Commit graph

13090 commits

Author SHA1 Message Date
Howard Chu
2939df1a1d ITS#8498 slapadd: silence warning for NULL entry 2023-11-02 16:53:26 +00:00
Ondřej Kuzník
543230c9e7 ITS#10089 Fix acl logging 2023-11-02 14:02:15 +00:00
Ondřej Kuzník
92cca70426 ITS#10123 Add a missing include 2023-11-02 13:42:07 +00:00
Howard Chu
11b3e5946b ITS#10117 build: fix slap-config.h decls for Windows DLLs 2023-10-19 18:46:54 +01:00
Ondřej Kuzník
3cf5db1610 ITS#10080 Preserve original choice of backend for entry_release 2023-10-09 20:22:42 +00:00
Ondřej Kuzník
b13132f2ce ITS#9959 Expose connection endpoints in cn=monitor 2023-09-27 14:44:52 +00:00
Ondřej Kuzník
923483ccea ITS#9959 Track actual connection local/peername 2023-09-27 14:44:52 +00:00
hyc
a7bd0416c8 More windows cleanup for slapi
Fix link dependencies.
Fix file locking in printmsg.c.
2023-09-07 21:13:35 +01:00
Howard Chu
3489931553 Cleanup Windows build
Fix make depend errors in slapi
2023-09-07 20:03:07 +01:00
Ondřej Kuzník
de89b06b03 ITS#10074 Fix type mismatches in lloadd 2023-08-23 01:21:15 +00:00
Ondřej Kuzník
242d1e6d62 ITS#7226 Make olcAuditlogFile SINGLE-VALUE 2023-08-21 12:19:16 +01:00
Ondřej Kuzník
02975a3dc7 ITS#10091 Do not allow dynlist being configured as global 2023-08-15 13:07:46 +01:00
François Kooman
61e4832110 ITS#9827 update Argon2 defaults
- switch to argon2id by default (from argon2i)
- use OWASP recommended parameters as defaults

This only affects builds that use libargon2, e.g. Debian, and
not builds that use libsodium as argon2id is already the
default there, and better parameters are used

References: https://bugs.openldap.org/show_bug.cgi?id=9827
Signed-off-by: François Kooman <fkooman@tuxed.net>
2023-08-11 20:58:56 +00:00
Ondřej Kuzník
39403c9db2 ITS#10073 back-ldap: Make sure we have a suffix configured 2023-08-11 20:00:50 +00:00
Greg Burd
ba90df4dc3
convert Debug to use config args 2023-08-10 15:29:47 -04:00
Howard Chu
2086008a79
Use ConfigArgs in ACL parsing
For better error propagation back to config clients, also
remove unconditional use of stderr.

