ldap/servers
by Nathan Kinder
ldap/servers/plugins/memberof/memberof.c | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
New commits:
commit 738eef1c76ac086256c48139495fa0eddda17e50
Author: Nathan Kinder <nkinder(a)redhat.com>
Date: Fri Oct 29 14:33:42 2010 -0700
Bug 647932 - multiple memberOf configuration adding memberOf where there is no member
There is a bug in the way we construct the filter in memberof_call_foreach_dn()
when multiple grouping attribtues are set. We should be constructing a filter
using the passed in types and dn that looks like this:
(|(type1=dn)(type2=dn))
Instead, we have hard-coded wildcards in the place of the dn when multiple
types are passed in. The result is a filter that looks like this:
(|(type1=*)(type2=*))
When this function is used to find groups who have dn as a member, we end up
finding all groups that have any grouping attribute present and treat dn as if
it is a member.
This issue does not occur when a single type is used.
diff --git a/ldap/servers/plugins/memberof/memberof.c b/ldap/servers/plugins/memberof/memberof.c
index 50da09a..b21f880 100644
--- a/ldap/servers/plugins/memberof/memberof.c
+++ b/ldap/servers/plugins/memberof/memberof.c
@@ -448,6 +448,7 @@ int memberof_call_foreach_dn(Slapi_PBlock *pb, char *dn,
char *filter_str = 0;
int num_types = 0;
int types_name_len = 0;
+ int dn_len = 0;
int i = 0;
/* get the base dn for the backend we are in
@@ -463,6 +464,9 @@ int memberof_call_foreach_dn(Slapi_PBlock *pb, char *dn,
if(base_sdn)
{
+ /* Find the length of the dn */
+ dn_len = strlen(dn);
+
/* Count the number of types. */
for (num_types = 0; types && types[num_types]; num_types++)
{
@@ -475,7 +479,7 @@ int memberof_call_foreach_dn(Slapi_PBlock *pb, char *dn,
if (num_types > 1)
{
int bytes_out = 0;
- int filter_str_len = types_name_len + (num_types * 4) + 4;
+ int filter_str_len = types_name_len + (num_types * (3 + dn_len)) + 4;
/* Allocate enough space for the filter */
filter_str = slapi_ch_malloc(filter_str_len);
@@ -486,7 +490,8 @@ int memberof_call_foreach_dn(Slapi_PBlock *pb, char *dn,
/* Add filter section for each type. */
for (i = 0; types[i]; i++)
{
- bytes_out += snprintf(filter_str + bytes_out, filter_str_len - bytes_out, "(%s=*)", types[i]);
+ bytes_out += snprintf(filter_str + bytes_out, filter_str_len - bytes_out,
+ "(%s=%s)", types[i], dn);
}
/* Add end of filter. */
13 years, 4 months
ldap/schema
by Noriko Hosoi
ldap/schema/00core.ldif | 12 ++++++++++++
ldap/schema/02common.ldif | 1 -
2 files changed, 12 insertions(+), 1 deletion(-)
New commits:
commit 07f9ed2c91366c49b5641c5e4903ebc8312c8ccf
Author: Endi S. Dewata <edewata(a)redhat.com>
Date: Mon Jun 21 12:09:04 2010 -0500
Bug 606545 - core schema should include numSubordinates
https://bugzilla.redhat.com/show_bug.cgi?id=606545
Resolves: bug 606545
Bug Description: core schema should include numSubordinates
Fix Description: The numSubordinates attribute type definition
has been moved from 02common.ldif into 00core.ldif.
diff --git a/ldap/schema/00core.ldif b/ldap/schema/00core.ldif
index 7f5dab6..87f1463 100644
--- a/ldap/schema/00core.ldif
+++ b/ldap/schema/00core.ldif
@@ -808,3 +808,15 @@ objectClasses: ( 2.16.840.1.113719.2.142.6.1.1 NAME 'ldapSubEntry'
#
################################################################################
#
+attributeTypes: ( 1.3.1.1.4.1.453.16.2.103 NAME 'numSubordinates'
+ DESC 'count of immediate subordinates'
+ EQUALITY integerMatch
+ ORDERING integerOrderingMatch
+ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
+ SINGLE-VALUE
+ NO-USER-MODIFICATION
+ USAGE directoryOperation
+ X-ORIGIN 'numSubordinates Internet Draft' )
+#
+################################################################################
+#
diff --git a/ldap/schema/02common.ldif b/ldap/schema/02common.ldif
index d039be7..3b0ef19 100644
--- a/ldap/schema/02common.ldif
+++ b/ldap/schema/02common.ldif
@@ -117,7 +117,6 @@ attributeTypes: ( 2.16.840.1.113730.3.1.201 NAME 'changeLogMaximumSize' DESC 'Ne
attributeTypes: ( 2.16.840.1.113730.3.1.205 NAME 'changeLogMaximumConcurrentWrites' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Netscape Directory Server' )
attributeTypes: ( 1.3.6.1.4.1.250.1.60 NAME ( 'ttl' 'timeToLive' ) DESC 'time to live in seconds for cached objects' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'LDAP Caching Internet Draft' )
attributeTypes: ( 2.16.840.1.113730.3.1.612 NAME 'generation' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'Netscape Directory Server' )
-attributeTypes: ( 1.3.1.1.4.1.453.16.2.103 NAME 'numSubordinates' DESC 'count of immediate subordinates' EQUALITY integerMatch ORDERING integerOrderingMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation X-ORIGIN 'numSubordinates Internet Draft' )
attributeTypes: ( 2.5.18.9 NAME 'hasSubordinates' DESC 'if TRUE, subordinate entries may exist' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE NO-USER-MODIFICATION USAGE directoryOperation X-ORIGIN 'numSubordinates Internet Draft' )
attributeTypes: ( 2.16.840.1.113730.3.1.569 NAME 'cosPriority' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
attributeTypes: ( 2.16.840.1.113730.3.1.570 NAME 'nsLookThroughLimit' DESC 'Binder-based search operation look through limit (candidate entries)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE USAGE directoryOperation X-ORIGIN 'Netscape Directory Server' )
13 years, 4 months
ldap/servers
by Noriko Hosoi
ldap/servers/slapd/daemon.c | 10 ++++++----
ldap/servers/slapd/main.c | 10 ++++++----
ldap/servers/slapd/protect_db.c | 6 +++---
3 files changed, 15 insertions(+), 11 deletions(-)
New commits:
commit 81fe698ca04d1dccc23e8099003521471120bacf
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Fri Oct 29 09:43:52 2010 -0700
Bug 638773 - permissions too loose on pid and lock files
https://bugzilla.redhat.com/show_bug.cgi?id=638773
Description: This patch changes the permissions of the pid and
lock files to be writable only by the owner (0644). They should
remain readable by all since they may serve in an advisory role
to other processes that need to determine if it's running.
Checking in this patch on behalf of Ulf Weltman (ulf.weltman(a)hp.com).
diff --git a/ldap/servers/slapd/daemon.c b/ldap/servers/slapd/daemon.c
index 2862016..705db50 100644
--- a/ldap/servers/slapd/daemon.c
+++ b/ldap/servers/slapd/daemon.c
@@ -2432,11 +2432,13 @@ write_pid_file()
if ( (fp = fopen( get_pid_file(), "w" )) != NULL ) {
fprintf( fp, "%d\n", getpid() );
fclose( fp );
- return 0;
- } else
- {
- return -1;
+ if ( chmod(get_pid_file(), S_IWUSR|S_IRUSR|S_IRGRP|S_IROTH) != 0 ) {
+ unlink(get_pid_file());
+ } else {
+ return 0;
+ }
}
+ return -1;
}
#endif /* WIN32 */
diff --git a/ldap/servers/slapd/main.c b/ldap/servers/slapd/main.c
index 2ad53b7..5609a21 100644
--- a/ldap/servers/slapd/main.c
+++ b/ldap/servers/slapd/main.c
@@ -627,11 +627,13 @@ write_start_pid_file()
if ( (fp = fopen( start_pid_file, "w" )) != NULL ) {
fprintf( fp, "%d\n", getpid() );
fclose( fp );
- return 0;
- } else
- {
- return -1;
+ if ( chmod(start_pid_file, S_IWUSR|S_IRUSR|S_IRGRP|S_IROTH) != 0 ) {
+ unlink(start_pid_file);
+ } else {
+ return 0;
+ }
}
+ return -1;
}
#endif /* WIN32 */
diff --git a/ldap/servers/slapd/protect_db.c b/ldap/servers/slapd/protect_db.c
index ce11394..6f8b8fe 100644
--- a/ldap/servers/slapd/protect_db.c
+++ b/ldap/servers/slapd/protect_db.c
@@ -97,7 +97,7 @@ grab_lockfile()
pid = getpid();
/* Try to grab it */
- if ((fd = open(lockfile, O_RDWR | O_CREAT | O_EXCL, 0664)) != -1) {
+ if ((fd = open(lockfile, O_RDWR | O_CREAT | O_EXCL, 0644)) != -1) {
/* We got the lock, write our pid to the file */
write(fd, (void *) &pid, sizeof(pid_t));
close(fd);
@@ -116,7 +116,7 @@ grab_lockfile()
t.tv_sec = 0;
t.tv_usec = WAIT_TIME * 1000;
for(x = 0; x < NUM_TRIES; x++) {
- if ((fd = open(lockfile, O_RDWR | O_CREAT | O_EXCL, 0664)) != -1) {
+ if ((fd = open(lockfile, O_RDWR | O_CREAT | O_EXCL, 0644)) != -1) {
/* Got the lock */
write(fd, (void *) &pid, sizeof(pid_t));
close(fd);
@@ -233,7 +233,7 @@ add_this_process_to(char *dir_name)
snprintf(file_name, sizeof(file_name), "%s/%d", dir_name, getpid());
file_name[sizeof(file_name)-1] = (char)0;
- if ((prfd = PR_Open(file_name, PR_RDWR | PR_CREATE_FILE, 0666)) == NULL) {
+ if ((prfd = PR_Open(file_name, PR_RDWR | PR_CREATE_FILE, 0644)) == NULL) {
LDAPDebug(LDAP_DEBUG_ANY, FILE_CREATE_WARNING, file_name, 0, 0);
return;
}
13 years, 4 months
ldap/servers
by Nathan Kinder
ldap/servers/plugins/uiduniq/uid.c | 35 +++++++++++++++++++++++++----------
1 file changed, 25 insertions(+), 10 deletions(-)
New commits:
commit d46f51df503e85e2f8c9f9516598bdb79a8fd06c
Author: Nathan Kinder <nkinder(a)redhat.com>
Date: Thu Oct 28 13:05:53 2010 -0700
Bug 189985 - Improve attribute uniqueness error message
This patch improves the error sent back to the client when there
is an attribute value collision. The error message now reports
which attribute has a collision.
diff --git a/ldap/servers/plugins/uiduniq/uid.c b/ldap/servers/plugins/uiduniq/uid.c
index 4871823..8316afa 100644
--- a/ldap/servers/plugins/uiduniq/uid.c
+++ b/ldap/servers/plugins/uiduniq/uid.c
@@ -105,7 +105,7 @@ static void* plugin_identity = NULL;
* More information about constraint failure
*/
static char *moreInfo =
- "Another entry with the same attribute value already exists";
+ "Another entry with the same attribute value already exists (attribute: \"%s\")";
static void
freePblock( Slapi_PBlock *spb ) {
@@ -540,6 +540,8 @@ static int
preop_add(Slapi_PBlock *pb)
{
int result;
+ char *errtext = NULL;
+ char *attrName = NULL;
#ifdef DEBUG
slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name, "ADD begin\n");
@@ -553,13 +555,12 @@ preop_add(Slapi_PBlock *pb)
BEGIN
int err;
- char *attrName = NULL;
char *markerObjectClass = NULL;
char *requiredObjectClass = NULL;
char *dn;
- int isupdatedn;
- Slapi_Entry *e;
- Slapi_Attr *attr;
+ int isupdatedn;
+ Slapi_Entry *e;
+ Slapi_Attr *attr;
int argc;
char **argv = NULL;
@@ -651,8 +652,12 @@ preop_add(Slapi_PBlock *pb)
slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name,
"ADD result %d\n", result);
+ errtext = slapi_ch_smprintf(moreInfo, attrName);
+
/* Send failure to the client */
- slapi_send_ldap_result(pb, result, 0, moreInfo, 0, 0);
+ slapi_send_ldap_result(pb, result, 0, errtext, 0, 0);
+
+ slapi_ch_free_string(&errtext);
}
return (result==LDAP_SUCCESS)?0:-1;
@@ -685,6 +690,8 @@ preop_modify(Slapi_PBlock *pb)
Slapi_PBlock *spb = NULL;
LDAPMod **checkmods = NULL;
int checkmodsCapacity = 0;
+ char *errtext = NULL;
+ char *attrName = NULL;
#ifdef DEBUG
slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name,
@@ -693,7 +700,6 @@ preop_modify(Slapi_PBlock *pb)
BEGIN
int err;
- char *attrName = NULL;
char *markerObjectClass=NULL;
char *requiredObjectClass=NULL;
LDAPMod **mods;
@@ -809,7 +815,11 @@ preop_modify(Slapi_PBlock *pb)
slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name,
"MODIFY result %d\n", result);
- slapi_send_ldap_result(pb, result, 0, moreInfo, 0, 0);
+ errtext = slapi_ch_smprintf(moreInfo, attrName);
+
+ slapi_send_ldap_result(pb, result, 0, errtext, 0, 0);
+
+ slapi_ch_free_string(&errtext);
}
return (result==LDAP_SUCCESS)?0:-1;
@@ -830,6 +840,8 @@ preop_modrdn(Slapi_PBlock *pb)
Slapi_Entry *e = NULL;
Slapi_DN *sdn = NULL;
Slapi_Value *sv_requiredObjectClass = NULL;
+ char *errtext = NULL;
+ char *attrName = NULL;
#ifdef DEBUG
slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name,
@@ -838,7 +850,6 @@ preop_modrdn(Slapi_PBlock *pb)
BEGIN
int err;
- char *attrName = NULL;
char *markerObjectClass=NULL;
char *requiredObjectClass=NULL;
char *dn;
@@ -966,7 +977,11 @@ preop_modrdn(Slapi_PBlock *pb)
slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name,
"MODRDN result %d\n", result);
- slapi_send_ldap_result(pb, result, 0, moreInfo, 0, 0);
+ errtext = slapi_ch_smprintf(moreInfo, attrName);
+
+ slapi_send_ldap_result(pb, result, 0, errtext, 0, 0);
+
+ slapi_ch_free_string(&errtext);
}
return (result==LDAP_SUCCESS)?0:-1;
13 years, 4 months
2 commits - ldap/servers
by Nathan Kinder
ldap/servers/plugins/uiduniq/uid.c | 141 ++++++++++++++++++++++++-------------
ldap/servers/slapd/entry.c | 86 ++++++++++++++++++++++
ldap/servers/slapd/slapi-plugin.h | 18 ++++
3 files changed, 196 insertions(+), 49 deletions(-)
New commits:
commit 20833dee417422c53ac0f88195eba81199b0f37b
Author: Nathan Kinder <nkinder(a)redhat.com>
Date: Wed Oct 27 11:45:37 2010 -0700
Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operations
The attribute uniqueness plug-in is not checking if renamed entries
meet the requiredObjectClass requirements. In addition, a rename
that uses a new superior is not properly handled.
This patch adds a check for requiredObjectClass for MODRDN ops. I
also added a helper function called slapi_entry_rename() which allows
the caller to apply a MODRDN operation to a Slapi_Entry. My patch
makes use of this to create a renamed dummy entry that is used to
check for any attribute uniqueness conflicts.
diff --git a/ldap/servers/plugins/uiduniq/uid.c b/ldap/servers/plugins/uiduniq/uid.c
index b856db0..4871823 100644
--- a/ldap/servers/plugins/uiduniq/uid.c
+++ b/ldap/servers/plugins/uiduniq/uid.c
@@ -771,6 +771,9 @@ preop_modify(Slapi_PBlock *pb)
err = slapi_pblock_get(pb, SLAPI_MODIFY_TARGET, &dn);
if (err) { result = uid_op_error(11); break; }
+ /*
+ * Check if it has the required object class
+ */
if (requiredObjectClass &&
!(spb = dnHasObjectClass(dn, requiredObjectClass))) { break; }
@@ -823,18 +826,16 @@ preop_modify(Slapi_PBlock *pb)
static int
preop_modrdn(Slapi_PBlock *pb)
{
- int result;
- Slapi_Entry *e;
+ int result = LDAP_SUCCESS;
+ Slapi_Entry *e = NULL;
+ Slapi_DN *sdn = NULL;
+ Slapi_Value *sv_requiredObjectClass = NULL;
#ifdef DEBUG
slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name,
"MODRDN begin\n");
#endif
- /* Init */
- result = LDAP_SUCCESS;
- e = 0;
-
BEGIN
int err;
char *attrName = NULL;
@@ -843,8 +844,9 @@ preop_modrdn(Slapi_PBlock *pb)
char *dn;
char *superior;
char *rdn;
- int isupdatedn;
- Slapi_Attr *attr;
+ int deloldrdn = 0;
+ int isupdatedn;
+ Slapi_Attr *attr;
int argc;
char **argv = NULL;
@@ -879,10 +881,19 @@ preop_modrdn(Slapi_PBlock *pb)
break;
}
+ /* Create a Slapi_Value for the requiredObjectClass to use
+ * for checking the entry. */
+ if (requiredObjectClass) {
+ sv_requiredObjectClass = slapi_value_new_string(requiredObjectClass);
+ }
+
/* Get the DN of the entry being renamed */
err = slapi_pblock_get(pb, SLAPI_MODRDN_TARGET, &dn);
if (err) { result = uid_op_error(31); break; }
+ /* Create a Slapi_DN to use for searching. */
+ sdn = slapi_sdn_new_dn_byref(dn);
+
/* Get superior value - unimplemented in 3.0/4.0/5.0 DS */
err = slapi_pblock_get(pb, SLAPI_MODRDN_NEWSUPERIOR, &superior);
if (err) { result = uid_op_error(32); break; }
@@ -902,27 +913,18 @@ preop_modrdn(Slapi_PBlock *pb)
"MODRDN newrdn=%s\n", rdn);
#endif
- /*
- * Parse the RDN into attributes by creating a "dummy" entry
- * and setting the attributes from the RDN.
