Commit graph

13139 commits

Author SHA1 Message Date
Howard Chu
aa31963e44 ITS#10231 slapadd: check for NULL suffix in error message 2024-06-18 17:14:12 +01:00
Howard Chu
f1b921783b ITS#10230 slapo-memberof: fix addcheck search to omit dynamic values 2024-06-17 21:40:48 +01:00
Nadezhda Ivanova
0f521e636b ITS#10227 Asyncmeta will not reset a connection if a bind operation fails with LDAP_OTHER, leaving the connection in invalid state 2024-06-13 21:23:27 +00:00
Nadezhda Ivanova
6b4b68b13a ITS#10219 Modify of olcDisabled by removing and adding a value invokes db_open twice
Do not invoke db_open if the database is not actually disabled
2024-06-13 18:41:25 +00:00
Nadezhda Ivanova
5740d1747d ITS#10218 Disabling and re-enabling an asyncmeta database via cn=config leaks memory
Make sure asyncmeta frees the pending operations structures, resets all connections, frees connection structures and stops the timeout-loop.
2024-06-13 17:38:06 +00:00
Quanah Gibson-Mount
f0ab743db4 ITS#9827 - Use 7MB memory/5 iterations as default
This has the same protections as 19MB/2 iterations, but requires less system memory
2024-06-11 17:06:33 +00:00
HAMANO Tsukasa
c14e3329c0 ITS#10214 Reduce library dependencies
Currently, slapd links libsystemd to notify service state to systemd.
However, libsystemd link several unnecessary libraries, which increases security risks.
The systemd documentation provides a method to send state notifications to systemd using a simple protocol without the need to link against libsystemd.

https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html
2024-05-08 09:50:10 +09:00
Nick Porter
bf01750381 ITS#10211 slapd: Fix peercred uid and gid format
uid and gid are unsigned int and so should be formatted as such when
creating the authid string.
2024-05-03 20:28:36 +01:00
Howard Chu
6d5400a2c7 ITS#10204 slapo-constraint: fix double-free on invalid attr 2024-04-30 15:55:01 +01:00
Nadezhda Ivanova
bd6dc46ad0 ITS#10197 Back-meta and back-asyncmeta add a new target structure and increase the number of targets even if uri parsing fails
Reproducible when adding a new target via cn=config
2024-04-29 19:23:35 +00:00
Nadezhda Ivanova
729a604192 ITS#10193 Asyncmeta starts more than one timeout loop per database and slaptest crashes 2024-04-11 15:26:15 +03:00
Howard Chu
a7007b7f64 ITS#10163 More configure munging
Streamline configuration of slapd modules. Just use the
appropriate OL_ARG_ENABLE_xx, then almost no other edits
will be needed in configure.ac when adding new modules.

Backends will still have to add their Makefile to the
AC_CONFIG_FILES() list.
2024-04-05 15:42:04 +00:00
Quanah Gibson-Mount
073232bbc7 Happy New Year! 2024-03-26 19:45:07 +00:00
Howard Chu
ddd42a2af3 ITS#10161 Add nestgroup overlay 2024-03-21 17:12:53 +00:00
Howard Chu
7015ad6568 ITS#10186 overlay response callbacks should ignore op->o_abandon 2024-03-06 14:57:15 +00:00
Howard Chu
ce524021f6 ITS#10044 dynlist: check for abandon in search2resp 2024-02-22 19:54:30 +00:00
Howard Chu
6ecc28b7c8 ITS#10172 logging: report errors when rotation fails 2024-02-22 17:40:35 +00:00
Nadezhda Ivanova
1bb795ad7a ITS#10164 back-meta hangs when used with dynlist overlay
Make sure every proxied operation has a separate candidates structure.
2024-02-15 16:39:49 +00:00
Ondřej Kuzník
af7575fabd ITS#10173 Populate li_minCSN on conversion 2024-02-12 18:50:10 +00:00
Stephen Gallagher
fb9e6a81bb ITS#10171 - Explicitly cast private values
Fixes issues with -Werror=incompatible-pointer-types

