Commit graph

24522 commits

Author SHA1 Message Date
Quanah Gibson-Mount
a741fb5e98 ITS#10216 2024-05-21 16:06:30 +00:00
Howard Chu
051b9f05a1 ITS#10216 libldap: fix OpenSSL channel binding digest
The OBJ_find_ API is undocumented but this is what OpenSSL libcrypto does itself.
2024-05-21 15:42:03 +00:00
Quanah Gibson-Mount
3fbe399c3c ITS#10209 2024-05-09 19:09:18 +00:00
Howard Chu
1d37f7b005 ITS#10209 libldap: only use OPENSSL_INIT_NO_ATEXIT if it's defined
Fake OpenSSL clones like LibreSSL don't support it.

In general we will make no effort to support fake OpenSSL clones.
2024-05-09 19:08:33 +00:00
Quanah Gibson-Mount
2814365126 ITS#10214 2024-05-09 17:10:10 +00:00
Quanah Gibson-Mount
5747936fd5 ITS#10214 - Regenerate configure 2024-05-09 17:09:19 +00:00
HAMANO Tsukasa
71f8894a9c ITS#10214 Reduce library dependencies
Currently, slapd links libsystemd to notify service state to systemd.
However, libsystemd link several unnecessary libraries, which increases security risks.
The systemd documentation provides a method to send state notifications to systemd using a simple protocol without the need to link against libsystemd.

