Commit graph

13220 commits

Author SHA1 Message Date
Ondřej Kuzník
13d9c925dd ITS#9907 Move TLS context cleanup into lload_global_destroy 2022-10-12 17:36:12 +00:00
Howard Chu
01cf74be02 ITS#9929 more for prev commit
Don't prevent returning dynamic lists if dynamic groups were part of search.
2022-10-09 16:41:04 +01:00
Howard Chu
a3c7e5076a ITS#9929 dynlist: more for prev commit
Was broken if only dynamic lists were configured, and not groups.
Also, optional config URIs were being ignored.
2022-10-09 15:04:31 +01:00
Howard Chu
a64320d8ab ITS#9929 dynlist: avoid unnecessary search for dynamic lists 2022-10-09 11:51:54 +01:00
Ondřej Kuzník
d8f4b1a492 ITS#9926 Drop unneeded symlinks from source 2022-10-06 14:50:55 +01:00
Howard Chu
e640ce282a ITS#9924 slapo-deref: plug memleak
memory alloc'd by bvarray_dup must be freed by bvarray_free, not regular free.
2022-09-29 21:44:25 +00:00
Ondřej Kuzník
a779f148a0 ITS#9878 Have refint use interval 0 to schedule its task
Since the task is not rescheduled until a new operation comes in, close
a race where the reschedule chooses to stop it while the new item is
being added.
2022-09-26 17:34:21 +00:00
Ondřej Kuzník
148204839f ITS#9886 Report time taken to process each syncrepl message 2022-09-26 16:37:14 +00:00
Ondřej Kuzník
9134be7ecc ITS#9886 Maintain si_lastcontact as struct timeval 2022-09-26 16:37:14 +00:00
Ondřej Kuzník
034225ff5c ITS#9907 Some tools consider abandoned global data a leak 2022-09-15 17:33:39 +01:00
Ondřej Kuzník
aa209e4647 ITS#9892 Free operation data at the end of a transaction 2022-09-15 17:33:39 +01:00
Ondřej Kuzník
3ad71958ee ITS#9878 We no longer have to trigger li->li_conn_expire_task twice 2022-09-08 08:31:22 +01:00
Ondřej Kuzník
fa8cb31eb9 ITS#9878 One-shot tasks are now possible with interval == 0 2022-09-08 08:31:22 +01:00
Ondřej Kuzník
29c3a443d8 ITS#9878 Treat tasks with interval == 0 as one-shot
Some tasks need to be run once at a given time or the earliest
opportunity, also currently, using interval == 0 on a task triggers
a busy loop inside the scheduling task, halting progress for other
tasks and any other work usually serviced by that thread.

This change deals with both issues at the same time.
2022-09-08 08:31:22 +01:00
Ondřej Kuzník
294a16c10c ITS#9853 Allow inheriting lastbind precision from the frontend 2022-09-07 15:01:15 +01:00
Ondřej Kuzník
a033c1e74e ITS#9913 Protect code in clients_destroy and tier_destroy 2022-09-02 16:49:45 +01:00
Ondřej Kuzník
1942bc20a8 ITS#9339 Free remembered cookies on syncinfo free 2022-09-02 16:49:45 +01:00
Ondřej Kuzník
9014e8bb81 ITS#9907 Do not redefine variables inherited from slapd 2022-09-02 12:56:25 +01:00
Howard Chu
a6fa0450f6 ITS#9912 slapd: urls comes from optarg, not allocated
May leak on Windows if set in registry. Don't care.
2022-09-02 04:04:33 +01:00
Ondřej Kuzník
f3ed13fad2 ITS#6035 Plug olcAuthIDRewrite cn=config leak 2022-09-01 10:09:27 +01:00
Ondřej Kuzník
9c747074ff ITS#9438 slapo-remoteauth: plug config leaks 2022-09-01 10:09:27 +01:00
Ondřej Kuzník
333d61d7eb ITS#9907 Plug shutdown related leaks in lloadd 2022-09-01 10:09:23 +01:00
Ondřej Kuzník
ad79add5a0 ITS#9907 Do not redefine variables inherited from slapd 2022-09-01 10:09:19 +01:00
Ondřej Kuzník
b457cdebc1 ITS#9906 Do not leak cn=monitor related allocs in lloadd 2022-09-01 10:09:15 +01:00
Ondřej Kuzník
2362c7ccc7 ITS#9906 Do not touch subsys members after mss_destroy called 2022-09-01 10:09:10 +01:00
Howard Chu
3ef90929ee ITS#9897 fix dynlist to ignore entries with wrong objectclass 2022-08-30 14:34:06 +00:00
Howard Chu
aef1c05089 ITS#9894 don't use gmake-specific features 2022-08-15 20:53:03 +00:00
Howard Chu
161ef83927 ITS#9895 slapd-mdb: raise MDB_INDICES from 128 to 256 2022-08-06 18:47:40 +01:00
Howard Chu
4528bdb3f3 ITS#9882 bind: fix #9863 commit, use correct op/backend for mod 2022-07-11 17:55:37 +01:00
Ondřej Kuzník
207604c0b5 ITS#9823 Only request minCSN if accesslog is around 2022-07-07 21:31:03 +01:00
Quanah Gibson-Mount
fb1151573f ITS#9863 - Forward lastbind updates if configured
Mark lastbind operations as being on the frontendDB so that chaining configurations are honored.

