Commit graph

24460 commits

Author SHA1 Message Date
Nadezhda Ivanova
4fbdbf388b ITS#10308 Implement cn=monitor for back-asyncmeta
Provide some target connection statistics such as target connections
status and target status
2025-07-31 19:01:56 +00:00
Howard Chu
0ff74659c0 ITS#10374 pcache: fix config emit of noattr attrset
Support for configuring an empty attrset was added in add25c2f45
for ITS#5074 but code to emit the config wasn't updated accordingly.
2025-07-31 16:43:31 +01:00
Howard Chu
216562d19d ITS#10361 slapo-auditlog (empty commit)
Note that 163da8d217 and
b6bed508f5 were for this ITS#.
Those commit messages didn't include the required ITS#.
2025-07-28 15:22:57 +01:00
Caolán McNamara
f584da2fe7 ITS#10375 libldap/tls2: const up oids
to move it out of the .data section
2025-07-28 15:19:04 +01:00
Howard Chu
ed2e55711b ITS#10377 adminguide: fix typos
Introduced same time as ITS#10376
2025-07-28 15:13:12 +01:00
Howard Chu
9dc7fdeb0a ITS#10376 adminguide: fix typo
Introduced in 20e24e1517
2025-07-28 15:11:07 +01:00
Howard Chu
7d2805f27c ITS#10370 libldap: don't assert on network input 2025-07-23 22:05:25 +01:00
Howard Chu
8d37106817 ITS#10367 admin: fix column layout 2025-07-08 17:54:28 +01:00
Howard Chu
c80fd40a18 ITS#10366 admin: fix typo 2025-07-08 16:09:33 +01:00
Arran Cudbard-Bell
163da8d217
slapo-auditlog: Add olcAuditlogNonBlocking to avoid blocking when logging to named pipes
The default behaviour of fopen() when called on a named pipe which does not have any reader, is to block, until a reader opens the pipe.  This blocks slapo-auditlog when it attempts to write output.  Depending on how critical the audit log  is, it may be preferable to discard audit log output and continue processing requests if there's no reader available.

For clarity the call to fopen() is removed and replaced with open()/fdopen(), allowing us to specify O_* flags as opposed to using fopen() or open()/fdopen(). 0666 are the base permissions used by fopen() when files are created.
2025-07-03 11:18:51 -06:00
Arran Cudbard-Bell
b6bed508f5
build: Set OS_WINDOWS in scripts/defines.sh to aid with Windows detection in test cases
This uses the result AC_CANONICAL_HOST and a pre-existing case statement checking for mingw32, cygwin, interix to determine if the build system is Windows based... We make the not unreasonable assumption that if the build system is Windows based, the tests will also be running on a Windows system.
2025-07-01 07:57:59 -04:00
Howard Chu
fcf6cb40b7 ITS#10359 note that logbase must exist on all providers in delta MPR 2025-06-24 16:01:53 +00:00
Howard Chu
6e559efd85 ITS#10360 delta MPR: internal search should use logDB's rootDN 2025-06-23 22:07:55 +00:00
Ondřej Kuzník
dcd60d1d0a ITS#10254 Let slapo-ppolicy rehash user's password 2025-06-23 16:47:48 +00:00
Ondřej Kuzník
406836540c ITS#10254 Fix password_scheme to return full hash specification 2025-06-23 16:47:48 +00:00
Ondřej Kuzník
d0d07810eb ITS#7981 Allow setting a default hash per policy 2025-06-23 16:47:48 +00:00
Ondřej Kuzník
dad90d66c5 ITS#7981 Move default hash selection to slap_passwd_hash_type 2025-06-23 16:47:48 +00:00
Ondřej Kuzník
9d90f55c83 ITS#9343 Fix uninitialised variable 2025-06-23 16:47:48 +00:00
Ondřej Kuzník
14d47146b0 ITS#10169 Allow a Compare against oathSecret 2025-06-20 23:45:43 +00:00
Ondřej Kuzník
9496132d28 ITS#10347 Be explicit about managing attr_bv storage 2025-06-20 14:52:19 +00:00
Ondřej Kuzník
dda3ab74db ITS#10345 Remove spurious strdup 2025-06-20 14:52:19 +00:00
Ondřej Kuzník
47e9cd7313 ITS#10349 Do not leak memberof_t 2025-06-20 14:52:19 +00:00
Ondřej Kuzník
b4ed8cf783 ITS#10349 Free bv_effective if unused 2025-06-20 14:52:19 +00:00
jinyaoguo
8cf1812431 ITS#10348 Relase memory allocated from ch_malloc in 2 error handling branches. 2025-06-20 14:52:19 +00:00
jinyaoguo
ddea2bc669 ITS#10343 Fix a memory leak in function slap_uuidstr_from_normalized 2025-06-20 14:52:19 +00:00
jinyaoguo
f00339df9e ITS#10344 Ensure the first argument passed to ber_dupbv_x is not NULL. 2025-06-20 14:52:19 +00:00
Howard Chu
76e1492809 ITS#10356 libldap: implement LDAP_OPT_REFHOPLIMIT 2025-06-20 02:35:44 +00:00
Michael Kourlas
585e6aa9a5 ITS#10330 keep socket non-blocking during polling in ldap_int_tls_start
During TLS negotiation, if a timeout is set, ldap_int_tls_start sets the
socket to non-blocking and calls ldap_int_poll in a loop if
ldap_int_tls_connect does not succeed the first time it is called.