- *
- * The new entry must be freed.
- */
- e = slapi_entry_alloc();
- if (!e) { result = uid_op_error(34); break; }
-
- /* NOTE: strdup on the rdn, since it will be freed when
- * the entry is freed */
+ /* See if the old RDN value is being deleted. */
+ err = slapi_pblock_get(pb, SLAPI_MODRDN_DELOLDRDN, &deloldrdn);
+ if (err) { result = uid_op_error(34); break; }
- slapi_entry_set_dn(e, slapi_ch_strdup(rdn));
+ /* Get the entry that is being renamed so we can make a dummy copy
+ * of what it will look like after the rename. */
+ err = slapi_search_internal_get_entry(sdn, NULL, &e, plugin_identity);
+ if (err != LDAP_SUCCESS) { result = uid_op_error(35); break; }
- err = slapi_entry_add_rdn_values(e);
- if (err)
- {
- slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name,
- "MODRDN bad rdn value=%s\n", rdn);
- break; /* Bad DN */
- }
+ /* Apply the rename operation to the dummy entry. */
+ err = slapi_entry_rename(e, rdn, deloldrdn, superior);
+ if (err != LDAP_SUCCESS) { result = uid_op_error(36); break; }
/*
* Find any unique attribute data in the new RDN
@@ -931,6 +933,12 @@ preop_modrdn(Slapi_PBlock *pb)
if (err) break; /* no UID attribute */
/*
+ * Check if it has the required object class
+ */
+ if (requiredObjectClass &&
+ !slapi_entry_attr_has_syntax_value(e, SLAPI_ATTR_OBJECTCLASS, sv_requiredObjectClass)) { break; }
+
+ /*
* Passed all the requirements - this is an operation we
* need to enforce uniqueness on. Now find all parent entries
* with the marker object class, and do a search for each one.
@@ -938,7 +946,7 @@ preop_modrdn(Slapi_PBlock *pb)
if (NULL != markerObjectClass)
{
/* Subtree defined by location of marker object class */
- result = findSubtreeAndSearch(dn, attrName, attr, NULL,
+ result = findSubtreeAndSearch(slapi_entry_get_dn(e), attrName, attr, NULL,
requiredObjectClass, dn,
markerObjectClass);
} else
@@ -949,6 +957,8 @@ preop_modrdn(Slapi_PBlock *pb)
}
END
/* Clean-up */
+ slapi_sdn_free(&sdn);
+ slapi_value_free(&sv_requiredObjectClass);
if (e) slapi_entry_free(e);
if (result)
diff --git a/ldap/servers/slapd/entry.c b/ldap/servers/slapd/entry.c
index 22f4ae0..33ac468 100644
--- a/ldap/servers/slapd/entry.c
+++ b/ldap/servers/slapd/entry.c
@@ -3056,6 +3056,92 @@ slapi_entry_has_children(const Slapi_Entry *entry)
}
/*
+ * Renames an entry to simulate a MODRDN operation
+ */
+int
+slapi_entry_rename(Slapi_Entry *e, const char *newrdn, int deleteoldrdn, const char *newsuperior)
+{
+ int err = LDAP_SUCCESS;
+ char *newdn = NULL;
+ char *olddn = NULL;
+ Slapi_RDN *oldrdn = NULL;
+ Slapi_Mods *smods = NULL;
+
+ LDAPDebug( LDAP_DEBUG_TRACE, "=> slapi_entry_rename\n", 0, 0, 0 );
+
+ /* Check if entry or newrdn are NULL. */
+ if (!e || !newrdn) {
+ err = LDAP_PARAM_ERROR;
+ goto done;
+ }
+
+ /* Get the old DN. */
+ olddn = slapi_entry_get_dn(e);
+
+ /* If deleteoldrdn, find old RDN values and remove them from the entry. */
+ if (deleteoldrdn) {
+ char *type = NULL;
+ char * val = NULL;
+ int num_rdns = 0;
+ int i = 0;
+
+ oldrdn = slapi_rdn_new_dn(olddn);
+
+ /* Create mods based on the number of rdn elements. */
+ num_rdns = slapi_rdn_get_num_components(oldrdn);
+ smods = slapi_mods_new();
+ slapi_mods_init(smods, num_rdns + 2);
+
+ /* Loop through old rdns and construct a mod to remove the value. */
+ for (i = 0; i < num_rdns; i++) {
+ if (slapi_rdn_get_next(oldrdn, i, &type, &val) != -1) {
+ slapi_mods_add(smods, LDAP_MOD_DELETE, type, strlen(val), val);
+ }
+ }
+
+ /* Apply the mods to the entry. */
+ if ((err = slapi_entry_apply_mods(e, slapi_mods_get_ldapmods_byref(smods))) != LDAP_SUCCESS) {
+ /* A problem was encountered applying the mods. Bail. */
+ goto done;
+ }
+ }
+
+ /* We remove the parentid and entrydn since the backend will change these.
+ * We don't want to give the caller an inconsistent entry. */
+ slapi_entry_attr_delete(e, "parentid");
+ slapi_entry_attr_delete(e, "entrydn");
+
+ /* Build new DN. If newsuperior is set, just use "newrdn,newsuperior". If
+ * newsuperior is not set, need to add newrdn to old superior. */
+ if (newsuperior) {
+ newdn = slapi_ch_smprintf("%s,%s", newrdn, newsuperior);
+ } else {
+ char *oldsuperior = NULL;
+
+ oldsuperior = slapi_dn_parent(olddn);
+ newdn = slapi_ch_smprintf("%s,%s", newrdn, oldsuperior);
+
+ slapi_ch_free_string(&oldsuperior);
+ }
+
+ /* Set the new DN in the entry. This hands off the memory used by newdn to the entry. */
+ slapi_entry_set_dn(e, newdn);
+
+ /* Set the RDN in the entry. */
+ slapi_entry_set_rdn(e, newdn);
+
+ /* Add RDN values to entry. */
+ err = slapi_entry_add_rdn_values(e);
+
+done:
+ slapi_rdn_free(&oldrdn);
+ slapi_mods_free(&smods);
+
+ LDAPDebug( LDAP_DEBUG_TRACE, "<= slapi_entry_rename\n", 0, 0, 0 );
+ return err;
+}
+
+/*
* Apply a set of modifications to an entry
*/
int
diff --git a/ldap/servers/slapd/slapi-plugin.h b/ldap/servers/slapd/slapi-plugin.h
index 266fb93..536809d 100644
--- a/ldap/servers/slapd/slapi-plugin.h
+++ b/ldap/servers/slapd/slapi-plugin.h
@@ -1979,6 +1979,24 @@ void slapi_entry_diff(Slapi_Mods *smods, Slapi_Entry *e1, Slapi_Entry *e2, int d
*/
int slapi_entry_apply_mods(Slapi_Entry *e, LDAPMod **mods);
+/**
+ * Renames a Slapi_Entry.
+ *
+ * This function will rename an existing \c Slapi_Entry, similar to what
+ * would happen with a \c MODRDN operation. New RDN values will be added
+ * as attributes to the entry and old RDN values will be deleted if requested.
+ *
+ * \param e Entry that you want to rename.
+ * \param newrdn The new RDN value to be used for renaming the entry. This must
+ * not be \c NULL.
+ * \param deleteoldrdn Will delete the old RDN values from the entry if set to \c 1.
+ * \param newsuperior The new superior DN to use when renaming the entry. Set this
+ * to \c NULL if you do not want to move the entry.
+ * \return \c LDAP_SUCCESS if the rename was successful, otherwise an LDAP error
+ * is returned.
+ */
+int slapi_entry_rename(Slapi_Entry *e, const char *newrdn, int deleteoldrdn, const char *newsuperior);
+
/*------------------------
* Entry flags.
commit 6a8d9ee5e7ca68b12cd22cb7d87c3db262bca2e7
Author: Nathan Kinder <nkinder(a)redhat.com>
Date: Mon Oct 25 16:44:21 2010 -0700
Bug 619633 - Make attribute uniqueness obey requiredObjectClass
The attribute uniqueness plug-in currently does not enforce the
requiredObjectClass setting properly. The plug-in checks that the
entry being modified meets the requiredObjectClass setting, but it
does not check if the potential conflicts in the database meet this
requirement as well.
This patch changes the behavior to check that both the target and
potential conflicting entries meet the requiredObjectClass setting.
diff --git a/ldap/servers/plugins/uiduniq/uid.c b/ldap/servers/plugins/uiduniq/uid.c
index 01d635e..b856db0 100644
--- a/ldap/servers/plugins/uiduniq/uid.c
+++ b/ldap/servers/plugins/uiduniq/uid.c
@@ -70,7 +70,7 @@ int ldap_quote_filter_value(
static int search_one_berval(const char *baseDN, const char *attrName,
- const struct berval *value, const char *target);
+ const struct berval *value, const char *requiredObjectClass, const char *target);
/*
* ISSUES:
@@ -141,13 +141,14 @@ uid_op_error(int internal_error)
*/
static char *
-create_filter(const char *attribute, const struct berval *value)
+create_filter(const char *attribute, const struct berval *value, const char *requiredObjectClass)
{
char *filter;
char *fp;
char *max;
int attrLen;
int valueLen;
+ int classLen = 0;
int filterLen;
PR_ASSERT(attribute);
@@ -159,13 +160,29 @@ create_filter(const char *attribute, const struct berval *value)
value->bv_len, 0, 0, &valueLen))
return 0;
- filterLen = attrLen + 1 + valueLen + 1;
+ if (requiredObjectClass) {
+ classLen = strlen(requiredObjectClass);
+ /* "(&(objectClass=)())" == 19 */
+ filterLen = attrLen + 1 + valueLen + classLen + 19 + 1;
+ } else {
+ filterLen = attrLen + 1 + valueLen + 1;
+ }
/* Allocate the buffer */
filter = slapi_ch_malloc(filterLen);
fp = filter;
max = &filter[filterLen];
+ /* Place AND expression and objectClass in filter */
+ if (requiredObjectClass) {
+ strcpy(fp, "(&(objectClass=");
+ fp += 15;
+ strcpy(fp, requiredObjectClass);
+ fp += classLen;
+ *fp++ = ')';
+ *fp++ = '(';
+ }
+
/* Place attribute name in filter */
strcpy(fp, attribute);
fp += attrLen;
@@ -178,6 +195,12 @@ create_filter(const char *attribute, const struct berval *value)
fp, max-fp, &valueLen)) { slapi_ch_free((void**)&filter); return 0; }
fp += valueLen;
+ /* Close AND expression if a requiredObjectClass was set */
+ if (requiredObjectClass) {
+ *fp++ = ')';
+ *fp++ = ')';
+ }
+
/* Terminate */
*fp = 0;
@@ -202,7 +225,8 @@ create_filter(const char *attribute, const struct berval *value)
*/
static int
search(const char *baseDN, const char *attrName, Slapi_Attr *attr,
- struct berval **values, const char *target)
+ struct berval **values, const char *requiredObjectClass,
+ const char *target)
{
int result;
@@ -234,15 +258,17 @@ search(const char *baseDN, const char *attrName, Slapi_Attr *attr,
vhint != -1 && LDAP_SUCCESS == result;
vhint = slapi_attr_next_value( attr, vhint, &v ))
{
- result = search_one_berval(baseDN,attrName,
- slapi_value_get_berval(v),target);
+ result = search_one_berval(baseDN, attrName,
+ slapi_value_get_berval(v),
+ requiredObjectClass, target);
}
}
else
{
for (;*values != NULL && LDAP_SUCCESS == result; values++)
{
- result = search_one_berval(baseDN,attrName,*values,target);
+ result = search_one_berval(baseDN, attrName, *values, requiredObjectClass,
+ target);
}
}
@@ -257,7 +283,8 @@ search(const char *baseDN, const char *attrName, Slapi_Attr *attr,
static int
search_one_berval(const char *baseDN, const char *attrName,
- const struct berval *value, const char *target)
+ const struct berval *value, const char *requiredObjectClass,
+ const char *target)
{
int result;
char *filter;
@@ -279,7 +306,7 @@ search_one_berval(const char *baseDN, const char *attrName,
static char *attrs[] = { "1.1", 0 };
/* Create the filter - this needs to be freed */
- filter = create_filter(attrName, value);
+ filter = create_filter(attrName, value, requiredObjectClass);
#ifdef DEBUG
slapi_log_error(SLAPI_LOG_PLUGIN, plugin_name,
@@ -376,7 +403,8 @@ search_one_berval(const char *baseDN, const char *attrName,
*/
static int
searchAllSubtrees(int argc, char *argv[], const char *attrName,
- Slapi_Attr *attr, struct berval **values, const char *dn)
+ Slapi_Attr *attr, struct berval **values, const char *requiredObjectClass,
+ const char *dn)
{
int result = LDAP_SUCCESS;
@@ -391,7 +419,7 @@ searchAllSubtrees(int argc, char *argv[], const char *attrName,
* worry about that here.
*/
if (slapi_dn_issuffix(dn, *argv)) {
- result = search(*argv, attrName, attr, values, dn);
+ result = search(*argv, attrName, attr, values, requiredObjectClass, dn);
if (result) break;
}
}
@@ -480,7 +508,8 @@ getArguments(Slapi_PBlock *pb, char **attrName, char **markerObjectClass,
*/
static int
findSubtreeAndSearch(char *parentDN, const char *attrName, Slapi_Attr *attr,
- struct berval **values, const char *target, const char *markerObjectClass)
+ struct berval **values, const char *requiredObjectClass, const char *target,
+ const char *markerObjectClass)
{
int result = LDAP_SUCCESS;
Slapi_PBlock *spb = NULL;
@@ -494,7 +523,8 @@ findSubtreeAndSearch(char *parentDN, const char *attrName, Slapi_Attr *attr,
* Do the search. There is no entry that is allowed
* to have the attribute already.
*/
- result = search(parentDN, attrName, attr, values, target);
+ result = search(parentDN, attrName, attr, values, requiredObjectClass,
+ target);
break;
}
}
@@ -606,11 +636,13 @@ preop_add(Slapi_PBlock *pb)
{
/* Subtree defined by location of marker object class */
result = findSubtreeAndSearch(dn, attrName, attr, NULL,
- dn, markerObjectClass);
+ requiredObjectClass, dn,
+ markerObjectClass);
} else
{
/* Subtrees listed on invocation line */
- result = searchAllSubtrees(argc, argv, attrName, attr, NULL, dn);
+ result = searchAllSubtrees(argc, argv, attrName, attr, NULL,
+ requiredObjectClass, dn);
}
END
@@ -756,14 +788,13 @@ preop_modify(Slapi_PBlock *pb)
if (NULL != markerObjectClass)
{
/* Subtree defined by location of marker object class */
- result = findSubtreeAndSearch(dn, attrName, NULL,
- mod->mod_bvalues, dn,
- markerObjectClass);
+ result = findSubtreeAndSearch(dn, attrName, NULL, mod->mod_bvalues,
+ requiredObjectClass, dn, markerObjectClass);
} else
{
/* Subtrees listed on invocation line */
result = searchAllSubtrees(argc, argv, attrName, NULL,
- mod->mod_bvalues, dn);
+ mod->mod_bvalues, requiredObjectClass, dn);
}
}
END
@@ -907,12 +938,14 @@ preop_modrdn(Slapi_PBlock *pb)
if (NULL != markerObjectClass)
{
/* Subtree defined by location of marker object class */
- result = findSubtreeAndSearch(dn, attrName, attr, NULL, dn,
- markerObjectClass);
+ result = findSubtreeAndSearch(dn, attrName, attr, NULL,
+ requiredObjectClass, dn,
+ markerObjectClass);
} else
{
/* Subtrees listed on invocation line */
- result = searchAllSubtrees(argc, argv, attrName, attr, NULL, dn);
+ result = searchAllSubtrees(argc, argv, attrName, attr, NULL,
+ requiredObjectClass, dn);
}
END
/* Clean-up */
13 years, 4 months
Changes to 'refs/tags/389-ds-base-1.2.7.a3'
by Richard Allen Megginson
Changes since 389-ds-base-1.2.6.a1:
Endi S. Dewata (166):
Bug 545620 - Password cannot start with minus sign
Bug 538525 - Ability to create instance as non-root user
Bug 570542 - Root password cannot contain matching curly braces
Bug 470684 - Pam_passthru plugin doesn't verify account activation
Bug 573375 - MODRDN operation not logged
Bug 520151 - Error when modifying userPassword with proxy user
Bug 455489 - Address compiler warnings about strict-aliasing rules
Bug 566320 - RFE: add exception to removal of attributes in cn=config for aci
Bug 566043 - startpid file is only cleaned by initscript runs
Bug 584109 - Slapd crashes while parsing DNA configuration
Bug 542570 - Directory Server port number is not validated in the beginning.
Bug 145181 - Plugin target/bind subtrees only take 1 value.
