Commit Graph

24398 Commits

Author SHA1 Message Date
Ondřej Kuzník
e101d0ecc1 ITS#10266 Adopt broader RFC4511 NoD interpretation, receiving side 2025-02-19 19:59:42 +00:00
Ondřej Kuzník
89e34fded3 ITS#10265 Allow runtime reconfig of olcBkLloadListen 2025-02-19 18:39:09 +00:00
Ondřej Kuzník
f2cba910d8 ITS#7249 Disallow memberof-addcheck when memberof is global 2025-02-19 17:29:04 +00:00
Ondřej Kuzník
993f488e7b ITS#7249 Let backend_attribute know who's calling it 2025-02-19 17:29:04 +00:00
Ondřej Kuzník
6c0a44d1ec ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified 2025-02-19 16:51:05 +00:00
Ondřej Kuzník
8ed07d0b93 ITS#10307 Initialise last if we use it later 2025-02-18 19:42:58 +00:00
Ondřej Kuzník
e3dd9ac693 Update and clarify replication docs 2025-02-12 17:57:31 +00:00
Alexandre Jousset
068881efb4 ITS#10160 - Add "neguri" and "negset" constraint types to slapo-constraint 2025-02-12 17:46:55 +00:00
Howard Chu
429556c5f6 ITS#10302 slapd-mdb: fix idcursor double-free in slapadd shutdown
Caused when calling tool_entry_modify to update ctxcsn after all adds are done.
2025-02-04 17:00:36 +00:00
Nadezhda Ivanova
002214cc38 ITS#9186 Add deferred ops statistics counters 2025-01-06 16:24:24 +02:00
Ondřej Kuzník
62892d090c ITS#10290 Move syncrepl_modify_cb to the end of the list
The way op->orm_modlist is allocated by syncrepl_op_modify is not
compatible with slap_mods_free() and so callbacks from any overlays that
touch op->orm_modlist on the way down need a chance to undo their state
first as we go back up.
2024-12-16 20:00:25 +00:00
Nadezhda Ivanova
e2b04c434e ITS#9186 Add a counter to cn=Listener to track total number of established connections since startup 2024-12-16 18:31:23 +00:00
Ondřej Kuzník
70d8e22db7 ITS#7080 Do not reuse back-ldif's stack for controls 2024-12-16 17:01:26 +00:00
Ondřej Kuzník
e58266229f ITS#7080 Implement pre/postread for modrdn 2024-12-16 17:01:26 +00:00
Ondřej Kuzník
86d23423ac ITS#7080 Do not munge path twice 2024-12-16 17:01:26 +00:00
Ondřej Kuzník
2ba10ad59c ITS#10229 Adjust ldap_result behaviour with LDAP_MSG_RECEIVED 2024-12-16 16:18:53 +00:00
Howard Chu
c843b4ec93 ITS#10288 autoca: fix olcAutoCAserverClass config 2024-11-29 14:46:10 +00:00
Bjarni Ingi Gislason
6d41e5fef0 ITS#10226 - Fix ldap.conf(5) formatting issues 2024-11-14 21:05:52 +00:00
Ondřej Kuzník
64021967b5 ITS#10272 Request all attributes from remote
Fixes a regression introduced in fc1bcaf9de
leaving us unable to check the full filter after we recreate the entry.
2024-10-29 12:43:37 +00:00
Ondřej Kuzník
e29105597a ITS#10155 manage option values more carefully 2024-10-28 17:39:53 +00:00
Ondřej Kuzník
d143f7a2dc ITS#8047 Fix TLS connection timeout handling
The test for async in ldap_int_tls_start was inverted, we already
support calling ldap_int_tls_connect repeatedly. And so long as
LBER_SB_OPT_NEEDS_* are managed correctly, the application should be
able to do the right thing.