Make pwdLastSuccess flag SLAP_AT_MANAGEABLE
2022-07-06 20:46:49 +00:00
Howard Chu
4e3687cda3 ITS#9871 slapo-ppolicy: use explicit backend in bind_response 2022-06-24 16:49:45 +01:00
Ondřej Kuzník
5d985e0145 ITS#9870 Drop optional overlay configuration option 2022-06-23 11:53:51 +01:00
Howard Chu
fbe844f814 ITS#9868 also fixup glue_sub_del() 2022-06-22 15:27:58 +00:00
Howard Chu
0d1db3c2b1 ITS#9868 Fixup pending_csn_list for backglue
Define in a new structure and point to it for more flexible access
2022-06-22 15:27:58 +00:00
Ondřej Kuzník
c64e663518 ITS#9823 Check minCSN when setting up delta-log replay 2022-06-21 16:21:56 +00:00
Howard Chu
d64f85e161 ITS#9867 syncprov: plug onetime leak
Since 43ebfa8fb4 ITS#6467
2022-06-16 22:14:41 +01:00
Howard Chu
745a71b18d ITS#9867 syncprov: plug findbase memleak 2022-06-16 21:36:24 +01:00
Howard Chu
14972a7ae1 ITS#9866 delta-sync: fix DN leak on Adds 2022-06-16 21:32:07 +01:00
Howard Chu
95f959e215 ITS#9864 slapo-accesslog: plug onetime memleaks 2022-06-16 16:10:59 +01:00
Ondřej Kuzník
81b5ca9113 ITS#8245 Do not try to release a NULL entry 2022-06-14 21:52:18 +00:00
Ondřej Kuzník
598929a507 ITS#9856 Tag responseName correctly 2022-06-06 16:30:08 +00:00
Howard Chu
395e9b250a ITS#9858 back-mdb: fix index reconfig 2022-06-03 17:06:39 +01:00
Howard Chu
9e5701cdd7 ITS#9858 back-mdb: delay indexer task startup
until after monitor backend is set up.
2022-06-02 16:06:31 +01:00
Howard Chu
205e2f1a3e ITS#7165 back-mdb: check for stale readers on MDB_READERS_FULL
retry opening a read txn if we cleared any stale readers
2022-05-16 13:54:08 +00:00
Howard Chu
ced6652efb ITS#9847 slapd: fix kqueue for FreeBSD/MacOSX/OpenBSD 2022-05-14 17:16:02 +01:00
Howard Chu
87df6c1991 ITS#9815 slapd-sql: escape filter values 2022-05-04 14:48:29 +00:00
Ondřej Kuzník
15573c72fc ITS#9831 Advance connections[index] correctly 2022-04-26 23:23:09 +00:00
Ondřej Kuzník
47069fee55 ITS#9832 Reset e back to the entry we need to release 2022-04-25 17:00:23 +00:00
Howard Chu
6657caaad8 ITS#9820 fix writewait/idletimeout interaction
Since 88d22a1ca3 the writewait check
was moved out of connections_timeout_idle() but the connection loop
was still testing the writewait flag. That test is no longer relevant.
2022-04-22 16:22:38 +00:00
Howard Chu
c2d546704b ITS#9825 dynlist: don't lose earlier filter elements 2022-04-22 15:39:46 +00:00
Ondřej Kuzník
1f5f97d69e ITS#9802 Fix argv handling 2022-04-21 16:30:44 +00:00
Ondřej Kuzník
f7bdf7aaf4 ITS#9818 Duplicate substring filters correctly 2022-04-11 16:57:59 +01:00
Howard Chu
f0a6465f23 ITS#9802 slapd-ldap/meta/async-meta: plug memleak in keepalive config 2022-03-21 20:21:20 +00:00
Howard Chu
e9b11154ee ITS#9802 slapd-meta: fix rewrite config ordering 2022-03-21 20:21:20 +00:00
Howard Chu
d878ebc3d2 ITS#9802 slapd-meta: fix rewrite config SEGV 2022-03-21 20:21:20 +00:00
Howard Chu
e29ba72c56 ITS#9809: pcache, mdb: fix SEGV in monitor shutdown 2022-03-15 17:04:42 +00:00
Ondřej Kuzník
a9d98407d2 ITS#9808 Store the correct value in olcLastBind 2022-03-14 09:35:12 +00:00
Ondřej Kuzník
34ebfac7ef ITS#9799 Drop a bind connection if there's a timeout 2022-03-07 15:39:09 +00:00
Ondřej Kuzník
fbfb5454cd ITS#9343 Allow Compare to check pwdPolicySubentry 2022-03-07 14:54:39 +00:00
Ondřej Kuzník
6a903a8cf1 ITS#9343 Switch ppolicy_get to rely on ppolicy_operational 2022-03-07 14:54:39 +00:00
Ondřej Kuzník
db9da05171 ITS#9343 Provide effective value of pwdPolicySubentry 2022-03-07 14:54:39 +00:00
Ondřej Kuzník
950ff8a5f0 ITS#9343 Allow a list of default policies 2022-03-07 14:54:39 +00:00
Ondřej Kuzník
1fac13d239 ITS#9343 Let backend_attribute read operational attributes
back-mdb checks requested attribute is present in the entry which
can obstruct the fallback to backend_operational.
