Commit graph

24436 commits

Author SHA1 Message Date
jinyaoguo
ddea2bc669 ITS#10343 Fix a memory leak in function slap_uuidstr_from_normalized 2025-06-20 14:52:19 +00:00
jinyaoguo
f00339df9e ITS#10344 Ensure the first argument passed to ber_dupbv_x is not NULL. 2025-06-20 14:52:19 +00:00
Howard Chu
76e1492809 ITS#10356 libldap: implement LDAP_OPT_REFHOPLIMIT 2025-06-20 02:35:44 +00:00
Michael Kourlas
585e6aa9a5 ITS#10330 keep socket non-blocking during polling in ldap_int_tls_start
During TLS negotiation, if a timeout is set, ldap_int_tls_start sets the
socket to non-blocking and calls ldap_int_poll in a loop if
ldap_int_tls_connect does not succeed the first time it is called.

However, ldap_int_poll sets the socket back to blocking and we currently
do not set it back to non-blocking. This means that a subsequent call to
ldap_int_tls_connect may hang and the configured timeout will not be
enforced. To fix this, we now set the socket back to non-blocking after
ldap_int_poll is called.
2025-06-19 13:49:40 +00:00
Michael Kourlas
76b9c476dd ITS#10330 do not poll socket in ldap_int_tls_start if no timeout set
This probably had no effect, but is unnecessary.
2025-06-19 13:49:40 +00:00
Boleslaw Ciesielski
e77ab14f0c ITS#10335 ldapsearch: fix handling of -LL in print_reference()
print_reference() was printing comments even when disabled with -LL option.
2025-06-17 23:08:02 +00:00
Ondřej Kuzník
87a2d70750 ITS#10338 Add olcConstraintAllowEmpty 2025-06-17 19:26:25 +00:00
Ondřej Kuzník
10b1d6c9b4 ITS#10339 Do not reuse freed memory 2025-06-17 16:27:59 +00:00
Ondřej Kuzník
7717e2ba4d ITS#10301 Send assert control with forwarded mods if configured 2025-06-17 14:58:26 +00:00
Nadezhda Ivanova
086296d5fa ITS#9186 Implement result code counters 2025-06-11 14:29:37 +03:00
Howard Chu
7a8d72b02b ITS#10336 slapd-mdb: fix delete on empty DB
Don't assume parent of target entry will always exist.
2025-05-13 18:02:27 +01:00
Ondřej Kuzník
6063498361 ITS#10297 Defer hostname resolution til first use 2025-05-09 09:31:26 +01:00
Greg Noe
9a52a3c28b ITS#10140 Add microsecond timestamp format for local file logging 2025-04-30 07:46:42 -07:00
Ondřej Kuzník
f1556ba98a ITS#10331 Add helpful error messages for usage errors 2025-04-25 13:45:09 +01:00
Howard Chu
e5a545d54c ITS#10328 librewrite: fix substitution cleanup 2025-04-24 16:47:31 +00:00
Ondřej Kuzník
ca5391b811 ITS#10327 Allow lockless config_back_search() during server pause
The assumption is that the only reason it is allowed to run at this
point is that it is called from the reconfiguration context anyway.
2025-04-24 15:24:56 +00:00
Ondřej Kuzník
fd0cf64b16 ITS#10325 slapd-dsaschema: Use assigned OIDs 2025-04-24 07:34:47 +00:00
Ondřej Kuzník
93d10369f2 ITS#10325 slapo-variant: Use assigned OIDs 2025-04-24 07:34:47 +00:00
Ondřej Kuzník
948400af2b ITS#10323 Apply olcBkLloadStartTLS runtime changes directly 2025-04-23 21:17:51 +00:00
Howard Chu
2e049ef878 ITS#10320 autogroup: mark internal searches
Avoid any other overlays munging autogroup's searches
2025-04-23 16:35:04 +00:00
Howard Chu
015f2937ba ITS#10168 back-mdb: cleanup index setup
Nop index setup when index config resulted in no configured indices
2025-04-23 15:16:47 +00:00
Howard Chu
10456f5850 ITS#10326 mbedtls: always call mbedtls_ssl_set_hostname()
Even if hostname is NULL, the library requires this be called once.
If non-NULL, mbedtls may do a hostname check which is redundant
