Ondřej Kuzník
d1e874c605
ITS#8768 Introduce delcsn into our syncrepl cookies
2020-06-23 16:06:09 +00:00
Ondřej Kuzník
eae2dfde04
ITS#9280 Add ppolicy_disable_write
2020-06-23 15:29:26 +00:00
Quanah Gibson-Mount
58c978825c
Issue#9020 - Use consistent namespaces for overlays
2020-06-22 20:44:12 +00:00
Ondřej Kuzník
3e5490f467
ITS#9043 More descriptive logs for syncrepl traffic and decisions
2020-06-22 18:20:22 +00:00
Ondřej Kuzník
799607231d
ITS#7796 Move 'not indexed' messages to loglevel filter
2020-06-22 09:28:26 +01:00
Ondřej Kuzník
71560032f4
ITS#8949 Check eblock exists before freeing
...
cn=config changes might cause slapi_plugins_used transition from 0
during the lifetime of operation (cn=config change or syncrepl) or
a connection and we should be able to deal with that.
2020-06-21 22:53:14 +00:00
Ondřej Kuzník
6b46232ab8
ITS#8473 Implement ordering stable (de)registration
2020-06-21 22:53:14 +00:00
Ondřej Kuzník
e5105e706e
ITS#8473 Mark olcPlugin as ordered
2020-06-21 22:53:14 +00:00
Quanah Gibson-Mount
0d0d50724a
ITS#8140 - Update bind operations to note bind_ssf vs overall connection ssf
2020-06-21 22:04:46 +00:00
Ondřej Kuzník
57b0ed909c
ITS#8434 Allow cleanup at the end of a failed back-config add
2020-06-21 18:55:09 +00:00
Howard Chu
2346dfd2a0
ITS#9262 check referral
2020-06-21 00:45:45 +01:00
Quanah Gibson-Mount
4e8f91304e
Issue#9239 - Fix case where e->e_dn may be NULL causing a segfault on some platforms
2020-05-27 19:51:16 +00:00
Quanah Gibson-Mount
f926e66723
ITS#8873 - Delete obsolete configuration options from back-ldap, back-meta, and back-asyncmeta
2020-05-26 19:59:56 +00:00
Howard Chu
c70e2e0869
ITS#9264 more for unique locking
2020-05-25 22:38:30 +01:00
Ondřej Kuzník
f3952d947b
ITS#9059 Document why we do FIND_CSN
2020-05-22 16:57:53 +00:00
Ondřej Kuzník
709d805f84
ITS#9059 Skip mincsn check if sessionlog replay was successful
2020-05-22 16:57:53 +00:00
Howard Chu
9183abe62c
ITS#9264 add an optional lock to slapo-unique
2020-05-22 15:08:20 +01:00
Quanah Gibson-Mount
c91bbe6eea
ITS#8614 - slapd must be built threaded
2020-05-14 16:30:17 +00:00
Ryan Tandy
fc8a7b25b8
ITS#9258 More for ITS#6937, don't free user/group
2020-05-10 08:47:54 -07:00
Howard Chu
f5ff1dad7e
ITS#9227 fix attr / opattr detection in prev commit
2020-05-08 18:50:58 +01:00
Howard Chu
5462fc26b5
ITS#9227 syncrepl: don't delete non-replicated attrs
2020-05-08 16:23:44 +01:00
Howard Chu
d38d48fc8f
ITS#9202 limit depth of nested filters
...
Using a hardcoded limit for now; no reasonable apps
should ever run into it.
2020-04-28 13:58:15 +00:00
Ryan Tandy
8f174209e1
ITS#7573 Fix back-perl dynamic config with threaded slapd
2020-04-27 16:21:12 +00:00
Isaac Boukris
3cd50fa8b3
ITS#9189 rework sasl-cbinding support
...
Add LDAP_OPT_X_SASL_CBINDING option to define the binding type to use,
defaults to "none".
Add "tls-endpoint" binding type implementing "tls-server-end-point" from
RCF 5929, which is compatible with Windows.
Fix "tls-unique" to include the prefix in the bindings as per RFC 5056.
