Quanah Gibson-Mount
f3ae2773b0
Return to release engineering
2024-11-26 21:46:38 +00:00
Quanah Gibson-Mount
e460f00874
Prep for release
2024-11-26 17:11:04 +00:00
Quanah Gibson-Mount
664dd71127
ITS#10272
2024-11-13 17:14:33 +00:00
Ondřej Kuzník
99f672b564
ITS#10272 Request all attributes from remote
...
Fixes a regression introduced in fc1bcaf9ded9410cd825112be8db994163c06b04
leaving us unable to check the full filter after we recreate the entry.
2024-11-13 17:11:10 +00:00
Quanah Gibson-Mount
534c13871f
ITS#8047
2024-11-12 17:56:19 +00:00
Ondřej Kuzník
5645e37044
ITS#8047 Fix TLS connection timeout handling
...
The test for async in ldap_int_tls_start was inverted, we already
support calling ldap_int_tls_connect repeatedly. And so long as
LBER_SB_OPT_NEEDS_* are managed correctly, the application should be
able to do the right thing.
Might require a new result code rather than reporposing
LDAP_X_CONNECTING for this.
2024-11-12 17:55:56 +00:00
Quanah Gibson-Mount
667db7bef8
ITS#10155
2024-11-12 17:49:30 +00:00
Ondřej Kuzník
00ff5b3551
ITS#10155 manage option values more carefully
2024-11-12 17:49:21 +00:00
Quanah Gibson-Mount
a385f38200
ITS#10263
2024-11-12 17:46:34 +00:00
Ondřej Kuzník
637061c6ea
ITS#10263 Reject modifications with invalid whitespace
2024-11-12 17:45:48 +00:00
Quanah Gibson-Mount
f6d22e0443
ITS#10264
2024-11-12 17:44:47 +00:00
Ondřej Kuzník
90fc22ab2d
ITS#10264 Free NoD data we stored locally
2024-11-12 17:44:17 +00:00
Quanah Gibson-Mount
f12f1f0288
ITS#10234
2024-10-04 22:08:31 +00:00
Ondřej Kuzník
67bef41c3c
ITS#10234 Reinit retry state on refreshDone
2024-10-04 22:08:03 +00:00
Quanah Gibson-Mount
121beab8e1
ITS#10232
2024-10-04 22:07:10 +00:00
Ondřej Kuzník
c451a39fe4
ITS#10232 Reset cs_refreshing on config delete
2024-10-04 22:06:18 +00:00
Quanah Gibson-Mount
1b72eb2683
ITS#10248
2024-10-04 22:04:40 +00:00
Michael Nolta
12eeb27d5b
ITS#10248 Regression test script
2024-10-04 22:03:44 +00:00
Ondřej Kuzník
a6f6c2f8bf
ITS#10248 Always generate a result on the original op
2024-10-04 22:03:39 +00:00
Quanah Gibson-Mount
90611ffd03
ITS#10249
2024-10-04 22:02:56 +00:00
Ondřej Kuzník
99327d316e
ITS#10249 slapo-nestgroup: plug leak in nestgroup_memberFilter
2024-10-04 22:02:24 +00:00
Quanah Gibson-Mount
3a9afeac0d
ITS#10256
2024-10-04 22:00:54 +00:00
Howard Chu
bec0946cca
ITS#10256 cn=config: reject modify requests on cn=schema,cn=config
...
Add requests already handled it specially; corresponding treatment
for modify requests was missing. The docs have always stated that
cn=schema,cn=config is only for slapd's hardcoded schema so this
only affects users who don't read docs.
2024-10-04 22:00:01 +00:00
Quanah Gibson-Mount
3c3309265e
ITS#10253
2024-10-04 21:59:40 +00:00
Ryan Tandy
bfe0b37471
ITS#10253 Fix incompatible pointer type with GnuTLS
2024-10-04 21:59:24 +00:00
Quanah Gibson-Mount
72df6b3981
ITS#10233
2024-10-04 21:59:09 +00:00
Quanah Gibson-Mount
af4dfade0b
ITS#7400 - Fix exattr to exattrs option
2024-10-04 21:53:57 +00:00
HAMANO Tsukasa
efa9f173d2
ITS#10233 - fix idl intersection
...