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 628096 - spurious error message from /sbin/service when doing a stop on no instances
Bug 573889 - Migration does not remove deprecated schema
Endi Sukma Dewata (16):
Bug 630092 - Coverity #12117: Resource leaks issues
Bug 630092 - Coverity #15478: Resource leaks issues
Bug 630092 - Coverity #15479: Resource leaks issues
Bug 630092 - Coverity #15481: Resource leaks issues
Bug 630092 - Coverity #15482: Resource leaks issues
Bug 630092 - Coverity #15483: Resource leaks issues
Bug 630092 - Coverity #15484: Resource leaks issues
Bug 630092 - Coverity #15485: Resource leaks issues
Bug 630092 - Coverity #15487: Resource leaks issues
Bug 630092 - Coverity #15490: Resource leaks issues
Bug 630092 - Coverity #15497: Resource leaks issues
Bug 630092 - Coverity #11991: Resource leaks issues
Bug 630092 - Coverity #12000: Resource leaks issues
Bug 630092 - Coverity #12003: Resource leaks issues
Bug 630092 - Coverity #11985: Resource leaks issues
Bug 630092 - Coverity #11992,11993: Resource leaks issues
Nathan Kinder (85):
Bug 549554 - Trim single-valued attributes before sending to AD
Improve search for pcre header file
Bug 434735 - Allow SASL ANONYMOUS mech to work
Bug 570912 - Avoid selinux context conflict with httpd
Allow instance name to be parsed from start-slapd
Add managed entries plug-in
Bug 572355 - Label instance files and ports during upgrade.
Bug 578863 - Password modify extop needs to send referrals on replicas
Bug 584156 - Remove ldapi socket file during upgrade
Fix rsearch usage of name files for random filters
Bug 584497 - Allow DNA plugin to set same value on multiple attributes
Add replication session hooks
Correct function prototype for repl session hook
Bug 592389 - Set anonymous resource limits properly
Bug 601433 - Add man pages for start-dirsrv and related commands
Bug 604263 - Fix memory leak when password change is rejected
Bug 612242 - membership change on DS does not show on AD
Bug 613833 - Allow dirsrv_t to bind to rpc ports
Bug 594745 - Get rid of dirsrv_lib_t label
Bug 620927 - Allow multiple membership attributes in memberof plugin
Bug 612264 - ACI issue with (targetattr='userPassword')
Bug 630098 - fix coverity Defect Type: Code maintainability issues
Bug 630098 - fix coverity Defect Type: Code maintainability issues
Bug 630093 - (cov#15511) Don't use unintialized search_results in refint plugin
Bug 630093 - (cov#15518) Need to intialize fd in ldbm2ldif code
Bug 630096 - (cov#11778) check return value of ldap_parse_result
Bug 630096 - (cov#15446) check return value of ber_scanf()
Bug 630096 - (cov#15449,15450) Check return value of stat()
Bug 630096 - (cov#15448) Check return value of cache_replace()
Bug 630096 - (cov#15447) - Check return value of idl_append_extend()
Bug 630090 - (cov#11974) Remove unused ACL functions
Bug 630090 - (cov#15445) Fix illegal free in archive code
Bug 630094 - (cov#11818) Fix unreachable return in snmp subagent
Bug 630094 - (cov#15451) Get rid of unreachable free statements
Bug 630094 - (cov#15452) Remove NULL checking for op_string
Bug 630094 - (cov#15453) Eliminate NULL check for local_newentry
Bug 630094 - (cov#15454) Fix deadcode issue in mapping tree code
Bug 630094 - (cov#15455) Remove deadcode in attr_index_config()
Bug 630094 - (cov#15456) Remove NULL check for srdn in import code
Bug 630094 - (cov#15457) Remove deadcode in import code
Bug 630094 - (cov#15458) Fix deadcode issue in moddn code
Bug 630094 - (cov#15459) Remove NULL check for srdn in ldif2ldbm code
Bug 630094 - (cov#15520) Fix unreachable code issue if perfctrs code
Bug 630094 - (cov#15581) Add missing breaks in agt_mopen_stats()
Bug 690090 - (cov#11974) Remove additional unused ACL functions
Bug 630091 - (cov#15512) Fix usage of uninitialized bervals
Bug 630091 - (cov#15513) Fix usage of uninitialized bervals
Bug 630091 - (cov#15514) Initialize DBT in entryrdn_get_parent()
Bug 630091 - (cov#15515) Use of uninitialized array in index config code
Bug 630091 - (cov#15516,15517) Initialize pointers before attempting to free
Bug 630091 - (cov#15519) Initialize bervals in search_easter_egg()
Bug 630091 - (cov#15582) Free of uninitialized pointer in attr_index_config()
Bug 630097 - (cov#11933) Fix NULL dereference in schema code
Bug 630097 - (cov#11938) NULL dereference in mmldif
Bug 630097 - (cov#11946) NULL dereference in ResHashCreate()
Bug 630097 - (cov#11964) Remove dead code from libaccess
Bug 630097 - (cov#12143) NULL dereference in cos cache code
Bug 630097 - (cov#12148) NULL dereference in ruvInit()
Bug 630097 - (cov#12182,12183) NULL dereference in import code
Bug 630097 - (cov#15460) NULL deference in ACL URL code
Bug 630097 - (cov#15461) Remove unnecessary NULL check in DNA
Bug 630097 - (cov#15462) NULL dereference in mep_modrdn_post_op()
Bug 630097 - (cov#15463) Remove NULL check in referint plugin
Bug 630097 - (cov#15464) NULL dereference in repl code
Bug 630097 - (cov#15465) Null dereference in USN code
Bug 630097 - (cov#15473) NULL dereference in ResHashCreate()
Bug 630097 - (cov#15505) NULL dereference in memberOf code
Bug 630097 - (cov#15506) NULL dereference in dblayer code
Bug 630097 - (cov#15507,15508) NULL dereference in entryrdn code
Bug 630097 - (cov#15509) NULL dereference in idsktune
Bug 630097 - (cov#11938) NULL dereference in mmldif
Bug 630097 - (cov#15477) NULL dereference in ACL plug-in code
Bug 630091 - (cov#12209) Use of uninitialized pointer in libaccess
Bug 630092 - (cov#12116) Resource leak in ldclt code
Bug 630092 - (cov#12105) Resource leak in pwdscheme config code
Bug 630092 - (cov#12068) Resource leak in certmap code
Bug 630091 - (cov#11973) Array overrun in libaccess
Bug 522055 - Scope check for managed attribute fails
Bug 625335 - Self-write aci has permission to invalid attribute
Bug 631993 - Log authzid when proxy auth control is used
Cov #16300 - Unused variable in account policy plugin
Bug 544321 - remove-ds.pl should not throw error unlabelling port
Bug 555955 - Allow CoS values to be merged
Bug 643937 - Initialize replication version flags
Bug 305131 - Allow empty modify operation
Noriko Hosoi (175):
544089 - Referential Integrity Plugin does not take into account the attribute
557224 - subtree rename breaks the referential integrity plug-in
247413 - Incorrect error on multiple identical value add
559016 - Attempting to rename suffix returns inappropriate errors
555577 - Syntax validation fails for "ou=NetscapeRoot" tree
Undo - 555577 - Syntax validation fails for "ou=NetscapeRoot" tree
560827 - Admin Server templates: DistinguishName validation fails
548535 - memory leak in attrcrypt
563365 - Error handling problems in the backend functions
565664 - Incorrect parameter for CACHE_RETURN()
565987 - redhat-ds-base fails to build due to undefined struct
527848 - make sure db upgrade to 4.7 and later works correctly
539618 - Replication bulk import reports Invalid read/write
567370 - dncache: assertion failure in id2entry_delete
548115 - memory leak in schema reload
555970 - missing read lock in the combination of cos and nsview
539618 - Replication bulk import reports Invalid read/write
570667 - MMR: simultaneous total updates on the masters cause
Merge branch '547503'
Revert "Merge branch '547503'"
Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external
199923 - subtree search fails to find items under a db
570107 - The import of LDIFs with base-64 encoded DNs fails,
572649 - DS8.2 crashes on RHEL 4 (corresponding to bob, ber_2 test case)
573060 - DN normalizer: ESC HEX HEX is not normalized (
573896 - initializing subtree with invalid syntax crashes ns-slapd
515805 - Stop "initialize Database" crashes the server
548533 - memory leak in Repl_5_Inc_Protocol_new
Fixing a syntax error
Update to New DN Format
585905 - ACL with targattrfilters error crashes the server
574167 - An escaped space at the end of the RDN value is not
590931 - rhds81 import - hardcoded pages_limit for nsslapd-import-cache-autosize
591336 - Implementing upgrade DN format tool
593453 - Creating password policy with ns-newpolicy.pl on Replicated
593110 - backup-restore does not ALWAYS work
593899 - adding specific ACI causes very large mem allocate request
588867 - entryusn plugin fails on solaris
593899 - adding specific ACI causes very large mem allocate request
595893 - Base DN in SASL mapping is not normalized
511112 - Password history limited to 25 values
597375 - Deleting LDBM database causes backup/restore problem
574101 - MODRDN request never returns - possible deadlock
606920 - anonymous resource limit - nstimelimit -
605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
578296 - Attribute type entrydn needs to be added when subtree
609256 - Selinux: pwdhash fails if called via Admin Server CGI
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
616608 - SIGBUS in RDN index reads on platforms with strict alignments
619595 - Upgrading sub suffix under non-normalized suffix disappears
513166 - Simple Paged result doesn't provide the server's estimate
621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6
Bug 194531 - db2bak is too noisy
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 623118 - Simplepaged results going in infinite loop
Bug 614511 - fix coverity Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 619122 - fix coverity Defect Type: Resource leaks issues CID 11975 - 12051
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverity Defect Type: Resource leaks issues CID 12052 - 12093
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892
Bug 616500 - fix coverity Defect Type: Resource leaks issues
Bug 623507 - fix coverity Defect Type: Incorrect expression issues
Bug 623507 - fix coverity Defect Type: Incorrect expression issues
Bug 613056 - fix coverify Defect Type: Null pointer dereferences
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Removed redundant code in agmt_new_from_entry
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 628300 - DN is not normalized in dn/entry cache when an entry is added, entrydn is not present in search results
Bug 531642 - EntryUSN: RFE: a configuration option to make entryusn "global"
Bug 627738 - The cn=monitor statistics entries for the dnentry cache do not change or change very rarely
DN normalizer should check the invalid type
Bug 627738 - The cn=monitor statistics entries for the dnentry cache
Bug 629710 - escape_string does not check '\<HEX><HEX>'
agmtlist_shutdown (repl5_agmtlist.c) had an illegal access defect.
Bug 633168 - Share backend dbEnv with the replication changelog
Bug 633168 - Share backend dbEnv with the replication changelog
Bug 631862 - crash - delete entries not in cache + referint
Bug 625014 - SubTree Renames: ModRDN operation fails and the server hangs if the entry is moved to "under" the same DN.
Bug 558099 - Enhancement request: Log more information about the search result being a paged one
Bug 635987 - Incorrect sub scope search result with
Bug 606920 - anonymous resource limit- nstimelimit -
Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
Bug 639289 - Adding a new CN entry with UpperCase UTF-8 Character
Bug 640027 - Naming attribute with a special char sequence parsing bug
Bug 640854 - changelog db: _cl5WriteOperation: failed to
Bug 637852 - sasl_io_start_packet: failed - read only 3 bytes
Bug 586966 - Sample update script has syntax errors
Bug 586973 - Sample update ldif points to non-existent directory
Bug 602456 - Allow to add any cn=config attributes;
Bug 244229 - targetattr not verified against schema when setting an aci
Bug 643532 - Incorrect DNs sometimes returned on searches
Bug 592397 - Upgrade tool dn2rdn: it does not clean up
Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
Bug 629681 - Retro Changelog trimming does not behave as expected
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Rich Megginson (121):
Net::LDAP password modify extop breaks; msgid in response is 0xFF
Clean up assert for entrydn
Bug 543080 - Bitwise plugin fails to return the exact matched entries for Bitwise search filter
Bug 537466 - nsslapd-distribution-plugin should not require plugin name to begin with "lib"
bump version to 1.2.6.a2
Do not use syntax plugins directly for filters, indexing
wrap new style matching rule plugins for use in old style indexing code
change extensible filter code to use new syntax function style mr funcs
change syntax plugins to register required matching rule plugins
crash looking up compat syntax; numeric string syntax using integer; make octet string ordering work correctly
fix memory leak in attr replace when replacement fails
fix dso linking issues found by fedora 13 linking
problems linking with -z defs
389 DS segfaults on libsyntax-plugin.so - part 1
389 DS segfaults on libsyntax-plugin.so - part 2
389 DS segfaults on libsyntax-plugin.so - part 3
Bug 460162 - FedoraDS "with-FHS" installs init.d StartupScript in wrong location on non-RHEL/Fedora OS
Bug 568196 - Install DS8.2 on Solaris fails
Bug 568196 - Install DS8.2 on Solaris fails - part 2
Bug 551198 - LDAPI: incorrect logging to access log
bump version to 1.2.6.a3
fix various memory leaks
Bug 551198 - LDAPI: incorrect logging to access log - part 2
Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external
cleanup build warnings
Bug 571514 - upgrade to 1.2.6 should upgrade 05rfc4523.ldif (cert schema)
Bug 570905 - postalAddress syntax should allow empty lines (should allow $$)
Add support for additional schema/matching rules included with 389
Bug 572677 - Memory leak in searches including GER control
Bug 571677 - Busy replica on consumers when directly deleting a replication conflict
Bug 576074 - search filters with parentheses fail
Bug 567429 - slapd didn't close connection and get into CLOSE_WAIT state
Bug 578167 - repl. of mod/replace deletes multi-valued attrs
Bug 561575 - setup-ds-admin fails to supply nsds5ReplicaName when configuring via ConfigFile
Bug 572162 - the string "|*" within a search filter on a non-indexed attribute returns all elements.