2022-03-07 14:54:39 +00:00
Howard Chu
4996d42277 ITS#9801 syncrepl/dsee init punlock 2022-02-22 17:11:45 +00:00
Ondřej Kuzník
0806f69c8c ITS#9799 Clear c_n_ops_pending after we've flushed c_pending_ops 2022-02-14 17:32:01 +00:00
Ondřej Kuzník
1800a1f10c ITS#9794 Synchronise how Adds and Modifies are handled 2022-02-08 17:04:40 +00:00
Howard Chu
62bf31e966 ITS#9584 bconfig: protect cf entries with rwlock
Since not all config writes pause the server, must prevent
searches from seeing intermediate states.
2022-02-03 18:40:39 +00:00
Howard Chu
868c7953d7 ITS#9436 OpenSSL 3.0 compat 2022-02-03 16:42:44 +00:00
Ondřej Kuzník
87ffc60006 ITS#9584 Do not rely on retry=.* to reschedule new syncrepl sessions 2022-01-28 17:49:30 +00:00
Ondřej Kuzník
ca19a774f6 ITS#9785 clear runqueue task as soon as it's getting started 2022-01-27 15:59:39 +00:00
Ondřej Kuzník
f5d86968c7 ITS#9789 slapd-asyncmeta: Reset op->o_counters every time we migrate to a new thread 2022-01-26 18:55:41 +00:00
Ondřej Kuzník
ebc7369727 ITS#9789 slapo-syncprov: Reset op->o_counters every time we migrate to a new thread 2022-01-26 18:55:41 +00:00
Ondřej Kuzník
ebfbf8281a ITS#9789 Expose operation_counter_init 2022-01-26 18:55:41 +00:00
Howard Chu
38e16e3b39 ITS#9787 init global_host earlier so tools see it too 2022-01-23 14:08:24 +00:00
Ondřej Kuzník
7e923c723e ITS#7239 Do not log internal ops 2022-01-18 20:11:46 +00:00
Ondřej Kuzník
a6c110d16d ITS#7080 cn=config postread support for modrdn when back-ldif not used 2022-01-18 18:31:32 +00:00
Ondřej Kuzník
67f7f98ca5 ITS#7080 Fix debug message 2022-01-18 18:31:32 +00:00
Ondřej Kuzník
6ccc0974e1 ITS#8039 Free resinfo even if opcookie is the last owner 2022-01-18 16:46:09 +00:00
Howard Chu
e73cdc55e0 ITS#9779 slapo-dynlist: fix static group filter with multiple members 2022-01-18 15:11:28 +00:00
Ondřej Kuzník
2443e986d1 ITS#9772 Allow objectClass edits that don't actually change them 2022-01-18 05:12:53 +00:00
Ondřej Kuzník
4b18c2be00 ITS#5972 Consider all deletes for syncInfo messages
A delete of an entry that didn't match filter would be skipped
altogether and the cookie would never be sent to that consumer.
2022-01-18 03:34:27 +00:00
Ondřej Kuzník
6f31d73dc0 ITS#9776 Fix check on what backend we're operating on 2022-01-11 08:45:44 +00:00
Ondřej Kuzník
414866b888 ITS#9580 Propagate a present-phase cookie flush into accesslog 2022-01-11 06:47:00 +00:00
Ondřej Kuzník
bc28e7950d ITS#9538 Actually skip internal searches 2022-01-10 22:25:33 +00:00
Ondřej Kuzník
87b78f2060 ITS#9538 Do not attach csn on (internal) searches 2022-01-10 22:25:33 +00:00
Ondřej Kuzník
95df37d101 ITS#9538 Populate op2.o_hdr earlier 2022-01-10 22:25:33 +00:00
Ondřej Kuzník
70e6bd6777 ITS#9751 Do not drop out of order deletes completely 2022-01-10 18:44:28 +00:00
Quanah Gibson-Mount
788e9592ba Happy New Year! 2022-01-07 18:40:00 +00:00
Ondřej Kuzník
3ca8d6d388 ITS#9770 slapo-constraint: Maintain values in order of insertion 2022-01-06 16:28:52 +00:00
Ondřej Kuzník
2bf59ff63a ITS#7080 Find config entry before processing pre-read on delete 2022-01-06 03:05:45 +00:00
Ondřej Kuzník
d8331e1b81 ITS#9768 Enforce single name per olcTranslucentLocal/olcTranslucentRemote value 2022-01-05 21:24:07 +00:00
Ondřej Kuzník
711ebba53c ITS#9767 Enforce single name per olcUniqueIgnore/olcUniqueAttribute value 2022-01-05 19:21:17 +00:00
Ondřej Kuzník
0ecaa025d2 ITS#9764 slapo-valsort: Maintain values in order of insertion 2022-01-05 05:07:34 +00:00
Ondřej Kuzník
52bba704e7 ITS#9763 Make sure we keep cn=config values separate 2022-01-04 22:34:32 +00:00
Ondřej Kuzník
e87569f983 ITS#9763 Maintain values in order of insertion 2022-01-04 22:34:32 +00:00
Ondřej Kuzník
a5e7fdce48 ITS#9762 slapo-dyngroup: Maintain values in order of insertion 2022-01-04 20:10:01 +00:00
Ondřej Kuzník
a8467b8b15 ITS#9761 Fix olcSyncrepl position based insertion 2022-01-04 17:53:26 +00:00
HAMANO Tsukasa
30917b984c ITS#9760 back-wt: SLAP_DBFLAG_CLEAN is always set. 2022-01-03 18:00:00 +00:00
Ondřej Kuzník
edf7ef4948 ITS#9642 Lloadd standalone doesn't use rq 2021-12-15 20:40:53 +00:00
Ondřej Kuzník
bc37a9fdfa ITS#9642 Remove redundant calls to slap_wake_listener() 2021-12-15 20:40:53 +00:00
Ondřej Kuzník
19d4a69882 ITS#9642 Notify runner of any changes to the runqueue 2021-12-15 20:40:53 +00:00
Ondřej Kuzník
fbd4f9abdd ITS#9556 Send INVALID_SYNTAX for invalid schema elements 2021-12-15 18:39:46 +00:00
Ondřej Kuzník
def3a958ec ITS#9556 Allow handlers to set result code 2021-12-15 18:39:46 +00:00
Ondřej Kuzník
9e3184763c ITS#9691 Allow empty DB to host a persistent syncrepl session 2021-12-15 16:50:43 +00:00
Ondřej Kuzník
75636a407e ITS#9584 Track refreshing status explicitly
A refresh can jump across multiple threads, we cannot just lock a
mutex, we need to track who that is and clear when finished.

