ldap/servers/slapd/ldaputil.c | 12 +++++++++++-
1 file changed, 11 insertions(+), 1 deletion(-)
New commits:
commit 8c17df640eda4ef5b8f15b2f01c8b169db73f7a0
Author: William Brown <firstyear(a)redhat.com>
Date: Thu Nov 19 14:16:31 2015 +1000
Ticket 48351 - Fix buffer overflow error when reading url with len 0
https://fedorahosted.org/389/ticket/48351
Bug Description: In ldaputil.c it's possible to have url_to_use with a len of 0
This means we are reading from an undefined area of memory.
Fix Description: Check len before the smprintf, and if 0, then provide a
a default of "/" which matches the theoretical behaviour of the format. We also
have a stronger check to prevent NULL from being passed as a URL to validate.
Author: wibrown
Review by: nhosoi, mreynolds (Thanks!)
diff --git a/ldap/servers/slapd/ldaputil.c b/ldap/servers/slapd/ldaputil.c
index 8289dd7..9281e20 100644
--- a/ldap/servers/slapd/ldaputil.c
+++ b/ldap/servers/slapd/ldaputil.c
@@ -256,6 +256,10 @@ slapi_ldap_url_parse(const char *url, LDAPURLDesc **ludpp, int require_dn, int *
PR_ASSERT(url);
PR_ASSERT(ludpp);
int rc;
+ /* This blocks NULL getting to strlen via url_to_use later in the function. */
+ if (url == NULL) {
+ return LDAP_PARAM_ERROR;
+ }
const char *url_to_use = url;
#if defined(USE_OPENLDAP)
char *urlescaped = NULL;
@@ -339,7 +343,13 @@ slapi_ldap_url_parse(const char *url, LDAPURLDesc **ludpp, int require_dn, int *
as the DN (adding a trailing / first if needed) and try to parse
again
*/
- char *urlcopy = slapi_ch_smprintf("%s%s%s", url_to_use, (url_to_use[len-1] == '/' ? "" : "/"), "");
+ char *urlcopy;
+ if (len > 0) {
+ urlcopy = slapi_ch_smprintf("%s%s%s", url_to_use, (url_to_use[len-1] == '/' ? "" : "/"), "");
+ } else {
+ /* When len == 0, this is effectively what we create ... */
+ urlcopy = slapi_ch_smprintf("/");
+ }
if (*ludpp) {
ldap_free_urldesc(*ludpp); /* free the old one, if any */
}
1
0
Makefile.am | 7 ++++--
Makefile.in | 10 ++++++---
aclocal.m4 | 37 +++++++++++++++++++++++++++++++++
configure | 65 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++-
configure.ac | 30 ++++++++++++++++++++++++++-
5 files changed, 142 insertions(+), 7 deletions(-)
New commits:
commit 284b16779b2840681ad52c7e9c9a4157a020245d
Author: William Brown <firstyear(a)redhat.com>
Date: Thu Nov 12 15:32:51 2015 +1000
Ticket 48350 - configure.ac add options for debbuging and security analysis / hardening.
https://fedorahosted.org/389/ticket/48350
Bug Description: Improve options for debugging and gcc security options.
Fix Description:
* We add -g3 to --enable-debug
* Add a new option, --enable-gcc-security that enables a number of strict
protections. These options are to match the options in rpm-build so that we
can test like-for-like options.
* Add a new option, --enable-asan. This enables GCC's address sanitization
checker. This is NOT for production, but for development and debugging.
Author: wibrown
Thanks: dblack(a)atlassian.com, for putting me onto GCC's address sanitization,
and for discussing secure development in general.
Review by: mreynolds, nhosoi (Thanks!)
diff --git a/Makefile.am b/Makefile.am
index 12a941b..bca6489 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -11,6 +11,8 @@ QUOTE := $(NULLSTRING)"# a double quote"
BUILDNUM := $(shell perl $(srcdir)/buildnum.pl)
NQBUILDNUM := $(subst \,,$(subst $(QUOTE),,$(BUILDNUM)))
DEBUG_DEFINES = @debug_defs@
+GCCSEC_DEFINES = @gccsec_defs@
+ASAN_DEFINES = @asan_defs@
# the -U undefines these symbols - should use the corresponding DS_ ones instead - see configure.ac
DS_DEFINES = -DBUILD_NUM=$(BUILDNUM) -DVENDOR="\"$(vendor)\"" -DBRAND="\"$(brand)\"" -DCAPBRAND="\"$(capbrand)\"" \
-UPACKAGE_VERSION -UPACKAGE_TARNAME -UPACKAGE_STRING -UPACKAGE_BUGREPORT
@@ -38,13 +40,14 @@ PATH_DEFINES = -DLOCALSTATEDIR="\"$(localstatedir)\"" -DSYSCONFDIR="\"$(sysconfd
-DDATADIR="\"$(datadir)\"" -DDOCDIR="\"$(docdir)\"" \
-DSBINDIR="\"$(sbindir)\"" -DPLUGINDIR="\"$(serverplugindir)\"" -DTEMPLATEDIR="\"$(sampledatadir)\""
-AM_CPPFLAGS = $(DEBUG_DEFINES) $(DS_DEFINES) $(DS_INCLUDES) $(PATH_DEFINES)
+AM_CPPFLAGS = $(DEBUG_DEFINES) $(GCCSEC_DEFINES) $(ASAN_DEFINES) $(DS_DEFINES) $(DS_INCLUDES) $(PATH_DEFINES)
PLUGIN_CPPFLAGS = $(AM_CPPFLAGS) @openldap_inc@ @ldapsdk_inc@ @nss_inc@ @nspr_inc@
# We need to make sure that libpthread is linked before libc on HP-UX.
if HPUX
AM_LDFLAGS = -lpthread
-#else
+else
#AM_LDFLAGS = -Wl,-z,defs
+AM_LDFLAGS = $(ASAN_DEFINES)
endif
#------------------------
diff --git a/Makefile.in b/Makefile.in
index d02c686..c5637ab 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -1370,6 +1370,7 @@ am__leading_dot = @am__leading_dot@
am__quote = @am__quote@
am__tar = @am__tar@
am__untar = @am__untar@
+asan_defs = @asan_defs@
bindir = @bindir@
brand = @brand@
build = @build@
@@ -1398,6 +1399,7 @@ defaultuser = @defaultuser@
docdir = @docdir@
dvidir = @dvidir@
exec_prefix = @exec_prefix@
+gccsec_defs = @gccsec_defs@
host = @host@
host_alias = @host_alias@
host_cpu = @host_cpu@
@@ -1506,6 +1508,8 @@ QUOTE := $(NULLSTRING)"# a double quote"
BUILDNUM := $(shell perl $(srcdir)/buildnum.pl)
NQBUILDNUM := $(subst \,,$(subst $(QUOTE),,$(BUILDNUM)))
DEBUG_DEFINES = @debug_defs@
+GCCSEC_DEFINES = @gccsec_defs@
+ASAN_DEFINES = @asan_defs@
# the -U undefines these symbols - should use the corresponding DS_ ones instead - see configure.ac
DS_DEFINES = -DBUILD_NUM=$(BUILDNUM) -DVENDOR="\"$(vendor)\"" -DBRAND="\"$(brand)\"" -DCAPBRAND="\"$(capbrand)\"" \
-UPACKAGE_VERSION -UPACKAGE_TARNAME -UPACKAGE_STRING -UPACKAGE_BUGREPORT
@@ -1531,12 +1535,12 @@ PATH_DEFINES = -DLOCALSTATEDIR="\"$(localstatedir)\"" -DSYSCONFDIR="\"$(sysconfd
-DDATADIR="\"$(datadir)\"" -DDOCDIR="\"$(docdir)\"" \
-DSBINDIR="\"$(sbindir)\"" -DPLUGINDIR="\"$(serverplugindir)\"" -DTEMPLATEDIR="\"$(sampledatadir)\""
-AM_CPPFLAGS = $(DEBUG_DEFINES) $(DS_DEFINES) $(DS_INCLUDES) $(PATH_DEFINES)
+AM_CPPFLAGS = $(DEBUG_DEFINES) $(GCCSEC_DEFINES) $(ASAN_DEFINES) $(DS_DEFINES) $(DS_INCLUDES) $(PATH_DEFINES)
PLUGIN_CPPFLAGS = $(AM_CPPFLAGS) @openldap_inc@ @ldapsdk_inc@ @nss_inc@ @nspr_inc@
+#AM_LDFLAGS = -Wl,-z,defs
+@HPUX_FALSE@AM_LDFLAGS = $(ASAN_DEFINES)
# We need to make sure that libpthread is linked before libc on HP-UX.
@HPUX_TRUE@AM_LDFLAGS = -lpthread
-#else
-#AM_LDFLAGS = -Wl,-z,defs
#------------------------
# Linker Flags
diff --git a/aclocal.m4 b/aclocal.m4
index 25206b5..5b32a97 100644
--- a/aclocal.m4
+++ b/aclocal.m4
@@ -329,6 +329,43 @@ AC_PREREQ([2.50])dnl
am_aux_dir=`cd $ac_aux_dir && pwd`
])
+# AM_COND_IF -*- Autoconf -*-
+
+# Copyright (C) 2008-2013 Free Software Foundation, Inc.
+#
+# This file is free software; the Free Software Foundation
+# gives unlimited permission to copy and/or distribute it,
+# with or without modifications, as long as this notice is preserved.
+
+# _AM_COND_IF
+# _AM_COND_ELSE
+# _AM_COND_ENDIF
+# --------------
+# These macros are only used for tracing.
+m4_define([_AM_COND_IF])
+m4_define([_AM_COND_ELSE])
+m4_define([_AM_COND_ENDIF])
+
+# AM_COND_IF(COND, [IF-TRUE], [IF-FALSE])
+# ---------------------------------------
+# If the shell condition COND is true, execute IF-TRUE, otherwise execute
+# IF-FALSE. Allow automake to learn about conditional instantiating macros
+# (the AC_CONFIG_FOOS).
+AC_DEFUN([AM_COND_IF],
+[m4_ifndef([_AM_COND_VALUE_$1],
+ [m4_fatal([$0: no such condition "$1"])])dnl
+_AM_COND_IF([$1])dnl
+if test -z "$$1_TRUE"; then :
+ m4_n([$2])[]dnl
+m4_ifval([$3],
+[_AM_COND_ELSE([$1])dnl
+else
+ $3
+])dnl
+_AM_COND_ENDIF([$1])dnl
+fi[]dnl
+])
+
# AM_CONDITIONAL -*- Autoconf -*-
# Copyright (C) 1997-2013 Free Software Foundation, Inc.
diff --git a/configure b/configure
index d4219e8..e043593 100755
--- a/configure
+++ b/configure
@@ -763,6 +763,10 @@ enable_pam_passthru_FALSE
enable_pam_passthru_TRUE
BUNDLE_FALSE
BUNDLE_TRUE
+gccsec_defs
+RPM_HARDEND_CC_FALSE
+RPM_HARDEND_CC_TRUE
+asan_defs
debug_defs
LIBOBJS
CXXCPP
@@ -909,6 +913,8 @@ with_gnu_ld
with_sysroot
enable_libtool_lock
enable_debug
+enable_asan
+enable_gcc_security
enable_bundle
enable_pam_passthru
enable_dna
@@ -1619,6 +1625,8 @@ Optional Features:
optimize for fast installation [default=yes]
--disable-libtool-lock avoid locking (might break parallel builds)
--enable-debug Enable debug features (default: no)
+ --enable-asan Enable gcc address sanitizer options (default: no)
+ --enable-gcc-security Enable gcc secure compilation options (default: no)
--enable-bundle Enable bundled dependencies (default: no)
--enable-pam-passthru enable the PAM passthrough auth plugin (default:
yes)
@@ -17677,7 +17685,7 @@ if test "${enable_debug+set}" = set; then :
enableval=$enable_debug;
{ $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
$as_echo "yes" >&6; }
- debug_defs="-DDEBUG -DMCC_DEBUG"
+ debug_defs="-g3 -DDEBUG -DMCC_DEBUG"
else
@@ -17689,6 +17697,57 @@ fi
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for --enable-asan" >&5
+$as_echo_n "checking for --enable-asan... " >&6; }
+# Check whether --enable-asan was given.
+if test "${enable_asan+set}" = set; then :
+ enableval=$enable_asan;
+ { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+ asan_defs="-fsanitize=address -fno-omit-frame-pointer"
+
+else
+
+ { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+ asan_defs=""
+
+fi
+
+
+
+ if test -f /usr/lib/rpm/redhat/redhat-hardened-cc1; then
+ RPM_HARDEND_CC_TRUE=
+ RPM_HARDEND_CC_FALSE='#'
+else
+ RPM_HARDEND_CC_TRUE='#'
+ RPM_HARDEND_CC_FALSE=
+fi
+
+{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for --enable-gcc-security" >&5
+$as_echo_n "checking for --enable-gcc-security... " >&6; }
+# Check whether --enable-gcc-security was given.
+if test "${enable_gcc_security+set}" = set; then :
+ enableval=$enable_gcc_security;
+ { $as_echo "$as_me:${as_lineno-$LINENO}: result: yes" >&5
+$as_echo "yes" >&6; }
+ if test -z "$RPM_HARDEND_CC_TRUE"; then :
+ gccsec_defs="-Wall -Wp,-D_FORITY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 "
+else
+ gccsec_defs="-Wall -Wp,-D_FORITY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches"
+
+fi
+
+else
+
+ { $as_echo "$as_me:${as_lineno-$LINENO}: result: no" >&5
+$as_echo "no" >&6; }
+ gccsec_defs=""
+
+fi
+
+
+
# Used for legacy style packaging where we bundle all of the dependencies.
{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for --enable-bundle" >&5
$as_echo_n "checking for --enable-bundle... " >&6; }
@@ -21560,6 +21619,10 @@ if test -z "${am__fastdepCCAS_TRUE}" && test -z "${am__fastdepCCAS_FALSE}"; then
as_fn_error $? "conditional \"am__fastdepCCAS\" was never defined.
Usually this means the macro was only invoked conditionally." "$LINENO" 5
fi
+if test -z "${RPM_HARDEND_CC_TRUE}" && test -z "${RPM_HARDEND_CC_FALSE}"; then
+ as_fn_error $? "conditional \"RPM_HARDEND_CC\" was never defined.
+Usually this means the macro was only invoked conditionally." "$LINENO" 5
+fi
if test -z "${BUNDLE_TRUE}" && test -z "${BUNDLE_FALSE}"; then
as_fn_error $? "conditional \"BUNDLE\" was never defined.
Usually this means the macro was only invoked conditionally." "$LINENO" 5
diff --git a/configure.ac b/configure.ac
index f683b1c..468384c 100644
--- a/configure.ac
+++ b/configure.ac
@@ -69,7 +69,7 @@ AC_MSG_CHECKING(for --enable-debug)
AC_ARG_ENABLE(debug, AS_HELP_STRING([--enable-debug], [Enable debug features (default: no)]),
[
AC_MSG_RESULT(yes)
- debug_defs="-DDEBUG -DMCC_DEBUG"
+ debug_defs="-g3 -DDEBUG -DMCC_DEBUG"
],
[
AC_MSG_RESULT(no)
@@ -77,6 +77,34 @@ AC_ARG_ENABLE(debug, AS_HELP_STRING([--enable-debug], [Enable debug features (de
])
AC_SUBST([debug_defs])
+AC_MSG_CHECKING(for --enable-asan)
+AC_ARG_ENABLE(asan, AS_HELP_STRING([--enable-asan], [Enable gcc address sanitizer options (default: no)]),
+[
+ AC_MSG_RESULT(yes)
+ asan_defs="-fsanitize=address -fno-omit-frame-pointer"
+],
+[
+ AC_MSG_RESULT(no)
+ asan_defs=""
+])
+AC_SUBST([asan_defs])
+
+AM_CONDITIONAL([RPM_HARDEND_CC], [test -f /usr/lib/rpm/redhat/redhat-hardened-cc1])
+AC_MSG_CHECKING(for --enable-gcc-security)
+AC_ARG_ENABLE(gcc-security, AS_HELP_STRING([--enable-gcc-security], [Enable gcc secure compilation options (default: no)]),
+[
+ AC_MSG_RESULT(yes)
+ AM_COND_IF([RPM_HARDEND_CC],
+ [ gccsec_defs="-Wall -Wp,-D_FORITY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 " ],
+ [ gccsec_defs="-Wall -Wp,-D_FORITY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches" ]
+ )
+],
+[
+ AC_MSG_RESULT(no)
+ gccsec_defs=""
+])
+AC_SUBST([gccsec_defs])
+
# Used for legacy style packaging where we bundle all of the dependencies.
AC_MSG_CHECKING(for --enable-bundle)
AC_ARG_ENABLE(bundle, AS_HELP_STRING([--enable-bundle], [Enable bundled dependencies (default: no)]),
1
0
admserv/newinst/src/AdminServer.pm.in | 5 +++--
1 file changed, 3 insertions(+), 2 deletions(-)
New commits:
commit 98446b8e5b19da085371ee751f2aed33504657ff
Author: William Brown <wibrown(a)redhat.com>
Date: Fri Oct 30 10:54:12 2015 +1000
Ticket 47840 - Fix setup-ds-admin.pl to create adm.conf with sbin scripts
https://fedorahosted.org/389/ticket/47840
Bug Description: Now that https://fedorahosted.org/389/ticket/528 is fixed, the
next step is to allow building the server with the instance specific scripts
disabled.
Fix Description: This corrects the behaviour of setup-ds-admin.pl to write out
it's adm.conf for the configuration directory, to utilise the sbin scripts with
an argument to start the dirsrv instances rather than using the per instance
script.
Author: wibrown
Review by: nhosoi (Thanks!)
diff --git a/admserv/newinst/src/AdminServer.pm.in b/admserv/newinst/src/AdminServer.pm.in
index a141596..eb80d19 100644
--- a/admserv/newinst/src/AdminServer.pm.in
+++ b/admserv/newinst/src/AdminServer.pm.in
@@ -210,8 +210,9 @@ sub makeConfFiles {
my @start_slapd;
if ($setup->{inf}->{slapd}->{SlapdConfigForMC} =~ /yes/i) {
- my $inst_dir = $setup->{inf}->{slapd}->{inst_dir};
- @start_slapd = ('ldapStart', "$inst_dir/start-slapd");
+ my $sbindir = $setup->{inf}->{slapd}->{sbindir};
+ my $inst_name = $setup->{inf}->{slapd}->{ServerIdentifier};
+ @start_slapd = ('ldapStart', "$sbindir/start-dirsrv $inst_name");
}
$setup->msg('updating_admconf');
my $rc = updateAdmConf({ldapurl => $setup->{inf}->{General}->{ConfigDirectoryLdapURL},
1
0
ldap/admin/src/scripts/DSCreate.pm.in | 204 ++++++++++++++++++---------------
ldap/admin/src/scripts/DSUpdate.pm.in | 12 -
ldap/admin/src/scripts/setup-ds.res.in | 1
3 files changed, 124 insertions(+), 93 deletions(-)
New commits:
commit 20ebe8dd9cb9f17d0f09a9f0e5f65fc9a83d0b13
Author: William Brown <wibrown(a)redhat.com>
Date: Wed Oct 28 14:25:26 2015 +1000
Ticket 47840 - add configure option to disable instance specific scripts
https://fedorahosted.org/389/ticket/47840
Bug Description: Now that ���https://fedorahosted.org/389/ticket/528 is
fixed, the next step is to allow building the server with the instance specific
scripts disabled.
Fix Description: Instead of defining a configure option, we provide a new
option in setup-ds.pl, slapd.InstScriptsEnabled, which defaults to false. All
new installs of 389 will NOT install with a inst_dir nor the scripts that are in
that directory.
Additionally, this change fixes setup-ds.pl to correctly use the sbindir scripts
to start/stop the server instance during installation.
Finally, we add support for setup-ds.pl so that in --update if the inst_dir
exists, scripts will be updated, but if it does not exist, no action is taken.
In time, we will alter --update to *remove* the scripts within inst_dir during
the update (We have no way of knowing if a customer has put custom scripts in
inst_dir)
Example:
/opt/dirsrv/sbin/setup-ds.pl slapd.InstScriptsEnabled=false
Author: wibrown
Review by: nhosoi (Thanks!)
diff --git a/ldap/admin/src/scripts/DSCreate.pm.in b/ldap/admin/src/scripts/DSCreate.pm.in
index ac64875..e04d90d 100644
--- a/ldap/admin/src/scripts/DSCreate.pm.in
+++ b/ldap/admin/src/scripts/DSCreate.pm.in
@@ -131,6 +131,15 @@ sub sanityCheckParams {
return @errs;
}
+ # We need to make sure this value is lowercase
+ $inf->{slapd}->{InstScriptsEnabled} = lc $inf->{slapd}->{InstScriptsEnabled};
+
+ if ("true" ne $inf->{slapd}->{InstScriptsEnabled} && "false" ne $inf->{slapd}->{InstScriptsEnabled}) {
+ debug(1, "InstScriptsEnabled is not a valid boolean");
+ return ('error_invalid_boolean', $inf->{slapd}->{InstScriptsEnabled});
+ }
+
+
return ();
}
@@ -205,13 +214,17 @@ sub makeDSDirs {
my $mode = getMode($inf, 7);
my @errs;
+ my @dsdirs = qw(config_dir schema_dir log_dir lock_dir run_dir tmp_dir cert_dir db_dir ldif_dir bak_dir);
+ if ($inf->{slapd}->{InstScriptsEnabled} eq "true") {
+ @dsdirs = qw(inst_dir config_dir schema_dir log_dir lock_dir run_dir tmp_dir cert_dir db_dir ldif_dir bak_dir);
+ }
+
# These paths are owned by the SuiteSpotGroup
# This allows the admin server to run as a different,
# more privileged user than the directory server, but
# still allows the admin server to manage directory
# server files/dirs without being root
- for my $kw (qw(inst_dir config_dir schema_dir log_dir lock_dir run_dir tmp_dir
- cert_dir db_dir ldif_dir bak_dir)) {
+ for my $kw (@dsdirs) {
my $dir = $inf->{slapd}->{$kw};
@errs = makePaths($dir, $mode, $inf->{General}->{SuiteSpotUserID},
$inf->{General}->{SuiteSpotGroup});
@@ -263,56 +276,66 @@ sub createInstanceScripts {
my $myperl = "!$perlexec";
my $mydevnull = (-f "/dev/null" ? " /dev/null " : " NUL ");
- # determine initconfig_dir
- my $initconfig_dir = $inf->{slapd}->{initconfig_dir} || get_initconfigdir($inf->{General}->{prefix});
-
- my %maptable = (
- "DS-ROOT" => $inf->{General}->{prefix},
- "SEP" => "/", # works on all platforms
- "SERVER-NAME" => $inf->{General}->{FullMachineName},
- "SERVER-PORT" => $inf->{slapd}->{ServerPort},
- "PERL-EXEC" => $myperl,
- "DEV-NULL" => $mydevnull,
- "ROOT-DN" => $inf->{slapd}->{RootDN},
- "LDIF-DIR" => $inf->{slapd}->{ldif_dir},
- "SERV-ID" => $inf->{slapd}->{ServerIdentifier},
- "BAK-DIR" => $inf->{slapd}->{bak_dir},
- "SERVER-DIR" => $inf->{General}->{ServerRoot},
- "CONFIG-DIR" => $inf->{slapd}->{config_dir},
- "INITCONFIG-DIR" => $initconfig_dir,
- "INST-DIR" => $inf->{slapd}->{inst_dir},
- "RUN-DIR" => $inf->{slapd}->{run_dir},
- "PRODUCT-NAME" => "slapd",
- "SERVERBIN-DIR" => $inf->{slapd}->{sbindir},
- "DB-DIR" => $inf->{slapd}->{db_dir}
- );
-
- my $dir = "$inf->{General}->{prefix}@taskdir@";
- for my $file (glob("$dir/template-*")) {
- my $basename = $file;
- $basename =~ s/^.*template-//;
- my $destfile = "$inf->{slapd}->{inst_dir}/$basename";
-
- next if ($skip and -f $destfile); # in skip mode, skip files that already exist
-
- if (!open(SRC, "< $file")) {
- return ("error_opening_scripttmpl", $file, $!);
- }
- if (!open(DEST, "> $destfile")) {
- return ("error_opening_scripttmpl", $destfile, $!);
- }
- my $contents; # slurp entire file into memory
- read SRC, $contents, int(-s $file);
- close(SRC);
- while (my ($key, $val) = each %maptable) {
- $contents =~ s/\{\{$key\}\}/$val/g;
- }
- print DEST $contents;
- close(DEST);
- my @errs = changeOwnerMode($inf, 5, $destfile);
- if (@errs) {
- return @errs;
+ # If we have InstScriptsEnabled, we likely have setup.inf or the argument.
+ # However, during an upgrade, we need to know if we should upgrade the template files or not.
+ # For now, the easiest way is to check to if the directory exists, and if is does, we assume we want to upgrade / create the updated scripts.
+ if ($inf->{slapd}->{InstScriptsEnabled} eq "true" || -d $inf->{slapd}->{inst_dir} ) {
+ debug(1, "Creating or updating instance directory scripts\n");
+ # determine initconfig_dir
+ my $initconfig_dir = $inf->{slapd}->{initconfig_dir} || get_initconfigdir($inf->{General}->{prefix});
+
+ my %maptable = (
+ "DS-ROOT" => $inf->{General}->{prefix},
+ "SEP" => "/", # works on all platforms
+ "SERVER-NAME" => $inf->{General}->{FullMachineName},
+ "SERVER-PORT" => $inf->{slapd}->{ServerPort},
+ "PERL-EXEC" => $myperl,
+ "DEV-NULL" => $mydevnull,
+ "ROOT-DN" => $inf->{slapd}->{RootDN},
+ "LDIF-DIR" => $inf->{slapd}->{ldif_dir},
+ "SERV-ID" => $inf->{slapd}->{ServerIdentifier},
+ "BAK-DIR" => $inf->{slapd}->{bak_dir},
+ "SERVER-DIR" => $inf->{General}->{ServerRoot},
+ "CONFIG-DIR" => $inf->{slapd}->{config_dir},
+ "INITCONFIG-DIR" => $initconfig_dir,
+ "INST-DIR" => $inf->{slapd}->{inst_dir},
+ "RUN-DIR" => $inf->{slapd}->{run_dir},
+ "PRODUCT-NAME" => "slapd",
+ "SERVERBIN-DIR" => $inf->{slapd}->{sbindir},
+ "DB-DIR" => $inf->{slapd}->{db_dir}
+ );
+
+
+ my $dir = "$inf->{General}->{prefix}@taskdir@";
+ for my $file (glob("$dir/template-*")) {
+ my $basename = $file;
+ $basename =~ s/^.*template-//;
+ my $destfile = "$inf->{slapd}->{inst_dir}/$basename";
+ debug(1, "$destfile\n");
+
+ next if ($skip and -f $destfile); # in skip mode, skip files that already exist
+
+ if (!open(SRC, "< $file")) {
+ return ("error_opening_scripttmpl", $file, $!);
+ }
+ if (!open(DEST, "> $destfile")) {
+ return ("error_opening_scripttmpl", $destfile, $!);
+ }
+ my $contents; # slurp entire file into memory
+ read SRC, $contents, int(-s $file);
+ close(SRC);
+ while (my ($key, $val) = each %maptable) {
+ $contents =~ s/\{\{$key\}\}/$val/g;
+ }
+ print DEST $contents;
+ close(DEST);
+ my @errs = changeOwnerMode($inf, 5, $destfile);
+ if (@errs) {
+ return @errs;
+ }
}
+ } else {
+ debug(1, "No instance directory scripts will be updated or created\n");
}
return ();
@@ -640,7 +663,7 @@ sub initDatabase {
return ();
}
- my $cmd = "$inf->{slapd}->{inst_dir}/ldif2db -n $inf->{slapd}->{ds_bename} -i \'$ldiffile\'";
+ my $cmd = "$inf->{slapd}->{sbindir}/ldif2db -Z $inf->{slapd}->{ServerIdentifier} -n $inf->{slapd}->{ds_bename} -i \'$ldiffile\'";
$? = 0; # clear error condition
my $output = `$cmd 2>&1`;
my $result = $?;
@@ -663,7 +686,7 @@ sub startServer {
my @errs;
# get error log
my $errLog = "$inf->{slapd}->{log_dir}/errors";
- my $startcmd = "$inf->{slapd}->{inst_dir}/start-slapd";
+ my $startcmd = "$inf->{slapd}->{sbindir}/start-dirsrv $inf->{slapd}->{ServerIdentifier}";
if ("@systemdsystemunitdir@" and (getLogin() eq 'root')) {
$startcmd = "/bin/systemctl start @package_name@\@$inf->{slapd}->{ServerIdentifier}.service";
}
@@ -876,6 +899,10 @@ sub setDefaults {
"@datadir@",
$inf->{General}->{prefix});
+ if (!defined($inf->{slapd}->{InstScriptsEnabled})) {
+ $inf->{slapd}->{InstScriptsEnabled} = "false";
+ }
+
if (!defined($inf->{slapd}->{inst_dir})) {
$inf->{slapd}->{inst_dir} = "$inf->{General}->{ServerRoot}/slapd-$servid";
}
@@ -976,9 +1003,12 @@ sub updateSelinuxPolicy {
system("restorecon -R $localstatedir/lib/@PACKAGE_NAME@");
}
+ my @inst_dirs = qw(config_dir schema_dir log_dir lock_dir run_dir tmp_dir cert_dir db_dir ldif_dir bak_dir);
+ if ($inf->{slapd}->{InstScriptsEnabled} eq "true") {
+ @inst_dirs = qw(inst_dir config_dir schema_dir log_dir lock_dir run_dir tmp_dir cert_dir db_dir ldif_dir bak_dir);
+ }
# run restorecon on all instance directories we created
- for my $kw (qw(inst_dir config_dir schema_dir log_dir lock_dir run_dir tmp_dir
- cert_dir db_dir ldif_dir bak_dir)) {
+ for my $kw (@inst_dirs) {
my $dir = $inf->{slapd}->{$kw};
system("restorecon -R $dir");
}
@@ -1233,14 +1263,14 @@ sub createDSInstance {
}
sub stopServer {
- my $instancedir = shift;
- my $prog = $instancedir . "/stop-slapd";
+ my $instance = shift;
+ my $prog = "@sbindir@/stop-dirsrv";
if (-x $prog) {
$? = 0;
# run the stop command
- my $output = `$prog 2>&1`;
+ my $output = `$prog $instance 2>&1`;
my $status = $?;
- debug(3, "stopping server $instancedir returns status $status: output $output\n");
+ debug(3, "stopping server $instance returns status $status: output $output\n");
if ($status) {
debug(1,"Warning: Could not stop directory server: status $status: output $output\n");
# if the server is not running, that's ok
@@ -1256,7 +1286,7 @@ sub stopServer {
return;
}
- debug(1, "Successfully stopped server $instancedir\n");
+ debug(1, "Successfully stopped server $instance\n");
return 1;
}
@@ -1333,23 +1363,16 @@ sub removeDSInstance {
$conn->close();
# stop the server
- my $instdir = "";
- if ($entry) {
- foreach my $path ( @{$entry->{"nsslapd-instancedir"}} )
- {
- if (!stopServer($path)) {
- if ($force) {
- debug(1, "Warning: Could not stop directory server - Error: $! - forcing continue\n");
- } elsif ($! == ENOENT) { # stop script not found or server not running
- debug(1, "Warning: Could not stop directory server: already removed or not running\n");
- push @errs, [ 'error_stopping_server', $path, $! ];
- } else { # real error
- debug(1, "Error: Could not stop directory server - aborting - use -f flag to force removal\n");
- push @errs, [ 'error_stopping_server', $path, $! ];
- return @errs;
- }
- }
- $instdir = $path;
+ if (!stopServer($inst)) {
+ if ($force) {
+ debug(1, "Warning: Could not stop directory server - Error: $! - forcing continue\n");
+ } elsif ($! == ENOENT) { # stop script not found or server not running
+ debug(1, "Warning: Could not stop directory server: already removed or not running\n");
+ push @errs, [ 'error_stopping_server', $inst, $! ];
+ } else { # real error
+ debug(1, "Error: Could not stop directory server - aborting - use -f flag to force removal\n");
+ push @errs, [ 'error_stopping_server', $inst, $! ];
+ return @errs;
}
}
@@ -1365,18 +1388,25 @@ sub removeDSInstance {
push @errs, remove_tree($entry, "nsslapd-errorlog", $instname, 1);
}
- # instance dir
- if ( -d $instdir && $instdir =~ /$instname/ )
- {
- # clean up pid files (if any)
- remove_pidfile("STARTPIDFILE", $inst, $instdir, $instname, $rundir, $product_name);
- remove_pidfile("PIDFILE", $inst, $instdir, $instname, $rundir, $product_name);
- my $rc = rmtree($instdir);
- if ( 0 == $rc )
+ # instance dir
+ my $instdir = "";
+ if ($entry) {
+ foreach my $instdir ( @{$entry->{"nsslapd-instancedir"}} )
{
- push @errs, [ 'error_removing_path', $instdir, $! ];
- debug(1, "Warning: $instdir was not removed. Error: $!\n");
+ if ( -d $instdir && $instdir =~ /$instname/ )
+ {
+ # clean up pid files (if any)
+ remove_pidfile("STARTPIDFILE", $inst, $instdir, $instname, $rundir, $product_name);
+ remove_pidfile("PIDFILE", $inst, $instdir, $instname, $rundir, $product_name);
+
+ my $rc = rmtree($instdir);
+ if ( 0 == $rc )
+ {
+ push @errs, [ 'error_removing_path', $instdir, $! ];
+ debug(1, "Warning: $instdir was not removed. Error: $!\n");
+ }
+ }
}
}
# Finally, config dir
diff --git a/ldap/admin/src/scripts/DSUpdate.pm.in b/ldap/admin/src/scripts/DSUpdate.pm.in
index be1e67c..e84a9a9 100644
--- a/ldap/admin/src/scripts/DSUpdate.pm.in
+++ b/ldap/admin/src/scripts/DSUpdate.pm.in
@@ -226,10 +226,10 @@ sub updateDS {
for my $upd (@updates) {
my @localerrs;
if ($upd->{$PRE_STAGE}) {
- debug(1, "Running stage $PRE_STAGE update ", $upd->{path}, "\n");
+ debug(1, "Running updateDS stage $PRE_STAGE update ", $upd->{path}, "\n");
@localerrs = &{$upd->{$PRE_STAGE}}($inf, $setup->{configdir});
} elsif ($upd->{file}) {
- debug(1, "Running stage $PRE_STAGE update ", $upd->{path}, "\n");
+ debug(1, "Running updateDS stage $PRE_STAGE update ", $upd->{path}, "\n");
@localerrs = processUpdate($upd, $inf, $setup->{configdir}, $PRE_STAGE);
}
if (@localerrs) {
@@ -276,10 +276,10 @@ sub updateDS {
for my $upd (@updates) {
my @localerrs;
if ($upd->{$POST_STAGE}) {
- debug(1, "Running stage $POST_STAGE update ", $upd->{path}, "\n");
+ debug(1, "Running updateDS stage $POST_STAGE update ", $upd->{path}, "\n");
@localerrs = &{$upd->{$POST_STAGE}}($inf, $setup->{configdir});
} elsif ($upd->{file}) {
- debug(1, "Running stage $POST_STAGE update ", $upd->{path}, "\n");
+ debug(1, "Running updateDS stage $POST_STAGE update ", $upd->{path}, "\n");
@localerrs = processUpdate($upd, $inf, $setup->{configdir}, $POST_STAGE);
}
if (@localerrs) {
@@ -385,10 +385,10 @@ sub updateDSInstance {
for my $upd (@{$updates}) {
my @localerrs;
if ($upd->{$stage}) {
- debug(1, "Running stage $stage update ", $upd->{path}, "\n");
+ debug(1, "Running updateDSInstance stage $stage update ", $upd->{path}, "\n");
@localerrs = &{$upd->{$stage}}($inf, $inst, $dseldif, $conn);
} elsif ($upd->{file}) {
- debug(1, "Running stage $stage update ", $upd->{path}, "\n");
+ debug(1, "Running updateDSInstance stage $stage update ", $upd->{path}, "\n");
@localerrs = processUpdate($upd, $inf, $configdir, $stage,
$inst, $dseldif, $conn);
}
diff --git a/ldap/admin/src/scripts/setup-ds.res.in b/ldap/admin/src/scripts/setup-ds.res.in
index 7134e25..fa37567 100644
--- a/ldap/admin/src/scripts/setup-ds.res.in
+++ b/ldap/admin/src/scripts/setup-ds.res.in
@@ -116,6 +116,7 @@ error_creating_file = Could not create file '%s'. Error: %s\n
error_copying_file = Could not copy file '%s' to '%s'. Error: %s\n
error_enabling_feature = Could not enable the directory server feature '%s'. Error: %s\n
error_importing_ldif = Could not import LDIF file '%s'. Error: %s. Output: %s\n
+error_invalid_boolean = Could not convert value '%s' to boolean. Valid values are true or false.\n
error_starting_server = Could not start the directory server using command '%s'. The last line from the error log was '%s'. Error: %s\n
error_stopping_server = Could not stop the directory server '%s'. Error: %s\n
error_missing_userid = The SuiteSpotUserID is missing. This must be set to valid user\n
1
0
ldap/ldif/template-dse.ldif.in | 5
ldap/schema/01core389.ldif | 13
ldap/servers/slapd/add.c | 5
ldap/servers/slapd/auditlog.c | 320 ++++++++-----
ldap/servers/slapd/daemon.c | 12
ldap/servers/slapd/delete.c | 5
ldap/servers/slapd/libglobs.c | 202 +++++++-
ldap/servers/slapd/log.c | 953 ++++++++++++++++++++++++++++++++++------
ldap/servers/slapd/log.h | 31 +
ldap/servers/slapd/modify.c | 5
ldap/servers/slapd/modrdn.c | 6
ldap/servers/slapd/proto-slap.h | 14
ldap/servers/slapd/slap.h | 35 +
13 files changed, 1353 insertions(+), 253 deletions(-)
New commits:
commit 5420e154aaf08cbf41c3c233b0d71c289b85b0e8
Author: William Brown <firstyear(a)redhat.com>
Date: Mon Nov 9 14:06:17 2015 +1000
Ticket 48145 - RFE Add log file for rejected changes
https://fedorahosted.org/389/ticket/48145
http://www.port389.org/docs/389ds/design/audit_improvement.html
Bug Description: Add log file for rejected changes: This will help with
debug third party and other applications that are failing to connect to or
work correctly with ldap servers.
Fix Description: The bulk of this code is duplication of existing audit log
code. The remainder that is new is configuration items in schema, an update
to the template dse.ldif for installation, hooking in add.c, delete.c,
modify.c and modrdn.c. Finally, we extract the return code in
write_auditfail_log_entry and insert this to the fail log.
You can enable this with:
cn=config
nsslapd-auditfaillog-logging-enabled: on
The auditfail log is:
var/log/dirsrv/slapd-%instance%/auditfail
And contains entries such as:
time: 20151111152800
dn: uid=test,dc=example,dc=com
result: 65
changetype: modify
replace: objectClass
objectClass: account
objectClass: posixGroup
objectClass: simpleSecurityObject
objectClass: top
-
Note the result maps to the ldap result code, in this case 65 == 0x41
LDAP_OBJECT_CLASS_VIOLATION 0x41
Author: wibrown
Review by: mreynolds, nhosoi (Thanks!)
diff --git a/ldap/ldif/template-dse.ldif.in b/ldap/ldif/template-dse.ldif.in
index 6acbfae..a25295b 100644
--- a/ldap/ldif/template-dse.ldif.in
+++ b/ldap/ldif/template-dse.ldif.in
@@ -52,6 +52,11 @@ nsslapd-auditlog-mode: 600
nsslapd-auditlog-maxlogsize: 100
nsslapd-auditlog-logrotationtime: 1
nsslapd-auditlog-logrotationtimeunit: day
+nsslapd-auditfaillog: %log_dir%/auditfail
+nsslapd-auditfaillog-mode: 600
+nsslapd-auditfaillog-maxlogsize: 100
+nsslapd-auditfaillog-logrotationtime: 1
+nsslapd-auditfaillog-logrotationtimeunit: day
nsslapd-rootdn: %rootdn%
nsslapd-rootpw: %ds_passwd%
nsslapd-maxdescriptors: 1024
diff --git a/ldap/schema/01core389.ldif b/ldap/schema/01core389.ldif
index aebdb5a..42af40d 100644
--- a/ldap/schema/01core389.ldif
+++ b/ldap/schema/01core389.ldif
@@ -278,6 +278,19 @@ attributeTypes: ( 2.16.840.1.113730.3.1.2311 NAME 'nsds5ReplicaFlowControlPause'
attributeTypes: ( 2.16.840.1.113730.3.1.2313 NAME 'nsslapd-changelogtrim-interval' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
attributeTypes: ( 2.16.840.1.113730.3.1.2314 NAME 'nsslapd-changelogcompactdb-interval' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
attributeTypes: ( 2.16.840.1.113730.3.1.2315 NAME 'nsDS5ReplicaWaitForAsyncResults' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2316 NAME 'nsslapd-auditfaillog-maxlogsize' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2317 NAME 'nsslapd-auditfaillog-logrotationsync-enabled' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2318 NAME 'nsslapd-auditfaillog-logrotationsynchour' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2319 NAME 'nsslapd-auditfaillog-logrotationtime' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2320 NAME 'nsslapd-auditfaillog-logrotationtimeunit' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2321 NAME 'nsslapd-auditfaillog-logmaxdiskspace' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2322 NAME 'nsslapd-auditfaillog-logminfreediskspace' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2323 NAME 'nsslapd-auditfaillog-logexpirationtime' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2324 NAME 'nsslapd-auditfaillog-logexpirationtimeunit' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2325 NAME 'nsslapd-auditfaillog-logging-enabled' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2326 NAME 'nsslapd-auditfaillog-logging-hide-unhashed-pw' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2327 NAME 'nsslapd-auditfaillog' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'Netscape Directory Server' )
+attributeTypes: ( 2.16.840.1.113730.3.1.2328 NAME 'nsslapd-auditfaillog-list' DESC 'Netscape defined attribute type' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'Netscape Directory Server' )
#
# objectclasses
#
diff --git a/ldap/servers/slapd/add.c b/ldap/servers/slapd/add.c
index 31012a2..5e50025 100644
--- a/ldap/servers/slapd/add.c
+++ b/ldap/servers/slapd/add.c
@@ -753,6 +753,11 @@ static void op_shared_add (Slapi_PBlock *pb)
operation_out_of_disk_space();
goto done;
}
+ /* If the disk is full we don't want to make it worse ... */
+ if (operation_is_flag_set(operation,OP_FLAG_ACTION_LOG_AUDIT))
+ {
+ write_auditfail_log_entry(pb); /* Record the operation in the audit log */
+ }
}
}
else
diff --git a/ldap/servers/slapd/auditlog.c b/ldap/servers/slapd/auditlog.c
index 69019be..2ddfad0 100644
--- a/ldap/servers/slapd/auditlog.c
+++ b/ldap/servers/slapd/auditlog.c
@@ -26,10 +26,12 @@ char *attr_changetype = ATTR_CHANGETYPE;
char *attr_newrdn = ATTR_NEWRDN;
char *attr_deleteoldrdn = ATTR_DELETEOLDRDN;
char *attr_modifiersname = ATTR_MODIFIERSNAME;
-static int hide_unhashed_pw = 1;
+
+static int audit_hide_unhashed_pw = 1;
+static int auditfail_hide_unhashed_pw = 1;
/* Forward Declarations */
-static void write_audit_file( int optype, const char *dn, void *change, int flag, time_t curtime );
+static void write_audit_file(int logtype, int optype, const char *dn, void *change, int flag, time_t curtime, int rc );
void
write_audit_log_entry( Slapi_PBlock *pb )
@@ -76,9 +78,60 @@ write_audit_log_entry( Slapi_PBlock *pb )
curtime = current_time();
/* log the raw, unnormalized DN */
dn = slapi_sdn_get_udn(sdn);
- write_audit_file( operation_get_type(op), dn, change, flag, curtime );
+ write_audit_file(SLAPD_AUDIT_LOG, operation_get_type(op), dn, change, flag, curtime, 0);
}
+void
+write_auditfail_log_entry( Slapi_PBlock *pb )
+{
+ time_t curtime;
+ Slapi_DN *sdn;
+ const char *dn;
+ void *change;
+ int flag = 0;
+ Operation *op;
+ int pbrc = 0;
+
+ /* if the audit log is not enabled, just skip all of
+ this stuff */
+ if (!config_get_auditfaillog_logging_enabled()) {
+ return;
+ }
+
+ slapi_pblock_get( pb, SLAPI_OPERATION, &op );
+ slapi_pblock_get( pb, SLAPI_TARGET_SDN, &sdn );
+
+ slapi_pblock_get( pb, SLAPI_RESULT_CODE, &pbrc );
+
+ switch ( operation_get_type(op) )
+ {
+ case SLAPI_OPERATION_MODIFY:
+ slapi_pblock_get( pb, SLAPI_MODIFY_MODS, &change );
+ break;
+ case SLAPI_OPERATION_ADD:
+ slapi_pblock_get( pb, SLAPI_ADD_ENTRY, &change );
+ break;
+ case SLAPI_OPERATION_DELETE:
+ {
+ char * deleterDN = NULL;
+ slapi_pblock_get(pb, SLAPI_REQUESTOR_DN, &deleterDN);
+ change = deleterDN;
+ }
+ break;
+ case SLAPI_OPERATION_MODDN:
+ /* newrdn: change is just for logging -- case does not matter. */
+ slapi_pblock_get( pb, SLAPI_MODRDN_NEWRDN, &change );
+ slapi_pblock_get( pb, SLAPI_MODRDN_DELOLDRDN, &flag );
+ break;
+ default:
+ return; /* Unsupported operation type. */
+ }
+ curtime = current_time();
+ /* log the raw, unnormalized DN */
+ dn = slapi_sdn_get_udn(sdn);
+ /* If we are combined */
+ write_audit_file(SLAPD_AUDITFAIL_LOG, operation_get_type(op), dn, change, flag, curtime, pbrc);
+}
/*
@@ -90,139 +143,174 @@ write_audit_log_entry( Slapi_PBlock *pb )
* For a delete operation, may contain the modifier's DN.