2020-04-23 21:00:39 +02:00
Quanah Gibson-Mount
96fedda628
ITS#5573 - Expose contextCSN, entryCSN in subschema entry
2020-04-22 18:59:38 +00:00
Quanah Gibson-Mount
bc9a92866a
ITS#6740 - Always enable rewrite
2020-04-22 14:49:10 +00:00
Howard Chu
bcb0af6262
ITS#6745 slapd daemon: use separate emfile mutex
2020-04-17 02:46:10 +01:00
Ondřej Kuzník
550476b5ad
ITS#9112 Silence warnings
2020-04-16 16:41:35 +00:00
Ondřej Kuzník
8f01fdec36
ITS#8731 Remove unused arguments
2020-04-16 16:41:35 +00:00
Ondřej Kuzník
65d0936811
ITS#8245 Silence warning
2020-04-16 16:41:35 +00:00
Quanah Gibson-Mount
a97eed06f0
ITS#6937 - Remove unused proctitle bits
2020-04-15 19:32:28 +00:00
grapvar
a5e17673a6
ITS#9214 slapd-mdb: plug cursor leak in dnSuperiorMatch filter
2020-04-15 00:14:37 +01:00
Ryan Tandy
38f9dd2fb8
ITS#7878 Replace uint32_t with unsigned in back-mdb
...
init.c: align mi_dbenv_flags and flags with mdb_dbi_open, which declares
flags as unsigned int.
search.c: align mi_rtxn_size with ARG_UINT; adjust ww_ctx.nentries to
silence a warning about signed/unsigned comparison.
config.c: parse checkpoint config more carefully. Reject negative or
unreasonably large values for kbytes and minutes. Ensure both values are
parsed successfully before making any changes.
Fixes a compilation failure under MinGW, where stdint.h types are not
implicitly pulled in by other headers.
2020-04-14 10:04:33 -07:00
Ondřej Kuzník
f6d9fdc4f1
ITS#9043 Improve replication loggging
2020-04-14 09:58:03 +01:00
Ryan Tandy
bbe20cbf4c
ITS#8731 cleanup unused logbuf
2020-04-13 18:57:50 +00:00
Ryan Tandy
e18764465f
ITS#9212 Restore snprintf to caller-provided buffer
...
76df74dbea removed some snprintfs to
buffers that are actually returned to the client. Restore these.
2020-04-13 18:57:50 +00:00
Howard Chu
5bfd8d8888
ITS#9121 Fix MatchingRuleAssertion init
2020-04-07 16:26:35 +01:00
Ondřej Kuzník
6d6a330057
ITS#8245 Use Relax control to avoid uniqueness checks
...
Still needs to retrieve the entry for ACL resolution until we can
restrict controls with ACLs.
2020-04-06 20:44:09 +00:00
Howard Chu
0debad5830
ITS#9121 memberOf shortcut
...
Don't try to generate it if it wasn't requested
2020-04-04 03:48:14 +01:00
Howard Chu
15a922a5a3
ITS#9121 memberof fix
...
Fix for groupURI with no filter
2020-04-03 21:38:41 +01:00
Howard Chu
8180326ffe
ITS#9121 typos
2020-04-03 21:29:25 +01:00
Howard Chu
5d82ba4905
ITS#9121 fix typo
2020-04-03 21:27:48 +01:00
Howard Chu
906cab755d
ITS#9121 fix memberOf filtering
...
Replace (memberOf=<groupDN>) filter with expansion of group's URI
2020-04-03 21:25:58 +01:00
Howard Chu
015eae8fde
ITS#9121 optimize dyngroup membership checking
...
parse dyngroup URLs in advance, don't use the ACL engine's
evaluator any more
2020-04-03 21:25:43 +01:00
Howard Chu
c9ff501e6d
ITS#9121 memberof counting
...
Keep track of number of uses of memberOf in config, to
allow bypassing code if not in use.
2020-04-03 21:25:34 +01:00
Ryan Tandy
1d562a7a52
ITS#6035 olcAuthIDRewrite insert/delete support
2020-04-02 09:10:51 -07:00
Ryan Tandy
c4db906107
ITS#6035 olcAuthzRegexp insert/delete support
2020-04-02 09:10:51 -07:00
Ryan Tandy
822ed8c11d
ITS#6035 saslauthz cleanups (no functional change)
...