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2024-02-07 12:29:37 -05:00
Howard Chu
af877238e9 ITS#10170 accesslog: skip response if not fully initialized yet 2024-02-07 17:02:52 +00:00
Howard Chu
b3bbbb39cd ITS#10167 slapo-memberof: add addcheck option
Check memberships of newly added entries.
2024-02-06 01:22:58 +00:00
Ondřej Kuzník
7ade966cf3 ITS#9823 Move to a place that is better associated with accesslog 2024-02-05 22:57:17 +00:00
Nadezhda Ivanova
6cb3063bad ITS#10165 back-meta fails to bind to target when proxying an internal operation 2024-01-31 16:50:45 +00:00
Howard Chu
c7a4bd27f5 ITS#10166 slapi: fix plugin.c plugin_pblock_new() usage
Broken in 9142da8eaf
2024-01-31 16:00:30 +00:00
Ondřej Kuzník
f5fcbb428c ITS#10139 back-config: Honour disclose in matchedDN handling 2024-01-29 18:43:56 +00:00
Howard Chu
d56dcccb6f ITS#7420 clarify prev commit 2024-01-28 04:43:44 +00:00
Howard Chu
03338946b3 ITS#7420 more for prev commit
On naming error, don't free modvals
2024-01-28 04:00:34 +00:00
Howard Chu
7debe76f6c ITS#7420 re-fix slapcommon.c
bconfig requires RDN to pass schema check
2024-01-15 16:43:56 +00:00
Ondřej Kuzník
9cdd2c4af7 ITS#10110 Do not skip backover for result entries 2024-01-11 17:32:21 +00:00
Ondřej Kuzník
b8999d165c ITS#10151 Make sure we release scratch objects on "error" 2024-01-11 16:22:49 +00:00
Hiroyuki Homma
5cbb29cfcf ITS#10080 Fix refreshAndPersist synchronization problem with glue + rwm 2024-01-11 04:45:08 +00:00
Howard Chu
b3eab2ce94 ITS#10135 dynlist: fix search2resp callback context 2024-01-10 19:33:38 +00:00
Stacey Marshall
8139458b39 ITS#10130 Several callers of getpassphrase() ignore NULL returns 2024-01-10 18:47:36 +00:00
Howard Chu
f5c96f4469 ITS#7420 move entry_naming_check earlier in Add
Make sure RDN is present in e_attrs before passing entry to overlays
2024-01-10 17:05:13 +00:00
Howard Chu
314800db23 ITS#10143 only slapd should use the logfile 2023-12-19 15:49:03 +00:00
Ondřej Kuzník
f141416f32 ITS#10142 Link tiers in on cn=config startup 2023-12-19 14:47:34 +00:00
Howard Chu
a692941092 ITS#10092 fix prev commit for non-Windows 2023-12-08 03:41:40 +00:00
Howard Chu
595d177473 ITS#10092 logging: fix EOL when logfile-format is explicitly set 2023-12-08 03:25:22 +00:00
Ondřej Kuzník
860b61f41d ITS#10013 Make freeing controls the job of whoever added it 2023-11-21 17:21:52 +00:00
Ondřej Kuzník
c1f00a8af6 ITS#10013 Introduce slap_add_ctrl, changing slap_add_ctrls signature 2023-11-21 17:21:52 +00:00
Howard Chu
2494ade786 ITS#10025 slapo-dynlist: add option to disable filter support 2023-11-21 16:41:02 +00:00
Howard Chu
0b10f4a5b8 ITS#10092 logging: fix strftime for Windows
Although %T is standard and documented in M$ docs, it actually doesn't work in MSVCRT.
2023-11-16 18:47:34 +00:00
Howard Chu
247e5bcdfb ITS#10092 fix local logger for Windows
Don't use writev, just copy the message to insert prefix
2023-11-16 18:47:34 +00:00
Ondřej Kuzník
9b9469e251 ITS#10080 Fix slapcat when gluing is on 2023-11-16 16:45:26 +00:00
Ondřej Kuzník
8986f99d33 ITS#8852 Optimise attr_cmp for sortval attributes 2023-11-14 18:09:10 +00:00
Howard Chu
66edd34594 ITS#8677 back-sock: return error for CONTINUE
instead of asserting
2023-11-14 17:02:18 +00:00
Howard Chu
64789dd2c7 ITS#8180 back-sock: return error when str2entry fails 2023-11-14 17:02:18 +00:00
Howard Chu
f0c7427ba3 ITS#9660 back-mdb: make startup fail msg less specific 2023-11-09 17:10:31 +00:00
Howard Chu
2939df1a1d ITS#8498 slapadd: silence warning for NULL entry 2023-11-02 16:53:26 +00:00