Josh Soref
10566c8be3
ITS#8605 - spelling fixes
...
* javascript
* kernel
* ldap
* length
* macros
* maintained
* manager
* matching
* maximum
* mechanism
* memory
* method
* mimic
* minimum
* modifiable
* modifiers
* modifying
* multiple
* necessary
* normalized
* objectclass
* occurrence
* occurring
* offered
* operation
* original
* overridden
* parameter
* permanent
* preemptively
* printable
* protocol
* provider
* really
* redistribution
* referenced
* refresh
* regardless
* registered
* request
* reserved
* resource
* response
* sanity
* separated
* setconcurrency
* should
* specially
* specifies
* structure
* structures
* subordinates
* substitution
* succeed
* successful
* successfully
* sudoers
* sufficient
* superiors
* supported
* synchronization
* terminated
* they're
* through
* traffic
* transparent
* unsigned
* unsupported
* version
* absence
* achieves
* adamson
* additional
* address
* against
* appropriate
* architecture
* associated
* async
* attribute
* authentication
* authorized
* auxiliary
* available
* begin
* beginning
* buffered
* canonical
* certificate
* charray
* check
* class
* compatibility
* compilation
* component
* configurable
* configuration
* configure
* conjunction
* constraints
* constructor
* contained
* containing
* continued
* control
* convenience
* correspond
* credentials
* cyrillic
* database
* definitions
* deloldrdn
* dereferencing
* destroy
* distinguish
* documentation
* emmanuel
* enabled
* entry
* enumerated
* everything
* exhaustive
* existence
* existing
* explicitly
* extract
* fallthru
* fashion
* february
* finally
* function
* generically
* groupname
* happened
* implementation
* including
* initialization
* initializes
* insensitive
* instantiated
* instantiation
* integral
* internal
* iterate
2017-10-11 14:39:38 -07:00
Quanah Gibson-Mount
fd5ad3ef39
ITS#8527 - Add additional debug logging on consumer/provider state when the consumer has a newer cookie than the provider
2017-10-11 14:32:25 -07:00
sca+openldap@andreasschulze.de
90835da72f
ITS#8578 - remove unused-variables in RE24 testing call (2.4.45)
2017-10-06 10:45:08 -07:00
Ondřej Kuzník
08492987a0
ITS#7100 Update entryTtl behaviour to match RFC 2589
2017-10-06 10:43:48 -07:00
Quanah Gibson-Mount
86105092bd
CHECK_CSN is a debug only flag for testing. It should always remain
...
behind LDAP_DEVEL
2017-09-26 11:30:50 -07:00
Quanah Gibson-Mount
7246da8a66
Whitespace cleanup
2017-09-26 10:33:01 -07:00
Ondřej Kuzník
9e156bf914
ITS#8444 Do not clear the pending operation when checkpointing
...
When a checkpoint happens, if we remove the CSN from the pending list,
accesslog won't pass it onto the accesslog DB. But in a delta-mmr
scenario, an accesslog entry without a CSN faces a race where it might
be applied twice - that usually fails and causes a full refresh, other
times it can cause a silent desync - both are undesirable.
2017-08-25 16:52:13 +01:00
Howard Chu
a9f462d615
ITS#8690 one more time
2017-08-04 20:58:07 +01:00
Howard Chu
c9e56b80f3
ITS#8690 fix again
2017-08-04 13:40:34 +01:00
Howard Chu
bcc6601091
Revert "ITS#8690 refix"
...
This reverts commit a5f3a2885c
2017-08-04 13:34:03 +01:00
Howard Chu
a5f3a2885c
ITS#8690 refix
...
Don't double-queue delete ops
2017-08-02 00:52:13 +01:00
Howard Chu
9827569ff0
ITS#8690 fix prev commit
2017-08-01 21:57:02 +01:00
Howard Chu
1fbc0dff88
ITS#8690 plug memleak on Delete ops
2017-07-21 19:04:08 +01:00
Kevin Lam
11bf6bc10a
ITS#8592 Fix double free in sssvlv overlay
2017-04-26 11:05:00 -07:00
Howard Chu
2975a1d6f1
Tweaks for OpenSSL 1.1 API deprecations
2017-04-19 20:19:09 +01:00
Howard Chu
c0ff8e8a21
Delete extraneous #define
...
Was only for convenience during testing
2017-04-19 19:27:02 +01:00
Quanah Gibson-Mount
87f3477626
Fix autoca build with OpenSSL 1.1.0
2017-04-18 13:40:05 -07:00
Howard Chu
25dc9e99ea
Cleanup warnings, unused vars, etc.
2017-04-09 23:42:22 +01:00
Howard Chu
cff264c6e1
Fix autoca schema init
...
Wait for core.schema to get loaded
2017-04-09 22:45:36 +01:00
Howard Chu
268f71cb27
autoca fixups
...
Move install of CA cert to a pool thread, otherwise cn=config deadlocks
on dynamically loaded overlay.
Dup/release entry before attempting to modify it, to avoid deadlocks
in back-bdb/hdb.
Always use PKCS#8 format when storing private keys.
2017-04-09 20:31:11 +01:00
Howard Chu
0f9ec8322f
Add localDN config
...
