Commit graph

24970 commits

Author SHA1 Message Date
Quanah Gibson-Mount
923ed40c39 Prep for release 2.5.19 2024-11-26 17:12:48 +00:00
Quanah Gibson-Mount
334ca932c2 ITS#10272 2024-11-13 17:14:46 +00:00
Ondřej Kuzník
3b9d4bc433 ITS#10272 Request all attributes from remote
Fixes a regression introduced in fc1bcaf9de
leaving us unable to check the full filter after we recreate the entry.
2024-11-13 17:13:04 +00:00
Quanah Gibson-Mount
db73d4d149 ITS#10155 2024-11-12 17:49:49 +00:00
Ondřej Kuzník
6909574ca1 ITS#10155 manage option values more carefully 2024-11-12 17:49:42 +00:00
Quanah Gibson-Mount
cae9bdcdfa ITS#10264 2024-11-12 17:45:12 +00:00
Ondřej Kuzník
39c97c8ad0 ITS#10264 Free NoD data we stored locally 2024-11-12 17:45:03 +00:00
Quanah Gibson-Mount
3f8fc66776 ITS#10232 2024-10-04 22:07:44 +00:00
Ondřej Kuzník
15b73ed1a2 ITS#10232 Reset cs_refreshing on config delete 2024-10-04 22:07:28 +00:00
Quanah Gibson-Mount
3f63d7381e ITS#10248 2024-10-04 22:05:16 +00:00
Michael Nolta
ab3f7f068e ITS#10248 Regression test script 2024-10-04 22:04:56 +00:00
Ondřej Kuzník
8f37b15432 ITS#10248 Always generate a result on the original op 2024-10-04 22:04:53 +00:00
Quanah Gibson-Mount
2ac61543d9 ITS#10253 2024-10-04 21:58:22 +00:00
Ryan Tandy
1a6a2ac4ff ITS#10253 Fix incompatible pointer type with GnuTLS 2024-10-04 21:58:05 +00:00
Quanah Gibson-Mount
53843550c6 ITS#10233 2024-10-04 21:57:52 +00:00
HAMANO Tsukasa
f141ee5da1 ITS#10233 - fix idl intersection
The `mdb_idl_intersection()` and `wt_idl_intersection()` functions derived from back-bdb return wrong results.

expect:
[1, 3] ∩ [2] = []

actual:
[1, 3] ∩ [2] = [2]

also
- Add scope checking for back-wt
- fix compiler warning
2024-10-04 21:52:28 +00:00
Quanah Gibson-Mount
6d79e46106 ITS#10237 2024-10-04 21:47:48 +00:00
Howard Chu
b5bc6d69af ITS#10237 back-ldap: fix usage of multi-precision add for op counters 2024-10-04 21:46:37 +00:00
Quanah Gibson-Mount
4c98d79157 ITS#10223 - fix function call 2024-06-28 19:11:03 +00:00
Quanah Gibson-Mount
d161fa7f8d ITS#10231 2024-06-28 17:02:52 +00:00
Howard Chu
12d105b17b ITS#10231 slapadd: check for NULL suffix in error message 2024-06-28 17:02:46 +00:00
Quanah Gibson-Mount
66117ce8cf ITS#10227 2024-06-28 17:02:41 +00:00
Nadezhda Ivanova
5baa87235d ITS#10227 Asyncmeta will not reset a connection if a bind operation fails with LDAP_OTHER, leaving the connection in invalid state 2024-06-28 16:59:11 +00:00
Quanah Gibson-Mount
910c2be24e ITS#10219 2024-06-28 16:58:36 +00:00
Nadezhda Ivanova
230bd39c07 ITS#10219 Modify of olcDisabled by removing and adding a value invokes db_open twice
Do not invoke db_open if the database is not actually disabled
2024-06-28 16:58:05 +00:00
Quanah Gibson-Mount
a85ed5618d ITS#9827 2024-06-28 16:53:20 +00:00
Quanah Gibson-Mount
412d897c17 ITS#9827 - Use 7MB memory/5 iterations as default
This has the same protections as 19MB/2 iterations, but requires less system memory
2024-06-28 16:53:05 +00:00
François Kooman
08a78a0224 ITS#9827 update Argon2 defaults
- switch to argon2id by default (from argon2i)
- use OWASP recommended parameters as defaults