Bug 576644 - segfault while multimaster replication (paired node won't find deleted entries)
start of 1.2.6.a4
Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
Fix too few args for format warning in acllas
Bug 586571 - DS Console shows escaped DNs
Bug 591685 - Server instances Fail to Start on Solaris due to Library Path and pcre
bump console version to 1.2.3
Repl Session API needs to check for NULL api before init
Bug 593392 - setup-ds-admin.pl -k creates world readable file
Bug 595874 - 99user.ldif getting overpopulated
bump version to 1.2.6.a5
bump version to 1.2.6.rc1
bump version to 1.2.6.rc2
bump version to 1.2.6.rc3
Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
Bug 603942 - null deref in _ger_parse_control() for subjectdn
bump version to 1.2.6.rc4
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 602530 - coverity: op_shared_modify: compare pre, post and original entries before freeing them
Bug 602531 - coverity: op_shared_delete: compare preop entry and GLUE_PARENT_ENTRY before freeing them
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 610177 - fix coverity Defect Type: Uninitialized variables issues
Bug 610276 - fix coverity Defect Type: API usage errors issues
Bug 611850 - fix coverity Defect Type: Error handling issues
Bug 614242 - C99/ANSI C++ related compile errors on HP-UX
Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
Bug 617013 - repl-monitor.pl use cpu upto 90%
fix build failures due to libtool problems
Bug 617629 - Missing aliases in new schema files
Bug 617862 - Replication: Unable to delete tombstone errors
bump version to 1.2.7.a1
Bug 610281 - fix coverity Defect Type: Control flow issues - daemon.c:write_function()
Bug 610281 - fix coverity Defect Type: Control flow issues - last repl init status
postalAddress syntax does not accept empty values
ger should support both "dn" and "distinguishedName"
openldap - ldap_url_parse_ext is not part of the public api
fix memleak in ldbm_config_read_instance_entries
Add -x option to ldap tools when using openldap
openldap - add support for missing controls, add ldif api, fix NSS usage
port client tools to use openldap API
use the mozldap versions of the proxy auth control create function
document slapi wrappers for openldap/mozldap functions that differ
fix some compiler warnings
use strcasecmp with ptype and type->bv_val
ber_printf 'o' cannot handle NULL bv_val
fix the url_parse logic when looking for a missing suffix DN
openldap ldapsearch uses -LLL to suppress # version: N
add ldaptool_opts for the non BUNDLE case in Makefile.am
openldap ldapsearch returns empty line at end of LDIF output
have to use LDAP_OPT_X_TLS_NEVER to defeat cert hostname checking
openldap_read_function needs to set EWOULDBLOCK if the buffer is empty
do not terminate unwrapped LDIF line with another newline
slapi_ldap_url_parse must handle multiple host:port in url
convert mozldap host list to openldap uri list
move the out pointer back if continuation lines were removed
check src < *out only; only check for \nspace if src < *out - 2
use slapi_ldap_url_parse in the acl code
do not un-null-terminate normalized DN until new url is constructed
implement slapi_ldap_explode_dn and slapi_ldap_explode_rdn
use slapi_pblock_set to set the ldap result code for the be postop plugins
pass the string copy to slapi_dn_normalize_original
bug 614511 - fix coverity null reference - revert macro aci $dn logic
fix compiler warnings - unused vars/funcs, invalid casts
use slapi_mods_init_passin/get_ldapmods_passout if modifying the smods
Have to explicitly set protocol version to 3
Only check modrdn ops for backend/suffix correctness if not the default backend
Bug 634561 - Server crushes when using Windows Sync Agreement
openldap ber_init will assert if the bv->bv_val is NULL
add the account policy plugin and related server code, schema, and config
fix pblock memory leak
do not register pre/post op plugins if disabled
add support for global inactivity limit
fix typos in Makefile.am, acctpolicy schema
bump version to 1.2.7.a2
remove extra format argument; use %lu for size_t printf format
Bug 644013 - uniqueness plugin segfault bug
bump version to 1.2.7.a3
root (1):
Bug 480787 - Autoconf parameter --with and --without
---
.gitignore | 1
Makefile.am | 116
Makefile.in | 4821 +
VERSION.sh | 7
aclocal.m4 | 6884 --
compile | 21
config.guess | 302
config.h.in | 9
config.sub | 232
configure |30118 +++++-------
configure.ac | 59
depcomp | 172
include/base/dbtbase.h | 2
include/base/lexer.h | 126
include/i18n.h | 115
include/ldaputil/ldaputil.h | 10
include/libaccess/aclerror.h | 1
include/libaccess/aclproto.h | 15
include/libaccess/aclstruct.h | 2
include/libaccess/dbtlibaccess.h | 3
include/public/nsacl/aclapi.h | 7
install-sh | 517
ldap/admin/src/scripts/10cleanupldapi.pl | 23
ldap/admin/src/scripts/50smd5pwdstorageplugin.ldif | 5
ldap/admin/src/scripts/60upgradeschemafiles.pl | 2
ldap/admin/src/scripts/80upgradednformat.pl | 171
ldap/admin/src/scripts/81changelog.pl | 29
ldap/admin/src/scripts/90subtreerename.pl | 6
ldap/admin/src/scripts/DSCreate.pm.in | 136
ldap/admin/src/scripts/DSDialogs.pm | 4
ldap/admin/src/scripts/DSMigration.pm.in | 11
ldap/admin/src/scripts/DSUpdate.pm.in | 12
ldap/admin/src/scripts/DSUtil.pm.in | 106
ldap/admin/src/scripts/Inf.pm | 53
ldap/admin/src/scripts/Migration.pm.in | 19
ldap/admin/src/scripts/Setup.pm.in | 19
ldap/admin/src/scripts/exampleupdate.ldif | 2
ldap/admin/src/scripts/exampleupdate.sh | 10
ldap/admin/src/scripts/migrate-ds.pl.in | 13
ldap/admin/src/scripts/remove-ds.pl.in | 28
ldap/admin/src/scripts/repl-monitor.pl.in | 3
ldap/admin/src/scripts/restart-dirsrv.in | 25
ldap/admin/src/scripts/setup-ds.pl.in | 7
ldap/admin/src/scripts/setup-ds.res.in | 9
ldap/admin/src/scripts/start-dirsrv.in | 32
ldap/admin/src/scripts/stop-dirsrv.in | 27
ldap/admin/src/scripts/template-bak2db.in | 36
ldap/admin/src/scripts/template-bak2db.pl.in | 4
ldap/admin/src/scripts/template-db2bak.in | 40
ldap/admin/src/scripts/template-db2bak.pl.in | 4
ldap/admin/src/scripts/template-db2index.in | 2
ldap/admin/src/scripts/template-db2index.pl.in | 8
ldap/admin/src/scripts/template-db2ldif.in | 2
ldap/admin/src/scripts/template-db2ldif.pl.in | 4
ldap/admin/src/scripts/template-dbverify.in | 2
ldap/admin/src/scripts/template-fixup-linkedattrs.pl.in | 4
ldap/admin/src/scripts/template-fixup-memberof.pl.in | 4
ldap/admin/src/scripts/template-ldif2db.in | 2
ldap/admin/src/scripts/template-ldif2db.pl.in | 4
ldap/admin/src/scripts/template-ldif2ldap.in | 4
ldap/admin/src/scripts/template-monitor.in | 4
ldap/admin/src/scripts/template-ns-accountstatus.pl.in | 8
ldap/admin/src/scripts/template-ns-activate.pl.in | 8
ldap/admin/src/scripts/template-ns-inactivate.pl.in | 8
ldap/admin/src/scripts/template-ns-newpwpolicy.pl.in | 6
ldap/admin/src/scripts/template-restart-slapd.in | 2
ldap/admin/src/scripts/template-restoreconfig.in | 4
ldap/admin/src/scripts/template-saveconfig.in | 4
ldap/admin/src/scripts/template-schema-reload.pl.in | 4
ldap/admin/src/scripts/template-start-slapd.in | 3
ldap/admin/src/scripts/template-stop-slapd.in | 2
ldap/admin/src/scripts/template-suffix2instance.in | 4
ldap/admin/src/scripts/template-syntax-validate.pl.in | 4
ldap/admin/src/scripts/template-upgradedb.in | 4
ldap/admin/src/scripts/template-upgradednformat.in | 56
ldap/admin/src/scripts/template-usn-tombstone-cleanup.pl.in | 4
ldap/admin/src/scripts/template-vlvindex.in | 4
ldap/admin/src/slapd.inf.in | 2
ldap/include/ldaplog.h | 1
ldap/ldif/template-baseacis.ldif.in | 2
ldap/ldif/template-bitwise.ldif.in | 6
ldap/ldif/template-dse.ldif.in | 30
ldap/ldif/template-suffix-db.ldif.in | 1
ldap/schema/00core.ldif | 60
ldap/schema/01core389.ldif | 3
ldap/schema/02common.ldif | 4
ldap/schema/05rfc4523.ldif | 14
ldap/schema/05rfc4524.ldif | 30
ldap/schema/06inetorgperson.ldif | 5
ldap/schema/10mep-plugin.ldif | 104
ldap/schema/30ns-common.ldif | 4
ldap/schema/60acctpolicy.ldif | 47
ldap/schema/60qmail.ldif | 4
ldap/servers/plugins/acctpolicy/acct_config.c | 143
ldap/servers/plugins/acctpolicy/acct_init.c | 191
ldap/servers/plugins/acctpolicy/acct_plugin.c | 314
ldap/servers/plugins/acctpolicy/acct_util.c | 257
ldap/servers/plugins/acctpolicy/acctpolicy.h | 81
ldap/servers/plugins/acctpolicy/sampleconfig.ldif | 40
ldap/servers/plugins/acctpolicy/samplepolicy.ldif | 27
ldap/servers/plugins/acl/acl.c | 105
ldap/servers/plugins/acl/acl.h | 15
ldap/servers/plugins/acl/acl_ext.c | 29
ldap/servers/plugins/acl/aclanom.c | 1
ldap/servers/plugins/acl/acleffectiverights.c | 54
ldap/servers/plugins/acl/aclgroup.c | 9
ldap/servers/plugins/acl/acllas.c | 379
ldap/servers/plugins/acl/acllist.c | 14
ldap/servers/plugins/acl/aclparse.c | 590
ldap/servers/plugins/acl/aclplugin.c | 27
ldap/servers/plugins/acl/aclproxy.c | 232
ldap/servers/plugins/acl/aclutil.c | 103
ldap/servers/plugins/bitwise/bitwise.c | 20
ldap/servers/plugins/chainingdb/cb_bind.c | 2
ldap/servers/plugins/chainingdb/cb_config.c | 13
ldap/servers/plugins/chainingdb/cb_controls.c | 12
ldap/servers/plugins/chainingdb/cb_init.c | 4
ldap/servers/plugins/chainingdb/cb_instance.c | 68
ldap/servers/plugins/chainingdb/cb_utils.c | 3
ldap/servers/plugins/collation/collate.c | 22
ldap/servers/plugins/cos/cos_cache.c | 242
ldap/servers/plugins/deref/deref.c | 8
ldap/servers/plugins/dna/dna.c | 550
ldap/servers/plugins/http/http_impl.c | 81
ldap/servers/plugins/linkedattrs/fixup_task.c | 4
ldap/servers/plugins/linkedattrs/linked_attrs.c | 17
ldap/servers/plugins/memberof/memberof.c | 444
ldap/servers/plugins/memberof/memberof.h | 5
ldap/servers/plugins/memberof/memberof_config.c | 230
ldap/servers/plugins/mep/mep.c | 2264
ldap/servers/plugins/mep/mep.h | 124
ldap/servers/plugins/pam_passthru/pam_ptimpl.c | 17
ldap/servers/plugins/passthru/ptconfig.c | 43
ldap/servers/plugins/pwdstorage/smd5_pwd.c | 9
ldap/servers/plugins/referint/referint.c | 700
ldap/servers/plugins/replication/cl5_api.c | 1467
ldap/servers/plugins/replication/cl5_api.h | 77
ldap/servers/plugins/replication/cl5_clcache.c | 18
ldap/servers/plugins/replication/cl5_clcache.h | 2
ldap/servers/plugins/replication/cl5_config.c | 181
ldap/servers/plugins/replication/legacy_consumer.c | 1
ldap/servers/plugins/replication/repl-session-plugin.h | 119
ldap/servers/plugins/replication/repl5.h | 40
ldap/servers/plugins/replication/repl5_agmt.c | 96
ldap/servers/plugins/replication/repl5_agmtlist.c | 11
ldap/servers/plugins/replication/repl5_connection.c | 119
ldap/servers/plugins/replication/repl5_inc_protocol.c | 27
ldap/servers/plugins/replication/repl5_init.c | 26
ldap/servers/plugins/replication/repl5_plugins.c | 12
ldap/servers/plugins/replication/repl5_prot_private.h | 4
ldap/servers/plugins/replication/repl5_protocol.c | 99
ldap/servers/plugins/replication/repl5_protocol_util.c | 506
ldap/servers/plugins/replication/repl5_replica.c | 73
ldap/servers/plugins/replication/repl5_replica_config.c | 1
ldap/servers/plugins/replication/repl5_ruv.c | 52
ldap/servers/plugins/replication/repl5_tot_protocol.c | 28
ldap/servers/plugins/replication/repl5_total.c | 22
ldap/servers/plugins/replication/repl_compare.c | 1
ldap/servers/plugins/replication/repl_controls.c | 2
ldap/servers/plugins/replication/repl_extop.c | 262
ldap/servers/plugins/replication/repl_init.c | 1
ldap/servers/plugins/replication/repl_objset.c | 9
ldap/servers/plugins/replication/repl_session_plugin.c | 188
ldap/servers/plugins/replication/replutil.c | 26
ldap/servers/plugins/replication/test_repl_session_plugin.c | 335
ldap/servers/plugins/replication/urp.c | 1
ldap/servers/plugins/replication/windows_connection.c | 133
ldap/servers/plugins/replication/windows_inc_protocol.c | 27
ldap/servers/plugins/replication/windows_private.c | 53
ldap/servers/plugins/replication/windows_protocol_util.c | 270
ldap/servers/plugins/replication/windows_tot_protocol.c | 33
ldap/servers/plugins/replication/windowsrepl.h | 2
ldap/servers/plugins/replication/winsync-plugin.h | 2
ldap/servers/plugins/retrocl/retrocl.c | 3
ldap/servers/plugins/retrocl/retrocl.h | 2
ldap/servers/plugins/retrocl/retrocl_create.c | 13
ldap/servers/plugins/retrocl/retrocl_po.c | 11
ldap/servers/plugins/retrocl/retrocl_trim.c | 20
ldap/servers/plugins/rever/des.c | 72
ldap/servers/plugins/rever/rever.c | 8
ldap/servers/plugins/roles/roles_cache.c | 21
ldap/servers/plugins/schema_reload/schema_reload.c | 5
ldap/servers/plugins/shared/plugin-utils.h | 112
ldap/servers/plugins/shared/utils.c | 508
ldap/servers/plugins/statechange/statechange.c | 7
ldap/servers/plugins/syntaxes/bin.c | 142
ldap/servers/plugins/syntaxes/bitstring.c | 36
ldap/servers/plugins/syntaxes/ces.c | 140
ldap/servers/plugins/syntaxes/cis.c | 288
ldap/servers/plugins/syntaxes/dn.c | 42
ldap/servers/plugins/syntaxes/int.c | 64
ldap/servers/plugins/syntaxes/nameoptuid.c | 41
ldap/servers/plugins/syntaxes/numericstring.c | 118
ldap/servers/plugins/syntaxes/string.c | 198
ldap/servers/plugins/syntaxes/syntax.h | 57
ldap/servers/plugins/syntaxes/syntax_common.c | 117
ldap/servers/plugins/syntaxes/tel.c | 62
ldap/servers/plugins/syntaxes/validate.c | 17
ldap/servers/plugins/syntaxes/value.c | 116
ldap/servers/plugins/uiduniq/7bit.c | 7
ldap/servers/plugins/uiduniq/plugin-utils.h | 96
ldap/servers/plugins/uiduniq/uid.c | 9
ldap/servers/plugins/uiduniq/utils.c | 249
ldap/servers/plugins/usn/usn.c | 68
ldap/servers/plugins/usn/usn.h | 2
ldap/servers/plugins/usn/usn_cleanup.c | 13
ldap/servers/plugins/views/views.c | 6
ldap/servers/slapd/add.c | 87
ldap/servers/slapd/agtmmap.c | 56
ldap/servers/slapd/attr.c | 76
ldap/servers/slapd/attrlist.c | 6
ldap/servers/slapd/attrsyntax.c | 81
ldap/servers/slapd/auth.c | 73
ldap/servers/slapd/back-ldbm/ancestorid.c | 10
ldap/servers/slapd/back-ldbm/archive.c | 72
ldap/servers/slapd/back-ldbm/back-ldbm.h | 33
ldap/servers/slapd/back-ldbm/cache.c | 4
ldap/servers/slapd/back-ldbm/dbhelp.c | 12
ldap/servers/slapd/back-ldbm/dblayer.c | 1340
ldap/servers/slapd/back-ldbm/dblayer.h | 12
ldap/servers/slapd/back-ldbm/dbtest.c | 2
ldap/servers/slapd/back-ldbm/dbversion.c | 47
ldap/servers/slapd/back-ldbm/dn2entry.c | 12
ldap/servers/slapd/back-ldbm/filterindex.c | 98
ldap/servers/slapd/back-ldbm/findentry.c | 72
ldap/servers/slapd/back-ldbm/id2entry.c | 154
ldap/servers/slapd/back-ldbm/idl.c | 17
ldap/servers/slapd/back-ldbm/idl_new.c | 18
ldap/servers/slapd/back-ldbm/import-merge.c | 28
ldap/servers/slapd/back-ldbm/import-threads.c | 1070
ldap/servers/slapd/back-ldbm/import.c | 393
ldap/servers/slapd/back-ldbm/import.h | 19
ldap/servers/slapd/back-ldbm/index.c | 127
ldap/servers/slapd/back-ldbm/init.c | 6
ldap/servers/slapd/back-ldbm/instance.c | 31
ldap/servers/slapd/back-ldbm/ldbm_add.c | 94
ldap/servers/slapd/back-ldbm/ldbm_attr.c | 247
ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c | 56
ldap/servers/slapd/back-ldbm/ldbm_attrcrypt_config.c | 2
ldap/servers/slapd/back-ldbm/ldbm_config.c | 101
ldap/servers/slapd/back-ldbm/ldbm_delete.c | 77
ldap/servers/slapd/back-ldbm/ldbm_entryrdn.c | 523
ldap/servers/slapd/back-ldbm/ldbm_index_config.c | 106
ldap/servers/slapd/back-ldbm/ldbm_instance_config.c | 225
ldap/servers/slapd/back-ldbm/ldbm_modify.c | 53
ldap/servers/slapd/back-ldbm/ldbm_modrdn.c | 121
ldap/servers/slapd/back-ldbm/ldbm_search.c | 32
ldap/servers/slapd/back-ldbm/ldbm_usn.c | 71
ldap/servers/slapd/back-ldbm/ldif2ldbm.c | 540
ldap/servers/slapd/back-ldbm/matchrule.c | 26
ldap/servers/slapd/back-ldbm/misc.c | 223
ldap/servers/slapd/back-ldbm/monitor.c | 14
ldap/servers/slapd/back-ldbm/nextid.c | 17
ldap/servers/slapd/back-ldbm/perfctrs.c | 24
ldap/servers/slapd/back-ldbm/proto-back-ldbm.h | 21
ldap/servers/slapd/back-ldbm/sort.c | 12
ldap/servers/slapd/back-ldbm/start.c | 29
ldap/servers/slapd/back-ldbm/vlv.c | 206
ldap/servers/slapd/back-ldbm/vlv_srch.c | 6
ldap/servers/slapd/back-ldbm/vlv_srch.h | 3
ldap/servers/slapd/back-ldif/modrdn.c | 12
ldap/servers/slapd/backend.c | 53
ldap/servers/slapd/backend_manager.c | 8
ldap/servers/slapd/bind.c | 255
ldap/servers/slapd/charray.c | 6
ldap/servers/slapd/compare.c | 31
ldap/servers/slapd/configdse.c | 58
ldap/servers/slapd/connection.c | 124
ldap/servers/slapd/control.c | 7
ldap/servers/slapd/csngen.c | 6
ldap/servers/slapd/daemon.c | 57
ldap/servers/slapd/delete.c | 82
ldap/servers/slapd/dn.c | 1047
ldap/servers/slapd/dse.c | 22
ldap/servers/slapd/dynalib.c | 29
ldap/servers/slapd/entry.c | 471
ldap/servers/slapd/entrywsi.c | 54
ldap/servers/slapd/eventq.c | 4
ldap/servers/slapd/extendop.c | 37
ldap/servers/slapd/factory.c | 1
ldap/servers/slapd/fe.h | 5
ldap/servers/slapd/fedse.c | 19