Might require a new result code rather than reporposing
LDAP_X_CONNECTING for this.
2024-10-26 20:51:35 +00:00
Ondřej Kuzník
40b6592adf ITS#10263 Reject modifications with invalid whitespace 2024-10-26 16:49:39 +00:00
Ondřej Kuzník
5acbc6e994 ITS#9393 Expose and document ldap_pvt_put_filter 2024-10-26 00:27:50 +00:00
Ondřej Kuzník
4b8e60f843 ITS#9042 Log modify values under STATS2 2024-10-25 20:02:19 +00:00
Nadezhda Ivanova
223a755783 ITS#9914 Add OS pagesize to the back-mdb monitor information
Page size is now provided with the olmMDBPageSize attribute.
2024-10-25 18:53:32 +00:00
Ondřej Kuzník
3f6cec3b46 ITS#10264 Free NoD data we stored locally 2024-10-02 13:23:44 +01:00
Ondřej Kuzník
2af486cf00 ITS#10234 Reinit retry state on refreshDone 2024-10-01 16:12:50 +00:00
Ondřej Kuzník
4448049955 ITS#10232 Reset cs_refreshing on config delete 2024-10-01 16:12:50 +00:00
Ondřej Kuzník
139944ac1e ITS#7982 Log TLS proto+cipher suite on client side 2024-09-27 14:21:20 +01:00
Michael Nolta
dd621781f0 ITS#10248 Regression test script 2024-09-26 17:56:59 +00:00
Ondřej Kuzník
f8caf85d9b ITS#10248 Always generate a result on the original op 2024-09-26 17:56:59 +00:00
Ondřej Kuzník
8bad3eb380 ITS#10249 slapo-nestgroup: plug leak in nestgroup_memberFilter 2024-09-25 17:10:09 +01:00
Howard Chu
5e9d550c2e ITS#10256 cn=config: reject modify requests on cn=schema,cn=config
Add requests already handled it specially; corresponding treatment
for modify requests was missing. The docs have always stated that
cn=schema,cn=config is only for slapd's hardcoded schema so this
only affects users who don't read docs.
2024-09-10 17:41:39 +01:00
Ryan Tandy
aa7b1a3db9 ITS#10253 Fix incompatible pointer type 2024-08-21 17:48:45 -07:00
Howard Chu
c9ab732ec1 ITS#10247 libldap: add ldap_url_check_ext() to check URL extensions
And check validity earlier, in ldap_initialize() and ldap_init_fd().
2024-08-20 15:39:04 +00:00
Howard Chu
4fc6a3c064 ITS#10247 libldap: reject unrecognized critical URL extensions 2024-08-20 15:39:04 +00:00
Ondřej Kuzník
c0bd83df69 ITS#10251 cast sa when passed to getsockname 2024-08-13 09:21:15 +01:00
Quanah Gibson-Mount
d1987e00f9 ITS#7400 - Fix exattr to exattrs option 2024-07-31 22:50:32 +00:00
Ondřej Kuzník
d8b5bfddb7 ITS#10242 Record rid in operation related logs 2024-07-22 17:17:29 +01:00
HAMANO Tsukasa
554e754b3f fix idl intersection ITS#10233
The `mdb_idl_intersection()` and `wt_idl_intersection()` functions derived from back-bdb return wrong results.

expect:
[1, 3] ∩ [2] = []

actual:
[1, 3] ∩ [2] = [2]

also
- Add scope checking for back-wt
- fix compiler warning
2024-07-08 13:06:53 +00:00
Howard Chu
3327a6b693 ITS#10237 fix prev commit 2024-07-04 18:52:44 +01:00
Howard Chu
a323284c06 ITS#10237 back-ldap: fix usage of multi-precision add for op counters 2024-07-04 18:35:45 +01:00
Howard Chu
b490437a66 ITS#10235 slapo-nestgroup: silence extraneous register_at message 2024-06-27 00:49:21 +01:00
Howard Chu
aa31963e44 ITS#10231 slapadd: check for NULL suffix in error message 2024-06-18 17:14:12 +01:00
Howard Chu
f1b921783b ITS#10230 slapo-memberof: fix addcheck search to omit dynamic values 2024-06-17 21:40:48 +01:00
Nadezhda Ivanova
0f521e636b ITS#10227 Asyncmeta will not reset a connection if a bind operation fails with LDAP_OTHER, leaving the connection in invalid state 2024-06-13 21:23:27 +00:00
Nadezhda Ivanova
6b4b68b13a ITS#10219 Modify of olcDisabled by removing and adding a value invokes db_open twice
Do not invoke db_open if the database is not actually disabled
2024-06-13 18:41:25 +00:00
Nadezhda Ivanova
5740d1747d ITS#10218 Disabling and re-enabling an asyncmeta database via cn=config leaks memory
Make sure asyncmeta frees the pending operations structures, resets all connections, frees connection structures and stops the timeout-loop.
2024-06-13 17:38:06 +00:00
Quanah Gibson-Mount
f0ab743db4 ITS#9827 - Use 7MB memory/5 iterations as default
This has the same protections as 19MB/2 iterations, but requires less system memory
2024-06-11 17:06:33 +00:00
Howard Chu
1fc09713b1 ITS#10224 libldap: check for OpenSSL EVP_Digest* failure 2024-06-07 15:34:23 +01:00