This only affects builds that use libargon2, e.g. Debian, and
not builds that use libsodium as argon2id is already the
default there, and better parameters are used

References: https://bugs.openldap.org/show_bug.cgi?id=9827
Signed-off-by: François Kooman <fkooman@tuxed.net>
2024-06-28 16:52:53 +00:00
Quanah Gibson-Mount
979eed81e2 ITS#10224 2024-06-28 16:52:36 +00:00
Howard Chu
bee6e76cd9 ITS#10224 libldap: check for OpenSSL EVP_Digest* failure 2024-06-28 16:52:18 +00:00
Quanah Gibson-Mount
07dc2133c9 ITS#10223 2024-06-28 16:52:07 +00:00
Howard Chu
248d740251 ITS#10223 libldap: check for OpenSSL SSL_CTX_set_ciphersuites failure 2024-06-28 16:50:47 +00:00
Quanah Gibson-Mount
9f48f3f3b6 ITS#10221 2024-06-03 15:09:34 +00:00
Quanah Gibson-Mount
1401ff3afb ITS#10221 - Regenerate configure 2024-06-03 15:09:11 +00:00
Quanah Gibson-Mount
7bc97addc8 ITS#10221 - Remove extraneous quote 2024-06-03 15:08:22 +00:00
Quanah Gibson-Mount
e088fb6e6f Return to release engineering 2024-06-03 15:08:01 +00:00
Quanah Gibson-Mount
675b5165aa Prep for release (2.5.18) 2024-05-21 17:19:57 +00:00
Quanah Gibson-Mount
d537918de9 Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5 2024-05-21 17:16:55 +00:00
Quanah Gibson-Mount
3a29a24777 Prep for release 2024-05-21 17:16:06 +00:00
Quanah Gibson-Mount
1d4e1a9740 ITS#10216 2024-05-21 16:05:47 +00:00
Howard Chu
8bb35fd878 ITS#10216 libldap: fix OpenSSL channel binding digest
The OBJ_find_ API is undocumented but this is what OpenSSL libcrypto does itself.
2024-05-21 15:42:09 +00:00
Quanah Gibson-Mount
1e75e3d6a8 ITS#10209 2024-05-09 19:09:42 +00:00
Howard Chu
c3e710dc28 ITS#10209 libldap: only use OPENSSL_INIT_NO_ATEXIT if it's defined
Fake OpenSSL clones like LibreSSL don't support it.

In general we will make no effort to support fake OpenSSL clones.
2024-05-09 19:09:29 +00:00
Quanah Gibson-Mount
69dd3f82c8 ITS#10214 2024-05-09 17:13:06 +00:00
Quanah Gibson-Mount
f19193316d ITS#10214 - regenerate configure 2024-05-09 17:12:24 +00:00
HAMANO Tsukasa
f7c76e2daf ITS#10214 Reduce library dependencies
Currently, slapd links libsystemd to notify service state to systemd.
However, libsystemd link several unnecessary libraries, which increases security risks.
The systemd documentation provides a method to send state notifications to systemd using a simple protocol without the need to link against libsystemd.

https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html
2024-05-09 17:10:49 +00:00
Quanah Gibson-Mount
3279ce21e7 ITS#9921 2024-05-08 17:56:59 +00:00
Howard Chu
f640d170be ITS#9921 fix vlvResult comment 2024-05-08 15:30:13 +00:00
Quanah Gibson-Mount
6823f11fde Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5 2024-05-07 17:29:07 +00:00
Quanah Gibson-Mount
7c99799729 ITS#10212 2024-05-07 16:49:34 +00:00