upstream/openldap
1
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2026-01-29 10:07:32 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
23220 commits 38 branches 311 tags 87 MiB
Commit graph

2525 commits

Author SHA1 Message Date
Ryan Tandy
5d8c491fa1 ITS#9166 Fix slapdconfig.sdf mismatched braces 2020-02-12 10:55:08 -08:00
Ondřej Kuzník
ba290f1c35 ITS#9156 Document ppolicy changes 2020-01-23 23:47:14 +00:00
Ondřej Kuzník
419b9ad202 ITS#9156 Implement pwdMaxIdle 2020-01-23 23:46:58 +00:00
Ondřej Kuzník
2b007d01db ITS#9156 Document corner cases and omissions 2020-01-23 23:46:10 +00:00
Quanah Gibson-Mount
f6ad222e41 Happy New Year! 2020-01-09 16:50:21 +00:00
Howard Chu
90b0abd894 ITS#9121 dynlist enhancements 
1) allow filtering on dynamic attribute values
2) populate an optionally configured memberOf attribute

test044 script still needs to be extended to test these
enhancements. We need to define an interim attributeType
for testing memberOf functionality.
 2019-12-16 18:31:12 +00:00
Ondřej Kuzník
5b304a3ae6 ITS#9071 Document "tls none" for back-ldap 2019-08-30 14:02:31 +01:00
Quanah Gibson-Mount
efbfc1fe95 ITS#9065 - Document correct attribute pwdGraceAuthnLimit 2019-08-19 15:45:31 +00:00
Quanah Gibson-Mount
7cc34fa722 ITS#9063 -- Fix missing bold tag for tls_reqcert 2019-08-12 23:49:50 +00:00
Quanah Gibson-Mount
c4df431c6c ITS#8977 - Note allowed value range for idlexp 2019-06-26 18:15:32 +00:00
Ondřej Kuzník
17b5b3d7f8 Separate VERSION to its own paragraph 2019-06-21 13:44:06 +02:00
Ondřej Kuzník
6a5e30674b ITS#8671 Expose OpenLDAP specific interfaces in openldap.h 2019-06-14 11:52:35 +02:00
Quanah Gibson-Mount
86bffa713e ITS#9010 - More BDB/HDB cleanup 
Remove some remaining documentation bits referencing bdb/hdb databases
Remove regression test specific to back-bdb
 2019-06-07 17:31:53 +00:00
Quanah Gibson-Mount
71599e4ef4 ITS#9031 - Fix missing reqDN index 2019-06-07 17:26:36 +00:00
Quanah Gibson-Mount
98442e3272 ITS#9031 - Add missing reqDN index for delta-syncrepl 2019-06-07 16:32:35 +00:00
Quanah Gibson-Mount
1aa1d9e4c3 Fix examples by removing quotes 2019-05-21 20:34:32 +00:00
Quanah Gibson-Mount
ec2cb12e68 ITS#9010 - Delete back-bdb/back-hdb 
This commits deletes all references and code for back-bdb and back-hdb.
There is some follow up work still necessary to flush out the admin
guide for back-mdb.
 2019-05-13 17:20:28 +00:00
Ondřej Kuzník
a5ad0e0643 ITS#8693 Tweak previous commit 2019-05-08 15:31:13 +01:00
Ondřej Kuzník
a4e2d5c501 ITS#8693 Document unused but generated starttls parameter 2019-05-08 15:12:08 +01:00
Quanah Gibson-Mount
6d79439630 ITS#8881 - Note MDB is the primary backend 
Update to note that MDB is the primary backend and HDB/BDB are
deprecated.
 2019-04-17 23:52:51 +00:00
Quanah Gibson-Mount
c5ad08c1a4 ITS#8771 - Note back-mdb is recommended 
Commit 279594c22f officially marked
slapd-mdb as being the recommended backend for OpenLDAP, superseding
back-hdb.  This man page was missed during that update.
 2019-04-17 23:49:08 +00:00
Ondřej Kuzník
4a136c7651 ITS#8731 Improve sample processing script 2019-03-21 10:29:03 +00:00
Nadezhda Ivanova
f239bbd3c6 Add LDAP_OPT_KEEPCONN option 
This option instructs try_read1msg to not free the connection on read error
or on Notice of disconnections, but leave it to the caller. It is needed,
for example, by back-asyncmeta, who expects to have control on when
its target connections are freed. Must be used with caution.
 2019-02-28 17:27:54 +00:00
Nadezhda Ivanova
bb7e14d201 ITS#8734 Fixes for many back-asyncmeta issues 
Includes all the changes necessary to fix back-asyncmeta issues
discovered during on-site testing since the start of 2016.
