Quanah Gibson-Mount
923ed40c39
Prep for release 2.5.19
2024-11-26 17:12:48 +00:00
Quanah Gibson-Mount
334ca932c2
ITS#10272
2024-11-13 17:14:46 +00:00
Ondřej Kuzník
3b9d4bc433
ITS#10272 Request all attributes from remote
...
Fixes a regression introduced in fc1bcaf9de
leaving us unable to check the full filter after we recreate the entry.
2024-11-13 17:13:04 +00:00
Quanah Gibson-Mount
db73d4d149
ITS#10155
2024-11-12 17:49:49 +00:00
Ondřej Kuzník
6909574ca1
ITS#10155 manage option values more carefully
2024-11-12 17:49:42 +00:00
Quanah Gibson-Mount
cae9bdcdfa
ITS#10264
2024-11-12 17:45:12 +00:00
Ondřej Kuzník
39c97c8ad0
ITS#10264 Free NoD data we stored locally
2024-11-12 17:45:03 +00:00
Quanah Gibson-Mount
3f8fc66776
ITS#10232
2024-10-04 22:07:44 +00:00
Ondřej Kuzník
15b73ed1a2
ITS#10232 Reset cs_refreshing on config delete
2024-10-04 22:07:28 +00:00
Quanah Gibson-Mount
3f63d7381e
ITS#10248
2024-10-04 22:05:16 +00:00
Michael Nolta
ab3f7f068e
ITS#10248 Regression test script
2024-10-04 22:04:56 +00:00
Ondřej Kuzník
8f37b15432
ITS#10248 Always generate a result on the original op
2024-10-04 22:04:53 +00:00
Quanah Gibson-Mount
2ac61543d9
ITS#10253
2024-10-04 21:58:22 +00:00
Ryan Tandy
1a6a2ac4ff
ITS#10253 Fix incompatible pointer type with GnuTLS
2024-10-04 21:58:05 +00:00
Quanah Gibson-Mount
53843550c6
ITS#10233
2024-10-04 21:57:52 +00:00
HAMANO Tsukasa
f141ee5da1
ITS#10233 - fix idl intersection
...
The `mdb_idl_intersection()` and `wt_idl_intersection()` functions derived from back-bdb return wrong results.
expect:
[1, 3] ∩ [2] = []
actual:
[1, 3] ∩ [2] = [2]
also
- Add scope checking for back-wt
- fix compiler warning
2024-10-04 21:52:28 +00:00
Quanah Gibson-Mount
6d79e46106
ITS#10237
2024-10-04 21:47:48 +00:00
Howard Chu
b5bc6d69af
ITS#10237 back-ldap: fix usage of multi-precision add for op counters
2024-10-04 21:46:37 +00:00
Quanah Gibson-Mount
4c98d79157
ITS#10223 - fix function call
2024-06-28 19:11:03 +00:00
Quanah Gibson-Mount
d161fa7f8d
ITS#10231
2024-06-28 17:02:52 +00:00
Howard Chu
12d105b17b
ITS#10231 slapadd: check for NULL suffix in error message
2024-06-28 17:02:46 +00:00
Quanah Gibson-Mount
66117ce8cf
ITS#10227
2024-06-28 17:02:41 +00:00
Nadezhda Ivanova
5baa87235d
ITS#10227 Asyncmeta will not reset a connection if a bind operation fails with LDAP_OTHER, leaving the connection in invalid state
2024-06-28 16:59:11 +00:00
Quanah Gibson-Mount
910c2be24e
ITS#10219
2024-06-28 16:58:36 +00:00
Nadezhda Ivanova
230bd39c07
ITS#10219 Modify of olcDisabled by removing and adding a value invokes db_open twice
...
Do not invoke db_open if the database is not actually disabled
2024-06-28 16:58:05 +00:00
Quanah Gibson-Mount
a85ed5618d
ITS#9827
2024-06-28 16:53:20 +00:00
Quanah Gibson-Mount
412d897c17
ITS#9827 - Use 7MB memory/5 iterations as default
...