- give authid-rewrite's argument a name
- tidy saslauthz.c whitespace (mixed spaces/tabs)
- always declare slap_sasl_regexp_destroy: fixes an implicit declaration
warning when configured without librewrite
- delete dead code: ENABLE_REWRITE implies SLAP_AUTH_REWRITE, so this
code is never compiled
- make slap_sasl_regexp_rewrite_config static
- omit sasl_regexp unused fields when built with librewrite
2020-04-02 09:10:51 -07:00
Emily Backes
f4bfb5e0a5
ITS#7074 - change olcDatabaseDummy initialization for windows
2020-03-20 19:08:22 +00:00
Howard Chu
2d87a1c7b5
ITS#9182 pcache: fix private DB init
2020-03-11 19:17:10 +00:00
Howard Chu
1c05dce379
ITS#9121 fix filter error message
...
Filters use parentheses, not brackets.
2020-03-06 17:29:44 +00:00
Howard Chu
2c6fccb49b
ITS#9121 plug entry leak
2020-02-25 18:06:15 +00:00
Ondřej Kuzník
a2a859fd0b
Correct cyrus-sasl version verison check
2020-02-21 10:44:59 +00:00
Ondřej Kuzník
140b676bc1
ITS#9171 Insert callback in the right place
2020-02-21 10:44:59 +00:00
Howard Chu
299fb490a2
ITS#9121 fix prev commit
...
Only flush entry if dynlist_prepare_entry altered it
2020-02-14 22:32:03 +00:00
Ondřej Kuzník
47e0e3fdb5
ITS#9160 OOM handling in back-asyncmeta
2020-02-07 09:46:52 +00:00
Ondřej Kuzník
7336827769
ITS#9160 OOM handling in back-meta
2020-02-07 09:46:52 +00:00
Ondřej Kuzník
816d94b221
ITS#9160 OOM handling in slapd
2020-02-07 09:46:52 +00:00
Howard Chu
02eb0b6fe8
ITS#9121 fix filtering of dyngroups with memberof
2020-02-04 16:36:42 +00:00
Quanah Gibson-Mount
165c632249
Move CONFIG_DELETE out from behind LDAP_DEVEL
2020-02-03 16:55:34 +00:00
Quanah Gibson-Mount
7244a7b6d8
ITS#8040 - Move LAZY_COMMIT to be active outside of LDAP_DEVEL
2020-02-02 19:02:18 +00:00
Quanah Gibson-Mount
0dbbe8c012
ITS#8040 - Fix missing ifdefs for LAZY_COMMIT
2020-02-02 19:00:34 +00:00
Quanah Gibson-Mount
707d2a9211
ITS#8966 - Remove DO_DSEE ifdef Remove ifdef for DO_DSEE as it's required to be defined for syncrepl.c to compile
2020-02-02 19:00:31 +00:00
Quanah Gibson-Mount
4d2fa65969
Remove LDAP_FEATURE_X_CANCHAINOPS from behind LDAP_DEVEL
2020-01-30 18:54:36 +00:00
Ondřej Kuzník
76c43165ea
Remove LDAP_X_TXN and rename accordingly
2020-01-28 12:09:09 +00:00
Ondřej Kuzník
0cf2b12154
ITS#9156 Fix leftover typo
2020-01-27 14:11:59 +00:00
Ondřej Kuzník
16793977ff
ITS#9156 Add pwdCheckModuleArg to ppolicy
2020-01-23 23:47:04 +00:00
Ondřej Kuzník
419b9ad202
ITS#9156 Implement pwdMaxIdle
2020-01-23 23:46:58 +00:00
Ondřej Kuzník
8c10b0481a
ITS#9156 Implement pwdMinDelay and pwdMaxDelay
2020-01-23 23:46:54 +00:00
Ondřej Kuzník
c0ae078afd
ITS#9156 Implement pwdStartTime and pwdEndTime
2020-01-23 23:46:50 +00:00
Ondřej Kuzník
9ce2d2f9d2
ITS#9156 Implement pwdMaxLength
2020-01-23 23:46:43 +00:00
Ondřej Kuzník
f60e41bc14
ITS#9156 Implement pwdGraceExpiry
2020-01-23 23:46:38 +00:00
Ondřej Kuzník
79728709e9
ITS#9156 Keep module info around for longer
2020-01-23 23:46:28 +00:00
Ondřej Kuzník
4bc54d104a
ITS#9156 Update ppolicy schema to the latest draft
2020-01-23 23:46:16 +00:00
Ondřej Kuzník
44191183be
ITS#9156 Move ppolicy schema into the module
2020-01-23 23:45:41 +00:00
Ondřej Kuzník
254b62b803
ITS#9126 Add a missed normalised copy of pwdChangedTime
2020-01-23 23:15:09 +00:00
Howard Chu
f860fff714
ITS#9121 more memberof tweaks
2020-01-21 23:36:56 +00:00
Howard Chu
8e2291275a
ITS#9121 dynlist: fix not filters
2020-01-21 11:27:21 +00:00
Howard Chu
c06807ec45
ITS#9120 fix tm2time compat breakage
...