since libldap does its own check.
2025-04-22 17:26:46 +01:00
Howard Chu
36dd6e2e62 ITS#10299 slapacl(8): fix dry-run description 2025-04-01 19:41:10 +00:00
Howard Chu
f1ca58680a ITS#10299 slapacl: use dummy entry_get in dry-run mode 2025-04-01 19:41:10 +00:00
Howard Chu
e5d841f46d ITS#9934 slapd-config(5) add new TLS cert/key settings 2025-04-01 16:06:32 +00:00
Howard Chu
f8f0fa4799 ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once 2025-04-01 16:06:32 +00:00
Andrew Elble
f00319b32c ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on 2025-03-27 14:59:33 +00:00
Andrew Elble
24d4dcb3d7 ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on 2025-03-27 14:59:29 +00:00
Andrew Elble
9b03791108 ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries 2025-03-27 14:59:15 +00:00
Quanah Gibson-Mount
72f184a0e3 ITS#10163 - Regenerate configure 2025-03-21 21:51:20 +00:00
Ondřej Kuzník
602c794287 Add missing olcFrontendConfig to example 2025-03-17 10:58:31 +00:00
Ondřej Kuzník
82cee8f57a ITS#10312 Explicitly allow FALSE in 'subordinate' 2025-03-12 15:44:57 +00:00
Ondřej Kuzník
c852e11cb9 ITS#10163 Add missed otp overlay to configure.ac 2025-03-10 12:27:23 +00:00
Howard Chu
b8f32ec2fc ITS#9367 back-mdb: add encryption support
Enabled if MDB_ENCRYPT is defined, which is currently only in mdb.master3.
2025-03-04 20:31:21 +00:00
Ondřej Kuzník
d1ca167137 ITS#10309 Check for strdup allocation failures 2025-03-04 19:41:59 +00:00
Howard Chu
f602563bf4 ITS#10310 pw-pbkdf2: make iterations configurable 2025-02-26 13:36:50 +00:00
Ondřej Kuzník
68bd743cfe ITS#10266 Adding a test script 2025-02-19 19:59:42 +00:00
Ondřej Kuzník
37edfeceaa ITS#10266 Linked clients should also be tagged for closing 2025-02-19 19:59:42 +00:00
Ondřej Kuzník
e101d0ecc1 ITS#10266 Adopt broader RFC4511 NoD interpretation, receiving side 2025-02-19 19:59:42 +00:00
Ondřej Kuzník
89e34fded3 ITS#10265 Allow runtime reconfig of olcBkLloadListen 2025-02-19 18:39:09 +00:00
Ondřej Kuzník
f2cba910d8 ITS#7249 Disallow memberof-addcheck when memberof is global 2025-02-19 17:29:04 +00:00
Ondřej Kuzník
993f488e7b ITS#7249 Let backend_attribute know who's calling it 2025-02-19 17:29:04 +00:00
Ondřej Kuzník
6c0a44d1ec ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified 2025-02-19 16:51:05 +00:00
Ondřej Kuzník
8ed07d0b93 ITS#10307 Initialise last if we use it later 2025-02-18 19:42:58 +00:00
Ondřej Kuzník
e3dd9ac693 Update and clarify replication docs 2025-02-12 17:57:31 +00:00
Alexandre Jousset
068881efb4 ITS#10160 - Add "neguri" and "negset" constraint types to slapo-constraint 2025-02-12 17:46:55 +00:00
Howard Chu
429556c5f6 ITS#10302 slapd-mdb: fix idcursor double-free in slapadd shutdown
Caused when calling tool_entry_modify to update ctxcsn after all adds are done.
2025-02-04 17:00:36 +00:00
Nadezhda Ivanova
002214cc38 ITS#9186 Add deferred ops statistics counters 2025-01-06 16:24:24 +02:00
Ondřej Kuzník
62892d090c ITS#10290 Move syncrepl_modify_cb to the end of the list
The way op->orm_modlist is allocated by syncrepl_op_modify is not
compatible with slap_mods_free() and so callbacks from any overlays that
touch op->orm_modlist on the way down need a chance to undo their state
first as we go back up.
2024-12-16 20:00:25 +00:00
Nadezhda Ivanova
e2b04c434e ITS#9186 Add a counter to cn=Listener to track total number of established connections since startup 2024-12-16 18:31:23 +00:00