In addition to that, fix our internal syncrepl session tracking pulling
it closer to RFC 4533, refreshDone now represents the receipt of
refreshDone flag. Refreshing status is maintained for plain refreshes
(and times when we might be starting one but don't know for sure).

We still reschedule a new sync with a delay if there is another one
running but tracking refreshes this way paves the way to being able to
wake them up if we start tracking them somehow.
2021-12-15 01:22:38 +00:00
Ondřej Kuzník
e6347bc1b8 ITS#9729 Allow multiprovider to be set before syncrepl stanzas 2021-12-14 21:10:17 +00:00
Ondřej Kuzník
1a92f417a6 ITS#9576 Populate ca_desc for EMIT too 2021-12-14 19:22:48 +00:00
Ondřej Kuzník
b7390f1710 ITS#9596 Let others wait on the startup readiness indication 2021-12-14 16:30:54 +00:00
Ondřej Kuzník
544a7c8839 ITS#9596 Allow slapd to listen on port 0
And have it update the listening socket names as the port gets assigned.
2021-12-14 16:30:54 +00:00
Ondřej Kuzník
e96bfd088e ITS#9750 olcPasswordHash can only be made global in cn=config 2021-12-14 00:19:17 +00:00
Ondřej Kuzník
c51320a6f6 ITS#9742 Reject a refresh if we can't do a precise resync 2021-12-13 19:20:58 +00:00
Ondřej Kuzník
af2f89102e ITS#9493 Ensure we can process cn=config deletes 2021-12-13 17:01:22 +00:00
Ondřej Kuzník
4252900537 ITS#9493 Accesslog cn=config fixes 2021-12-13 17:01:22 +00:00
Ondřej Kuzník
3d908bcd89 ITS#9758 Make sure we don't end up with duplicates in entry 2021-12-10 19:13:40 +00:00
Ondřej Kuzník
da73c184b2 ITS#9758 Fix slapd-sock value add/delete 2021-12-10 19:13:40 +00:00
Ondřej Kuzník
d094cf2cb5 ITS#9759 Honour requested insert position in olcRetcodeItem 2021-12-10 16:54:54 +00:00
Ondřej Kuzník
ba37508f80 ITS#9647 Find correct sid in compare_csns() more of the time 2021-12-09 20:50:02 +00:00
Ondřej Kuzník
e8f1038de0 ITS#9647 Treat glue entries as missing
We're using MANAGE_DSAIT control so we get to see them, but they don't
really exist (except for their CSN sometimes).
2021-12-09 20:50:02 +00:00
Ondřej Kuzník
8d514517cc ITS#9647 Record delete's CSN in the glue entry 2021-12-09 20:50:02 +00:00
Ondřej Kuzník
5357c9ef7f ITS#9756 Generate a more accurate accesslog query 2021-12-09 18:04:27 +00:00
Howard Chu
453799eb97 ITS#9707 also: don't log null cookie 2021-12-09 17:51:39 +00:00
Howard Chu
bb17e23f28 ITS#9707 syncrepl: don't set lastCookie if none present 2021-12-09 17:40:35 +00:00
Ondřej Kuzník
a73ddda533 ITS#9282 Skip old accesslog entries even in delta-refresh 2021-12-08 17:15:57 +00:00
Ondřej Kuzník
8d428f3163 ITS#9282 Do not resuscitate entries we already deleted 2021-12-08 17:15:57 +00:00
Ondřej Kuzník
da610c050c ITS#9282 Short-circuit cookie comparison in non-present check 2021-12-08 17:15:57 +00:00
Howard Chu
739081f217 ITS#9753 back-mdb: Fix index updating for replace ops 2021-11-23 17:29:31 +00:00
Howard Chu
f476a06391 ITS#9752 accesslog: fix inconsistently normalized minCSN 2021-11-19 05:17:52 +00:00
Howard Chu
510c95af74 ITS#9745 more for prev commit 2021-11-16 23:37:54 +00:00
Howard Chu
a1799a6e5e ITS#9745 add config keyword for logfile format 2021-11-16 18:57:54 +00:00
Howard Chu
bc659074ee ITS#9747 dynlist: fix Compare for static groups
Fallback to static check if static groups are configured and
dynamic group check returns false.