If a cert is generated for this DN, configure it as the local
TLS cert/key
2017-04-09 16:44:14 +01:00
Howard Chu
b939bb519e
Set the CA cert in cn=config if none was already set
2017-04-09 15:42:17 +01:00
Howard Chu
2860fd4c6c
Move privateKey schema into slapd
2017-04-09 14:16:56 +01:00
Howard Chu
2b920ecaec
Add autoca overlay
...
Automated certificate authority
2017-04-08 02:51:08 +01:00
Ondřej Kuzník
ec5af7b5e7
ITS#6545 Update accesslog format and syncrepl consumer
...
Make two successive modifications of the same attribute separate. This
lets the consumer interpret the log entry the same way as the server
that produced it.
Still depends on the log entry attributes being read in the same order
as they were written.
2017-04-07 14:39:07 -07:00
Ondřej Kuzník
46c85a32ae
ITS#8266 Allow empty mods
2017-03-30 15:27:45 -07:00
Ondřej Kuzník
e56a849e5d
ITS#8625 Separate Avlnode and TAvlnode types
...
Switch AVL_CHILD/AVL_THREAD values and set Avlnode bits to AVL_CHILD for
better compatibility between avl and tavl as suggested by Howard.
2017-03-29 14:52:44 +01:00
Quanah Gibson-Mount
1df85d3427
Happy New Year!
2017-01-03 12:36:47 -08:00
Howard Chu
589331ea75
More for ITS#8460
...
accesslog can alter the timestamp on contextCSN updates
2016-08-11 17:27:35 +01:00
Hallvard Furuseth
23c5d6bbdd
ITS#8435 Fix uninited slap_callback.sc_writewait
2016-06-12 08:30:58 +02:00
Howard Chu
b7c1a5d6b8
ITS#8423 check for pause in accesslog_purge
2016-05-15 00:51:14 +01:00
Howard Chu
d6f3440d94
ITS#8365 partially revert ITS#8281
...
Must setup psearch before snapshotting ctxcsn
2016-02-02 19:41:13 +00:00
Quanah Gibson-Mount
6c4d6c880b
Happy New Year!
2016-01-29 13:32:05 -06:00
Howard Chu
a9df031d0d
ITS#8354 move abandon check
2016-01-23 16:06:32 +00:00
Howard Chu
6d2eb36ccb
ITS#8354 tweak prev commit
...
Delay mutex init to avoid leaking the mutex
2016-01-22 20:46:23 +00:00
Howard Chu
4773850d42
ITS#8354 fix syncprov abandon
...
Check for abandon just before recording psearch
2016-01-22 20:41:48 +00:00
Howard Chu
eaee3b39ba
ITS#8351 fix accesslog callback init
2016-01-15 10:37:56 +00:00
Howard Chu
3a305253a0
ITS#8327 fix ppolicy_get_default
...
pwdMaxRecordedFailure must never be zero
2015-12-03 00:58:33 +00:00
Howard Chu
71c907fb88
ITS#8281 more for prev commit
2015-10-24 06:34:24 +01:00
Howard Chu
cd8ff37629
ITS#8281 fix delta-mmr with interrupted refresh
...
Prevent spurious contextCSN generation
and ignore consumers when we have no contextCSN yet.
But make sure to propagate valid contextCSN updates to
accesslog/syncprov for delta consumers.
2015-10-24 06:06:49 +01:00
Ryan Tandy
f5100665e3
ITS#7964 avoid double-unescaping rewrite rules
...
config_fp_parse_line processes backslash escapes. When existing rewrite
rules were reloaded while inserting a new rule, this caused backslashes
to be lost from every rule except the most recently inserted one.
config_parse_ldif performs similar splitting, but leaves backslashes
alone.
2015-09-06 21:34:03 -07:00
Ryan Tandy
e27108e7cb
ITS#7889 add olcDropUnrequested to olcRwmConfig
2015-09-05 17:59:38 -07:00
Ryan Tandy
1b7a5871c2
ITS#8234 revert to default policy on failure
2015-09-01 19:19:57 -07:00
Ryan Tandy
572ad2b037
ITS#7537 release entry on failure
2015-09-01 18:56:19 -07:00
Howard Chu
79157d314f
ITS#8220 fix prev commit
...
Dynamic startup was failing
2015-08-21 11:40:02 +01:00
Howard Chu
7fb9bb93bf
ITS#8220 restore refint performance
2015-08-19 14:04:15 +01:00
Howard Chu
e5b9bdd8c5
ITS#8185 missing schema reference
2015-08-15 00:56:50 +01:00
Ryan Tandy
1c49424134
ITS#8133 avoid mods during dds_db_open
...
If dds is present early in the overlay stack, the modify ops from
dds_expire can trigger other overlays before they have initialized.
Avoid that by delaying the first expiry until startup has finished.
2015-08-14 08:46:56 -07:00
Howard Chu
b0950f4d44
Fix copy/paste error in prev commit
2015-08-14 15:33:32 +01:00
Howard Chu
af27b7032e
ITS#8185 add pwdMaxRecordedFailure
...
Limit the number of pwdFailureTime stamps to record, regardless
of lockout settings.
2015-08-14 15:19:46 +01:00