ldap/servers/slapd/filter.c | 2
ldap/servers/slapd/filter.h | 1
ldap/servers/slapd/filtercmp.c | 25
ldap/servers/slapd/filterentry.c | 27
ldap/servers/slapd/index_subsystem.c | 18
ldap/servers/slapd/ldaputil.c | 634
ldap/servers/slapd/lenstr.c | 6
ldap/servers/slapd/libglobs.c | 140
ldap/servers/slapd/libslapd.def | 1
ldap/servers/slapd/log.c | 3
ldap/servers/slapd/main.c | 174
ldap/servers/slapd/mapping_tree.c | 258
ldap/servers/slapd/match.c | 57
ldap/servers/slapd/modify.c | 210
ldap/servers/slapd/modrdn.c | 215
ldap/servers/slapd/modutil.c | 30
ldap/servers/slapd/opshared.c | 100
ldap/servers/slapd/pagedresults.c | 54
ldap/servers/slapd/passwd_extop.c | 97
ldap/servers/slapd/pblock.c | 242
ldap/servers/slapd/plugin.c | 193
ldap/servers/slapd/plugin_internal_op.c | 12
ldap/servers/slapd/plugin_mr.c | 472
ldap/servers/slapd/plugin_syntax.c | 352
ldap/servers/slapd/protect_db.c | 18
ldap/servers/slapd/protect_db.h | 5
ldap/servers/slapd/proto-slap.h | 42
ldap/servers/slapd/proxyauth.c | 247
ldap/servers/slapd/psearch.c | 1
ldap/servers/slapd/pw.c | 149
ldap/servers/slapd/pw_mgmt.c | 136
ldap/servers/slapd/rdn.c | 14
ldap/servers/slapd/regex.c | 3
ldap/servers/slapd/result.c | 15
ldap/servers/slapd/rootdse.c | 4
ldap/servers/slapd/sasl_io.c | 167
ldap/servers/slapd/sasl_map.c | 53
ldap/servers/slapd/saslbind.c | 122
ldap/servers/slapd/schema.c | 62
ldap/servers/slapd/search.c | 35
ldap/servers/slapd/slap.h | 79
ldap/servers/slapd/slapi-plugin-compat4.h | 6
ldap/servers/slapd/slapi-plugin.h | 414
ldap/servers/slapd/slapi-private.h | 25
ldap/servers/slapd/slapi_counter.c | 6
ldap/servers/slapd/snmp_collator.c | 3
ldap/servers/slapd/str2filter.c | 1
ldap/servers/slapd/task.c | 94
ldap/servers/slapd/tools/dbscan.c | 72
ldap/servers/slapd/tools/ldclt/data.c | 50
ldap/servers/slapd/tools/ldclt/ldapfct.c | 150
ldap/servers/slapd/tools/ldclt/ldclt.c | 33
ldap/servers/slapd/tools/ldclt/ldclt.h | 2
ldap/servers/slapd/tools/ldclt/ldcltU.c | 24
ldap/servers/slapd/tools/ldclt/parser.c | 19
ldap/servers/slapd/tools/ldclt/scalab01.c | 49
ldap/servers/slapd/tools/ldif.c | 4
ldap/servers/slapd/tools/mmldif.c | 9
ldap/servers/slapd/tools/pwenc.c | 2
ldap/servers/slapd/tools/rsearch/addthread.c | 25
ldap/servers/slapd/tools/rsearch/searchthread.c | 62
ldap/servers/slapd/utf8compare.c | 2
ldap/servers/slapd/util.c | 162
ldap/servers/slapd/value.c | 26
ldap/servers/slapd/valueset.c | 68
ldap/servers/slapd/vattr.c | 60
ldap/servers/snmp/ldap-agent.c | 26
ldap/servers/snmp/main.c | 9
ldap/systools/idsktune.c | 17
lib/base/crit.cpp | 6
lib/base/ereport.cpp | 2
lib/base/lexer.cpp | 1015
lib/base/plist.cpp | 3
lib/base/util.cpp | 13
lib/ldaputil/cert.c | 4
lib/ldaputil/certmap.c | 409
lib/ldaputil/dbconf.c | 1
lib/ldaputil/utest/Makefile | 149
lib/ldaputil/utest/auth.cpp | 611
lib/ldaputil/utest/authtest | 138
lib/ldaputil/utest/certmap.conf | 68
lib/ldaputil/utest/dblist.conf | 47
lib/ldaputil/utest/example.c | 153
lib/ldaputil/utest/plugin.c | 152
lib/ldaputil/utest/plugin.h | 57
lib/ldaputil/utest/stubs.c | 144
lib/ldaputil/utest/stubs.cpp | 139
lib/ldaputil/utest/test.ref | 480
lib/ldaputil/vtable.c | 2
lib/libaccess/acl.tab.cpp | 21
lib/libaccess/aclcache.cpp | 105
lib/libaccess/aclflush.cpp | 1
lib/libaccess/aclpriv.h | 1
lib/libaccess/acltools.cpp | 1724
lib/libaccess/authdb.cpp | 112
lib/libaccess/lasdns.cpp | 7
lib/libaccess/lasip.cpp | 16
lib/libaccess/nseframe.cpp | 1
lib/libaccess/oneeval.cpp | 17
lib/libaccess/permhash.h | 11
lib/libaccess/register.cpp | 50
lib/libaccess/usrcache.cpp | 14
lib/libaccess/utest/.purify | 19
lib/libaccess/utest/Makefile | 147
lib/libaccess/utest/acl.dat | 44
lib/libaccess/utest/aclfile0 | 87
lib/libaccess/utest/aclfile1 | 43
lib/libaccess/utest/aclfile10 | 45
lib/libaccess/utest/aclfile11 | 43
lib/libaccess/utest/aclfile12 | 43
lib/libaccess/utest/aclfile13 | 43
lib/libaccess/utest/aclfile14 | 43
lib/libaccess/utest/aclfile15 | 43
lib/libaccess/utest/aclfile16 | 43
lib/libaccess/utest/aclfile17 | 43
lib/libaccess/utest/aclfile18 | 51
lib/libaccess/utest/aclfile19 | 46
lib/libaccess/utest/aclfile2 | 43
lib/libaccess/utest/aclfile3 | 43
lib/libaccess/utest/aclfile4 | 43
lib/libaccess/utest/aclfile5 | 43
lib/libaccess/utest/aclfile6 | 55
lib/libaccess/utest/aclfile7 | 43
lib/libaccess/utest/aclfile8 | 43
lib/libaccess/utest/aclfile9 | 43
lib/libaccess/utest/aclgrp0 | 42
lib/libaccess/utest/aclgrp1 | 42
lib/libaccess/utest/aclgrp2 | 42
lib/libaccess/utest/aclgrp3 | 42
lib/libaccess/utest/aclgrp4 | 42
lib/libaccess/utest/acltest.cpp | 794
lib/libaccess/utest/onetest.cpp | 77
lib/libaccess/utest/shexp.cpp | 331
lib/libaccess/utest/shexp.h | 168
lib/libaccess/utest/test.ref | 217
lib/libaccess/utest/testmain.cpp | 89
lib/libaccess/utest/twotest.cpp | 87
lib/libaccess/utest/ustubs.cpp | 331
lib/libadmin/error.c | 2
lib/libadmin/template.c | 2
lib/libadmin/util.c | 48
lib/libsi18n/coreres.c | 141
lib/libsi18n/coreres.h | 52
lib/libsi18n/getlang.c | 330
lib/libsi18n/getstrmem.c | 160
lib/libsi18n/getstrmem.h | 1
lib/libsi18n/getstrprop.c | 85
lib/libsi18n/makstrdb.c | 21
lib/libsi18n/propset.c | 442
lib/libsi18n/propset.h | 80
lib/libsi18n/reshash.c | 21
ltmain.sh | 8473 +--
m4/db.m4 | 21
m4/fhs.m4 | 4
m4/icu.m4 | 25
m4/kerberos.m4 | 4
m4/mozldap.m4 | 38
m4/netsnmp.m4 | 15
m4/nspr.m4 | 17
m4/nss.m4 | 17
m4/openldap.m4 | 23
m4/pcre.m4 | 28
m4/sasl.m4 | 25
m4/selinux.m4 | 16
m4/svrcore.m4 | 41
man/man8/restart-dirsrv.8 | 50
man/man8/start-dirsrv.8 | 50
man/man8/stop-dirsrv.8 | 50
missing | 104
selinux/dirsrv.fc.in | 2
selinux/dirsrv.if | 41
selinux/dirsrv.te | 11
wrappers/initscript.in | 201
wrappers/migratecred.in | 2
wrappers/mmldif.in | 2
wrappers/pwdhash.in | 2
458 files changed, 46817 insertions(+), 47361 deletions(-)
---
13 years, 4 months
Changes to 'refs/tags/Directory_Server_8_2_Errata_Candidate_10193_20101026'
by Noriko Hosoi
Changes since the dawn of time:
David Boreham (68):
Move AXIS and DSML jars to /s/b/c
Makefile changes to allow building on Linux machines where uname reports four-part version
Always use the internal regex functions : checkin lost in the AOL/RH move.
Always use the internal regex functions: checkin lost in the AOL/RH move.
Add password change extended operation support.
Add support for password change extended operation.
Always use the internal regex functions: checkin list in the AOL/RH move.
Large stack size for 64-bit builds: checkin lost in AOL/RH move.
Add support for password change extended operation.
Add support for filesystem-based replica initialization.
Add long hostname support for HP-UX
Merge over new code: fractional replication, wan replication and windows sync plus associated UI
Fix the HP build
Additional schama for windows user sync
New windows sync code
Fix unicode conversion for passwords
Merge password sync code from Bozeman Pass
Change DSMLGW to work with Axis1.2rc3
Use axis 1.2rc3
Fix DSMLGW test failures
Change password sync copyright notices, merge fixes to password sync code
Merge fixes to DSMLGW post-axis-version-change
Fix processing of base-64 encoded data
Fixes for windows sync for NT4
Fix instability in re-try and backoff mechanism
Fix RUV updating code
Fix initial RUV logic and add support for Win2003
Take out old code that was #defined out
remove redundant source file and associated Makefile line
remove bogus logging fix bug#154261
Use separate attribute maps for NT4 and AD. Fix 155266
Fix mapping of seeAlso and secretary attributes
Add new NT4 LDAP Service, used by windows sync
Fix for 154837 : non-sync'ed group entries get backed out
Fix mapping of street and streetAddress attrs
Fix for 155141: bug in linked list code
Fix mapping of street attribute, fix total update of previously sync'ed entries
Fix handling of group membership, fix installer GUID, fix handling of entry description
Change GUID for installer
Fix for 155063: remove error messages due to entry parsing failure
Fix for 64-bit bug in dirsync control parsing code
Fix ruv update on skipped change
Fix syncing of contained entries
Fix the fact that if an operation fails in a total update, we immediately halt
Fix schema for NT sync
Fix display names in pass sync to say Fedora
Fix display name to say Fedora...
Fix various bad memory free bugs
Merge fixes over
Allow error on result side to propagate pack to sending side
Fixes for windows sync
Fix for #157020: convert unicode password to little-endian byte order
Fix for #155591: treat an ruv with no min_csn as pristine
Fix for 157021: server doesn't correctly process modifies to windows sync agreements
Fix for #156449 : mangle 'street' attribute to defeat our schema aliasing it with 'streetaddress'
Fix for #155588 : don't leak connections from the ldap connection pool
Fixes for memory leaks in ntds
Patches we apply to apache ds 0.9
Update packaging for ntds
Fix Windows SSL replication in-order processing of operatations
Change NT4 case to send plaintext passwords
Fix ntds installer to allow repair and removal
Fix for #157901 : FMR in windows sync agreement code
Memory Leak Fixes for Apache DS
Fix for #157895 : logon hours doesn't work
Fix for 157919: perform fractional consumer check after acquiring the replica
Fix for 158031: add default indices needed by Windows Sync
Fix for #158253: add attributes to the exclusion list for fractional replication. Add an error string returned to clients if an illegal attribute is configured
Endi S. Dewata (6):
Uninitialized mutex in Retro Changelog Plugin. https://bugzilla.redhat.com/show_bug.cgi?id=554841 Resolves: bug 554841 Bug Description: Enabling Retro Changelog Plugin on a DS instance provisioned by Samba will crash slapd during startup. Branch: HEAD Fix Description: Apparently the retrocl_internal_lock is still NULL when it's used in retrocl_get_first_changenumber(). The solution is to initialize the lock in the retrocl_plugin_init(). Platforms tested: F12 i386
Bug 573375 - MODRDN operation not logged
Bug 566043 - startpid file is only cleaned by initscript runs
Bug 584109 - Slapd crashes while parsing DNA configuration
Bug 542570 - Directory Server port number is not validated in the beginning.
Bug 470684 - Pam_passthru plugin doesn't verify account activation
Nathan Kinder (335):
Rebranding targets should checkout reltools automatically - nkinder(a)redhat.com
Added rebranding data for RHDS - nkinder(a)redhat.com
Cleaned up UI for rebranding - nkinder(a)redhat.com
146294 - changed dsgw to be brand agnostic - nkinder(a)redhat.com
Fixed axis component pull and cleaned up tomcat references - nkinder(a)redhat.com
146201 - make directory express brand agnostic - nkinder(a)redhat.com
146735 - Fixed HP-UX patch typos - nkinder(a)redhat.com
146804 - Remove 7 day grace period from purging logic - nkinder(a)redhat.com
146804 - Added extra validity check for purge_csn - nkinder(a)redhat.com
147053 - remove dsrk dependency
Added HP-UX makefiles
147044 - convert entry id to big endian before looking up in db
147368 - Made org chart brand agnostic
Fixed PAM plugin for HP builds
Updated nss, nspr, dbm, and jss component versions
New net-snmp subagent
149951 - Updated source code copyrights
Updated SNMP OIDs for Red Hat namespace
Use new RHEL platform naming
Pull svrcore from sbsintegration
Pull DS Console as a component
Fixed declaration syntax error
Fixed missing symbol issues for Solaris ds_newinst
Pull svrcore from sbc
Fix db component pull
Differentiate between internal and external components during branding
Fixed BUILD_MODE flag to look in correct file
Backed out accidental checkin of branded file
Pick up new Axis component (1.2rc3)
Updated copyright info
Update copyrights for DSGW
Copyright updates
Fixed DOS style end of line chars
Update location of ldapconsole component
Remove un-needed Console SDK dependency
Updated copyright info
Updated copyright info
Space in the makefile was causing findstring to fail on RHEL4
Pick up new perldap component
Enable building of SNMP subagent
Compilation and linking fixes for SNMP subagent
Added 64-bit linker options for HP-UX and Solaris
Update components and SNMP config changes
Pick up new Admin Server component
Ensure null termination of strings in SNMP code
Fix swap space reporting on Linux
Pick up new Admin Server and LDAP Console components
Corrected ndd recommendations
153668 - Update dsktune for HP-UX
Update dsktune version date
Updated readme file plus new admin server
Pick up new LDAP Console component
Acceptance and ships fixes for RPMs
Run acceptance in the background
154077 - Check for version 1.4.2.07 of JRE on HP-UX
Pick up new Admin Server
154948 - Fixed fractional repl crash
155068 - Added license to source files
Pick up new ldapconsole
Created LICENSE and EXCEPTION files
HP-UX IPF Porting changes
Pick up new adminserver and ldapconsole components
Removed ldaptags and Whos Online references
Fixed licensing typo
Fixed copyright block error
155460 - Remove crypt password storage from windows build
Use OPL for online help docs
154041 - Added Fedora EULA
Pick up new ldapconsole component
Fixed whitespace issue in Makefile
155782 - Don't include CVS directories in source rpm
Pick up new components
Fix search scope for AD password sync - 159037
164017 - Attribute uniqueness plugin now only checks for conflicts in subtrees that the operation applies to
164843 - Modified indexing to deal with attribute subtypes
165862 - Needed to set BE_INDEX_EQUALITY flag when doing a delete of an entry.
166012 - Use of incorrect iterator in indexing code was causing illegal access of memory which sometimes resulted in crashing.
Pull setuputil from sbsint, not sbc.
167441 - Added SHA2 hashed password storage support.
165228 - Don't have RPM auto-generate provides list
168309 - Removed setup wrappers used for Java packaging and added RPM dependency for java-1.4.2-ibm package.
168322 - Check size of hash needed before base64 encoding password hashes
169388 - Fixed attribute comparision helper function that was causing certain changes to not get synched.
169954 - Winsync initialization would hang with certain entries. Fixed improper use of ldap_get_next.
169954 - Moved illegal declaration to the top of code block
170321 - Increase winsync version to 1.0.1
170328 - Fixed modify type installation so it actually updates the registry
170558 - Add certutil, pk12util and missing dlls to PassSync.msi
170558 - Add certutil, pk12util and missing dlls to PassSync.msi
170135 - Improved passsync logging facilities
170556 - Make passsync obey backoff for retries when DS is down
170816 - Don't consume password changes if modify fails
170071 - Automatically add grouptype for new groups being synchd to NT4
163064 - It appears that Active Directory has a problem where it allows duplicate values for system-only multivalued attributes. This change just skips the dscorepropagationdata attibute when receiving a change from DirSync.
Pull ldapconsole from integration area
Changed cyrus-sasl rpm dependency to >=2.1.15 for RHEL3 compatibility
Need to package online help files for external builds
174550 - Fixed error message typo
178867 - Enhanced password syntax checking
Bug(s) fixed: 180744
Bug(s) fixed: 181032
Fix build-time issue of lib_dsadmin.so for x86_64 support
Bug(s) fixed: 181827
184585 - SASL context needs to be disposed of and a new one created when re-binding
184585 - Adjusted the location of the connection lock when doing a sasl_rebind
185811 - Fixed windows build failures when compiling slapd_chown_if_not_owner function
185811 - Need to exclude pwd.h include on windows
185811 - Don't check localuser config on Windows
185811 - slapi_dn_find_parent needs to be added to libslapd.def for windows build to compile
185811 - Missing const qualifiers were causing Windows compiler errors
188931 - Use system Net-SNMP libraries on Linux systems
189176 - Fixed aci for directory administrators group.
16578 - Fixed off by one error in month in logconv.pl
190724 - Evaluate ACIs before checking password syntax
190724 - Array initialization needed to be changed to fix a HP-UX PA compilation error
202872 - Allow password modify extended operation when using SASL privacy layer
203043 - Support password generation when using the password modify extended operation
203043 - Optimizations in password generation
Test for commits mailing list - ignore.
204355 - Remove winsync code from ldapserver tree
204410 - Pick up new ldapcsdk, nspr, and sasl components
204517 - Use new ber types throughout the server code.
204517 - Cleaned up usage of ber_printf to use new ber types
208058 - Copy decrypted SASL data starting from buffer offset instead of always copying from the beginning of the buffer.