* flag - only used by modrdn operations - value of deleteoldrdn flag
* curtime - the current time
+ * rc - The ldap result code. Used in conjunction with auditfail
* Returns: nothing
*/
static void
write_audit_file(
- int optype,
- const char *dn,
- void *change,
- int flag,
- time_t curtime
+ int logtype,
+ int optype,
+ const char *dn,
+ void *change,
+ int flag,
+ time_t curtime,
+ int rc
)
{
- LDAPMod **mods;
- Slapi_Entry *e;
- char *newrdn, *tmp, *tmpsave;
- int len, i, j;
- char *timestr;
- lenstr *l;
+ LDAPMod **mods;
+ Slapi_Entry *e;
+ char *newrdn, *tmp, *tmpsave;
+ int len, i, j;
+ char *timestr;
+ char *rcstr;
+ lenstr *l;
l = lenstr_new();
addlenstr( l, "time: " );
timestr = format_localTime( curtime );
addlenstr( l, timestr );
- slapi_ch_free((void **) ×tr );
+ slapi_ch_free_string(×tr);
addlenstr( l, "\n" );
addlenstr( l, "dn: " );
addlenstr( l, dn );
addlenstr( l, "\n" );
+ addlenstr( l, "result: " );
+ rcstr = slapi_ch_smprintf("%d", rc);
+ addlenstr( l, rcstr );
+ slapi_ch_free_string(&rcstr);
+ addlenstr( l, "\n" );
+
+
switch ( optype )
- {
+ {
case SLAPI_OPERATION_MODIFY:
- addlenstr( l, attr_changetype );
- addlenstr( l, ": modify\n" );
- mods = change;
- for ( j = 0; (mods != NULL) && (mods[j] != NULL); j++ )
- {
- int operationtype= mods[j]->mod_op & ~LDAP_MOD_BVALUES;
-
- if((strcmp(mods[j]->mod_type, PSEUDO_ATTR_UNHASHEDUSERPASSWORD) == 0) && hide_unhashed_pw){
- continue;
- }
- switch ( operationtype )
- {
- case LDAP_MOD_ADD:
- addlenstr( l, "add: " );
- addlenstr( l, mods[j]->mod_type );
- addlenstr( l, "\n" );
- break;
-
- case LDAP_MOD_DELETE:
- addlenstr( l, "delete: " );
- addlenstr( l, mods[j]->mod_type );
- addlenstr( l, "\n" );
- break;
-
- case LDAP_MOD_REPLACE:
- addlenstr( l, "replace: " );
- addlenstr( l, mods[j]->mod_type );
- addlenstr( l, "\n" );
- break;
-
- default:
- operationtype= LDAP_MOD_IGNORE;
- break;
- }
- if(operationtype!=LDAP_MOD_IGNORE)
- {
- for ( i = 0; mods[j]->mod_bvalues != NULL && mods[j]->mod_bvalues[i] != NULL; i++ )
- {
- char *buf, *bufp;
- len = strlen( mods[j]->mod_type );
- len = LDIF_SIZE_NEEDED( len, mods[j]->mod_bvalues[i]->bv_len ) + 1;
- buf = slapi_ch_malloc( len );
- bufp = buf;
- slapi_ldif_put_type_and_value_with_options( &bufp, mods[j]->mod_type,
- mods[j]->mod_bvalues[i]->bv_val,
- mods[j]->mod_bvalues[i]->bv_len, 0 );
- *bufp = '\0';
- addlenstr( l, buf );
- slapi_ch_free( (void**)&buf );
- }
- }
- addlenstr( l, "-\n" );
- }
- break;
+ addlenstr( l, attr_changetype );
+ addlenstr( l, ": modify\n" );
+ mods = change;
+ for ( j = 0; (mods != NULL) && (mods[j] != NULL); j++ )
+ {
+ int operationtype= mods[j]->mod_op & ~LDAP_MOD_BVALUES;
+
+ if(strcmp(mods[j]->mod_type, PSEUDO_ATTR_UNHASHEDUSERPASSWORD) == 0){
+ switch (logtype)
+ {
+ case SLAPD_AUDIT_LOG:
+ if (audit_hide_unhashed_pw != 0) {
+ continue;
+ }
+ break;
+ case SLAPD_AUDITFAIL_LOG:
+ if (auditfail_hide_unhashed_pw != 0) {
+ continue;
+ }
+ break;
+ }
+ }
+ switch ( operationtype )
+ {
+ case LDAP_MOD_ADD:
+ addlenstr( l, "add: " );
+ addlenstr( l, mods[j]->mod_type );
+ addlenstr( l, "\n" );
+ break;
+
+ case LDAP_MOD_DELETE:
+ addlenstr( l, "delete: " );
+ addlenstr( l, mods[j]->mod_type );
+ addlenstr( l, "\n" );
+ break;
+
+ case LDAP_MOD_REPLACE:
+ addlenstr( l, "replace: " );
+ addlenstr( l, mods[j]->mod_type );
+ addlenstr( l, "\n" );
+ break;
+
+ default:
+ operationtype= LDAP_MOD_IGNORE;
+ break;
+ }
+ if(operationtype!=LDAP_MOD_IGNORE)
+ {
+ for ( i = 0; mods[j]->mod_bvalues != NULL && mods[j]->mod_bvalues[i] != NULL; i++ )
+ {
+ char *buf, *bufp;
+ len = strlen( mods[j]->mod_type );
+ len = LDIF_SIZE_NEEDED( len, mods[j]->mod_bvalues[i]->bv_len ) + 1;
+ buf = slapi_ch_malloc( len );
+ bufp = buf;
+ slapi_ldif_put_type_and_value_with_options( &bufp, mods[j]->mod_type,
+ mods[j]->mod_bvalues[i]->bv_val,
+ mods[j]->mod_bvalues[i]->bv_len, 0 );
+ *bufp = '\0';
+ addlenstr( l, buf );
+ slapi_ch_free( (void**)&buf );
+ }
+ }
+ addlenstr( l, "-\n" );
+ }
+ break;
case SLAPI_OPERATION_ADD:
- e = change;
- addlenstr( l, attr_changetype );
- addlenstr( l, ": add\n" );
- tmp = slapi_entry2str( e, &len );
- tmpsave = tmp;
- while (( tmp = strchr( tmp, '\n' )) != NULL )
- {
- tmp++;
- if ( !ldap_utf8isspace( tmp ))
- {
- break;
- }
- }
- addlenstr( l, tmp );
- slapi_ch_free((void**)&tmpsave );
- break;
+ e = change;
+ addlenstr( l, attr_changetype );
+ addlenstr( l, ": add\n" );
+ tmp = slapi_entry2str( e, &len );
+ tmpsave = tmp;
+ while (( tmp = strchr( tmp, '\n' )) != NULL )
+ {
+ tmp++;
+ if ( !ldap_utf8isspace( tmp ))
+ {
+ break;
+ }
+ }
+ addlenstr( l, tmp );
+ slapi_ch_free((void**)&tmpsave );
+ break;
case SLAPI_OPERATION_DELETE:
- tmp = change;
- addlenstr( l, attr_changetype );
- addlenstr( l, ": delete\n" );
- if (tmp && tmp[0]) {
- addlenstr( l, attr_modifiersname );
- addlenstr( l, ": ");
- addlenstr( l, tmp);
- addlenstr( l, "\n");
- }
- break;
+ tmp = change;
+ addlenstr( l, attr_changetype );
+ addlenstr( l, ": delete\n" );
+ if (tmp && tmp[0]) {
+ addlenstr( l, attr_modifiersname );
+ addlenstr( l, ": ");
+ addlenstr( l, tmp);
+ addlenstr( l, "\n");
+ }
+ break;
case SLAPI_OPERATION_MODDN:
- newrdn = change;
- addlenstr( l, attr_changetype );
- addlenstr( l, ": modrdn\n" );
- addlenstr( l, attr_newrdn );
- addlenstr( l, ": " );
- addlenstr( l, newrdn );
- addlenstr( l, "\n" );
- addlenstr( l, attr_deleteoldrdn );
- addlenstr( l, ": " );
- addlenstr( l, flag ? "1" : "0" );
- addlenstr( l, "\n" );
+ newrdn = change;
+ addlenstr( l, attr_changetype );
+ addlenstr( l, ": modrdn\n" );
+ addlenstr( l, attr_newrdn );
+ addlenstr( l, ": " );
+ addlenstr( l, newrdn );
+ addlenstr( l, "\n" );
+ addlenstr( l, attr_deleteoldrdn );
+ addlenstr( l, ": " );
+ addlenstr( l, flag ? "1" : "0" );
+ addlenstr( l, "\n" );
}
addlenstr( l, "\n" );
- slapd_log_audit_proc (l->ls_buf, l->ls_len);
+ switch (logtype)
+ {
+ case SLAPD_AUDIT_LOG:
+ slapd_log_audit_proc (l->ls_buf, l->ls_len);
+ break;
+ case SLAPD_AUDITFAIL_LOG:
+ slapd_log_auditfail_proc (l->ls_buf, l->ls_len);
+ break;
+ default:
+ /* Unsupported log type, we should make some noise */
+ LDAPDebug1Arg(LDAP_DEBUG_ANY, "write_audit_log: Invalid log type specified. logtype %d\n", logtype);
+ break;
+ }
lenstr_free( &l );
}
@@ -230,11 +318,23 @@ write_audit_file(
void
auditlog_hide_unhashed_pw()
{
- hide_unhashed_pw = 1;
+ audit_hide_unhashed_pw = 1;
}
void
auditlog_expose_unhashed_pw()
{
- hide_unhashed_pw = 0;
+ audit_hide_unhashed_pw = 0;
+}
+
+void
+auditfaillog_hide_unhashed_pw()
+{
+ auditfail_hide_unhashed_pw = 1;
+}
+
+void
+auditfaillog_expose_unhashed_pw()
+{
+ auditfail_hide_unhashed_pw = 0;
}
diff --git a/ldap/servers/slapd/daemon.c b/ldap/servers/slapd/daemon.c
index 5d70647..8413937 100644
--- a/ldap/servers/slapd/daemon.c
+++ b/ldap/servers/slapd/daemon.c
@@ -357,6 +357,7 @@ disk_mon_get_dirs(char ***list, int logs_critical){
disk_mon_add_dir(list, config->accesslog);
disk_mon_add_dir(list, config->errorlog);
disk_mon_add_dir(list, config->auditlog);
+ disk_mon_add_dir(list, config->auditfaillog);
CFG_UNLOCK_READ(config);
be = slapi_get_first_backend (&cookie);
@@ -456,6 +457,7 @@ disk_monitoring_thread(void *nothing)
int verbose_logging = 0;
int using_accesslog = 0;
int using_auditlog = 0;
+ int using_auditfaillog = 0;
int logs_disabled = 0;
int grace_period = 0;
int first_pass = 1;
@@ -488,6 +490,9 @@ disk_monitoring_thread(void *nothing)
if(config_get_auditlog_logging_enabled()){
using_auditlog = 1;
}
+ if(config_get_auditfaillog_logging_enabled()){
+ using_auditfaillog = 1;
+ }
if(config_get_accesslog_logging_enabled()){
using_accesslog = 1;
}
@@ -513,6 +518,9 @@ disk_monitoring_thread(void *nothing)
if(using_auditlog){
config_set_auditlog_enabled(LOGGING_ON);
}
+ if(using_auditfaillog){
+ config_set_auditfaillog_enabled(LOGGING_ON);
+ }
} else {
LDAPDebug(LDAP_DEBUG_ANY, "Disk space is now within acceptable levels.\n",0,0,0);
}
@@ -557,6 +565,7 @@ disk_monitoring_thread(void *nothing)
"disabling access and audit logging.\n", dirstr, (disk_space / 1024), 0);
config_set_accesslog_enabled(LOGGING_OFF);
config_set_auditlog_enabled(LOGGING_OFF);
+ config_set_auditfaillog_enabled(LOGGING_OFF);
logs_disabled = 1;
continue;
}
@@ -617,6 +626,9 @@ disk_monitoring_thread(void *nothing)
if(logs_disabled && using_auditlog){
config_set_auditlog_enabled(LOGGING_ON);
}
+ if(logs_disabled && using_auditfaillog){
+ config_set_auditfaillog_enabled(LOGGING_ON);
+ }
deleted_rotated_logs = 0;
passed_threshold = 0;
logs_disabled = 0;
diff --git a/ldap/servers/slapd/delete.c b/ldap/servers/slapd/delete.c
index b51aea5..d3c4d8a 100644
--- a/ldap/servers/slapd/delete.c
+++ b/ldap/servers/slapd/delete.c
@@ -351,6 +351,11 @@ static void op_shared_delete (Slapi_PBlock *pb)
operation_out_of_disk_space();
goto free_and_return;
}
+ /* If the disk is full we don't want to make it worse ... */
+ if (operation_is_flag_set(operation,OP_FLAG_ACTION_LOG_AUDIT))
+ {
+ write_auditfail_log_entry(pb); /* Record the operation in the audit log */
+ }
}
}
diff --git a/ldap/servers/slapd/libglobs.c b/ldap/servers/slapd/libglobs.c
index fde3885..2296720 100644
--- a/ldap/servers/slapd/libglobs.c
+++ b/ldap/servers/slapd/libglobs.c
@@ -152,12 +152,15 @@ static int invalid_sasl_mech(char *str);
#define INIT_ACCESSLOG_MODE "600"
#define INIT_ERRORLOG_MODE "600"
#define INIT_AUDITLOG_MODE "600"
+#define INIT_AUDITFAILLOG_MODE "600"
#define INIT_ACCESSLOG_ROTATIONUNIT "day"
#define INIT_ERRORLOG_ROTATIONUNIT "week"
#define INIT_AUDITLOG_ROTATIONUNIT "week"
+#define INIT_AUDITFAILLOG_ROTATIONUNIT "week"
#define INIT_ACCESSLOG_EXPTIMEUNIT "month"
#define INIT_ERRORLOG_EXPTIMEUNIT "month"
#define INIT_AUDITLOG_EXPTIMEUNIT "month"
+#define INIT_AUDITFAILLOG_EXPTIMEUNIT "month"
#define DEFAULT_DIRECTORY_MANAGER "cn=Directory Manager"
#define DEFAULT_UIDNUM_TYPE "uidNumber"
#define DEFAULT_GIDNUM_TYPE "gidNumber"
@@ -171,11 +174,14 @@ static int invalid_sasl_mech(char *str);
slapi_onoff_t init_accesslog_rotationsync_enabled;
slapi_onoff_t init_errorlog_rotationsync_enabled;
slapi_onoff_t init_auditlog_rotationsync_enabled;
+slapi_onoff_t init_auditfaillog_rotationsync_enabled;
slapi_onoff_t init_accesslog_logging_enabled;
slapi_onoff_t init_accesslogbuffering;
slapi_onoff_t init_errorlog_logging_enabled;
slapi_onoff_t init_auditlog_logging_enabled;
slapi_onoff_t init_auditlog_logging_hide_unhashed_pw;
+slapi_onoff_t init_auditfaillog_logging_enabled;
+slapi_onoff_t init_auditfaillog_logging_hide_unhashed_pw;
slapi_onoff_t init_csnlogging;
slapi_onoff_t init_pw_unlock;
slapi_onoff_t init_pw_must_change;
@@ -1105,8 +1111,73 @@ static struct config_get_and_set {
NULL, 0,
(void**)&global_slapdFrontendConfig.mempool_maxfreelist,
CONFIG_INT, (ConfigGetFunc)config_get_mempool_maxfreelist,
- DEFAULT_MEMPOOL_MAXFREELIST}
+ DEFAULT_MEMPOOL_MAXFREELIST},
#endif /* MEMPOOL_EXPERIMENTAL */
+ /* Audit fail log configuration */
+ {CONFIG_AUDITFAILLOG_MODE_ATTRIBUTE, NULL,
+ log_set_mode, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_mode,
+ CONFIG_STRING, NULL, INIT_AUDITFAILLOG_MODE},
+ {CONFIG_AUDITFAILLOG_LOGROTATIONSYNCENABLED_ATTRIBUTE, NULL,
+ log_set_rotationsync_enabled, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_rotationsync_enabled,
+ CONFIG_ON_OFF, NULL, &init_auditfaillog_rotationsync_enabled},
+ {CONFIG_AUDITFAILLOG_LOGROTATIONSYNCHOUR_ATTRIBUTE, NULL,
+ log_set_rotationsynchour, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_rotationsynchour,
+ CONFIG_INT, NULL, DEFAULT_LOG_ROTATIONSYNCHOUR},
+ {CONFIG_AUDITFAILLOG_LOGROTATIONSYNCMIN_ATTRIBUTE, NULL,
+ log_set_rotationsyncmin, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_rotationsyncmin,
+ CONFIG_INT, NULL, DEFAULT_LOG_ROTATIONSYNCMIN},
+ {CONFIG_AUDITFAILLOG_LOGROTATIONTIME_ATTRIBUTE, NULL,
+ log_set_rotationtime, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_rotationtime,
+ CONFIG_INT, NULL, DEFAULT_LOG_ROTATIONTIME},
+ {CONFIG_AUDITFAILLOG_MAXLOGDISKSPACE_ATTRIBUTE, NULL,
+ log_set_maxdiskspace, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_maxdiskspace,
+ CONFIG_INT, NULL, DEFAULT_LOG_MAXDISKSPACE},
+ {CONFIG_AUDITFAILLOG_MAXLOGSIZE_ATTRIBUTE, NULL,
+ log_set_logsize, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_maxlogsize,
+ CONFIG_INT, NULL, DEFAULT_LOG_MAXLOGSIZE},
+ {CONFIG_AUDITFAILLOG_LOGEXPIRATIONTIME_ATTRIBUTE, NULL,
+ log_set_expirationtime, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_exptime,
+ CONFIG_INT, NULL, DEFAULT_LOG_EXPTIME},
+ {CONFIG_AUDITFAILLOG_MAXNUMOFLOGSPERDIR_ATTRIBUTE, NULL,
+ log_set_numlogsperdir, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_maxnumlogs,
+ CONFIG_INT, NULL, DEFAULT_LOG_MAXNUMLOGS},
+ {CONFIG_AUDITFAILLOG_LIST_ATTRIBUTE, NULL,
+ NULL, 0, NULL,
+ CONFIG_CHARRAY, (ConfigGetFunc)config_get_auditfaillog_list, NULL},
+ {CONFIG_AUDITFAILLOG_LOGGING_ENABLED_ATTRIBUTE, NULL,
+ log_set_logging, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_logging_enabled,
+ CONFIG_ON_OFF, NULL, &init_auditfaillog_logging_enabled},
+ {CONFIG_AUDITFAILLOG_LOGGING_HIDE_UNHASHED_PW, config_set_auditfaillog_unhashed_pw,
+ NULL, 0,
+ (void**)&global_slapdFrontendConfig.auditfaillog_logging_hide_unhashed_pw,
+ CONFIG_ON_OFF, NULL, &init_auditfaillog_logging_hide_unhashed_pw},
+ {CONFIG_AUDITFAILLOG_LOGEXPIRATIONTIMEUNIT_ATTRIBUTE, NULL,
+ log_set_expirationtimeunit, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_exptimeunit,
+ CONFIG_STRING_OR_UNKNOWN, NULL, INIT_AUDITFAILLOG_EXPTIMEUNIT},
+ {CONFIG_AUDITFAILLOG_MINFREEDISKSPACE_ATTRIBUTE, NULL,
+ log_set_mindiskspace, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_minfreespace,
+ CONFIG_INT, NULL, DEFAULT_LOG_MINFREESPACE},
+ {CONFIG_AUDITFAILLOG_LOGROTATIONTIMEUNIT_ATTRIBUTE, NULL,
+ log_set_rotationtimeunit, SLAPD_AUDITFAIL_LOG,
+ (void**)&global_slapdFrontendConfig.auditfaillog_rotationunit,
+ CONFIG_STRING_OR_UNKNOWN, NULL, INIT_AUDITFAILLOG_ROTATIONUNIT},
+ {CONFIG_AUDITFAILFILE_ATTRIBUTE, config_set_auditfaillog,
+ NULL, 0,
+ (void**)&global_slapdFrontendConfig.auditfaillog,
+ CONFIG_STRING_OR_EMPTY, NULL, NULL/* deletion is not allowed */}
+ /* End audit fail log configuration */
};
/*
@@ -1513,6 +1584,23 @@ FrontendConfig_init () {
init_auditlog_logging_hide_unhashed_pw =
cfg->auditlog_logging_hide_unhashed_pw = LDAP_ON;
+ init_auditfaillog_logging_enabled = cfg->auditfaillog_logging_enabled = LDAP_OFF;
+ cfg->auditfaillog_mode = slapi_ch_strdup(INIT_AUDITFAILLOG_MODE);
+ cfg->auditfaillog_maxnumlogs = 1;
+ cfg->auditfaillog_maxlogsize = 100;
+ cfg->auditfaillog_rotationtime = 1;
+ cfg->auditfaillog_rotationunit = slapi_ch_strdup(INIT_AUDITFAILLOG_ROTATIONUNIT);
+ init_auditfaillog_rotationsync_enabled =
+ cfg->auditfaillog_rotationsync_enabled = LDAP_OFF;
+ cfg->auditfaillog_rotationsynchour = 0;
+ cfg->auditfaillog_rotationsyncmin = 0;
+ cfg->auditfaillog_maxdiskspace = 100;
+ cfg->auditfaillog_minfreespace = 5;
+ cfg->auditfaillog_exptime = 1;
+ cfg->auditfaillog_exptimeunit = slapi_ch_strdup(INIT_AUDITFAILLOG_EXPTIMEUNIT);
+ init_auditfaillog_logging_hide_unhashed_pw =
+ cfg->auditfaillog_logging_hide_unhashed_pw = LDAP_ON;
+
init_entryusn_global = cfg->entryusn_global = LDAP_OFF;
cfg->entryusn_import_init = slapi_ch_strdup(ENTRYUSN_IMPORT_INIT);
cfg->allowed_to_delete_attrs = slapi_ch_strdup("passwordadmindn nsslapd-listenhost nsslapd-securelistenhost nsslapd-defaultnamingcontext");
@@ -1630,17 +1718,33 @@ get_entry_point( int ep_name, caddr_t *ep_addr )
int
config_set_auditlog_unhashed_pw(const char *attrname, char *value, char *errorbuf, int apply)
{
- slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
- int retVal = LDAP_SUCCESS;
+ slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
+ int retVal = LDAP_SUCCESS;
- retVal = config_set_onoff ( attrname, value, &(slapdFrontendConfig->auditlog_logging_hide_unhashed_pw),
- errorbuf, apply);
- if(strcasecmp(value,"on") == 0){
- auditlog_hide_unhashed_pw();
- } else {
- auditlog_expose_unhashed_pw();
- }
- return retVal;
+ retVal = config_set_onoff ( attrname, value, &(slapdFrontendConfig->auditlog_logging_hide_unhashed_pw),
+ errorbuf, apply);
+ if(strcasecmp(value,"on") == 0){
+ auditlog_hide_unhashed_pw();
+ } else {
+ auditlog_expose_unhashed_pw();
+ }
+ return retVal;
+}
+
+int
+config_set_auditfaillog_unhashed_pw(const char *attrname, char *value, char *errorbuf, int apply)
+{
+ slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
+ int retVal = LDAP_SUCCESS;
+
+ retVal = config_set_onoff ( attrname, value, &(slapdFrontendConfig->auditfaillog_logging_hide_unhashed_pw),
+ errorbuf, apply);
+ if(strcasecmp(value,"on") == 0){
+ auditfaillog_hide_unhashed_pw();
+ } else {
+ auditfaillog_expose_unhashed_pw();
+ }
+ return retVal;
}
/*
@@ -4157,6 +4261,31 @@ config_set_errorlog( const char *attrname, char *value, char *errorbuf, int appl
int
config_set_auditlog( const char *attrname, char *value, char *errorbuf, int apply ) {
+ int retVal = LDAP_SUCCESS;
+ slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
+
+ if ( config_value_is_null( attrname, value, errorbuf, 1 )) {
+ return LDAP_OPERATIONS_ERROR;
+ }
+
+ retVal = log_update_auditlogdir ( value, apply );
+
+ if ( retVal != LDAP_SUCCESS ) {
+ PR_snprintf ( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
+ "Cannot open auditlog directory \"%s\"", value );
+ }
+
+ if ( apply ) {
+ CFG_LOCK_WRITE(slapdFrontendConfig);
+ slapi_ch_free ( (void **) &(slapdFrontendConfig->auditlog) );
+ slapdFrontendConfig->auditlog = slapi_ch_strdup ( value );
+ CFG_UNLOCK_WRITE(slapdFrontendConfig);
+ }
+ return retVal;
+}
+
+int
+config_set_auditfaillog( const char *attrname, char *value, char *errorbuf, int apply ) {
int retVal = LDAP_SUCCESS;
slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
@@ -4164,17 +4293,17 @@ config_set_auditlog( const char *attrname, char *value, char *errorbuf, int appl
return LDAP_OPERATIONS_ERROR;
}
- retVal = log_update_auditlogdir ( value, apply );
+ retVal = log_update_auditfaillogdir ( value, apply );
if ( retVal != LDAP_SUCCESS ) {
PR_snprintf ( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
- "Cannot open auditlog directory \"%s\"", value );
+ "Cannot open auditfaillog directory \"%s\"", value );
}
if ( apply ) {
CFG_LOCK_WRITE(slapdFrontendConfig);
- slapi_ch_free ( (void **) &(slapdFrontendConfig->auditlog) );
- slapdFrontendConfig->auditlog = slapi_ch_strdup ( value );
+ slapi_ch_free ( (void **) &(slapdFrontendConfig->auditfaillog) );
+ slapdFrontendConfig->auditfaillog = slapi_ch_strdup ( value );
CFG_UNLOCK_WRITE(slapdFrontendConfig);
}
return retVal;
@@ -5514,6 +5643,18 @@ config_get_auditlog( ){
return retVal;
}
+char *
+config_get_auditfaillog( ){
+ slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
+ char *retVal;
+
+ CFG_LOCK_READ(slapdFrontendConfig);
+ retVal = config_copy_strval(slapdFrontendConfig->auditfaillog);
+ CFG_UNLOCK_READ(slapdFrontendConfig);
+
+ return retVal;
+}
+
long
config_get_pw_maxage() {
slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
@@ -5589,6 +5730,16 @@ config_get_auditlog_logging_enabled(){
}
int
+config_get_auditfaillog_logging_enabled(){
+ slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
+ int retVal;
+
+ retVal = (int)slapdFrontendConfig->auditfaillog_logging_enabled;
+
+ return retVal;
+}
+
+int
config_get_accesslog_logging_enabled(){
slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
int retVal;
@@ -6428,6 +6579,12 @@ config_get_auditlog_list()
return log_get_loglist(SLAPD_AUDIT_LOG);
}
+char **
+config_get_auditfaillog_list()
+{
+ return log_get_loglist(SLAPD_AUDITFAIL_LOG);
+}
+
int
config_set_accesslogbuffering(const char *attrname, char *value, char *errorbuf, int apply)
{
@@ -7771,6 +7928,21 @@ config_set_auditlog_enabled(int value){
CFG_ONOFF_UNLOCK_WRITE(slapdFrontendConfig);
}
+void
+config_set_auditfaillog_enabled(int value){
+ slapdFrontendConfig_t *slapdFrontendConfig = getFrontendConfig();
+ char errorbuf[BUFSIZ];
+
+ CFG_ONOFF_LOCK_WRITE(slapdFrontendConfig);
+ slapdFrontendConfig->auditfaillog_logging_enabled = (int)value;
+ if(value){
+ log_set_logging(CONFIG_AUDITFAILLOG_LOGGING_ENABLED_ATTRIBUTE, "on", SLAPD_AUDITFAIL_LOG, errorbuf, CONFIG_APPLY);
+ } else {
+ log_set_logging(CONFIG_AUDITFAILLOG_LOGGING_ENABLED_ATTRIBUTE, "off", SLAPD_AUDITFAIL_LOG, errorbuf, CONFIG_APPLY);
+ }
+ CFG_ONOFF_UNLOCK_WRITE(slapdFrontendConfig);
+}
+
int
config_set_maxsimplepaged_per_conn( const char *attrname, char *value, char *errorbuf, int apply )
{
diff --git a/ldap/servers/slapd/log.c b/ldap/servers/slapd/log.c
index 78701c4..ef6e57b 100644
--- a/ldap/servers/slapd/log.c
+++ b/ldap/servers/slapd/log.c
@@ -77,13 +77,16 @@ static int slapi_log_map[] = {
static int log__open_accesslogfile(int logfile_type, int locked);
static int log__open_errorlogfile(int logfile_type, int locked);
static int log__open_auditlogfile(int logfile_type, int locked);
+static int log__open_auditfaillogfile(int logfile_type, int locked);
static int log__needrotation(LOGFD fp, int logtype);
static int log__delete_access_logfile();
static int log__delete_error_logfile(int locked);
static int log__delete_audit_logfile();
+static int log__delete_auditfail_logfile();
static int log__access_rotationinfof(char *pathname);
static int log__error_rotationinfof(char *pathname);
static int log__audit_rotationinfof(char *pathname);
+static int log__auditfail_rotationinfof(char *pathname);
static int log__extract_logheader (FILE *fp, long *f_ctime, PRInt64 *f_size);
static int log__check_prevlogs (FILE *fp, char *filename);
static PRInt64 log__getfilesize(LOGFD fp);
@@ -273,6 +276,33 @@ void g_log_init(int log_enabled)
if ((loginfo.log_audit_rwlock =slapi_new_rwlock())== NULL ) {
exit (-1);
}
+
+ /* AUDIT LOG */
+ loginfo.log_auditfail_state = 0;
+ loginfo.log_auditfail_mode = SLAPD_DEFAULT_FILE_MODE;
+ loginfo.log_auditfail_maxnumlogs = 1;
+ loginfo.log_auditfail_maxlogsize = -1;
+ loginfo.log_auditfail_rotationsync_enabled = 0;
+ loginfo.log_auditfail_rotationsynchour = -1;
+ loginfo.log_auditfail_rotationsyncmin = -1;
+ loginfo.log_auditfail_rotationsyncclock = -1;
+ loginfo.log_auditfail_rotationtime = 1; /* default: 1 */
+ loginfo.log_auditfail_rotationunit = LOG_UNIT_WEEKS; /* default: week */
+ loginfo.log_auditfail_rotationtime_secs = 604800; /* default: 1 week */
+ loginfo.log_auditfail_maxdiskspace = -1;
+ loginfo.log_auditfail_minfreespace = -1;
+ loginfo.log_auditfail_exptime = -1; /* default: -1 */
+ loginfo.log_auditfail_exptimeunit = LOG_UNIT_WEEKS; /* default: week */
+ loginfo.log_auditfail_exptime_secs = -1; /* default: -1 */
+ loginfo.log_auditfail_ctime = 0L;
+ loginfo.log_auditfail_file = NULL;
+ loginfo.log_auditfailinfo_file = NULL;
+ loginfo.log_numof_auditfail_logs = 1;
+ loginfo.log_auditfail_fdes = NULL;
+ loginfo.log_auditfail_logchain = NULL;
+ if ((loginfo.log_auditfail_rwlock =slapi_new_rwlock())== NULL ) {
+ exit (-1);
+ }
}
/******************************************************************************
@@ -342,6 +372,17 @@ log_set_logging(const char *attrname, char *value, int logtype, char *errorbuf,
}
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ fe_cfg->auditfaillog_logging_enabled = v;
+ if (v) {
+ loginfo.log_auditfail_state |= LOGGING_ENABLED;
+ }
+ else {
+ loginfo.log_auditfail_state &= ~LOGGING_ENABLED;
+ }
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
}
return LDAP_SUCCESS;
@@ -580,6 +621,84 @@ log_update_auditlogdir(char *pathname, int apply)
return rv;
}
+/******************************************************************************
+* Tell me the audit fail log file name inc path
+******************************************************************************/
+char *
+g_get_auditfail_log() {
+ char *logfile = NULL;
+
+ LOG_AUDITFAIL_LOCK_READ();
+ if ( loginfo.log_auditfail_file) {
+ logfile = slapi_ch_strdup (loginfo.log_auditfail_file);
+ }
+ LOG_AUDITFAIL_UNLOCK_READ();
+
+ return logfile;
+}
+/******************************************************************************
+* Point to a new auditfail logdir
+*
+* Returns:
+* LDAP_SUCCESS -- success
+* LDAP_UNWILLING_TO_PERFORM -- when trying to open a invalid log file
+* LDAP_LOCAL_ERRO -- some error
+******************************************************************************/
+int
+log_update_auditfaillogdir(char *pathname, int apply)
+{
+ int rv = LDAP_SUCCESS;
+ LOGFD fp;
+
+ /* try to open the file, we may have a incorrect path */
+ if (! LOG_OPEN_APPEND(fp, pathname, loginfo.log_auditfail_mode)) {
+ LDAPDebug(LDAP_DEBUG_ANY, "WARNING: can't open file %s. "
+ "errno %d (%s)\n",
+ pathname, errno, slapd_system_strerror(errno));
+ /* stay with the current log file */
+ return LDAP_UNWILLING_TO_PERFORM;
+ }
+ LOG_CLOSE(fp);
+
+ /* skip the rest if we aren't doing this for real */
+ if ( !apply ) {
+ return LDAP_SUCCESS;
+ }
+
+ /*
+ ** The user has changed the audit log directory. That means we
+ ** need to start fresh.
+ */
+ LOG_AUDITFAIL_LOCK_WRITE ();
+ if (loginfo.log_auditfail_fdes) {
+ LogFileInfo *logp, *d_logp;
+ LDAPDebug(LDAP_DEBUG_TRACE,
+ "LOGINFO:Closing the auditfail log file. "
+ "Moving to a new auditfail file (%s)\n", pathname,0,0);
+
+ LOG_CLOSE(loginfo.log_auditfail_fdes);
+ loginfo.log_auditfail_fdes = 0;
+ loginfo.log_auditfail_ctime = 0;
+ logp = loginfo.log_auditfail_logchain;
+ while (logp) {
+ d_logp = logp;
+ logp = logp->l_next;
+ slapi_ch_free((void**)&d_logp);
+ }
+ loginfo.log_auditfail_logchain = NULL;
+ slapi_ch_free((void**)&loginfo.log_auditfail_file);
+ loginfo.log_auditfail_file = NULL;
+ loginfo.log_numof_auditfail_logs = 1;
+ }
+
+ /* Now open the new auditlog */
+ if ( auditfail_log_openf (pathname, 1 /* locked */)) {
+ rv = LDAP_LOCAL_ERROR; /* error: Unable to use the new dir */
+ }
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ return rv;
+}
+
int
log_set_mode (const char *attrname, char *value, int logtype, char *errorbuf, int apply)
{
@@ -667,7 +786,8 @@ log_set_numlogsperdir(const char *attrname, char *numlogs_str, int logtype, char
if ( logtype != SLAPD_ACCESS_LOG &&
logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
rv = LDAP_OPERATIONS_ERROR;
PR_snprintf( returntext, SLAPI_DSE_RETURNTEXT_SIZE,
"%s: invalid log type %d", attrname, logtype );
@@ -698,6 +818,12 @@ log_set_numlogsperdir(const char *attrname, char *numlogs_str, int logtype, char
fe_cfg->auditlog_maxnumlogs = numlogs;
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ loginfo.log_auditfail_maxnumlogs = numlogs;
+ fe_cfg->auditfaillog_maxnumlogs = numlogs;
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
default:
rv = LDAP_OPERATIONS_ERROR;
LDAPDebug( LDAP_DEBUG_ANY,
@@ -749,6 +875,10 @@ log_set_logsize(const char *attrname, char *logsize_str, int logtype, char *retu
LOG_AUDIT_LOCK_WRITE( );
mdiskspace = loginfo.log_audit_maxdiskspace;
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ mdiskspace = loginfo.log_auditfail_maxdiskspace;
+ break;
default:
PR_snprintf( returntext, SLAPI_DSE_RETURNTEXT_SIZE,
"%s: invalid logtype %d", attrname, logtype );
@@ -780,6 +910,13 @@ log_set_logsize(const char *attrname, char *logsize_str, int logtype, char *retu
}
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ if (!rv && apply) {
+ loginfo.log_auditfail_maxlogsize = max_logsize;
+ fe_cfg->auditfaillog_maxlogsize = logsize;
+ }
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
default:
rv = 1;
}
@@ -868,6 +1005,12 @@ log_set_rotationsync_enabled(const char *attrname, char *value, int logtype, cha
loginfo.log_audit_rotationsync_enabled = v;
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ fe_cfg->auditfaillog_rotationsync_enabled = v;
+ loginfo.log_auditfail_rotationsync_enabled = v;
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
}
return LDAP_SUCCESS;
}
@@ -881,7 +1024,8 @@ log_set_rotationsynchour(const char *attrname, char *rhour_str, int logtype, cha
if ( logtype != SLAPD_ACCESS_LOG &&
logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
PR_snprintf( returntext, SLAPI_DSE_RETURNTEXT_SIZE,
"%s: invalid log type: %d", attrname, logtype );
return LDAP_OPERATIONS_ERROR;
@@ -919,6 +1063,13 @@ log_set_rotationsynchour(const char *attrname, char *rhour_str, int logtype, cha
fe_cfg->auditlog_rotationsynchour = rhour;
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ loginfo.log_auditfail_rotationsynchour = rhour;
+ loginfo.log_auditfail_rotationsyncclock = log_get_rotationsyncclock( rhour, loginfo.log_auditfail_rotationsyncmin );
+ fe_cfg->auditfaillog_rotationsynchour = rhour;
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
}
return rv;
@@ -933,7 +1084,8 @@ log_set_rotationsyncmin(const char *attrname, char *rmin_str, int logtype, char
if ( logtype != SLAPD_ACCESS_LOG &&
logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
PR_snprintf( returntext, SLAPI_DSE_RETURNTEXT_SIZE,
"%s: invalid log type: %d", attrname, logtype );
return LDAP_OPERATIONS_ERROR;
@@ -971,6 +1123,13 @@ log_set_rotationsyncmin(const char *attrname, char *rmin_str, int logtype, char
loginfo.log_audit_rotationsyncclock = log_get_rotationsyncclock( loginfo.log_audit_rotationsynchour, rmin );
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ loginfo.log_auditfail_rotationsyncmin = rmin;
+ fe_cfg->auditfaillog_rotationsyncmin = rmin;
+ loginfo.log_auditfail_rotationsyncclock = log_get_rotationsyncclock( loginfo.log_auditfail_rotationsynchour, rmin );
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
}
return rv;
@@ -993,7 +1152,8 @@ log_set_rotationtime(const char *attrname, char *rtime_str, int logtype, char *r
if ( logtype != SLAPD_ACCESS_LOG &&
logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
PR_snprintf( returntext, SLAPI_DSE_RETURNTEXT_SIZE,
"%s: invalid log type: %d", attrname, logtype );
return LDAP_OPERATIONS_ERROR;
@@ -1026,6 +1186,11 @@ log_set_rotationtime(const char *attrname, char *rtime_str, int logtype, char *r
loginfo.log_audit_rotationtime = rtime;
runit = loginfo.log_audit_rotationunit;
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ loginfo.log_auditfail_rotationtime = rtime;
+ runit = loginfo.log_auditfail_rotationunit;
+ break;
}
/* find out the rotation unit we have se right now */
@@ -1064,6 +1229,11 @@ log_set_rotationtime(const char *attrname, char *rtime_str, int logtype, char *r
loginfo.log_audit_rotationtime_secs = value;
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ fe_cfg->auditfaillog_rotationtime = rtime;
+ loginfo.log_auditfail_rotationtime_secs = value;
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
}
return rv;
}
@@ -1082,92 +1252,104 @@ int log_set_rotationtimeunit(const char *attrname, char *runit, int logtype, cha
slapdFrontendConfig_t *fe_cfg = getFrontendConfig();
if ( logtype != SLAPD_ACCESS_LOG &&
- logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
- PR_snprintf ( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
- "%s: invalid log type: %d", attrname, logtype );
- return LDAP_OPERATIONS_ERROR;
+ logtype != SLAPD_ERROR_LOG &&
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
+ PR_snprintf ( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
+ "%s: invalid log type: %d", attrname, logtype );
+ return LDAP_OPERATIONS_ERROR;
}
if ( (strcasecmp(runit, "month") == 0) ||
- (strcasecmp(runit, "week") == 0) ||
- (strcasecmp(runit, "day") == 0) ||
- (strcasecmp(runit, "hour") == 0) ||
- (strcasecmp(runit, "minute") == 0)) {
- /* all good values */
+ (strcasecmp(runit, "week") == 0) ||
+ (strcasecmp(runit, "day") == 0) ||
+ (strcasecmp(runit, "hour") == 0) ||
+ (strcasecmp(runit, "minute") == 0)) {
+ /* all good values */
} else {
- PR_snprintf ( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
- "%s: unknown unit \"%s\"", attrname, runit );
- rv = LDAP_OPERATIONS_ERROR;
+ PR_snprintf ( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
+ "%s: unknown unit \"%s\"", attrname, runit );
+ rv = LDAP_OPERATIONS_ERROR;
}
/* return if we aren't doing this for real */
if ( !apply ) {
- return rv;
+ return rv;
}
switch (logtype) {
case SLAPD_ACCESS_LOG:
- LOG_ACCESS_LOCK_WRITE( );
- origvalue = loginfo.log_access_rotationtime;
- break;
+ LOG_ACCESS_LOCK_WRITE( );
+ origvalue = loginfo.log_access_rotationtime;
+ break;
case SLAPD_ERROR_LOG:
- LOG_ERROR_LOCK_WRITE( );
- origvalue = loginfo.log_error_rotationtime;
- break;
+ LOG_ERROR_LOCK_WRITE( );
+ origvalue = loginfo.log_error_rotationtime;
+ break;
case SLAPD_AUDIT_LOG:
- LOG_AUDIT_LOCK_WRITE( );
- origvalue = loginfo.log_audit_rotationtime;
- break;
+ LOG_AUDIT_LOCK_WRITE( );
+ origvalue = loginfo.log_audit_rotationtime;
+ break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ origvalue = loginfo.log_auditfail_rotationtime;
+ break;
}
if (strcasecmp(runit, "month") == 0) {
- runitType = LOG_UNIT_MONTHS;
- value = origvalue * 31 * 24 * 60 * 60;
+ runitType = LOG_UNIT_MONTHS;
+ value = origvalue * 31 * 24 * 60 * 60;
} else if (strcasecmp(runit, "week") == 0) {
- runitType = LOG_UNIT_WEEKS;
- value = origvalue * 7 * 24 * 60 * 60;
+ runitType = LOG_UNIT_WEEKS;
+ value = origvalue * 7 * 24 * 60 * 60;
} else if (strcasecmp(runit, "day") == 0) {
- runitType = LOG_UNIT_DAYS;
- value = origvalue * 24 * 60 * 60;
+ runitType = LOG_UNIT_DAYS;
+ value = origvalue * 24 * 60 * 60;
} else if (strcasecmp(runit, "hour") == 0) {
- runitType = LOG_UNIT_HOURS;
- value = origvalue * 3600;
+ runitType = LOG_UNIT_HOURS;
+ value = origvalue * 3600;
} else if (strcasecmp(runit, "minute") == 0) {
- runitType = LOG_UNIT_MINS;
- value = origvalue * 60;
+ runitType = LOG_UNIT_MINS;
+ value = origvalue * 60;
} else {
- /* In this case we don't rotate */
- runitType = LOG_UNIT_UNKNOWN;
- value = -1;
+ /* In this case we don't rotate */
+ runitType = LOG_UNIT_UNKNOWN;
+ value = -1;
}
if (origvalue > 0 && value < 0) {
- value = PR_INT32_MAX; /* overflown */
+ value = PR_INT32_MAX; /* overflown */
}
switch (logtype) {
case SLAPD_ACCESS_LOG:
- loginfo.log_access_rotationtime_secs = value;
- loginfo.log_access_rotationunit = runitType;
- slapi_ch_free ( (void **) &fe_cfg->accesslog_rotationunit);
- fe_cfg->accesslog_rotationunit = slapi_ch_strdup ( runit );
- LOG_ACCESS_UNLOCK_WRITE();
- break;
+ loginfo.log_access_rotationtime_secs = value;
+ loginfo.log_access_rotationunit = runitType;
+ slapi_ch_free ( (void **) &fe_cfg->accesslog_rotationunit);
+ fe_cfg->accesslog_rotationunit = slapi_ch_strdup ( runit );
+ LOG_ACCESS_UNLOCK_WRITE();
+ break;
case SLAPD_ERROR_LOG:
- loginfo.log_error_rotationtime_secs = value;
- loginfo.log_error_rotationunit = runitType;
- slapi_ch_free ( (void **) &fe_cfg->errorlog_rotationunit) ;
- fe_cfg->errorlog_rotationunit = slapi_ch_strdup ( runit );
- LOG_ERROR_UNLOCK_WRITE();
- break;
+ loginfo.log_error_rotationtime_secs = value;
+ loginfo.log_error_rotationunit = runitType;
+ slapi_ch_free ( (void **) &fe_cfg->errorlog_rotationunit) ;
+ fe_cfg->errorlog_rotationunit = slapi_ch_strdup ( runit );
+ LOG_ERROR_UNLOCK_WRITE();
+ break;
case SLAPD_AUDIT_LOG:
- loginfo.log_audit_rotationtime_secs = value;
- loginfo.log_audit_rotationunit = runitType;
- slapi_ch_free ( (void **) &fe_cfg->auditlog_rotationunit);
- fe_cfg->auditlog_rotationunit = slapi_ch_strdup ( runit );
- LOG_AUDIT_UNLOCK_WRITE();
- break;
+ loginfo.log_audit_rotationtime_secs = value;
+ loginfo.log_audit_rotationunit = runitType;
+ slapi_ch_free ( (void **) &fe_cfg->auditlog_rotationunit);
+ fe_cfg->auditlog_rotationunit = slapi_ch_strdup ( runit );
+ LOG_AUDIT_UNLOCK_WRITE();
+ break;
+ case SLAPD_AUDITFAIL_LOG:
+ loginfo.log_auditfail_rotationtime_secs = value;
+ loginfo.log_auditfail_rotationunit = runitType;
+ slapi_ch_free ( (void **) &fe_cfg->auditfaillog_rotationunit);
+ fe_cfg->auditfaillog_rotationunit = slapi_ch_strdup ( runit );
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
}
return rv;
}
@@ -1183,75 +1365,87 @@ int log_set_rotationtimeunit(const char *attrname, char *runit, int logtype, cha
int
log_set_maxdiskspace(const char *attrname, char *maxdiskspace_str, int logtype, char *errorbuf, int apply)
{
- int rv = 0;
- PRInt64 mlogsize = 0; /* in bytes */
- PRInt64 maxdiskspace; /* in bytes */
- int s_maxdiskspace; /* in megabytes */
+ int rv = 0;
+ PRInt64 mlogsize = 0; /* in bytes */
+ PRInt64 maxdiskspace; /* in bytes */
+ int s_maxdiskspace; /* in megabytes */
- slapdFrontendConfig_t *fe_cfg = getFrontendConfig();
-
- if ( logtype != SLAPD_ACCESS_LOG &&
- logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
- PR_snprintf( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
- "%s: invalid log type: %d", attrname, logtype );
- return LDAP_OPERATIONS_ERROR;
- }
-
- if (!apply || !maxdiskspace_str || !*maxdiskspace_str)
- return rv;
-
- s_maxdiskspace = atoi(maxdiskspace_str);
+ slapdFrontendConfig_t *fe_cfg = getFrontendConfig();
+
+ if ( logtype != SLAPD_ACCESS_LOG &&
+ logtype != SLAPD_ERROR_LOG &&
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
+ PR_snprintf( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
+ "%s: invalid log type: %d", attrname, logtype );
+ return LDAP_OPERATIONS_ERROR;
+ }
- /* Disk space are in MB but store in bytes */
- switch (logtype) {
- case SLAPD_ACCESS_LOG:
- LOG_ACCESS_LOCK_WRITE( );
- mlogsize = loginfo.log_access_maxlogsize;
- break;
- case SLAPD_ERROR_LOG:
- LOG_ERROR_LOCK_WRITE( );
- mlogsize = loginfo.log_error_maxlogsize;
- break;
- case SLAPD_AUDIT_LOG:
- LOG_AUDIT_LOCK_WRITE( );
- mlogsize = loginfo.log_audit_maxlogsize;
- break;
- }
- maxdiskspace = (PRInt64)s_maxdiskspace * LOG_MB_IN_BYTES;
- if (maxdiskspace < 0) {
- maxdiskspace = -1;
- } else if (maxdiskspace < mlogsize) {
- rv = LDAP_OPERATIONS_ERROR;
- PR_snprintf( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
- "%s: \"%d (MB)\" is less than max log size \"%d (MB)\"",
- attrname, s_maxdiskspace, (int)(mlogsize/LOG_MB_IN_BYTES) );
- }
+ if (!apply || !maxdiskspace_str || !*maxdiskspace_str)
+ return rv;
+
+ s_maxdiskspace = atoi(maxdiskspace_str);
+
+ /* Disk space are in MB but store in bytes */
+ switch (logtype) {
+ case SLAPD_ACCESS_LOG:
+ LOG_ACCESS_LOCK_WRITE( );
+ mlogsize = loginfo.log_access_maxlogsize;
+ break;
+ case SLAPD_ERROR_LOG:
+ LOG_ERROR_LOCK_WRITE( );
+ mlogsize = loginfo.log_error_maxlogsize;
+ break;
+ case SLAPD_AUDIT_LOG:
+ LOG_AUDIT_LOCK_WRITE( );
+ mlogsize = loginfo.log_audit_maxlogsize;
+ break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ mlogsize = loginfo.log_auditfail_maxlogsize;
+ break;
+ }
+ maxdiskspace = (PRInt64)s_maxdiskspace * LOG_MB_IN_BYTES;
+ if (maxdiskspace < 0) {
+ maxdiskspace = -1;
+ } else if (maxdiskspace < mlogsize) {
+ rv = LDAP_OPERATIONS_ERROR;
+ PR_snprintf( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
+ "%s: \"%d (MB)\" is less than max log size \"%d (MB)\"",
+ attrname, s_maxdiskspace, (int)(mlogsize/LOG_MB_IN_BYTES) );
+ }
- switch (logtype) {
- case SLAPD_ACCESS_LOG:
- if (rv== 0 && apply) {
- loginfo.log_access_maxdiskspace = maxdiskspace; /* in bytes */
- fe_cfg->accesslog_maxdiskspace = s_maxdiskspace; /* in megabytes */
- }
- LOG_ACCESS_UNLOCK_WRITE();
- break;
- case SLAPD_ERROR_LOG:
- if (rv== 0 && apply) {
- loginfo.log_error_maxdiskspace = maxdiskspace; /* in bytes */
- fe_cfg->errorlog_maxdiskspace = s_maxdiskspace; /* in megabytes */
- }
- LOG_ERROR_UNLOCK_WRITE();
- break;
- case SLAPD_AUDIT_LOG:
- if (rv== 0 && apply) {
- loginfo.log_audit_maxdiskspace = maxdiskspace; /* in bytes */
- fe_cfg->auditlog_maxdiskspace = s_maxdiskspace; /* in megabytes */
- }
- LOG_AUDIT_UNLOCK_WRITE();
- break;
- }
- return rv;
+ switch (logtype) {
+ case SLAPD_ACCESS_LOG:
+ if (rv== 0 && apply) {
+ loginfo.log_access_maxdiskspace = maxdiskspace; /* in bytes */
+ fe_cfg->accesslog_maxdiskspace = s_maxdiskspace; /* in megabytes */
+ }
+ LOG_ACCESS_UNLOCK_WRITE();
+ break;
+ case SLAPD_ERROR_LOG:
+ if (rv== 0 && apply) {
+ loginfo.log_error_maxdiskspace = maxdiskspace; /* in bytes */
+ fe_cfg->errorlog_maxdiskspace = s_maxdiskspace; /* in megabytes */
+ }
+ LOG_ERROR_UNLOCK_WRITE();
+ break;
+ case SLAPD_AUDIT_LOG:
+ if (rv== 0 && apply) {
+ loginfo.log_audit_maxdiskspace = maxdiskspace; /* in bytes */
+ fe_cfg->auditlog_maxdiskspace = s_maxdiskspace; /* in megabytes */
+ }
+ LOG_AUDIT_UNLOCK_WRITE();
+ break;
+ case SLAPD_AUDITFAIL_LOG:
+ if (rv== 0 && apply) {
+ loginfo.log_auditfail_maxdiskspace = maxdiskspace; /* in bytes */
+ fe_cfg->auditfaillog_maxdiskspace = s_maxdiskspace; /* in megabytes */
+ }
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
+ }
+ return rv;
}
/******************************************************************************
@@ -1271,7 +1465,8 @@ log_set_mindiskspace(const char *attrname, char *minfreespace_str, int logtype,
if ( logtype != SLAPD_ACCESS_LOG &&
logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
PR_snprintf( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
"%s: invalid log type: %d", attrname, logtype );
rv = LDAP_OPERATIONS_ERROR;
@@ -1306,7 +1501,14 @@ log_set_mindiskspace(const char *attrname, char *minfreespace_str, int logtype,
fe_cfg->auditlog_minfreespace = minfreespace;
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ loginfo.log_auditfail_minfreespace = minfreespaceB;
+ fe_cfg->auditfaillog_minfreespace = minfreespace;
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
default:
+ /* This is unreachable ... */
rv = 1;
}
}
@@ -1329,7 +1531,8 @@ log_set_expirationtime(const char *attrname, char *exptime_str, int logtype, cha
if ( logtype != SLAPD_ACCESS_LOG &&
logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
PR_snprintf( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
"%s: invalid log type: %d", attrname, logtype );
rv = LDAP_OPERATIONS_ERROR;
@@ -1361,7 +1564,14 @@ log_set_expirationtime(const char *attrname, char *exptime_str, int logtype, cha
eunit = loginfo.log_audit_exptimeunit;
rsec = loginfo.log_audit_rotationtime_secs;
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ loginfo.log_auditfail_exptime = exptime;
+ eunit = loginfo.log_auditfail_exptimeunit;
+ rsec = loginfo.log_auditfail_rotationtime_secs;
+ break;
default:
+ /* This is unreachable */
rv = 1;
eunit = -1;
}
@@ -1400,6 +1610,11 @@ log_set_expirationtime(const char *attrname, char *exptime_str, int logtype, cha
fe_cfg->auditlog_exptime = exptime;
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ loginfo.log_auditfail_exptime_secs = value;
+ fe_cfg->auditfaillog_exptime = exptime;
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
default:
rv = 1;
}
@@ -1423,7 +1638,8 @@ log_set_expirationtimeunit(const char *attrname, char *expunit, int logtype, cha
if ( logtype != SLAPD_ACCESS_LOG &&
logtype != SLAPD_ERROR_LOG &&
- logtype != SLAPD_AUDIT_LOG ) {
+ logtype != SLAPD_AUDIT_LOG &&
+ logtype != SLAPD_AUDITFAIL_LOG ) {
PR_snprintf( errorbuf, SLAPI_DSE_RETURNTEXT_SIZE,
"%s: invalid log type: %d", attrname, logtype );
return LDAP_OPERATIONS_ERROR;
@@ -1469,6 +1685,12 @@ log_set_expirationtimeunit(const char *attrname, char *expunit, int logtype, cha
rsecs = loginfo.log_audit_rotationtime_secs;
exptimeunitp = &(loginfo.log_audit_exptimeunit);
break;
+ case SLAPD_AUDITFAIL_LOG:
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ exptime = loginfo.log_auditfail_exptime;
+ rsecs = loginfo.log_auditfail_rotationtime_secs;
+ exptimeunitp = &(loginfo.log_auditfail_exptimeunit);
+ break;
}
value = -1;
@@ -1518,6 +1740,12 @@ log_set_expirationtimeunit(const char *attrname, char *expunit, int logtype, cha
fe_cfg->auditlog_exptimeunit = slapi_ch_strdup ( expunit );
LOG_AUDIT_UNLOCK_WRITE();
break;
+ case SLAPD_AUDITFAIL_LOG:
+ loginfo.log_auditfail_exptime_secs = value;
+ slapi_ch_free ( (void **) &(fe_cfg->auditfaillog_exptimeunit) );
+ fe_cfg->auditfaillog_exptimeunit = slapi_ch_strdup ( expunit );
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ break;
}
return rv;
@@ -1630,6 +1858,45 @@ audit_log_openf( char *pathname, int locked)
return rv;
}
+
+/******************************************************************************
+* init function for the auditfail log
+* Returns:
+* 0 - success
+* 1 - fail
+******************************************************************************/
+int
+auditfail_log_openf( char *pathname, int locked)
+{
+
+ int rv=0;
+ int logfile_type = 0;
+
+ if (!locked) LOG_AUDITFAIL_LOCK_WRITE( );
+
+ /* store the path name */
+ slapi_ch_free_string(&loginfo.log_auditfail_file);
+ loginfo.log_auditfail_file = slapi_ch_strdup ( pathname );
+
+ /* store the rotation info file path name */
+ slapi_ch_free_string(&loginfo.log_auditfailinfo_file);
+ loginfo.log_auditfailinfo_file = slapi_ch_smprintf("%s.rotationinfo", pathname);
+
+ /*
+ ** Check if we have a log file already. If we have it then
+ ** we need to parse the header info and update the loginfo
+ ** struct.
