Ondřej Kuzník
637061c6ea
ITS#10263 Reject modifications with invalid whitespace
2024-11-12 17:45:48 +00:00
Quanah Gibson-Mount
f6d22e0443
ITS#10264
2024-11-12 17:44:47 +00:00
Ondřej Kuzník
90fc22ab2d
ITS#10264 Free NoD data we stored locally
2024-11-12 17:44:17 +00:00
Quanah Gibson-Mount
f12f1f0288
ITS#10234
2024-10-04 22:08:31 +00:00
Ondřej Kuzník
67bef41c3c
ITS#10234 Reinit retry state on refreshDone
2024-10-04 22:08:03 +00:00
Quanah Gibson-Mount
121beab8e1
ITS#10232
2024-10-04 22:07:10 +00:00
Ondřej Kuzník
c451a39fe4
ITS#10232 Reset cs_refreshing on config delete
2024-10-04 22:06:18 +00:00
Quanah Gibson-Mount
1b72eb2683
ITS#10248
2024-10-04 22:04:40 +00:00
Michael Nolta
12eeb27d5b
ITS#10248 Regression test script
2024-10-04 22:03:44 +00:00
Ondřej Kuzník
a6f6c2f8bf
ITS#10248 Always generate a result on the original op
2024-10-04 22:03:39 +00:00
Quanah Gibson-Mount
90611ffd03
ITS#10249
2024-10-04 22:02:56 +00:00
Ondřej Kuzník
99327d316e
ITS#10249 slapo-nestgroup: plug leak in nestgroup_memberFilter
2024-10-04 22:02:24 +00:00
Quanah Gibson-Mount
3a9afeac0d
ITS#10256
2024-10-04 22:00:54 +00:00
Howard Chu
bec0946cca
ITS#10256 cn=config: reject modify requests on cn=schema,cn=config
...
Add requests already handled it specially; corresponding treatment
for modify requests was missing. The docs have always stated that
cn=schema,cn=config is only for slapd's hardcoded schema so this
only affects users who don't read docs.
2024-10-04 22:00:01 +00:00
Quanah Gibson-Mount
3c3309265e
ITS#10253
2024-10-04 21:59:40 +00:00
Ryan Tandy
bfe0b37471
ITS#10253 Fix incompatible pointer type with GnuTLS
2024-10-04 21:59:24 +00:00
Quanah Gibson-Mount
72df6b3981
ITS#10233
2024-10-04 21:59:09 +00:00
Quanah Gibson-Mount
af4dfade0b
ITS#7400 - Fix exattr to exattrs option
2024-10-04 21:53:57 +00:00
HAMANO Tsukasa
efa9f173d2
ITS#10233 - fix idl intersection
...
The `mdb_idl_intersection()` and `wt_idl_intersection()` functions derived from back-bdb return wrong results.
expect:
[1, 3] ∩ [2] = []
actual:
[1, 3] ∩ [2] = [2]
also
- Add scope checking for back-wt
- fix compiler warning
2024-10-04 21:49:50 +00:00
Quanah Gibson-Mount
836cb913ef
ITS#10237
2024-10-04 21:47:30 +00:00
Howard Chu
84a64fe354
ITS#10237 back-ldap: fix usage of multi-precision add for op counters
2024-10-04 21:41:34 +00:00
Howard Chu
0f984dd354
ITS#10230 slapo-memberof: fix addcheck search to omit dynamic values
2024-06-28 17:14:45 +00:00
Quanah Gibson-Mount
743ece8994
ITS#10235
2024-06-28 17:03:55 +00:00
Howard Chu
74f0e83eb4
ITS#10235 slapo-nestgroup: silence extraneous register_at message
2024-06-28 17:03:29 +00:00
Quanah Gibson-Mount
9937d5b9a7
ITS#10231
2024-06-28 17:02:02 +00:00
Howard Chu
8350e24c8f
ITS#10231 slapadd: check for NULL suffix in error message
2024-06-28 17:01:55 +00:00
Quanah Gibson-Mount
5cd67e374e
ITS#10230
2024-06-28 17:01:22 +00:00
Quanah Gibson-Mount
c8e2fbf398
ITS#10227
2024-06-28 17:00:39 +00:00
Nadezhda Ivanova
1ea9880ad0
ITS#10227 Asyncmeta will not reset a connection if a bind operation fails with LDAP_OTHER, leaving the connection in invalid state
2024-06-28 16:59:06 +00:00
Quanah Gibson-Mount
f30d23a911
ITS#10219
2024-06-28 16:58:22 +00:00
Nadezhda Ivanova
532b2e60da
ITS#10219 Modify of olcDisabled by removing and adding a value invokes db_open twice
...