This has the same protections as 19MB/2 iterations, but requires less system memory
2024-06-28 16:53:05 +00:00
François Kooman
08a78a0224
ITS#9827 update Argon2 defaults
...
- switch to argon2id by default (from argon2i)
- use OWASP recommended parameters as defaults
This only affects builds that use libargon2, e.g. Debian, and
not builds that use libsodium as argon2id is already the
default there, and better parameters are used
References: https://bugs.openldap.org/show_bug.cgi?id=9827
Signed-off-by: François Kooman <fkooman@tuxed.net>
2024-06-28 16:52:53 +00:00
Quanah Gibson-Mount
979eed81e2
ITS#10224
2024-06-28 16:52:36 +00:00
Howard Chu
bee6e76cd9
ITS#10224 libldap: check for OpenSSL EVP_Digest* failure
2024-06-28 16:52:18 +00:00
Quanah Gibson-Mount
07dc2133c9
ITS#10223
2024-06-28 16:52:07 +00:00
Howard Chu
248d740251
ITS#10223 libldap: check for OpenSSL SSL_CTX_set_ciphersuites failure
2024-06-28 16:50:47 +00:00
Quanah Gibson-Mount
9f48f3f3b6
ITS#10221
2024-06-03 15:09:34 +00:00
Quanah Gibson-Mount
1401ff3afb
ITS#10221 - Regenerate configure
2024-06-03 15:09:11 +00:00
Quanah Gibson-Mount
7bc97addc8
ITS#10221 - Remove extraneous quote
2024-06-03 15:08:22 +00:00
Quanah Gibson-Mount
e088fb6e6f
Return to release engineering
2024-06-03 15:08:01 +00:00
Quanah Gibson-Mount
675b5165aa
Prep for release (2.5.18)
2024-05-21 17:19:57 +00:00
Quanah Gibson-Mount
d537918de9
Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5
2024-05-21 17:16:55 +00:00
Quanah Gibson-Mount
3a29a24777
Prep for release
2024-05-21 17:16:06 +00:00
Quanah Gibson-Mount
1d4e1a9740
ITS#10216
2024-05-21 16:05:47 +00:00
Howard Chu
8bb35fd878
ITS#10216 libldap: fix OpenSSL channel binding digest
...
The OBJ_find_ API is undocumented but this is what OpenSSL libcrypto does itself.
2024-05-21 15:42:09 +00:00
Quanah Gibson-Mount
1e75e3d6a8
ITS#10209
2024-05-09 19:09:42 +00:00
Howard Chu
c3e710dc28
ITS#10209 libldap: only use OPENSSL_INIT_NO_ATEXIT if it's defined
...
Fake OpenSSL clones like LibreSSL don't support it.
In general we will make no effort to support fake OpenSSL clones.
2024-05-09 19:09:29 +00:00
Quanah Gibson-Mount
69dd3f82c8
ITS#10214
2024-05-09 17:13:06 +00:00
Quanah Gibson-Mount
f19193316d
ITS#10214 - regenerate configure
2024-05-09 17:12:24 +00:00
HAMANO Tsukasa
f7c76e2daf
ITS#10214 Reduce library dependencies
...
Currently, slapd links libsystemd to notify service state to systemd.
However, libsystemd link several unnecessary libraries, which increases security risks.
The systemd documentation provides a method to send state notifications to systemd using a simple protocol without the need to link against libsystemd.
https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html
2024-05-09 17:10:49 +00:00
Quanah Gibson-Mount
3279ce21e7
ITS#9921
2024-05-08 17:56:59 +00:00
Howard Chu
f640d170be
ITS#9921 fix vlvResult comment
2024-05-08 15:30:13 +00:00
Quanah Gibson-Mount
6823f11fde
Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5
2024-05-07 17:29:07 +00:00
Quanah Gibson-Mount
7c99799729
ITS#10212
2024-05-07 16:49:34 +00:00