+ */
+ logfile_type = log__auditfail_rotationinfof(loginfo.log_auditfailinfo_file);
+
+ if (log__open_auditfaillogfile(logfile_type, 1/* got lock*/) != LOG_SUCCESS) {
+ rv = 1;
+ }
+
+ if (!locked) LOG_AUDITFAIL_UNLOCK_WRITE();
+
+ return rv;
+}
/******************************************************************************
* write in the audit log
******************************************************************************/
@@ -1664,6 +1931,39 @@ slapd_log_audit_proc (
return 0;
}
/******************************************************************************
+* write in the audit fail log
+******************************************************************************/
+int
+slapd_log_auditfail_proc (
+ char *buffer,
+ int buf_len)
+{
+ if ( (loginfo.log_auditfail_state & LOGGING_ENABLED) && (loginfo.log_auditfail_file != NULL) ){
+ LOG_AUDITFAIL_LOCK_WRITE( );
+ if (log__needrotation(loginfo.log_auditfail_fdes,
+ SLAPD_AUDITFAIL_LOG) == LOG_ROTATE) {
+ if (log__open_auditfaillogfile(LOGFILE_NEW, 1) != LOG_SUCCESS) {
+ LDAPDebug(LDAP_DEBUG_ANY,
+ "LOGINFO: Unable to open auditfail file:%s\n",
+ loginfo.log_auditfail_file,0,0);
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ return 0;
+ }
+ while (loginfo.log_auditfail_rotationsyncclock <= loginfo.log_auditfail_ctime) {
+ loginfo.log_auditfail_rotationsyncclock += PR_ABS(loginfo.log_auditfail_rotationtime_secs);
+ }
+ }
+ if (loginfo.log_auditfail_state & LOGGING_NEED_TITLE) {
+ log_write_title( loginfo.log_auditfail_fdes);
+ loginfo.log_auditfail_state &= ~LOGGING_NEED_TITLE;
+ }
+ LOG_WRITE_NOW_NO_ERR(loginfo.log_auditfail_fdes, buffer, buf_len, 0);
+ LOG_AUDITFAIL_UNLOCK_WRITE();
+ return 0;
+ }
+ return 0;
+}
+/******************************************************************************
* write in the error log
******************************************************************************/
int
@@ -2233,6 +2533,15 @@ log__needrotation(LOGFD fp, int logtype)
rotationtime_secs = loginfo.log_audit_rotationtime_secs;
log_createtime = loginfo.log_audit_ctime;
break;
+ case SLAPD_AUDITFAIL_LOG:
+ nlogs = loginfo.log_auditfail_maxnumlogs;
+ maxlogsize = loginfo.log_auditfail_maxlogsize;
+ sync_enabled = loginfo.log_auditfail_rotationsync_enabled;
+ syncclock = loginfo.log_auditfail_rotationsyncclock;
+ timeunit = loginfo.log_auditfail_rotationunit;
+ rotationtime_secs = loginfo.log_auditfail_rotationtime_secs;
+ log_createtime = loginfo.log_auditfail_ctime;
+ break;
default: /* error */
maxlogsize = -1;
nlogs = 1;
@@ -3398,6 +3707,173 @@ delete_logfile:
}
/******************************************************************************
+* log__delete_auditfail_logfile
+*
+* Do we need to delete a logfile. Find out if we need to delete the log
+* file based on expiration time, max diskspace, and minfreespace.
+* Delete the file if we need to.
+*
+* Assumption: A WRITE lock has been acquired for the auditfail log
+******************************************************************************/
+
+static int
+log__delete_auditfail_logfile()
+{
+ struct logfileinfo *logp = NULL;
+ struct logfileinfo *delete_logp = NULL;
+ struct logfileinfo *p_delete_logp = NULL;
+ struct logfileinfo *prev_logp = NULL;
+ PRInt64 total_size=0;
+ time_t cur_time;
+ PRInt64 f_size;
+ int numoflogs=loginfo.log_numof_auditfail_logs;
+ int rv = 0;
+ char *logstr;
+ char buffer[BUFSIZ];
+ char tbuf[TBUFSIZE];
+
+ /* If we have only one log, then will delete this one */
+ if (loginfo.log_auditfail_maxnumlogs == 1) {
+ LOG_CLOSE(loginfo.log_auditfail_fdes);
+ loginfo.log_auditfail_fdes = NULL;
+ PR_snprintf(buffer, sizeof(buffer), "%s", loginfo.log_auditfail_file);
+ if (PR_Delete(buffer) != PR_SUCCESS) {
+ PRErrorCode prerr = PR_GetError();
+ if (PR_FILE_NOT_FOUND_ERROR == prerr) {
+ slapi_log_error(SLAPI_LOG_TRACE, "LOGINFO", "File %s already removed\n", loginfo.log_auditfail_file);
+ } else {
+ slapi_log_error(SLAPI_LOG_TRACE, "LOGINFO", "Unable to remove file:%s error %d (%s)\n",
+ loginfo.log_auditfail_file, prerr, slapd_pr_strerror(prerr));
+ }
+ }
+
+ /* Delete the rotation file also. */
+ PR_snprintf(buffer, sizeof(buffer), "%s.rotationinfo", loginfo.log_auditfail_file);
+ if (PR_Delete(buffer) != PR_SUCCESS) {
+ PRErrorCode prerr = PR_GetError();
+ if (PR_FILE_NOT_FOUND_ERROR == prerr) {
+ slapi_log_error(SLAPI_LOG_TRACE, "LOGINFO", "File %s already removed\n", loginfo.log_auditfail_file);
+ } else {
+ slapi_log_error(SLAPI_LOG_TRACE, "LOGINFO", "Unable to remove file:%s.rotatoininfo error %d (%s)\n",
+ loginfo.log_auditfail_file, prerr, slapd_pr_strerror(prerr));
+ }
+ }
+ return 0;
+ }
+
+ /* If we have already the maximum number of log files, we
+ ** have to delete one any how.
+ */
+ if (++numoflogs > loginfo.log_auditfail_maxnumlogs) {
+ logstr = "Delete Error Log File: Exceeded max number of logs allowed";
+ goto delete_logfile;
+ }
+
+ /* Now check based on the maxdiskspace */
+ if (loginfo.log_auditfail_maxdiskspace > 0) {
+ logp = loginfo.log_auditfail_logchain;
+ while (logp) {
+ total_size += logp->l_size;
+ logp = logp->l_next;
+ }
+ if ((f_size = log__getfilesize(loginfo.log_auditfail_fdes)) == -1) {
+ /* then just assume the max size */
+ total_size += loginfo.log_auditfail_maxlogsize;
+ } else {
+ total_size += f_size;
+ }
+
+ /* If we have exceeded the max disk space or we have less than the
+ ** minimum, then we have to delete a file.
+ */
+ if (total_size >= loginfo.log_auditfail_maxdiskspace) {
+ logstr = "exceeded maximum log disk space";
+ goto delete_logfile;
+ }
+ }
+
+ /* Now check based on the free space */
+ if ( loginfo.log_auditfail_minfreespace > 0) {
+ rv = log__enough_freespace(loginfo.log_auditfail_file);
+ if ( rv == 0) {
+ /* Not enough free space */
+ logstr = "Not enough free disk space";
+ goto delete_logfile;
+ }
+ }
+
+ /* Now check based on the expiration time */
+ if ( loginfo.log_auditfail_exptime_secs > 0 ) {
+ /* is the file old enough */
+ time (&cur_time);
+ prev_logp = logp = loginfo.log_auditfail_logchain;
+ while (logp) {
+ if ((cur_time - logp->l_ctime) > loginfo.log_auditfail_exptime_secs) {
+ delete_logp = logp;
+ p_delete_logp = prev_logp;
+ logstr = "The file is older than the log expiration time";
+ goto delete_logfile;
+ }
+ prev_logp = logp;
+ logp = logp->l_next;
+ }
+ }
+
+ /* No log files to delete */
+ return 0;
+
+delete_logfile:
+ if (delete_logp == NULL) {
+ time_t oldest;
+
+ time(&oldest);
+
+ prev_logp = logp = loginfo.log_auditfail_logchain;
+ while (logp) {
+ if (logp->l_ctime <= oldest) {
+ oldest = logp->l_ctime;
+ delete_logp = logp;
+ p_delete_logp = prev_logp;
+ }
+ prev_logp = logp;
+ logp = logp->l_next;
+ }
+ /* We might face this case if we have only one log file and
+ ** trying to delete it because of deletion requirement.
+ */
+ if (!delete_logp) {
+ return 0;
+ }
+ }
+
+ if (p_delete_logp == delete_logp) {
+ /* then we are deleteing the first one */
+ loginfo.log_auditfail_logchain = delete_logp->l_next;
+ } else {
+ p_delete_logp->l_next = delete_logp->l_next;
+ }
+
+ /* Delete the audit file */
+ log_convert_time (delete_logp->l_ctime, tbuf, 1 /*short */);
+ PR_snprintf(buffer, sizeof(buffer), "%s.%s", loginfo.log_auditfail_file, tbuf );
+ if (PR_Delete(buffer) != PR_SUCCESS) {
+ PRErrorCode prerr = PR_GetError();
+ if (PR_FILE_NOT_FOUND_ERROR == prerr) {
+ slapi_log_error(SLAPI_LOG_TRACE, "LOGINFO", "File %s already removed\n", loginfo.log_auditfail_file);
+ } else {
+ slapi_log_error(SLAPI_LOG_TRACE, "LOGINFO", "Unable to remove file:%s.%s error %d (%s)\n",
+ loginfo.log_auditfail_file, tbuf, prerr, slapd_pr_strerror(prerr));
+ }
+ } else {
+ slapi_log_error(SLAPI_LOG_TRACE, "LOGINFO", "Removed file:%s.%s because of (%s)\n", loginfo.log_auditfail_file, tbuf, logstr);
+ }
+ slapi_ch_free((void**)&delete_logp);
+ loginfo.log_numof_auditfail_logs--;
+
+ return 1;
+}
+
+/******************************************************************************
* log__error_rotationinfof
*
* Try to open the log file. If we have one already, then try to read the
@@ -3571,6 +4047,101 @@ log__audit_rotationinfof( char *pathname)
return logfile_type;
}
+/******************************************************************************
+* log__auditfail_rotationinfof
+*
+* Try to open the log file. If we have one already, then try to read the
+* header and update the information.
+*
+* Assumption: Lock has been acquired already
+******************************************************************************/
+static int
+log__auditfail_rotationinfof( char *pathname)
+{
+ long f_ctime;
+ PRInt64 f_size;
+ int main_log = 1;
+ time_t now;
+ FILE *fp;
+ int rval, logfile_type = LOGFILE_REOPENED;
+
+ /*
+ ** Okay -- I confess, we want to use NSPR calls but I want to
+ ** use fgets and not use PR_Read() and implement a complicated
+ ** parsing module. Since this will be called only during the startup
+ ** and never aftre that, we can live by it.
+ */
+
+ if ((fp = fopen (pathname, "r")) == NULL) {
+ return LOGFILE_NEW;
+ }
+
+ loginfo.log_numof_auditfail_logs = 0;
+
+ /*
+ ** We have reopened the log audit file. Now we need to read the
+ ** log file info and update the values.
+ */
+ while ((rval = log__extract_logheader(fp, &f_ctime, &f_size)) == LOG_CONTINUE) {
+ /* first we would get the main log info */
+ if (f_ctime == 0 && f_size == 0) {
+ continue;
+ }
+ time (&now);
+ if (main_log) {
+ if (f_ctime > 0L) {
+ loginfo.log_auditfail_ctime = f_ctime;
+ }
+ else {
+ loginfo.log_auditfail_ctime = now;
+ }
+ main_log = 0;
+ } else {
+ struct logfileinfo *logp;
+
+ logp = (struct logfileinfo *) slapi_ch_malloc (sizeof (struct logfileinfo));
+ if (f_ctime > 0L) {
+ logp->l_ctime = f_ctime;
+ }
+ else {
+ logp->l_ctime = now;
+ }
+ if (f_size > 0) {
+ logp->l_size = f_size;
+ }
+ else {
+ /* make it the max log size */
+ logp->l_size = loginfo.log_auditfail_maxlogsize;
+ }
+
+ logp->l_next = loginfo.log_auditfail_logchain;
+ loginfo.log_auditfail_logchain = logp;
+ }
+ loginfo.log_numof_auditfail_logs++;
+ }
+ if (LOG_DONE == rval) {
+ rval = log__check_prevlogs(fp, pathname);
+ }
+ fclose (fp);
+
+ if (LOG_ERROR == rval) {
+ if (LOG_SUCCESS == log__fix_rotationinfof(pathname)) {
+ logfile_type = LOGFILE_NEW;
+ }
+ }
+
+ /* Check if there is a rotation overdue */
+ if (loginfo.log_auditfail_rotationsync_enabled &&
+ loginfo.log_auditfail_rotationunit != LOG_UNIT_HOURS &&
+ loginfo.log_auditfail_rotationunit != LOG_UNIT_MINS &&
+ loginfo.log_auditfail_ctime < loginfo.log_auditfail_rotationsyncclock - PR_ABS(loginfo.log_auditfail_rotationtime_secs))
+ {
+ loginfo.log_auditfail_rotationsyncclock -= PR_ABS(loginfo.log_auditfail_rotationtime_secs);
+ }
+
+ return logfile_type;
+}
+
static void
log__error_emergency(const char *errstr, int reopen, int locked)
{
@@ -3889,6 +4460,132 @@ log__open_auditlogfile(int logfile_state, int locked)
if (!locked) LOG_AUDIT_UNLOCK_WRITE( );
return LOG_SUCCESS;
}
+/******************************************************************************
+* log__open_auditfaillogfile
+*
+* Open a new log file. If we have run out of the max logs we can have
+* then delete the oldest file.
+******************************************************************************/
+static int
+log__open_auditfaillogfile(int logfile_state, int locked)
+{
+
+ time_t now;
+ LOGFD fp;
+ LOGFD fpinfo = NULL;
+ char tbuf[TBUFSIZE];
+ struct logfileinfo *logp;
+ char buffer[BUFSIZ];
+
+ if (!locked) LOG_AUDITFAIL_LOCK_WRITE( );
+
+ /*
+ ** Here we are trying to create a new log file.
+ ** If we alredy have one, then we need to rename it as
+ ** "filename.time", close it and update it's information
+ ** in the array stack.
+ */
+ if (loginfo.log_auditfail_fdes != NULL) {
+ struct logfileinfo *log;
+ char newfile[BUFSIZ];
+ PRInt64 f_size;
+
+
+ /* get rid of the old one */
+ if ((f_size = log__getfilesize(loginfo.log_auditfail_fdes)) == -1) {
+ /* Then assume that we have the max size */
+ f_size = loginfo.log_auditfail_maxlogsize;
+ }
+
+ /* Check if I have to delete any old file, delete it if it is required. */
+ while (log__delete_auditfail_logfile());
+
+ /* close the file */
+ LOG_CLOSE(loginfo.log_auditfail_fdes);
+ loginfo.log_auditfail_fdes = NULL;
+
+ if ( loginfo.log_auditfail_maxnumlogs > 1 ) {
+ log = (struct logfileinfo *) slapi_ch_malloc (sizeof (struct logfileinfo));
+ log->l_ctime = loginfo.log_auditfail_ctime;
+ log->l_size = f_size;
+
+ log_convert_time (log->l_ctime, tbuf, 1 /*short */);
+ PR_snprintf(newfile, sizeof(newfile), "%s.%s", loginfo.log_auditfail_file, tbuf);
+ if (PR_Rename (loginfo.log_auditfail_file, newfile) != PR_SUCCESS) {
+ PRErrorCode prerr = PR_GetError();
+ /* Make "FILE EXISTS" error an exception.
+ Even if PR_Rename fails with the error, we continue logging.
+ */
+ if (PR_FILE_EXISTS_ERROR != prerr) {
+ if (!locked) LOG_AUDITFAIL_UNLOCK_WRITE();
+ slapi_ch_free((void**)&log);
+ return LOG_UNABLE_TO_OPENFILE;
+ }
+ }
+
+ /* add the log to the chain */
+ log->l_next = loginfo.log_auditfail_logchain;
+ loginfo.log_auditfail_logchain = log;
+ loginfo.log_numof_auditfail_logs++;
+ }
+ }
+
+ /* open a new log file */
+ if (! LOG_OPEN_APPEND(fp, loginfo.log_auditfail_file, loginfo.log_auditfail_mode)) {
+ LDAPDebug(LDAP_DEBUG_ANY, "WARNING: can't open file %s. "
+ "errno %d (%s)\n",
+ loginfo.log_auditfail_file, errno, slapd_system_strerror(errno));
+ if (!locked) LOG_AUDITFAIL_UNLOCK_WRITE();
+ /*if I have an old log file -- I should log a message
+ ** that I can't open the new file. Let the caller worry
+ ** about logging message.
+ */
+ return LOG_UNABLE_TO_OPENFILE;
+ }
+
+ loginfo.log_auditfail_fdes = fp;
+ if (logfile_state == LOGFILE_REOPENED) {
+ /* we have all the information */
+ if (!locked) LOG_AUDITFAIL_UNLOCK_WRITE();
+ return LOG_SUCCESS;
+ }
+
+ loginfo.log_auditfail_state |= LOGGING_NEED_TITLE;
+
+ if (! LOG_OPEN_WRITE(fpinfo, loginfo.log_auditfailinfo_file, loginfo.log_auditfail_mode)) {
+ LDAPDebug(LDAP_DEBUG_ANY, "WARNING: can't open file %s. "
+ "errno %d (%s)\n",
+ loginfo.log_auditfailinfo_file, errno, slapd_system_strerror(errno));
+ if (!locked) LOG_AUDITFAIL_UNLOCK_WRITE();
+ return LOG_UNABLE_TO_OPENFILE;
+ }
+
+ /* write the header in the log */
+ now = current_time();
+ log_convert_time (now, tbuf, 2 /*long */);
+ PR_snprintf(buffer, sizeof(buffer), "LOGINFO:Log file created at: %s (%lu)\n", tbuf, now);
+ LOG_WRITE(fpinfo, buffer, strlen(buffer), 0);
+
+ logp = loginfo.log_auditfail_logchain;
+ while ( logp) {
+ log_convert_time (logp->l_ctime, tbuf, 1 /*short */);
+ PR_snprintf(buffer, sizeof(buffer), "LOGINFO:%s%s.%s (%lu) (%"
+ NSPRI64 "d)\n", PREVLOGFILE, loginfo.log_auditfail_file, tbuf,
+ logp->l_ctime, logp->l_size);
+ LOG_WRITE(fpinfo, buffer, strlen(buffer), 0);
+ logp = logp->l_next;
+ }
+ /* Close the info file. We need only when we need to rotate to the
+ ** next log file.
+ */
+ if (fpinfo) LOG_CLOSE(fpinfo);
+
+ /* This is now the current audit log */
+ loginfo.log_auditfail_ctime = now;
+
+ if (!locked) LOG_AUDITFAIL_UNLOCK_WRITE( );
+ return LOG_SUCCESS;
+}
/*
** Log Buffering
diff --git a/ldap/servers/slapd/log.h b/ldap/servers/slapd/log.h
index 40df6d7..6c5f4f1 100644
--- a/ldap/servers/slapd/log.h
+++ b/ldap/servers/slapd/log.h
@@ -176,6 +176,32 @@ struct logging_opts {
char *log_auditinfo_file; /* audit log rotation info file */
Slapi_RWLock *log_audit_rwlock; /* lock on audit*/
+ /* These are auditfail log specific */
+ int log_auditfail_state;
+ int log_auditfail_mode; /* access mode */
+ int log_auditfail_maxnumlogs; /* Number of logs */
+ PRInt64 log_auditfail_maxlogsize; /* max log size in bytes*/
+ int log_auditfail_rotationtime; /* time in units. */
+ int log_auditfail_rotationunit; /* time in units. */
+ int log_auditfail_rotationtime_secs; /* time in seconds */
+ int log_auditfail_rotationsync_enabled;/* 0 or 1*/
+ int log_auditfail_rotationsynchour; /* 0-23 */
+ int log_auditfail_rotationsyncmin; /* 0-59 */
+ time_t log_auditfail_rotationsyncclock; /* clock in seconds */
+ PRInt64 log_auditfail_maxdiskspace; /* space in bytes */
+ PRInt64 log_auditfail_minfreespace; /* free space in bytes */
+ int log_auditfail_exptime; /* time */
+ int log_auditfail_exptimeunit; /* unit time */
+ int log_auditfail_exptime_secs; /* time in secs */
+
+ char *log_auditfail_file; /* auditfail log name */
+ LOGFD log_auditfail_fdes; /* auditfail log fdes */
+ unsigned int log_numof_auditfail_logs; /* number of logs */
+ time_t log_auditfail_ctime; /* log creation time */
+ LogFileInfo *log_auditfail_logchain; /* all the logs info */
+ char *log_auditfailinfo_file; /* auditfail log rotation info file */
+ Slapi_RWLock *log_auditfail_rwlock; /* lock on auditfail */
+
};
/* For log_state */
@@ -197,3 +223,8 @@ struct logging_opts {
#define LOG_AUDIT_LOCK_WRITE() slapi_rwlock_wrlock(loginfo.log_audit_rwlock)
#define LOG_AUDIT_UNLOCK_WRITE() slapi_rwlock_unlock(loginfo.log_audit_rwlock)
+#define LOG_AUDITFAIL_LOCK_READ() slapi_rwlock_rdlock(loginfo.log_auditfail_rwlock)
+#define LOG_AUDITFAIL_UNLOCK_READ() slapi_rwlock_unlock(loginfo.log_auditfail_rwlock)
+#define LOG_AUDITFAIL_LOCK_WRITE() slapi_rwlock_wrlock(loginfo.log_auditfail_rwlock)
+#define LOG_AUDITFAIL_UNLOCK_WRITE() slapi_rwlock_unlock(loginfo.log_auditfail_rwlock)
+
diff --git a/ldap/servers/slapd/modify.c b/ldap/servers/slapd/modify.c
index 9225d31..4c0becc 100644
--- a/ldap/servers/slapd/modify.c
+++ b/ldap/servers/slapd/modify.c
@@ -1079,6 +1079,11 @@ static void op_shared_modify (Slapi_PBlock *pb, int pw_change, char *old_pw)
operation_out_of_disk_space();
goto free_and_return;
}
+ /* If the disk is full we don't want to make it worse ... */
+ if (operation_is_flag_set(operation,OP_FLAG_ACTION_LOG_AUDIT))
+ {
+ write_auditfail_log_entry(pb); /* Record the operation in the audit log */
+ }
}
}
else
diff --git a/ldap/servers/slapd/modrdn.c b/ldap/servers/slapd/modrdn.c
index e80e1f9..d0ef1b1 100644
--- a/ldap/servers/slapd/modrdn.c
+++ b/ldap/servers/slapd/modrdn.c
@@ -641,6 +641,12 @@ op_shared_rename(Slapi_PBlock *pb, int passin_args)
slapi_pblock_get(pb, SLAPI_ENTRY_PRE_OP, &ecopy);
/* GGOODREPL persistent search system needs the changenumber, oops. */
do_ps_service(pse, ecopy, LDAP_CHANGETYPE_MODDN, 0);
+ } else {
+ /* Should we also be doing a disk space check here? */
+ if (operation_is_flag_set(operation,OP_FLAG_ACTION_LOG_AUDIT))
+ {
+ write_auditfail_log_entry(pb); /* Record the operation in the audit log */
+ }
}
}
else
diff --git a/ldap/servers/slapd/proto-slap.h b/ldap/servers/slapd/proto-slap.h
index ff9dd09..22e8007 100644
--- a/ldap/servers/slapd/proto-slap.h
+++ b/ldap/servers/slapd/proto-slap.h
@@ -293,6 +293,7 @@ int config_set_timelimit(const char *attrname, char *value, char *errorbuf, int
int config_set_errorlog_level(const char *attrname, char *value, char *errorbuf, int apply );
int config_set_accesslog_level(const char *attrname, char *value, char *errorbuf, int apply );
int config_set_auditlog(const char *attrname, char *value, char *errorbuf, int apply );
+int config_set_auditfaillog(const char *attrname, char *value, char *errorbuf, int apply );
int config_set_userat(const char *attrname, char *value, char *errorbuf, int apply );
int config_set_accesslog(const char *attrname, char *value, char *errorbuf, int apply );
int config_set_errorlog(const char *attrname, char *value, char *errorbuf, int apply );
@@ -372,6 +373,7 @@ int config_set_disk_threshold( const char *attrname, char *value, char *errorbuf
int config_set_disk_grace_period( const char *attrname, char *value, char *errorbuf, int apply );
int config_set_disk_logging_critical( const char *attrname, char *value, char *errorbuf, int apply );
int config_set_auditlog_unhashed_pw(const char *attrname, char *value, char *errorbuf, int apply);
+int config_set_auditfaillog_unhashed_pw(const char *attrname, char *value, char *errorbuf, int apply);
int config_set_ndn_cache_enabled(const char *attrname, char *value, char *errorbuf, int apply);
int config_set_ndn_cache_max_size(const char *attrname, char *value, char *errorbuf, int apply);
int config_set_unhashed_pw_switch(const char *attrname, char *value, char *errorbuf, int apply);
@@ -476,12 +478,14 @@ char* config_get_useroc();
char *config_get_accesslog();
char *config_get_errorlog();
char *config_get_auditlog();
+char *config_get_auditfaillog();
long config_get_pw_maxage();
long config_get_pw_minage();
long config_get_pw_warning();
int config_get_errorlog_level();
int config_get_accesslog_level();
int config_get_auditlog_logging_enabled();
+int config_get_auditfaillog_logging_enabled();
char *config_get_referral_mode(void);
int config_get_conntablesize(void);
int config_check_referral_mode(void);
@@ -503,6 +507,7 @@ char *config_get_saslpath();
char **config_get_errorlog_list();
char **config_get_accesslog_list();
char **config_get_auditlog_list();
+char **config_get_auditfaillog_list();
int config_get_attrname_exceptions();
int config_get_hash_filters();
int config_get_rewrite_rfc1274();
@@ -529,6 +534,7 @@ char *config_get_default_naming_context(void);
int config_allowed_to_delete_attrs(const char *attr_type);
void config_set_accesslog_enabled(int value);
void config_set_auditlog_enabled(int value);
+void config_set_auditfaillog_enabled(int value);
int config_get_accesslog_logging_enabled();
int config_get_disk_monitoring();
PRInt64 config_get_disk_threshold();
@@ -743,18 +749,21 @@ int slapi_log_access( int level, char *fmt, ... )
;
#endif
int slapd_log_audit_proc(char *buffer, int buf_len);
+int slapd_log_auditfail_proc(char *buffer, int buf_len);
void log_access_flush();
int access_log_openf( char *pathname, int locked);
int error_log_openf( char *pathname, int locked);
int audit_log_openf( char *pathname, int locked);
+int auditfail_log_openf( char *pathname, int locked);
void g_set_detached(int);
void g_log_init(int log_enabled);
char *g_get_access_log();
char *g_get_error_log();
char *g_get_audit_log();
+char *g_get_auditfail_log();
void g_set_accesslog_level(int val);
int log_set_mode(const char *attrname, char *mode_str, int logtype, char *errorbuf, int apply);
@@ -773,6 +782,7 @@ char **log_get_loglist(int logtype);
int log_update_accesslogdir(char *pathname, int apply);
int log_update_errorlogdir(char *pathname, int apply);
int log_update_auditlogdir(char *pathname, int apply);
+int log_update_auditfaillogdir(char *pathname, int apply);
int log_set_logging (const char *attrname, char *value, int logtype, char *errorbuf, int apply);
int check_log_max_size(
char *maxdiskspace_str,
@@ -1245,6 +1255,10 @@ void write_audit_log_entry( Slapi_PBlock *pb);
void auditlog_hide_unhashed_pw();
void auditlog_expose_unhashed_pw();
+void write_auditfail_log_entry( Slapi_PBlock *pb);
+void auditfaillog_hide_unhashed_pw();
+void auditfaillog_expose_unhashed_pw();
+
/*
* eventq.c
*/
diff --git a/ldap/servers/slapd/slap.h b/ldap/servers/slapd/slap.h
index f78bc46..3cc99cf 100644
--- a/ldap/servers/slapd/slap.h
+++ b/ldap/servers/slapd/slap.h
@@ -1883,6 +1883,7 @@ typedef struct _slapdEntryPoints {
#define SLAPD_ACCESS_LOG 0x1
#define SLAPD_ERROR_LOG 0x2
#define SLAPD_AUDIT_LOG 0x4
+#define SLAPD_AUDITFAIL_LOG 0x8
#define CONFIG_DATABASE_ATTRIBUTE "nsslapd-database"
#define CONFIG_PLUGIN_ATTRIBUTE "nsslapd-plugin"
@@ -1907,48 +1908,63 @@ typedef struct _slapdEntryPoints {
#define CONFIG_ACCESSLOG_MODE_ATTRIBUTE "nsslapd-accesslog-mode"
#define CONFIG_ERRORLOG_MODE_ATTRIBUTE "nsslapd-errorlog-mode"
#define CONFIG_AUDITLOG_MODE_ATTRIBUTE "nsslapd-auditlog-mode"
+#define CONFIG_AUDITFAILLOG_MODE_ATTRIBUTE "nsslapd-auditfaillog-mode"
#define CONFIG_ACCESSLOG_MAXNUMOFLOGSPERDIR_ATTRIBUTE "nsslapd-accesslog-maxlogsperdir"
#define CONFIG_ERRORLOG_MAXNUMOFLOGSPERDIR_ATTRIBUTE "nsslapd-errorlog-maxlogsperdir"
#define CONFIG_AUDITLOG_MAXNUMOFLOGSPERDIR_ATTRIBUTE "nsslapd-auditlog-maxlogsperdir"
+#define CONFIG_AUDITFAILLOG_MAXNUMOFLOGSPERDIR_ATTRIBUTE "nsslapd-auditfaillog-maxlogsperdir"
#define CONFIG_ACCESSLOG_MAXLOGSIZE_ATTRIBUTE "nsslapd-accesslog-maxlogsize"
#define CONFIG_ERRORLOG_MAXLOGSIZE_ATTRIBUTE "nsslapd-errorlog-maxlogsize"
#define CONFIG_AUDITLOG_MAXLOGSIZE_ATTRIBUTE "nsslapd-auditlog-maxlogsize"
+#define CONFIG_AUDITFAILLOG_MAXLOGSIZE_ATTRIBUTE "nsslapd-auditfaillog-maxlogsize"
#define CONFIG_ACCESSLOG_LOGROTATIONSYNCENABLED_ATTRIBUTE "nsslapd-accesslog-logrotationsync-enabled"
#define CONFIG_ERRORLOG_LOGROTATIONSYNCENABLED_ATTRIBUTE "nsslapd-errorlog-logrotationsync-enabled"
#define CONFIG_AUDITLOG_LOGROTATIONSYNCENABLED_ATTRIBUTE "nsslapd-auditlog-logrotationsync-enabled"
+#define CONFIG_AUDITFAILLOG_LOGROTATIONSYNCENABLED_ATTRIBUTE "nsslapd-auditfaillog-logrotationsync-enabled"
#define CONFIG_ACCESSLOG_LOGROTATIONSYNCHOUR_ATTRIBUTE "nsslapd-accesslog-logrotationsynchour"
#define CONFIG_ERRORLOG_LOGROTATIONSYNCHOUR_ATTRIBUTE "nsslapd-errorlog-logrotationsynchour"
#define CONFIG_AUDITLOG_LOGROTATIONSYNCHOUR_ATTRIBUTE "nsslapd-auditlog-logrotationsynchour"
+#define CONFIG_AUDITFAILLOG_LOGROTATIONSYNCHOUR_ATTRIBUTE "nsslapd-auditfaillog-logrotationsynchour"
#define CONFIG_ACCESSLOG_LOGROTATIONSYNCMIN_ATTRIBUTE "nsslapd-accesslog-logrotationsyncmin"
#define CONFIG_ERRORLOG_LOGROTATIONSYNCMIN_ATTRIBUTE "nsslapd-errorlog-logrotationsyncmin"
#define CONFIG_AUDITLOG_LOGROTATIONSYNCMIN_ATTRIBUTE "nsslapd-auditlog-logrotationsyncmin"
+#define CONFIG_AUDITFAILLOG_LOGROTATIONSYNCMIN_ATTRIBUTE "nsslapd-auditfaillog-logrotationsyncmin"
#define CONFIG_ACCESSLOG_LOGROTATIONTIME_ATTRIBUTE "nsslapd-accesslog-logrotationtime"
#define CONFIG_ERRORLOG_LOGROTATIONTIME_ATTRIBUTE "nsslapd-errorlog-logrotationtime"
#define CONFIG_AUDITLOG_LOGROTATIONTIME_ATTRIBUTE "nsslapd-auditlog-logrotationtime"
+#define CONFIG_AUDITFAILLOG_LOGROTATIONTIME_ATTRIBUTE "nsslapd-auditfaillog-logrotationtime"
#define CONFIG_ACCESSLOG_LOGROTATIONTIMEUNIT_ATTRIBUTE "nsslapd-accesslog-logrotationtimeunit"
#define CONFIG_ERRORLOG_LOGROTATIONTIMEUNIT_ATTRIBUTE "nsslapd-errorlog-logrotationtimeunit"
#define CONFIG_AUDITLOG_LOGROTATIONTIMEUNIT_ATTRIBUTE "nsslapd-auditlog-logrotationtimeunit"
+#define CONFIG_AUDITFAILLOG_LOGROTATIONTIMEUNIT_ATTRIBUTE "nsslapd-auditfaillog-logrotationtimeunit"
#define CONFIG_ACCESSLOG_MAXLOGDISKSPACE_ATTRIBUTE "nsslapd-accesslog-logmaxdiskspace"
#define CONFIG_ERRORLOG_MAXLOGDISKSPACE_ATTRIBUTE "nsslapd-errorlog-logmaxdiskspace"
#define CONFIG_AUDITLOG_MAXLOGDISKSPACE_ATTRIBUTE "nsslapd-auditlog-logmaxdiskspace"
+#define CONFIG_AUDITFAILLOG_MAXLOGDISKSPACE_ATTRIBUTE "nsslapd-auditfaillog-logmaxdiskspace"
#define CONFIG_ACCESSLOG_MINFREEDISKSPACE_ATTRIBUTE "nsslapd-accesslog-logminfreediskspace"
#define CONFIG_ERRORLOG_MINFREEDISKSPACE_ATTRIBUTE "nsslapd-errorlog-logminfreediskspace"
#define CONFIG_AUDITLOG_MINFREEDISKSPACE_ATTRIBUTE "nsslapd-auditlog-logminfreediskspace"
+#define CONFIG_AUDITFAILLOG_MINFREEDISKSPACE_ATTRIBUTE "nsslapd-auditfaillog-logminfreediskspace"
#define CONFIG_ACCESSLOG_LOGEXPIRATIONTIME_ATTRIBUTE "nsslapd-accesslog-logexpirationtime"
#define CONFIG_ERRORLOG_LOGEXPIRATIONTIME_ATTRIBUTE "nsslapd-errorlog-logexpirationtime"
#define CONFIG_AUDITLOG_LOGEXPIRATIONTIME_ATTRIBUTE "nsslapd-auditlog-logexpirationtime"
+#define CONFIG_AUDITFAILLOG_LOGEXPIRATIONTIME_ATTRIBUTE "nsslapd-auditfaillog-logexpirationtime"
#define CONFIG_ACCESSLOG_LOGEXPIRATIONTIMEUNIT_ATTRIBUTE "nsslapd-accesslog-logexpirationtimeunit"
#define CONFIG_ERRORLOG_LOGEXPIRATIONTIMEUNIT_ATTRIBUTE "nsslapd-errorlog-logexpirationtimeunit"
#define CONFIG_AUDITLOG_LOGEXPIRATIONTIMEUNIT_ATTRIBUTE "nsslapd-auditlog-logexpirationtimeunit"
+#define CONFIG_AUDITFAILLOG_LOGEXPIRATIONTIMEUNIT_ATTRIBUTE "nsslapd-auditfaillog-logexpirationtimeunit"
#define CONFIG_ACCESSLOG_LOGGING_ENABLED_ATTRIBUTE "nsslapd-accesslog-logging-enabled"
#define CONFIG_ERRORLOG_LOGGING_ENABLED_ATTRIBUTE "nsslapd-errorlog-logging-enabled"
#define CONFIG_AUDITLOG_LOGGING_ENABLED_ATTRIBUTE "nsslapd-auditlog-logging-enabled"
+#define CONFIG_AUDITFAILLOG_LOGGING_ENABLED_ATTRIBUTE "nsslapd-auditfaillog-logging-enabled"
#define CONFIG_AUDITLOG_LOGGING_HIDE_UNHASHED_PW "nsslapd-auditlog-logging-hide-unhashed-pw"
+#define CONFIG_AUDITFAILLOG_LOGGING_HIDE_UNHASHED_PW "nsslapd-auditfaillog-logging-hide-unhashed-pw"
#define CONFIG_UNHASHED_PW_SWITCH_ATTRIBUTE "nsslapd-unhashed-pw-switch"
#define CONFIG_ROOTDN_ATTRIBUTE "nsslapd-rootdn"
#define CONFIG_ROOTPW_ATTRIBUTE "nsslapd-rootpw"
#define CONFIG_ROOTPWSTORAGESCHEME_ATTRIBUTE "nsslapd-rootpwstoragescheme"
#define CONFIG_AUDITFILE_ATTRIBUTE "nsslapd-auditlog"
+#define CONFIG_AUDITFAILFILE_ATTRIBUTE "nsslapd-auditfaillog"
#define CONFIG_LASTMOD_ATTRIBUTE "nsslapd-lastmod"
#define CONFIG_INCLUDE_ATTRIBUTE "nsslapd-include"
#define CONFIG_DYNAMICCONF_ATTRIBUTE "nsslapd-dynamicconf"
@@ -2042,6 +2058,7 @@ typedef struct _slapdEntryPoints {
#define CONFIG_ACCESSLOG_LIST_ATTRIBUTE "nsslapd-accesslog-list"
#define CONFIG_ERRORLOG_LIST_ATTRIBUTE "nsslapd-errorlog-list"
#define CONFIG_AUDITLOG_LIST_ATTRIBUTE "nsslapd-auditlog-list"
+#define CONFIG_AUDITFAILLOG_LIST_ATTRIBUTE "nsslapd-auditfaillog-list"
#define CONFIG_REWRITE_RFC1274_ATTRIBUTE "nsslapd-rewrite-rfc1274"
#define CONFIG_PLUGIN_BINDDN_TRACKING_ATTRIBUTE "nsslapd-plugin-binddn-tracking"
#define CONFIG_MODDN_ACI_ATTRIBUTE "nsslapd-moddn-aci"
@@ -2265,6 +2282,24 @@ typedef struct _slapdFrontendConfig {
char *auditlog_exptimeunit;
slapi_onoff_t auditlog_logging_hide_unhashed_pw;
+ /* AUDIT FAIL LOG */
+ char *auditfaillog;
+ int auditfailloglevel;
+ slapi_onoff_t auditfaillog_logging_enabled;
+ char *auditfaillog_mode;
+ int auditfaillog_maxnumlogs;
+ int auditfaillog_maxlogsize;
+ slapi_onoff_t auditfaillog_rotationsync_enabled;
+ int auditfaillog_rotationsynchour;
+ int auditfaillog_rotationsyncmin;
+ int auditfaillog_rotationtime;
+ char *auditfaillog_rotationunit;
+ int auditfaillog_maxdiskspace;
+ int auditfaillog_minfreespace;
+ int auditfaillog_exptime;
+ char *auditfaillog_exptimeunit;
+ slapi_onoff_t auditfaillog_logging_hide_unhashed_pw;
+
slapi_onoff_t return_exact_case; /* Return attribute names with the same case
as they appear in at.conf */
1
0
Changes since 389-ds-base-1.2.6.a1:
Anupam Jain (9):
Ticket 123 - Enhancement request:"whoami" extended operation
Ticket 123 - Enhancement request:"whoami" extended operation
Ticket 123 - Enhancement request:"whoami" extended operation
Ticket #47423 - 7-bit check plugin does not work for userpassword attribute
Ticket #47363 - 7-bit checking is not necessary for userPassword
Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
Ticket #47370 - DS crashes with some 7-bit check plugin configurations
Ticket #617 - Possible to add invalid ACI value
Ticket #626 - Possible to add nonexistent target to ACI
Carsten Grzemba (2):
Ticket #555 - add fixup-memberuid.pl script
Ticket #555 - add fixup-memberuid.pl script
Charles Lopes (1):
Bug #361: Bad DNs in ACIs can segfault ns-slapd
Endi S. Dewata (168):
Bug 545620 - Password cannot start with minus sign
Bug 538525 - Ability to create instance as non-root user
Bug 570542 - Root password cannot contain matching curly braces
Bug 470684 - Pam_passthru plugin doesn't verify account activation
Bug 573375 - MODRDN operation not logged
Bug 520151 - Error when modifying userPassword with proxy user
Bug 455489 - Address compiler warnings about strict-aliasing rules
Bug 566320 - RFE: add exception to removal of attributes in cn=config for aci
Bug 566043 - startpid file is only cleaned by initscript runs
Bug 584109 - Slapd crashes while parsing DNA configuration
Bug 542570 - Directory Server port number is not validated in the beginning.
Bug 145181 - Plugin target/bind subtrees only take 1 value.
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 628096 - spurious error message from /sbin/service when doing a stop on no instances
Bug 573889 - Migration does not remove deprecated schema
Bug 606545 - core schema should include numSubordinates
Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-referral)
Endi Sukma Dewata (16):
Bug 630092 - Coverity #12117: Resource leaks issues
Bug 630092 - Coverity #15478: Resource leaks issues
Bug 630092 - Coverity #15479: Resource leaks issues
Bug 630092 - Coverity #15481: Resource leaks issues
Bug 630092 - Coverity #15482: Resource leaks issues
Bug 630092 - Coverity #15483: Resource leaks issues
Bug 630092 - Coverity #15484: Resource leaks issues
Bug 630092 - Coverity #15485: Resource leaks issues
Bug 630092 - Coverity #15487: Resource leaks issues
Bug 630092 - Coverity #15490: Resource leaks issues
Bug 630092 - Coverity #15497: Resource leaks issues
Bug 630092 - Coverity #11991: Resource leaks issues
Bug 630092 - Coverity #12000: Resource leaks issues
Bug 630092 - Coverity #12003: Resource leaks issues
Bug 630092 - Coverity #11985: Resource leaks issues
Bug 630092 - Coverity #11992,11993: Resource leaks issues
Jeroen van Meeuwen (Kolab Systems) (1):
Suppress alert on unavailable port with forced setup
Jochen Schneider (1):
Fix-for-ticket-47972 - make parsing of nsslapd-changelogmaxage more fault tolerant
Jonathan \"Duke\" Leto (1):
fix for trac #173; update ds-logpipe.py docs about -t option
Ken Rossato (8):
Factorize into new isPosixGroup function
Change "return"s in modGroupMembership to "break"s to avoid leaking
Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
Simplify program flow: eliminate unnecessary continue
Simplify program flow: make adduids/moduids/deluids action blocks all similar
Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
Simplify program flow: change while loops to for
Ticket #481 - expand nested posix groups
Ludwig Krispenz (83):
Fix for ticket 510
Fix for ticket 465: cn=monitor showing stats for other db instances
Fix for ticket 504
Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
Ticket 518 - dse.ldif is 0 length after server kill or machine kill
Ticket 505 - use lock-free access name2asi and oid2asi table
Fix optimization issue introduced with fix for ticket #561,
modify operations without values need to be written to the changelog
Reduce replication meta data stored in entry, cf ticket 569
Fix compiler warnings introduced by fix for #569
removing an unused variable, did also remove an assigment
Ticket 568 - make usage of transaction batch flush durable
fix hang related to ticket 568
Ticket 47358 - implement backend optimazation levels
Ticket 47396 - crash on modrdn of tombstone
Ticket 47395 47397 v2 correct behaviour of account policy if only stateattr
fix compiler warnings, caused by fix for 47395,47397
Ticket 47399 - RHDS denies MODRDN access if ACI list contains any DENY rule
Ticket 47369 version2 - provide default syntax plugin
Fix compiler warning
Ticket 346 - version 4 Slow ldapmodify operation time
fix compiler warnings
CVE-2013-2219 ACLs inoperative in some search scenarios
fix compiler warning
Ticket 47502 - updates to ruv entry are written to retro changelog
Fix regression from fix for 569, when the last value of an attribute was explicitely deleted
Ticket 47505 - Get rid of valueset_add_valuearray_ext
Ticket 47487 - enhance retro changelog
Ticket 314 - ChaiOnUpdate for root handling
Use defines for backend error handling
Ticket 601 - multi master replication allows schema violation
Ticket 47388 - RFE to implement RFC4533 -ver2
Fix for coverty issues 12028,12029,12030
Ticket 47577 - crash when removing entries from cache
Ticket 47521 - Complex filter in a search request doen't work as expected.