Add lutil_tm2gtime for Proleptic Gregorian calendar,
revert lutil_tm2time to previous behavior using Unix epoch
2020-01-19 19:05:04 +00:00
Howard Chu
e7538fa462
ITS#9154 back-mdb add number of entries to cn=monitor
2020-01-18 12:53:07 +00:00
Howard Chu
cb42a6e91a
ITS#9121 fix memberOf eval
...
Must disable ACL group caching when checking membership
2020-01-17 14:49:58 +00:00
Howard Chu
9a8d7f305b
ITS#9150 fix nosync FALSE config
2020-01-11 04:24:54 +00:00
Quanah Gibson-Mount
f6ad222e41
Happy New Year!
2020-01-09 16:50:21 +00:00
Howard Chu
57dbe995b8
ITS#9146 syncprov: fix sessionlog init
2020-01-08 22:22:14 +00:00
Ondřej Kuzník
8550e91fcc
ITS#9124 BerElement sits on the stack
2020-01-03 11:49:17 +00:00
Howard Chu
14d4215bc1
ITS#9121 more for dynamic memmber/memberOf
2019-12-18 20:37:58 +00:00
Howard Chu
62ec3d99c0
ITS#9121 schema update for prev commit
2019-12-18 20:34:50 +00:00
Howard Chu
c458744e32
ITS#9121 cleanup
...
Delete unused code, add comments
2019-12-16 18:42:57 +00:00
Howard Chu
90b0abd894
ITS#9121 dynlist enhancements
...
1) allow filtering on dynamic attribute values
2) populate an optionally configured memberOf attribute
test044 script still needs to be extended to test these
enhancements. We need to define an interim attributeType
for testing memberOf functionality.
2019-12-16 18:31:12 +00:00
Arvid Requate
44a7b4632e
ITS#9128 fix bus error in strchrlen
2019-12-04 20:50:44 +00:00
Ondřej Kuzník
b71235ac45
ITS#8629 Make sure pwcons is around for slapauth
...
Long term, overlay callbacks should not be running in tool mode at all.
2019-12-02 13:28:10 +00:00
Howard Chu
1a0ab3d269
ITS#9125 check HAVE_TLS
2019-12-01 19:04:27 +00:00
Ondřej Kuzník
1dbf0e9441
ITS#9124 Check we have data to process in Cancel Exop
2019-11-29 10:04:08 +00:00
Howard Chu
63922b076c
ITS#9119 fix global operation counter reporting
2019-11-15 16:26:14 +00:00
Howard Chu
4d7be1c161
ITS#9112 cleaner error handling during connection setup
...
And additional debug code for tracking errant close()s
2019-10-28 23:01:08 +00:00
Howard Chu
230b469669
ITS#9100 relax domainScope check for absent value
2019-10-28 19:01:36 +00:00
Howard Chu
379f138098
ITS#9091 drop attr mappings added in an aborted txn
...
If a txn is aborted in id2entry_put, attribute index mappings
added during that txn must also be dropped from memory.
2019-10-14 18:34:07 +01:00
Howard Chu
4bc333c5e7
ITS#9095 insert missing commit at end of slapindex processing
2019-10-11 20:48:51 +01:00
Ondřej Kuzník
81025cc8bf
ITS#9077 Let the loop finish
2019-09-23 16:37:38 +01:00
Ondřej Kuzník
dc3e450104
ITS#8731 Remove extra args
2019-09-10 19:00:24 +01:00
Ondřej Kuzník
a14fb731ac
ITS#9076 Set oldctrls correctly
2019-09-10 19:00:24 +01:00
Julia Bremer
8514f2a771
ITS#9067 fix syntax evaluation of preferredDeliveryMethod
2019-08-26 17:14:25 +01:00
Howard Chu
92b03e82e0
ITS#7657 honor unchecked limit
2019-07-17 10:17:43 +01:00
Howard Chu
e90e8c7d3c
ITS#7657 back-mdb improve alias deref
...