parse_acl() was only partially converted, the rest remains to be done.
2023-08-08 14:18:33 -04:00
Howard Chu
9142da8eaf
Use ConfigArgs in slapi config parsing 2023-08-08 14:18:21 -04:00
Greg Burd
7a4812d2fa
Allow caller to determine if the process should exit or not when the regex is found to be problematic. 2023-08-08 11:08:22 -04:00
Ondřej Kuzník
2738a32de3 ITS#10045 Make sure we only unpause when paused 2023-07-31 16:46:12 +00:00
Ondřej Kuzník
5677a410e6 ITS#10083 Do not mess with a connection that's dying already 2023-07-20 16:21:54 +00:00
Nadezhda Ivanova
6cbcfa0af3 ITS#10076 suffixmassage in back-asyncmeta does not handle empty remote suffix correctly 2023-07-19 16:41:29 +00:00
Ondřej Kuzník
208d68cdd9 ITS#10070 Allow running without a valid resolv.conf file 2023-07-19 14:53:20 +00:00
Ondřej Kuzník
67d3fd3d14 ITS#10068 keep our own copy of the DN 2023-06-21 13:20:18 +01:00
Ondřej Kuzník
5ae48d085f ITS#10067 Account for mods being optional 2023-06-20 01:03:12 +00:00
Ondřej Kuzník
7aaee92f0a ITS#9343 More policy selection criteria 2023-06-06 11:46:17 +01:00
Ondřej Kuzník
34470dd86b ITS#9343 Check for objectclasss when retrieving policy 2023-06-06 11:46:17 +01:00
Ondřej Kuzník
bdbba0748e ITS#10013 Fix slapo-ppolicy control handling 2023-06-06 11:46:17 +01:00
Ondřej Kuzník
f635f9e6d8 ITS#10064 Allow renaming of Cft_Misc entries 2023-06-06 11:46:17 +01:00
Howard Chu
ec3fafd1a6 ITS#10047 back-mdb: fix indexer resume on slapd restart
when overlays are in use on the database
2023-05-15 17:55:46 +00:00
Howard Chu
3271bfa1ea ITS#10047 back-mdb: delete idxckp table after slapindex
Could do it when beginning too, either way an interrupted slapindex
must be rerun completely.
2023-05-15 17:55:46 +00:00
Ondřej Kuzník
992815ced5 ITS#10041 Restrict group searching 2023-05-05 16:55:01 +00:00
Ondřej Kuzník
efe0de0be6 ITS#10042 Call monitor_cache_release exactly once 2023-04-27 21:19:48 +00:00
Ondřej Kuzník
525b631e37 ITS#10045 Also check for abandon when things have settled 2023-04-27 19:37:02 +00:00
Howard Chu
950aa08c31 ITS#10036 slapd: fix parsing of session tracking control
Was erroneously treating IPv6 addrs beginning with ':' as unprintable.
2023-04-24 18:50:38 +00:00
Ondřej Kuzník
95232bc323 ITS#10037 Update argon2 README 2023-04-13 16:12:47 +01:00
johan pascal
f7e6c71e13 ITS#10014: Add TLS handle using MbedTLS 2023-03-31 05:19:30 +00:00
Ondřej Kuzník
6c2164970a ITS#10032 Use the correct ocs field 2023-03-31 04:48:17 +00:00
Ondřej Kuzník
53906655ef ITS#10031 Adjust *err if we free it 2023-03-30 23:12:55 +00:00
HAMANO Tsukasa
0e409f49ec ITS#10028 - crash with pwdMinDelay 2023-03-30 18:19:53 +00:00
Howard Chu
5f934c8c45 ITS#10016: slapo-syncprov: fix Abandon with active qtask 2023-02-27 15:01:23 +00:00
Ondřej Kuzník
2a5eff41b0 ITS#9953 Check for push replication 2023-02-17 21:07:16 +00:00
Howard Chu
4a9e449b24 ITS#9997 syncrepl: plug potential leak in changelog search
Note this is only used with changelog, which is nonstandard and obsolete.
2023-02-17 15:52:35 +00:00
Sam James
b260205fd5 ITS#10011 servers: fix -Wstrict-prototypes
For more information, see LWN.net [0] or LLVM's Discourse [1], the Gentoo wiki [2],
or the (new) c-std-porting mailing list [3].

[0] https://lwn.net/Articles/913505/
[1] https://discourse.llvm.org/t/configure-script-breakage-with-the-new-werror-implicit-function-declaration/65213
[2] https://wiki.gentoo.org/wiki/Modern_C_porting
[3] hosted at lists.linux.dev.

Signed-off-by: Sam James <sam@gentoo.org>
2023-02-10 23:22:54 +00:00
Howard Chu
69f52354d2 ITS#9993 fix online_indexer termination/cleanup 2023-02-01 20:30:22 +00:00
Ondřej Kuzník
fa64703e6c ITS#9990 Preserve callbacks added already 2023-02-01 16:56:37 +00:00
Howard Chu
801297cb77 ITS#9991 send_ldap_ber: make sure we're only closing our own connection 2023-01-30 14:44:27 +00:00
Ondřej Kuzník
868309c90d ITS#8102 Do not continue if deconfigured during pause 2023-01-30 12:06:24 +00:00
Ondřej Kuzník
fa030ef8dc ITS#9930 Do not reschedule consumers that are shutting down 2023-01-30 10:26:23 +00:00
Ondřej Kuzník
12bf5a95ba ITS#9045 rlock only if there may be other threads
We can't rlock if we've registered ourselves as a writer. We can only
figure that out by checking if we're the thread that initiated the
pause: is the server paused already?
2023-01-23 11:53:36 +00:00
Ondřej Kuzník
5ccbe63246 ITS#9930 Just wait until si_mutex is ready
We're in a much better place now and there is only a single task active
for a given syncinfo_t plus the task that's just scheduled it and is
wrapping up. Any remaining times this wouldn't be true are probably bugs
to be fixed.
2023-01-19 15:21:05 +00:00