Ticket 47591 - entries with empty objectclass attribute value can be hidden
Ticket 47527 - Allow referential integrity suffixes to be configurable
Ticket 47526 - Allow memberof suffixes to be configurable
Ticket 47612 - ns-slapd eats all the memory
simplify fix for 47612
Ticket 47621 - v2 make referential integrity configuration more flexible
Ticket 47629 - random crashes related to sync repl
Ticket 47704 - invalid sizelimits in aci group evaluation
Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages
Ticket 47733 - ds logs many "Operation error fetching Null DN" messages
Ticket 47667 - Allow nsDS5ReplicaBindDN to be a group DN
Ticket 47712 - betxn: retro changelog broken after cancelled transaction
fix assertion failure introduced with fix for ticket 47667
Ticket 47761 - Return all attributes in rootdse without explicit request
fix jenkins warning
Ticket 47806 - Failed deletion of aci: no such attribute
Ticket 47805 - syncrepl doesn't send notification when attribute in search filter changes
Ticket 47803 - syncrepl crash if attribute list is non-empty
fix coverity issue 12621
fix compiler error with alst coverity commit
Ticket 47821 - deref plugin cannot handle complex acis
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing
Ticket 47846 - server crashes deleting a replication agreement
Ticket 47872 - Filter AND with only one clause should be optimized
Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry
Ticket 47816 -v2- internal syncrepl searches are flagged as unindexed
Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod"
Ticket 47885 - deref plugin should not return references with noc access rights
fix for 47885 did not always return a response control
Ticket 47918 - result of dna_dn_is_shared_config is incorrectly used
ticket 47916 plugin logging parameter only triggers result logging
Additional fix for ticket 47526 v3
fix jenkins warning
Ticket 47964 - v2 - Incorrect search result after replacing an empty attribute
Ticket 47991 - upgrade script fails if /etc and /var are on different file systems
Ticket #48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
Ticket 48136 -v2v2 accept auxilliary objectclasse in replication agreements
Ticket 48149 - ns-slapd double free or corruption crash
Ticket 48175 - Avoid using regex in ACL if possible
Ticket 48141 - aci with wildcard and macro not correctly evaluated
fix coverity reports
Ticket 48195 - Slow replication when deleting large quantities of multi-valued attributes
Ticket 48258 - dna plugin needs to handle binddn groups for authorization
Ticket 48263 - allow plugins to detect tombstone operations
fix redefinition of OP_FLAG found by jenkins
Ticket 48255- total update request can be lost
Ticket 48283 - many attrlist_replace errors in connection with cleanallruv
Lukas Slebodnik (1):
Ticket 48111 - "make clean" wipes out original files
Mark Reynolds (474):
Ticket #71 - unable to delete managed entry config
Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
Ticket #177 - logconv.pl doesn't detect restarts
Merge branch 'ticket159'
Ticket #49 - better handling for server shutdown while long running tasks are active
Ticket #50 - server should not call a plugin after the plugin close function is calle
Updated for ticket#50
Ticket #55 - Limit of 1024 characters for nsMatchingRule
Ticket #140 - incorrect memset parameters
Revert "Ticket #140 - incorrect memset parameters"
Revert "Ticket #55 - Limit of 1024 characters for nsMatchingRule"
Ticket #38 - nisDomain schema is incorrect
Ticket #6 - protocol error from proxied auth operation
Ticket #55 - Limit of 1024 characters for nsMatchingRule
Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
Ticket 175 - logconv.pl improvements
Ticket 175 - minor fixes
Ticket #17 - Replication optimizations
Ticket #17 - new replication optimizations
Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFY ops
Ticket #111 - ability to control behavior of modifyTimestamp/modifiersName
Ticket #211 - dnaNextValue gets incremented even if the user addition fails
Ticket #74 - Add schema for DNA plugin (RFE)
Ticket #306 - void function cannot return value
Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
Schema Reload crash fix
Ticket #291 - cannot use & in a sasl map search filter
Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
Ticket #191 - Implement SO_KEEPALIVE in network calls
Config changes fail because of unknown attribute "internalModifiersname"
Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
Ticket #271 - replication code cleanup
TIcket #285 - compilation fixes for '--format-security'
Ticket #271 - Slow shutdown when you have 100+ replication agreements
Ticket #24 - Add nsTLS1 to the DS schema
Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
Ticket #20 - Allow automember to work on entries that have already been added
Ticket #315 - ns-slapd exits/crashes if /var fills up
Ticket #315 - small fix to libglobs
Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
Coverity Fixes
Ticket #325 - logconv.pl : use of getopts to parse command line options
Ticket #183 - passwordMaxFailure should lockout password one sooner
Ticket #207 - [RFE] enable attribute that tracks when a password was last set
Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
Ticket #337 - Improve CLEANRUV task
Ticket #356 - RFE - Track bind info
Ticket #196 - RFE: Interpret IPV6 addresses for ACIs, replication, and chaining
Ticket #218 - Make RI Plugin worked with replicated updates
Ticket 367 - Invalid chaining config triggers a disk full error and shutdown
Ticket 365 - passwords in clear text in the audit log
Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week
Ticket 368 - Make the cleanAllRUV task one step
Ticket #28 - MOD operations with chained delete/add get back error 53 on backend config
Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
Ticket #388 - Improve replication agreement status messages
COVERITY FIXES
Coverity Fix
Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error
Ticket 399 - slapi_ldap_bind() doesn't check bind results
Ticket 328 - make sure all internal search filters are properly escaped
Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
Ticket 403 - CLEANALLRUV feature
Ticket 407 - memory leak in dna plugin
Ticket 403 - cleanallruv coverity fixes
Misc Coverity Fixes
Ticket 407 - dna memory leak
Ticket 403 - CLEANALLRUV amendment
Ticket 403 - CLEANALLRUV - revision to last amendment
Ticket 403 - fix CLEANALLRUV regression from last commit
Ticket 429 - Add nsslapd-readonly to schema
CLEANALLRUV coverity fixes
Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
Ticket 386 - Overconsumption of memory with large cachememsize and heavy use of ldapmodify
Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope
Ticket 408 - create a normalized dn cache
Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
Ticket 747 - Root DN Access Control - days allowed not working correctly
Ticket 475 - Root DN Access Control - improve value checking for config
Ticket 473 - change VERSION.sh to have console version be major.minor
Coverity issue 13091
Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
Ticket 478 - passwordTrackUpdateTime stops working with subtree password policies
Ticket #446 - anonymous limits are being applied to directory manager
Ticket 488 - Doc: DS error log messages with typo
Ticket 486 - nsslapd-enablePlugin should not be multivalued
Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
Ticket 495 - internalModifiersname not updated by DNA plugin
Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
Ticket 495 - internalModifiersname not updated by DNA plugin
Ticket 147 - Internal Password Policy usage very inefficient
Ticket 517 - crash in DNA if no dnaMagicRegen is specified
Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
Ticket 394 - modify-delete userpassword
Ticket 337 - improve CLEANRUV functionality
Coverity Fixes
Ticket 20 - Allow automember to work on entries that have already been added
Ticket 393 - Change in winSyncInterval does not take immediate effect
Ticket 216 - disable replication agreements
Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
Ticket 527 - ns-slapd segfaults if it cannot rename the logs
Ticket 509 - lock-free access to be->be_suffixlock
Merge branch 'ticket509'
Ticket 456 - improve entry cache sizing
Ticket 509 - lock-free access to be->be_suffixlock
Ticket 511 - allow turning off vattr lookup in search entry return
Ticket 541 - RootDN Access Control plugin is missing after upgrade
Ticket 541 - need to set plugin as off in ldif template
Ticket 534 - RFE: Add SASL mappings fallback
Ticket 534 - sasl mapping fallback
Ticket 532 - RUV is not getting updated for both Master and consumer
Ticket 534 - Add SASL mappings fallback
Ticket 534 - SASL Mapping Fallback
Ticket 539 - logconv.pl should handle microsecond timing
Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
TIcket 419 - logconv.pl - improve memory management
Ticket 419 - logconv.pl - improve memory management
Ticket 558 - Replication - make timeout for protocol shutdown configurable
Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
Ticket 562 - Crash when deleting suffix
Merge branch 'master' of ssh://git.fedorahosted.org/git/389/ds
Ticket 532 - RUV is not getting updated for both Master and consumer
Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
Ticket 528 - RFE - get rid of instance specific scripts
Coverity Fixes
Ticket 528 - RFE - get rid of instance specific scripts (part 2)
Ticket 332 - Command line perl scripts should attempt most secure connection type first
Ticket 332 - Fix usage in scripts
Ticket 332 - minor quoting issue in a few scripts.
Ticket 588 - Create MAN pages for command line scripts
Ticket 332 - wrong argument count in ldif2db
Ticket 571 - server does not accept 0 length LDAP Control sequence
Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
Ticket 574 - problems with dbcachesize disk space calculation
Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
Ticket 574 - problems with dbcachesize disk space calculation
Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user
Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
Ticket 587 - Replication error messages in the DS error logs
Ticket 458 - Need to properly check if the password admin dn is set
Ticket 628 - crash in aci evaluation
Ticket 620 - Better logging of error messages for 389-ds-base
Ticket 534 - RFE: Add SASL mappings fallback
Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
Ticket 47304 - reinitialization of a master with a disabled agreement hangs
Ticket 47315 - filter option in fixup-memberof requires more clarification
Ticket 77 - [RFE] Add ACI support for ldapi
Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
Ticket 205 - Fix compiler warning
Ticket 153 - use openldap's schema parser
Ticket 47299 - fix config file and server id processing
Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
Fix coverity issues
Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - revision
Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
Ticket 511 - Revision - allow turning off vattr lookup in search entry return
Ticket 47337 - mep_pre_op: Unable to fetch origin entry
Ticket 283 - Expose slapi_eq_* API
Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the
Ticket 47326 - idl switch does not work
Merge branch 'ticket47326'
Ticket 589 - RFE - Support RFC 4527 Read Entry Controls
Ticket 47372 - make old-idl tunable
Coverity Fixes (part 1)
Coverity Fixes (Part 2)
Coverity Fixes (Part 3)
Coverity Fixes (Part 4)
Coverity Fixes (Part 5)
Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
Fri Jun 7 10:41:00 2013 -0400
Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
Ticket 47379 - DNA plugin failed to fetch replication agreement
Coverity (Part 7) + Jenkins fix
Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme
Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available
Coverity Fixes
Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1
Ticket 47385 - Disk Monitoring is not triggered as expected.
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket 47416 - SASL encrypted packet length exceeds maximum allowed limit
Ticket 47421 - memory leaks in set_krb5_creds
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket 47441 - Disk Monitoring not checking filesystem with logs
Ticket 47382 - Add a warning message when a connection hits the max number of threads
Ticket 47449 - deadlock after adding and deleting entries
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
Ticket 47323 - resurrected entry is not correctly indexed
Ticket 47440 - Fix compilation warnings and header files
Ticket 47440 - Fix runtime errors caused by last patch.
Ticket 47411 - Replace substring search with plain search in referint plugin
Ticket 47425 - should only call windows_update_done if repl agmt type is windows
Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready
Ticket47426 - Coverity issue with last commit(move compute_idletimeout out of handle_pr_read_ready)
Ticket 47473 - setup-ds.pl doesn't lookup the "root" group correctly
Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated
Ticket 47384 - Plugin path validation returntext not set correctly
Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv
Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
Ticket 47306 - execute index_add_mods only for indexed attributes
Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly
Ticket 411 - [RFE] mods optimizer
Ticket 47507 - automember rebuild task not working as expected
Ticket 47512 - backend txn plugin fixup tasks should be done in a txn
Coverity fix - 11952
Ticket 47401 - report unindexed internal searches
Ticket 47520 - Fix various issues with logconv.pl
Ticket 47509 - CLEANALLRUV doesnt run across all replicas
Ticket 47509 - Cleanallruv jenkins error
Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock
Ticket 47528 - 389-ds-base built with mozldap can crash from invalid free
Ticket 47510 - 389-ds-base does not compile against MozLDAP libraries
Ticket 47532 - 1.3.1 with mozldap crashes in new operation work_q code
Ticket 47510 - Repl Sync does not compile against MozLDAP libraries
Ticket 47510 - remove unnecessary typedef
Ticket 47513 - Refine the check for @localrundir@
Ticket 47513 - Set localrundir outside of the "with-fhs" block
Ticket 47543 - Mozldap - fix compiler warnings
Ticket 47531 - Mozldap - need to rewrite sasl_io_recv
Ticket 47510 - Additional mozldap failures with Repl Sync
Ticket 47522 - Password adminstrators should be able to voilate password policy
Ticket 47491 - Update systemd service file to use PartOf directive
Ticket 47517 - memory leak in range searches and other various leaks
Ticket 47535 - Logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
Ticket 47535 - update man page
Ticket 47499 - if nsslapd-cachememsize set to the number larger than
Ticket 47436 - 389-ds-base - shebang with /usr/bin/env
Coverity Issue 12033
Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
Ticket 47519 - memory leaks in access control
Ticket 47368 - IPA server dirsrv RUV entry data excluded from replication
Ticket 47368 - Fix Jenkins errors
Ticket 47368 - Fix coverity issues
Ticket 47582 - agmt_count in Replica could become (PRUint64)-1
Ticket 47541 - Replication of the schema may overwrite consumer 'attributetypes' even
Ticket 47541 - Fix Jenkins errors
Ticket 47597 - Convert retro changelog plug-in to betxn
Ticket 47598 - Convert ldbm_back_seq code to be transaction aware
Ticket 47529 - Automember plug-in should treat MODRDN operations as ADD operations
Ticket 47599 - Reduce lock scope in retro changelog plug-in
Revert "Ticket 47599 - Reduce lock scope in retro changelog plug-in"
Ticket 47599 - Reduce lock scope in retro changelog plug-in
Ticket 47525 - Allow memberOf to use an alternate config area
Ticket 47525 - Fix memory leak
Ticket 47599 - fix memory leak
Ticket 47593 - Update plugin API for OTP plugin
Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB
Ticket 47592 - automember plugin task memory leaks
Ticket 47525 - Need to add locking around config area access
Ticket 47613 - Impossible to configure nsslapd-allowed-sasl-mechanisms
Ticket 47614 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms
Ticket 47603 - Allow RI plugin to use alternate config area
Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code
Ticket 47368 - fix memory leaks
Ticket 47620 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute
Ticket 47622 - Automember betxnpreoperation - transaction not aborted when group entry does not exist
Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN
Ticket 47601 - Plugin library path validation prevents intentional loading of out-of-tree modules
Ticket 47617 - allow configuring changelog trim interval
Ticket 47613 - Issues setting allowed mechanisms
Ticket 47603 - should not modify pre op entry during config validation
Ticket 47620 - Config value validation improvement
Ticket 47620 - Fix logically dead code.
Ticket 47627 - Fix replication logging
Ticket 47620 - Fix dereferenced NULL pointer in agmtlist_modify_callback()
Ticket 47620 - Fix missing left bracket
Ticket 47653 - Need a way to allow users to create entries assigned to themselves
Ticket 47654 - Cleanup old memory leaks reported from valgrind
Ticket 47654 - fix double free
Ticket 408 - Fix crash when disabling/enabling the setting
Ticket 47620 - Unable to delete protocol timeout attribute
Ticket 47641 - 7-bit check plugin not checking MODRDN operation
Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform
Ticket 47618 - Enable normalized DN cache by default
Ticket 47437 - Some attributes in cn=config should not be multivalued
Ticket 47615 - Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
Ticket 47552 - logconv: unindexed report should list bind dn
Ticket 525 - Replication retry time attributes cannot be added
Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart
Ticket 47727 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
Ticket 47637 - rsa_null_sha should not be enabled by default
Ticket 47729 - Directory Server crashes if shutdown during a replication initialization
Ticket 47700 - Fix compiler warnings
Ticket 47722 - rsearch filter error on any search filter
Ticket47722 - Fixed filter not correctly identified
Ticket 47740 - Coverity Fixes (Mark - part 1)
Ticket 47740 - Fix sync plugin resource leaks
Ticket 47640 - Fix coverity issues - part 3
Ticket 47740 - Fix coverity erorrs - Part 4
Ticket 47740 - Fix coverity issues - Part 5
Ticket 47740 - Fix coverity issues: null deferences - Part 6
Ticket 47740 - Crash caused by changes to certmap.c
Revert "Ticket 47700 - Fix compiler warnings"
Ticket 47743 - Memory leak with proxy auth control
Ticket 47451 - add/enable/disable/remove plugins without server restart
Ticket 47740 - Fix coverity issues(part 7)
Ticket 47756 - Improve import logging and abort processing
Ticket 47759 - Crash in replication when server is under write load
Ticket 47655 - Improve replication total update logging
Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled
Ticket 47767 - Nested tombstones become orphaned after purge
Ticket 47771 - Performing deletes during tombstone purging results in operation errors
Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs
Ticket 47779 - Part of DNA shared configuration is deleted after server restart
Ticket 47771 - Move parentsdn initialization to avoid crash
Ticket 477779 - Need to lock server list when removing list
Ticket 47792 - code cleanup
Ticket 47792 - database plugins need a way to call betxn
Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf
Ticket 47756 - fix coverity issues
Ticket 47772 - fix coverity issue
Ticket 47451 - Remove old code from linked attr plugin
Ticket 47670 - Aci warnings in error log
Ticket 47636 - errorlog-level 16384 is listed as 0 in cn=config
Ticket 47713 - Logconv.pl with an empty access log gives lots of errors
Ticket 47446 - logconv.pl memory continually grows
Ticket 47791 - Negative value of nsSaslMapPriority is not
Ticket 47644 - Managed Entry Plugin - transaction not aborted upon failure to create managed entry
Ticket 47466 - Fix coverity issue
Ticket 47813 - managed entry plugin fails to update member
Ticket 47602 - txn commit being performed too early
Ticket 47815 - Add operations rejected by betxn plugins remain in cache
Ticket 47810 - investigate betxn plugins to ensure they
Ticket 47817 - The error result text message should be obtained just prior to sending result
Ticket 47827 - online import crashes server if using verbose error logging
Ticket 47815 - add lib389 test
Ticket 47827 - Fix coverity issue 12695
Ticket 47779 - Potential deadlock after startup if a dna configuration change is made
Ticket 47781 - Server deadlock if online import started while
Ticket 47781 - Add CI test
Ticket 47781 - CI test - use predefined property name variables
Ticket 47654 - Fix regression (deadlock/crash)
Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
Ticket 47819 - Improve tombstone purging performance
Ticket 47855 - clear tmp directory at the start of each test
Ticket 47855 - Fix previous commit
Ticket 47853 - client hangs in add if memberof fails
Ticket 437853 - Missing newline at end of the error log messages in memberof
Ticket 47710 - Missing warning for invalid replica backoff configuration
Ticket 47790 - Integer config attributes accept invalid
Ticket 47812 - logconv.pl missing -U option from usage
Ticket 47861 - Certain schema files are not replaced during upgrade
Ticket 47819 - Fix memory leak
Ticket 47862 - repl-monitor fails to convert "*" to default values
Ticket 47893 - should use Sys::Hostname instead Net::Domain
Ticket 47900 - Adding an entry with an invalid password as rootDN is incorrectly rejected
Ticket 47900 - Server fails to start if password admin is set
Ticket 47892 - Fix remaining compiler warnings
Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued
Ticket 47953 - Should not check aci syntax when deleting an aci
Ticket 47953 - testcase for removing invalid aci
Ticket 47451 - Need to unregister tasks created by plugins
Ticket 47952 - PasswordAdminDN attribute is not properly returned to client
Ticket 47958 - Memory leak in password admin if the admin entry does not exist
Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions
Ticket 47963 - RFE - memberOf - add option to skip nested
Ticket 47810 - RI plugin does not return result code if update fails
Ticket 47963 - skip nested groups breaks memberof fixup task
Ticket 47451 - Running a plugin task can crash the server
Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown
Ticket 47969 - COS memory leak when rebuilding the cache
Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind
Ticket 47970 - add lib389 testcase
Ticket 47525 - Crash if setting invalid plugin config area for MemberOf Plugin
Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions
Ticket 47969 - Fix coverity issue
Ticket 47965 - Fix coverity issues (2014/11/24)
Ticket 47636 - Error log levels not displayed correctly
Ticket 47722 - Using the filter file does not work
Ticket 47750 - Need to refresh cache entry after called betxn postop plugins
Ticket 47451 - Dynamic Plugin - various fixes
Ticket 47451 - Fix jenkins errors
Ticket 47451 - Add Dynamic Plugin CI Suite
Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone
Ticket 47451 - Dynamic plugins - fixed thread synchronization
Ticket 47980 - Nested COS definitions can be incorrectly
Ticket 47981 - COS cache doesn't properly mark vattr cache as
Ticket 47973 - During schema reload sometimes the search returns no results
Ticket 47617 - replication changelog trimming setting validation
Ticket 47807 - SLAPI_REQUESTOR_ISROOT not set for extended operation plugins
Ticket 47462 - Stop using DES in the reversible password
Ticket 47738 - use PL_strcasestr instead of strcasestr
Ticket 47999 - lib389 individual tests not running correctly
Ticket 47999 - address several race conditions in tests
Ticket 48017 - add script to generate lib389 CI test script
Ticket 48019 - Remove refs to constants.py and backup/restore from lib389 tests
Ticket 48023 - replace old replication check with lib389 function
Ticket 47963 - memberof skip nested groups breaks the plugin
Ticket 47451 - dynamic plugins - fix crash caused by invalid
Ticket 48027 - revise the rootdn plugin configuration validation
Ticket 48003 - build "suite" framework
Ticket 48003 - add template scripts
Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
Ticket 48132 - modrdn crashes server (invalid read/writes)
Ticket 48151 - Improve CleanAllRUV logging
Ticket 48154 - abort cleanAllRUV tasks should not certify-all by default
Ticket 48151 - fix coverity issues
Ticket 48177 - dynamic plugins should not return an error when modifying a critical plugin
Ticket 48035 - nunc-stans - Revise shutdown sequence
Ticket 48036 - ns_set_shutdown should call ns_job_done
Ticket 48040 - preserve the FD when disabling a listener
Ticket 48037 - ns_thrpool_new should take a config struct rather than many parameters
Ticket 48038 - logging should be pluggable
Ticket 48039 - nunc-stans malloc should be pluggable
Ticket 48043 - use nunc-stans config initializer
Ticket 48110 - Free all the nunc-stans signal jobs when shutdown is detected
Ticket 48103 - update DS for new nunc-stans header file
Ticket 48158 - Remove cleanAllRUV task limit of 4
Ticket 48026 - fix invalid write for friendly attribute names
Ticket 48026 - Fix memory leak in uniqueness plugin
Ticket 48158 - cleanAllRUV task limit not being enforced correctly
Ticket 47828 - fix testcase "import" issue
Ticket 47753 - Fix testecase
Ticket 47913 - remove-ds.pl should not remove /var/lib/dirsrv
Ticket 47640 - Linked attributes transaction not aborted when
Ticket 48170 - Parse nsIndexType correctly
Ticket 47910 - allow logconv.pl -S/-E switches to work even when timestamps not present in access log
Ticket 47921 - indirect cos does not reflect changes in the cos attribute
Ticket 48197 - error texts from preop plugins not sent to client
Ticket 47998 - cleanup WINDOWS ifdef's
Ticket 47998 - remove "windows" files
Ticket 47998 - remove remaining obsolete OS code/files
Ticket 47878 - Improve setup-ds update logging
Ticket 48119 - setup-ds.pl does not log invalid --file path errors the same way as other errors.
Ticket 48208 - CleanAllRUV should completely purge changelog
Ticket 48013 - Inconsistent behaviour of DS when LDAP Sync is used with an invalid cookie
Ticket 48217 - cleanAllRUV hangs shutdown if not all of the
Ticket 48119 - Silent install needs to properly exit when INF file is missing
Ticket 47878 - Remove warning suppression in 1.3.4
Ticket 47910 - logconv.pl - validate start and end time args
Ticket 48179 - Starting a replica agreement can lead to
Ticket 47910 - logconv.pl - check that the end time is greater than the start time
Ticket 48206 - Crash during retro changelog trimming
Ticket 48204 - Add Python 3 compatibility to ds-logpipe
Ticket 47810 - memberOf plugin not properly rejecting updates
Ticket 48215 - verify_db.pl doesn't verify DB specified by -a option
Ticket 48215 - update dbverify usage
Ticket 48215 - update dbverify usage in main.c
Ticket 47931 - memberOf & retrocl deadlocks
Ticket 47931 - Fix coverity issues
Ticket 47686 - removing chaining database links trigger valgrind read errors
Ticket 48242 - Improve dirsrvtests/create_test.py script
Ticket 48248 - Use LDIF building function in basic test suite
Ticket 48233 - Server crashes in ACL_LasFindFlush during
Ticket 47831 - remove debug logging from retro cl
Ticket 47931 - lib389 test - memberof and retrocl deadlock
Ticket 48204 - Convert all python scripts to support python3
Ticket 48267 - Add config setting to MO plugin to add objectclass
Ticket 48276 - initialize free_flags in reslimit_update_from_entry()
Ticket 48273 - Update lib389 tests for new valgrind functions
Ticket 48217 - cleanallruv - fix regression with server shutdown
Ticket 48266 - Online init crashes consumer
Ticket 48284 - free entry when internal add fails
Ticket 48266 - do not free repl keep alive entry on error
Ticket 48204 - update lib389 test scripts for python 3
Ticket 48311 - nunc-stans: Attempt to release connection that
Ticket 48325 - Replica promotion leaves RUV out of order
Ticket 48325 - Add lib389 test script
Matthew Via (1):
Ticket #47428 - Memory leak in 389-ds-base 1.2.11.15
Nathan Kinder (212):
Bug 549554 - Trim single-valued attributes before sending to AD
Improve search for pcre header file
Bug 434735 - Allow SASL ANONYMOUS mech to work
Bug 570912 - Avoid selinux context conflict with httpd
Allow instance name to be parsed from start-slapd
Add managed entries plug-in
Bug 572355 - Label instance files and ports during upgrade.
Bug 578863 - Password modify extop needs to send referrals on replicas
Bug 584156 - Remove ldapi socket file during upgrade
Fix rsearch usage of name files for random filters
Bug 584497 - Allow DNA plugin to set same value on multiple attributes
Add replication session hooks
Correct function prototype for repl session hook
Bug 592389 - Set anonymous resource limits properly
Bug 601433 - Add man pages for start-dirsrv and related commands
Bug 604263 - Fix memory leak when password change is rejected
Bug 612242 - membership change on DS does not show on AD
Bug 613833 - Allow dirsrv_t to bind to rpc ports
Bug 594745 - Get rid of dirsrv_lib_t label
Bug 620927 - Allow multiple membership attributes in memberof plugin
Bug 612264 - ACI issue with (targetattr='userPassword')
Bug 630098 - fix coverity Defect Type: Code maintainability issues
Bug 630098 - fix coverity Defect Type: Code maintainability issues
Bug 630093 - (cov#15511) Don't use unintialized search_results in refint plugin
Bug 630093 - (cov#15518) Need to intialize fd in ldbm2ldif code
Bug 630096 - (cov#11778) check return value of ldap_parse_result
Bug 630096 - (cov#15446) check return value of ber_scanf()
Bug 630096 - (cov#15449,15450) Check return value of stat()
Bug 630096 - (cov#15448) Check return value of cache_replace()
Bug 630096 - (cov#15447) - Check return value of idl_append_extend()
Bug 630090 - (cov#11974) Remove unused ACL functions
Bug 630090 - (cov#15445) Fix illegal free in archive code
Bug 630094 - (cov#11818) Fix unreachable return in snmp subagent
Bug 630094 - (cov#15451) Get rid of unreachable free statements
Bug 630094 - (cov#15452) Remove NULL checking for op_string
Bug 630094 - (cov#15453) Eliminate NULL check for local_newentry
Bug 630094 - (cov#15454) Fix deadcode issue in mapping tree code
Bug 630094 - (cov#15455) Remove deadcode in attr_index_config()
Bug 630094 - (cov#15456) Remove NULL check for srdn in import code
Bug 630094 - (cov#15457) Remove deadcode in import code
Bug 630094 - (cov#15458) Fix deadcode issue in moddn code
Bug 630094 - (cov#15459) Remove NULL check for srdn in ldif2ldbm code
Bug 630094 - (cov#15520) Fix unreachable code issue if perfctrs code
Bug 630094 - (cov#15581) Add missing breaks in agt_mopen_stats()
Bug 690090 - (cov#11974) Remove additional unused ACL functions
Bug 630091 - (cov#15512) Fix usage of uninitialized bervals
Bug 630091 - (cov#15513) Fix usage of uninitialized bervals
Bug 630091 - (cov#15514) Initialize DBT in entryrdn_get_parent()
Bug 630091 - (cov#15515) Use of uninitialized array in index config code
Bug 630091 - (cov#15516,15517) Initialize pointers before attempting to free
Bug 630091 - (cov#15519) Initialize bervals in search_easter_egg()
Bug 630091 - (cov#15582) Free of uninitialized pointer in attr_index_config()
Bug 630097 - (cov#11933) Fix NULL dereference in schema code
Bug 630097 - (cov#11938) NULL dereference in mmldif
Bug 630097 - (cov#11946) NULL dereference in ResHashCreate()
Bug 630097 - (cov#11964) Remove dead code from libaccess
Bug 630097 - (cov#12143) NULL dereference in cos cache code
Bug 630097 - (cov#12148) NULL dereference in ruvInit()
Bug 630097 - (cov#12182,12183) NULL dereference in import code
Bug 630097 - (cov#15460) NULL deference in ACL URL code
Bug 630097 - (cov#15461) Remove unnecessary NULL check in DNA
Bug 630097 - (cov#15462) NULL dereference in mep_modrdn_post_op()
Bug 630097 - (cov#15463) Remove NULL check in referint plugin
Bug 630097 - (cov#15464) NULL dereference in repl code
Bug 630097 - (cov#15465) Null dereference in USN code
Bug 630097 - (cov#15473) NULL dereference in ResHashCreate()
Bug 630097 - (cov#15505) NULL dereference in memberOf code
Bug 630097 - (cov#15506) NULL dereference in dblayer code
Bug 630097 - (cov#15507,15508) NULL dereference in entryrdn code
Bug 630097 - (cov#15509) NULL dereference in idsktune
Bug 630097 - (cov#11938) NULL dereference in mmldif
Bug 630097 - (cov#15477) NULL dereference in ACL plug-in code
Bug 630091 - (cov#12209) Use of uninitialized pointer in libaccess
Bug 630092 - (cov#12116) Resource leak in ldclt code
Bug 630092 - (cov#12105) Resource leak in pwdscheme config code
Bug 630092 - (cov#12068) Resource leak in certmap code
Bug 630091 - (cov#11973) Array overrun in libaccess
Bug 522055 - Scope check for managed attribute fails
Bug 625335 - Self-write aci has permission to invalid attribute
Bug 631993 - Log authzid when proxy auth control is used
Cov #16300 - Unused variable in account policy plugin
Bug 544321 - remove-ds.pl should not throw error unlabelling port
Bug 555955 - Allow CoS values to be merged
Bug 643937 - Initialize replication version flags
Bug 305131 - Allow empty modify operation
Bug 619633 - Make attribute uniqueness obey requiredObjectClass
Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operations
Bug 189985 - Improve attribute uniqueness error message
Bug 647932 - multiple memberOf configuration adding memberOf where there is no member
Bug 521088 - DNA should check ACLs before getting a value from the range
Bug 635009 - Add one-way AD sync capability
Bump VERSION.sh to 1.2.8.a1
Bug 648949 - Move selinux policy into base OS
Bug 648949 - Update configure
Roll back VERSION.sh for 1.2.7 release
Bug 625950 - hash nsslapd-rootpw changes in audit log
Bug 656392 - Remove calls to ber_err_print()
Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
Bug 197886 - Avoid overflow of UUID generator
Bug 658312 - Allow mapped attribute types to be quoted
Bug 197886 - Initialize return value for UUID generation code
Bug 658309 - Process escaped characters in managed entry mappings
Bug 659456 - Incorrect usage of ber_printf() in winsync code
Bug 641944 - Don't normalize non-DN RDN values
Bug 658312 - Invalid free in Managed Entry plug-in
Bug 661792 - Valid managed entry config rejected
Bug 588791 - Allow anonymous rootDSE access only
Bug 606439 - Creating server instance with LDAPI takes too long
Bug 632670 - Chain-on-update logs managed-entries-plugin errors
Bug 621008 - parsing purge RUV from changelog at startup fails
Bug 663191 - Don't use $USER in DSCreate.pm
Bug 663597 - Memory leaks in normalization code
Bug 659131 - Incorrect RDN values added with multi-valued RDN
Bug 661102 - Rename of managed entries not handled correctly
Bug 193297 - Call pre-bind plug-ins for all SASL bind steps
Bug 201652 - LDAPv2 bind with expired password doesn't unbind correctly
Bug 470576 - Migration could do addition checks before commiting actions
Bug 481195 - Missing op type in log when password change required
Bug 509897 - Validate dnaScope to ensure it is a legal DN
Bug 505722 - Allow ntGroup to have mail attribute present
Bug 543633 - replication problems if supplier is killed under update load
Bug 671033 - range sharing between server breaks with SASL/GSSAPI auth
Bug 527912 - setup-ds.pl appears to hang when DNS is unreachable
Bug 252249 - Add pkg-config file for plug-in developers
Bug 670616 - Allow SSF to be set for local (ldapi) connections
Bug 668862 - init scripts return wrong error code
Bug 674430 - Improve error messages for attribute uniqueness
Bug 675853 - dirsrv crash segfault in need_new_pw()
Bug 678646 - Ignore tombstone operations in managed entry plug-in
Bug 671199 - Don't allow other to write to rundir
Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
Bug 674852 - crash in ldap-agent when using OpenLDAP
Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree
Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
Bug 687974 - (cov#10715) Fix Coverity uninitialized variables issues
Bug 688341 - (cov#10709) Fix Coverity code maintainability issues
Bug 688341 - (cov#10708) Fix Coverity code maintainability issues
Bug 688341 - (cov#10706,10707) Fix Coverity code maintainability issues
Bug 688341 - (cov#10704,10705) Fix Coverity code maintainability issues
Bug 688341 - (cov#10703) Fix Coverity code maintainability issues
Bug 688341 - (cov#10702) Fix Coverity code maintainability issues
Bug 688341 - (cov#10709) Fix Coverity code maintainability issues
Bug 689537 - (cov#10699) Fix Coverity NULL pointer dereferences
Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
Bug 689537 - (cov#10608) Fix Coverity NULL pointer dereferences
Bug 689952 - (cov#10581) Incorrect bit check in replication connection code
Bug 690526 - (cov#10734) Double free in dse_add()
Bug 690649 - (cov#10731) Use of free'd pointer in indexing code
Bug 690882 - (cov#10571) Incorrect sizeof use in uuid code
Bug 690882 - (cov#10636,10637) Useless comparison in attrcrypt
Bug 690882 - (cov#10703) Incorrect sizeof use in vattr code
Bug 690882 - (cov#10572,10710) Incorrect sizeof use in uuid code
Bug 691574 - (cov#10579) Check return value of ber_scanf() in sort code
Bug 691574 - (cov#10577) Check return types when adding RDN CSNs
Bug 691574 - (cov#10573) check return value in GER code
Bug 691574 - (cov#10575) Check return value of ldap_get_option
Bug 691574 - (cov#10573) Fix syntax error
Bug 693868 - Add managed entry config during in-place upgrade
Add Auto Membership Plug-in
Bug 698428 - Make auto membership use Slapi_DN for DN comparisons
Bug 695779 - windows sync can lose old values when a new value is added
Bug 700557 - Linked attrs callbacks access free'd pointers after close
Bug 700557 - Leak at shutdown in DNA plug-in
Bug 703304 - Auto membership alternate config area should override default area
Bug 703304 - Auto membership alternate config area should override default area
Bug 703530 - Allow Managed Entry config to be relocated
Bug 697961 - memberOf needs to be triggered by internal operations
Bug 710377 - Import with chain-on-update crashes ns-slapd
Split automember regex rules into separate entries
Bug 713209 - Update sudo schema
Bug 691313 - Need TLS/SSL error messages in repl status and errors log
Bug 723937 - Slapi_Counter API broken on 32-bit F15
Bug 725743 - Make memberOf use PRMonitor for it's operation lock
Bug 729717 - Fatal error messages when syncing deletes from AD
Bug 728510 - Run dirsync after sending updates to AD
Bug 730387 - Add slapi_rwlock API and use POSIX rwlocks
Bug 611438 - Add Account Usability Control support
Bug 728592 - Allow ns-slapd to start with an invalid server cert
Bug 732541 - Ignore error 32 when adding automember config
Bug 722292 - Entries in DS are not updated properly when using WinSync API
Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
Bug 735114 - renaming a managed entry does not update mepmanagedby
Bug 739172 - Allow separate fractional attrs for incremental and total protocols
Bug 743966 - Compiler warnings in account usability plugin
Bug 744946 - (cov#11046) NULL dereference in IDL code
Bug 752155 - Use restorecon after creating init script lock file
Ticket 284 - Remove unnecessary SNMP MIB files
ticket 304 - Fix kernel version checking in dsktune
ticket 211 - Use of uninitialized variables in ldbm_back_modify()
ticket 181 - Allow PAM passthru plug-in to have multiple config entries
coverity 12563 Read from pointer after free (fix 2)
Ticket 211 - Avoid preop range requests non-DNA operations
Ticket #503 - Improve AD version in winsync log message
Ticket 549 - DNA plugin no longer reports additional info when range is depleted
Ticket 556 - Don't overwrite certmap.conf during upgrade
Add make rpms build target
Allow rpm builds to be run without configure
Add git commit hash to developer rpm build names
Add hardened build option and correct changelog dates
Revert "Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly"
Ticket 449 - Allow macro aci keywords to be case-insensitive
Ticket 47539 - Disabling DNA plug-in throws error 53
Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock
Ticket 47565 - Content Sync update file needs extensibleObject
Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword
Ticket 47569 - Fix build warnings
Ticket 47588 - Compiler warnings building on F19
Ticket 47611 - Add script to build patched RPMs
Ticket 47525 - Don't modify preop entry in memberOf config
Ticket 47752 - Don't add unhashed password mod if we don't have an unhashed value
Ticket 47753 - Add switch to disable pre-hashed password checking
Noriko Hosoi (771):
544089 - Referential Integrity Plugin does not take into account the attribute
557224 - subtree rename breaks the referential integrity plug-in
247413 - Incorrect error on multiple identical value add
559016 - Attempting to rename suffix returns inappropriate errors
555577 - Syntax validation fails for "ou=NetscapeRoot" tree
Undo - 555577 - Syntax validation fails for "ou=NetscapeRoot" tree
560827 - Admin Server templates: DistinguishName validation fails
548535 - memory leak in attrcrypt
563365 - Error handling problems in the backend functions
565664 - Incorrect parameter for CACHE_RETURN()
565987 - redhat-ds-base fails to build due to undefined struct
527848 - make sure db upgrade to 4.7 and later works correctly
539618 - Replication bulk import reports Invalid read/write
567370 - dncache: assertion failure in id2entry_delete
548115 - memory leak in schema reload
555970 - missing read lock in the combination of cos and nsview
539618 - Replication bulk import reports Invalid read/write
570667 - MMR: simultaneous total updates on the masters cause
Merge branch '547503'
Revert "Merge branch '547503'"
Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external
199923 - subtree search fails to find items under a db
570107 - The import of LDIFs with base-64 encoded DNs fails,
572649 - DS8.2 crashes on RHEL 4 (corresponding to bob, ber_2 test case)
573060 - DN normalizer: ESC HEX HEX is not normalized (
573896 - initializing subtree with invalid syntax crashes ns-slapd
515805 - Stop "initialize Database" crashes the server
548533 - memory leak in Repl_5_Inc_Protocol_new
Fixing a syntax error
Update to New DN Format
585905 - ACL with targattrfilters error crashes the server
574167 - An escaped space at the end of the RDN value is not
590931 - rhds81 import - hardcoded pages_limit for nsslapd-import-cache-autosize
591336 - Implementing upgrade DN format tool
593453 - Creating password policy with ns-newpolicy.pl on Replicated
593110 - backup-restore does not ALWAYS work
593899 - adding specific ACI causes very large mem allocate request
588867 - entryusn plugin fails on solaris
593899 - adding specific ACI causes very large mem allocate request
595893 - Base DN in SASL mapping is not normalized
511112 - Password history limited to 25 values
597375 - Deleting LDBM database causes backup/restore problem
574101 - MODRDN request never returns - possible deadlock
606920 - anonymous resource limit - nstimelimit -
605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
578296 - Attribute type entrydn needs to be added when subtree
609256 - Selinux: pwdhash fails if called via Admin Server CGI
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
616608 - SIGBUS in RDN index reads on platforms with strict alignments
619595 - Upgrading sub suffix under non-normalized suffix disappears
513166 - Simple Paged result doesn't provide the server's estimate
621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6
Bug 194531 - db2bak is too noisy
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 623118 - Simplepaged results going in infinite loop
Bug 614511 - fix coverity Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 619122 - fix coverity Defect Type: Resource leaks issues CID 11975 - 12051
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverity Defect Type: Resource leaks issues CID 12052 - 12093
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892
Bug 616500 - fix coverity Defect Type: Resource leaks issues
Bug 623507 - fix coverity Defect Type: Incorrect expression issues
Bug 623507 - fix coverity Defect Type: Incorrect expression issues
Bug 613056 - fix coverify Defect Type: Null pointer dereferences
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Removed redundant code in agmt_new_from_entry
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 628300 - DN is not normalized in dn/entry cache when an entry is added, entrydn is not present in search results
Bug 531642 - EntryUSN: RFE: a configuration option to make entryusn "global"
Bug 627738 - The cn=monitor statistics entries for the dnentry cache do not change or change very rarely
DN normalizer should check the invalid type
Bug 627738 - The cn=monitor statistics entries for the dnentry cache
Bug 629710 - escape_string does not check '\<HEX><HEX>'
agmtlist_shutdown (repl5_agmtlist.c) had an illegal access defect.
Bug 633168 - Share backend dbEnv with the replication changelog
Bug 633168 - Share backend dbEnv with the replication changelog
Bug 631862 - crash - delete entries not in cache + referint
Bug 625014 - SubTree Renames: ModRDN operation fails and the server hangs if the entry is moved to "under" the same DN.
Bug 558099 - Enhancement request: Log more information about the search result being a paged one
Bug 635987 - Incorrect sub scope search result with
Bug 606920 - anonymous resource limit- nstimelimit -
Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
Bug 639289 - Adding a new CN entry with UpperCase UTF-8 Character
Bug 640027 - Naming attribute with a special char sequence parsing bug
Bug 640854 - changelog db: _cl5WriteOperation: failed to
Bug 637852 - sasl_io_start_packet: failed - read only 3 bytes
Bug 586966 - Sample update script has syntax errors
Bug 586973 - Sample update ldif points to non-existent directory
Bug 602456 - Allow to add any cn=config attributes;
Bug 244229 - targetattr not verified against schema when setting an aci
Bug 643532 - Incorrect DNs sometimes returned on searches
Bug 592397 - Upgrade tool dn2rdn: it does not clean up
Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
Bug 629681 - Retro Changelog trimming does not behave as expected
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 638773 - permissions too loose on pid and lock files
Bug 491733 - dbtest crashes
Bug 329751 - "nested" filtered roles searches candidates more
Bug 567282 - server can not abandon searchRequest of "simple paged results"
Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
Bug 651571 - When attrcrypt is on, entrydn is stored in the backend db
Bug 661918 - 389-ds MMR plugin's changelogdb path logic is incorrect
Bug 182507 - clear-password mod from replica is discarded before changelogged
Bug 602456 - Allow to add any cn=config attributes;
Bug 489379 - passwordExpirationTime in entry being added
Bug 663484 - Entry usn plugin fails to properly tag entries on initialization
Bug 664563 - GER: ger for non-present entry is not correct
Bug 653007 - db2ldif export of clear text passwords lacks storage scheme
Bug 667488 - Cannot recreate numsubordinates index with db2index
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 615100 - log rotationinfo always recreated at startup,
Bug 624442 - MMR: duplicate replica ID
Bug 669205 - db2bak: backed up changelog should include RUVs
Bug 616850 - ldapmodify failed to reject the replace operation
Bug 627993 - Inconsistent storage of password expiry times
Bug 627993 - Inconsistent storage of password expiry times
dn2rdn should respect the DB version info
Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any error message in logs
Bug 624547 - attrcrypt should query the given slot/token for
Bug 668619 - slapd stops responding
Bug 151705 - Need to update Console Cipher Preferences with new ciphers
Bug 615052 - intrinsics and 64-bit atomics code fails to compile
Bug 616213 - insufficient stack size for HP-UX on PA-RISC
Bug 675265 - preventryusn gets added to entries on a failed delete
Bug 604881 - admin server log files have incorrect permissions/ownerships
Bug 676053 - export task followed by import task causes cache assertion
Bug 676053 - export task followed by import task causes cache assertion
Bug 676053 - export task followed by import task causes cache assertion
Bug 450016 - RFE- Console display values in KB/MB/GB
Cancelling commit aef19508c4f618285116d2068655183658f564d9
Bug 625424 - repl-monitor.pl doesn't work in hub node
Bug 679978 - modifying attr value crashes the server, which is supposed to
Bug 681015 - RFE: allow fine grained password policy duration attributes in days, hours, minutes, as well
Bug 668909 - Can't modify replication agreement in some cases
Bug 684996 - Exported tombstone cannot be imported correctly
Bug 681015 - RFE: allow fine grained password policy duration attributes in days, hours, minutes, as well
Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
Bug 690955 - Mrclone fails due to the replica generation id mismatch
Bug 696407 - If an entry with a mixed case RDN is turned to be
Bug 697027 - 1 - minor memory leaks found by Valgrind + TET
Bug 697027 - 2 - minor memory leaks found by Valgrind + TET
Bug 697027 - 3 - minor memory leaks found by Valgrind + TET
Bug 697027 - 4 - minor memory leaks found by Valgrind + TET
Bug 697027 - 5 - minor memory leaks found by Valgrind + TET
Bug 697027 - 6 - minor memory leaks found by Valgrind + TET
Bug 697027 - 7 - minor memory leaks found by Valgrind + TET
Bug 697027 - 8 - minor memory leaks found by Valgrind + TET
Bug 697027 - 9 - minor memory leaks found by Valgrind + TET
Bug 697027 - 10 - minor memory leaks found by Valgrind + TET
Bug 697027 - 11 - minor memory leaks found by Valgrind + TET
Bug 697027 - 12 - minor memory leaks found by Valgrind + TET
Bug 697027 - 13 - minor memory leaks found by Valgrind + TET
Bug 697027 - 14 - minor memory leaks found by Valgrind + TET
Bug 697027 - 15 - minor memory leaks found by Valgrind + TET
Bug 697027 - 16 - minor memory leaks found by Valgrind + TET
Bug 697027 - 3 - minor memory leaks found by Valgrind + TET
Bug 697027 - 3 - minor memory leaks found by Valgrind + TET
Bug 700215 - ldclt core dumps
Bug 668619 - slapd stops responding
Bug 709826 - Memory leak: when extra referrals configured
Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 711679 - unresponsive LDAP service when deleting vlv on replica
Bug 711679 - unresponsive LDAP service when deleting vlv on replica
Bug 718303 - Intensive updates on masters could break the consumer's cache
Merge branch '718303'
Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
Bug 712855 - Directory Server 8.2 logs "Netscape Portable
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 732153 - subtree and user account lockout policies implemented?
Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.
Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
Keep unhashed password psuedo-attribute in the adding entry
Reduce the number of DN normalization
Bug 745259 - Incorrect entryUSN index under high load
Bug 750622 - Fix Coverity (11104) Resource leak:
Bug 750624 - Fix Coverity (11053) Explicit null dereferenced:
Bug 750625 - Fix Coverity (11066) Unused pointer value
Bug 750625 - Fix Coverity (11065) Uninitialized pointer read
Bug 750625 - Fix Coverity (11064) Dereference before null check
Bug 750625 - Fix Coverity (11061) Resource leak
Bug 750625 - Fix Coverity (11060) Dereference null return value
Bug 750625 - Fix Coverity (11058, 11059) Dereference null return value
Bug 750625 - Fix Coverity (11057) Dereference null return value
Bug 750625 - Fix Coverity (11055) Explicit null dereferenced
Bug 750625 - Fix Coverity (11054) Dereference after null check
Bug 750625 - Fix Coverity (11117) Uninitialized pointer read
Bug 750625 - Fix Coverity (11116) Uninitialized pointer read
Bug 750625 - Fix Coverity (11114, 11115) Uninitialized value use
Bug 750625 - Fix Coverity (11113) Uninitialized pointer read
Bug 750625 - Fix Coverity (11112) Uninitialized pointer read
Bug 750625 - Fix Coverity (11109, 11110, 11111) Uninitialized pointer read
Bug 750625 - Fix Coverity (11108) Sizeof not portable
Bug 750625 - Fix Coverity (11107) Dereference before null check
Bug 750625 - Fix Coverity (11096) Explicit null dereferenced
Bug 750625 - Fix Coverity (11095) Explicit null dereferenced
Bug 750625 - Fix Coverity (11094) Dereference after null check
Bug 750625 - Fix Coverity (11091) Unchecked return value
Bug 750625 - Fix Coverity (11055-2) Explicit null dereferenced
Bug 750625 - Fix Coverity (11062) Resource leak
Bug 750625 - Fix Coverity (11066-2) Unused pointer value
Bug 750625 - Fix Coverity (12195) Dereference after null check
Bug 750625 - Fix Coverity (12196) Dereference before null check
Bug 750625 - Fix Coverity (11066-3) Unused pointer value
Bug 745259 - Incorrect entryUSN index under high load in
Trac Ticket 2 - If node entries are tombstone'd,
Trac Ticket 2 - If node entries are tombstone'd,
Trac Ticket 26 - Please support setting
Trac Ticket 75 - Unconfigure plugin opperations are being called.
Trac Ticket 168 - minssf should not apply to rootdse
Trac Ticket #18 - Data inconsitency during replication
Trac Ticket #52 - FQDN set to nsslapd-listenhost
Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
Trac Ticket 35 - Log not clear enough on schema errors
Trac Ticket #274 - Reindexing entryrdn fails if
Trac Ticket #275 - Invalid read reported by valgrind
Trac Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
Trac Ticket #27 - SASL/PLAIN binds do not work
Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
Trac Ticket #169 - allow 389 to use db5
Trac Ticket #34 - remove-ds.pl does not remove everything
Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse.
Trac Ticket #298 - crash when replicating orphaned tombstone entry
Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
Trac Ticket #260 - 389 DS does not support multiple
Fixing compiler warnings
Trac Ticket #303 - make DNA range requests work with transactions
coverity 12606 Logically dead code
Trac Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames
Trac Ticket #46 (revised) - setup-ds-admin.pl does not like ipv6 only hostnames
Trac Ticket #46 - (take 3) setup-ds-admin.pl does not like ipv6 only hostnames
Trac Ticket #46 - (additional) setup-ds-admin.pl does not
Trac Ticket #45 - Fine Grained Password policy:
Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
Trac Ticket #335 - transaction retries need to be cache aware
Trac Ticket #338 - letters in object's cn get converted to
Trac Ticket #310 - Avoid calling escape_string() for logged DNs
Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
Trac Ticket #345 - db deadlock return should not log error
Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
Trac Ticket #359 - Database RUV could mismatch the one
Trac Ticket #338 - letters in object's cn get converted to
Trac Ticket #335 - transaction retries need to be cache aware
Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213
Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213
Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213
audit log does not log unhashed password: enabled, by default.
Trac Ticket 396 - Account Usability Control Not Working [Bug 835238]
Trac Ticket #402 - nhashed#user#password in entry extension
Trac Ticket #346 - Slow ldapmodify operation time for large
Trac Ticket #346 - Slow ldapmodify operation time for large
Coverity defects
Conflict definition in SLAPI_ATTR_FLAG macros
Trac Ticket #412 - memberof performance enhancement
Trac Ticket #409 - Report during startup if nsslapd-cachememsize is too small
Ticket 328 - make sure all internal search filters are properly escaped
Ticket 328 - make sure all internal search filters are properly escaped
Trac Ticket #346 - Slow ldapmodify operation time for large
Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
Coverity defects
Trac Ticket #340 - Change on SLAPI_MODRDN_NEWSUPERIOR is not
Trac Ticket #466 - entry_apply_mod - ADD: Failed to set
Coverity defects
Trac Ticket #470 - 389 prevents from adding a posixaccount
Coverity defects
Trac Ticket #453 - db2index with -tattrname:type,type fails
Trac Ticket #351 - use betxn plugins by default
Bug 863576 - Dirsrv deadlock locking up IPA
Trac Ticket #455 - Insufficient rights to unhashed#user#password
Trac Ticket #451 - Allow db2ldif to be quiet
Coverity defects
Fixing compiler warnings in the posix-winsync plugin
Trac Ticket #494 - slapd entered to infinite loop during new index addition
Coverity defects
Trac Ticket #498 - Cannot abaondon simple paged result search
Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
Trac Ticket #391 - Slapd crashes when deleting backends
Coverity fixes
Trac Ticket #190 - Un-resolvable server in replication
Trac Ticket #443 - Deleting attribute present in
Trac Ticket #447 - Possible to add invalid attribute
Trac Ticket #311 - IP lookup failing with multiple DNS
Trac Ticket #500 - Newly created users with
Trac Ticket #519 - Search with a complex filter including range search is slow
Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
Coverity defect: Resource leak 13110
Trac Ticket #276 - Multiple threads simultaneously working on
Trac Ticket #531 - loading an entry from the database should use str2entry_fast
Trac Ticket #536 - Clean up compiler warnings for 1.3
Trac Ticket #531 - loading an entry from the database should use str2entry_f
Trac Ticket #499 - Handling URP results is not corrrect
bump version to 1.3.0.rc1
Trac Ticket #522 - betxn: upgrade is not implemented yet
Ticket 509 - lock-free access to be->be_suffixlock
Trac Ticket #497 - Escaped character cannot be used in the substring search filter
Ticket #422 - 389-ds-base - Can't call method "getText"
Ticket #547 - Incorrect assumption in ndn cache
Ticket #545 - Segfault during initial LDIF import: str2entry_dupcheck()
Ticket #542 - Cannot dynamically set nsslapd-maxbersize
Ticket #537 - Improvement of range search
Ticket #342 - better error message when cache overflows
Ticket #505 - use lock-free access name2asi and oid2asi tables (additional)
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket #502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
Ticket #563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
Ticket #533 - only scan for attributes to decrypt if there are encrypted attrs configured
Ticket #543 - Sorting with attributes in ldapsearch gives incorrect result
Ticket #572 - PamConfig schema not updated during upgrade
Ticket #576 - DNA: use event queue for config update only at the start up
Ticket #579 - Error messages encountered when using POSIX winsync
Ticket #584 - Existence of an entry is not checked when its password is to be deleted
bump version to 1.3.1.pre.a1
Ticket #561 - disable writing unhashed#user#password to changelog
Coverity Fix
Ticket #490 - Slow role performance when using a lot of roles
Ticket #603 - A logic error in str2simple
Ticket #604 - Required attribute not checked during search operation
Ticket #585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
Fixing a compiler warning introduced by Ticket #561 - disable writing unhashed#user#password to changelog
Ticket #634 - Deadlock in DNA plug-in
Ticket #627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
Ticket #47308 - unintended information exposure when anonymous access is set to rootdse
Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
Ticket #618 - Crash at shutdown while stopping replica agreements
Ticket 458 - Need to properly check if the password admin dn is set
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket #608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
bump version to 1.3.2.pre.a1
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket 528 - RFE - get rid of instance specific scripts
Ticket #47330 - changelog db extension / upgrade is obsolete
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket #47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
Ticket #47330 - changelog db extension / upgrade is obsolete
Ticket #47347 - Simple paged results should support async search
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket #47320 - put conn on work_q not poll list if conn has buffered more_data
Ticket 47331 - Self entry access ACI not working properly
Ticket #529 - dn normalization must handle multiple space characters in attributes
Coverity fix -- 13164: Logically dead code
Ticket #47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
Ticket #47327 - error syncing group if group member user is not synced
Ticket #428 - posix winsync should support ADD user/group entries from DS to AD
Trac Ticket #402 - nhashed#user#password in entry extension
Ticket #569 - examine replication code to reduce amount of stored state information
Ticket 47379 - DNA plugin failed to fetch replication agreement
Ticket #47391 - deleting and adding userpassword fails to update the password
Ticket #47391 - deleting and adding userpassword fails to update the password (additional fix)
Ticket #47400 - MMR stress test with dna enabled causes a deadlock
Ticket #47384 - Plugin library path validation
Ticket #47374 - flush.pl is not included in perl5
Ticket #47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'
Ticket #47419 - Unhashed userpassword can accidentally get removed from mods
Ticket #47384 - Plugin library path validation
Ticket #47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
Ticket #47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
Ticket #47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative.
Ticket #521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
Ticket #47378 - fix recent compiler warnings
Ticket #630 - The backend name provided to bak2db is not validated
Ticket #415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
Ticket #47314 - Winsync should support range retrieval
Ticket #47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
Ticket #48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort.
Ticket #609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
Ticket #197 - BDB backend - clear free page files to reduce changelog size
Ticket #48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort.
Ticket #460 - support multiple subtrees and filters
coverity 11956 - Dereference after null check
Ticket #47492 - PassSync removes User must change password flag on the Windows side
Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
Ticket #47534 - RUV tombstone search with scope "one" doesn`t work
Ticket #47463 - IDL-style can become mismatched during partial restoration
Coverity fixes - 12023, 12024, and 12025
Ticket #54 - locale "nl" not supported by collation plugin
Ticket #53 - Need to update supported locales
Ticket #53 - Need to update supported locales
Ticket #53 - Need to update supported locales
Ticket #47530 - dbscan on entryrdn should show all matching values
Ticket #47422 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
Ticket #47530 - dbscan on entryrdn should show all matching values
Ticket #538 - hardcoded sasl2 plugin path in ldaputil.c, saslbind.c
Ticket #47555 - db2bak.pl issue when specifying non-default directory
Ticket #47581 - Winsync plugin segfault during incremental backoff
Ticket #47581 - Winsync plugin segfault during incremental backoff (phase 2)
Ticket #605 - support TLS 1.1
Ticket #605 - support TLS 1.1 - adding backward compatibility
Ticket #342 - better error message when cache overflows (phase 2)
Ticket #605 - support TLS 1.1 - lower the log level for the supported NSS version range
Ticket #605 - support TLS 1.1 - Fixing "Coverity 12415 - Logically dead code"
Ticket #47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
Ticket #47606 - replica init/bulk import errors should be more verbose
Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
Ticket #47571 - targetattr ACIs ignore subtype
Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves"
Ticket #47660 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read
Ticket #47571 - targetattr ACIs ignore subtype
Ticket #342 - better error message when cache overflows
Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
Ticket #47649 - Server hangs in cos_cache when adding a user entry
Ticket #47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV
Ticket #47570 - slapi_ldap_init unusable during independent plugin development
Ticket #47693 - Environment variables are not passed when DS is started via service
Ticket #47677 - Size returned by slapi_entry_size is not accurate
Ticket #47608 - change slapi_entry_attr_get_bool to handle "on"/"off" values, support default value
Ticket #47602 - Make ldbm_back_seq independently support transactions
Ticket #47642 - Windows Sync group issues
Ticket #47701 - Make retro changelog trim interval programmable
Ticket #47701 - Make retro changelog trim interval programmable
Ticket #47700 - Unresolved external symbol references break loading of the ACL plugin
Ticket #47709 - package issue in 389-ds-base
Ticket #47709 - package issue in 389-ds-base
Ticket #47709 - package issue in 389-ds-base
Ticket #47701 - Make retro changelog trim interval programmable
Ticket 525 - Replication retry time attributes cannot be added
Ticket 408 - create a normalized dn cache
Ticket 571 (dup 47361) - Empty control list causes LDAP protocol error is thrown
Ticket 408 - create a normalized dn cache
Ticket #47725 - compiler error on daemon.c
Ticket #47735 - e_uniqueid fails to set if an entry is a conflict entry
Ticket #47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
Ticket #47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
Ticket #47734 - Change made in resolving ticket #346 fails on Debian SPARC64
Ticket #47740 - Coverity issue in 1.3.3
Ticket #47735 - e_uniqueid fails to set if an entry is a conflict entry
Ticket #47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
Ticket #47707 - 389 DS Server crashes and dies while handles paged searches from clients
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing;
Ticket #47764 - Problem with deletion while replicated
Ticket #47780 - Some VLV search request causes memory leaks
Ticket #47804 - db2bak.pl error with changelogdb
Ticket #47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
Ticket #47770 - #481 breaks possibility to reassemble memberuid list
Ticket #47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
Ticket 47313 - CI test: add test case for ticket 47313
Ticket 47808 - CI test: add test case for ticket 47808
Ticket #47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
Ticket #555 - add fixup-memberuid.pl script
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing
Ticket #47763 - winsync plugin modify is broken
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47839 - 389-ds production segfault: __memcpy_sse2_unaligned...
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Ticket #47852 - Updating winsync one-way sync does not affect the behaviour dynamically
Ticket #47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
Ticket #47843 - Fix various typos in manpages & code
Ticket #47844 - Fix hyphens used as minus signed and other manpage mistakes
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Revert "Revert "Ticket #47835 - Coverity: 12687..12692""
Ticket #47859 - Coverity: 12692 & 12717
Ticket #47859 - Coverity: 12692 & 12717
Ticket #47711 - improve dbgen rdn generation, output and man page.
Ticket #47746 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
Ticket #47824 - paged results control is not working in some cases when we have a subsuffix.
Ticket 47824 - CI test: add test case for ticket 47824
Ticket #47664 - Page control does not work if effective rights control is specified
Ticket 47664 - CI test: add test case for ticket 47664
Ticket #47714 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
Ticket 47714 - CI test: add test case for ticket 47713
Ticket 47714 - CI test: add test case for ticket 47714
Ticket #346 - Fixing memory leaks
Ticket #47579 - add dbmon.sh
Ticket #47579 - add dbmon.sh
Ticket #47869 - unauthenticated information disclosure (Bug 1123477)
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Ticket 47824 - CI test: add test case for ticket 47824
Ticket 47664 - CI test: add test case for ticket 47664
Ticket #47838 - harden the list of ciphers available by default
Ticket 47838 - CI test: add test case for ticket 47838
Ticket #47838 - harden the list of ciphers available by default
Ticket 47869 - CI test: add test case for ticket 47869
Ticket #47838 - harden the list of ciphers available by default
Ticket #47574 - start dirsrv after ntpd
Ticket #47874 - Performance degradation with scope ONE after some load
Ticket #47875 - dirsrv not running with old openldap
Ticket #47875 - dirsrv not running with old openldap
Ticket #47875 - dirsrv not running with old openldap
Ticket #47875 - dirsrv not running with old openldap
Revert "Ticket #47875 - dirsrv not running with old openldap"
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Ticket #47876 - coverity defects in slapd/tools/mmldif.c
Ticket #47879 - coverity defects in plugins/replication/windows_protocol_util.c
Ticket #47875 - dirsrv not running with old openldap
Ticket #47875 - dirsrv not running with old openldap
bump version to 1.3.4.a1
Ticket #47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Ticket #47890 - minor memory leaks in utilities
Ticket #47838 - harden the list of ciphers available by default
Ticket 47838,47895 - CI test: add test cases for ticket 47838 and 47895
Ticket #47895 - If no effective ciphers are available, disable security setting.
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing
Ticket #47907 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24
Ticket #47908 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server
Ticket #47838 - harden the list of ciphers available by default (phase 2)
Ticket 47838 - CI test: adjusted test cases based on the phase 2 fixes for ticket 47838
Ticket #47880 - provide enabled ciphers as search result
Ticket 47880 - CI test: added test cases for ticket 47880
Ticket #47892 - coverity defects found in 1.3.3.x
Ticket #47919 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails.
Ticket #47912 - Proper handling of "No original_tombstone for changenumber" errors
Ticket #47897 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten
Ticket #47922 - dynamically added macro aci is not evaluated on the fly
Ticket #47553 - Enhance ACIs to have more control over MODRDN operations
Ticket #47928 - Disable SSL v3, by default.
Ticket 47928 - CI test: added test cases for ticket 47928
Ticket #47928 - Disable SSL v3, by default.
Ticket #47939 - Malformed cookie for LDAP Sync makes DS crash
Ticket #47945 - Add SSL/TLS version info to the access log
Ticket #47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS
Ticket #47928 - Disable SSL v3, by default.
Ticket #47960 - cookie_change_info returns random negative number if there was no change in a tree
Ticket #47960 - cookie_change_info returns random negative number if there was no change in a tree
Ticket #47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown.
Ticket 47965 - Fix coverity issues (2014/12/16)
Ticket #47947 - start dirsrv after chrony on RHEL7 and Fedora
Ticket #47966 - slapd crashes during Dogtag clone reinstallation
Ticket #47905 - Bad manipulation of passwordhistory
Ticket #47934 - nsslapd-db-locks modify not taking into account.
Ticket #47989 - Windows Sync accidentally cleared raw_entry
Ticket #47996 - ldclt needs to support SSL Version range
Ticket 47988: Schema learning mechanism, in replication, unable to extend an existing definition
Coverity 12970 - Explicit null dereference
Ticket #48001 - ns-activate.pl fails to activate account if it was disabled on AD
Ticket #48001 - ns-activate.pl fails to activate account if it was disabled on AD
Ticket #48025 - add an option '-u' to dbgen.pl for adding group entries with uniquemembers
Ticket #47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
Ticket #47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
Ticket #47742 - 64bit problem on big endian: auth method not supported
Ticket #48005 - ns-slapd crash in shutdown phase
Ticket 48005 - CI test: added test cases for ticket 48005
Ticket #48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
Ticket #48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes.
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
Ticket 48109 - CI test: added test cases for ticket 48109
Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
Ticket #48048 - Fix coverity issues - 2015/3/1
Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
Ticket 47431 - CI test: added test cases for ticket 47431
Ticket #47957 - Make ReplicaWaitForAsyncResults configurable
Ticket #47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
Ticket #48133 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted
Ticket #47723 - winsync sets AccountUserControl in AD to 544
Ticket #48143 - Password is not correctly passed to perl command line tools if it contains shell special characters.
Ticket 47966 - CI test: added test cases for ticket 47966
Ticket #48169 - support NSS 3.18
Ticket #48146 - async simple paged results issue
Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
Ticket #48146 - async simple paged results issue; log pr index
Ticket #48146 - async simple paged results issue; need to close a small window for a pr index competed among multiple threads.
Ticket #48146 - async simple paged results issue
Ticket #48183 - bind on db chained to AD returns err=32
Ticket #48146 - async simple paged results issue
Ticket #48146 - async simple paged results issue
Ticket #48190 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane
Revert "Ticket 48149 - ns-slapd double free or corruption crash"
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #47972 - make parsing of nsslapd-changelogmaxage more fool proof
Ticket #48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn
Ticket #48191 - CI test: added test cases for ticket 48191
Ticket #48191 - RFE: Adding nsslapd-maxsimplepaged-per-conn Adding nsslapd-maxsimplepaged-per-conn
Ticket #48008 - db2bak.pl man page should be improved.
Ticket #48194 - nsSSL3Ciphers preference not enforced server side
Ticket #48194 - CI test: added test cases for ticket 48194
Ticket #47669 - Retro Changelog Plugin accepts invalid value in nsslapd-changelogmaxage attribute
Ticket #47669 - CI test: added test cases for ticket 47669
Spec file changes for nunc-stans
Ticket #48032,48033 - change C code license to GPLv3; change C code license to allow openssl
Ticket #48032,48033 - change C code license to GPLv3; change C code license to allow openssl
bump version to 1.3.4.0
Ticket #48203 - Fix coverity issues - 06/22/2015
Updating 389-ds-base.spec.in for the better nunc-stans support.
bump version to 1.3.4.1
Ticket #48212 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well.
Ticket #48212 - CI test: added test cases for ticket 48212
Ticket #48214 - ldapsearch on nsslapd-maxbersize returns 0 instead of current value
Ticket #48214 - CI test: added test cases for ticket 48213
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #48203 - Fix coverity issues - 07/07/2015
Ticket #47799 - Any negative LDAP error code number reported as Illegal error by ldclt.
Ticket #48216 - crash in ns-slapd when deleting winSyncSubtreePair from sync agreement
Ticket #48223 - Winsync fails when AD users have multiple spaces (two)inside the value of the rdn attribute
Ticket #48194 - CI test: fixing test cases for ticket 48194
Ticket #48203 - Fix coverity issues - 07/14/2015
Ticket #48226 - In MMR, double free coould occur under some special condition
Ticket #48226 - CI test: added test cases for ticket 48226
Ticket #48010 - winsync range retrieval gets only 5000 values upon initialization
bump version to 1.3.4.2
bump version to 1.3.4.3
Ticket #48232 - winsync lastlogon attribute not syncing between DS and AD.
Ticket #48231 - logconv autobind handling regression caused by 47446
Ticket #48228 - wrong password check if passwordInHistory is decreased.
Ticket #48228 - CI test: added test cases for ticket 48228
Ticket #47511 - bashisms in 389-ds-base admin scripts
Ticket #48245 - Man pages and help for remove-ds.pl doesn't display "-a" option
Ticket #48250 - Slapd crashes reported from latest build
Ticket #48243 - replica upgrade failed in starting dirsrv service due to upgrade scripts did not run
Ticket #48254 - CLI db2index fails with usage errors
Ticket #48254 - Shell CLI fails with usage errors if an argument containing white spaces is given
Ticket #47757 - Unable to dereference unqiemember attribute because it is dn [#UID] not dn syntax
Ticket #48252 - db2index creates index entry from deleted records
Ticket #48252 - CI test: added test cases for ticket 48252
Ticket #48228 - wrong password check if passwordInHistory is decreased.
Ticket #48252 - db2index creates index entry from deleted records
Ticket #47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes
Ticket #48265 - Complex filter in a search request doen't work as expected. (regression)
Ticket #48265 - CI test: added test cases for ticket 48265
bump version to 1.3.4.4
Revert "Ticket #48254 - Shell CLI fails with usage errors if an argument containing white spaces is given"
Revert "Ticket #47511 - bashisms in 389-ds-base admin scripts"
Ticket #47511 - bashisms in 389-ds-base admin scripts
Ticket #48254 - Shell CLI fails with usage errors if an argument containing white spaces is given
Ticket #48226 - In MMR, double free coould occur under some special condition
Ticket #48279 - Check NULL reference in nssasl_mutex_lock etc. (saslbind.c)
Ticket #48188 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in
Ticket #48299 - pagedresults - when timed out, search results could have been already freed.
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #48298 - ns-slapd crash during ipa-replica-manage del
Ticket #48304 - ns-slapd - LOGINFO:Unable to remove file
Ticket #48305 - perl module conditional test is not conditional when checking SELinux policies
Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
Ticket #48344 - acl - regression - trailing ', (comma)' in macro matched value is not removed.
Ticket #48339 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well.
Ticket #48348 - Running /usr/sbin/setup-ds.pl fails with Can't locate bigint.pm, plus two warnings
Ticket #48316 - Perl-5.20.3-328: Use of literal control characters in variable names is deprecated
Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
bump version to 1.3.4.5
Petr Viktorin (1):
Ticket 47899: Fix slapi_td_plugin_lock_init prototype
Rich Megginson (479):
Net::LDAP password modify extop breaks; msgid in response is 0xFF
Clean up assert for entrydn
Bug 543080 - Bitwise plugin fails to return the exact matched entries for Bitwise search filter
Bug 537466 - nsslapd-distribution-plugin should not require plugin name to begin with "lib"
bump version to 1.2.6.a2
Do not use syntax plugins directly for filters, indexing
wrap new style matching rule plugins for use in old style indexing code
change extensible filter code to use new syntax function style mr funcs
change syntax plugins to register required matching rule plugins
crash looking up compat syntax; numeric string syntax using integer; make octet string ordering work correctly
fix memory leak in attr replace when replacement fails
fix dso linking issues found by fedora 13 linking
problems linking with -z defs
389 DS segfaults on libsyntax-plugin.so - part 1
389 DS segfaults on libsyntax-plugin.so - part 2
389 DS segfaults on libsyntax-plugin.so - part 3
Bug 460162 - FedoraDS "with-FHS" installs init.d StartupScript in wrong location on non-RHEL/Fedora OS
Bug 568196 - Install DS8.2 on Solaris fails
Bug 568196 - Install DS8.2 on Solaris fails - part 2
Bug 551198 - LDAPI: incorrect logging to access log
bump version to 1.2.6.a3
fix various memory leaks
Bug 551198 - LDAPI: incorrect logging to access log - part 2
Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external
cleanup build warnings
Bug 571514 - upgrade to 1.2.6 should upgrade 05rfc4523.ldif (cert schema)
Bug 570905 - postalAddress syntax should allow empty lines (should allow $$)
Add support for additional schema/matching rules included with 389
Bug 572677 - Memory leak in searches including GER control
Bug 571677 - Busy replica on consumers when directly deleting a replication conflict
Bug 576074 - search filters with parentheses fail
Bug 567429 - slapd didn't close connection and get into CLOSE_WAIT state
Bug 578167 - repl. of mod/replace deletes multi-valued attrs
Bug 561575 - setup-ds-admin fails to supply nsds5ReplicaName when configuring via ConfigFile
Bug 572162 - the string "|*" within a search filter on a non-indexed attribute returns all elements.
Bug 576644 - segfault while multimaster replication (paired node won't find deleted entries)
start of 1.2.6.a4
Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
Fix too few args for format warning in acllas
Bug 586571 - DS Console shows escaped DNs
Bug 591685 - Server instances Fail to Start on Solaris due to Library Path and pcre
bump console version to 1.2.3
Repl Session API needs to check for NULL api before init
Bug 593392 - setup-ds-admin.pl -k creates world readable file
Bug 595874 - 99user.ldif getting overpopulated
bump version to 1.2.6.a5
bump version to 1.2.6.rc1
bump version to 1.2.6.rc2
bump version to 1.2.6.rc3
Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
Bug 603942 - null deref in _ger_parse_control() for subjectdn
bump version to 1.2.6.rc4
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 602530 - coverity: op_shared_modify: compare pre, post and original entries before freeing them
Bug 602531 - coverity: op_shared_delete: compare preop entry and GLUE_PARENT_ENTRY before freeing them
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 610177 - fix coverity Defect Type: Uninitialized variables issues
Bug 610276 - fix coverity Defect Type: API usage errors issues
Bug 611850 - fix coverity Defect Type: Error handling issues
Bug 614242 - C99/ANSI C++ related compile errors on HP-UX
Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
Bug 617013 - repl-monitor.pl use cpu upto 90%
fix build failures due to libtool problems
Bug 617629 - Missing aliases in new schema files
Bug 617862 - Replication: Unable to delete tombstone errors
bump version to 1.2.7.a1
Bug 610281 - fix coverity Defect Type: Control flow issues - daemon.c:write_function()
Bug 610281 - fix coverity Defect Type: Control flow issues - last repl init status
postalAddress syntax does not accept empty values
ger should support both "dn" and "distinguishedName"
openldap - ldap_url_parse_ext is not part of the public api
fix memleak in ldbm_config_read_instance_entries
Add -x option to ldap tools when using openldap
openldap - add support for missing controls, add ldif api, fix NSS usage
port client tools to use openldap API
use the mozldap versions of the proxy auth control create function
document slapi wrappers for openldap/mozldap functions that differ
fix some compiler warnings
use strcasecmp with ptype and type->bv_val
ber_printf 'o' cannot handle NULL bv_val
fix the url_parse logic when looking for a missing suffix DN
openldap ldapsearch uses -LLL to suppress # version: N
add ldaptool_opts for the non BUNDLE case in Makefile.am
openldap ldapsearch returns empty line at end of LDIF output
have to use LDAP_OPT_X_TLS_NEVER to defeat cert hostname checking
openldap_read_function needs to set EWOULDBLOCK if the buffer is empty
do not terminate unwrapped LDIF line with another newline
slapi_ldap_url_parse must handle multiple host:port in url
convert mozldap host list to openldap uri list
move the out pointer back if continuation lines were removed
check src < *out only; only check for \nspace if src < *out - 2
use slapi_ldap_url_parse in the acl code
do not un-null-terminate normalized DN until new url is constructed
implement slapi_ldap_explode_dn and slapi_ldap_explode_rdn
use slapi_pblock_set to set the ldap result code for the be postop plugins
pass the string copy to slapi_dn_normalize_original
bug 614511 - fix coverity null reference - revert macro aci $dn logic
fix compiler warnings - unused vars/funcs, invalid casts
use slapi_mods_init_passin/get_ldapmods_passout if modifying the smods
Have to explicitly set protocol version to 3
Only check modrdn ops for backend/suffix correctness if not the default backend
Bug 634561 - Server crushes when using Windows Sync Agreement
openldap ber_init will assert if the bv->bv_val is NULL
add the account policy plugin and related server code, schema, and config
fix pblock memory leak
do not register pre/post op plugins if disabled
add support for global inactivity limit
fix typos in Makefile.am, acctpolicy schema
bump version to 1.2.7.a2
remove extra format argument; use %lu for size_t printf format
Bug 644013 - uniqueness plugin segfault bug
bump version to 1.2.7.a3
bump to 1.2.7.a4
bump version to 1.2.7.a5
put replication config entries in separate file
bump version to 1.2.7.a6
bump version to 1.2.7.1
bump version to 1.2.7.2
bump version to 1.2.7.3
bump version to 1.2.7.4
Bug 515329 - Multiple mods in one operation can result in an inconsistent replica
bump version to 1.2.8.a1
Bug 642046 - Segfault when using SASL/GSSAPI multimaster replication, possible krb5_creds doublefree
Bug 624485 - setup dsktune check step should default to "yes" if no problems found
Bug 622907 - support piped passwords to perl-based maintenance commands
Bug 624485 - setup dsktune check step should default to "yes" if no problems found
Bug 576534 - Password displayed on console when entered in command-line utilities
Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the log output to the text file
bump version to 1.2.8.a2
Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
Bug 676689 - crash while adding a new user to be synced to windows
Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
Bug 677774 - DS fails to start after reboot
Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result searches
Bug 675320 - empty modify operation with repl on or lastmod off will crash server
bump version to 1.2.9.a1 - console version to 1.2.4
Bug 677705 - ds-logpipe.py script is failing to validate "-s" and "--serverpid" options with "-t".
Bug 676655 - winsync stops working after server restart
Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
Bug 514190 - setup-ds-admin.pl --debug does not log to file
Bug 518890 - setup-ds-admin.pl - improve hostname validation
Bug 644784 - Memory leak in "testbind.c" plugin
Bug 683250 - slapd crashing when traffic replayed
Bug 690584 - #10691 ldbm_back_init() - fix coverity resource leak issues
Bug 690584 - #10690 #10689 attrcrypt_get_ssl_cert_name() - fix coverity resource leak issues
Bug 690584 - #10688 - dblayer_make_env - fix coverity resource leak issues
Bug 690584 - #10669 #10668 cl5ImportLDIF - fix coverity resource leak issues
Bug 690584 - #10658 linked_attrs_pre_op - fix coverity resource leak issues
Bug 690584 - #10655 acllas__handle_group_entry - fix coverity resource leak issues
Bug 690584 - #10654 #10653 str2entry_dupcheck - fix coverity resource leak issues
Bug 690584 - #10652 #10651 #10650 #10649 #10648 #10647 send_specific_attrs send_all_attrs - fix coverity resource leak issues
Bug 690584 - #10643 hash_rootpw - fix coverity resource leak issues
Bug 690584 - #10641 reslimit_bv2int - fix coverity resource leak issues
Bug 691422 - sdt_destroy - fix coverity control flow issues
Bug 691422 - ldbm_back_upgradedb - fix coverity control flow issues
Bug 691422 - csnplFree - fix coverity control flow issues
Bug 691422 - SetUnicodeStringFromUTF_8 - fix coverity control flow issues
Bug 691422 - cl5DeleteRUV - fix coverity control flow issues
Bug 691422 - acl_read_access_allowed_on_entry - fix coverity control flow issues
Bug 691422 - search_internal_callback_pb - fix coverity control flow issues
Bug 691422 - cl5WriteRUV - fix coverity control flow issues
Bug 691422 - windows_replay_update - fix coverity control flow issues
Bug 690584 - #10691 ldbm_back_init() - fix coverity resource leak issues
Bug 690584 - #10652 #10651 #10650 #10649 #10648 #10647 send_specific_attrs send_all_attrs - fix coverity resource leak issues
Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
Bug 692937 - Replica install fails after step for "enable GSSAPI for replication"
Bug 692331 - Segfault on index update during full replication push on 1.2.7.5
Bug 693451 - cannot use localized matching rules
Bug 693455 - nsMatchingRule does not work with multiple values
Bug 693503 - matching rules do not inherit from superior attribute type
Bug 693466 - Unable to change schema online
Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
Bug 693962 - Full replica push loses some entries with multi-valued RDNs
Bug 694336 - Group sync hangs Windows initial Sync
Bug 700145 - userpasswd not replicating
Bug 703990 - Support upgrade from Red Hat Directory Server
bump console version to 1.2.5
Bug 703990 - Support upgrade from Red Hat Directory Server
Bug 703990 - Support upgrade from Red Hat Directory Server
Bug 707015 - Cannot disable SSLv3 and use TLS only
bump version to 1.2.9.a2
Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
Bug 711906 - ns-slapd segfaults using suffix referrals
Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
Bug 711679 - unresponsive LDAP service when deleting vlv on replica
bump console version to 1.2.6
Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
Bug 716980 - winsync uses old AD entry if new one not found
add support for ldif files with changetype: add
writing Inf file shows SchemaFile = ARRAY(0xhexnum)
look for separate openldap ldif library
bump version to 1.2.9.a3
Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
Bug 720059 - RDN with % can cause crashes or missing entries
bump version to 1.2.9.0
Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
Bug 723937 - replication failing on RUV errors
bump version to 1.2.9.1
Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
bump version to 1.2.9.2
Bug 727511 - ldclt SSL search requests are failing with "illegal error numbe
bump version to 1.2.9.3
Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
bump version to 1.2.9.4
Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
bump version to 1.2.9.5
Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
Bug 723937 - replication failing on RUV errors
Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
make sure the DBVERSION file ends in a newline
bump version to 1.2.10.a1
Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
Bug 735121 - simple paged search + ip/dns based ACI hangs server
Bug 695736 - Providing native systemd file for upcoming F15 Feature Systemd
Bug 590826 - Reloading database from ldif causes changelog to emit "data no longer matches" errors
Bug 736712 - Modifying ruv entry deadlocks server
Add support for pre/post db transaction plugins
Make all backend operations transaction aware
Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
Bug 741744 - part2 - MOD operations with chained delete/add get back error 53 on backend config
Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
bump version to 1.2.10.a2
bump version to 1.2.10.a3
fix transaction support in ldbm_delete
bump version to 1.2.10.a4
set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
pass the plugin config entry to the plugin init function
make memberof transaction aware and able to be a betxnpostoperation plugin
Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
bump version to 1.2.10.a5
Change referential integrity to be a betxnpostoperation plugin
Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
bump version to 1.2.10.a6
Bug 751645 - crash when simple paged fails to send entry to client
csn_as_string - use slapi_uN_to_hex instead of sprintf
uniqueid formatting - use slapi_u8_to_hex instead of sprintf
fix member variable name error in slapi_uniqueIDFormat
reduce calls to csn_as_string and slapi_log_error
csn_init_as_string should not use sscanf
use slapi_hexchar2int and slapi_str_to_u8 everywhere
Bug 755754 - Unable to start dirsrv service using systemd
Bug 755725 - 389 programs linked against openldap crash during shutdown
Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
bak2db gets stuck in infinite loop
Ticket #256 - debug build assertion in ACL_EvalDestroy()
bump version to 1.2.10.a7
Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
fix mep sdn compiler warnings
add a hack to disable sasl hostname canonicalization - helps with testing when you don't want to set up correct host name resolution and/or cannot set the default system hostname
Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
fix recent compiler warnings
Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
fix compiler warnings
Remove redundant code - make a global into a static
Ticket #262 - pid file not removed with systemd
fix mozldap build issues
Ticket #264 - upgrade needs better check for "server is running"
Ticket #263 - add systemd include directive
bump version to 1.2.10.rc1
change version to 1.2.10.a8
Ticket #272 - add tombstonenumsubordinates to schema
bump version to 1.2.10.rc1
Ticket #161 - Review and address latest Coverity issues
Ticket #22 - RFE: Support sendmail LDAP routing schema
Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
fix a couple of minor coverity issues
Ticket #87 - Manpages fixes
Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
Ticket #55 - Limit of 1024 characters for nsMatchingRule
Ticket #277 - cannot set repl referrals or state
Ticket #278 - Schema replication update failed: Invalid syntax
Ticket #277 - cannot set repl referrals or state
Ticket #279 - filter normalization does not use matching rules
Ticket #280 - extensible binary filters do not work
Ticket #281 - TLS not working with latest openldap
coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
bump version to 1.2.10.rc2
fix compiler warning in acct policy plugin
bump version to 1.2.11.a1
Ticket #294 - 389 DS Segfaults during replica install in FreeIPA
coverity uninit var and resource leak
Revert "Ticket #111 - ability to control behavior of modifyTimestamp/modifiersName"
Revert "Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock"
Revert "Change referential integrity to be a betxnpostoperation plugin"
Revert "make memberof transaction aware and able to be a betxnpostoperation plugin"
Revert "pass the plugin config entry to the plugin init function"
coverity 12559 Uninitialized pointer read In ldbm_back_modify(): Reads an uninitialized pointer or its target
Ticket #281 - TLS not working with latest openldap
Trac Ticket #298 - crash when replicating orphaned tombstone entry
Ticket #301 - implement transaction support using thread local storage
init txn thread private data for all database modes
handle null smods
memleak in mep_parse_config_entry
memleak in normalize_mods2bvals
destroy the entry cache and dn cache in the dse post op delete callback
Ticket #289 - allow betxn plugin config changes
coverity 12563 Read from pointer after free
Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
Ticket #320 - allow most plugins to be betxn plugins
Ticket #324 - Sync with group attribute containing () fails
Ticket #324 - redux: Sync with group attribute containing () fails
Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
Ticket #261 - Add Solaris i386
Ticket #331 - transaction errors with db 4.3 and db 4.2
schema def must have DESC '' - close paren must be preceded by space
Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
Ticket #347 - IPA dirsvr seg-fault during system longevity test
Ticket #348 - crash in ldap_initialize with multiple threads
Ticket #351 - use betxn plugins by default
Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
Ticket #348 - crash in ldap_initialize with multiple threads
Ticket #351 - use betxn plugins by default
bump version to 1.3.0.a1
Ticket #358 - managed entry doesn't delete linked entry
Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
console .2 is still compatible with 389 .3 for now
Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
Ticket #360 - ldapmodify returns Operations error
Ticket #382 - DS Shuts down intermittently
Ticket #383 - usn + mmr = deletions are not replicated
Ticket #389 - ADD operations not in audit log
Ticket #360 - ldapmodify returns Operations error - fix delete caching
fix coverity issues with uninit vals, no return checking
Ticket #360 - ldapmodify returns Operations error - fix delete caching
improve txn test index handling
Ticket #387 - managed entry sometimes doesn't delete the managed entry
Ticket #387 - managed entry sometimes doesn't delete the managed entry
Ticket 378 - unhashed#user#password visible after changing password
Ticket #405 - referint modrdn not working if case is different
Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
Ticket #425 - support multiple winsync plugins
Ticket #430 - server to server ssl client auth broken with latest openldap
Ticket #426 - support posix schema for user and group sync
coverity - mbo dead code - winsync leaks, deadcode, null check, test code
Ticket #355 - winsync should not delete entry that appears to be out of scope
Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
fix mem leaks with parent dn log message, setting winsync windows domain
coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
fix coverity resource leak in windows_plugin_add
Ticket #426 - support posix schema for user and group sync
Ticket #374 - consumer can go into total update mode for no reason
Ticket #461 - fix build problem with mozldap c sdk
Ticket #462 - add test for include file mntent.h
Ticket #463 - different parameters of getmntent in Solaris
add eclipse generated files to the ignore list
fix compiler warnings in ticket 374 code
Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
minor fixes for bdb 4.2/4.3 and mozldap
Ticket #322 - Create DOAP description for the 389 Directory Server project
Ticket #508 - part 1 - lock-free access to FrontendConfig structure
Ticket #508 - part 2 - lock-free access to FrontendConfig structure
Ticket #612 - improve dbgen rdn generation, output
Ticket #613 - ldclt: add timestamp, interval, nozeropad, other improvements
Ticket #47299 - allow cmdline scripts to work with non-root user
Ticket #47302 - get rid of sbindir start/stop/restart slapd scripts
Ticket #47303 - start/stop/restart dirsrv scripts should report and error if no instances
Ticket #47302 - get rid of sbindir start/stop/restart slapd scripts
Ticket #565 - turbo mode and replication - allow disable of turbo mode
Ticket #633 - allow nsslapd-nagle to be disabled, and also tcp cork
Ticket #613 - ldclt: add timestamp, interval, nozeropad, other improvements
Ticket #47312 - replace PR_GetFileInfo with PR_GetFileInfo64
Ticket #574 - problems with dbcachesize disk space calculation
Ticket #47312 - replace PR_GetFileInfo with PR_GetFileInfo64
Ticket #514 - investigate connection locking
Ticket #513 - recycle operation pblocks
Ticket #47319 - make connection buffer size adjustable
Ticket #47320 - put conn on work_q not poll list if conn has buffered more_data
Ticket #47299 - allow cmdline scripts to work with non-root user
Ticket #47336 - logconv.pl -m not working for all stats
Ticket #47341 - logconv.pl -m time calculation is wrong
Ticket #47348 - add etimes to per second/minute stats
Ticket #47349 - DS instance crashes under a high load
Ticket #47362 - ipa upgrade selinuxusermap data not replicating
Ticket #47359 - new ldap connections can block ldaps and ldapi connections
Ticket #47359 - new ldap connections can block ldaps and ldapi connections
Ticket #47359 - new ldap connections can block ldaps and ldapi connections
Ticket #47378 - fix recent compiler warnings
Ticket #47387 - improve logconv.pl performance with large access logs
Ticket #47377 - make listen backlog size configurable
Ticket #47375 - flush_ber error sending back start_tls response will deadlock
Ticket #47409 - allow setting db deadlock rejection policy
Ticket #47409 - allow setting db deadlock rejection policy
Ticket #47409 - allow setting db deadlock rejection policy
Ticket #47387 - improve logconv.pl performance with large access logs
Ticket #47410 - changelog db deadlocks with DNA and replication
Ticket #47392 - ldbm errors when adding/modifying/deleting entries
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket #47424 - Replication problem with add-delete requests on single-valued attributes
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket #47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
Ticket #47455 - valgrind - value mem leaks, uninit mem usage
Ticket #47456 - delete present values should append values to deleted values
fix coverity 11895 - null deref - caused by fix to ticket 47392
fix coverity 11915 - dead code - introduced with fix for ticket 346
Ticket #47455 - valgrind - value mem leaks, uninit mem usage
Bug 999634 - ns-slapd crash due to bogus DN
Ticket #47455 - valgrind - value mem leaks, uninit mem usage
Ticket #47516 replication stops with excessive clock skew
Ticket #47504 idlistscanlimit per index/type/value
Ticket #47504 idlistscanlimit per index/type/value
Ticket #47504 idlistscanlimit per index/type/value
Ticket #47501 logconv.pl uses /var/tmp for BDB temp files
Ticket 47533 logconv: some stats do not work across server restarts
Ticket #47515 Fedora 20: setup-ds-admin.pl
Ticket #47551 logconv: -V does not produce unindexed search report
bump autoconf to 2.69, automake to 1.13.4, libtool to 2.4.2
ticket #47550 wip
Ticket #47550 logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949
Ticket #47559 hung server - related to sasl and initialize
Ticket #47585 Replication Failures related to skipped entries due to cleaned rids
Revert "Ticket #47559 hung server - related to sasl and initialize"
Ticket #47596 attrcrypt fails to find unlocked key
Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches
bump version to 1.3.3.a1
Ticket #381 Recognize compressed log files
Ticket 47599 - Reduce lock scope in retro changelog plug-in
bump version to 1.3.3.a2
Ticket #47596 attrcrypt fails to find unlocked key
Ticket #47623 fix memleak caused by 47347
Ticket #47623 fix memleak caused by 47347
Ticket #47631 objectclass may, must lists skip rest of objectclass once first is found in sup
Ticket #47645 reset stack, op fields to NULL - clean up stacks at shutdown - free unused plugin config entries
Ticket #47634 support AttributeTypeDescription USAGE userApplications distributedOperation dSAOperation
Ticket #47647 remove bogus definition in 60rfc3712.ldif
Ticket #47657 add schema test suite and tests for Ticket #47634
Ticket #47675 logconv errors when search has invalid bind dn
Ticket #47516 replication stops with excessive clock skew
Ticket #47374 - flush.pl is not included in perl5
Ticket #471 logconv.pl tool removes the access logs contents if "-M" is not correctly used
Ticket #47692 single valued attribute replicated ADD does not work
Ticket #47773 - mem leak in do_bind when there is an error
Ticket #47774 mem leak in do_search - rawbase not freed upon certain errors
Ticket #47772 empty modify returns LDAP_INVALID_DN_SYNTAX
Ticket #47772 empty modify returns LDAP_INVALID_DN_SYNTAX
Ticket #47831 - server restart wipes out index config if there is a default index
Ticket #47692 single valued attribute replicated ADD does not work
Ticket 47446 - logconv.pl memory continually grows
Ticket #47892 coverity defects found in 1.3.3.1
support nunc-stans for basic accept and read events
get rid of lfds - use nunc-stans/ subdir for nunc-stans headers
Ticket #48122 nunc-stans FD leak
fix compiler warnings when using nunc-stans
Ticket #48178 add config param to enable nunc-stans
Revert "Ticket #48178 add config param to enable nunc-stans"
Ticket #48178 add config param to enable nunc-stans
Ticket #48122 nunc-stans FD leak
fix build with nunc-stans
fix MEMPOOL_EXPERIMENTAL build
Ticket #48224 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
Ticket #48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
Ticket #48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
Ticket #48224 - redux 2 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
Ticket #48227 rpm.mk doesn't build srpms for 389-ds and nunc-stans
Simo Sorce (1):
Ticket #48188 - segfault in ns-slapd due to accessing Slapi_DN freed in pre bind plug-in
Simon Pichugin (6):
Ticket #47569 - Added a testcase to ACL testsuite
Ticket 48251 - Improve the basic test suite
Ticket 47761 - Added a few testcases to the basic testsuite
Ticket #47553 - Automated the verification procedure
Ticket 48264 - Ticket 47553 tests refactoring
Ticket 47957 - Add replication test suite for a wait async feature
Thierry Bordaz (8):
CVE-2015-1854 389ds-base: access control bypass with modrdn
Ticket 47927: Uniqueness plugin: should allow to exclude some subtrees from its scope
Ticket 47833: TEST CASE only (modrdn fails if renamed entry member of a group and is out of memberof scope)
Ticket 48249: sync_repl uuid may be invalid
Ticket 48266: Fractional replication evaluates several times the same CSN
Ticket 48266: coverity issue
Ticket 47978: Deadlock between two MODs on the same entry between entry cache and backend lock
Ticket 47976: deadlock in mep delete post op
Thierry bordaz (tbordaz) (60):
Ticket #487 - Possible to add invalid attribute values to PAM PTA plugin configuration
Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
Ticket 616 - High contention on computed attribute lock
Ticket 618 - Crash at shutdown while stopping replica agreements
Ticket 512 - improve performance of vattr code
Ticket 205 - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs
Ticket 47325 - Crash at shutdown on a replica aggrement
Ticket 47331 - Self entry access ACI not working properly
Ticket 47361 - Empty control list causes LDAP protocol error is thrown
Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs
Ticket 47350 - Allow search to look up 'in memory RUV'
Compilation warnings (ticket 47350)
Ticket 47350 - (Cont.) Allow search to look up 'in memory RUV'
Ticket 564 - Is ldbm_txn_ruv_modify_context still required
Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
Ticket 208 - [RFE] Roles with explicit scoping in RHDS
Ticket 47433 - With SeLinux, setup-ds.pl and setup-ds-admin.pl fail to detect already ranged labelled ports
Ticket 512 - improve performance of vattr code
Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing
Ticket 47490 - Schema replication between DS versions may overwrite newer base schema
Ticket 47398 - memberOf on a user is converted to lowercase
Ticket 47560: fixup memberof task does not work: task entry not added
Ticket 47586 - CI tests: test case for 47490
Ticket 47586 - CI tests: follow up
Ticket 47586 - Need to rebind after a stop (fix to run direct python script)
Ticket 47575 - CI test: add test case for ticket47560
Ticket 47628: port testcases to new DirSrv interface
Ticket 47651 - Finaliser to remove instances backups
Ticket 47668 - test: port ticket47490_test to Replica/Agreement interface (47600)
Ticket 47653 - Need a way to allow users to create entries assigned to themselves.
