Ondřej Kuzník
61e9b6d37a
ITS#9347 Log which policy attribute is invalid
2021-03-25 23:57:07 +00:00
Ondřej Kuzník
109d967ff2
ITS#7788 Hashing should be independent of a useable policy
2021-03-25 19:43:18 +00:00
Howard Chu
c6e521fa98
ITS#8950 move txn setup to frontend
...
Backends should just execute when invoked, frontend should
exclusively take care of queueing for txn setup.
2021-03-23 14:58:09 +00:00
Howard Chu
f9cb918d05
ITS#9504 back-ldap: set default idassert mode as documented
2021-03-22 17:50:32 +00:00
Howard Chu
f1ebb45695
ITS#9251 make max filter depth configurable
2021-03-22 17:31:13 +00:00
Howard Chu
da57548e52
ITS#9498 More connection streamlining
...
Since c_mutex is now always inited at startup time, we no longer
need connections_mutex to protect from uninit'd structures
2021-03-22 17:12:30 +00:00
Howard Chu
5398d44a36
ITS#8967 additional check
2021-03-22 09:18:32 +00:00
Howard Chu
a3935c7249
ITS#8967 back-mdb: fix adminlimit check
2021-03-22 08:36:49 +00:00
Howard Chu
f2740c79b3
ITS#8589 syncrepl: defer on REFRESH_REQUIRED
...
Schedule a new retry instead of immediate looping back. This
will also prevent locking up cn=config replication.
2021-03-21 17:41:19 +00:00
Howard Chu
cc2834c87a
ITS#9152 autoca: no-op if DB doesn't exist yet
2021-03-21 17:28:50 +00:00
Howard Chu
7a4e70f3e6
ITS#8577 don't allow setting logDB to current DB
2021-03-21 17:20:05 +00:00
Howard Chu
696d5656fa
ITS#9241 all ARG_DN configs must also use ARG_QUOTE
2021-03-21 16:47:43 +00:00
Howard Chu
cbb6441c30
ITS#8726 check newly registered loglevels immediately
...
See if they were requested as soon as they are successfully registered.
2021-03-21 16:36:30 +00:00
Howard Chu
bb6844e296
ITS#7295 don't init TLS threads by default
...
Do it explicitly in servers
2021-03-21 15:26:57 +00:00
Howard Chu
7ff1f42f7e
ITS#8246 frontend and config DBs are unique
...
Also make sure config_add_internal errmsg is returned to slapadd
2021-03-21 14:58:22 +00:00
Ondřej Kuzník
cf67fc22f3
ITS#9016 Do not forget to close directory handle
2021-03-19 12:48:09 +00:00
Ondřej Kuzník
3c12993fbe
ITS#9016 Check confdir is empty before generating from scratch
2021-03-18 21:07:43 +00:00
Ondřej Kuzník
eafcc405e2
ITS#6830 Enable NO-USER-MODIFICATION on ppolicy attributes
2021-03-18 17:32:30 +00:00
Ondřej Kuzník
4d6b01802a
ITS#9051 Check for more success result codes
2021-03-18 16:36:56 +00:00
Ondřej Kuzník
152c12d4d3
ITS#9051 Do not remove callback on intermediate responses
2021-03-18 16:36:56 +00:00
Ondřej Kuzník
0c8afb036a
ITS#9444 Manage sr_ref/sr_matched flags accordingly
...
send_ldap_response() clears them immediately even if we never attached
the data to be freed, so when we reinstate them, the flags are gone and
the next send_ldap_response() doesn't consider freeing them.
2021-03-18 15:34:26 +00:00
Ondřej Kuzník
f78887390a
ITS#9444 Pass original message when chain-return-error is set
2021-03-18 15:34:26 +00:00
Howard Chu
616e5bf1c3
ITS#9498 connection_next: fix validity check
2021-03-11 09:31:41 +00:00
Quanah Gibson-Mount
c7763538de
ITS#9453 - Make pw argon2 official
2021-03-10 23:21:08 +00:00
Howard Chu
28a04795f6
ITS#9479 asyncmeta: fix hanging ops
...