Do not invoke db_open if the database is not actually disabled
2024-06-28 16:58:12 +00:00
Quanah Gibson-Mount
8f05e9ed4d
ITS#10218
2024-06-28 16:57:22 +00:00
Nadezhda Ivanova
dc358cbc8e
ITS#10218 Disabling and re-enabling an asyncmeta database via cn=config leaks memory
...
Make sure asyncmeta frees the pending operations structures, resets all connections, frees connection structures and stops the timeout-loop.
2024-06-28 16:56:38 +00:00
Quanah Gibson-Mount
d0d0470f1f
ITS#9827
2024-06-28 16:50:21 +00:00
Quanah Gibson-Mount
3516e19bc7
ITS#9827 - Use 7MB memory/5 iterations as default
...
This has the same protections as 19MB/2 iterations, but requires less system memory
2024-06-28 16:49:04 +00:00
François Kooman
d13a07bf94
ITS#9827 update Argon2 defaults
...
- switch to argon2id by default (from argon2i)
- use OWASP recommended parameters as defaults
This only affects builds that use libargon2, e.g. Debian, and
not builds that use libsodium as argon2id is already the
default there, and better parameters are used
References: https://bugs.openldap.org/show_bug.cgi?id=9827
Signed-off-by: François Kooman <fkooman@tuxed.net>
2024-06-28 16:48:57 +00:00
Quanah Gibson-Mount
9d07c21d76
ITS#10224
2024-06-28 16:47:55 +00:00
Howard Chu
1d556f230f
ITS#10224 libldap: check for OpenSSL EVP_Digest* failure
2024-06-28 16:47:32 +00:00
Quanah Gibson-Mount
0e7dbc9973
ITS#10223
2024-06-28 16:47:27 +00:00
Howard Chu
a45e1fc4eb
ITS#10223 libldap: check for OpenSSL SSL_CTX_set_ciphersuites failure
2024-06-28 16:46:13 +00:00
Quanah Gibson-Mount
d24499a93a
Return to release engineering
2024-06-03 15:26:48 +00:00
Quanah Gibson-Mount
29eea85525
Prep for release (2.6.8)
2024-05-21 17:19:11 +00:00
Quanah Gibson-Mount
662ccd4cc7
Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_6
2024-05-21 17:16:47 +00:00
Quanah Gibson-Mount
3a29a24777
Prep for release
2024-05-21 17:16:06 +00:00
Quanah Gibson-Mount
a741fb5e98
ITS#10216
2024-05-21 16:06:30 +00:00
Howard Chu
051b9f05a1
ITS#10216 libldap: fix OpenSSL channel binding digest
...
The OBJ_find_ API is undocumented but this is what OpenSSL libcrypto does itself.
2024-05-21 15:42:03 +00:00
Quanah Gibson-Mount
3fbe399c3c
ITS#10209
2024-05-09 19:09:18 +00:00
Howard Chu
1d37f7b005
ITS#10209 libldap: only use OPENSSL_INIT_NO_ATEXIT if it's defined
...
Fake OpenSSL clones like LibreSSL don't support it.
In general we will make no effort to support fake OpenSSL clones.
2024-05-09 19:08:33 +00:00
Quanah Gibson-Mount
2814365126
ITS#10214
2024-05-09 17:10:10 +00:00
Quanah Gibson-Mount
5747936fd5
ITS#10214 - Regenerate configure
2024-05-09 17:09:19 +00:00