Ticket 47676 : Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
Ticket 47676 : (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
Ticket 47573: schema push can be erronously prevented
Update test cases due to new modules: Schema, tasks, plugins and index
Ticket 47619: cannot reindex retrochangelog
Ticket 47699: Propagate plugin precedence to all registered function types
Ticket 47553: Enhance ACIs to have more control over MODRDN operations
Ticket 47721 - Schema Replication Issue
Ticket 47721 - Schema Replication Issue (follow up + cleanup)
Ticket 47721 - Schema Replication Issue (follow up)
Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed
Ticket 47815 - Add operations rejected by betxn plugins remain in cache
Ticket 47829: memberof scope: allow to exclude subtrees
Ticket 47823 - attribute uniqueness enforced on all subtrees
Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
Ticket 47797 - fix the indentation
Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend
Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter
Ticket 47787: Make the test case more robust
Ticket 47920: Encoding of SearchResultEntry is missing tag
Ticket 47553: Enhance ACIs to have more control over MODRDN operations
Ticket 47490 - test case failing if 47721 is also fixed
Ticket 47942: DS hangs during online total update
Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
Ticket 47988: Schema learning mechanism, in replication, unable to extend an existing definition
Ticket 47988: test case
Ticket 47828: DNA scope: allow to exlude some subtrees
Ticket 47936: Create a global lock to serialize write operations over several backends
Ticket 48127: Using RPM, allows non root user to create/remove DS instance
William B (1):
Ticket #48026 - Support for uniqueness plugin to enforce uniqueness on a set of attributes.
William Brown (1):
Ticket 48311 -nunc-stans: Attempt to release connection that is not acquired
William E Brown (1):
Tests to support ticket 48026
amsharma (1):
Author: amsharma <amsharma(a)redhat.com> Date: Thu Aug 6 14:47:01 2015 +0530
nturpin (1):
Ticket #3: acl cache overflown problem
root (4):
Bug 480787 - Autoconf parameter --with and --without
Ticket #326 - MemberOf plugin should work on all backends
Ticket #337 - RFE - Improve CLEANRUV functionality
Ticket #216 - RFE - Disable replication agreements
---
.gitignore | 5
389-doap.rdf | 47
EXCEPTION | 16
LICENSE | 52
LICENSE.GPLv2 | 340
LICENSE.GPLv3+ | 674
LICENSE.openssl | 11
Makefile.am | 436
Makefile.in | 8393 +-
README | 11
VERSION.sh | 18
aclocal.m4 | 7490 -
autogen.sh | 108
buildnum.pl | 35
compile | 245
config.guess | 763
config.h.in | 46
config.sub | 443
configure |40564 ++++------
configure.ac | 293
depcomp | 637
dirsrv.pc.in | 7
dirsrvtests/cmd/dsadm/dsadm.py | 543
dirsrvtests/create_test.py | 570
dirsrvtests/data/README | 11
dirsrvtests/data/basic/dse.ldif.broken | 95
dirsrvtests/data/ticket47953/ticket47953.ldif | 27
dirsrvtests/data/ticket47988/schema_ipa3.3.tar.gz |binary
dirsrvtests/data/ticket47988/schema_ipa4.1.tar.gz |binary
dirsrvtests/data/ticket48212/example1k_posix.ldif |17017 ++++
dirsrvtests/suites/acct_usability_plugin/acct_usability_test.py | 93
dirsrvtests/suites/acctpolicy_plugin/acctpolicy_test.py | 93
dirsrvtests/suites/acl/acl_test.py | 1059
dirsrvtests/suites/attr_encryption/attr_encrypt_test.py | 93
dirsrvtests/suites/attr_uniqueness_plugin/attr_uniqueness_test.py | 248
dirsrvtests/suites/automember_plugin/automember_test.py | 93
dirsrvtests/suites/basic/basic_test.py | 775
dirsrvtests/suites/betxns/betxn_test.py | 258
dirsrvtests/suites/chaining_plugin/chaining_test.py | 93
dirsrvtests/suites/clu/clu_test.py | 115
dirsrvtests/suites/clu/db2ldif_test.py | 92
dirsrvtests/suites/collation_plugin/collatation_test.py | 93
dirsrvtests/suites/config/config_test.py | 198
dirsrvtests/suites/cos_plugin/cos_test.py | 93
dirsrvtests/suites/deref_plugin/deref_test.py | 93
dirsrvtests/suites/disk_monitoring/disk_monitor_test.py | 93
dirsrvtests/suites/distrib_plugin/distrib_test.py | 93
dirsrvtests/suites/dna_plugin/dna_test.py | 93
dirsrvtests/suites/ds_logs/ds_logs_test.py | 93
dirsrvtests/suites/dynamic-plugins/plugin_tests.py | 2406
dirsrvtests/suites/dynamic-plugins/stress_tests.py | 146
dirsrvtests/suites/dynamic-plugins/test_dynamic_plugins.py | 493
dirsrvtests/suites/filter/filter_test.py | 152
dirsrvtests/suites/get_effective_rights/ger_test.py | 93
dirsrvtests/suites/ldapi/ldapi_test.py | 93
dirsrvtests/suites/linkedattrs_plugin/linked_attrs_test.py | 93
dirsrvtests/suites/mapping_tree/mapping_tree_test.py | 93
dirsrvtests/suites/memberof_plugin/memberof_test.py | 176
dirsrvtests/suites/memory_leaks/range_search_test.py | 138
dirsrvtests/suites/mep_plugin/mep_test.py | 93
dirsrvtests/suites/monitor/monitor_test.py | 93
dirsrvtests/suites/paged_results/paged_results_test.py | 93
dirsrvtests/suites/pam_passthru_plugin/pam_test.py | 93
dirsrvtests/suites/passthru_plugin/passthru_test.py | 93
dirsrvtests/suites/password/password_test.py | 143
dirsrvtests/suites/password/pwdAdmin_test.py | 447
dirsrvtests/suites/password/pwdPolicy_test.py | 82
dirsrvtests/suites/posix_winsync_plugin/posix_winsync_test.py | 93
dirsrvtests/suites/psearch/psearch_test.py | 93
dirsrvtests/suites/referint_plugin/referint_test.py | 93
dirsrvtests/suites/replication/cleanallruv_test.py | 1494
dirsrvtests/suites/replication/wait_for_async_feature_test.py | 280
dirsrvtests/suites/replsync_plugin/repl_sync_test.py | 93
dirsrvtests/suites/resource_limits/res_limits_test.py | 93
dirsrvtests/suites/retrocl_plugin/retrocl_test.py | 93
dirsrvtests/suites/reverpwd_plugin/reverpwd_test.py | 93
dirsrvtests/suites/roles_plugin/roles_test.py | 93
dirsrvtests/suites/rootdn_plugin/rootdn_plugin_test.py | 778
dirsrvtests/suites/sasl/sasl_test.py | 93
dirsrvtests/suites/schema/test_schema.py | 228
dirsrvtests/suites/schema_reload_plugin/schema_reload_test.py | 93
dirsrvtests/suites/snmp/snmp_test.py | 93
dirsrvtests/suites/ssl/ssl_test.py | 93
dirsrvtests/suites/syntax_plugin/syntax_test.py | 93
dirsrvtests/suites/usn_plugin/usn_test.py | 93
dirsrvtests/suites/views_plugin/views_test.py | 93
dirsrvtests/suites/vlv/vlv_test.py | 93
dirsrvtests/suites/whoami_plugin/whoami_test.py | 93
dirsrvtests/tickets/finalizer.py | 64
dirsrvtests/tickets/ticket365_test.py | 169
dirsrvtests/tickets/ticket47313_test.py | 174
dirsrvtests/tickets/ticket47384_test.py | 167
dirsrvtests/tickets/ticket47431_test.py | 259
dirsrvtests/tickets/ticket47462_test.py | 365
dirsrvtests/tickets/ticket47490_test.py | 691
dirsrvtests/tickets/ticket47553_test.py | 166
dirsrvtests/tickets/ticket47560_test.py | 253
dirsrvtests/tickets/ticket47573_test.py | 347
dirsrvtests/tickets/ticket47619_test.py | 220
dirsrvtests/tickets/ticket47640_test.py | 130
dirsrvtests/tickets/ticket47653MMR_test.py | 473
dirsrvtests/tickets/ticket47653_test.py | 381
dirsrvtests/tickets/ticket47664_test.py | 225
dirsrvtests/tickets/ticket47669_test.py | 265
dirsrvtests/tickets/ticket47676_test.py | 406
dirsrvtests/tickets/ticket47714_test.py | 263
dirsrvtests/tickets/ticket47721_test.py | 468
dirsrvtests/tickets/ticket47781_test.py | 188
dirsrvtests/tickets/ticket47787_test.py | 561
dirsrvtests/tickets/ticket47808_test.py | 166
dirsrvtests/tickets/ticket47815_test.py | 179
dirsrvtests/tickets/ticket47819_test.py | 296
dirsrvtests/tickets/ticket47823_test.py | 1021
dirsrvtests/tickets/ticket47824_test.py | 265
dirsrvtests/tickets/ticket47828_test.py | 728
dirsrvtests/tickets/ticket47829_test.py | 656
dirsrvtests/tickets/ticket47833_test.py | 274
dirsrvtests/tickets/ticket47838_test.py | 841
dirsrvtests/tickets/ticket47869MMR_test.py | 346
dirsrvtests/tickets/ticket47871_test.py | 226
dirsrvtests/tickets/ticket47900_test.py | 344
dirsrvtests/tickets/ticket47910_test.py | 205
dirsrvtests/tickets/ticket47920_test.py | 194
dirsrvtests/tickets/ticket47921_test.py | 163
dirsrvtests/tickets/ticket47927_test.py | 313
dirsrvtests/tickets/ticket47931_test.py | 207
dirsrvtests/tickets/ticket47937_test.py | 188
dirsrvtests/tickets/ticket47950_test.py | 223
dirsrvtests/tickets/ticket47953_test.py | 128
dirsrvtests/tickets/ticket47963_test.py | 199
dirsrvtests/tickets/ticket47966_test.py | 227
dirsrvtests/tickets/ticket47970_test.py | 158
dirsrvtests/tickets/ticket47973_test.py | 185
dirsrvtests/tickets/ticket47980_test.py | 662
dirsrvtests/tickets/ticket47981_test.py | 295
dirsrvtests/tickets/ticket47988_test.py | 503
dirsrvtests/tickets/ticket48005_test.py | 415
dirsrvtests/tickets/ticket48013_test.py | 134
dirsrvtests/tickets/ticket48026_test.py | 168
dirsrvtests/tickets/ticket48109_test.py | 394
dirsrvtests/tickets/ticket48170_test.py | 96
dirsrvtests/tickets/ticket48191_test.py | 323
dirsrvtests/tickets/ticket48194_test.py | 499
dirsrvtests/tickets/ticket48212_test.py | 210
dirsrvtests/tickets/ticket48214_test.py | 171
dirsrvtests/tickets/ticket48226_test.py | 249
dirsrvtests/tickets/ticket48228_test.py | 336
dirsrvtests/tickets/ticket48233_test.py | 105
dirsrvtests/tickets/ticket48252_test.py | 178
dirsrvtests/tickets/ticket48265_test.py | 130
dirsrvtests/tickets/ticket48325_test.py | 270
dirsrvtests/tmp/README | 10
include/base/crit.h | 35
include/base/dbtbase.h | 37
include/base/ereport.h | 35
include/base/eventhandler.h | 110
include/base/eventlog.h | 71
include/base/file.h | 67
include/base/fsmutex.h | 39
include/base/lexer.h | 126
include/base/nterr.h | 58
include/base/nterrors.h | 104
include/base/plist.h | 35
include/base/pool.h | 40
include/base/rwlock.h | 91
include/base/shexp.h | 35
include/base/systems.h | 388
include/base/systhr.h | 42
include/base/util.h | 35
include/i18n.h | 156
include/ldaputil/cert.h | 39
include/ldaputil/certmap.h | 35
include/ldaputil/dbconf.h | 39
include/ldaputil/encode.h | 39
include/ldaputil/errors.h | 39
include/ldaputil/extcmap.h | 52
include/ldaputil/init.h | 35
include/ldaputil/ldapauth.h | 39
include/ldaputil/ldaputil.h | 45
include/libaccess/acl.h | 39
include/libaccess/aclerror.h | 48
include/libaccess/acleval.h | 38
include/libaccess/aclglobal.h | 35
include/libaccess/aclproto.h | 60
include/libaccess/aclstruct.h | 37
include/libaccess/attrec.h | 35
include/libaccess/authdb.h | 35
include/libaccess/dbtlibaccess.h | 38
include/libaccess/dnfstruct.h | 35
include/libaccess/ipfstruct.h | 35
include/libaccess/las.h | 41
include/libaccess/nsauth.h | 35
include/libaccess/nsautherr.h | 37
include/libaccess/nserror.h | 37
include/libaccess/symbols.h | 47
include/libaccess/userauth.h | 35
include/libaccess/usi.h | 35
include/libaccess/usrcache.h | 35
include/libadmin/dbtlibadmin.h | 35
include/libadmin/libadmin.h | 42
include/netsite.h | 65
include/public/base/systems.h | 189
include/public/netsite.h | 35
include/public/nsacl/aclapi.h | 64
include/public/nsacl/acldef.h | 37
include/public/nsacl/nserrdef.h | 37
include/public/nsacl/plistdef.h | 35
include/public/nsapi.h | 94
install-sh | 538
ldap/admin/src/base-initconfig.in | 44
ldap/admin/src/initconfig.in | 41
ldap/admin/src/logconv.pl | 3661
ldap/admin/src/makemccvlvindexes | 35
ldap/admin/src/makevlvindex | 35
ldap/admin/src/makevlvsearch | 35
ldap/admin/src/scripts/10cleanupldapi.pl | 23
ldap/admin/src/scripts/10fixrundir.pl | 11
ldap/admin/src/scripts/20betxn.pl | 74
ldap/admin/src/scripts/50AES-pbe-plugin.ldif | 16
ldap/admin/src/scripts/50acctusabilityplugin.ldif | 21
ldap/admin/src/scripts/50automemberplugin.ldif | 15
ldap/admin/src/scripts/50contentsync.ldif | 23
ldap/admin/src/scripts/50fixNsState.pl | 240
ldap/admin/src/scripts/50managedentriesplugin.ldif | 16
ldap/admin/src/scripts/50nstombstonecsn.ldif | 7
ldap/admin/src/scripts/50refintprecedence.ldif | 4
ldap/admin/src/scripts/50rootdnaccesscontrolplugin.ldif | 15
ldap/admin/src/scripts/50smd5pwdstorageplugin.ldif | 5
ldap/admin/src/scripts/50targetuniqueid.ldif | 7
ldap/admin/src/scripts/50updateconfig.ldif | 10
ldap/admin/src/scripts/52updateAESplugin.pl | 86
ldap/admin/src/scripts/60upgradeconfigfiles.pl | 69
ldap/admin/src/scripts/60upgradeschemafiles.pl | 2
ldap/admin/src/scripts/70upgradefromldif.pl | 108
ldap/admin/src/scripts/80upgradednformat.pl.in | 307
ldap/admin/src/scripts/81changelog.pl | 34
ldap/admin/src/scripts/82targetuniqueidindex.pl | 52
ldap/admin/src/scripts/90subtreerename.pl | 21
ldap/admin/src/scripts/91subtreereindex.pl | 148
ldap/admin/src/scripts/DSCreate.pm.in | 522
ldap/admin/src/scripts/DSDialogs.pm | 53
ldap/admin/src/scripts/DSMigration.pm.in | 84
ldap/admin/src/scripts/DSSharedLib.in | 223
ldap/admin/src/scripts/DSUpdate.pm.in | 114
ldap/admin/src/scripts/DSUpdateDialogs.pm | 35
ldap/admin/src/scripts/DSUtil.pm.in | 922
ldap/admin/src/scripts/Dialog.pm | 35
ldap/admin/src/scripts/DialogManager.pm | 241
ldap/admin/src/scripts/DialogManager.pm.in | 212
ldap/admin/src/scripts/FileConn.pm | 35
ldap/admin/src/scripts/Inf.pm | 117
ldap/admin/src/scripts/Migration.pm.in | 57
ldap/admin/src/scripts/Resource.pm | 35
ldap/admin/src/scripts/Setup.pm.in | 60
ldap/admin/src/scripts/SetupDialogs.pm.in | 70
ldap/admin/src/scripts/SetupLog.pm | 43
ldap/admin/src/scripts/bak2db.in | 79
ldap/admin/src/scripts/bak2db.pl.in | 120
ldap/admin/src/scripts/cl-dump.pl | 35
ldap/admin/src/scripts/cleanallruv.pl.in | 125
ldap/admin/src/scripts/db2bak.in | 75
ldap/admin/src/scripts/db2bak.pl.in | 149
ldap/admin/src/scripts/db2index.in | 83
ldap/admin/src/scripts/db2index.pl.in | 184
ldap/admin/src/scripts/db2ldif.in | 160
ldap/admin/src/scripts/db2ldif.pl.in | 264
ldap/admin/src/scripts/dbmon.sh | 192
ldap/admin/src/scripts/dbverify.in | 70
ldap/admin/src/scripts/dn2rdn.in | 58
ldap/admin/src/scripts/dnaplugindepends.ldif | 3
ldap/admin/src/scripts/ds-logpipe.py | 253
ldap/admin/src/scripts/dscreate.map.in | 35
ldap/admin/src/scripts/dsorgentries.map.in | 35
ldap/admin/src/scripts/dsupdate.map.in | 35
ldap/admin/src/scripts/exampleupdate.ldif | 37
ldap/admin/src/scripts/exampleupdate.pl | 35
ldap/admin/src/scripts/exampleupdate.sh | 45
ldap/admin/src/scripts/failedbinds.py | 12
ldap/admin/src/scripts/fixup-linkedattrs.pl.in | 111
ldap/admin/src/scripts/fixup-memberof.pl.in | 120
ldap/admin/src/scripts/ldif2db.in | 109
ldap/admin/src/scripts/ldif2db.pl.in | 214
ldap/admin/src/scripts/ldif2ldap.in | 173
ldap/admin/src/scripts/logregex.py | 18
ldap/admin/src/scripts/migrate-ds.pl.in | 48
ldap/admin/src/scripts/monitor.in | 170
ldap/admin/src/scripts/ns-accountstatus.pl.in | 679
ldap/admin/src/scripts/ns-activate.pl.in | 681
ldap/admin/src/scripts/ns-inactivate.pl.in | 683
ldap/admin/src/scripts/ns-newpwpolicy.pl.in | 188
ldap/admin/src/scripts/remove-ds.pl.in | 58
ldap/admin/src/scripts/repl-monitor.pl.in | 817
ldap/admin/src/scripts/restart-dirsrv.in | 28
ldap/admin/src/scripts/restoreconfig.in | 52
ldap/admin/src/scripts/saveconfig.in | 53
ldap/admin/src/scripts/schema-reload.pl.in | 110
ldap/admin/src/scripts/setup-ds.pl.in | 52
ldap/admin/src/scripts/setup-ds.res.in | 43
ldap/admin/src/scripts/start-dirsrv.in | 71
ldap/admin/src/scripts/stop-dirsrv.in | 71
ldap/admin/src/scripts/suffix2instance.in | 58
ldap/admin/src/scripts/syntax-validate.pl.in | 122
ldap/admin/src/scripts/template-bak2db.in | 44
ldap/admin/src/scripts/template-bak2db.pl.in | 140
ldap/admin/src/scripts/template-cleanallruv.pl.in | 28
ldap/admin/src/scripts/template-db2bak.in | 23
ldap/admin/src/scripts/template-db2bak.pl.in | 131
ldap/admin/src/scripts/template-db2index.in | 26
ldap/admin/src/scripts/template-db2index.pl.in | 228
ldap/admin/src/scripts/template-db2ldif.in | 79
ldap/admin/src/scripts/template-db2ldif.pl.in | 275
ldap/admin/src/scripts/template-dbverify.in | 41
ldap/admin/src/scripts/template-dn2rdn.in | 23
ldap/admin/src/scripts/template-fixup-linkedattrs.pl.in | 158
ldap/admin/src/scripts/template-fixup-memberof.pl.in | 169
ldap/admin/src/scripts/template-fixup-memberuid.pl.in | 154
ldap/admin/src/scripts/template-ldif2db.in | 23
ldap/admin/src/scripts/template-ldif2db.pl.in | 230
ldap/admin/src/scripts/template-ldif2ldap.in | 15
ldap/admin/src/scripts/template-monitor.in | 14
ldap/admin/src/scripts/template-ns-accountstatus.pl.in | 846
ldap/admin/src/scripts/template-ns-activate.pl.in | 846
ldap/admin/src/scripts/template-ns-inactivate.pl.in | 846
ldap/admin/src/scripts/template-ns-newpwpolicy.pl.in | 291
ldap/admin/src/scripts/template-restart-slapd.in | 12
ldap/admin/src/scripts/template-restoreconfig.in | 16
ldap/admin/src/scripts/template-saveconfig.in | 17
ldap/admin/src/scripts/template-schema-reload.pl.in | 158
ldap/admin/src/scripts/template-start-slapd.in | 12
ldap/admin/src/scripts/template-stop-slapd.in | 11
ldap/admin/src/scripts/template-suffix2instance.in | 15
ldap/admin/src/scripts/template-syntax-validate.pl.in | 169
ldap/admin/src/scripts/template-upgradedb.in | 17
ldap/admin/src/scripts/template-upgradednformat.in | 5
ldap/admin/src/scripts/template-usn-tombstone-cleanup.pl.in | 185
ldap/admin/src/scripts/template-verify-db.pl.in | 259
ldap/admin/src/scripts/template-vlvindex.in | 16
ldap/admin/src/scripts/upgradedb.in | 59
ldap/admin/src/scripts/upgradednformat.in | 71
ldap/admin/src/scripts/usn-tombstone-cleanup.pl.in | 126
ldap/admin/src/scripts/verify-db.pl.in | 239
ldap/admin/src/scripts/vlvindex.in | 64
ldap/admin/src/slapd.inf.in | 37
ldap/admin/src/template-initconfig.in | 18
ldap/admin/src/upgradeServer | 35
ldap/docs/LICENSE.txt | 132
ldap/docs/README.txt | 11
ldap/include/avl.h | 35
ldap/include/dblayer.h | 35
ldap/include/disptmpl.h | 47
ldap/include/ldaplog.h | 139
ldap/include/ldaprot.h | 35
ldap/include/ldbm.h | 35
ldap/include/lthread.h | 460
ldap/include/ntslapdregparms.h | 78
ldap/include/ntwatchdog.h | 105
ldap/include/portable.h | 35
ldap/include/proto-ntutil.h | 111
ldap/include/regex.h | 39
ldap/include/srchpref.h | 47
ldap/include/sysexits-compat.h | 35
ldap/ldif/50posix-winsync-plugin.ldif | 21
ldap/ldif/50replication-plugins.ldif | 27
ldap/ldif/Ace.ldif | 35
ldap/ldif/European.ldif | 35
ldap/ldif/Eurosuffix.ldif | 35
ldap/ldif/Example-roles.ldif | 35
ldap/ldif/Example-views.ldif | 35
ldap/ldif/Example.ldif | 35
ldap/ldif/template-baseacis.ldif.in | 2
ldap/ldif/template-bitwise.ldif.in | 6
ldap/ldif/template-dnaplugin.ldif.in | 2
ldap/ldif/template-dse.ldif.in | 214
ldap/ldif/template-pampta.ldif.in | 2
ldap/ldif/template-suffix-db.ldif.in | 1
ldap/ldif/template.ldif | 35
ldap/libraries/libavl/avl.c | 48
ldap/libraries/libavl/testavl.c | 38
ldap/schema/00core.ldif | 72
ldap/schema/01core389.ldif | 269
ldap/schema/02common.ldif | 60
ldap/schema/05rfc2927.ldif | 35
ldap/schema/05rfc4523.ldif | 14
ldap/schema/05rfc4524.ldif | 30
ldap/schema/06inetorgperson.ldif | 5
ldap/schema/10automember-plugin.ldif | 94
ldap/schema/10dna-plugin.ldif | 219
ldap/schema/10mep-plugin.ldif | 75
ldap/schema/10presence.ldif | 35
ldap/schema/10rfc2307.ldif | 35
ldap/schema/20subscriber.ldif | 35
ldap/schema/25java-object.ldif | 35
ldap/schema/28pilot.ldif | 35
ldap/schema/30ns-common.ldif | 39
ldap/schema/50ns-admin.ldif | 35
ldap/schema/50ns-certificate.ldif | 35
ldap/schema/50ns-directory.ldif | 39
ldap/schema/50ns-mail.ldif | 45
ldap/schema/50ns-value.ldif | 35
ldap/schema/50ns-web.ldif | 35
ldap/schema/60acctpolicy.ldif | 47
ldap/schema/60nis.ldif | 2
ldap/schema/60pam-plugin.ldif | 38
ldap/schema/60posix-winsync-plugin.ldif | 15
ldap/schema/60qmail.ldif | 24
ldap/schema/60radius.ldif | 132
ldap/schema/60rfc3712.ldif | 9
ldap/schema/60sabayon.ldif | 10
ldap/schema/60samba3.ldif | 36
ldap/schema/60sendmail.ldif | 54
ldap/schema/60sudo.ldif | 58
ldap/schema/99user.ldif | 35
ldap/schema/slapd-collations.conf | 269
ldap/servers/plugins/acct_usability/acct_usability.c | 428
ldap/servers/plugins/acct_usability/acct_usability.h | 34
ldap/servers/plugins/acctpolicy/acct_config.c | 175
ldap/servers/plugins/acctpolicy/acct_init.c | 299
ldap/servers/plugins/acctpolicy/acct_plugin.c | 497
ldap/servers/plugins/acctpolicy/acct_util.c | 277
ldap/servers/plugins/acctpolicy/acctpolicy.h | 98
ldap/servers/plugins/acctpolicy/sampleconfig.ldif | 40
ldap/servers/plugins/acctpolicy/samplepolicy.ldif | 27
ldap/servers/plugins/acl/ACL-Notes | 35
ldap/servers/plugins/acl/acl.c | 1091
ldap/servers/plugins/acl/acl.h | 161
ldap/servers/plugins/acl/acl_ext.c | 325
ldap/servers/plugins/acl/aclanom.c | 120
ldap/servers/plugins/acl/acldllmain.c | 166
ldap/servers/plugins/acl/acleffectiverights.c | 253
ldap/servers/plugins/acl/aclgroup.c | 67
ldap/servers/plugins/acl/aclinit.c | 41
ldap/servers/plugins/acl/acllas.c | 654
ldap/servers/plugins/acl/acllist.c | 239
ldap/servers/plugins/acl/aclparse.c | 993
ldap/servers/plugins/acl/aclplugin.c | 102
ldap/servers/plugins/acl/aclproxy.c | 232
ldap/servers/plugins/acl/aclutil.c | 209
ldap/servers/plugins/acl/libacl.def | 48
ldap/servers/plugins/automember/automember.c | 2738
ldap/servers/plugins/automember/automember.h | 105
ldap/servers/plugins/bitwise/bitwise.c | 58
ldap/servers/plugins/chainingdb/cb.h | 50
ldap/servers/plugins/chainingdb/cb_abandon.c | 35
ldap/servers/plugins/chainingdb/cb_acl.c | 35
ldap/servers/plugins/chainingdb/cb_add.c | 280
ldap/servers/plugins/chainingdb/cb_bind.c | 265
ldap/servers/plugins/chainingdb/cb_cleanup.c | 35
ldap/servers/plugins/chainingdb/cb_close.c | 113
ldap/servers/plugins/chainingdb/cb_compare.c | 139
ldap/servers/plugins/chainingdb/cb_config.c | 256
ldap/servers/plugins/chainingdb/cb_conn_stateless.c | 138
ldap/servers/plugins/chainingdb/cb_controls.c | 87
ldap/servers/plugins/chainingdb/cb_debug.c | 44
ldap/servers/plugins/chainingdb/cb_delete.c | 298
ldap/servers/plugins/chainingdb/cb_init.c | 45
ldap/servers/plugins/chainingdb/cb_instance.c | 681
ldap/servers/plugins/chainingdb/cb_modify.c | 340
ldap/servers/plugins/chainingdb/cb_modrdn.c | 343
ldap/servers/plugins/chainingdb/cb_monitor.c | 41
ldap/servers/plugins/chainingdb/cb_schema.c | 39
ldap/servers/plugins/chainingdb/cb_search.c | 587
ldap/servers/plugins/chainingdb/cb_size.c | 35
ldap/servers/plugins/chainingdb/cb_start.c | 35
ldap/servers/plugins/chainingdb/cb_temp.c | 35
ldap/servers/plugins/chainingdb/cb_test.c | 35
ldap/servers/plugins/chainingdb/cb_unbind.c | 35
ldap/servers/plugins/chainingdb/cb_utils.c | 95
ldap/servers/plugins/chainingdb/cbdllmain.c | 165
ldap/servers/plugins/chainingdb/libcb.def | 47
ldap/servers/plugins/collation/collate.c | 84
ldap/servers/plugins/collation/collate.h | 35
ldap/servers/plugins/collation/collation.def | 42
ldap/servers/plugins/collation/config.c | 37
ldap/servers/plugins/collation/config.h | 35
ldap/servers/plugins/collation/debug.c | 44
ldap/servers/plugins/collation/dllmain.c | 167
ldap/servers/plugins/collation/orfilter.c | 54
ldap/servers/plugins/collation/orfilter.h | 35
ldap/servers/plugins/cos/cos.c | 134
ldap/servers/plugins/cos/cos.def | 43
ldap/servers/plugins/cos/cos_cache.c | 1001
ldap/servers/plugins/cos/cos_cache.h | 36
ldap/servers/plugins/cos/dllmain.c | 133
ldap/servers/plugins/deref/deref.c | 206
ldap/servers/plugins/deref/deref.h | 35
ldap/servers/plugins/distrib/Makefile | 92
ldap/servers/plugins/distrib/Makefile.AIX | 76
ldap/servers/plugins/distrib/Makefile.BSDI | 62
ldap/servers/plugins/distrib/Makefile.HPUX | 35
ldap/servers/plugins/distrib/Makefile.HPUX64 | 35
ldap/servers/plugins/distrib/Makefile.IRIX | 62
ldap/servers/plugins/distrib/Makefile.Linux | 35
ldap/servers/plugins/distrib/Makefile.OSF1 | 61
ldap/servers/plugins/distrib/Makefile.ReliantUNIX | 62
ldap/servers/plugins/distrib/Makefile.SOLARIS | 35
ldap/servers/plugins/distrib/Makefile.SOLARIS64 | 35
ldap/servers/plugins/distrib/Makefile.SOLARISx86 | 35
ldap/servers/plugins/distrib/Makefile.UnixWare | 62
ldap/servers/plugins/distrib/Makefile.UnixWareUDK | 62
ldap/servers/plugins/distrib/Makefile.WINNT | 76
ldap/servers/plugins/distrib/README | 35
ldap/servers/plugins/distrib/distrib.c | 35
ldap/servers/plugins/distrib/distrib.dsp | 153
ldap/servers/plugins/distrib/dllmain.c | 127
ldap/servers/plugins/distrib/libdistrib.def | 41
ldap/servers/plugins/dna/dna.c | 2590
ldap/servers/plugins/dna/posix.ldif | 35
ldap/servers/plugins/dna/subtest.ldif | 35
ldap/servers/plugins/http/dllmain.c | 135
ldap/servers/plugins/http/http.def | 45
ldap/servers/plugins/http/http_client.c | 66
ldap/servers/plugins/http/http_client.h | 35
ldap/servers/plugins/http/http_impl.c | 148
ldap/servers/plugins/http/http_impl.h | 35
ldap/servers/plugins/linkedattrs/fixup_task.c | 273
ldap/servers/plugins/linkedattrs/linked_attrs.c | 487
ldap/servers/plugins/linkedattrs/linked_attrs.h | 40
ldap/servers/plugins/memberof/memberof.c | 1884
ldap/servers/plugins/memberof/memberof.h | 70
ldap/servers/plugins/memberof/memberof_config.c | 835
ldap/servers/plugins/mep/mep.c | 2854
ldap/servers/plugins/mep/mep.h | 101
ldap/servers/plugins/pam_passthru/README | 35
ldap/servers/plugins/pam_passthru/libpam_passthru.def | 45
ldap/servers/plugins/pam_passthru/pam_passthru.h | 85
ldap/servers/plugins/pam_passthru/pam_ptconfig.c | 770
ldap/servers/plugins/pam_passthru/pam_ptdebug.c | 43
ldap/servers/plugins/pam_passthru/pam_ptdllmain.c | 168
ldap/servers/plugins/pam_passthru/pam_ptimpl.c | 125
ldap/servers/plugins/pam_passthru/pam_ptpreop.c | 696
ldap/servers/plugins/passthru/PT-Notes | 35
ldap/servers/plugins/passthru/libpassthru.def | 46
ldap/servers/plugins/passthru/passthru.h | 44
ldap/servers/plugins/passthru/ptbind.c | 41
ldap/servers/plugins/passthru/ptconfig.c | 519
ldap/servers/plugins/passthru/ptconn.c | 43
ldap/servers/plugins/passthru/ptdebug.c | 43
ldap/servers/plugins/passthru/ptdllmain.c | 169
ldap/servers/plugins/passthru/ptpreop.c | 67
ldap/servers/plugins/passthru/ptutil.c | 35
ldap/servers/plugins/posix-winsync/README | 50
ldap/servers/plugins/posix-winsync/posix-group-func.c | 1027
ldap/servers/plugins/posix-winsync/posix-group-func.h | 25
ldap/servers/plugins/posix-winsync/posix-group-task.c | 520
ldap/servers/plugins/posix-winsync/posix-winsync-config.c | 301
ldap/servers/plugins/posix-winsync/posix-winsync.c | 2119
ldap/servers/plugins/posix-winsync/posix-wsp-ident.h | 58
ldap/servers/plugins/presence/dllmain.c | 133
ldap/servers/plugins/presence/presence.c | 62
ldap/servers/plugins/presence/presence.def | 43
ldap/servers/plugins/presence/presence.ldif | 35
ldap/servers/plugins/pwdstorage/clear_pwd.c | 35
ldap/servers/plugins/pwdstorage/crypt_pwd.c | 41
ldap/servers/plugins/pwdstorage/dllmain.c | 128
ldap/servers/plugins/pwdstorage/libpwdstorage.def | 56
ldap/servers/plugins/pwdstorage/md5.h | 35
ldap/servers/plugins/pwdstorage/md5_pwd.c | 35
ldap/servers/plugins/pwdstorage/md5c.c | 35
ldap/servers/plugins/pwdstorage/ns-mta-md5_pwd.bu | 35
ldap/servers/plugins/pwdstorage/ns-mta-md5_pwd.c | 35
ldap/servers/plugins/pwdstorage/pwd_init.c | 39
ldap/servers/plugins/pwdstorage/pwd_util.c | 35
ldap/servers/plugins/pwdstorage/pwdstorage.h | 37
ldap/servers/plugins/pwdstorage/sha_pwd.c | 35
ldap/servers/plugins/pwdstorage/smd5_pwd.c | 44
ldap/servers/plugins/pwdstorage/ssha_pwd.c | 35
ldap/servers/plugins/referint/dllmain.c | 132
ldap/servers/plugins/referint/referint.c | 2209
ldap/servers/plugins/referint/referint.def | 44
ldap/servers/plugins/replication/cl4.h | 35
ldap/servers/plugins/replication/cl4_api.c | 37
ldap/servers/plugins/replication/cl4_api.h | 35
ldap/servers/plugins/replication/cl4_init.c | 37
ldap/servers/plugins/replication/cl5.h | 40
ldap/servers/plugins/replication/cl5_api.c | 3639
ldap/servers/plugins/replication/cl5_api.h | 219
ldap/servers/plugins/replication/cl5_clcache.c | 215
ldap/servers/plugins/replication/cl5_clcache.h | 37
ldap/servers/plugins/replication/cl5_config.c | 403
ldap/servers/plugins/replication/cl5_init.c | 39
ldap/servers/plugins/replication/cl5_test.c | 39
ldap/servers/plugins/replication/cl5_test.h | 35
ldap/servers/plugins/replication/cl_crypt.c | 174
ldap/servers/plugins/replication/cl_crypt.h | 24
ldap/servers/plugins/replication/csnpl.c | 109
ldap/servers/plugins/replication/csnpl.h | 35
ldap/servers/plugins/replication/dllmain.c | 128
ldap/servers/plugins/replication/legacy_consumer.c | 78
ldap/servers/plugins/replication/llist.c | 43
ldap/servers/plugins/replication/llist.h | 35
ldap/servers/plugins/replication/profile.c | 35
ldap/servers/plugins/replication/repl-session-plugin.h | 86
ldap/servers/plugins/replication/repl.h | 53
ldap/servers/plugins/replication/repl5.h | 280
ldap/servers/plugins/replication/repl5_agmt.c | 1482
ldap/servers/plugins/replication/repl5_agmtlist.c | 399
ldap/servers/plugins/replication/repl5_backoff.c | 35
ldap/servers/plugins/replication/repl5_connection.c | 667
ldap/servers/plugins/replication/repl5_inc_protocol.c | 1637
ldap/servers/plugins/replication/repl5_init.c | 507
ldap/servers/plugins/replication/repl5_mtnode_ext.c | 54
ldap/servers/plugins/replication/repl5_plugins.c | 497
ldap/servers/plugins/replication/repl5_prot_private.h | 45
ldap/servers/plugins/replication/repl5_protocol.c | 226
ldap/servers/plugins/replication/repl5_protocol_util.c | 609
ldap/servers/plugins/replication/repl5_replica.c | 2046
ldap/servers/plugins/replication/repl5_replica_config.c | 3146
ldap/servers/plugins/replication/repl5_replica_dnhash.c | 61
ldap/servers/plugins/replication/repl5_replica_hash.c | 65
ldap/servers/plugins/replication/repl5_replsupplier.c | 35
ldap/servers/plugins/replication/repl5_ruv.c | 811
ldap/servers/plugins/replication/repl5_ruv.h | 67
ldap/servers/plugins/replication/repl5_schedule.c | 35
ldap/servers/plugins/replication/repl5_tot_protocol.c | 262
ldap/servers/plugins/replication/repl5_total.c | 61
ldap/servers/plugins/replication/repl5_updatedn_list.c | 161
ldap/servers/plugins/replication/repl_add.c | 35
ldap/servers/plugins/replication/repl_bind.c | 44
ldap/servers/plugins/replication/repl_compare.c | 53
ldap/servers/plugins/replication/repl_connext.c | 193
ldap/servers/plugins/replication/repl_controls.c | 37
ldap/servers/plugins/replication/repl_delete.c | 35
ldap/servers/plugins/replication/repl_entry.c | 35
ldap/servers/plugins/replication/repl_ext.c | 35
ldap/servers/plugins/replication/repl_extop.c | 965
ldap/servers/plugins/replication/repl_globals.c | 61
ldap/servers/plugins/replication/repl_helper.c | 35
ldap/servers/plugins/replication/repl_helper.h | 35
ldap/servers/plugins/replication/repl_init.c | 44
ldap/servers/plugins/replication/repl_modify.c | 35
ldap/servers/plugins/replication/repl_modrdn.c | 35
ldap/servers/plugins/replication/repl_monitor.c | 35
ldap/servers/plugins/replication/repl_objset.c | 44
ldap/servers/plugins/replication/repl_objset.h | 35
ldap/servers/plugins/replication/repl_opext.c | 35
ldap/servers/plugins/replication/repl_ops.c | 50
ldap/servers/plugins/replication/repl_rootdse.c | 35
ldap/servers/plugins/replication/repl_search.c | 35
ldap/servers/plugins/replication/repl_session_plugin.c | 173
ldap/servers/plugins/replication/repl_shared.h | 59
ldap/servers/plugins/replication/replication.def | 48
ldap/servers/plugins/replication/replutil.c | 252
ldap/servers/plugins/replication/test_repl_session_plugin.c | 306
ldap/servers/plugins/replication/tests/dnp_sim.c | 35
ldap/servers/plugins/replication/tests/dnp_sim2.c | 35
ldap/servers/plugins/replication/tests/dnp_sim3.c | 35
ldap/servers/plugins/replication/tests/makesim | 43
ldap/servers/plugins/replication/urp.c | 455
ldap/servers/plugins/replication/urp.h | 43
ldap/servers/plugins/replication/urp_glue.c | 86
ldap/servers/plugins/replication/urp_tombstone.c | 151
ldap/servers/plugins/replication/windows_connection.c | 420
ldap/servers/plugins/replication/windows_inc_protocol.c | 274
ldap/servers/plugins/replication/windows_private.c | 2865
ldap/servers/plugins/replication/windows_prot_private.h | 35
ldap/servers/plugins/replication/windows_protocol_util.c | 2681
ldap/servers/plugins/replication/windows_tot_protocol.c | 264
ldap/servers/plugins/replication/windowsrepl.h | 113
ldap/servers/plugins/replication/winsync-plugin.h | 534
ldap/servers/plugins/retrocl/dllmain.c | 127
ldap/servers/plugins/retrocl/linktest.c | 35
ldap/servers/plugins/retrocl/retrocl.c | 376
ldap/servers/plugins/retrocl/retrocl.def | 47
ldap/servers/plugins/retrocl/retrocl.h | 48
ldap/servers/plugins/retrocl/retrocl.txt | 35
ldap/servers/plugins/retrocl/retrocl_cn.c | 94
ldap/servers/plugins/retrocl/retrocl_create.c | 52
ldap/servers/plugins/retrocl/retrocl_po.c | 308
ldap/servers/plugins/retrocl/retrocl_rootdse.c | 35
ldap/servers/plugins/retrocl/retrocl_trim.c | 329
ldap/servers/plugins/rever/des.c | 521
ldap/servers/plugins/rever/dllmain.c | 128
ldap/servers/plugins/rever/libdes.def | 45
ldap/servers/plugins/rever/pbe.c | 592
ldap/servers/plugins/rever/rever.c | 157
ldap/servers/plugins/rever/rever.h | 46
ldap/servers/plugins/roles/dllmain.c | 133
ldap/servers/plugins/roles/roles.def | 42
ldap/servers/plugins/roles/roles_cache.c | 252
ldap/servers/plugins/roles/roles_cache.h | 37
ldap/servers/plugins/roles/roles_plugin.c | 117
ldap/servers/plugins/rootdn_access/rootdn_access.c | 722
ldap/servers/plugins/rootdn_access/rootdn_access.h | 26
ldap/servers/plugins/schema_reload/schema_reload.c | 148
ldap/servers/plugins/shared/plugin-utils.h | 112
ldap/servers/plugins/shared/utils.c | 508
ldap/servers/plugins/statechange/dllmain.c | 133
ldap/servers/plugins/statechange/statechange.c | 175
ldap/servers/plugins/statechange/statechange.def | 42
ldap/servers/plugins/sync/sync.h | 175
ldap/servers/plugins/sync/sync_init.c | 148
ldap/servers/plugins/sync/sync_persist.c | 695
ldap/servers/plugins/sync/sync_refresh.c | 743
ldap/servers/plugins/sync/sync_util.c | 715
ldap/servers/plugins/syntaxes/bin.c | 177
ldap/servers/plugins/syntaxes/bitstring.c | 103
ldap/servers/plugins/syntaxes/ces.c | 207
ldap/servers/plugins/syntaxes/cis.c | 356
ldap/servers/plugins/syntaxes/debug.c | 43
ldap/servers/plugins/syntaxes/deliverymethod.c | 67
ldap/servers/plugins/syntaxes/dllmain.c | 171
ldap/servers/plugins/syntaxes/dn.c | 107
ldap/servers/plugins/syntaxes/facsimile.c | 73
ldap/servers/plugins/syntaxes/guide.c | 67
ldap/servers/plugins/syntaxes/int.c | 131
ldap/servers/plugins/syntaxes/libsyntax.def | 56
ldap/servers/plugins/syntaxes/nameoptuid.c | 108
ldap/servers/plugins/syntaxes/numericstring.c | 183
ldap/servers/plugins/syntaxes/phonetic.c | 35
ldap/servers/plugins/syntaxes/sicis.c | 67
ldap/servers/plugins/syntaxes/string.c | 490
ldap/servers/plugins/syntaxes/syntax.h | 96
ldap/servers/plugins/syntaxes/syntax_common.c | 89
ldap/servers/plugins/syntaxes/tel.c | 129
ldap/servers/plugins/syntaxes/teletex.c | 67
ldap/servers/plugins/syntaxes/telex.c | 66
ldap/servers/plugins/syntaxes/validate.c | 52
ldap/servers/plugins/syntaxes/validate_task.c | 79
ldap/servers/plugins/syntaxes/value.c | 169
ldap/servers/plugins/uiduniq/7bit.c | 209
ldap/servers/plugins/uiduniq/UID-Notes | 35
ldap/servers/plugins/uiduniq/libuiduniq.def | 47
ldap/servers/plugins/uiduniq/plugin-utils.h | 63
ldap/servers/plugins/uiduniq/uid.c | 1100
ldap/servers/plugins/uiduniq/utils.c | 220
ldap/servers/plugins/usn/usn.c | 463
ldap/servers/plugins/usn/usn.h | 38
ldap/servers/plugins/usn/usn_cleanup.c | 136
ldap/servers/plugins/vattrsp_template/dllmain.c | 133
ldap/servers/plugins/vattrsp_template/vattrsp.c | 52
ldap/servers/plugins/vattrsp_template/vattrsp.def | 42
ldap/servers/plugins/views/dllmain.c | 133
ldap/servers/plugins/views/views.c | 232
ldap/servers/plugins/views/views.def | 42
ldap/servers/plugins/whoami/whoami.c | 119
ldap/servers/slapd/abandon.c | 50
ldap/servers/slapd/add.c | 483
ldap/servers/slapd/agtmmap.c | 265
ldap/servers/slapd/agtmmap.h | 53
ldap/servers/slapd/apibroker.c | 95
ldap/servers/slapd/attr.c | 449
ldap/servers/slapd/attrlist.c | 85
ldap/servers/slapd/attrsyntax.c | 1065
ldap/servers/slapd/auditlog.c | 122
ldap/servers/slapd/auth.c | 191
ldap/servers/slapd/auth.h | 35
ldap/servers/slapd/ava.c | 39
ldap/servers/slapd/back-ldbm/ancestorid.c | 263
ldap/servers/slapd/back-ldbm/archive.c | 176
ldap/servers/slapd/back-ldbm/attrcrypt.h | 35
ldap/servers/slapd/back-ldbm/back-ldbm.h | 218
ldap/servers/slapd/back-ldbm/backentry.c | 42
ldap/servers/slapd/back-ldbm/cache.c | 548
ldap/servers/slapd/back-ldbm/cleanup.c | 35
ldap/servers/slapd/back-ldbm/close.c | 35
ldap/servers/slapd/back-ldbm/dbhelp.c | 112
ldap/servers/slapd/back-ldbm/dblayer.c | 3370
ldap/servers/slapd/back-ldbm/dblayer.h | 55
ldap/servers/slapd/back-ldbm/dbsize.c | 42
ldap/servers/slapd/back-ldbm/dbtest.c | 349
ldap/servers/slapd/back-ldbm/dbverify.c | 53
ldap/servers/slapd/back-ldbm/dbversion.c | 117
ldap/servers/slapd/back-ldbm/dllmain.c | 166
ldap/servers/slapd/back-ldbm/dn2entry.c | 98
ldap/servers/slapd/back-ldbm/entrystore.c | 35
ldap/servers/slapd/back-ldbm/filterindex.c | 383
ldap/servers/slapd/back-ldbm/findentry.c | 182
ldap/servers/slapd/back-ldbm/haschildren.c | 35
ldap/servers/slapd/back-ldbm/id2entry.c | 234
ldap/servers/slapd/back-ldbm/idl.c | 207
ldap/servers/slapd/back-ldbm/idl_common.c | 77
ldap/servers/slapd/back-ldbm/idl_new.c | 589
ldap/servers/slapd/back-ldbm/idl_shim.c | 52
ldap/servers/slapd/back-ldbm/idlapi.h | 35
ldap/servers/slapd/back-ldbm/import-merge.c | 79
ldap/servers/slapd/back-ldbm/import-threads.c | 1946
ldap/servers/slapd/back-ldbm/import.c | 528
ldap/servers/slapd/back-ldbm/import.h | 92
ldap/servers/slapd/back-ldbm/index.c | 840
ldap/servers/slapd/back-ldbm/init.c | 134
ldap/servers/slapd/back-ldbm/instance.c | 213
ldap/servers/slapd/back-ldbm/ldbm_abandon.c | 35
ldap/servers/slapd/back-ldbm/ldbm_add.c | 1640
ldap/servers/slapd/back-ldbm/ldbm_attr.c | 997
ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c | 1069
ldap/servers/slapd/back-ldbm/ldbm_attrcrypt_config.c | 39
ldap/servers/slapd/back-ldbm/ldbm_bind.c | 243
ldap/servers/slapd/back-ldbm/ldbm_compare.c | 62
ldap/servers/slapd/back-ldbm/ldbm_config.c | 596
ldap/servers/slapd/back-ldbm/ldbm_config.h | 54
ldap/servers/slapd/back-ldbm/ldbm_delete.c | 1453
ldap/servers/slapd/back-ldbm/ldbm_entryrdn.c | 1879
ldap/servers/slapd/back-ldbm/ldbm_index_config.c | 743
ldap/servers/slapd/back-ldbm/ldbm_instance_config.c | 328
ldap/servers/slapd/back-ldbm/ldbm_modify.c | 870
ldap/servers/slapd/back-ldbm/ldbm_modrdn.c | 1849
ldap/servers/slapd/back-ldbm/ldbm_search.c | 938
ldap/servers/slapd/back-ldbm/ldbm_unbind.c | 35
ldap/servers/slapd/back-ldbm/ldbm_usn.c | 118
ldap/servers/slapd/back-ldbm/ldif2ldbm.c | 1103
ldap/servers/slapd/back-ldbm/libback-ldbm.def | 45
ldap/servers/slapd/back-ldbm/matchrule.c | 95
ldap/servers/slapd/back-ldbm/misc.c | 357
ldap/servers/slapd/back-ldbm/monitor.c | 129
ldap/servers/slapd/back-ldbm/nextid.c | 52
ldap/servers/slapd/back-ldbm/parents.c | 183
ldap/servers/slapd/back-ldbm/perfctrs.c | 190
ldap/servers/slapd/back-ldbm/perfctrs.h | 35
ldap/servers/slapd/back-ldbm/proto-back-ldbm.h | 152
ldap/servers/slapd/back-ldbm/rmdb.c | 35
ldap/servers/slapd/back-ldbm/seq.c | 150
ldap/servers/slapd/back-ldbm/sort.c | 231
ldap/servers/slapd/back-ldbm/start.c | 144
ldap/servers/slapd/back-ldbm/tools/index_dump/index_dump.c | 35
ldap/servers/slapd/back-ldbm/uniqueid2entry.c | 35
ldap/servers/slapd/back-ldbm/upgrade.c | 107
ldap/servers/slapd/back-ldbm/vlv.c | 465
ldap/servers/slapd/back-ldbm/vlv_key.c | 35
ldap/servers/slapd/back-ldbm/vlv_key.h | 35
ldap/servers/slapd/back-ldbm/vlv_srch.c | 69
ldap/servers/slapd/back-ldbm/vlv_srch.h | 38
ldap/servers/slapd/back-ldif/add.c | 35
ldap/servers/slapd/back-ldif/back-ldif.h | 47
ldap/servers/slapd/back-ldif/bind.c | 39
ldap/servers/slapd/back-ldif/close.c | 35
ldap/servers/slapd/back-ldif/compare.c | 35
ldap/servers/slapd/back-ldif/config.c | 35
ldap/servers/slapd/back-ldif/delete.c | 35
ldap/servers/slapd/back-ldif/dllmain.c | 170
ldap/servers/slapd/back-ldif/init.c | 43
ldap/servers/slapd/back-ldif/libback-ldif.def | 44
ldap/servers/slapd/back-ldif/modify.c | 37
ldap/servers/slapd/back-ldif/modrdn.c | 47
ldap/servers/slapd/back-ldif/monitor.c | 35
ldap/servers/slapd/back-ldif/search.c | 35
