Commit graph

24427 commits

Author SHA1 Message Date
Nadezhda Ivanova
086296d5fa ITS#9186 Implement result code counters 2025-06-11 14:29:37 +03:00
Howard Chu
7a8d72b02b ITS#10336 slapd-mdb: fix delete on empty DB
Don't assume parent of target entry will always exist.
2025-05-13 18:02:27 +01:00
Ondřej Kuzník
6063498361 ITS#10297 Defer hostname resolution til first use 2025-05-09 09:31:26 +01:00
Greg Noe
9a52a3c28b ITS#10140 Add microsecond timestamp format for local file logging 2025-04-30 07:46:42 -07:00
Ondřej Kuzník
f1556ba98a ITS#10331 Add helpful error messages for usage errors 2025-04-25 13:45:09 +01:00
Howard Chu
e5a545d54c ITS#10328 librewrite: fix substitution cleanup 2025-04-24 16:47:31 +00:00
Ondřej Kuzník
ca5391b811 ITS#10327 Allow lockless config_back_search() during server pause
The assumption is that the only reason it is allowed to run at this
point is that it is called from the reconfiguration context anyway.
2025-04-24 15:24:56 +00:00
Ondřej Kuzník
fd0cf64b16 ITS#10325 slapd-dsaschema: Use assigned OIDs 2025-04-24 07:34:47 +00:00
Ondřej Kuzník
93d10369f2 ITS#10325 slapo-variant: Use assigned OIDs 2025-04-24 07:34:47 +00:00
Ondřej Kuzník
948400af2b ITS#10323 Apply olcBkLloadStartTLS runtime changes directly 2025-04-23 21:17:51 +00:00
Howard Chu
2e049ef878 ITS#10320 autogroup: mark internal searches
Avoid any other overlays munging autogroup's searches
2025-04-23 16:35:04 +00:00
Howard Chu
015f2937ba ITS#10168 back-mdb: cleanup index setup
Nop index setup when index config resulted in no configured indices
2025-04-23 15:16:47 +00:00
Howard Chu
10456f5850 ITS#10326 mbedtls: always call mbedtls_ssl_set_hostname()
Even if hostname is NULL, the library requires this be called once.
If non-NULL, mbedtls may do a hostname check which is redundant
since libldap does its own check.
2025-04-22 17:26:46 +01:00
Howard Chu
36dd6e2e62 ITS#10299 slapacl(8): fix dry-run description 2025-04-01 19:41:10 +00:00
Howard Chu
f1ca58680a ITS#10299 slapacl: use dummy entry_get in dry-run mode 2025-04-01 19:41:10 +00:00
Howard Chu
e5d841f46d ITS#9934 slapd-config(5) add new TLS cert/key settings 2025-04-01 16:06:32 +00:00
Howard Chu
f8f0fa4799 ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once 2025-04-01 16:06:32 +00:00
Andrew Elble
f00319b32c ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on 2025-03-27 14:59:33 +00:00
Andrew Elble
24d4dcb3d7 ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on 2025-03-27 14:59:29 +00:00
Andrew Elble
9b03791108 ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries 2025-03-27 14:59:15 +00:00
Quanah Gibson-Mount
72f184a0e3 ITS#10163 - Regenerate configure 2025-03-21 21:51:20 +00:00
Ondřej Kuzník
602c794287 Add missing olcFrontendConfig to example 2025-03-17 10:58:31 +00:00
Ondřej Kuzník
82cee8f57a ITS#10312 Explicitly allow FALSE in 'subordinate' 2025-03-12 15:44:57 +00:00
Ondřej Kuzník
c852e11cb9 ITS#10163 Add missed otp overlay to configure.ac 2025-03-10 12:27:23 +00:00
Howard Chu
b8f32ec2fc ITS#9367 back-mdb: add encryption support
Enabled if MDB_ENCRYPT is defined, which is currently only in mdb.master3.
2025-03-04 20:31:21 +00:00
Ondřej Kuzník
d1ca167137 ITS#10309 Check for strdup allocation failures 2025-03-04 19:41:59 +00:00
Howard Chu