These include:
Issues with stability - crashes and assetion failures
Incorrect behavior during unstable network conditions, such as inability to reset connections
or process responses, or "hanging" to wait for a response that would never be received.
Memory leaks and memory management fixes - major redesign of the way back-asyncmeta
works with memory contexts.
Rewrite was replaced with suffix-massage in configuration, and the network-timeout value was changed to milliseconds.
Incorrect behavior when SASL is used to bind to a target.
Many problems caused by race conditions
Fixes for compiler warnings, and tests.
Cleanup of unused code.
 2019-02-28 16:22:11 +00:00
Ondřej Kuzník
e5b5232516 ITS#8731 Add the documentation and scripts 2019-02-15 16:51:53 +00:00
Howard Chu
c8b806b676 ITS#8977 make IDL size configurable 2019-02-15 14:37:51 +00:00
Quanah Gibson-Mount
b45a6a7dc7 Happy New Year! 2019-01-14 18:46:16 +00:00
Howard Chu
52ace4554e More for privateKey tweak 2018-12-18 21:56:18 +00:00
Quanah Gibson-Mount
3add82a3bb ITS#8286 -- Add matching rules for attributes 
Add matching rules for all cases where it was missing.  Cleanup
incorrect types for a few attributes as well.  Fix network-timeout
handling in back-ldap/meta/asyncmeta.
 2018-12-18 19:14:06 +00:00
Quanah Gibson-Mount
2f27605811 ITS#8887 
Fix repeated use of the word is
 2018-11-16 22:31:16 +00:00
Quanah Gibson-Mount
9d4a5f64b6 Change backend reference from slapd-bdb to slapd-mdb 2018-11-14 21:28:01 +00:00
Ondřej Kuzník
5c0b820c4a ITS#8772 Remove cthread support 2018-10-19 13:08:10 +01:00
Howard Chu
111329a2dc More for back-mdb multival 
Allow configuring thresholds for specific attributes
 2018-08-30 11:24:25 +01:00
Ondřej Kuzník
8a259e3df1 ITS#8573 allow all libldap options in tools -o option 2018-06-14 16:19:10 +01:00
Ondřej Kuzník
18afc2446d Fix quoting example 2018-06-14 16:19:10 +01:00
Quanah Gibson-Mount
59e9ff6243 Happy New Year 2018-03-22 15:35:24 +00:00
Howard Chu
f183b81a68 ITS#8818 SASL_MECH/SASL_REALM are not user-only 
Changed as of ITS#4327 commit 86d10729
 2018-03-13 18:57:53 +00:00
Ondřej Kuzník
4035016796 ITS#6656 Docs for reqEntryUUID 2017-10-26 11:53:50 +01:00
Quanah Gibson-Mount
a2b946d008 ITS#6300 - Remove kqueue from project list 2017-10-19 16:07:13 -07:00
Josh Soref
10566c8be3 ITS#8605 - spelling fixes 
* javascript
* kernel
* ldap
* length
* macros
* maintained
* manager
* matching
* maximum
* mechanism
* memory
* method
* mimic
* minimum
* modifiable
* modifiers
* modifying
* multiple
* necessary
* normalized
* objectclass
* occurrence
* occurring
* offered
* operation
* original
* overridden
* parameter
* permanent
* preemptively
* printable
* protocol
* provider
* really
* redistribution
* referenced
* refresh
* regardless
* registered
* request
* reserved
* resource
* response
* sanity
* separated
* setconcurrency
* should
* specially
* specifies
* structure
* structures
* subordinates
* substitution
* succeed
* successful
* successfully
* sudoers
* sufficient
* superiors
* supported
* synchronization
* terminated
* they're
* through
* traffic
* transparent
* unsigned
* unsupported
* version
* absence
* achieves
* adamson
* additional
* address
* against
* appropriate
* architecture
* associated
* async
* attribute
* authentication
* authorized
* auxiliary
* available
* begin
* beginning
* buffered
* canonical
* certificate
* charray
* check
* class
* compatibility
* compilation
* component
* configurable
* configuration
* configure
* conjunction
* constraints
* constructor
* contained
* containing
* continued
* control
* convenience
* correspond
* credentials
* cyrillic
* database
* definitions
* deloldrdn
* dereferencing
* destroy
* distinguish
* documentation
* emmanuel
* enabled
* entry
* enumerated
* everything
* exhaustive
* existence
* existing
* explicitly
* extract
* fallthru
* fashion
* february
* finally
* function
* generically
* groupname
* happened
* implementation
* including
* initialization
* initializes
* insensitive
* instantiated
* instantiation
* integral
* internal
* iterate
 2017-10-11 14:39:38 -07:00
Nathaniel McCallum
29f6260364 ITS#7532 - Add new function ldap_connect(). 