However, ldap_int_poll sets the socket back to blocking and we currently
do not set it back to non-blocking. This means that a subsequent call to
ldap_int_tls_connect may hang and the configured timeout will not be
enforced. To fix this, we now set the socket back to non-blocking after
ldap_int_poll is called.
2025-06-19 13:49:40 +00:00
Michael Kourlas
76b9c476dd ITS#10330 do not poll socket in ldap_int_tls_start if no timeout set
This probably had no effect, but is unnecessary.
2025-06-19 13:49:40 +00:00
Boleslaw Ciesielski
e77ab14f0c ITS#10335 ldapsearch: fix handling of -LL in print_reference()
print_reference() was printing comments even when disabled with -LL option.
2025-06-17 23:08:02 +00:00
Ondřej Kuzník
87a2d70750 ITS#10338 Add olcConstraintAllowEmpty 2025-06-17 19:26:25 +00:00
Ondřej Kuzník
10b1d6c9b4 ITS#10339 Do not reuse freed memory 2025-06-17 16:27:59 +00:00
Ondřej Kuzník
7717e2ba4d ITS#10301 Send assert control with forwarded mods if configured 2025-06-17 14:58:26 +00:00
Nadezhda Ivanova
086296d5fa ITS#9186 Implement result code counters 2025-06-11 14:29:37 +03:00
Howard Chu
7a8d72b02b ITS#10336 slapd-mdb: fix delete on empty DB
Don't assume parent of target entry will always exist.
2025-05-13 18:02:27 +01:00
Ondřej Kuzník
6063498361 ITS#10297 Defer hostname resolution til first use 2025-05-09 09:31:26 +01:00
Greg Noe
9a52a3c28b ITS#10140 Add microsecond timestamp format for local file logging 2025-04-30 07:46:42 -07:00
Ondřej Kuzník
f1556ba98a ITS#10331 Add helpful error messages for usage errors 2025-04-25 13:45:09 +01:00
Howard Chu
e5a545d54c ITS#10328 librewrite: fix substitution cleanup 2025-04-24 16:47:31 +00:00
Ondřej Kuzník
ca5391b811 ITS#10327 Allow lockless config_back_search() during server pause
The assumption is that the only reason it is allowed to run at this
point is that it is called from the reconfiguration context anyway.
2025-04-24 15:24:56 +00:00
Ondřej Kuzník
fd0cf64b16 ITS#10325 slapd-dsaschema: Use assigned OIDs 2025-04-24 07:34:47 +00:00
Ondřej Kuzník
93d10369f2 ITS#10325 slapo-variant: Use assigned OIDs 2025-04-24 07:34:47 +00:00
Ondřej Kuzník
948400af2b ITS#10323 Apply olcBkLloadStartTLS runtime changes directly 2025-04-23 21:17:51 +00:00
Howard Chu
2e049ef878 ITS#10320 autogroup: mark internal searches
Avoid any other overlays munging autogroup's searches
2025-04-23 16:35:04 +00:00
Howard Chu
015f2937ba ITS#10168 back-mdb: cleanup index setup
Nop index setup when index config resulted in no configured indices
2025-04-23 15:16:47 +00:00
Howard Chu
10456f5850 ITS#10326 mbedtls: always call mbedtls_ssl_set_hostname()
Even if hostname is NULL, the library requires this be called once.
If non-NULL, mbedtls may do a hostname check which is redundant
since libldap does its own check.
2025-04-22 17:26:46 +01:00
Howard Chu
36dd6e2e62 ITS#10299 slapacl(8): fix dry-run description 2025-04-01 19:41:10 +00:00
Howard Chu
f1ca58680a ITS#10299 slapacl: use dummy entry_get in dry-run mode 2025-04-01 19:41:10 +00:00
Howard Chu
e5d841f46d ITS#9934 slapd-config(5) add new TLS cert/key settings 2025-04-01 16:06:32 +00:00
Howard Chu
f8f0fa4799 ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once 2025-04-01 16:06:32 +00:00