2021-11-15 17:36:40 +00:00
Ondřej Kuzník
30baa30bce ITS#9738 Remove code deprecated by ITS#9538 2021-11-11 20:06:01 +00:00
Ondřej Kuzník
eb989be408 ITS#9733 Only use libltdl when SLAPD_MODULES is defined 2021-11-11 18:19:09 +00:00
Howard Chu
eab4ece0c2 ITS#9730 fix logging config uninit'd rc 2021-10-29 14:24:45 +01:00
Howard Chu
8dcf12f7da ITS#9715 Fix loglevel regression
Only set loglevel in server mode, not tool mode
2021-10-26 15:45:06 +00:00
Ondřej Kuzník
6ca85aa3a8 ITS#9720 Import missing minCSNs from inside DB
We might also ignore them, but if minCSN/contextCSN were not managed
properly, might as well make the effort to approach the actual value at
some point.
2021-10-21 12:10:34 +01:00
Ondřej Kuzník
8f35dc45f2 ITS#9720 Manage the purge task properly 2021-10-21 12:10:14 +01:00
Howard Chu
9b03a1ec88 ITS#9715 allow setting both debug and loglevel in cn=monitor 2021-10-18 17:49:52 +01:00
Howard Chu
d76b8cbbef ITS#9715 consolidate logging functionality into logging.c 2021-10-18 17:49:47 +01:00
Ondřej Kuzník
90fc349654 ITS#9715 Deduplicate verbmasks implementation from slapd/lloadd 2021-10-18 17:49:38 +01:00
Howard Chu
7c20ca922f ITS#9713 log fatal config errors at LDAP_DEBUG_ANY
and make sure logfile_only doesn't mute failures to open logfile
2021-10-07 17:11:53 +01:00
Howard Chu
2995da7e8d ITS#9712 back-mdb: better fix 2021-10-07 01:42:38 +01:00
Howard Chu
74a5a3a474 ITS#9712 back-mdb: fix multival delete 2021-10-07 01:22:34 +01:00
Ondřej Kuzník
397e30a5e7 ITS#9620 Fix deadlocks between searches and register_entry
The cache is again protected by a simple mutex and mp_children/mp_next
is protected by mp_mutex. Each monitor_send_children is called holding
the corresponding mp_mutex meaning the whole path from search base to
the current entry is off limits - cn=monitor searches cannot run in
parallel right now.
2021-10-05 11:05:25 +01:00
Ondřej Kuzník
ef60ec1df6 ITS#9600 Protect connection while interacting with it 2021-10-05 11:05:25 +01:00
Ondřej Kuzník
6cc6ec2f72 ITS#9600 Do not hold locks while calling into back-monitor 2021-10-05 11:05:25 +01:00
Ondřej Kuzník
8968d13163 ITS#9599 Switch to xorshift for random numbers 2021-10-05 01:11:30 +00:00
Ondřej Kuzník
3c07544b2a ITS#6949 Port rest of the features to lloadd 2021-10-04 14:46:26 +01:00
Ondřej Kuzník
8894f00fe4 ITS#6949 Remove dead code from lloadd 2021-10-04 14:46:26 +01:00
Ondřej Kuzník
a3dea08ccd ITS#6949 Fix and emit error messages 2021-10-04 14:46:22 +01:00
Howard Chu
7979892dfe ITS#9711 fix TLS ctx init for tools
The code to initialize the TLS context was being bypassed by tool startup,
causing tools to get the wrong default setting. Move it earlier to avoid
being bypassed.
2021-09-30 19:17:38 +01:00
Howard Chu
66c6284119 ITS#6949 fixup loglevel delete, consolidate redundant code 2021-09-30 04:23:29 +01:00
Howard Chu
10fb8c0ae5 ITS#6949 fix logfile_only regression in prev commit 2021-09-29 14:39:28 +01:00
Howard Chu
77adb19207 ITS#6949 honor specified loglevel, not just debuglevel
But skip calls to syslog() if logfile_only is set.
2021-09-27 16:54:24 +00:00
Howard Chu
42fc772c23 slapd: delete unused entry_schema_check(oldattrs) parameter
Unused since 2001 2ae02fc19b
2021-09-23 17:03:19 +01:00
Ondřej Kuzník
77dfb204c1 ITS#9671 Revert some NO-USER-MODIFICATION flags in ppolicy 2021-09-16 16:18:17 +00:00
Anton Avramov
01b653fd61 ITS#9679 - Update ldap_entry_objectclass table for current mysql/mariadb 2021-09-15 01:59:33 +00:00
Howard Chu
09a22d5512 ITS#9678 slapadd: avoid destroying configDB prematurely 2021-09-14 20:01:47 +01:00
Ondřej Kuzník
bfe3d19e95 ITS#8341 Allow normalised values for namingContexts in cn=monitor 2021-09-09 10:26:06 +01:00
Ondřej Kuzník
2958925ca1 ITS#9664 Add normalised suffix into rootDSE for ACL, etc.