This function is used to manually establish a connection after
a call to ldap_initialize(). This is primarily so that a file
descriptor can be obtained before any requests are sent for the
purposes of polling for writability.
 2017-10-11 14:31:22 -07:00
Quanah Gibson-Mount
9bef357403 ITS#6475 - Man page updates to slapd.conf/slapd-config for the new olcSaslAuxpropsDontUseCopy and olcSaslAuxpropsDontUseCopyIgnore parameters for use with SASL/OTP 2017-10-11 14:31:01 -07:00
Quanah Gibson-Mount
fba60ab2ed ITS#8121 - Note ldap_sasl_bind and ldap_sasl_bind_s can be used to make simple binds via the LDAP_SASL_SIMPLE mechanism 2017-10-06 10:44:38 -07:00
Ted C. Cheng
e20ac6b539 ITS#7520 - back-ldap omit-unknown-schema changes 2017-10-06 10:44:31 -07:00
Quanah Gibson-Mount
44b9fd1c81 ITS#5048 - index on entryCSN is mandatory 2017-10-06 10:39:43 -07:00
Michael Ströder
b65e0b5731 ITS#8714 Send out EXTENDED operation message from back-sock 2017-09-06 15:32:28 +01:00
Quanah Gibson-Mount
0f80e05eeb ITS#8715 Fix typo with olcTLSCiphersuite 2017-08-21 09:19:12 -07:00
Quanah Gibson-Mount
17cc93d570 ITS#8713 Delete stub man page for LDBM 2017-08-16 08:50:39 -07:00
Quanah Gibson-Mount
cc79503e04 ITS#8123 - Fix wording to match examples 2017-04-26 11:05:35 -07:00
Quanah Gibson-Mount
3eeb562489 Fix slapo-pcache to use mdb as the example backend 2017-04-25 16:09:22 -07:00
Quanah Gibson-Mount
33f5e7122c ITS#8635 - Note that non-zero serverID's are required for MMR, and that serverID 0 is specific to single master replication only 2017-04-24 13:15:56 -07:00
Quanah Gibson-Mount
c4eaa5416d ITS#8613 - Note that slapo-memberOf should not be used in a replicated environment 2017-04-24 11:51:15 -07:00
Jephte CLAIN
70e85ec624 ITS#8344 - accesslog database should not be replicated 2017-04-24 11:38:35 -07:00
Howard Chu
dacf15475f autoca manpage updates 2017-04-09 20:48:37 +01:00
Howard Chu
2860fd4c6c Move privateKey schema into slapd 2017-04-09 14:16:56 +01:00
Howard Chu
6b573cea57 Flesh out experimental OIDs 2017-04-09 13:47:25 +01:00
Howard Chu
79284a06d3 Catalog of assigned OID arcs 
With some specific elements as well, but not exhaustively listed.
Patches welcome.
 2017-04-09 03:55:01 +01:00
Howard Chu
2b920ecaec Add autoca overlay 
Automated certificate authority
 2017-04-08 02:51:08 +01:00
Quanah Gibson-Mount
207fde15eb ITS#7700 - Update documentation about the "limits" configuration option 2017-03-29 14:29:25 -07:00
Quanah Gibson-Mount
515ac60fdc ITS#7700 - Update syncrepl configuration bits with missing parameters 2017-03-29 13:47:13 -07:00
Quanah Gibson-Mount
b1e1904a8c ITS#7177, ITS#6339 - Fix VV option information 2017-03-29 12:36:42 -07:00
Jan Vcelak
54c4df72dd ITS#7177 add SASL_NOCANON option to ldap.conf(5) 2017-03-29 12:35:09 -07:00
Quanah Gibson-Mount
92559cc663 ITS#7341 Fix typo in access control so that it is attrs= not attr= 2017-03-29 12:00:26 -07:00
Gerardo Santana
1ae58200fe ITS#8499 Fix typo in admin guide 2017-03-29 10:52:48 -07:00
Quanah Gibson-Mount
2af41ec852 ITS#8253 - Further clarification around replication information 2017-02-21 15:27:13 -08:00
Quanah Gibson-Mount
45018fef17 ITS#8253 - better document options for the syncprov module 2017-02-06 15:27:25 -08:00
Howard Chu
6f3c970f47 Document threadqueues option 
Implemented in 34f832faee
 2017-02-06 09:35:05 +00:00
Quanah Gibson-Mount
c01bbc7e3b Tweak examples to use back-mdb 2017-02-02 10:43:01 -08:00
Quanah Gibson-Mount
6e15ccb4dd Fix grammar 2017-01-18 13:32:23 -08:00