Related: 210736
Resolves: 211234
Resolves: 211386
Resolves: 211419
Resolves: 211554
Resolves: 211554
Resolves: 212038
Resolves: 212483
Related: 213352
Resolves: 214238
Related: 214238
Resolves: 214463
Resolves: 214682
Package libsasl in core libdir for old style build
Resolves: 212112
Resolves: 217796
Resolves: 227754
Resolves: 228082
Resolves: 229095
Resolves: 229428
Resolves: 229428
Resolves: 230458
Resolves: 235143
Resolves: 236612
Resolves: 236612
Resolves: 240240
Resolves: 240583
Summary: Removed unused source files.
Resolves: 251262
Resolves: 253582
Added sasl link to ldap-agent binary.
Resolves: 253818
Resolves: 243221
Resolves: 207893
Resolves: 212671
Resolves: 207567
Resolves: 243227
Resolves: 242551
Resolves: 293541
Resolves: 294301
Removed online help docs now that they've been moved to directoryconsole.
Resolves: 299361
Resolves: 304191
Resolves: 170560
Resolves: 238504
Resolves: 288521
Resolves: 158667
Resolves: 197997
Resolves: 219586
Resolves: 311851
Resolves: 311851
Resolves: 238517
Summary: Re-generated autotools build files.
Resolves: 314791
Resolves: 282911
Resolves: 288321
Resolves: 268101
Resolves: 316281
Resolves: 176302
Resolves: 325281
Resolves: 238630
Resolves: 328741
Resolves: 335081
Resolves: 219587
Resolves: 338611
Resolves: 336871
Resolves: 188320
Resolves: 344631
Resolves: 429799
Resolves: 429793
Initial import of memberof plugin from FreeIPA (refactored from changeset 640:9c57bd91b32f if ipa-memberof.c).
Resolves: 435730
Resolves: 438891
Resolves: 439097
Summary: Avoid adding a group as a memberOf itself.
Resolves: 439907
Resolves: 440333
Resolves: 440474
Resolves: 439628
Resolves: 450107
Resolves: 443241
Resolves: 450746
Resolves: 450989
Resolves: 452169
Resolves: 452537
Resolves: 453011
Resolves: 454328
Resolves: 455913
Resolves: 456162
Resolves: 457260
Resolves: 456968
Resolves: 457329
Resolves: 457951
Resolves: 458135
Resolves: 462920
Resolves: 464188
Related: 207457
Related: 207457
Resolves: 207457
Resolves: 207457
Resolves: 207457
Resolves: 467931
Resolves: 452569
Resolves: 316241
Resolves: 207457
Resolves: 470393
Resolves: 470918
Resolves: 450046
Resolves: 454348
Resolves: 207457
Resolves: 216522
Resolves: 430321
Resolves: 387851
Resolves: 387851
Resolves: 220532
Resolves: 474254
Resolves: 445775
Resolves: 201332
Resolves: 250535
Resolves: 437049
Resolves: 430368
Resolves: 445305
Resolves: 467233
Resolves: 463776
Resolves: 437049
Resolves: 474621
Resolves:479065
Resolves: 381361
Resolves: 381361
Resolves: 472602
Resolves: 170461
Resolves: 174394
Resolves: 437900
Resolves: 253311
Resolves: 442474
Resolves: 184141
Resolves: 248924
Resolves: 204626
Resolves: 474945
Resolves: 480384
Resolves: 474945
Resolves: 470611
Resolves: 452007
Resolves: 463337
Resolves: 455629
Resolves: 455629
Resolves: 446697
Resolves: 245894
Resolves: 245894
Resolves: bug 487574
Resolves: bug 487725
Resolves: 487765
Resolves: bug 486400
Resolves: 445602
Resolves: 442474
Resolves: 496836
Added capability to validate syntax of values being added to the database. Also added numericstring syntax support.
Generated autotools files for syntax validation feature.
Auto-generate SLAPI docs - first pass.
Add strict DN syntax enforcement option.
Add require secure binds switch.
Bug: 181465 - Handle spacing issues in objectClass SUP list.
Add linked attributes plug-in.
Bug: 509401 - dnaNextValue not updated when dnaMaxValue set to -1
Add additional standard syntaxes.
Skip syntax check of encrypted attributes during import.
Use LDAPv3 DN values in ns-newpwpolicy script.
Change aci syntax to Directory String.
Bug 514824: Fix double free in macro ACI code.
Bug 514848: Make selfwrite ACI keyword with with Name And Optional UID syntax attributes.
Bug 514955 - Make DNA handle multiple mods
Add centralized start/stop/restart scipts.
Allow anonymous access to be disabled.
Add minimum SSF setting
Add ssf bind rule to access control plug-in.
Allow anonymous bind resource limits to be set.
BZ 221905 - Add SMD5 password storage support.
Bug 529258 - Make upgrade remove obsolete schema from 99user.ldif
Make removeds.pl remove instance initconfig script
Allow plugin execution order to be defined
387681 - Fix errors in mapping AD tombstones
Bug 511112 - Eliminate fixed length array in password history code.
Bug 497199 - Skip dirsync if disconnected during incremental update
Bug 504817 - Handle LDAPv2 quoted RDN values correctly
Bug 515329 - Correct attribute value inconsistency on replica
Avoid freeing NULL trimmed passwords list
Add bounds checking in DN unescape function
Bug 195302 - Allow fine-grained password storage scheme to be set
Bug 193297 - Call bind pre-op and post-op plug-ins for SASL binds
Bug 201275 - Make SASL EXTERNAL bind obey account lock
Bug 195302 - Fix crash regression from previous fix
Bug 497556 - LDAPI connections cause TCP performance degradation
Set unknown attribute syntax to Octet String.
Bug 518084 - Fix out of order retro changelog entries
Document SLAPI DN related functions.
Add missing paran from fix for bug 518084
Bug 548537 - Fix memory leaks in DNA plugin
Bug 553455 - fix segfault when changing a password
Add Doxygen comments for SLAPI attr, value, and valueset functions.
Bug 536703 - Don't send empty mod to AD for mapped DN values
Bug 549554 - Trim single-valued attributes before sending to AD
Add ldap-agent init script.
Improve search for pcre header file
Bug 434735 - Allow SASL ANONYMOUS mech to work
Allow instance name to be parsed from start-slapd
Bug 578863 - Password modify extop needs to send referrals on replicas
Bug 592389 - Set anonymous resource limits properly
Bug 601433 - Add man pages for start-dirsrv and related commands
Bug 604263 - Fix memory leak when password change is rejected
Bug 612242 - membership change on DS does not show on AD
Bug 612264 - ACI issue with (targetattr='userPassword')
Noriko Hosoi (442):
1) added -p to mkdir built/<PLATFORM_OBJDIR>
fixed packaging -- the path to reltools was incorrect
Stop compiling/packaging presence plugin and its clients "ldaptags" and "online" from DS7.1.
target name should not be identical to the directory name if you want to always execute the command line.
replacing fversion(.c) with dirver(.pl); used on Windows only
[146919] De-brand the Directory Server as "brandx"
[bugzilla 149539] Use Cyrus SASL instead of our custom one
[150809] slapi_ch_smprintf truncates strings when the given args are longer than 100 characters in total.
Instead of getting nes-webapps_6_1.dtd from http://developer.netscape.com/products/servers/enterprise/dtds/, get it from the installed tree.
On windows, snprintf needs underscore '_' at the beginning.
Commented out functions which were removed in the source code clean up.
Moved a part of PR_ASSERT after the variable is initialized.
NSPR header file and the library are needed to use PL_strcatn.
Replaced the variables for ds##[_en].jar and its path with the correct ones:
Added LDAP_NOSSL_LINK for Windows build -- needed for admin/src/ds_newinst.
[149539] Use Cyrus SASL instead of our custom one
fix for breaking the build on HP-UX due to the previous check in.
[Bug 146919] Directory Server rebranding
[152645] dsmlgw acceptance test started to fail on 3/15/2005
[151835] dbscan grows up to 900MB+ and hangs with -i and -l <large value> options
DOC: Internal version also does not package the guides.
[152645] revert AXIS version to 1.2beta
fixed a bug on the static variable introduced by the previous commit.
1) Updated "Last Updated" date.
Revised the usage string.
1) clu dbscan test passes file type option(s) (-e -- entry file, -i -- index file, -c -- changelog file) for any type of files, which could sometimes crashes the command. To prevent it, introduced a simple file type checker and reset the file type if it does not match the real type.
[Bug 153175] SSL 6.x -> 7.0 migration script problems
[Bug 153306] dbscan of changelog files core dumps on Solairs 64 bit builds.
[154068] RPM setup should run with the relative path as well as the absolute path
[154288] usage cleanup
[154766] Online help mentions "this ( 6.2 ) directory server
[154775] Replica Settings page contains 4.0 and 4.1 supplier server.
[154909] Fixed old copyright notice and removed the link to DocHome.
[155066] Typo in properties editor online help; removed '.'
[155140] SASL mapping modify online help not in correct format
[155137] SASL mapping online help not in correct format
[155133] Attribute Encryption, select encryption method, online help uses wrong font / mis-formatted.
[155132] Attribute Encryption, Add, online help uses wrong font / mis-formatted.
Don't pull net-snmp on Windows.
[155628] Fractional Replication: modify does not issue notify;
[155905] mrclone failure: race condition between force_checkpoint and dblayer_close
Fix for the replication bug found in running reliability 16.
[156623] Solaris/HP-UX setup can only be run from the SERVER ROOT
[156759] dsgw/pb charset conversion problem
[156758] bak2db loses index configuration when the overriden conf has some changes.
[154189] Java Console hung during startup and only shows a grey splash screen
[158263] Performance Counter, labels removed. Need to update online help to match
Added testpreop_search to verify bug 147585
[147585] test plugin to verify the bug, the previous check in was not returning SUCCESS.
[Bug 166632] dbscan: not to truncate the entry even if it is larger than BUFSIZ
[Bug 164834] modify/replace allows multiple same valued attributes in an entry
[160003] db2index.pl cannot find libldap50.so if only certain parameters are used
[167264] Update branding script data to include the revision info
[167478] setup script needs to check the DS instance
[167679] modify upgradeServer to upgrade db2index.pl
Fix for NT build failure: undefined symbols in index.c
[167982] Service Pack framework
[167982] Service Pack framework
fixed internal build failure...
[167982] Service Pack framework
[172411] Use system SASL on RHEL
Fixed the build: removed __attribute__ from the previous checkin.
[172411] Use system SASL on RHEL
[172411] Use system SASL on RHEL
[172824] Link SASL library dynamically
[173524] setup scripts retrieves incorrect adminid
[173687] deadlock caused by error log rotation and logging
[173687] deadlock caused by error log rotation and logging
[173931] Error logs not deleted
Fixed the solaris build (log.h); fixed an inappropriate comment
[175063] entry with escaped characters fails to import and index
[175063] entry with escaped characters fails to import and index
[175897] filter'd search not returning matches after index added
[170348] RSEARCH needs to be updated
[174776] Multiple restores from a non-existant directory could wipe out database
[164596] LDCLT distributed with Directory Server
Added copyrights.
[174774] Backup does not clear the backup directory prior to performing backup; Restore tries to restore all the fles from the backupdir
Previous checkin cleaned up too much; restoring commit_good_database.
[176293] repl_chain_on_update() logs a message for every modify operation
[173871] added more precise error message for the dbcache allocation failure.
[164596] LDCLT distributed with Directory Server
[170348] RSEARCH needs to be updated
Fixing nightly build
Fixing the internal build (to build dsmlgw w/ ant, ant-launcher.jar is needed)
Fixing Solaris build
fixing the 64-bit Solaris build
[183222] Directory Server hangs when running VLV search and update operations simultaneously.
[185364] Can't update scripts (e.g., start-slapd) in the instance
[185477] ldif2db allows entries without a parent to be imported
[185477] ldif2db allows entries without a parent to be imported
[185364] Can't update scripts (e.g., start-slapd) in the instance directory
[186642] Directory Server Makefile updates for Internal build
setup.inf, setup.res, silent.inf, unzip_wrapper.pl, LICENSE.txt, README.txt were missing from the tar-gz package file.
[186642] Directory Server Makefile updates for Internal build (Comment #6)
Previous checkin introduced this bug: a whitespace is inserted by putting a comment at the end of the macro assignment for Solaris JDK Version; moved the comment to one line above.
Removed extra $(NS64TAG) from sh_release_config; $(NSCONFIG) contains _64.
accidentally, overrode the change made on revision 1.42; backing off
Moved the SMARTHEAP macro setting from slapd local Makefile to global nsconfig.mk so that the makefile used for packaging gets the info.
[186642] Directory Server Makefile updates for Internal build
Should keep all the components packaged in the 64-bit build in dist/<platform>_64_DBG.OBJ
[189264] 6.11->6.21 upgrade, no db housekeeping threads
pick up new adminutil, adminserver, and WinSync for INTERNAL_BUILD
build fix for Solaris Studio11 compiler
[191832] changing password sometimes crashes the server [Admin Server password always remembers initial password on (part 2)]
[192901] DS returns an entry that does not match the filter
[195258] Changes for the internal build
[195258] Changes for the internal build; Comment#16
[203214] RHDS fails to start on HP-UX 11.23.
[204563] Solaris build problem
[204566] Adjustment for new LDAP C SDK (ber_get_next_buffer_ext)
[206724] Replacing PR_SetNetAddr with PRLDAP_SET_PORT for IPv6 support
Upgraded NSPR_RELDATE to v4.6.3-dstest.
[206724] Processed: Replacing PR_SetNetAddr with PRLDAP_SET_PORT for IPv6 support
[207427] parameterizing the hardcoded paths (Comment #15)
[204808] spurious search timeouts
[208672] parameterizing the hardcoded paths (phase 2. db, log, lock, pid, cert, and instance dir)
Resolves: #204808
Resolves: #210947
Fixed the HP-UX and Solaris build failure introduced by the previous check-in.
Resolves: #212098
Resolves: #212098
Resolves: #212098
Resolves: #210947
Fixed this problem on Solaris: Netscape Portable Runtime error -5977: ld.so.1: ns-slapd: fatal: libns-dshttpd72.so: open failed: No such file or directory
Backed off the previous change for the non-Solaris platforms.
Resolves: #199923
Resolves: #214840
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214728
Resolves: #214533
Resolves: #214533
Resolves: #214533
Resolves: #214533
Added -DIS_FHS; the old build only supports FHS.
Auto-generated by autoheader; needs to be in CVS.
Resolves: #215452
Resolves: #216512
Resolves: #216983
Resolves: #183222
Resolves: 158342
Resolves: #183222
Resolves: #202843
Resolves: #202843
Resolves: #202843
Resolves: #195305, #195307
Resolves: #195305
Resolves: 223861
Resolves: 223861
Replaced white spaces with a tab to fix "Makefile:125: *** missing separator"
Replaced white spaces with a tab to fix "Makefile:150: *** missing separator"
Resolves: 223861
Force to commit template-start-slapd.in and template-stop-slapd.in to make them younger than template-start-slapd and template-stop-slapd.
Resolves: 229576
Resolves: 230673
Resolves: 230673
Resolves: 229280
Resolves: 231221
Resolves: 229513
Resolves: 232050
Resolves: 232050
The line to create db2bak.pl was missing...
Resolves: 232746
Resolves: #233027
Resolves: #233027
Resolves: #233215
Resolves: #233027
Resolves: #232050
Resolves: 233027
Resolves: #233215
Resolves: #233215
Resolves: #233215
Resolves: #237040
Resolves: #237040
Resolves: #237040
Resolves: #237731
Resolves: #237731
Resolves: #237356
Resolves: #237356
Resolves: #237356
Resolves: #237356
Resolves: #237356
Resolves: #237356
Resolves: #237356
Resolves: #237356
Resolves: #239337
Resolves: #237731
Resolves: #243488
Resolves: #237356
Resolves: 237356
Summary: Move DS Admin Code into Admin Server (Comment #62)
Resolves: #237356
Resolves: #244749
Resolves: #244749
Resolves: #245407
Resolves: #245407
Resolves: #244749
Resolves: #246690
Resolves: #247215
Resolves: #247215
Resolves: #247725
Resolves: #249722
Resolves: #249739
Resolves: #250347
Resolves: #250702
Resolves: #251090
Resolves: #253069
Resolves: #260341
Resolves: #260341
Resolves: #260341
Resolves: #273501
Resolves: #236256
Resolves: #240897
Resolves: #243820
Resolves: #171081
Resolves: #287961
Resolves: #241089
Fixed a typo I put in in the previous checkin.
Resolves #222918
Resolves: #312811
Fixed the brand and version mistakenly put in the previous check-in.