This was removed in ITS#5540 since there was no EQUALITY matching rule,
but that situation changed in ITS#8341 and we need to add it back.
2021-09-09 10:26:06 +01:00
Ondřej Kuzník
c2b81a3c5b ITS#6949 Allow for fd 0 2021-09-08 15:53:02 +00:00
Ondřej Kuzník
dc6b6276fc ITS#6949 Save errno 2021-09-08 15:53:02 +00:00
Ondřej Kuzník
2abbf6781d ITS#6949 Extract logging code so lloadd can also use it 2021-09-08 15:53:02 +00:00
Quanah Gibson-Mount
c1f3895412 ITS#9649 - Fix typo compatibilty to compatibility 2021-09-06 19:18:46 +00:00
HAMANO Tsukasa
c66c9f87eb ITS#9631 back-wt: closing cache db politely 2021-09-06 15:19:25 +00:00
Ondřej Kuzník
17394f380a ITS#9641 Grab a new local csn for failed ops 2021-09-05 14:33:59 +00:00
Ondřej Kuzník
781a6c25a7 ITS#9538 Only queue csns for ops that don't get skipped 2021-09-05 14:33:59 +00:00
Ondřej Kuzník
8f8674fc86 ITS#9538 Populate op2.o_hdr earlier 2021-09-05 14:33:59 +00:00
Ondřej Kuzník
c34f2a1b29 ITS#9650 Move ldap_pvt_thread_initialize into main.c 2021-09-04 22:57:00 +00:00
HAMANO Tsukasa
ccb4f4854a ITS#9643 Fix out of bounds read in entry_decode() 2021-09-02 15:25:39 +00:00
Howard Chu
73be971a7d ITS#9659 remove redundant peerbv def 2021-09-01 04:00:57 +01:00
Quanah Gibson-Mount
affa9de311 ITS#9649 - Add information for schema files 2021-08-31 17:34:16 +00:00
Quanah Gibson-Mount
c4d399c203 ITS#9156 - Remove ppolicy.schema from README
Also remove nadf.schema, that got removed some time long ago
2021-08-26 15:43:24 +00:00
Quanah Gibson-Mount
d943d7f2fb ITS#9636 - Delete shell backend 2021-08-17 16:01:29 +00:00
Quanah Gibson-Mount
c6b43dcdc5 ITS#9635 - Delete back-ndb 2021-08-17 16:01:29 +00:00
HAMANO Tsukasa
31b0bf68c2 ITS#9497 fix duplicate ldap control response 2021-08-17 15:45:06 +00:00
Howard Chu
ac637676f8 ITS#9637 more for idlexp max 2021-08-16 22:56:38 +01:00
Howard Chu
c3aca3d545 ITS#9637 back-mdb fix max idlexp 2021-08-16 22:44:54 +01:00
Howard Chu
49ee5d9b24 ITS#5344 slapo-rwm: fix prev commit
Must always generate newDN
2021-08-13 21:09:28 +01:00
Ondřej Kuzník
4588f4e528 ITS#9597 Fix NoD support 2021-08-13 16:01:13 +01:00
Ondřej Kuzník
e78ecead09 ITS#9600 Support closing connections on request 2021-08-13 10:57:14 +01:00
Ondřej Kuzník
e9dfb7d21d ITS#9600 Rework monitor entry management
Connection entries are now persistent and can be addressed, preparing
the ground so we can process modify operations on individual entries.
2021-08-13 10:57:14 +01:00
Ondřej Kuzník
6d95cc3935 ITS#9599 Online latency tracking 2021-08-13 10:57:14 +01:00
Ondřej Kuzník
8219a3a414 ITS#9599 Push based latency tracking 2021-08-13 10:57:14 +01:00
Ondřej Kuzník
84dab3f961 ITS#9599 Add bestof tier implementation 2021-08-13 10:57:14 +01:00
Ondřej Kuzník
1ca559668f ITS#9599 Add latency tracking 2021-08-13 10:57:14 +01:00
Ondřej Kuzník
ab90bfd95c ITS#9599 Implement tiered load balancing 2021-08-13 10:57:14 +01:00
Ondřej Kuzník
ddc9430727 ITS#9598 Per OID restrictions 2021-08-13 10:57:14 +01:00
Ondřej Kuzník
0190f18b4c ITS#9598 Introduce backend-restricted selection 2021-08-13 10:57:14 +01:00
Ondřej Kuzník
7173e4726e ITS#9598 Factor out upstream checking 2021-08-13 10:57:13 +01:00
Ondřej Kuzník
b66a62799d ITS#9597 Send Notice of Disconnection when shutting down a client connection 2021-08-13 10:57:13 +01:00
Ondřej Kuzník
96d0eec034 ITS#8747 Use the same message when upstream connection is ready 2021-08-13 10:57:13 +01:00
Howard Chu
973a93036e ITS#9122 expose SLAP_TOOL_DRYRUN to backends
Most backends should no-op everything. back-config will
still parse and process all config directives.
2021-08-13 02:09:48 +00:00
Ondřej Kuzník
c4ac5b319b ITS#9538 Serialise CSN assignment in slapo-accesslog 2021-08-12 20:48:09 +00:00
Howard Chu
f6a61ab7fe ITS#8958 back-mdb: checkpoint online indexer
Save old/new indexmasks to allow processing to resume if slapd is
stopped and restarted. Save last entryID indexed to allow resume
after restart or pool pause.