Don't search for scopes of entries with no children
2019-07-15 16:47:18 +01:00
Ondřej Kuzník
230b853488
ITS#8427 Take late TLS configuration into account
2019-07-15 17:01:08 +02:00
Howard Chu
5fec7b777f
ITS#8977 don't use any stack allocated IDLs
...
Trying again, fixed previous attempt
2019-07-11 15:47:03 +01:00
Howard Chu
0fa0f8ff07
ITS#9052 zero out sasl_ssf in connection_init
2019-07-10 21:29:39 +01:00
Howard Chu
f6766f1a1f
Revert "ITS#8977 don't use any stack allocated IDLs"
...
This reverts commit bfe9152c4c .
2019-07-03 17:20:34 +01:00
Howard Chu
bfe9152c4c
ITS#8977 don't use any stack allocated IDLs
2019-07-03 16:59:53 +01:00
Howard Chu
ec411582d6
ITS#8977 make sure olcBackend entry is created
2019-06-27 15:33:09 +01:00
Ondřej Kuzník
c06dc95cf9
ITS#8799 Let the common backend be configured through cn=config
2019-06-20 17:03:27 +02:00
Ondřej Kuzník
747679256c
Resolve conflict between ITS#7492 and ITS#7520
2019-06-20 17:03:27 +02:00
Ondřej Kuzník
75e0eba1f7
ITS#9000 memberof: noop a noop rename
2019-06-20 16:55:13 +02:00
Howard Chu
fbe5611e60
ITS#9038 restrict rootDN proxyauthz to its own DBs.
...
Treat as normal user for any other DB.
2019-06-19 12:40:19 +01:00
Quanah Gibson-Mount
bc61773904
ITS#8286 - Add missing matching rules
...
Add missing matching rules for the cn=config schema elements for:
slapd-null
slapd-relay
slapo-chain
2019-06-18 17:31:55 +00:00
Quanah Gibson-Mount
85ccf7bbac
ITS#8997 - Fix segfault by setting return code value
...
Fix case with back-ldap where an entry was returned but didn't match the filter being applied by setting the return code value before dropping to cleanup.
2019-06-17 17:15:00 +00:00
Ondřej Kuzník
be55ce8087
ITS#8637 Reject multiple chain URIs just like slapd.conf
2019-06-17 16:05:44 +00:00
HAMANO Tsukasa
77119a1f6f
ITS#8349 - Fix ppolicy behavior when pwdInHistory is changed
2019-06-17 15:55:15 +00:00
Ondřej Kuzník
d40b357f5d
ITS#8964 Do not free original filter
2019-06-17 12:49:25 +02:00
Ondřej Kuzník
02df0b485a
ITS#8427 Only do StartTLS if configured
2019-06-13 12:12:54 +02:00
Ondřej Kuzník
1273a38eda
ITS#8427 Set up TLS settings on each reconnection
2019-06-12 16:40:04 +02:00
Quanah Gibson-Mount
ec2cb12e68
ITS#9010 - Delete back-bdb/back-hdb
...
This commits deletes all references and code for back-bdb and back-hdb.
There is some follow up work still necessary to flush out the admin
guide for back-mdb.
2019-05-13 17:20:28 +00:00
Ondřej Kuzník
5957cbb660
ITS#8743 Initialise the metafilter we allocate
2019-05-13 13:07:11 +01:00
Ondřej Kuzník
7ca538ff87
ITS#9015 Treat an empty cookie from a FALLBACK search as a success
2019-05-08 15:42:12 +01:00
Ondřej Kuzník
abcf0e8f23
ITS#9015 Don't generate contextCSN on empty DB
2019-05-08 15:42:12 +01:00
Ondřej Kuzník
1df2b85c32
ITS#9015 Generate contextCSN unless we're a pure replica.
...
Essentially reverts part of cd8ff37629 to
make sure there is always a contextCSN if the server is in charge of its
own serverID.