Two separate problems
1) ops that never got sent because of a pending Bind
2) errors that never got returned because of an active op
2021-03-10 00:18:59 +00:00
Quanah Gibson-Mount
180f5b62cb
ITS#9482 - Fix possiblity of uninitialized data being returned in slapi plugin
2021-03-09 20:49:42 +00:00
Quanah Gibson-Mount
891fc1e117
ITS#9481 - Fix cases when IPv6 support is disabled
2021-03-08 18:10:41 +00:00
Paul B. Henson
b91491a8ee
ITS#9481 - fix proxyp when IPv6 disabled
2021-03-08 18:10:41 +00:00
Konstantin Andreev
f2481c8d88
ITS#9446 - Correctly parse gecos field
2021-03-04 19:05:23 +00:00
Howard Chu
17abe7e710
ITS#9491 plug memctx leak - frontend already clears it
2021-03-04 17:03:20 +00:00
Ondřej Kuzník
99efeda06f
ITS#9288 Do no change tainted status on failed retry
...
It seems refcnt == 0 connections are tainted only if they were just
removed from cache.
2021-03-02 20:00:55 +00:00
Ondřej Kuzník
6bfdb0342d
ITS#8215 Some more slapmodify manpage tweaks
2021-03-02 19:08:50 +00:00
Quanah Gibson-Mount
05b1b4688c
ITS#9480 - Update example configurations to include monitor db
2021-03-02 16:12:05 +00:00
Ondřej Kuzník
34b95c520e
ITS#9438 Add remoteauth overlay
2021-02-25 22:11:39 +00:00
Ondřej Kuzník
38ea26b35f
ITS#7262 Retrieve the policy from the correct backend
2021-02-24 22:15:48 +00:00
Tero Saarni
0eacc4a793
ITS#9197 back-ldap: added task that prunes expired connections
2021-02-24 22:07:48 +00:00
Howard Chu
22fd5a8924
ITS#9477 fix regression from #9339
...
Must provide plain IP address for TCP wrapper
2021-02-24 19:59:51 +00:00
Paul B. Henson
146889f205
ITS#9419 Add support for HAProxy proxy protocol v2
2021-02-24 18:11:09 +00:00
Paul B. Henson
dcca73370b
Move slap_sockaddrstr into liblutil
2021-02-24 18:11:09 +00:00
Ondřej Kuzník
5fa0a651f5
revert: libevent 2.0 support
2021-02-24 18:11:09 +00:00
Ondřej Kuzník
a3c49b8709
ITS#9293 Store microseconds in pwdGraceUseTime
2021-02-24 17:03:22 +00:00
Ondřej Kuzník
d1799a5023
ITS#7596 Report correct number of grace authentications left
2021-02-24 17:03:22 +00:00
Ondřej Kuzník
ee564399df
ITS#9282 Check all csns
2021-02-18 17:31:32 +00:00
Quanah Gibson-Mount
5b2988ca54
ITS#9327 - Use STRIP_OPTS for lloadd
2021-02-17 19:55:25 +00:00
Quanah Gibson-Mount
ce2c5173bd
ITS#9161 - Fix various typos
...
Fix a number of different typos across the code base
2021-02-17 18:42:46 +00:00
Howard Chu
e5bd309fb2
ITS#9458 must alloc new conn->c_sb after freeing old one
2021-02-08 00:46:58 +00:00
Howard Chu
3539fc3321
ITS#9454 fix issuerAndThisUpdateCheck
2021-02-06 20:52:06 +00:00
Howard Chu
c0c1bd319e
ITS#9456 fix prev commit
...
No need to reschedule the task inside asyncmeta_timeout_loop.
Frontend already does it if task was init'd with a valid interval.
2021-02-06 15:45:22 +00:00
Howard Chu
7c129c8d62
ITS#9456 fix asyncmeta_timeout_loop()
2021-02-06 13:47:55 +00:00
Howard Chu
e3fd030aef
Fixup debug msgs
2021-02-05 23:55:27 +00:00