f602563bf4 ITS#10310 pw-pbkdf2: make iterations configurable 2025-02-26 13:36:50 +00:00
Ondřej Kuzník
68bd743cfe ITS#10266 Adding a test script 2025-02-19 19:59:42 +00:00
Ondřej Kuzník
37edfeceaa ITS#10266 Linked clients should also be tagged for closing 2025-02-19 19:59:42 +00:00
Ondřej Kuzník
e101d0ecc1 ITS#10266 Adopt broader RFC4511 NoD interpretation, receiving side 2025-02-19 19:59:42 +00:00
Ondřej Kuzník
89e34fded3 ITS#10265 Allow runtime reconfig of olcBkLloadListen 2025-02-19 18:39:09 +00:00
Ondřej Kuzník
f2cba910d8 ITS#7249 Disallow memberof-addcheck when memberof is global 2025-02-19 17:29:04 +00:00
Ondřej Kuzník
993f488e7b ITS#7249 Let backend_attribute know who's calling it 2025-02-19 17:29:04 +00:00
Ondřej Kuzník
6c0a44d1ec ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified 2025-02-19 16:51:05 +00:00
Ondřej Kuzník
8ed07d0b93 ITS#10307 Initialise last if we use it later 2025-02-18 19:42:58 +00:00
Ondřej Kuzník
e3dd9ac693 Update and clarify replication docs 2025-02-12 17:57:31 +00:00
Alexandre Jousset
068881efb4 ITS#10160 - Add "neguri" and "negset" constraint types to slapo-constraint 2025-02-12 17:46:55 +00:00
Howard Chu
429556c5f6 ITS#10302 slapd-mdb: fix idcursor double-free in slapadd shutdown
Caused when calling tool_entry_modify to update ctxcsn after all adds are done.
2025-02-04 17:00:36 +00:00
Nadezhda Ivanova
002214cc38 ITS#9186 Add deferred ops statistics counters 2025-01-06 16:24:24 +02:00
Ondřej Kuzník
62892d090c ITS#10290 Move syncrepl_modify_cb to the end of the list
The way op->orm_modlist is allocated by syncrepl_op_modify is not
compatible with slap_mods_free() and so callbacks from any overlays that
touch op->orm_modlist on the way down need a chance to undo their state
first as we go back up.
2024-12-16 20:00:25 +00:00
Nadezhda Ivanova
e2b04c434e ITS#9186 Add a counter to cn=Listener to track total number of established connections since startup 2024-12-16 18:31:23 +00:00
Ondřej Kuzník
70d8e22db7 ITS#7080 Do not reuse back-ldif's stack for controls 2024-12-16 17:01:26 +00:00
Ondřej Kuzník
e58266229f ITS#7080 Implement pre/postread for modrdn 2024-12-16 17:01:26 +00:00
Ondřej Kuzník
86d23423ac ITS#7080 Do not munge path twice 2024-12-16 17:01:26 +00:00
Ondřej Kuzník
2ba10ad59c ITS#10229 Adjust ldap_result behaviour with LDAP_MSG_RECEIVED 2024-12-16 16:18:53 +00:00
Howard Chu
c843b4ec93 ITS#10288 autoca: fix olcAutoCAserverClass config 2024-11-29 14:46:10 +00:00
Bjarni Ingi Gislason
6d41e5fef0 ITS#10226 - Fix ldap.conf(5) formatting issues 2024-11-14 21:05:52 +00:00
Ondřej Kuzník
64021967b5 ITS#10272 Request all attributes from remote
Fixes a regression introduced in fc1bcaf9de
leaving us unable to check the full filter after we recreate the entry.
2024-10-29 12:43:37 +00:00
Ondřej Kuzník
e29105597a ITS#10155 manage option values more carefully 2024-10-28 17:39:53 +00:00
Ondřej Kuzník
d143f7a2dc ITS#8047 Fix TLS connection timeout handling
The test for async in ldap_int_tls_start was inverted, we already
support calling ldap_int_tls_connect repeatedly. And so long as
LBER_SB_OPT_NEEDS_* are managed correctly, the application should be
able to do the right thing.

Might require a new result code rather than reporposing
LDAP_X_CONNECTING for this.
2024-10-26 20:51:35 +00:00