Resolves: #314851
Resolves: #196523
Resolves: #316281
Resolves: #304161
Resolves: #173873
Resolves: #193724
Resolves: #327091
Resolves: #188320
Resolves: #193724
Resolves #329951
Resolves: #336871
Resolves: #339031
Resolves: #188320
Resolves: #339791
Resolves: #193724
Resolves: #367671
Resolves: #383141
Resolves: #345671
Resolves: #371751
Resolves: #238649
Resolves: #316281
Resolves: #237040
Resolves: #229576
Resolves: #403351
Resolves: #231093
Resolves: #174776
Resolves: #403751
Resolves: #403751
Resolves: #428163
Resolves: 436397
Resolves: #428764
Resolves: #182621 (#443955)
Resolves: #230673
Resolves: #436400
Resolves: #436390
Resolves: #436388
Resolves: #436390
Resolves: #436837
Resolves: #436837
Resolves: #436837
Resolves: #436837 (comment #9)
Resolves: #436837
Resolves: #452328
Resolves: #437525
Resoves: #448831
Resolves: #450753
Resoves: #428929
Resolves: #447353
Resolves: #447353
Resolves: #436837
Resolves: #448831
Resolves: #456296
Resolves: #456752
Resolves: #428232
Resolves: #457156
Resolves: #457156
Resolves: #466702
reran autogen.sh (automake V1.9.6, autoconf V2.59)
Resolves: 207457
Resolves: 207457
Resolves: #468248
Resolves: #468248
Resolves: #468248
Resolves: 207457
Fixed typos in the HP-UX code: slapi_counter_get => slapi_counter_get_value
Fixing the build on Solaris (ldap_agent_bin-main.o)
Resolves: #207457
Resolves: #469243
Resolves: #469243
Resolves: #462922
Resolves: #469792
Resolves: #459302
Resolves: #466702
Resolves: #463774
Resolves: #207457
Resolves: #471138
Resolves: #471998
Resolves: #470084
Resolves: #472457
Resolves: #430172
Resolves: #472999
Resolves: #430993
Resolves: #469800
Resolves: #474248
Resolves: #474237
Resolves: #240512
Resolves: #474729
Resolves: 459433
Resolves: #447353
Resolves: #475338
Resolves: #475899
Resolves: #430568
Resolves: #475899
Resolves: #178248
Resolves: #438139
Resolves: #436830
Resolves: #464854
Resolves: #460613
Resolves: #469800
Resolves: #208076
Resolves: #483167
Resolves: #483366
Resolves: #483668
Resolves: #484149
Resolves: #484311
Resoves: #484157
Resolves: #485321
Resolves: #464651
Resolves: #476261
Resolves: #488856
Resolves: #476096
Resolves: #489763
Resolves: #489625
Resolves: #490027
Resolves: #476096
Resolves: #491215
Resolves: #489360
Resolves: #492562
Resolves: #475338
Resolves: #475338
Add Simple Paged Results
Use thread aware library for complex regex searches
Initialize smods in ldmb_back_modify
Compiler warnings and paged results on DSE
504383 PCRE breaks SASL Mapping
507460 Access log could mistakenly report notes=U for VLV searches
506137 ns-slapd hang while group aci performance testing
509269 Simple paged result crashes/hangs the server
509269 Simple paged result crashes/hangs the server
510147 clean up the replication log msg
513019 nsslapd-lookthroughlimit is not respected
Entry USN
513170 NULL search result does not return sort control
513172 Simple Paged Results does not respect nsslapd-sizelimit
Revert "513019 nsslapd-lookthroughlimit is not respected"
Apply SYNTAX_DN to Name And Optional UID
514770 remove per-entry response control for GER and Paged Results
GroupOfUniqueNames in template.ldif must have uniqueMember
513916 Server doesn't ignore paged control, if page size and server's estimate of total no of entries are same
509472 db2index all does not reindex all the db backends correctly
506786 Index maintenance mechanism causes wrong search results when
506786 Index maintenance mechanism causes wrong search results when
509472 db2index all does not reindex all the db backends correctly
Plugin Default Config Entry
516089 RFE: ldclt utility should support new dereferencing control searches
Add EntryUSN to the nsslapd-exclude-from-export list
518112 rhds 81 el53 64b ns-slapd seg fault
525007 ldif2db replaces existing modify/create name and timestamps
ldclt: -e randombinddnfromfile fails with LDAP_UNWILLING_TO_PERFORM (53)
544089 - Referential Integrity Plugin does not take into account the attribute
247413 - Incorrect error on multiple identical value add
560827 - Admin Server templates: DistinguishName validation fails
548535 - memory leak in attrcrypt
Fixing config_dir in DSUpdate.pm.in
Fixing a memory leak in repl5_protocol.c
Fixing a memory leak in dblayer.c
Fixing a memory leak in idl_new.c
Fixing a memory leak in dblayer.c
Fixing a memory leak in ldbm_attr.c
Initializing be_usn_counter in Slapi_Backend
Fixing a typo in entrywsi.c
Adding instancedir getter and setter to libglobs.c
Fixing a wrong comment in log.c
Adding DN syntax check API slapi_dn_syntax_check
Fixing error logs in modrdn.c
Check DN syntax in backend add, delete, modify and modrdn
Fixing a memory leak in sasl_map.c
563365 - Error handling problems in the backend functions
565987 - redhat-ds-base fails to build due to undefined struct
527848 - make sure db upgrade to 4.7 and later works correctly
539618 - Replication bulk import reports Invalid read/write
548115 - memory leak in schema reload
555970 - missing read lock in the combination of cos and nsview
539618 - Replication bulk import reports Invalid read/write
570667 - MMR: simultaneous total updates on the masters cause
199923 - subtree search fails to find items under a db
572649 - DS8.2 crashes on RHEL 4 (corresponding to bob, ber_2 test case)
573060 - DN normalizer: ESC HEX HEX is not normalized (
573896 - initializing subtree with invalid syntax crashes ns-slapd
515805 - Stop "initialize Database" crashes the server
548533 - memory leak in Repl_5_Inc_Protocol_new
Fixing a syntax error
Update to New DN Format
585905 - ACL with targattrfilters error crashes the server
574167 - An escaped space at the end of the RDN value is not
591336 - Implementing upgrade DN format tool
590931 - rhds81 import - hardcoded pages_limit for nsslapd-import-cache-autosize
A bug fix made in commit 142d7ada626173de4937330be6776fabbebe9f60
Another bug fix made in commit 142d7ada626173de4937330be6776fabbebe9f60
Yet another bug fix made in commit 142d7ada626173de4937330be6776fabbebe9f60
A bug fix made in commit a5a9949fd16c6d268f0f2676f8bdbb926dc43539
Additional fix for 591336 - Implementing upgrade DN format tool
592497 - rhds82 - nsslapd-syntaxcheck seem to be on by default, need off
593453 - Creating password policy with ns-newpolicy.pl on Replicated
593110 - backup-restore does not ALWAYS work
593899 - adding specific ACI causes very large mem allocate request
588867 - entryusn plugin fails on solaris
593899 - adding specific ACI causes very large mem allocate request
595893 - Base DN in SASL mapping is not normalized
511112 - Password history limited to 25 values
597375 - Deleting LDBM database causes backup/restore problem
605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
606920 - anonymous resource limit - nstimelimit -
612771 - RHDS 8.1/389 v1.2.5 accepts 2 identical entries with
612771 - RHDS 8.1/389 v1.2.5 accepts 2 identical entries with
616135 - Upgrade failure on Solaris :
612771 - RHDS 8.1/389 v1.2.5 accepts 2 identical entries with
619229 - Upgrading sub suffix under non-normalized suffix disappears
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Pete Rowley (8):
172683: Search filter does not work on physical entries within views
173375: Problems with schema matching rules
177444: duplicate password policy oids in root DSE
minor edits to remove references to cos in the example
Distributed numeric assignment plugin - initial check in
Add LDAPI
corrected copyright statement
fix defined out code to really be defined out
Rich Megginson (494):
Bug(s) fixed: 145179
remove references to ldapserver from makefiles; use BUILD_ROOT instead of MCOM_ROOT and NSROOT; BUILD_ROOT is now the ldapserver directory rather than its parent
Whoops. Checked in some private stuff I had to work around vsftpd problems.
Do not do the DIST step - we are not distributing this software built here
RPM packaging - parameterize the pkg root directory using INSTDIR
RPM packaging - does the old setup pre and post installation tasks
RPM packaging - the ldapserver.spec file and the builddsrpm.sh script to do the prep work
Derive ABS_INSTDIR directly from INSTDIR
RPM packaging - set the flag to build java files - use serverroot/setup/setup insetad of serverroot/setup
Bug: 147157
Bug(s) fixed: 147162
checkin first version of pam plugin
PAM pass through auth plugin support
added
added
Bug(s) fixed: 147585
Rename add_pwd_control to slapi_add_pwd_control
Fixed problem with declaration after executable code.
Do not build pam auth plugin on Windows
If USING_VSFTPD is defined, some hacks around pulling components via ftp are used.
fix Windows build issues
get rid of adminutil dependency on core DS
readding because otherwise Windows is horked
removed strlist
clean up sprintf usage and many other flawfinder issues; clean up compiler warnings on Linux; remove pam_passthru from DS 7.1
fix Windows build issues
fix Windows build - use local functions instead of NSPR - fix compiler warnings
fix Windows installer breakage - wrong argument to va_start - use fmt instead of s
upgrade to SVRCORE 4.0 - the open source version
This one is mostly strcpy/strcat checking, checking for null strings before strlen, removing some dead code, other odds and ends.
use prefix instead of hardcoded ldapserver
add link debugging for debug builds on linux
add support for instance creation using open source core DS components
use mtmalloc instead of SmartHeap on Solaris
When creating a script, if the destination directory does not exist, just print a notice and skip that script. This is to allow the open source instance creator to skip creating the repl monitor script in admin/admin which does not yet exist.
Fix snprintf into sizeof(char *) instead of actual buffer size
This files contents have been merged into internal_buildpaths.mk, components.mk, and internal_comp_deps.mk
was using wrong section
add ability to build from open source components
remove ns_usedb.mk
put sh_ in front of smartheap component name
Bug(s) fixed: 145179
Use v5.15 of ldapsdk
Bug(s) fixed: 152030
1) remove fortezza stuff
fixed spacing
Bug(s) fixed: 151567
Bug(s) fixed: 151721
I got rid of ldapserver.spec. Instead, the spec file will be created on the fly. The only parameter passed in is the flavor - redhat or fedora. Everything else comes from the brandver.dat file. PLATFORM is derived from BUILD_ARCH in the usual Makefile way. So we could easily support Solaris or whatever else. The Makefile change is to allow you to produce the .spec file without having to build everything else. The change to reltools/brandver.pl allows us to change only the named files rather than every file in the .dat file.
--macros seems not to work - using --define to define our macro on the command line
Bug(s) fixed: 147886
fix brandDirectory breakage - skip redhat-ds.spec when branding
Use setup -q to suppress tar output
Bug(s) fixed: 153686
Make RPM binary name .opt.rpm or .dbg.rpm depending on build flavor
make rpm name .flavor.rpm - flavor must be defined in rpmbuild
Bug(s) fixed: 145179
setup/setup was being installed as setup/setup/setup
Bug(s) fixed: 154064
Reviewed by Nathan (Thanks!)
Check for last version removal in preun - only run uninstall if removing the last version
Bug(s) fixed: 154235
Added more support for building from source, specifically support for
Bug(s) fixed: 154431
Bug(s) fixed: 153955
Bug(s) fixed: 155087
Fix Solaris open source build breakage - reviewed by Noriko
Change release to 2
Upgrade to ldapconsole 20050510 and ldap c sdk 5.16
Bug(s) fixed: 157377
Bump up ldapconsole version to 20050513
Bug(s) fixed: 157341
Change version of ad sync and nt4 sync to 0516
Correctly report in the repl agreement status attrs that the repl init failed when it failed due to attempting to do fractional replication to another master.
Only check the read only status of the consumer for the fractional case if the acquire process has been successful thus far.
remove full and optimize from the file names of the winsync components
Bug: 158250
Bug(s) fixed: 158235
Bug(s) fixed: 158330
Bug(s) fixed: 158368
bug 158368 - remove nt group type as well
Bug(s) fixed: 158549
Bug 160008
PAM is not thread safe. Therefore, we must put the code that accesses PAM
Bug(s) fixed: 165600
Bug(s) fixed: 165640
Bug(s) fixed: 165827
Bug(s) fixed: 151678
Bug(s) fixed: 166229
Bug(s) fixed: 165641
Bug(s) fixed: 167453
upgrade winsync to 20050912 for bug 159037 and upgrade directory console to 20050913 for bug 167761
Bug(s) fixed: 169663
also checkin fix for 170350 onto trunk
Bug(s) fixed: 171066
Bug(s) fixed: 171854
Bug(s) fixed: 171892
Bug(s) fixed: 172005
Bug(s) fixed: 172056
Bug(s) fixed: 166229, 166081
Bug(s) fixed: 172672
Bug(s) fixed: 172818
Reviewed by Nathan (Thanks!)
set defaults to build java code, and use java, ant, and perl from PATH for external builds
added a dependency on httpd
add jar files back to the main package - even though the gpl and apl are not generally compatible, they are compatible for this specific case
remove Requires for java - breaks non-RHEL platforms - we should either change the spec file to include the dependency only on RHEL, or just wait until gcj/classpath can run our stuff
Fix the problem with the Admin Server console - error opening the encryption tab. The solution is to chown the alias directory to the admin server uid so that the security CGI can create the key/cert dbs in that directory.
Fix two problems
The DS console Configuration Encryption tab was giving an error. The error was due to the security CGI not being able to read the ds key/cert db files. They were owned by root instead of the server uid because they were being created by NSS_Initialize which was being called before the server did the setuid.
Move ssl init on the secure socket into main with the rest of the nss/ssl init
Move NSS/SSL initialization after the setuid so that key/cert/other nss
1) Move the import, export, etc. (non network server mode) code to after the NSS/SSL init. For example, import needs to hash passwords, export of encrypted attrs needs encryption.
Cannot pass const strings into slapi_str2filter, since it can modify
Bug(s) fixed: 175053
Bug(s) fixed: 175098
Bump version from 1.0 to 1.0.1
add the console-ld-libpath.patch for bug 174981
need to patch the console in both upgrade installation and regular installation
the install is an upgrade if the %post argument is greater than 1, not greater than or equal to 1
Bug(s) fixed: 176302
Bug(s) fixed: 180515
Bug(s) fixed: 178479
Use NSS 3.11 and NSPR 4.6.1 - NSS 3.11 requires the new freebl lib at runtime,
Wan-Teh pointed out that the platform specific freebl libs are needed _instead of_ libfreebl3, not _in addition to_. So, set the list of platform specific freebl libs and add them to the list of libs to package.
Bug(s) fixed: 181587
The correct naming convention for RHEL is
Bug(s) fixed: 181776
1) Fix moz objdir name for generic linux x86_64
Reviewed by Nathan (Thanks!)
Don't attempt to package 32 bit NSS apps/libs with the 64 bit package on rhel/linux - assume everything is native 64 bit.
Change version to 1.0.2
Still need the console ld libpath patch for startconsole
Bug(s) fixed: 182613
Bug(s) fixed: 179135
Bug(s) fixed: 179137
Bug: 179810
Have to add back softokn3 to the link libs - dependent libs are linked directly against it and expect it to be present at link time.
Some DSGW programs must not be linked with SSL, including the LDAP ssl library. On RHEL3, this causes a linker error, but appears to be fine on other platforms. So, just use the LDAP_NOSSL_LINK macro for those programs, and use the LDAPLINK macro for the other programs.
added patch file for upgrading from 1.0.1 - fixes the use of admpw for basic auth
Added admserv-conf-admpw.patch to fix the use of admpw for basic auth in the actual config file
Bug(s) fixed: 179723
Make the build/pull work like the adminserver does with respect to console. Otherwise, dsbuild with recent code no longer works.
Bug(s) fixed: 186280
Bug(s) fixed: 186280
use slapi_entry_attr_get_bool instead of slapi_entry_attr_get_int for the fallback and secure config attrs
Bug(s) fixed: 205456
Bug: 205456
Bug: 205456
Bug: 205456
remove extraneous endif
Create core DS tarball for acceptance test
Bug: 205456
Bug(s) fixed: 206450
Bug: 206527
minor change to test commit email notification
use new 20060915 version of perldap
Bug: 206527
Bug(s) fixed: 206662
fix build breakage - use PERLDAP_BUILT_DIR as the location to download perl since the full DEP has two directory levels in it
update internal builds to use latest components
Bug(s) fixed: 202889:
Bug(s) fixed: 199321
Bug(s) fixed: 210075
Bug(s) fixed: 210120
Bug(s) fixed: 210220
Bug(s) fixed: 185364
Bug(s) fixed: 183903
Bug(s) fixed: 185780
For FDS 103 - When I changed the makefiles around for the earlier fix to enable rpmbuild,
Bug(s) fixed: 204623
Change the way ldapserver links with SASL. Rather than specifying a hard coded link path
enable pam_passthru for fedora ds builds
Bug(s) fixed: 211426
Bug(s) fixed: 213352
Bug(s) fixed: 213786
upgrade version to 1.0.4
Bug(s) fixed: 214243
1) Fedora Core 6 build fixes
Bug: 214733
Bug: 214733
Resolves: bug 215669
Resolves: bug 214851
Resolves: bug 215995
Bug(s) fixed: 216758
Bug: 210947
Resolves: bug 217403
I noticed a problem with the autoconf style builds that shows up on 64 bit - some of the scripts had /usr/lib/mozldap6 in the PATH, and some had /usr/lib64/mozldap6. All of them should have lib64. What was happening is that make would create some script templates from the corresponding template .in file, and some it would just copy over (those that have both a template-script and a template-script.in). The template-script files have hardcoded /usr/lib/ - it requires the conversion from template-script.in to template-script to substitute /usr/lib64/ instead.