2021-08-12 18:59:06 +00:00
Howard Chu
5ad6ab3568 ITS#8958 rename ldap_pvt_thread_pool_pausecheck()
to ..._pausewait() since that's what it really does.
Add ..._pausequery() that only checks and doesn't wait.
2021-08-12 18:59:06 +00:00
Nadezhda Ivanova
81ed9e0d0e ITS#9628 Fix incorrect c_n_ops_executing counter when backend is asynchronous 2021-08-12 15:57:49 +00:00
Aapo Romu
5b11591db9 ITS#9630 back-sql: Close transactions after bind and search 2021-08-12 14:40:51 +01:00
Aapo Romu
ab3db65388 ITS#9629 back-sql: Add support for ppolicy opattrs
So that ppolicy rules are applied
2021-08-12 14:40:40 +01:00
Quanah Gibson-Mount
2a6e24e924 ITS#9463 - Fix typo 2021-08-08 02:01:31 +00:00
HAMANO Tsukasa
2aaaf98315 ITS#9463 cumulative fix for back-wt
- LDAP MODRDN handling
- support paged response
- add wt_extended
- add config emit
- wt_key_read() return WT_NOTFOUND if not found key.
- add ext_candidates()
- fix idlcache session name
- fix warning
- don't reuse idlcache cursor
- set correct pid when modrdn with newsuperior
- fix condition bug
- fix send_search_entry() error handling
- fix for referral handling
- fix for readonly mode
- fix sizelimit response
- support modrdn
- improve modify handling
- clear ancestor idlcache
- fix for multi-DIT
- IMPORTANT CHANGES: Compatibility is broken with previous database table, please restore database from LDIF.
- checking for scope=children
- sort dn2idl result
- fix cursor leak
- support db_open with readonly mode
- add wt_tool_entry_delete
- initialize comp variable
- support referrals
- implement wt_tool_dn2id_get() and wt_tool_entry_modify() for slapadd -w
- skip redundant scan, and more debug message
- fix OID conflict with back-passwd
- no need to close session, It may cause SEGV.
- fixed wt_dn2entry for empty DN
- support multiple database
- Construct wiredtiger's config parameter. It allow multi line wtconfig settings
- add idlcache
- fix concurrent modification to a entry with multi values
- prevent to add duplicate dn entry
- suppress error message "search_near failed: WT_NOTFOUND"
- update Debug statements
- back-wt does not support subtree rename
- fix for @ondra review
- update slapd-wt.5 and warning for mode option
- add back-wt test into test target
- add scope checking
2021-08-07 19:27:43 +00:00
Howard Chu
d877251b2c (From ITS#8958) allow 2.5 slapcat to read 2.4 DB 2021-08-06 22:50:23 +01:00
Howard Chu
6237ae17db ITS#9611 bconfig: canonicalize structuralObjectclass 2021-08-06 22:13:47 +01:00
Ondřej Kuzník
94b361ed45 ITS#9620 Freeze cache while we search 2021-08-06 18:51:51 +00:00
Ondřej Kuzník
60c219243b ITS#9620 Turn mi_cache_mutex into a RW lock 2021-08-06 18:51:51 +00:00
Ondřej Kuzník
8d235737c8 ITS#9620 Only persistent entries are stored in the cache 2021-08-06 18:51:51 +00:00
Ondřej Kuzník
1cf39a8568 ITS#5344 Record and maintain new DN on ModRDN ops 2021-08-06 15:30:47 +01:00
Howard Chu
9f4de680e3 ITS#6949 add support for logfile rotation
Uses debuglevel, not sysloglevel.
2021-08-05 15:45:19 +00:00
Quanah Gibson-Mount
27a5424371 ITS#9625 - Fix handling when pwdChangedTime is not present
Add a check to see if pwdChangedTime was actually present on the entry. If not, skip the expiry check.

Additionally change the debug log statement to TRACE instead of ANY, as the message is informational.
2021-08-04 19:58:01 +00:00
Ondřej Kuzník
8b24104d1a ITS#9624 Read state while holding relevant mutex, cache if needed 2021-08-04 15:30:36 +00:00
Ondřej Kuzník
71de64fac4 ITS#9624 Make sure we reset only for Binds 2021-08-04 15:30:36 +00:00
Ondřej Kuzník
7c17f06197 ITS#9624 We've already checked before we call request_extended 2021-08-04 15:30:36 +00:00
Howard Chu
e700dc03ee ITS#9615 move CheckModule from policy to overlay config
And fix errmsg FIXME
2021-08-03 16:31:49 +00:00
Howard Chu
a54f99858c ITS#6138 let frontend handle all exop responses 2021-08-03 15:19:49 +00:00
Howard Chu
66ed15a288 ITS#6138 FIx exop handler to ignore SLAPD_ASYNCOPs 2021-08-03 15:19:49 +00:00
Howard Chu
658e526bb0 ITS#6138 drop unnecessary use of o_abandon 2021-08-03 15:19:49 +00:00
Howard Chu
795add7b96 ITS#6138 use SLAPD_NO_REPLY for persistent searches
The particular code doesn't matter, any result besides
SLAP_CB_CONTINUE always halts overlay/response processing.