ldap/servers/slapd/back-ldif/start.c | 35
ldap/servers/slapd/back-ldif/unbind.c | 35
ldap/servers/slapd/backend.c | 287
ldap/servers/slapd/backend_manager.c | 94
ldap/servers/slapd/bind.c | 559
ldap/servers/slapd/bitset.c | 35
ldap/servers/slapd/bulk_import.c | 74
ldap/servers/slapd/ch_malloc.c | 399
ldap/servers/slapd/charray.c | 78
ldap/servers/slapd/compare.c | 80
ldap/servers/slapd/computed.c | 219
ldap/servers/slapd/config.c | 145
ldap/servers/slapd/configdse.c | 152
ldap/servers/slapd/connection.c | 2448
ldap/servers/slapd/conntable.c | 147
ldap/servers/slapd/control.c | 99
ldap/servers/slapd/counters.c | 35
ldap/servers/slapd/csn.c | 124
ldap/servers/slapd/csngen.c | 128
ldap/servers/slapd/csngen.h | 35
ldap/servers/slapd/csnset.c | 39
ldap/servers/slapd/daemon.c | 2757
ldap/servers/slapd/defbackend.c | 38
ldap/servers/slapd/delete.c | 169
ldap/servers/slapd/detach.c | 54
ldap/servers/slapd/disconnect_error_strings.h | 35
ldap/servers/slapd/disconnect_errors.h | 35
ldap/servers/slapd/dl.c | 37
ldap/servers/slapd/dn.c | 2274
ldap/servers/slapd/dse.c | 1253
ldap/servers/slapd/dynalib.c | 71
ldap/servers/slapd/entry.c | 2245
ldap/servers/slapd/entrywsi.c | 847
ldap/servers/slapd/errormap.c | 53
ldap/servers/slapd/eventq.c | 39
ldap/servers/slapd/extendop.c | 72
ldap/servers/slapd/factory.c | 246
ldap/servers/slapd/fe.h | 104
ldap/servers/slapd/fedse.c | 289
ldap/servers/slapd/fileio.c | 303
ldap/servers/slapd/filter.c | 292
ldap/servers/slapd/filter.h | 36
ldap/servers/slapd/filtercmp.c | 61
ldap/servers/slapd/filterentry.c | 87
ldap/servers/slapd/generation.c | 43
ldap/servers/slapd/getfilelist.c | 39
ldap/servers/slapd/getopt_ext.c | 35
ldap/servers/slapd/getopt_ext.h | 46
ldap/servers/slapd/getsocketpeer.c | 29
ldap/servers/slapd/getsocketpeer.h | 29
ldap/servers/slapd/globals.c | 112
ldap/servers/slapd/house.c | 35
ldap/servers/slapd/http.h | 35
ldap/servers/slapd/index_subsys.h | 35
ldap/servers/slapd/index_subsystem.c | 73
ldap/servers/slapd/init.c | 51
ldap/servers/slapd/intrinsics.h | 79
ldap/servers/slapd/ldaputil.c | 1405
ldap/servers/slapd/ldbmlinktest.c | 35
ldap/servers/slapd/lenstr.c | 41
ldap/servers/slapd/libglobs.c | 3795
ldap/servers/slapd/libmakefile | 95
ldap/servers/slapd/libslapd.def | 1200
ldap/servers/slapd/listConfigAttrs.pl | 35
ldap/servers/slapd/localhost.c | 175
ldap/servers/slapd/lock.c | 51
ldap/servers/slapd/log.c | 660
ldap/servers/slapd/log.h | 61
ldap/servers/slapd/main.c | 714
ldap/servers/slapd/mapping_tree.c | 736
ldap/servers/slapd/match.c | 131
ldap/servers/slapd/mempool.c | 69
ldap/servers/slapd/mkDBErrStrs.pl | 35
ldap/servers/slapd/modify.c | 888
ldap/servers/slapd/modrdn.c | 410
ldap/servers/slapd/modutil.c | 114
ldap/servers/slapd/monitor.c | 53
ldap/servers/slapd/mozldap.h | 45
ldap/servers/slapd/ntmsgdll/ntslapdmessages.c | 53
ldap/servers/slapd/ntmsgdll/ntslapdmessages.mc | 315
ldap/servers/slapd/ntperfdll/exports.def | 41
ldap/servers/slapd/ntperfdll/nsldapctr.cpp | 1022
ldap/servers/slapd/ntperfdll/nsldapctrdef.h | 70
ldap/servers/slapd/ntperfdll/nsldapctrmc.h | 159
ldap/servers/slapd/ntperfdll/nsldapctrmc.mc | 106
ldap/servers/slapd/ntperfdll/nsldapctrmsg.h | 97
ldap/servers/slapd/ntperfdll/nsldapctrs.h | 104
ldap/servers/slapd/ntperfdll/nsldapctrs.ini | 89
ldap/servers/slapd/ntperfdll/nsldapctrutil.cpp | 401
ldap/servers/slapd/ntperfdll/nsldapctrutil.h | 157
ldap/servers/slapd/ntperfdll/nsldapreg.ini | 50
ldap/servers/slapd/ntuserpin.c | 214
ldap/servers/slapd/ntwdog/cron_conf.c | 691
ldap/servers/slapd/ntwdog/cron_conf.h | 122
ldap/servers/slapd/ntwdog/ntcron.c | 193
ldap/servers/slapd/ntwdog/ntwatchdog.c | 1194
ldap/servers/slapd/object.c | 35
ldap/servers/slapd/objset.c | 35
ldap/servers/slapd/openldapber.h | 25
ldap/servers/slapd/operation.c | 254
ldap/servers/slapd/opshared.c | 761
ldap/servers/slapd/pagedresults.c | 944
ldap/servers/slapd/passwd_extop.c | 249
ldap/servers/slapd/pblock.c | 777
ldap/servers/slapd/plugin.c | 2263
ldap/servers/slapd/plugin_acl.c | 87
ldap/servers/slapd/plugin_internal_op.c | 239
ldap/servers/slapd/plugin_mr.c | 509
ldap/servers/slapd/plugin_role.c | 35
ldap/servers/slapd/plugin_syntax.c | 542
ldap/servers/slapd/poll_using_select.c | 35
ldap/servers/slapd/poll_using_select.h | 35
ldap/servers/slapd/prerrstrs.h | 35
ldap/servers/slapd/protect_db.c | 311
ldap/servers/slapd/protect_db.h | 42
ldap/servers/slapd/proto-slap.h | 349
ldap/servers/slapd/proxyauth.c | 224
ldap/servers/slapd/psearch.c | 152
ldap/servers/slapd/pw.c | 1530
ldap/servers/slapd/pw.h | 66
ldap/servers/slapd/pw_mgmt.c | 212
ldap/servers/slapd/pw_retry.c | 159
ldap/servers/slapd/rdn.c | 328
ldap/servers/slapd/referral.c | 64
ldap/servers/slapd/regex.c | 70
ldap/servers/slapd/resourcelimit.c | 132
ldap/servers/slapd/result.c | 1027
ldap/servers/slapd/rootdse.c | 47
ldap/servers/slapd/rwlock.c | 257
ldap/servers/slapd/rwlock.h | 65
ldap/servers/slapd/sasl_io.c | 387
ldap/servers/slapd/sasl_map.c | 313
ldap/servers/slapd/saslbind.c | 355
ldap/servers/slapd/schema.c | 6272 +
ldap/servers/slapd/schemaparse.c | 52
ldap/servers/slapd/search.c | 262
ldap/servers/slapd/secerrstrs.h | 104
ldap/servers/slapd/security_wrappers.c | 77
ldap/servers/slapd/slap.h | 816
ldap/servers/slapd/slapd.lite.key | 35
ldap/servers/slapd/slapd.normal.key | 35
ldap/servers/slapd/slapd_plhash.c | 35
ldap/servers/slapd/slapi-plugin-compat4.h | 41
ldap/servers/slapd/slapi-plugin.h | 2342
ldap/servers/slapd/slapi-private.h | 285
ldap/servers/slapd/slapi2nspr.c | 128
ldap/servers/slapd/slapi_counter.c | 61
ldap/servers/slapd/slapi_counter_sunos_sparcv9.S | 34
ldap/servers/slapd/snmp_collator.c | 304
ldap/servers/slapd/snmp_collator.h | 35
ldap/servers/slapd/snoop.c | 35
ldap/servers/slapd/sort.c | 46
ldap/servers/slapd/ssl.c | 1790
ldap/servers/slapd/sslerrstrs.h | 86
ldap/servers/slapd/start_tls_extop.c | 297
ldap/servers/slapd/statechange.h | 35
ldap/servers/slapd/str2filter.c | 44
ldap/servers/slapd/strdup.c | 35
ldap/servers/slapd/stubrepl.c | 35
ldap/servers/slapd/stubs.c | 44
ldap/servers/slapd/subentry.c | 35
ldap/servers/slapd/task.c | 858
ldap/servers/slapd/tempnam.c | 35
ldap/servers/slapd/test-plugins/Makefile | 35
ldap/servers/slapd/test-plugins/Makefile.AIX | 35
ldap/servers/slapd/test-plugins/Makefile.BSDI | 35
ldap/servers/slapd/test-plugins/Makefile.HPUX | 35
ldap/servers/slapd/test-plugins/Makefile.HPUX64 | 35
ldap/servers/slapd/test-plugins/Makefile.IRIX | 35
ldap/servers/slapd/test-plugins/Makefile.Linux | 35
ldap/servers/slapd/test-plugins/Makefile.OSF1 | 35
ldap/servers/slapd/test-plugins/Makefile.ReliantUNIX | 35
ldap/servers/slapd/test-plugins/Makefile.SOLARIS | 35
ldap/servers/slapd/test-plugins/Makefile.SOLARIS64 | 35
ldap/servers/slapd/test-plugins/Makefile.SOLARISx86 | 35
ldap/servers/slapd/test-plugins/Makefile.UnixWare | 35
ldap/servers/slapd/test-plugins/Makefile.UnixWareUDK | 35
ldap/servers/slapd/test-plugins/Makefile.WINNT | 77
ldap/servers/slapd/test-plugins/Makefile.server | 91
ldap/servers/slapd/test-plugins/README | 35
ldap/servers/slapd/test-plugins/clients/README | 35
ldap/servers/slapd/test-plugins/clients/ReqExtOp.java | 35
ldap/servers/slapd/test-plugins/clients/reqextop.c | 35
ldap/servers/slapd/test-plugins/dllmain.c | 146
ldap/servers/slapd/test-plugins/installDse.pl | 35
ldap/servers/slapd/test-plugins/nicknames | 35
ldap/servers/slapd/test-plugins/sampletask.c | 34
ldap/servers/slapd/test-plugins/testbind.c | 39
ldap/servers/slapd/test-plugins/testdatainterop.c | 38
ldap/servers/slapd/test-plugins/testdbinterop.c | 41
ldap/servers/slapd/test-plugins/testdbinterop.h | 35
ldap/servers/slapd/test-plugins/testentry.c | 41
ldap/servers/slapd/test-plugins/testextendedop.c | 38
ldap/servers/slapd/test-plugins/testgetip.c | 40
ldap/servers/slapd/test-plugins/testplugin.def | 48
ldap/servers/slapd/test-plugins/testplugin.dsp | 175
ldap/servers/slapd/test-plugins/testplugin.mak | 463
ldap/servers/slapd/test-plugins/testpostop.c | 58
ldap/servers/slapd/test-plugins/testpreop.c | 38
ldap/servers/slapd/test-plugins/testsaslbind.c | 38
ldap/servers/slapd/thread_data.c | 214
ldap/servers/slapd/time.c | 236
ldap/servers/slapd/tools/dbscan.c | 190
ldap/servers/slapd/tools/eggencode.c | 35
ldap/servers/slapd/tools/ldaptool-sasl.c | 33
ldap/servers/slapd/tools/ldaptool.h | 24
ldap/servers/slapd/tools/ldclt/data.c | 212
ldap/servers/slapd/tools/ldclt/examples/001/add.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/001/add_incr.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/001/config.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/001/delete.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/001/env.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/001/search.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/002/add.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/002/config.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/002/env.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/002/ldif01.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/002/ldif02.ksh | 35
ldap/servers/slapd/tools/ldclt/examples/002/ldif03.ksh | 35
ldap/servers/slapd/tools/ldclt/ldap-private.h | 35
ldap/servers/slapd/tools/ldclt/ldapfct.c | 1650
ldap/servers/slapd/tools/ldclt/ldclt.c | 543
ldap/servers/slapd/tools/ldclt/ldclt.h | 68
ldap/servers/slapd/tools/ldclt/ldclt.man | 2
ldap/servers/slapd/tools/ldclt/ldclt.use | 2
ldap/servers/slapd/tools/ldclt/ldcltU.c | 63
ldap/servers/slapd/tools/ldclt/opCheck.c | 158
ldap/servers/slapd/tools/ldclt/parser.c | 113
ldap/servers/slapd/tools/ldclt/port.c | 247
ldap/servers/slapd/tools/ldclt/port.h | 79
ldap/servers/slapd/tools/ldclt/remote.h | 53
ldap/servers/slapd/tools/ldclt/repcheck.c | 35
ldap/servers/slapd/tools/ldclt/repslave.c | 35
ldap/servers/slapd/tools/ldclt/scalab01.c | 301
ldap/servers/slapd/tools/ldclt/scalab01.h | 35
ldap/servers/slapd/tools/ldclt/srv.c | 35
ldap/servers/slapd/tools/ldclt/threadMain.c | 208
ldap/servers/slapd/tools/ldclt/utils.c | 146
ldap/servers/slapd/tools/ldclt/utils.h | 36
ldap/servers/slapd/tools/ldclt/workarounds.c | 41
ldap/servers/slapd/tools/ldif.c | 53
ldap/servers/slapd/tools/migratecred.c | 93
ldap/servers/slapd/tools/mkdep.c | 109
ldap/servers/slapd/tools/mmldif.c | 99
ldap/servers/slapd/tools/pwenc.c | 76
ldap/servers/slapd/tools/rsearch/addthread.c | 88
ldap/servers/slapd/tools/rsearch/addthread.h | 35
ldap/servers/slapd/tools/rsearch/infadd.c | 42
ldap/servers/slapd/tools/rsearch/infadd.h | 35
ldap/servers/slapd/tools/rsearch/main.c | 38
ldap/servers/slapd/tools/rsearch/nametable.c | 62
ldap/servers/slapd/tools/rsearch/nametable.h | 35
ldap/servers/slapd/tools/rsearch/rsearch.c | 48
ldap/servers/slapd/tools/rsearch/rsearch.h | 35
ldap/servers/slapd/tools/rsearch/scripts/dbgen.pl.in | 283
ldap/servers/slapd/tools/rsearch/sdattable.c | 99
ldap/servers/slapd/tools/rsearch/sdattable.h | 35
ldap/servers/slapd/tools/rsearch/searchthread.c | 167
ldap/servers/slapd/tools/rsearch/searchthread.h | 35
ldap/servers/slapd/unbind.c | 39
ldap/servers/slapd/uniqueid.c | 134
ldap/servers/slapd/uniqueidgen.c | 39
ldap/servers/slapd/utf8.c | 34
ldap/servers/slapd/utf8compare.c | 65
ldap/servers/slapd/util.c | 902
ldap/servers/slapd/uuid.c | 66
ldap/servers/slapd/uuid.h | 40
ldap/servers/slapd/value.c | 97
ldap/servers/slapd/valueset.c | 1258
ldap/servers/slapd/vattr.c | 204
ldap/servers/slapd/vattr_spi.h | 35
ldap/servers/slapd/views.h | 35
ldap/servers/snmp/NETWORK-SERVICES-MIB.txt | 650
ldap/servers/snmp/RFC-1215.txt | 38
ldap/servers/snmp/RFC1155-SMI.txt | 119
ldap/servers/snmp/SNMPv2-CONF.txt | 322
ldap/servers/snmp/SNMPv2-SMI.txt | 344
ldap/servers/snmp/SNMPv2-TC.txt | 772
ldap/servers/snmp/ldap-agent.c | 73
ldap/servers/snmp/ldap-agent.h | 40
ldap/servers/snmp/main.c | 89
ldap/servers/snmp/netscape-ldap.mib | 759
ldap/servers/snmp/ntagt/msrvdefs.mak | 524
ldap/servers/snmp/ntagt/nslagtcom_nt.h | 69
ldap/servers/snmp/ntagt/nsldapagt_nt.c | 1776
ldap/servers/snmp/ntagt/nsldapagt_nt.def | 56
ldap/servers/snmp/ntagt/nsldapagt_nt.h | 266
ldap/servers/snmp/ntagt/nsldapmib_nt.c | 1078
ldap/servers/snmp/ntagt/nsldapmib_nt.h | 167
ldap/servers/snmp/redhat-directory.mib | 76
ldap/systools/getHPPatches.pl | 35
ldap/systools/getSolPatches.pl | 35
ldap/systools/hp_patches.c | 35
ldap/systools/idsktune.c | 1003
ldap/systools/mergeSolPatches.pl | 35
ldap/systools/pio.c | 35
ldap/systools/pio.h | 35
ldap/systools/viewcore.c | 43
lib/base/crit.cpp | 41
lib/base/dns.cpp | 41
lib/base/dnsdmain.cpp | 48
lib/base/ereport.cpp | 37
lib/base/eventlog.cpp | 106
lib/base/file.cpp | 365
lib/base/fsmutex.cpp | 79
lib/base/lexer.cpp | 1015
lib/base/lexer_pvt.h | 35
lib/base/net.cpp | 41
lib/base/nscperror.c | 35
lib/base/nterrors.cpp | 120
lib/base/plist.cpp | 38
lib/base/plist_pvt.h | 35
lib/base/pool.cpp | 91
lib/base/rwlock.cpp | 168
lib/base/shexp.cpp | 43
lib/base/system.cpp | 47
lib/base/systhr.cpp | 133
lib/base/util.cpp | 68
lib/ldaputil/cert.c | 51
lib/ldaputil/certmap.c | 607
lib/ldaputil/certmap.conf | 35
lib/ldaputil/dbconf.c | 93
lib/ldaputil/encode.c | 35
lib/ldaputil/errors.c | 35
lib/ldaputil/examples/Certmap.mak | 286
lib/ldaputil/examples/Makefile | 40
lib/ldaputil/examples/README | 35
lib/ldaputil/examples/init.c | 42
lib/ldaputil/examples/plugin.c | 39
lib/ldaputil/examples/plugin.h | 35
lib/ldaputil/init.c | 44
lib/ldaputil/ldapauth.c | 35
lib/ldaputil/ldapu-changes.html | 35
lib/ldaputil/ldaputili.h | 35
lib/ldaputil/utest/Makefile | 149
lib/ldaputil/utest/auth.cpp | 611
lib/ldaputil/utest/authtest | 138
lib/ldaputil/utest/certmap.conf | 68
lib/ldaputil/utest/dblist.conf | 47
lib/ldaputil/utest/example.c | 153
lib/ldaputil/utest/plugin.c | 152
lib/ldaputil/utest/plugin.h | 57
lib/ldaputil/utest/stubs.c | 144
lib/ldaputil/utest/stubs.cpp | 139
lib/ldaputil/utest/test.ref | 480
lib/ldaputil/vtable.c | 37
lib/libaccess/access_plhash.cpp | 35
lib/libaccess/access_plhash.h | 35
lib/libaccess/acl.tab.cpp | 62
lib/libaccess/acl.tab.h | 35
lib/libaccess/acl.yy.cpp | 44
lib/libaccess/aclcache.cpp | 166
lib/libaccess/aclcache.h | 35
lib/libaccess/aclerror.cpp | 39
lib/libaccess/acleval.cpp | 39
lib/libaccess/aclflush.cpp | 36
lib/libaccess/aclpriv.h | 36
lib/libaccess/aclscan.h | 36
lib/libaccess/aclscan.l | 39
lib/libaccess/aclspace.cpp | 39
lib/libaccess/acltext.y | 41
lib/libaccess/acltools.cpp | 2050
lib/libaccess/aclutil.cpp | 48
lib/libaccess/aclutil.h | 35
lib/libaccess/authdb.cpp | 147
lib/libaccess/las.h | 35
lib/libaccess/lasdns.cpp | 341
lib/libaccess/lasdns.h | 35
lib/libaccess/lasgroup.cpp | 45
lib/libaccess/lasip.cpp | 448
lib/libaccess/lasip.h | 38
lib/libaccess/lastod.cpp | 35
lib/libaccess/lasuser.cpp | 35
lib/libaccess/ldapauth.h | 35
lib/libaccess/method.cpp | 35
lib/libaccess/nsautherr.cpp | 47
lib/libaccess/nseframe.cpp | 38
lib/libaccess/oneeval.cpp | 321
lib/libaccess/oneeval.h | 35
lib/libaccess/parse.h | 35
lib/libaccess/permhash.h | 55
lib/libaccess/register.cpp | 141
lib/libaccess/symbols.cpp | 43
lib/libaccess/usi.cpp | 35
lib/libaccess/usrcache.cpp | 49
lib/libaccess/utest/.purify | 19
lib/libaccess/utest/Makefile | 147
lib/libaccess/utest/acl.dat | 44
lib/libaccess/utest/aclfile0 | 87
lib/libaccess/utest/aclfile1 | 43
lib/libaccess/utest/aclfile10 | 45
lib/libaccess/utest/aclfile11 | 43
lib/libaccess/utest/aclfile12 | 43
lib/libaccess/utest/aclfile13 | 43
lib/libaccess/utest/aclfile14 | 43
lib/libaccess/utest/aclfile15 | 43
lib/libaccess/utest/aclfile16 | 43
lib/libaccess/utest/aclfile17 | 43
lib/libaccess/utest/aclfile18 | 51
lib/libaccess/utest/aclfile19 | 46
lib/libaccess/utest/aclfile2 | 43
lib/libaccess/utest/aclfile3 | 43
lib/libaccess/utest/aclfile4 | 43
lib/libaccess/utest/aclfile5 | 43
lib/libaccess/utest/aclfile6 | 55
lib/libaccess/utest/aclfile7 | 43
lib/libaccess/utest/aclfile8 | 43
lib/libaccess/utest/aclfile9 | 43
lib/libaccess/utest/aclgrp0 | 42
lib/libaccess/utest/aclgrp1 | 42
lib/libaccess/utest/aclgrp2 | 42
lib/libaccess/utest/aclgrp3 | 42
lib/libaccess/utest/aclgrp4 | 42
lib/libaccess/utest/acltest.cpp | 794
lib/libaccess/utest/onetest.cpp | 77
lib/libaccess/utest/shexp.cpp | 331
lib/libaccess/utest/shexp.h | 168
lib/libaccess/utest/test.ref | 217
lib/libaccess/utest/testmain.cpp | 89
lib/libaccess/utest/twotest.cpp | 87
lib/libaccess/utest/ustubs.cpp | 331
lib/libaccess/yy-sed | 35
lib/libadmin/error.c | 66
lib/libadmin/template.c | 37
lib/libadmin/util.c | 96
lib/libsi18n/coreres.c | 141
lib/libsi18n/coreres.h | 52
lib/libsi18n/getlang.c | 330
lib/libsi18n/getstrmem.c | 160
lib/libsi18n/getstrmem.h | 36
lib/libsi18n/getstrprop.c | 124
lib/libsi18n/gsslapd.h | 35
lib/libsi18n/makstrdb.c | 56
lib/libsi18n/propset.c | 442
lib/libsi18n/propset.h | 80
lib/libsi18n/reshash.c | 56
lib/libsi18n/reshash.h | 35
lib/libsi18n/txtfile.c | 35
lib/libsi18n/txtfile.h | 35
ltmain.sh |14878 ++-
m4/db.m4 | 43
m4/fhs.m4 | 20
m4/icu.m4 | 41
m4/kerberos.m4 | 20
m4/mozldap.m4 | 54
m4/netsnmp.m4 | 31
m4/nspr.m4 | 33
m4/nss.m4 | 33
m4/nunc-stans.m4 | 63
m4/openldap.m4 | 46
m4/pcre.m4 | 44
m4/sasl.m4 | 41
m4/selinux.m4 | 29
m4/svrcore.m4 | 57
man/man1/cl-dump.1 | 20
man/man1/dbgen.pl.1 | 12
man/man1/dbscan.1 | 2
man/man1/ds-logpipe.py.1 | 14
man/man1/dsktune.1 | 2
man/man1/infadd.1 | 10
man/man1/ldap-agent.1 | 2
man/man1/ldclt.1 | 2
man/man1/ldif.1 | 2
man/man1/logconv.pl.1 | 47
man/man1/migratecred.1 | 8
man/man1/mmldif.1 | 6
man/man1/pwdhash.1 | 6
man/man1/repl-monitor.1 | 43
man/man1/rsearch.1 | 2
man/man8/bak2db.8 | 58
man/man8/bak2db.pl.8 | 82
man/man8/cleanallruv.pl.8 | 85
man/man8/db2bak.8 | 59
man/man8/db2bak.pl.8 | 81
man/man8/db2index.8 | 63
man/man8/db2index.pl.8 | 85
man/man8/db2ldif.8 | 102
man/man8/db2ldif.pl.8 | 124
man/man8/dbmon.sh.8 | 56
man/man8/dbverify.8 | 63
man/man8/dn2rdn.8 | 58
man/man8/fixup-linkedattrs.pl.8 | 76
man/man8/fixup-memberof.pl.8 | 80
man/man8/ldif2db.8 | 85
man/man8/ldif2db.pl.8 | 102
man/man8/ldif2ldap.8 | 62
man/man8/migrate-ds.pl.8 | 2
man/man8/monitor.8 | 67
man/man8/ns-accountstatus.pl.8 | 74
man/man8/ns-activate.pl.8 | 73
man/man8/ns-inactivate.pl.8 | 72
man/man8/ns-newpwpolicy.pl.8 | 79
man/man8/ns-slapd.8 | 12
man/man8/remove-ds.pl.8 | 13
man/man8/restart-dirsrv.8 | 50
man/man8/restoreconfig.8 | 48
man/man8/saveconfig.8 | 48
man/man8/schema-reload.pl.8 | 74
man/man8/setup-ds.pl.8 | 6
man/man8/start-dirsrv.8 | 50
man/man8/stop-dirsrv.8 | 50
man/man8/suffix2instance.8 | 51
man/man8/syntax-validate.pl.8 | 77
man/man8/upgradedb.8 | 56
man/man8/upgradednformat.8 | 55
man/man8/usn-tombstone-cleanup.pl.8 | 80
man/man8/verify-db.pl.8 | 49
man/man8/vlvindex.8 | 58
missing | 453
rpm.mk | 71
rpm/389-ds-base-devel.README | 4
rpm/389-ds-base-git.sh | 16
rpm/389-ds-base.spec.in | 1664
rpm/add_patches.sh | 55
rpm/rpmverrel.sh | 15
selinux/dirsrv.fc.in | 2
selinux/dirsrv.if | 41
selinux/dirsrv.te | 11
wrappers/cl-dump.in | 46
wrappers/dbscan.in | 10
wrappers/infadd.in | 12
wrappers/initscript.in | 267
wrappers/ldap-agent-initscript.in | 48
wrappers/ldap-agent.in | 12
wrappers/ldclt.in | 12
wrappers/ldif.in | 12
wrappers/migratecred.in | 14
wrappers/mmldif.in | 14
wrappers/pwdhash.in | 14
wrappers/repl-monitor.in | 46
wrappers/rsearch.in | 12
wrappers/systemd-snmp.service.in | 16
wrappers/systemd.group.in | 6
wrappers/systemd.template.service.in | 28
wrappers/systemd.template.sysconfig | 3
1370 files changed, 219902 insertions(+), 150910 deletions(-)
---
1
0
VERSION.sh | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit e621e1f185eb3b5a2f770d11a649605b278413ba
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Wed Nov 18 15:56:23 2015 -0800
bump version to 1.3.4.5
diff --git a/VERSION.sh b/VERSION.sh
index 79d7624..320d597 100644
--- a/VERSION.sh
+++ b/VERSION.sh
@@ -10,7 +10,7 @@ vendor="389 Project"
# PACKAGE_VERSION is constructed from these
VERSION_MAJOR=1
VERSION_MINOR=3
-VERSION_MAINT=4.4
+VERSION_MAINT=4.5
# if this is a PRERELEASE, set VERSION_PREREL
# otherwise, comment it out
# be sure to include the dot prefix in the prerel
1
0
Changes since 389-ds-base-1.2.6.a1:
Anupam Jain (9):
Ticket 123 - Enhancement request:"whoami" extended operation
Ticket 123 - Enhancement request:"whoami" extended operation
Ticket 123 - Enhancement request:"whoami" extended operation
Ticket #47423 - 7-bit check plugin does not work for userpassword attribute
Ticket #47363 - 7-bit checking is not necessary for userPassword
Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
Ticket #47370 - DS crashes with some 7-bit check plugin configurations
Ticket #617 - Possible to add invalid ACI value
Ticket #626 - Possible to add nonexistent target to ACI
Carsten Grzemba (2):
Ticket #555 - add fixup-memberuid.pl script
Ticket #555 - add fixup-memberuid.pl script
Charles Lopes (1):
Bug #361: Bad DNs in ACIs can segfault ns-slapd
Endi S. Dewata (168):
Bug 545620 - Password cannot start with minus sign
Bug 538525 - Ability to create instance as non-root user
Bug 570542 - Root password cannot contain matching curly braces
Bug 470684 - Pam_passthru plugin doesn't verify account activation
Bug 573375 - MODRDN operation not logged
Bug 520151 - Error when modifying userPassword with proxy user
Bug 455489 - Address compiler warnings about strict-aliasing rules
Bug 566320 - RFE: add exception to removal of attributes in cn=config for aci
Bug 566043 - startpid file is only cleaned by initscript runs
Bug 584109 - Slapd crashes while parsing DNA configuration
Bug 542570 - Directory Server port number is not validated in the beginning.
Bug 145181 - Plugin target/bind subtrees only take 1 value.
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 619122 - fix coverify Defect Type: Resource leaks issues CID 11975 - 12053
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverify Defect Type: Resource leaks issues CID 12094 - 12136
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 628096 - spurious error message from /sbin/service when doing a stop on no instances
Bug 573889 - Migration does not remove deprecated schema
Bug 606545 - core schema should include numSubordinates
Bug 643979 - Strange byte sequence for attribute with no values (nsslapd-referral)
Endi Sukma Dewata (16):
Bug 630092 - Coverity #12117: Resource leaks issues
Bug 630092 - Coverity #15478: Resource leaks issues
Bug 630092 - Coverity #15479: Resource leaks issues
Bug 630092 - Coverity #15481: Resource leaks issues
Bug 630092 - Coverity #15482: Resource leaks issues
Bug 630092 - Coverity #15483: Resource leaks issues
Bug 630092 - Coverity #15484: Resource leaks issues
Bug 630092 - Coverity #15485: Resource leaks issues
Bug 630092 - Coverity #15487: Resource leaks issues
Bug 630092 - Coverity #15490: Resource leaks issues
Bug 630092 - Coverity #15497: Resource leaks issues
Bug 630092 - Coverity #11991: Resource leaks issues
Bug 630092 - Coverity #12000: Resource leaks issues
Bug 630092 - Coverity #12003: Resource leaks issues
Bug 630092 - Coverity #11985: Resource leaks issues
Bug 630092 - Coverity #11992,11993: Resource leaks issues
Jeroen van Meeuwen (Kolab Systems) (1):
Suppress alert on unavailable port with forced setup
Jonathan \"Duke\" Leto (1):
fix for trac #173; update ds-logpipe.py docs about -t option
Ken Rossato (8):
Factorize into new isPosixGroup function
Change "return"s in modGroupMembership to "break"s to avoid leaking
Memory leaks: unmatched slapi_attr_get_valueset and slapi_value_new
Simplify program flow: eliminate unnecessary continue
Simplify program flow: make adduids/moduids/deluids action blocks all similar
Fix logic errors: del_mod should be latched (might not be last mod), and avoid skipping add-mods (int value 0)
Simplify program flow: change while loops to for
Ticket #481 - expand nested posix groups
Ludwig Krispenz (76):
Fix for ticket 510
Fix for ticket 465: cn=monitor showing stats for other db instances
Fix for ticket 504
Ticket 349 - nsViewFilter syntax issue in 389DS 1.2.5
Ticket 518 - dse.ldif is 0 length after server kill or machine kill
Ticket 505 - use lock-free access name2asi and oid2asi table
Fix optimization issue introduced with fix for ticket #561,
modify operations without values need to be written to the changelog
Reduce replication meta data stored in entry, cf ticket 569
Fix compiler warnings introduced by fix for #569
removing an unused variable, did also remove an assigment
Ticket 568 - make usage of transaction batch flush durable
fix hang related to ticket 568
Ticket 47358 - implement backend optimazation levels
Ticket 47396 - crash on modrdn of tombstone
Ticket 47395 47397 v2 correct behaviour of account policy if only stateattr
fix compiler warnings, caused by fix for 47395,47397
Ticket 47399 - RHDS denies MODRDN access if ACI list contains any DENY rule
Ticket 47369 version2 - provide default syntax plugin
Fix compiler warning
Ticket 346 - version 4 Slow ldapmodify operation time
fix compiler warnings
CVE-2013-2219 ACLs inoperative in some search scenarios
fix compiler warning
Ticket 47502 - updates to ruv entry are written to retro changelog
Fix regression from fix for 569, when the last value of an attribute was explicitely deleted
Ticket 47505 - Get rid of valueset_add_valuearray_ext
Ticket 47487 - enhance retro changelog
Ticket 314 - ChaiOnUpdate for root handling
Use defines for backend error handling
Ticket 601 - multi master replication allows schema violation
Ticket 47388 - RFE to implement RFC4533 -ver2
Fix for coverty issues 12028,12029,12030
Ticket 47577 - crash when removing entries from cache
Ticket 47521 - Complex filter in a search request doen't work as expected.
Ticket 47591 - entries with empty objectclass attribute value can be hidden
Ticket 47527 - Allow referential integrity suffixes to be configurable
Ticket 47526 - Allow memberof suffixes to be configurable
Ticket 47612 - ns-slapd eats all the memory
simplify fix for 47612
Ticket 47621 - v2 make referential integrity configuration more flexible
Ticket 47629 - random crashes related to sync repl
Ticket 47704 - invalid sizelimits in aci group evaluation
Ticket 47732 - ds logs many "SLAPI_PLUGIN_BE_TXN_POST_DELETE_FN plugin returned error" messages
Ticket 47733 - ds logs many "Operation error fetching Null DN" messages
Ticket 47667 - Allow nsDS5ReplicaBindDN to be a group DN
Ticket 47712 - betxn: retro changelog broken after cancelled transaction
fix assertion failure introduced with fix for ticket 47667
Ticket 47761 - Return all attributes in rootdse without explicit request
fix jenkins warning
Ticket 47806 - Failed deletion of aci: no such attribute
Ticket 47805 - syncrepl doesn't send notification when attribute in search filter changes
Ticket 47803 - syncrepl crash if attribute list is non-empty
fix coverity issue 12621
fix compiler error with alst coverity commit
Ticket 47821 - deref plugin cannot handle complex acis
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing
Ticket 47846 - server crashes deleting a replication agreement
Ticket 47872 - Filter AND with only one clause should be optimized
Ticket 47877 - check_and_add_entry fails for changetype: add and existing entry
Ticket 47816 -v2- internal syncrepl searches are flagged as unindexed
Ticket 47866 - Errors after upgrading related to attribute "dnaremotebindmethod"
Ticket 47885 - deref plugin should not return references with noc access rights
fix for 47885 did not always return a response control
Ticket 47918 - result of dna_dn_is_shared_config is incorrectly used
ticket 47916 plugin logging parameter only triggers result logging
Additional fix for ticket 47526 v3
fix jenkins warning
Ticket 47964 - v2 - Incorrect search result after replacing an empty attribute
Ticket 47991 - upgrade script fails if /etc and /var are on different file systems
Ticket #48021 - nsDS5ReplicaBindDNGroup checkinterval not working properly
Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
Ticket 48136 -v2v2 accept auxilliary objectclasse in replication agreements
Ticket 48175 - Avoid using regex in ACL if possible
Ticket 48195 - Slow replication when deleting large quantities of multi-valued attributes
Ticket 48283 - many attrlist_replace errors in connection with cleanallruv
Mark Reynolds (428):
Ticket #71 - unable to delete managed entry config
Ticket #159 - Managed Entry Plugin runs against managed entries upon any update without validating
Ticket #177 - logconv.pl doesn't detect restarts
Merge branch 'ticket159'
Ticket #49 - better handling for server shutdown while long running tasks are active
Ticket #50 - server should not call a plugin after the plugin close function is calle
Updated for ticket#50
Ticket #55 - Limit of 1024 characters for nsMatchingRule
Ticket #140 - incorrect memset parameters
Revert "Ticket #140 - incorrect memset parameters"
Revert "Ticket #55 - Limit of 1024 characters for nsMatchingRule"
Ticket #38 - nisDomain schema is incorrect
Ticket #6 - protocol error from proxied auth operation
Ticket #55 - Limit of 1024 characters for nsMatchingRule
Ticket #39 - Account Policy Plugin does not work for simple binds when PAM Pass Through Auth plugin is enabled
Ticket 175 - logconv.pl improvements
Ticket 175 - minor fixes
Ticket #17 - Replication optimizations
Ticket #17 - new replication optimizations
Ticket #129 - Should only update modifyTimestamp/modifiersName on MODIFY ops
Ticket #111 - ability to control behavior of modifyTimestamp/modifiersName
Ticket #211 - dnaNextValue gets incremented even if the user addition fails
Ticket #74 - Add schema for DNA plugin (RFE)
Ticket #306 - void function cannot return value
Ticket #302 - use thread local storage for internalModifiersName & internalCreatorsName
Schema Reload crash fix
Ticket #291 - cannot use & in a sasl map search filter
Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
Ticket #191 - Implement SO_KEEPALIVE in network calls
Config changes fail because of unknown attribute "internalModifiersname"
Ticket #292 - logconv.pl reporting unindexed search with different search base than shown in access logs
Ticket #308 - Automembership plugin fails if data and config area mixed in the plugin configuration
Ticket #271 - replication code cleanup
TIcket #285 - compilation fixes for '--format-security'
Ticket #271 - Slow shutdown when you have 100+ replication agreements
Ticket #24 - Add nsTLS1 to the DS schema
Ticket #319 - ldap-agent crashes on start with signal SIGSEGV
Ticket #20 - Allow automember to work on entries that have already been added
Ticket #315 - ns-slapd exits/crashes if /var fills up
Ticket #315 - small fix to libglobs
Ticket #183 - passwordMaxFailure should lockout password one sooner - and should be configurable to avoid regressions
Coverity Fixes
Ticket #325 - logconv.pl : use of getopts to parse command line options
Ticket #183 - passwordMaxFailure should lockout password one sooner
Ticket #207 - [RFE] enable attribute that tracks when a password was last set
Ticket #214 - Adding Replication agreement should complain if required nsds5ReplicaCredentials not supplied
Ticket #337 - Improve CLEANRUV task
Ticket #356 - RFE - Track bind info
Ticket #196 - RFE: Interpret IPV6 addresses for ACIs, replication, and chaining
Ticket #218 - Make RI Plugin worked with replicated updates
Ticket 367 - Invalid chaining config triggers a disk full error and shutdown
Ticket 365 - passwords in clear text in the audit log
Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
Ticket #110 - RFE limiting root DN by host, IP, time of day, day of week
Ticket 368 - Make the cleanAllRUV task one step
Ticket #28 - MOD operations with chained delete/add get back error 53 on backend config
Ticket #369 - restore of replica ldif file on second master after deleting two records shows only 1 deletion
Update the slapi-plugin documentation on new slapi functions, and added a slapi function for checking on shutdowns
Ticket #388 - Improve replication agreement status messages
COVERITY FIXES
Coverity Fix
Ticket 366 - Change DS to purge ticket from krb cache in case of authentication error
Ticket 399 - slapi_ldap_bind() doesn't check bind results
Ticket 328 - make sure all internal search filters are properly escaped
Ticket 413 - "Server is unwilling to perform" when running ldapmodify on nsds5ReplicaStripAttrs
Ticket 403 - CLEANALLRUV feature
Ticket 407 - memory leak in dna plugin
Ticket 403 - cleanallruv coverity fixes
Misc Coverity Fixes
Ticket 407 - dna memory leak
Ticket 403 - CLEANALLRUV amendment
Ticket 403 - CLEANALLRUV - revision to last amendment
Ticket 403 - fix CLEANALLRUV regression from last commit
Ticket 429 - Add nsslapd-readonly to schema
CLEANALLRUV coverity fixes
Ticket 436 - nsds5ReplicaEnabled can be set with any invalid values.
Ticket 386 - Overconsumption of memory with large cachememsize and heavy use of ldapmodify
Ticket 450 - CLEANALLRUV task gets stuck on winsync replication agreement
Ticket 452 - automember rebuild task adds users to groups that do not match the configuration scope
Ticket 408 - create a normalized dn cache
Ticket 467 - CLEANALLRUV abort task should be able to ignore down replicas
Ticket 747 - Root DN Access Control - days allowed not working correctly
Ticket 475 - Root DN Access Control - improve value checking for config
Ticket 473 - change VERSION.sh to have console version be major.minor
Coverity issue 13091
Ticket 457 - dirsrv init script returns 0 even when few or all instances fail to start
Ticket 477 - CLEANALLRUV if there are only winsync agmts task will hang
Ticket 478 - passwordTrackUpdateTime stops working with subtree password policies
Ticket #446 - anonymous limits are being applied to directory manager
Ticket 488 - Doc: DS error log messages with typo
Ticket 486 - nsslapd-enablePlugin should not be multivalued
Ticket 468 - if pam_passthru is enabled, need to AC_CHECK_HEADERS([security/pam_appl.h])
Ticket 495 - internalModifiersname not updated by DNA plugin
Revert "Ticket 495 - internalModifiersname not updated by DNA plugin"
Ticket 495 - internalModifiersname not updated by DNA plugin
Ticket 147 - Internal Password Policy usage very inefficient
Ticket 517 - crash in DNA if no dnaMagicRegen is specified
Ticket 507 - use mutex for FrontendConfig lock instead of rwlock
Ticket 394 - modify-delete userpassword
Ticket 337 - improve CLEANRUV functionality
Coverity Fixes
Ticket 20 - Allow automember to work on entries that have already been added
Ticket 393 - Change in winSyncInterval does not take immediate effect
Ticket 216 - disable replication agreements
Ticket 395 - RFE: 389-ds shouldn't advertise in the rootDSE that we can handle a sasl mech if we really can't
Ticket 527 - ns-slapd segfaults if it cannot rename the logs
Ticket 509 - lock-free access to be->be_suffixlock
Merge branch 'ticket509'
Ticket 456 - improve entry cache sizing
Ticket 509 - lock-free access to be->be_suffixlock
Ticket 511 - allow turning off vattr lookup in search entry return
Ticket 541 - RootDN Access Control plugin is missing after upgrade
Ticket 541 - need to set plugin as off in ldif template
Ticket 534 - RFE: Add SASL mappings fallback
Ticket 534 - sasl mapping fallback
Ticket 532 - RUV is not getting updated for both Master and consumer
Ticket 534 - Add SASL mappings fallback
Ticket 534 - SASL Mapping Fallback
Ticket 539 - logconv.pl should handle microsecond timing
Ticket 471 - logconv.pl tool removes the access logs contents if "-M" is not correctly used
Ticket 552 - Adding rootdn-open-time without rootdn-close-time to RootDN Acess Control results in inconsistent configuration
Ticket 551 - Multivalued rootdn-days-allowed in RootDN Access Control plugin always results in access control violation
TIcket 419 - logconv.pl - improve memory management
Ticket 419 - logconv.pl - improve memory management
Ticket 558 - Replication - make timeout for protocol shutdown configurable
Ticket 417 - RFE - forcing passwordmustchange attribute by non-cn=directory manager
Ticket 562 - Crash when deleting suffix
Merge branch 'master' of ssh://git.fedorahosted.org/git/389/ds
Ticket 532 - RUV is not getting updated for both Master and consumer
Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
Ticket 433 - multiple bugs in start-dirsrv, stop-dirsrv, restart-dirsrv scripts
Ticket 570 - DS returns error 20 when replacing values of a multi-valued attribute (only when replication is enabled)
Ticket 528 - RFE - get rid of instance specific scripts
Coverity Fixes
Ticket 528 - RFE - get rid of instance specific scripts (part 2)
Ticket 332 - Command line perl scripts should attempt most secure connection type first
Ticket 332 - Fix usage in scripts
Ticket 332 - minor quoting issue in a few scripts.
Ticket 588 - Create MAN pages for command line scripts
Ticket 332 - wrong argument count in ldif2db
Ticket 571 - server does not accept 0 length LDAP Control sequence
Ticket 583 - dirsrv fails to start on reboot due to /var/run/dirsrv permissions
Ticket 574 - problems with dbcachesize disk space calculation
Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
Ticket 574 - problems with dbcachesize disk space calculation
Ticket 458 - RFE - Make it possible for privileges to be provided to an admin user
Ticket 611 - logconv.pl missing stats for StartTLS, LDAPI, and AUTOBIND
Ticket 622 - DS logging errors "libdb: BDB0171 seek: 2147483648: (262144 * 8192) + 0: No such file or directory
Ticket 525 - Introducing a user visible configuration variable for controlling replication retry time
Ticket 632 - 389-ds-base cannot handle Kerberos tickets with PAC
Ticket 587 - Replication error messages in the DS error logs
Ticket 458 - Need to properly check if the password admin dn is set
Ticket 628 - crash in aci evaluation
Ticket 620 - Better logging of error messages for 389-ds-base
Ticket 534 - RFE: Add SASL mappings fallback
Ticket 550 - posix winsync will not create memberuid values if group entry become posix group in the same sync interval
Ticket 631 - Replication: "Incremental update started" status message without consumer initialized
Ticket 47311 - segfault in db2ldif(trigger by a cleanallruv task)
Ticket 47304 - reinitialization of a master with a disabled agreement hangs
Ticket 47315 - filter option in fixup-memberof requires more clarification
Ticket 77 - [RFE] Add ACI support for ldapi
Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default
Ticket 205 - Fix compiler warning
Ticket 153 - use openldap's schema parser
Ticket 47299 - fix config file and server id processing
Ticket 580 - Wrong error code return when using EXTERNAL SASL and no client certificate
Fix coverity issues
Ticket 47317 - should set LDAP_OPT_X_SASL_NOCANON to LDAP_OPT_ON by default - revision
Ticket 47355 - dse.ldif doesn't replicate update to nsslapd-sasl-mapping-fallback
Ticket 511 - Revision - allow turning off vattr lookup in search entry return
Ticket 47337 - mep_pre_op: Unable to fetch origin entry
Ticket 283 - Expose slapi_eq_* API
Ticket 47340 - Deleting a separator ',' in 7-bit check plugin arguments makes the
Ticket 47326 - idl switch does not work
Merge branch 'ticket47326'
Ticket 589 - RFE - Support RFC 4527 Read Entry Controls
Ticket 47372 - make old-idl tunable
Coverity Fixes (part 1)
Coverity Fixes (Part 2)
Coverity Fixes (Part 3)
Coverity Fixes (Part 4)
Coverity Fixes (Part 5)
Ticket 47385 - DS not shutting down when disk monitoring threshold is reached
Fri Jun 7 10:41:00 2013 -0400
Ticket 47383 - connections attribute in cn=snmp,cn=monitor is counted twice
Ticket 47376 - DESC should not be empty as per RFC 2252 (ldapv3)
Ticket 47379 - DNA plugin failed to fetch replication agreement
Coverity (Part 7) + Jenkins fix
Ticket 47389 - Non-directory manager can change the individual userPassword's storage scheme
Ticket 47329 - Improve slapi_back_transaction_begin() return code when transactions are not available
Coverity Fixes
Ticket 47381 - nsslapd-db-transaction-batch-val turns to -1
Ticket 47385 - Disk Monitoring is not triggered as expected.