Resolves: bug 218076
Resolves: bug 222398
Resolves: bug 224291
Resolves: bug 224606
Resolves: bug 224672
Resolves: bug 147886
Resolves: bug 224606
fix build problems on Solaris; minor m4 cleanup
fix licensing in sasl.m4
Resolves: bug 227452
esolves: bug 227618
Resolves: bug 227771
Resolves: bug 160235
Resolves: bug 227771
make sure .in files are newer than corresponding template script file
Remove some bash-isms that were causing problems on RHEL-4
Resolves: bug 228334
change version to 1.1.0a1
Resolves: bug 229286
Resolves: bug 229691
Need to terminate dna plugin config entry with a newline
Resolves: bug 229825
Resolves: bug 229077
Resolves: bug 230498
Resolves: bug 230808
Resolves: bug 231507
Resolves: bug 232377
Resolves: bug 232684
Resolves: bug 231905
Resolves: bug 232684
Bump version to 1.1.0 alpha 3 (1.1.0a3)
Resolves: bug 233410
Resolves: bug 235743
Resolves: bug 239764
Resolves: bug 238563
Resolves: bug 239765
Resolves: bug 243205
Resolves: bug 237356
Resolves: bug 237356
Resolves: bug 243639
Resolves: bug 237356
Resolves: bug 237356
Resolves: bug 237356
Resolves: bug 237356
Resolves: bug 237356
Resolves: bug 237356
remove obsolete files
Resolves: bug 245815
Added nsslapd-ldifdir and nsslapd-bakdir
Resolves: bug 246683
Resolves: bug 245815
Resolves: bug 248145
Resolves: bug 248145
Resolves: bug 248272
Resolves: bug 248145
Resolves: bug 248820
move setup-ds.pl and migrate-ds.pl to sbindir
removed more obsolete files
forgot to tell Makefile.am about removed obsolete files
Resolves: bug 249470
Resolves: bug 249633
Resolves: bug 250535
Resolves: bug 237356
Resolves: bug 251227
The arguments to memset were in the wrong order. This code is only used on Windows.
forgot to commit the autotool generated files
revert back to using autoconf 2.59 - 2.61 causes the -avoid-version flag to be ignored, which causes rpm packaging errors
Resolves: bug 251227
Resolves: bug 251227
using ldap also pulls in nss and nspr, so we have to add those - also, put those first in the link line, so that the build finds the dirsec versions of those components and not the mozilla/seamonkey ones in libdir
Resolves: bug 251549
Resolves: bug 252190
Resolves: bug 252190
Resolves: bug 253047
Resolves: bug 252263
Resolves: bug 260341
Resolves: bug 262021
Resolves: bug 276741
Resolves: bug 281631
Resolves: bug 244475
Resolves: bug 282741
Resolves: bug 283041
try to fix build breakage on RHEL5
Resolves: bug 288451
Resolves: bug 288451
Resolves: bug 288451
Resolves: bug 249366
Resolves: bug 262021
Resolves: bug 301431
Resolves: bug 262021
Resolves: bug 301811
Resolves: bug 249366
Resolves: bug 282911
Resolves: bug 249366
Resolves: bug 249366
Resolves: bug 248169
Resolves: bug 190220
Resolves: bug 305121
Resolves: bug 244475
migration starts instances now
Resolves: bug 317651
Resolves: bug 165761
remove obsolete schema
Resolves: bug 288291
Resolves: bug 330121
Resolves: bug 330141
Resolves: bug 185602
Resolves: bug 333291
Resolves: bug 250179
Resolves: bug 250179
Have to free instdir not instname
Resolves: bug 232910
Resolves: bug 297221
Resolves: bug 338991
Resolves: bug 339041
Resolves: bug 336881
Resolves: bug 297221
Resolves: bug 340211
Resolves: bug 232910
Resolves: bug 340361
Resolves: bug 232910
Resolves: bug 345711
Resolves: bug 345711
Resolves: Bug 345711
Resolves: bug 353071
bump source code version to 1.1.0 beta 2
Resolves: bug 339041
Resolves: bug 367721
Resolves: bug 345711
Resolves: bug 197997
Resolves: bug 388021
Resolves: bug 371771
Resolves: bug 400421
Reviewed by: nhosoi (Thanks!)
Resolves: bug 416721
Resolves: bug 424381
Resolves: bug 424381
Resolves: bug 425861
Resolves: bug 425849
bump version to 1.1.0 for Fedora DS 1.1 release
Resolves bug 434403
merge in autotool file fixes for gcc43 with the memberof autotool file additions
Resolves: bug 439829
bump version to 1.1.1 - add define for new public slapi task interface
have to use *be instead of be in call to be_isdeleted
Resolves: bug 442170
Resolves: bug 450973
Resolves: bug 233642
Resolves: bug 431103
Resolves: bug 452323
Resolves: bug 435774
Resolves: bug 440899
Reviewed by: nkinder (Thanks!)
Resolves: bug 428765
Resolves: bug 447614
Resolves: bug 447353
Resolves: bug 457846
Resolves: bug 447353
Resolves: bug 457846
Resolves: bug 458171
Resolves: bug 457156
Resolves: bug 458506
Resolves: bug 458507
Resolves: bug 458510
Resolves: bug 458668
Resolves: bug 458675
Resolves: bug 458677
Resolves: bug 458666
a couple of enhancements that make it easier to run the server under various debugging tools
Resolves: bug 457846
Resolves: bug 460381
Resolves: bug 459850
Resolves: bug 457846
bump version to 1.1.3
Resolves: bug 457846
Bug Description: Need to address 64-bit compiler warnings - part 1
Resolves: bug 454030
Resolves: bug 454030, bug 463991
fix inttypes build breakage on HP-UX
Resolves: bug 455026 bug 441026
Resolves: bug 454030
fix typo
Resolves: bug 469261
Resolves: bug 469243
Resolves: bug 469261
Resolves: bug 469261
Resolves: bug 469261
Resolves: bug 469261
Resolves: bug 469261
Resolves: bug 454030
Resolves: bug 476127
Resolves: bug 476891
Resolves: bug 476891
Resolves: bug 479077
Resolves: bug 478656
Resolves: bug 471068
Resolves: bug 204966
Resolves: bug 479202
Resolves: bug 479313
Resolves: bug 222055
Resolves: bug 202134
Resolves: bug 179956
Resolves: bug 481223
Resolves: bug 479253
Resolves: bug 482909
Resolves: bug 480642
Resolves: bug 483256
Resolves: bug 483254
Resolves: bug 431607
Resolves: bug 481052
Resolves: bug 477009
Resolves: bug 485694
Resolves: bug 486191
Resolves: bug 486191
Resolves: bug 468474
Resolves: bug 486474
Resolves: bug 486495
Resolves: bug 480869
Resolves: bug 450575
Resolves: bug 487425
Resolves: bug 488866
Resolves: bug 488814
Resolves: bug 488866
Resolves: bug 488866
Resolves: bug 480869
Resolves: bug 489360
Resolves: bug 479254
bump version to 1.2.0
add back support for linux ppc
re-enable ppc support
Rename to 389
bump version to 1.2.1 - added .gitignore
fix rpmlint issues - config files and perl modules should not be executable
Fix various compiler warnings
Resolves: bug 501490 - Error creating view on FDS 1.2
Added full text of GPLv2 license
Implement SASL I/O as an NSPR I/O layer
initial commit of io function improvements
OpenLDAP support
Clean up compiler warnings
Reduce noise reported by valgrind
Fix attrcrypt usage of nsSymmetricKey
Fix unsalted password comparisons
Dereference support
Change default branding to 389 - remove lite code
fix pcre build issues
Fix usage of pre-hashed salted passwords
bump version to 1.2.2
Retry SASL writes if buffer not fully sent
https://bugzilla.redhat.com/show_bug.cgi?id=487425
Fails to start if attrcrypt can't unwrap keys
Clean up build warnings
Add update code - make setup-ds.pl -u do updates
389-ds-base/glibmm24: conflicting perl provides
Start script hardcodes file permissions mask to 077 (600), so the nsslapd-*log-mode configuration attributes don't work
logs created at startup can get wrong file mode
Should not attempt to pop SASL IO layer if not using SASL IO
empty principal name used when using server to server sasl for db chaining
MODIFY/replace with empty values does not ignore missing or unknown attributes
Bitwise Plugin: Bitwise filter doesn't return except the first entry if its multi-valued
SASL IO sometimes loops with "error: would block"
Updated man page with the new update options and documentation.
more updates - add missing rundir - remove ldapiautodnsuffix
bump version to 1.2.4
Implement support for versioning and release engineering procedures - version 1.2.5.a1
Add Named Pipe Log Script, plugins, man page
bump version to 1.2.5.rc1
bump version to 1.2.5.rc2
bump version to 1.2.5.rc3
Password replication from 389DS to AD fails
version 1.2.5.rc4
Workaround bogus base64 encoded passwords that end in newline
bump version to 1.2.6.a1
rhds81 hub with 71 master - err=32 on replica base search during replication
Bug 519459 - Semi-hardcoded include and lib directories in db.m4
several spelling errors
Net::LDAP password modify extop breaks; msgid in response is 0xFF
Bug 543080 - Bitwise plugin fails to return the exact matched entries for Bitwise search filter
Bug 537466 - nsslapd-distribution-plugin should not require plugin name to begin with "lib"
fix memory leak in attr replace when replacement fails
Bug 568196 - Install DS8.2 on Solaris fails
Bug 568196 - Install DS8.2 on Solaris fails - part 2
389 DS segfaults on libsyntax-plugin.so - part 1
389 DS segfaults on libsyntax-plugin.so - part 2
fix various memory leaks
Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external
Bug 570905 - postalAddress syntax should allow empty lines (should allow $$)
Bug 572677 - Memory leak in searches including GER control
Bug 571677 - Busy replica on consumers when directly deleting a replication conflict
Bug 576074 - search filters with parentheses fail
Bug 567429 - slapd didn't close connection and get into CLOSE_WAIT state
Bug 578167 - repl. of mod/replace deletes multi-valued attrs
Bug 561575 - setup-ds-admin fails to supply nsds5ReplicaName when configuring via ConfigFile
Bug 577384 - Remove-ds.pl script throws "sh: STARTPIDFILE.*=: not found" error on Solaris 9
Bug 578229 - Blocked sync afer UID or ntUserDomainId change
Bug 572162 - the string "|*" within a search filter on a non-indexed attribute returns all elements.
Bug 576644 - segfault while multimaster replication (paired node won't find deleted entries)
Bug 583167 - remove-ds.pl gives error Couldn't open /etc/sysconfig/dirsrv-$INSTANCE
Fix too few args for format warning in acllas
Bug 591685 - Server instances Fail to Start on Solaris due to Library Path and pcre
Bug 593392 - setup-ds-admin.pl -k creates world readable file
Bug 595874 - 99user.ldif getting overpopulated
Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
Bug 603942 - null deref in _ger_parse_control() for subjectdn
Bug 617013 - repl-monitor.pl use cpu upto 90%
Rob Crittenden (7):
149510
149510
149510
149510
156273
156273
Changes so DS can be built with gcc on Solaris.
Thomas Lackey (13):
Replace missing makefile referenced by SunOS5.8.mk and SunOS5.9.mk. This file is needed to build on Solaris.
Add new sync wizard help pages. Alter text of repl4 (summary) wizard page.
Pickup new doc files.
Allow the migration scripts to recognize the Red Hat-branded server.
Add makefile and component information to build the Apache DS for User Sync
Build PassSync on Windows.
Fix NTDS maven location.
Add WiX component information.
Add Wix dependency.
Add installer icons.
Modify NTDS and PassSync to build in the 'built' directory.
Use WinSync components from sbc.
Fix bug 155276, crash if config has changed since restore.
Yi Zhang (2):
459181 - Add attreplacefile option to ldclt
516089 - add dereference search option into ldclt
cvsadm (1):
Moving NSCP Directory Server from DirectoryBranch to TRUNK, initial drop. (foxworth)
svrbld (4):
SNMP subagent fixes for HP-UX compiler errors
New RPM packaging options
Use Linux rpm build for longduration test.
Fixed object build path: convert relative path to absolute path (tlackey)
unknown (1):
This commit was manufactured by cvs2git to create branch
13 years, 4 months
ldap/admin
by Noriko Hosoi
ldap/admin/src/scripts/80upgradednformat.pl | 35 ++++++++++++++++++++++++++++
1 file changed, 35 insertions(+)
New commits:
commit 13b9aff869a6220b5f864b3e23c3eb396399064c
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Tue Oct 26 13:25:42 2010 -0700
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
https://bugzilla.redhat.com/show_bug.cgi?id=644608
Description: Adding the ancestorid fix code to ##upgradednformat.pl.
The upgrade utility upgradednformat in the previous version could
have broken the ancestorid index file. The ID list in the updated
index value may not be in the ascendant order. This patch checks
the ID order in the ID lists. Once it detects the disorder, it
reindexes the corrupted ancestorid.
diff --git a/ldap/admin/src/scripts/80upgradednformat.pl b/ldap/admin/src/scripts/80upgradednformat.pl
index cb44b85..1bcebba 100644
--- a/ldap/admin/src/scripts/80upgradednformat.pl
+++ b/ldap/admin/src/scripts/80upgradednformat.pl
@@ -122,6 +122,7 @@ sub runinst {
# -1 -- error
my $escapes = system("$upgradednformat -n $backend -a $dbinstdir -N");
if (0 == $escapes) {
+ # need to upgrade dn format
my $rc = 0;
if (system("cd $pdbdir; tar cf - db/DBVERSION | (cd $dbinstdir; tar xf -)") ||
@@ -161,6 +162,40 @@ sub runinst {
rmdir("$dbinstdir/dnupgrade");
return ("error_cant_convert_db", $backend, $rc);
}
+ } else {
+ # already upgraded or an error occurred.
+ # check ancestorid to see if it has not-sorted ID list or not.
+ my $ancestorid = $dbinstdir . "/ancestorid.db4";
+ if (-e "$ancestorid") {
+ my $disorder = 0;
+ open(ANCESTOR, "/usr/bin/dbscan -f $ancestorid -r |");
+ while (<ANCESTOR>) {
+ if (!/^=[0-9]*/) {
+ chomp($_);
+ my @IDs = split(/ | /, $_);
+ # print "ID count: $#IDs\n";
+ my $lasti = $#IDs;
+ for (my $i = 1; $i < $lasti; $i++) {
+ if ($IDs[$i] >= $IDs[$i + 1]) {
+ $disorder = 1;
+ last;
+ }
+ }
+ # print "Result: $disorder \n";
+ if ($disorder) {
+ last;
+ }
+ }
+ }
+ close(ANCESTOR);
+
+ # ancestorid index is in disorder; need to reindex it.
+ if ($disorder) {
+ print "The ancestorid index in $backend is in disorder; Reindexing $ancestorid.\n";
+ my $reindex = $instancedir . "/db2index";
+ my $rc = system("$reindex -n $backend -t ancestorid");
+ }
+ }
}
}
13 years, 4 months
Branch 'Directory_Server_8_2_Branch' - ldap/admin
by Noriko Hosoi
ldap/admin/src/scripts/70upgradednformat.pl | 35 ++++++++++++++++++++++++++++
1 file changed, 35 insertions(+)
New commits:
commit 1176d3fe353c629c00652ef5a2a90f44f51efbc2
Author: Noriko Hosoi <nhosoi(a)kiki-rhel5.usersys.redhat.com>
Date: Tue Oct 26 12:29:28 2010 -0700
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
https://bugzilla.redhat.com/show_bug.cgi?id=644608
Description: Adding the ancestorid fix code to ##upgradednformat.pl.
The upgrade utility upgradednformat in the previous version could
have broken the ancestorid index file. The ID list in the updated
index value may not be in the ascendant order. This patch checks
the ID order in the ID lists. Once it detects the disorder, it
reindexes the corrupted ancestorid.
diff --git a/ldap/admin/src/scripts/70upgradednformat.pl b/ldap/admin/src/scripts/70upgradednformat.pl
index 8364bdd..16d18ec 100644
--- a/ldap/admin/src/scripts/70upgradednformat.pl
+++ b/ldap/admin/src/scripts/70upgradednformat.pl
@@ -106,6 +106,7 @@ sub runinst {
# -1 -- error
my $escapes = system("$upgradednformat -n $backend -a $dbinstdir -N");
if (0 == $escapes) {
+ # need to upgrade dn format
my $rc = 0;
if (system("cd $pdbdir; tar cf - db/DBVERSION | (cd $dbinstdir; tar xf -)") ||
@@ -145,6 +146,40 @@ sub runinst {
rmdir("$dbinstdir/dnupgrade");
return ("error_cant_convert_db", $backend, $rc);
}
+ } else {
+ # already upgraded or an error occurred.
+ # check ancestorid to see if it has not-sorted ID list or not.
+ my $ancestorid = $dbinstdir . "/ancestorid.db4";
+ if (-e "$ancestorid") {
+ my $disorder = 0;
+ open(ANCESTOR, "/usr/bin/dbscan -f $ancestorid -r |");
+ while (<ANCESTOR>) {
+ if (!/^=[0-9]*/) {
+ chomp($_);
+ my @IDs = split(/ | /, $_);
+ # print "ID count: $#IDs\n";
+ my $lasti = $#IDs;
+ for (my $i = 1; $i < $lasti; $i++) {
+ if ($IDs[$i] >= $IDs[$i + 1]) {
+ $disorder = 1;
+ last;
+ }
+ }
+ # print "Result: $disorder \n";
+ if ($disorder) {
+ last;
+ }
+ }
+ }
+ close(ANCESTOR);
+
+ # ancestorid index is in disorder; need to reindex it.
+ if ($disorder) {
+ print "The ancestorid index in $backend is in disorder; Reindexing $ancestorid.\n";
+ my $reindex = $instancedir . "/db2index";
+ my $rc = system("$reindex -n $backend -t ancestorid");
+ }
+ }
}
}
13 years, 4 months
VERSION.sh
by Richard Allen Megginson
VERSION.sh | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit f16c3c3d695e1ce24f0c2e897f4f609891851211
Author: Rich Megginson <rmeggins(a)redhat.com>
Date: Tue Oct 26 11:54:24 2010 -0600
bump version to 1.1.12.a3
diff --git a/VERSION.sh b/VERSION.sh
index 13dd113..b600f3e 100644
--- a/VERSION.sh
+++ b/VERSION.sh
@@ -15,7 +15,7 @@ VERSION_MAINT=12
# if this is a PRERELEASE, set VERSION_PREREL
# otherwise, comment it out
# be sure to include the dot prefix in the prerel
-VERSION_PREREL=.a2
+VERSION_PREREL=.a3
# NOTES on VERSION_PREREL
# use aN for an alpha release e.g. a1, a2, etc.
# use rcN for a release candidate e.g. rc1, rc2, etc.
13 years, 4 months