https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html
2024-05-09 17:08:46 +00:00
Quanah Gibson-Mount
585c66a1c0 ITS#9921 2024-05-08 17:57:16 +00:00
Howard Chu
cfcb996084 ITS#9921 fix vlvResult comment 2024-05-08 15:30:06 +00:00
Quanah Gibson-Mount
2624ea1416 Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_6 2024-05-07 17:29:40 +00:00
Quanah Gibson-Mount
fd4db20d77 Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_6 2024-05-07 17:29:14 +00:00
Quanah Gibson-Mount
7c99799729 ITS#10212 2024-05-07 16:49:34 +00:00
Quanah Gibson-Mount
ccbec37209 ITS#10198 2024-05-07 16:49:00 +00:00
Quanah Gibson-Mount
ba13a88dbf ITS#10208 2024-05-07 16:45:11 +00:00
Ondřej Kuzník
d0a392b210 ITS#10084 Switch MECH default away from DIGEST-MD5 2024-05-07 16:43:54 +00:00
Quanah Gibson-Mount
b03015b273 ITS#10211 2024-05-07 16:38:07 +00:00
Nick Porter
0938316f3f ITS#10211 slapd: Fix peercred uid and gid format
uid and gid are unsigned int and so should be formatted as such when
creating the authid string.
2024-05-07 16:37:12 +00:00
Quanah Gibson-Mount
32db3dce4d ITS#10206 2024-05-07 16:35:27 +00:00
Ryan Tandy
b3c81ba171 ITS#10206 Include <kadm5/private.h> for kadm5_s_init_with_password_ctx 2024-05-07 16:35:12 +00:00
Quanah Gibson-Mount
7f5f4c635d ITS#10204 2024-05-07 16:33:24 +00:00
Howard Chu
3f752740b1 ITS#10204 slapo-constraint: fix double-free on invalid attr 2024-05-07 16:32:51 +00:00
Quanah Gibson-Mount
0feb4ef151 ITS#10197 2024-05-07 16:32:32 +00:00
Nadezhda Ivanova
5a0fb54284 ITS#10197 Back-meta and back-asyncmeta add a new target structure and increase the number of targets even if uri parsing fails
Reproducible when adding a new target via cn=config
2024-05-07 16:31:45 +00:00
Quanah Gibson-Mount
1a82434b92 ITS#10183 2024-05-07 16:31:32 +00:00
Howard Chu
6eb993c57f ITS#10183 ldapmodify: add jump to lineno option 2024-05-07 16:30:19 +00:00
Howard Chu
d83d6b4ebe ITS#10212 LMDB: better fix 2024-05-03 20:44:48 +01:00
Howard Chu
37829ce493 ITS#10212 LMDB: init txnid for read-only DBs 2024-05-02 16:33:14 +01:00
Quanah Gibson-Mount
c9fc3a431e ITS#10207 - regenerate configure 2024-05-01 16:27:08 +00:00
Howard Chu
00240128f5 ITS#10207 configure.ac: fix typo from ITS#10177 2024-05-01 16:23:41 +00:00
Quanah Gibson-Mount
f66f8ec6a0 ITS#10161 - regenerate configure 2024-04-16 19:30:39 +00:00
Quanah Gibson-Mount
0a4435b87f ITS#10161 - Add BUILD_NESTGROUP required for testsuite 2024-04-16 19:30:05 +00:00
Quanah Gibson-Mount
91b27126a3 ITS#10161 - Add missing testsuite bits 2024-04-16 16:56:33 +00:00
Quanah Gibson-Mount
66a961aaa3 ITS#10161 - regenerate configure 2024-04-16 16:09:35 +00:00
Quanah Gibson-Mount
4778532c4f ITS#10161 2024-04-16 16:09:18 +00:00
Howard Chu
fbef77d42d ITS#10161 Add nestgroup overlay 2024-04-16 16:08:15 +00:00
Quanah Gibson-Mount
dc7f07c294 ITS#10193 2024-04-16 15:48:54 +00:00
Nadezhda Ivanova
e9c93fac09 ITS#10193 Asyncmeta starts more than one timeout loop per database and slaptest crashes 2024-04-16 15:45:51 +00:00
Howard Chu
d3ae7c36e5 ITS#10198 Win32 mdb_strerror - stop passing "ignored" parameter
The M$ docs say the parameter is ignored, but it actually isn't,
and will cause a SEGV if the pointed memory isn't an init'd va_list.
2024-04-04 07:17:35 +01:00
Quanah Gibson-Mount
305bbd4bce ITS#10103, ITS#!014, ITS#10182 2024-04-02 20:09:34 +00:00
Howard Chu
bc6ab1131f ITS#10182 slapo-alias: check for static operational attrs too 2024-04-02 20:08:10 +00:00
Ondřej Kuzník
2de0fb10c5 ITS#10104 Add slapo-alias to contrib 2024-04-02 20:07:30 +00:00
Ondřej Kuzník
c4879a3cc0 ITS#10103 Fix contrib module OIDs 2024-04-02 20:06:34 +00:00
Quanah Gibson-Mount
fa5cf1252f Happy New Year! 2024-03-26 19:45:35 +00:00
Quanah Gibson-Mount
291c1e1e9a ITS#10185, ITS#10188 2024-03-26 17:07:26 +00:00
Howard Chu
dab86ede12 ITS#10188 autogroup: allow groups to be members of other groups
But doesn't support recursion - modifications on one autogroup
will not trigger further updates on other autogroups that reference it.
2024-03-26 17:05:45 +00:00
Howard Chu
9b3caaf7b8 ITS#10188 autogroup: cleanup autogroup_response
Minor restructuring
2024-03-26 17:05:33 +00:00
Howard Chu
ee98be8d82 ITS#10185 autogroup: fix missing mutex_unlock
Broken in 95e7a7be16
2024-03-26 17:04:58 +00:00
Howard Chu
1a5007f386 ITS#10185 autogroup: check for invalid memberURL filter 2024-03-26 17:04:51 +00:00
Howard Chu
687bd194c9 ITS#10185 autogroup: plug memleak when deleting a group 2024-03-26 17:04:44 +00:00
Howard Chu
67b6ef8bf4 ITS#10185 autogroup: use dnIsSuffixScope to check DN membership
Also break out of some loops after getting a matching result
2024-03-26 17:04:36 +00:00