2019-05-08 15:42:12 +01:00
Howard Chu
c42c996966
ITS#9012 one more Win64 fix
...
Was omitted from dda779d83e
2019-04-21 22:10:03 +01:00
Ondřej Kuzník
3bda24173d
Do not leak memory in slappasswd
2019-03-27 10:54:42 +00:00
Howard Chu
8b7f21c7aa
ITS#8999 more for prev commit
2019-03-26 13:12:26 +00:00
Howard Chu
d8c90a2fee
ITS#8999 fix telephoneNumberNormalize, cert DN validation
2019-03-26 11:18:55 +00:00
Howard Chu
47102fcced
Add persist support
2019-03-20 08:47:48 -07:00
Howard Chu
4534528fe1
ITS#8990 pickup SLAP_MOD_SOFT modops
2019-03-11 18:52:26 +00:00
Howard Chu
c825edf67e
ITS#8989 fix bitshift integer overflow
2019-03-10 14:26:08 +00:00
Quanah Gibson-Mount
a32cab8b72
write waiter handling cleanup
...
Follow on to commit 88d22a1ca3
Remove dead code
2019-03-07 23:31:44 +00:00
Nadezhda Ivanova
ea1eb19303
Use LDAP_OPT_KEEPCONN to prevent the target connection from being freed
...
On error, the ldap connection was freed and under some circumstances the fd was being reused,
which caused an assertion error in connection_init.
2019-02-28 17:28:04 +00:00
Nadezhda Ivanova
e9fa4af4d8
Move initialization of Connection mutexes to connections_init
2019-02-28 17:27:45 +00:00
Nadezhda Ivanova
bb7e14d201
ITS#8734 Fixes for many back-asyncmeta issues
...
Includes all the changes necessary to fix back-asyncmeta issues
discovered during on-site testing since the start of 2016.
These include:
Issues with stability - crashes and assetion failures
Incorrect behavior during unstable network conditions, such as inability to reset connections
or process responses, or "hanging" to wait for a response that would never be received.
Memory leaks and memory management fixes - major redesign of the way back-asyncmeta
works with memory contexts.
Rewrite was replaced with suffix-massage in configuration, and the network-timeout value was changed to milliseconds.
Incorrect behavior when SASL is used to bind to a target.
Many problems caused by race conditions
Fixes for compiler warnings, and tests.
Cleanup of unused code.
2019-02-28 16:22:11 +00:00
Ondřej Kuzník
117dcbc54d
Silence compiler warnings
2019-02-19 10:28:08 +00:00
Ondřej Kuzník
f4a68297a0
Actually check for mi->bi_extra
2019-02-19 10:28:08 +00:00
Ondřej Kuzník
cd914149a6
Make prototypes available where needed
2019-02-19 10:26:39 +00:00
Ondřej Kuzník
7a98f7de5d
ITS#8731 Remove more unused buffers
2019-02-19 10:24:43 +00:00
Howard Chu
d26b1049de
ITS#8977 missed a commit
2019-02-16 13:51:56 +00:00
Ondřej Kuzník
cf9fea9379
ITS#8731 Manual adjustment post doc/devel/variadic_debug/07-shortcut.cocci
2019-02-15 16:51:53 +00:00
Ondřej Kuzník
76df74dbea
ITS#8731 Apply doc/devel/variadic_debug/07-shortcut.cocci
2019-02-15 16:51:53 +00:00
Ondřej Kuzník
abbabbb3d7
ITS#8731 Manual work not picked up by coccinelle
2019-02-15 16:51:53 +00:00
Ondřej Kuzník
97a310b312
ITS#8731 Apply doc/devel/variadic_debug/04-variadic.cocci
2019-02-15 16:51:53 +00:00
Ondřej Kuzník
e1e643ea41
ITS#8731 Manual adjustments
2019-02-15 16:51:53 +00:00
Ondřej Kuzník
254d2adab0
ITS#8731 Rework logging
2019-02-15 16:51:53 +00:00
Ondřej Kuzník
129dcfbd86
ITS#8731 General Debug() related fixes
2019-02-15 16:51:53 +00:00
Howard Chu
a70b887e6c
ITS#8977 fix prev commit
2019-02-15 16:12:41 +00:00