iteration configuration parameter
...
the first module argument is argc=1 and argv[0], as invoked by
servers/slapd/slappasswd.c/parse_slappasswdopt and
servers/slapd/module.c/module_load
2025-10-23 10:22:52 +02:00
Quanah Gibson-Mount
b38a17b850
ITS#10391 - Regenerate configure
2025-10-22 21:49:38 +00:00
Michael Osipov
eec5edd984
ITS#10391 - Reactivate "-mt" for pthread support on HP-UX (and Solaris)
...
HP-UX, along with Solaris, requires this compiler and linker flag to pass
proper macros and add required libraries.
2025-10-22 20:07:49 +00:00
Arvid Requate
7929b3ee77
ITS#7901 slapschema: preserve errors in -c mode
2025-10-22 19:25:34 +00:00
Nadezhda Ivanova
9731103ffb
ITS#10390 ldif_parse_line2 calculates an incorrect length of the attribute type
2025-10-21 18:22:05 +00:00
Nadezhda Ivanova
138422cbe9
ITS#10388 ldif_parse_line2 is not compliant with RFC2849
2025-10-21 18:22:05 +00:00
Julien Wadel
fb2d478ef5
ITS#10353 WINSOCK: add missing ENOTCONN #define
...
Value is set to 126 by "ucrt/errno.h" but WSAENOTCONN is
set to 10057L by winerror.h (used by WSAGetLastError()).
2025-10-21 17:03:18 +01:00
Ondřej Kuzník
bbe436d012
ITS#10313 Add a chaining test
2025-10-21 03:15:43 +00:00
Ondřej Kuzník
6a28e8919d
ITS#10313 Allow counter mods to be chained
2025-10-21 03:15:43 +00:00
Ondřej Kuzník
e0cca3fcab
ITS#10313 Tighten counter tracking modification
...
Try to make sure the counter/timer value we used hasn't been used up in
the meantime. Also if the update cannot be committed, do not say whether
the provided OTP was correct, this would open up an oracle for malicious
clients to brute force a token they could use later/elsewhere.
2025-10-21 03:15:43 +00:00
Ondřej Kuzník
1414325c4d
ITS#10379 Use a fresh timestamp for internal mod
2025-10-21 03:15:43 +00:00