Quanah Gibson-Mount
ba59f9859d ITS#8544 - Grammar and escaping fixes 2017-01-18 07:56:59 -08:00
Quanah Gibson-Mount
7b3a853736 ITS#8565 - Clearly document rootdn requirement for the ppolicy overlay 2017-01-18 07:50:23 -08:00
Quanah Gibson-Mount
bf9d779171 ITS#8563 - Fix missing mentions of back-mdb 2017-01-17 10:40:45 -08:00
Quanah Gibson-Mount
760ee6cd10 ITS#8562 - Various typo fixes 2017-01-17 10:35:32 -08:00
Quanah Gibson-Mount
1df85d3427 Happy New Year! 2017-01-03 12:36:47 -08:00
Quanah Gibson-Mount
cd140c12eb ITS#8538 - Update information on the interval keyword, as it affects refreshAndPersist in very specific circumstances 2016-12-02 13:27:56 -08:00
Ryan Tandy
bbc15ab657 ITS#8185 fix typo in man page 2016-10-11 21:45:32 -07:00
Quanah Gibson-Mount
abe4b3f0ca Add -n 0 option to example slapadd command 2016-08-28 11:55:48 -07:00
Quanah Gibson-Mount
8d45eb03c2 Fix quickstart guide to reference etc/slapd.d instead of etc/cn=config 2016-08-27 13:22:40 -07:00
Ryan Tandy
e35deef110 ITS#8099 bindconf ciphersuite setting is 'tls_cipher_suite' 2016-06-24 18:14:17 -07:00
Quanah Gibson-Mount
4d3a54835c Fix minor typo 2016-02-26 18:37:10 -06:00
Quanah Gibson-Mount
118a14f635 Fix documentation changes to remove extra : 2016-02-05 17:56:20 -06:00
Nadezhda Ivanova
6cafdfa8d8 ITS#8303 Asynchronous meta back-end for OpenLDAP 2016-02-01 14:35:47 +00:00
Howard Chu
a4c7943d39 Large multivalued attr support 
Store attrs with a large number of values separately from the
main entry blob. Note - we need support for large DUPSORT values
for this to be generally usable.
 2016-01-31 15:35:11 +00:00
Quanah Gibson-Mount
6c4d6c880b Happy New Year! 2016-01-29 13:32:05 -06:00
Quanah Gibson-Mount
f97da6cb01 ITS 8362 - Drop link to BDB altogether. 
Other documentation updates to make it clear that (L)MDB is preferred
 2016-01-28 18:47:13 -06:00
Quanah Gibson-Mount
f5afd17a9c ITS 8362 - Fix link to BerkeleyDB download location 2016-01-27 12:24:30 -06:00
Ondřej Kuzník
f0f366ef5b ITS#8215 Add slapmodify manpage 2015-10-25 09:00:25 +00:00
Ondřej Kuzník
7a25c7be23 ITS#8215 Manpage fixes 2015-10-25 09:00:01 +00:00
Quanah Gibson-Mount
c55d829aca mdb is the recommended backend to OpenLDAP 2015-10-20 11:20:26 -05:00
Howard Chu
91ab49c37d ITS#8249 add option to return search entry 2015-09-17 20:43:37 +01:00
Ryan Tandy
cd5147703c ITS#7897 fix admin guide syncrepl TLS defaults 
In 2.4 syncrepl was changed to take its TLS defaults from the slapd
configuration (commit 1cc1f9b) and the man page was updated to document
that (commit 27dd7a5). This updates the admin guide to match.
 2015-09-14 08:46:55 -07:00
Howard Chu
21bf33b0e8 ITS#8226 limit size of read txns in searches 2015-08-30 04:54:22 +01:00
HAMANO Tsukasa
61c95e7669 ITS#8114 OpenLDAP WiredTiger Backend 2015-08-19 18:13:27 +01:00
Howard Chu
af27b7032e ITS#8185 add pwdMaxRecordedFailure 
Limit the number of pwdFailureTime stamps to record, regardless
of lockout settings.
 2015-08-14 15:19:46 +01:00
Jan Synacek
be11563e36 ITS#7769 Fix typo in slapd-meta manpage. 2015-05-21 17:26:57 +01:00
Howard Chu
44f8642c0e ITS#8040 fix 525aa23800 2015-04-08 23:30:35 +01:00
Howard Chu
525aa23800 ITS#8040 document lazycommit 2015-04-08 23:18:03 +01:00
Quanah Gibson-Mount
48d3720d5a ITS#8099 
Update documentation to correctly use tls_cipher_suite
 2015-04-08 15:01:15 -05:00
Quanah Gibson-Mount
1705fa7e55 Happy New Year 2015-02-11 15:36:57 -06:00
Howard Chu
129299a933 ITS#8051 use a regexp 2015-02-04 05:21:46 +00:00