The `mdb_idl_intersection()` and `wt_idl_intersection()` functions derived from back-bdb return wrong results.
expect:
[1, 3] ∩ [2] = []
actual:
[1, 3] ∩ [2] = [2]
also
- Add scope checking for back-wt
- fix compiler warning
2024-10-04 21:49:50 +00:00
Quanah Gibson-Mount
836cb913ef
ITS#10237
2024-10-04 21:47:30 +00:00
Howard Chu
84a64fe354
ITS#10237 back-ldap: fix usage of multi-precision add for op counters
2024-10-04 21:41:34 +00:00
Howard Chu
0f984dd354
ITS#10230 slapo-memberof: fix addcheck search to omit dynamic values
2024-06-28 17:14:45 +00:00
Quanah Gibson-Mount
743ece8994
ITS#10235
2024-06-28 17:03:55 +00:00
Howard Chu
74f0e83eb4
ITS#10235 slapo-nestgroup: silence extraneous register_at message
2024-06-28 17:03:29 +00:00
Quanah Gibson-Mount
9937d5b9a7
ITS#10231
2024-06-28 17:02:02 +00:00
Howard Chu
8350e24c8f
ITS#10231 slapadd: check for NULL suffix in error message
2024-06-28 17:01:55 +00:00
Quanah Gibson-Mount
5cd67e374e
ITS#10230
2024-06-28 17:01:22 +00:00
Quanah Gibson-Mount
c8e2fbf398
ITS#10227
2024-06-28 17:00:39 +00:00
Nadezhda Ivanova
1ea9880ad0
ITS#10227 Asyncmeta will not reset a connection if a bind operation fails with LDAP_OTHER, leaving the connection in invalid state
2024-06-28 16:59:06 +00:00
Quanah Gibson-Mount
f30d23a911
ITS#10219
2024-06-28 16:58:22 +00:00
Nadezhda Ivanova
532b2e60da
ITS#10219 Modify of olcDisabled by removing and adding a value invokes db_open twice
...
Do not invoke db_open if the database is not actually disabled
2024-06-28 16:58:12 +00:00
Quanah Gibson-Mount
8f05e9ed4d
ITS#10218
2024-06-28 16:57:22 +00:00
Nadezhda Ivanova
dc358cbc8e
ITS#10218 Disabling and re-enabling an asyncmeta database via cn=config leaks memory
...
Make sure asyncmeta frees the pending operations structures, resets all connections, frees connection structures and stops the timeout-loop.
2024-06-28 16:56:38 +00:00
Quanah Gibson-Mount
d0d0470f1f
ITS#9827
2024-06-28 16:50:21 +00:00
Quanah Gibson-Mount
3516e19bc7
ITS#9827 - Use 7MB memory/5 iterations as default
...
This has the same protections as 19MB/2 iterations, but requires less system memory
2024-06-28 16:49:04 +00:00
François Kooman
d13a07bf94
ITS#9827 update Argon2 defaults
...
- switch to argon2id by default (from argon2i)
- use OWASP recommended parameters as defaults
This only affects builds that use libargon2, e.g. Debian, and
not builds that use libsodium as argon2id is already the
default there, and better parameters are used
References: https://bugs.openldap.org/show_bug.cgi?id=9827
Signed-off-by: François Kooman <fkooman@tuxed.net>
2024-06-28 16:48:57 +00:00
Quanah Gibson-Mount
9d07c21d76
ITS#10224
2024-06-28 16:47:55 +00:00
Howard Chu
1d556f230f
ITS#10224 libldap: check for OpenSSL EVP_Digest* failure
2024-06-28 16:47:32 +00:00
Quanah Gibson-Mount
0e7dbc9973
ITS#10223
2024-06-28 16:47:27 +00:00
Howard Chu
a45e1fc4eb
ITS#10223 libldap: check for OpenSSL SSL_CTX_set_ciphersuites failure
2024-06-28 16:46:13 +00:00
Quanah Gibson-Mount
d24499a93a
Return to release engineering
2024-06-03 15:26:48 +00:00
