Commit graph

24558 commits

Author SHA1 Message Date
Ondřej Kuzník
cb6e2e555e ITS#9959 Nul-terminate addresses
Debug(LDAP_DEBUG_CONNS, ...) gets these passed as %s, reaching just
beyond the allocated buffer.
2025-12-18 23:27:24 +00:00
Ondřej Kuzník
dcbb48dec7 ITS#9959 Do not read c_auth without lock 2025-12-18 23:27:24 +00:00
Ondřej Kuzník
176680e824 ITS#10414 Do not replace tool's provided buffer 2025-12-16 16:33:10 +00:00
Ondřej Kuzník
1668b5c432 ITS#10414 Remember whether we have a frontend/back-config 2025-12-16 16:33:10 +00:00
Graham Leggett
f3b49ffa10 ITS#10149 - Allow certificates and keys to be read from URIs 2025-12-15 22:52:13 +00:00
Ondřej Kuzník
127b34eb0b ITS#9577 Also exit when started with just -V 2025-12-13 00:22:53 +00:00
Ondřej Kuzník
93d7b9ef7a ITS#7347 Allow subtractive -a/z/i to work as expected 2025-12-11 20:42:19 +00:00
Ondřej Kuzník
b8df689969 ITS#9640 Introduce the increment privilege 2025-12-11 20:42:19 +00:00
Quanah Gibson-Mount
8423637333 ITS#10306 - Regenerate configure 2025-12-11 20:41:22 +00:00
Ondřej Kuzník
b7d3e353ec ITS#10413 Prepare cookie just before we actually send it 2025-12-10 19:48:51 +00:00
Howard Chu
09d24f1484 ITS#10306 configure: use cache for epoll/kqueue checks 2025-12-09 17:45:27 +00:00
Howard Chu
93a96ed2e7 ITS#9305 clients: print actual error from connect failure
Related to ITS#10371
2025-12-09 15:06:05 +00:00
Howard Chu
148e940fda ITS#9305 libldap: don't mask ld_errno if set during connect failure 2025-12-09 15:06:05 +00:00
Howard Chu
b0e95d023a ITS#9305 libldap: report errmsg from hostname lookup failures
Use new LDAP_X_SERVER_UNKNOWN error code for failed lookups.
2025-12-09 15:06:05 +00:00
Ondřej Kuzník
b3821e772a ITS#10358 Retry if entry changed (use assert control to detect this) 2025-12-09 00:59:57 +00:00
Ondřej Kuzník
3d94d11c75 ITS#7441 Consider both parts of an X-ORDERED value 2025-12-08 18:52:59 +00:00
Ondřej Kuzník
0f2d23066e ITS#10361 Standardise CONFIGPWF usage 2025-12-05 18:47:39 +00:00
Ondřej Kuzník
9c025b8aff ITS#10361 Remove bashism 2025-12-05 18:47:39 +00:00
Ondřej Kuzník
9cb8701e3c ITS#10408 Do not assume sop is still in the list 2025-12-04 22:46:36 +00:00
Ondřej Kuzník
aa3e8f34c3 ITS#6151 Regenerate cosine.ldif 2025-12-04 18:26:33 +00:00
Ondřej Kuzník
e6f666a1ac ITS#6151 Update cosine.schema for RFC 4524
- adds a new substring match omitted previously (uniqueIdentifier)
- removes streetAddress duplication in domain objectclass
- prefers short names for MUST/MAY attributes
- long definitions (for 'co', 'drink', ...) are NOT removed here
- attributes/objectclasses removed by RFC 4524 are NOT removed here