2021-08-03 15:19:49 +00:00
Howard Chu
e9e6fd71e1 ITS#6138 don't overwrite rs->sr_err after sending response 2021-08-03 15:19:49 +00:00
Howard Chu
5a61175deb ITS#6138 add lock flag to connection_op_finish() 2021-08-03 15:19:49 +00:00
Howard Chu
d3bd4aa76d ITS#6138 don't allow redundant abandon/cancel ops 2021-08-03 15:19:49 +00:00
Howard Chu
bc29154c62 ITS#8649 syncrepl: fix backend selection in glued DBs 2021-08-03 13:10:27 +01:00
Howard Chu
5cd45ec937 ITS#9621 fix for multival with NULL mr 2021-08-02 20:24:58 +01:00
Quanah Gibson-Mount
417accbce4 ITS#9616 - Make example slapd.conf and slapd.ldif files functional 2021-07-30 17:30:19 +00:00
Quanah Gibson-Mount
6cfed41537 ITS#9616 - Always define olcModuleList for slapd-config 2021-07-30 17:29:51 +00:00
Nadezhda Ivanova
6463280d8c Enable addition of targets to back-asyncmeta via cn=config 2021-07-29 15:05:36 +00:00
Howard Chu
79d33fe40e ITS#9584 avoid busy-loop while refresh is serialized 2021-07-29 13:28:34 +01:00
Howard Chu
92ea88ec1f ITS#9569 make reqMod optional in modify ops 2021-07-29 12:02:22 +01:00
Howard Chu
e1c90d0977 ITS#9584 serialize refresh phase
Only allow one consumer at a time to perform a refresh on a database.
2021-07-27 16:12:14 +01:00
Howard Chu
2c0707cf13 ITS#9157 save TLS errmsg in ld->ld_error 2021-07-22 15:27:31 +01:00
Howard Chu
81076a7f7c ITS#8775 for passwordMod, pass real DN thru
Since conn->c_dn is the real DN, need to see real DN for <self>
ACLs to work.
2021-07-20 19:27:45 +01:00
Howard Chu
4bd6a6d49d ITS#6916 unique: internal ops shouldn't have user's controls 2021-07-20 17:54:26 +01:00
Howard Chu
0ae71bafcf ITS#9608 fix delete of nonexistent sessionlog 2021-07-13 12:10:28 +01:00
Howard Chu
a464a6e98f ITS#9603 fix IPv6 addrs with tcpd 2021-07-01 16:16:19 +01:00
Ondřej Kuzník
a2e9cb1acd ITS#7080 Postread control support for back-ldif/config 2021-06-27 17:39:46 +00:00
Ondřej Kuzník
5e4f1e862f ITS#7080 Move slap_read_controls Debug message to STATS 2021-06-27 17:39:46 +00:00
Ondřej Kuzník
4cd096deff ITS#9156 Do not spam the logs on account of lastbind 2021-06-21 18:37:30 +00:00
Ondřej Kuzník
9e1a961792 ITS#9581 Implement lastbind precision 2021-06-21 18:37:30 +00:00
Ondřej Kuzník
c7f4a5eb28 ITS#7215 Allow cleanups/commits to fail (once)
Some config changes need to be prepared at entry modification time and
then checked/committed at the end. Such a check can fail, so we need to
do this early enough and also commit the opposite change during a revert
step.

The assumption is that the original version is consistent and bconfig
can accurately reconstruct it, so the revert cleanups will not fail and
so all of them get to be run. We set ca->reply.err so that the cleanups
can be made aware and comply with this assumption.
2021-06-21 16:36:06 +00:00
Ondřej Kuzník
4255288ac4 ITS#7215 Postpone index_substr check 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
3dcfffbd00 ITS#9576 Use stored defaults 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
b4afe00942 ITS#9576 Put the used table in ConfigArgs 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
3138c8d5db ITS#9363 Some missed MAGIC defaults 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
2d78b6274f ITS#8747 Allow olcBkLloadClientMaxPending in cn=config 2021-06-21 16:36:06 +00:00
Ondřej Kuzník
f016d88786 ITS#9575 Warn when specifying olcPasswordHash in the cn=config entry 2021-06-21 15:32:03 +00:00
Quanah Gibson-Mount
362fbedc51 ITS#8333 - Update internationalISDNNumber for RFC4519 2021-06-15 18:18:03 +00:00
Tero Saarni
3e45c71d29 ITS#9468 do not arm expire timer for connections that are already tainted 2021-06-08 15:41:40 +00:00
Howard Chu
2f880087c9 ITS#9468 always init lc_time and lc_create_time
Doesn't cost us anything and guarantees expiry will work if conn_ttl
or idletimeout are configured at a later time.
2021-06-08 15:41:40 +00:00
Howard Chu
4de2314555 ITS#9561 slapd init.c: fix copy/paste error
Added in 629cafc98d for ITS#8707
2021-06-03 21:28:36 +01:00
Ondřej Kuzník
0ea78fde20 ITS#6467 Indicate which operation is lost if we fail to add log entry 2021-06-03 10:23:43 +01:00
Ondřej Kuzník
726a203133 ITS#6467 Free uuid list after we're finished 2021-06-03 10:22:14 +01:00