Chooses not to remove DESC tags removed in RFC1274 in the interests of
keeping the diff small.
2025-12-04 18:26:33 +00:00
Quanah Gibson-Mount
e8a7203afd ITS#6938, ITS#9739 - Regenerate configure 2025-12-02 16:26:54 +00:00
Howard Chu
f0999bdc22 ITS#6938 WIN32 IPv6: fix sockaddr_storage detection
It's defined in winsock2.h. Also remove error for missing INET6_ADDRSTRLEN
define, we already have it in our <ac/socket.h> if it's missing.
2025-12-01 16:18:46 +00:00
Howard Chu
90e6bfe0c6 ITS#6938 WIN32: silence warnings for redefined error codes 2025-12-01 16:18:46 +00:00
Howard Chu
7055e08841 ITS#10410 lutil_strncopy: refix prev commit 2025-12-01 16:16:10 +00:00
Howard Chu
a946853b12 ITS#10410 lutil_strncopy: fix prev commit 2025-12-01 15:56:36 +00:00
Howard Chu
a16f196903 ITS#10410 lutil_strncopy: fix off by one 2025-12-01 15:18:54 +00:00
Howard Chu
afafeaf407 ITS#10410 WIN32 logging: simplify buffer calculation 2025-12-01 15:09:21 +00:00
Howard Chu
ff0f9d94ac ITS#10398 slapo-memberof manpage update 2025-11-20 16:53:01 +00:00
Howard Chu
1bc7cd0e2a ITS#10398 slapo-memberof/refint: fix clash on subtree renames
memberof must ignore modify ops from refint overlay.
2025-11-18 16:35:59 +00:00
Ondřej Kuzník
81d5126b31 Clarify slapadd -w option to avoid common pitfall 2025-11-11 16:35:04 +00:00
Ondřej Kuzník
6bf78d4bfb Clarify lloadd.conf example 2025-11-11 16:35:04 +00:00
Howard Chu
34813d9cba ITS#10329 slapo-pcache: don't clobber original request DN
in merge_entry()
2025-11-04 18:36:40 +00:00
Andrew Elble
9ae2539170 ITS#10329 slapo-pcache: template match must be case insensitive 2025-11-04 18:36:40 +00:00
Andrew Elble
5359362de0 ITS#10329 slapo-pcache: (re)set expiry time if query is pos/neg 2025-11-04 18:36:40 +00:00
Andrew Elble
ba18e87102 ITS#10329 slapo-pcache: in refresh, set q_uuid on query if it changes pos/neg 2025-11-04 18:36:40 +00:00
Andrew Elble
326e088df6 ITS#10329 slapo-pcache: clear out already freed op req DN 2025-11-04 18:36:40 +00:00
Ondřej Kuzník
8651f98a08 ITS#9739 Let configure options influence the symbol version map 2025-11-04 16:23:58 +00:00
Quanah Gibson-Mount
32c2e5a451 Merge remote-tracking branch 'origin/mdb.RE/0.9' 2025-11-04 15:46:45 +00:00
Jonas Jelten
c8ed27ebd0 ITS#10399 pw-pbkdf2: fix iteration configuration parameter
the first module argument is argc=1 and argv[0], as invoked by
servers/slapd/slappasswd.c/parse_slappasswdopt and
servers/slapd/module.c/module_load
2025-10-23 10:22:52 +02:00
Quanah Gibson-Mount
b38a17b850 ITS#10391 - Regenerate configure 2025-10-22 21:49:38 +00:00
Michael Osipov
eec5edd984 ITS#10391 - Reactivate "-mt" for pthread support on HP-UX (and Solaris)
HP-UX, along with Solaris, requires this compiler and linker flag to pass
proper macros and add required libraries.
2025-10-22 20:07:49 +00:00
Arvid Requate
7929b3ee77 ITS#7901 slapschema: preserve errors in -c mode 2025-10-22 19:25:34 +00:00
Nadezhda Ivanova
9731103ffb ITS#10390 ldif_parse_line2 calculates an incorrect length of the attribute type 2025-10-21 18:22:05 +00:00
Nadezhda Ivanova
138422cbe9 ITS#10388 ldif_parse_line2 is not compliant with RFC2849 2025-10-21 18:22:05 +00:00
Julien Wadel
fb2d478ef5 ITS#10353 WINSOCK: add missing ENOTCONN #define
Value is set to 126 by "ucrt/errno.h" but WSAENOTCONN is
set to 10057L by winerror.h (used by WSAGetLastError()).
2025-10-21 17:03:18 +01:00
Ondřej Kuzník
bbe436d012 ITS#10313 Add a chaining test 2025-10-21 03:15:43 +00:00
Ondřej Kuzník
6a28e8919d ITS#10313 Allow counter mods to be chained 2025-10-21 03:15:43 +00:00
Ondřej Kuzník
e0cca3fcab ITS#10313 Tighten counter tracking modification
Try to make sure the counter/timer value we used hasn't been used up in
the meantime. Also if the update cannot be committed, do not say whether
the provided OTP was correct, this would open up an oracle for malicious
clients to brute force a token they could use later/elsewhere.
2025-10-21 03:15:43 +00:00
Ondřej Kuzník
1414325c4d ITS#10379 Use a fresh timestamp for internal mod 2025-10-21 03:15:43 +00:00