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket 47416 - SASL encrypted packet length exceeds maximum allowed limit
Ticket 47421 - memory leaks in set_krb5_creds
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket 47441 - Disk Monitoring not checking filesystem with logs
Ticket 47382 - Add a warning message when a connection hits the max number of threads
Ticket 47449 - deadlock after adding and deleting entries
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket 47450 - Fix compiler formatting warning errors for 32/64 bit arch
Ticket 47447 - logconv.pl man page missing -m,-M,-B,-D
Ticket 47323 - resurrected entry is not correctly indexed
Ticket 47440 - Fix compilation warnings and header files
Ticket 47440 - Fix runtime errors caused by last patch.
Ticket 47411 - Replace substring search with plain search in referint plugin
Ticket 47425 - should only call windows_update_done if repl agmt type is windows
Ticket 47426 - move compute_idletimeout out of handle_pr_read_ready
Ticket47426 - Coverity issue with last commit(move compute_idletimeout out of handle_pr_read_ready)
Ticket 47473 - setup-ds.pl doesn't lookup the "root" group correctly
Ticket 47461 - logconv.pl - Use of comma-less variable list is deprecated
Ticket 47384 - Plugin path validation returntext not set correctly
Ticket 47394 - remove-ds.pl should remove /var/lock/dirsrv
Ticket 47371 - Some updates of "passwordgraceusertime" are useless when updating "userpassword"
Ticket 47306 - execute index_add_mods only for indexed attributes
Ticket 47500 - start-dirsrv/restart-dirsrv/stop-disrv do not register with systemd correctly
Ticket 411 - [RFE] mods optimizer
Ticket 47507 - automember rebuild task not working as expected
Ticket 47512 - backend txn plugin fixup tasks should be done in a txn
Coverity fix - 11952
Ticket 47401 - report unindexed internal searches
Ticket 47520 - Fix various issues with logconv.pl
Ticket 47509 - CLEANALLRUV doesnt run across all replicas
Ticket 47509 - Cleanallruv jenkins error
Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock
Ticket 47528 - 389-ds-base built with mozldap can crash from invalid free
Ticket 47510 - 389-ds-base does not compile against MozLDAP libraries
Ticket 47532 - 1.3.1 with mozldap crashes in new operation work_q code
Ticket 47510 - Repl Sync does not compile against MozLDAP libraries
Ticket 47510 - remove unnecessary typedef
Ticket 47513 - Refine the check for @localrundir@
Ticket 47513 - Set localrundir outside of the "with-fhs" block
Ticket 47543 - Mozldap - fix compiler warnings
Ticket 47531 - Mozldap - need to rewrite sasl_io_recv
Ticket 47510 - Additional mozldap failures with Repl Sync
Ticket 47522 - Password adminstrators should be able to voilate password policy
Ticket 47491 - Update systemd service file to use PartOf directive
Ticket 47517 - memory leak in range searches and other various leaks
Ticket 47535 - Logconv.pl - RFE - add on option for a minimum etime for unindexed search stats
Ticket 47535 - update man page
Ticket 47499 - if nsslapd-cachememsize set to the number larger than
Ticket 47436 - 389-ds-base - shebang with /usr/bin/env
Coverity Issue 12033
Ticket 47538 - RFE: repl-monitor.pl plain text output, cmdline config options
Ticket 47519 - memory leaks in access control
Ticket 47368 - IPA server dirsrv RUV entry data excluded from replication
Ticket 47368 - Fix Jenkins errors
Ticket 47368 - Fix coverity issues
Ticket 47582 - agmt_count in Replica could become (PRUint64)-1
Ticket 47541 - Replication of the schema may overwrite consumer 'attributetypes' even
Ticket 47541 - Fix Jenkins errors
Ticket 47597 - Convert retro changelog plug-in to betxn
Ticket 47598 - Convert ldbm_back_seq code to be transaction aware
Ticket 47529 - Automember plug-in should treat MODRDN operations as ADD operations
Ticket 47599 - Reduce lock scope in retro changelog plug-in
Revert "Ticket 47599 - Reduce lock scope in retro changelog plug-in"
Ticket 47599 - Reduce lock scope in retro changelog plug-in
Ticket 47525 - Allow memberOf to use an alternate config area
Ticket 47525 - Fix memory leak
Ticket 47599 - fix memory leak
Ticket 47593 - Update plugin API for OTP plugin
Ticket 47457 - default nsslapd-sasl-max-buffer-size should be 2MB
Ticket 47592 - automember plugin task memory leaks
Ticket 47525 - Need to add locking around config area access
Ticket 47613 - Impossible to configure nsslapd-allowed-sasl-mechanisms
Ticket 47614 - Possible to specify invalid SASL mechanism in nsslapd-allowed-sasl-mechanisms
Ticket 47603 - Allow RI plugin to use alternate config area
Ticket 47587 - hard coded limit of 64 masters in agreement and changelog code
Ticket 47368 - fix memory leaks
Ticket 47620 - 389-ds rejects nsds5ReplicaProtocolTimeout attribute
Ticket 47622 - Automember betxnpreoperation - transaction not aborted when group entry does not exist
Ticket 47627 - changelog iteration should ignore cleaned rids when getting the minCSN
Ticket 47601 - Plugin library path validation prevents intentional loading of out-of-tree modules
Ticket 47617 - allow configuring changelog trim interval
Ticket 47613 - Issues setting allowed mechanisms
Ticket 47603 - should not modify pre op entry during config validation
Ticket 47620 - Config value validation improvement
Ticket 47620 - Fix logically dead code.
Ticket 47627 - Fix replication logging
Ticket 47620 - Fix dereferenced NULL pointer in agmtlist_modify_callback()
Ticket 47620 - Fix missing left bracket
Ticket 47653 - Need a way to allow users to create entries assigned to themselves
Ticket 47654 - Cleanup old memory leaks reported from valgrind
Ticket 47654 - fix double free
Ticket 408 - Fix crash when disabling/enabling the setting
Ticket 47620 - Unable to delete protocol timeout attribute
Ticket 47641 - 7-bit check plugin not checking MODRDN operation
Ticket 47638 - Overflow in nsslapd-disk-monitoring-threshold on 32bit platform
Ticket 47618 - Enable normalized DN cache by default
Ticket 47437 - Some attributes in cn=config should not be multivalued
Ticket 47615 - Failed to compile the DS 389 1.3.2.3 version against Berkeley DB 4.2 version
Ticket 47552 - logconv: unindexed report should list bind dn
Ticket 525 - Replication retry time attributes cannot be added
Ticket 47453 - configure SASL/GSSAPI/Kerberos without server restart
Ticket 47727 - Updating nsds5ReplicaHost attribute in a replication agreement fails with error 53
Ticket 47637 - rsa_null_sha should not be enabled by default
Ticket 47729 - Directory Server crashes if shutdown during a replication initialization
Ticket 47700 - Fix compiler warnings
Ticket 47722 - rsearch filter error on any search filter
Ticket47722 - Fixed filter not correctly identified
Ticket 47740 - Coverity Fixes (Mark - part 1)
Ticket 47740 - Fix sync plugin resource leaks
Ticket 47640 - Fix coverity issues - part 3
Ticket 47740 - Fix coverity erorrs - Part 4
Ticket 47740 - Fix coverity issues - Part 5
Ticket 47740 - Fix coverity issues: null deferences - Part 6
Ticket 47740 - Crash caused by changes to certmap.c
Revert "Ticket 47700 - Fix compiler warnings"
Ticket 47743 - Memory leak with proxy auth control
Ticket 47451 - add/enable/disable/remove plugins without server restart
Ticket 47740 - Fix coverity issues(part 7)
Ticket 47756 - Improve import logging and abort processing
Ticket 47759 - Crash in replication when server is under write load
Ticket 47655 - Improve replication total update logging
Ticket 47766 - Tombstone purging can crash the server if the backend is stopped/disabled
Ticket 47767 - Nested tombstones become orphaned after purge
Ticket 47771 - Performing deletes during tombstone purging results in operation errors
Ticket 47782 - Parent numbordinate count can be incorrectly updated if an error occurs
Ticket 47779 - Part of DNA shared configuration is deleted after server restart
Ticket 47771 - Move parentsdn initialization to avoid crash
Ticket 477779 - Need to lock server list when removing list
Ticket 47792 - code cleanup
Ticket 47792 - database plugins need a way to call betxn
Ticket 47793 - Server crashes if uniqueMember is invalid syntax and memberOf
Ticket 47756 - fix coverity issues
Ticket 47772 - fix coverity issue
Ticket 47451 - Remove old code from linked attr plugin
Ticket 47670 - Aci warnings in error log
Ticket 47636 - errorlog-level 16384 is listed as 0 in cn=config
Ticket 47713 - Logconv.pl with an empty access log gives lots of errors
Ticket 47446 - logconv.pl memory continually grows
Ticket 47791 - Negative value of nsSaslMapPriority is not
Ticket 47644 - Managed Entry Plugin - transaction not aborted upon failure to create managed entry
Ticket 47466 - Fix coverity issue
Ticket 47813 - managed entry plugin fails to update member
Ticket 47602 - txn commit being performed too early
Ticket 47815 - Add operations rejected by betxn plugins remain in cache
Ticket 47810 - investigate betxn plugins to ensure they
Ticket 47817 - The error result text message should be obtained just prior to sending result
Ticket 47827 - online import crashes server if using verbose error logging
Ticket 47815 - add lib389 test
Ticket 47827 - Fix coverity issue 12695
Ticket 47779 - Potential deadlock after startup if a dna configuration change is made
Ticket 47781 - Server deadlock if online import started while
Ticket 47781 - Add CI test
Ticket 47781 - CI test - use predefined property name variables
Ticket 47654 - Fix regression (deadlock/crash)
Ticket 47858 - Internal searches using OP_FLAG_REVERSE_CANDIDATE_ORDER can crash the server
Ticket 47819 - Improve tombstone purging performance
Ticket 47855 - clear tmp directory at the start of each test
Ticket 47855 - Fix previous commit
Ticket 47853 - client hangs in add if memberof fails
Ticket 437853 - Missing newline at end of the error log messages in memberof
Ticket 47710 - Missing warning for invalid replica backoff configuration
Ticket 47790 - Integer config attributes accept invalid
Ticket 47812 - logconv.pl missing -U option from usage
Ticket 47861 - Certain schema files are not replaced during upgrade
Ticket 47819 - Fix memory leak
Ticket 47862 - repl-monitor fails to convert "*" to default values
Ticket 47900 - Adding an entry with an invalid password as rootDN is incorrectly rejected
Ticket 47900 - Server fails to start if password admin is set
Ticket 47892 - Fix remaining compiler warnings
Ticket 47937 - Crash in entry_add_present_values_wsi_multi_valued
Ticket 47953 - Should not check aci syntax when deleting an aci
Ticket 47451 - Need to unregister tasks created by plugins
Ticket 47952 - PasswordAdminDN attribute is not properly returned to client
Ticket 47958 - Memory leak in password admin if the admin entry does not exist
Ticket 47950 - Bind DN tracking unable to write to internalModifiersName without special permissions
Ticket 47810 - RI plugin does not return result code if update fails
Ticket 47963 - RFE - memberOf - add option to skip nested
Ticket 47963 - skip nested groups breaks memberof fixup task
Ticket 47451 - Running a plugin task can crash the server
Ticket 47967 - cos_cache_build_definition_list does not stop during server shutdown
Ticket 47969 - COS memory leak when rebuilding the cache
Ticket 47970 - Account lockout attributes incorrectly updated after failed SASL Bind
Ticket 47970 - add lib389 testcase
Ticket 47525 - Crash if setting invalid plugin config area for MemberOf Plugin
Ticket 47949 - logconv.pl -- support parsing/showing/reporting different protocol versions
Ticket 47969 - Fix coverity issue
Ticket 47965 - Fix coverity issues (2014/11/24)
Ticket 47636 - Error log levels not displayed correctly
Ticket 47722 - Using the filter file does not work
Ticket 47750 - Need to refresh cache entry after called betxn postop plugins
Ticket 47451 - Dynamic Plugin - various fixes
Ticket 47451 - Fix jenkins errors
Ticket 47451 - Add Dynamic Plugin CI Suite
Ticket 47750 - During delete operation do not refresh cache entry if it is a tombstone
Ticket 47451 - Dynamic plugins - fixed thread synchronization
Ticket 47980 - Nested COS definitions can be incorrectly
Ticket 47981 - COS cache doesn't properly mark vattr cache as
Ticket 47973 - During schema reload sometimes the search returns no results
Ticket 47617 - replication changelog trimming setting validation
Ticket 47807 - SLAPI_REQUESTOR_ISROOT not set for extended operation plugins
Ticket 47462 - Stop using DES in the reversible password
Ticket 47738 - use PL_strcasestr instead of strcasestr
Ticket 47963 - memberof skip nested groups breaks the plugin
Ticket 47451 - dynamic plugins - fix crash caused by invalid
Ticket 48027 - revise the rootdn plugin configuration validation
Ticket 48003 - build "suite" framework
Ticket 48003 - add template scripts
Bug 1199675 - CVE-2014-8112 CVE-2014-8105 389-ds-base: various flaws [fedora-all]
Ticket 48132 - modrdn crashes server (invalid read/writes)
Ticket 48151 - Improve CleanAllRUV logging
Ticket 48151 - fix coverity issues
Ticket 48177 - dynamic plugins should not return an error when modifying a critical plugin
Ticket 48158 - Remove cleanAllRUV task limit of 4
Ticket 48158 - cleanAllRUV task limit not being enforced correctly
Ticket 47828 - fix testcase "import" issue
Ticket 47753 - Fix testecase
Ticket 48206 - Crash during retro changelog trimming
Ticket 47810 - memberOf plugin not properly rejecting updates
Ticket 48215 - verify_db.pl doesn't verify DB specified by -a option
Ticket 48215 - update dbverify usage
Ticket 48215 - update dbverify usage in main.c
Ticket 47931 - memberOf & retrocl deadlocks
Ticket 47931 - Fix coverity issues
Ticket 48242 - Improve dirsrvtests/create_test.py script
Ticket 48248 - Use LDIF building function in basic test suite
Ticket 47831 - remove debug logging from retro cl
Ticket 47931 - lib389 test - memberof and retrocl deadlock
Ticket 48273 - Update lib389 tests for new valgrind functions
Ticket 48266 - Online init crashes consumer
Ticket 48284 - free entry when internal add fails
Ticket 48266 - do not free repl keep alive entry on error
Ticket 48208 - CleanAllRUV should completely purge changelog
Ticket 48325 - Replica promotion leaves RUV out of order
Ticket 48325 - Add lib389 test script
Matthew Via (1):
Ticket #47428 - Memory leak in 389-ds-base 1.2.11.15
Nathan Kinder (212):
Bug 549554 - Trim single-valued attributes before sending to AD
Improve search for pcre header file
Bug 434735 - Allow SASL ANONYMOUS mech to work
Bug 570912 - Avoid selinux context conflict with httpd
Allow instance name to be parsed from start-slapd
Add managed entries plug-in
Bug 572355 - Label instance files and ports during upgrade.
Bug 578863 - Password modify extop needs to send referrals on replicas
Bug 584156 - Remove ldapi socket file during upgrade
Fix rsearch usage of name files for random filters
Bug 584497 - Allow DNA plugin to set same value on multiple attributes
Add replication session hooks
Correct function prototype for repl session hook
Bug 592389 - Set anonymous resource limits properly
Bug 601433 - Add man pages for start-dirsrv and related commands
Bug 604263 - Fix memory leak when password change is rejected
Bug 612242 - membership change on DS does not show on AD
Bug 613833 - Allow dirsrv_t to bind to rpc ports
Bug 594745 - Get rid of dirsrv_lib_t label
Bug 620927 - Allow multiple membership attributes in memberof plugin
Bug 612264 - ACI issue with (targetattr='userPassword')
Bug 630098 - fix coverity Defect Type: Code maintainability issues
Bug 630098 - fix coverity Defect Type: Code maintainability issues
Bug 630093 - (cov#15511) Don't use unintialized search_results in refint plugin
Bug 630093 - (cov#15518) Need to intialize fd in ldbm2ldif code
Bug 630096 - (cov#11778) check return value of ldap_parse_result
Bug 630096 - (cov#15446) check return value of ber_scanf()
Bug 630096 - (cov#15449,15450) Check return value of stat()
Bug 630096 - (cov#15448) Check return value of cache_replace()
Bug 630096 - (cov#15447) - Check return value of idl_append_extend()
Bug 630090 - (cov#11974) Remove unused ACL functions
Bug 630090 - (cov#15445) Fix illegal free in archive code
Bug 630094 - (cov#11818) Fix unreachable return in snmp subagent
Bug 630094 - (cov#15451) Get rid of unreachable free statements
Bug 630094 - (cov#15452) Remove NULL checking for op_string
Bug 630094 - (cov#15453) Eliminate NULL check for local_newentry
Bug 630094 - (cov#15454) Fix deadcode issue in mapping tree code
Bug 630094 - (cov#15455) Remove deadcode in attr_index_config()
Bug 630094 - (cov#15456) Remove NULL check for srdn in import code
Bug 630094 - (cov#15457) Remove deadcode in import code
Bug 630094 - (cov#15458) Fix deadcode issue in moddn code
Bug 630094 - (cov#15459) Remove NULL check for srdn in ldif2ldbm code
Bug 630094 - (cov#15520) Fix unreachable code issue if perfctrs code
Bug 630094 - (cov#15581) Add missing breaks in agt_mopen_stats()
Bug 690090 - (cov#11974) Remove additional unused ACL functions
Bug 630091 - (cov#15512) Fix usage of uninitialized bervals
Bug 630091 - (cov#15513) Fix usage of uninitialized bervals
Bug 630091 - (cov#15514) Initialize DBT in entryrdn_get_parent()
Bug 630091 - (cov#15515) Use of uninitialized array in index config code
Bug 630091 - (cov#15516,15517) Initialize pointers before attempting to free
Bug 630091 - (cov#15519) Initialize bervals in search_easter_egg()
Bug 630091 - (cov#15582) Free of uninitialized pointer in attr_index_config()
Bug 630097 - (cov#11933) Fix NULL dereference in schema code
Bug 630097 - (cov#11938) NULL dereference in mmldif
Bug 630097 - (cov#11946) NULL dereference in ResHashCreate()
Bug 630097 - (cov#11964) Remove dead code from libaccess
Bug 630097 - (cov#12143) NULL dereference in cos cache code
Bug 630097 - (cov#12148) NULL dereference in ruvInit()
Bug 630097 - (cov#12182,12183) NULL dereference in import code
Bug 630097 - (cov#15460) NULL deference in ACL URL code
Bug 630097 - (cov#15461) Remove unnecessary NULL check in DNA
Bug 630097 - (cov#15462) NULL dereference in mep_modrdn_post_op()
Bug 630097 - (cov#15463) Remove NULL check in referint plugin
Bug 630097 - (cov#15464) NULL dereference in repl code
Bug 630097 - (cov#15465) Null dereference in USN code
Bug 630097 - (cov#15473) NULL dereference in ResHashCreate()
Bug 630097 - (cov#15505) NULL dereference in memberOf code
Bug 630097 - (cov#15506) NULL dereference in dblayer code
Bug 630097 - (cov#15507,15508) NULL dereference in entryrdn code
Bug 630097 - (cov#15509) NULL dereference in idsktune
Bug 630097 - (cov#11938) NULL dereference in mmldif
Bug 630097 - (cov#15477) NULL dereference in ACL plug-in code
Bug 630091 - (cov#12209) Use of uninitialized pointer in libaccess
Bug 630092 - (cov#12116) Resource leak in ldclt code
Bug 630092 - (cov#12105) Resource leak in pwdscheme config code
Bug 630092 - (cov#12068) Resource leak in certmap code
Bug 630091 - (cov#11973) Array overrun in libaccess
Bug 522055 - Scope check for managed attribute fails
Bug 625335 - Self-write aci has permission to invalid attribute
Bug 631993 - Log authzid when proxy auth control is used
Cov #16300 - Unused variable in account policy plugin
Bug 544321 - remove-ds.pl should not throw error unlabelling port
Bug 555955 - Allow CoS values to be merged
Bug 643937 - Initialize replication version flags
Bug 305131 - Allow empty modify operation
Bug 619633 - Make attribute uniqueness obey requiredObjectClass
Bug 619623 - attr-unique-plugin ignores requiredObjectClass on modrdn operations
Bug 189985 - Improve attribute uniqueness error message
Bug 647932 - multiple memberOf configuration adding memberOf where there is no member
Bug 521088 - DNA should check ACLs before getting a value from the range
Bug 635009 - Add one-way AD sync capability
Bump VERSION.sh to 1.2.8.a1
Bug 648949 - Move selinux policy into base OS
Bug 648949 - Update configure
Roll back VERSION.sh for 1.2.7 release
Bug 625950 - hash nsslapd-rootpw changes in audit log
Bug 656392 - Remove calls to ber_err_print()
Bug 656515 - Allow Name and Optional UID syntax for grouping attributes
Bug 197886 - Avoid overflow of UUID generator
Bug 658312 - Allow mapped attribute types to be quoted
Bug 197886 - Initialize return value for UUID generation code
Bug 658309 - Process escaped characters in managed entry mappings
Bug 659456 - Incorrect usage of ber_printf() in winsync code
Bug 641944 - Don't normalize non-DN RDN values
Bug 658312 - Invalid free in Managed Entry plug-in
Bug 661792 - Valid managed entry config rejected
Bug 588791 - Allow anonymous rootDSE access only
Bug 606439 - Creating server instance with LDAPI takes too long
Bug 632670 - Chain-on-update logs managed-entries-plugin errors
Bug 621008 - parsing purge RUV from changelog at startup fails
Bug 663191 - Don't use $USER in DSCreate.pm
Bug 663597 - Memory leaks in normalization code
Bug 659131 - Incorrect RDN values added with multi-valued RDN
Bug 661102 - Rename of managed entries not handled correctly
Bug 193297 - Call pre-bind plug-ins for all SASL bind steps
Bug 201652 - LDAPv2 bind with expired password doesn't unbind correctly
Bug 470576 - Migration could do addition checks before commiting actions
Bug 481195 - Missing op type in log when password change required
Bug 509897 - Validate dnaScope to ensure it is a legal DN
Bug 505722 - Allow ntGroup to have mail attribute present
Bug 543633 - replication problems if supplier is killed under update load
Bug 671033 - range sharing between server breaks with SASL/GSSAPI auth
Bug 527912 - setup-ds.pl appears to hang when DNS is unreachable
Bug 252249 - Add pkg-config file for plug-in developers
Bug 670616 - Allow SSF to be set for local (ldapi) connections
Bug 668862 - init scripts return wrong error code
Bug 674430 - Improve error messages for attribute uniqueness
Bug 675853 - dirsrv crash segfault in need_new_pw()
Bug 678646 - Ignore tombstone operations in managed entry plug-in
Bug 671199 - Don't allow other to write to rundir
Bug 672468 - Don't use empty path elements in LD_LIBRARY_PATH
Bug 674852 - crash in ldap-agent when using OpenLDAP
Bug 681345 - setup-ds.pl should set SuiteSpotGroup automatically
Bug 680558 - Winsync plugin fails to restrain itself to the configured subtree
Bug 504803 - Allow maxlogsize to be set if logmaxdiskspace is -1
Bug 687974 - (cov#10715) Fix Coverity uninitialized variables issues
Bug 688341 - (cov#10709) Fix Coverity code maintainability issues
Bug 688341 - (cov#10708) Fix Coverity code maintainability issues
Bug 688341 - (cov#10706,10707) Fix Coverity code maintainability issues
Bug 688341 - (cov#10704,10705) Fix Coverity code maintainability issues
Bug 688341 - (cov#10703) Fix Coverity code maintainability issues
Bug 688341 - (cov#10702) Fix Coverity code maintainability issues
Bug 688341 - (cov#10709) Fix Coverity code maintainability issues
Bug 689537 - (cov#10699) Fix Coverity NULL pointer dereferences
Bug 689537 - (cov#10610) Fix Coverity NULL pointer dereferences
Bug 689537 - (cov#10608) Fix Coverity NULL pointer dereferences
Bug 689952 - (cov#10581) Incorrect bit check in replication connection code
Bug 690526 - (cov#10734) Double free in dse_add()
Bug 690649 - (cov#10731) Use of free'd pointer in indexing code
Bug 690882 - (cov#10571) Incorrect sizeof use in uuid code
Bug 690882 - (cov#10636,10637) Useless comparison in attrcrypt
Bug 690882 - (cov#10703) Incorrect sizeof use in vattr code
Bug 690882 - (cov#10572,10710) Incorrect sizeof use in uuid code
Bug 691574 - (cov#10579) Check return value of ber_scanf() in sort code
Bug 691574 - (cov#10577) Check return types when adding RDN CSNs
Bug 691574 - (cov#10573) check return value in GER code
Bug 691574 - (cov#10575) Check return value of ldap_get_option
Bug 691574 - (cov#10573) Fix syntax error
Bug 693868 - Add managed entry config during in-place upgrade
Add Auto Membership Plug-in
Bug 698428 - Make auto membership use Slapi_DN for DN comparisons
Bug 695779 - windows sync can lose old values when a new value is added
Bug 700557 - Linked attrs callbacks access free'd pointers after close
Bug 700557 - Leak at shutdown in DNA plug-in
Bug 703304 - Auto membership alternate config area should override default area
Bug 703304 - Auto membership alternate config area should override default area
Bug 703530 - Allow Managed Entry config to be relocated
Bug 697961 - memberOf needs to be triggered by internal operations
Bug 710377 - Import with chain-on-update crashes ns-slapd
Split automember regex rules into separate entries
Bug 713209 - Update sudo schema
Bug 691313 - Need TLS/SSL error messages in repl status and errors log
Bug 723937 - Slapi_Counter API broken on 32-bit F15
Bug 725743 - Make memberOf use PRMonitor for it's operation lock
Bug 729717 - Fatal error messages when syncing deletes from AD
Bug 728510 - Run dirsync after sending updates to AD
Bug 730387 - Add slapi_rwlock API and use POSIX rwlocks
Bug 611438 - Add Account Usability Control support
Bug 728592 - Allow ns-slapd to start with an invalid server cert
Bug 732541 - Ignore error 32 when adding automember config
Bug 722292 - Entries in DS are not updated properly when using WinSync API
Bug 722292 - (cov#11030) Leak of mapped_sdn in winsync rename code
Bug 735114 - renaming a managed entry does not update mepmanagedby
Bug 739172 - Allow separate fractional attrs for incremental and total protocols
Bug 743966 - Compiler warnings in account usability plugin
Bug 744946 - (cov#11046) NULL dereference in IDL code
Bug 752155 - Use restorecon after creating init script lock file
Ticket 284 - Remove unnecessary SNMP MIB files
ticket 304 - Fix kernel version checking in dsktune
ticket 211 - Use of uninitialized variables in ldbm_back_modify()
ticket 181 - Allow PAM passthru plug-in to have multiple config entries
coverity 12563 Read from pointer after free (fix 2)
Ticket 211 - Avoid preop range requests non-DNA operations
Ticket #503 - Improve AD version in winsync log message
Ticket 549 - DNA plugin no longer reports additional info when range is depleted
Ticket 556 - Don't overwrite certmap.conf during upgrade
Add make rpms build target
Allow rpm builds to be run without configure
Add git commit hash to developer rpm build names
Add hardened build option and correct changelog dates
Revert "Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly"
Ticket 449 - Allow macro aci keywords to be case-insensitive
Ticket 47539 - Disabling DNA plug-in throws error 53
Ticket 47513 - tmpfiles.d references /var/lock when they should reference /run/lock
Ticket 47565 - Content Sync update file needs extensibleObject
Ticket 47569 - ACIs do not allow attribute subtypes in targetattr keyword
Ticket 47569 - Fix build warnings
Ticket 47588 - Compiler warnings building on F19
Ticket 47611 - Add script to build patched RPMs
Ticket 47525 - Don't modify preop entry in memberOf config
Ticket 47752 - Don't add unhashed password mod if we don't have an unhashed value
Ticket 47753 - Add switch to disable pre-hashed password checking
Noriko Hosoi (728):
544089 - Referential Integrity Plugin does not take into account the attribute
557224 - subtree rename breaks the referential integrity plug-in
247413 - Incorrect error on multiple identical value add
559016 - Attempting to rename suffix returns inappropriate errors
555577 - Syntax validation fails for "ou=NetscapeRoot" tree
Undo - 555577 - Syntax validation fails for "ou=NetscapeRoot" tree
560827 - Admin Server templates: DistinguishName validation fails
548535 - memory leak in attrcrypt
563365 - Error handling problems in the backend functions
565664 - Incorrect parameter for CACHE_RETURN()
565987 - redhat-ds-base fails to build due to undefined struct
527848 - make sure db upgrade to 4.7 and later works correctly
539618 - Replication bulk import reports Invalid read/write
567370 - dncache: assertion failure in id2entry_delete
548115 - memory leak in schema reload
555970 - missing read lock in the combination of cos and nsview
539618 - Replication bulk import reports Invalid read/write
570667 - MMR: simultaneous total updates on the masters cause
Merge branch '547503'
Revert "Merge branch '547503'"
Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external
199923 - subtree search fails to find items under a db
570107 - The import of LDIFs with base-64 encoded DNs fails,
572649 - DS8.2 crashes on RHEL 4 (corresponding to bob, ber_2 test case)
573060 - DN normalizer: ESC HEX HEX is not normalized (
573896 - initializing subtree with invalid syntax crashes ns-slapd
515805 - Stop "initialize Database" crashes the server
548533 - memory leak in Repl_5_Inc_Protocol_new
Fixing a syntax error
Update to New DN Format
585905 - ACL with targattrfilters error crashes the server
574167 - An escaped space at the end of the RDN value is not
590931 - rhds81 import - hardcoded pages_limit for nsslapd-import-cache-autosize
591336 - Implementing upgrade DN format tool
593453 - Creating password policy with ns-newpolicy.pl on Replicated
593110 - backup-restore does not ALWAYS work
593899 - adding specific ACI causes very large mem allocate request
588867 - entryusn plugin fails on solaris
593899 - adding specific ACI causes very large mem allocate request
595893 - Base DN in SASL mapping is not normalized
511112 - Password history limited to 25 values
597375 - Deleting LDBM database causes backup/restore problem
574101 - MODRDN request never returns - possible deadlock
606920 - anonymous resource limit - nstimelimit -
605827 - In-place upgrade: upgrade dn format should not run in setup-ds-admin.pl
578296 - Attribute type entrydn needs to be added when subtree
609256 - Selinux: pwdhash fails if called via Admin Server CGI
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
609255 - fix coverity Defect Type: Memory - illegal accesses issues
616618 - 389 v1.2.5 accepts 2 identical entries with different DN formats
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
610281 - fix coverity Defect Type: Control flow issues
616608 - SIGBUS in RDN index reads on platforms with strict alignments
619595 - Upgrading sub suffix under non-normalized suffix disappears
513166 - Simple Paged result doesn't provide the server's estimate
621928 - Unable to enable replica (rdn problem?) on 1.2.6 rc6
Bug 194531 - db2bak is too noisy
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622628 - fix coverity Defect Type: Integer handling issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 622903 - fix coverity Defect Type: Code maintainability issues
Bug 623118 - Simplepaged results going in infinite loop
Bug 614511 - fix coverity Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 619122 - fix coverity Defect Type: Resource leaks issues CID 11975 - 12051
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 617630 - fix coverity Defect Type: Resource leaks issues CID 12052 - 12093
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 616500 - fix coverity Defect Type: Resource leaks issues CID 12094 - 12136
Bug 614511 - fix coverify Defect Type: Null pointer dereferences issues 11846 - 11891
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892 - 11939
Bug 613056 - fix coverify Defect Type: Null pointer dereferences issues 11892
Bug 616500 - fix coverity Defect Type: Resource leaks issues
Bug 623507 - fix coverity Defect Type: Incorrect expression issues
Bug 623507 - fix coverity Defect Type: Incorrect expression issues
Bug 613056 - fix coverify Defect Type: Null pointer dereferences
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 610119 - fix coverify Defect Type: Null pointer dereferences issues 12167 - 12199
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Bug 611790 - fix coverify Defect Type: Null pointer dereferences issues 11940 - 12166
Removed redundant code in agmt_new_from_entry
Bug 617630 - fix coverify Defect Type: Resource leaks issues CID 12052 - 12093
Bug 628300 - DN is not normalized in dn/entry cache when an entry is added, entrydn is not present in search results
Bug 531642 - EntryUSN: RFE: a configuration option to make entryusn "global"
Bug 627738 - The cn=monitor statistics entries for the dnentry cache do not change or change very rarely
DN normalizer should check the invalid type
Bug 627738 - The cn=monitor statistics entries for the dnentry cache
Bug 629710 - escape_string does not check '\<HEX><HEX>'
agmtlist_shutdown (repl5_agmtlist.c) had an illegal access defect.
Bug 633168 - Share backend dbEnv with the replication changelog
Bug 633168 - Share backend dbEnv with the replication changelog
Bug 631862 - crash - delete entries not in cache + referint
Bug 625014 - SubTree Renames: ModRDN operation fails and the server hangs if the entry is moved to "under" the same DN.
Bug 558099 - Enhancement request: Log more information about the search result being a paged one
Bug 635987 - Incorrect sub scope search result with
Bug 606920 - anonymous resource limit- nstimelimit -
Bug 635987 - Incorrect sub scope search result with ACL containing ldap:///self
Bug 639289 - Adding a new CN entry with UpperCase UTF-8 Character
Bug 640027 - Naming attribute with a special char sequence parsing bug
Bug 640854 - changelog db: _cl5WriteOperation: failed to
Bug 637852 - sasl_io_start_packet: failed - read only 3 bytes
Bug 586966 - Sample update script has syntax errors
Bug 586973 - Sample update ldif points to non-existent directory
Bug 602456 - Allow to add any cn=config attributes;
Bug 244229 - targetattr not verified against schema when setting an aci
Bug 643532 - Incorrect DNs sometimes returned on searches
Bug 592397 - Upgrade tool dn2rdn: it does not clean up
Bug 645061 - Upgrade: 06inetorgperson.ldif and 05rfc4524.ldif
Bug 629681 - Retro Changelog trimming does not behave as expected
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 644608 - RHDS 8.1->8.2 upgrade fails to properly migrate ACIs
Bug 638773 - permissions too loose on pid and lock files
Bug 491733 - dbtest crashes
Bug 329751 - "nested" filtered roles searches candidates more
Bug 567282 - server can not abandon searchRequest of "simple paged results"
Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
Bug 651571 - When attrcrypt is on, entrydn is stored in the backend db
Bug 661918 - 389-ds MMR plugin's changelogdb path logic is incorrect
Bug 182507 - clear-password mod from replica is discarded before changelogged
Bug 602456 - Allow to add any cn=config attributes;
Bug 489379 - passwordExpirationTime in entry being added
Bug 663484 - Entry usn plugin fails to properly tag entries on initialization
Bug 664563 - GER: ger for non-present entry is not correct
Bug 653007 - db2ldif export of clear text passwords lacks storage scheme
Bug 667488 - Cannot recreate numsubordinates index with db2index
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 615100 - log rotationinfo always recreated at startup,
Bug 624442 - MMR: duplicate replica ID
Bug 669205 - db2bak: backed up changelog should include RUVs
Bug 616850 - ldapmodify failed to reject the replace operation
Bug 627993 - Inconsistent storage of password expiry times
Bug 627993 - Inconsistent storage of password expiry times
dn2rdn should respect the DB version info
Bug 646381 - Faulty password for nsmultiplexorcredentials does not give any error message in logs
Bug 624547 - attrcrypt should query the given slot/token for
Bug 668619 - slapd stops responding
Bug 151705 - Need to update Console Cipher Preferences with new ciphers
Bug 615052 - intrinsics and 64-bit atomics code fails to compile
Bug 616213 - insufficient stack size for HP-UX on PA-RISC
Bug 675265 - preventryusn gets added to entries on a failed delete
Bug 604881 - admin server log files have incorrect permissions/ownerships
Bug 676053 - export task followed by import task causes cache assertion
Bug 676053 - export task followed by import task causes cache assertion
Bug 676053 - export task followed by import task causes cache assertion
Bug 450016 - RFE- Console display values in KB/MB/GB
Cancelling commit aef19508c4f618285116d2068655183658f564d9
Bug 625424 - repl-monitor.pl doesn't work in hub node
Bug 679978 - modifying attr value crashes the server, which is supposed to
Bug 681015 - RFE: allow fine grained password policy duration attributes in days, hours, minutes, as well
Bug 668909 - Can't modify replication agreement in some cases
Bug 684996 - Exported tombstone cannot be imported correctly
Bug 681015 - RFE: allow fine grained password policy duration attributes in days, hours, minutes, as well
Bug 689866 - ns-newpwpolicy.pl needs to use the new DN format
Bug 690955 - Mrclone fails due to the replica generation id mismatch
Bug 696407 - If an entry with a mixed case RDN is turned to be
Bug 697027 - 1 - minor memory leaks found by Valgrind + TET
Bug 697027 - 2 - minor memory leaks found by Valgrind + TET
Bug 697027 - 3 - minor memory leaks found by Valgrind + TET
Bug 697027 - 4 - minor memory leaks found by Valgrind + TET
Bug 697027 - 5 - minor memory leaks found by Valgrind + TET
Bug 697027 - 6 - minor memory leaks found by Valgrind + TET
Bug 697027 - 7 - minor memory leaks found by Valgrind + TET
Bug 697027 - 8 - minor memory leaks found by Valgrind + TET
Bug 697027 - 9 - minor memory leaks found by Valgrind + TET
Bug 697027 - 10 - minor memory leaks found by Valgrind + TET
Bug 697027 - 11 - minor memory leaks found by Valgrind + TET
Bug 697027 - 12 - minor memory leaks found by Valgrind + TET
Bug 697027 - 13 - minor memory leaks found by Valgrind + TET
Bug 697027 - 14 - minor memory leaks found by Valgrind + TET
Bug 697027 - 15 - minor memory leaks found by Valgrind + TET
Bug 697027 - 16 - minor memory leaks found by Valgrind + TET
Bug 697027 - 3 - minor memory leaks found by Valgrind + TET
Bug 697027 - 3 - minor memory leaks found by Valgrind + TET
Bug 700215 - ldclt core dumps
Bug 668619 - slapd stops responding
Bug 709826 - Memory leak: when extra referrals configured
Bug 706179 - DS can not restart after create a new objectClass has entryusn attribute
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 711679 - unresponsive LDAP service when deleting vlv on replica
Bug 711679 - unresponsive LDAP service when deleting vlv on replica
Bug 718303 - Intensive updates on masters could break the consumer's cache
Merge branch '718303'
Bug 719069 - clean up compiler warnings in 389-ds-base 1.2.9
Bug 712855 - Directory Server 8.2 logs "Netscape Portable
Bug 663752 - Cert renewal for attrcrypt and encchangelog
Bug 732153 - subtree and user account lockout policies implemented?
Introducing an environment variable USE_VALGRIND to clean up the entry cache and dn cache on exit.
Bug 744945 - nsslapd-counters attribute value cannot be set to "off"
Keep unhashed password psuedo-attribute in the adding entry
Reduce the number of DN normalization
Bug 745259 - Incorrect entryUSN index under high load
Bug 750622 - Fix Coverity (11104) Resource leak:
Bug 750624 - Fix Coverity (11053) Explicit null dereferenced:
Bug 750625 - Fix Coverity (11066) Unused pointer value
Bug 750625 - Fix Coverity (11065) Uninitialized pointer read
Bug 750625 - Fix Coverity (11064) Dereference before null check
Bug 750625 - Fix Coverity (11061) Resource leak
Bug 750625 - Fix Coverity (11060) Dereference null return value
Bug 750625 - Fix Coverity (11058, 11059) Dereference null return value
Bug 750625 - Fix Coverity (11057) Dereference null return value
Bug 750625 - Fix Coverity (11055) Explicit null dereferenced
Bug 750625 - Fix Coverity (11054) Dereference after null check
Bug 750625 - Fix Coverity (11117) Uninitialized pointer read
Bug 750625 - Fix Coverity (11116) Uninitialized pointer read
Bug 750625 - Fix Coverity (11114, 11115) Uninitialized value use
Bug 750625 - Fix Coverity (11113) Uninitialized pointer read
Bug 750625 - Fix Coverity (11112) Uninitialized pointer read
Bug 750625 - Fix Coverity (11109, 11110, 11111) Uninitialized pointer read
Bug 750625 - Fix Coverity (11108) Sizeof not portable
Bug 750625 - Fix Coverity (11107) Dereference before null check
Bug 750625 - Fix Coverity (11096) Explicit null dereferenced
Bug 750625 - Fix Coverity (11095) Explicit null dereferenced
Bug 750625 - Fix Coverity (11094) Dereference after null check
Bug 750625 - Fix Coverity (11091) Unchecked return value
Bug 750625 - Fix Coverity (11055-2) Explicit null dereferenced
Bug 750625 - Fix Coverity (11062) Resource leak
Bug 750625 - Fix Coverity (11066-2) Unused pointer value
Bug 750625 - Fix Coverity (12195) Dereference after null check
Bug 750625 - Fix Coverity (12196) Dereference before null check
Bug 750625 - Fix Coverity (11066-3) Unused pointer value
Bug 745259 - Incorrect entryUSN index under high load in
Trac Ticket 2 - If node entries are tombstone'd,
Trac Ticket 2 - If node entries are tombstone'd,
Trac Ticket 26 - Please support setting
Trac Ticket 75 - Unconfigure plugin opperations are being called.
Trac Ticket 168 - minssf should not apply to rootdse
Trac Ticket #18 - Data inconsitency during replication
Trac Ticket #52 - FQDN set to nsslapd-listenhost
Trac Ticket 139 - eliminate the use of char *dn in favor of Slapi_DN *dn
Trac Ticket 35 - Log not clear enough on schema errors
Trac Ticket #274 - Reindexing entryrdn fails if
Trac Ticket #275 - Invalid read reported by valgrind
Trac Ticket 51 - memory leaks in 389-ds-base-1.2.8.2-1.el5?
Trac Ticket #27 - SASL/PLAIN binds do not work
Trac Ticket #84 - 389 Directory Server Unnecessary Checkpoints
Trac Ticket #169 - allow 389 to use db5
Trac Ticket #34 - remove-ds.pl does not remove everything
Trac Ticket #26 - Please support setting defaultNamingContext in the rootdse.
Trac Ticket #298 - crash when replicating orphaned tombstone entry
Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
Trac Ticket #290 - server hangs during shutdown if betxn pre/post op fails
Minor bug fix introcuded by commit 69c9f3bf7dd9fe2cadd5eae0ab72ce218b78820e
Trac Ticket #260 - 389 DS does not support multiple
Fixing compiler warnings
Trac Ticket #303 - make DNA range requests work with transactions
coverity 12606 Logically dead code
Trac Ticket #46 - setup-ds-admin.pl does not like ipv6 only hostnames
Trac Ticket #46 (revised) - setup-ds-admin.pl does not like ipv6 only hostnames
Trac Ticket #46 - (take 3) setup-ds-admin.pl does not like ipv6 only hostnames
Trac Ticket #46 - (additional) setup-ds-admin.pl does not
Trac Ticket #45 - Fine Grained Password policy:
Trac Ticket #46 - (additional 2) setup-ds-admin.pl does not like ipv6 only hostnames
Trac Ticket #335 - transaction retries need to be cache aware
Trac Ticket #338 - letters in object's cn get converted to
Trac Ticket #310 - Avoid calling escape_string() for logged DNs
Trac Ticket #19 - Convert entryUSN plugin to transaction aware type
Trac Ticket #345 - db deadlock return should not log error
Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
Trac Ticket #359 - Database RUV could mismatch the one
Trac Ticket #338 - letters in object's cn get converted to
Trac Ticket #335 - transaction retries need to be cache aware
Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213
Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213
Bug 829213 - unhashed#user#password visible after changing password https://bugzilla.redhat.com/show_bug.cgi?id=829213
audit log does not log unhashed password: enabled, by default.
Trac Ticket 396 - Account Usability Control Not Working [Bug 835238]
Trac Ticket #402 - nhashed#user#password in entry extension
Trac Ticket #346 - Slow ldapmodify operation time for large
Trac Ticket #346 - Slow ldapmodify operation time for large
Coverity defects
Conflict definition in SLAPI_ATTR_FLAG macros
Trac Ticket #412 - memberof performance enhancement
Trac Ticket #409 - Report during startup if nsslapd-cachememsize is too small
Ticket 328 - make sure all internal search filters are properly escaped
Ticket 328 - make sure all internal search filters are properly escaped
Trac Ticket #346 - Slow ldapmodify operation time for large
Trac Ticket #437 - variable dn should not be used in ldbm_back_delete
Coverity defects
Trac Ticket #340 - Change on SLAPI_MODRDN_NEWSUPERIOR is not
Trac Ticket #466 - entry_apply_mod - ADD: Failed to set
Coverity defects
Trac Ticket #470 - 389 prevents from adding a posixaccount
Coverity defects
Trac Ticket #453 - db2index with -tattrname:type,type fails
Trac Ticket #351 - use betxn plugins by default
Bug 863576 - Dirsrv deadlock locking up IPA
Trac Ticket #455 - Insufficient rights to unhashed#user#password
Trac Ticket #451 - Allow db2ldif to be quiet
Coverity defects
Fixing compiler warnings in the posix-winsync plugin
Trac Ticket #494 - slapd entered to infinite loop during new index addition
Coverity defects
Trac Ticket #498 - Cannot abaondon simple paged result search
Trac Ticket #448 - Possible to set invalid macros in Macro ACIs
Trac Ticket #391 - Slapd crashes when deleting backends
Coverity fixes
Trac Ticket #190 - Un-resolvable server in replication
Trac Ticket #443 - Deleting attribute present in
Trac Ticket #447 - Possible to add invalid attribute
Trac Ticket #311 - IP lookup failing with multiple DNS
Trac Ticket #500 - Newly created users with
Trac Ticket #519 - Search with a complex filter including range search is slow
Trac Ticket #520 - RedHat Directory Server crashes (segfaults) when moving ldap entry
Coverity defect: Resource leak 13110
Trac Ticket #276 - Multiple threads simultaneously working on
Trac Ticket #531 - loading an entry from the database should use str2entry_fast
Trac Ticket #536 - Clean up compiler warnings for 1.3
Trac Ticket #531 - loading an entry from the database should use str2entry_f
Trac Ticket #499 - Handling URP results is not corrrect
bump version to 1.3.0.rc1
Trac Ticket #522 - betxn: upgrade is not implemented yet
Ticket 509 - lock-free access to be->be_suffixlock
Trac Ticket #497 - Escaped character cannot be used in the substring search filter
Ticket #422 - 389-ds-base - Can't call method "getText"
Ticket #547 - Incorrect assumption in ndn cache
Ticket #545 - Segfault during initial LDIF import: str2entry_dupcheck()
Ticket #542 - Cannot dynamically set nsslapd-maxbersize
Ticket #537 - Improvement of range search
Ticket #342 - better error message when cache overflows
Ticket #505 - use lock-free access name2asi and oid2asi tables (additional)
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket #502 - setup-ds.pl script should wait if "semanage.trans.LOCK" presen
Ticket #563 - DSCreate.pm: Error messages cannot be used in the if expression since they could be localized.
Ticket #533 - only scan for attributes to decrypt if there are encrypted attrs configured
Ticket #543 - Sorting with attributes in ldapsearch gives incorrect result
Ticket #572 - PamConfig schema not updated during upgrade
Ticket #576 - DNA: use event queue for config update only at the start up
Ticket #579 - Error messages encountered when using POSIX winsync
Ticket #584 - Existence of an entry is not checked when its password is to be deleted
bump version to 1.3.1.pre.a1
Ticket #561 - disable writing unhashed#user#password to changelog
Coverity Fix
Ticket #490 - Slow role performance when using a lot of roles
Ticket #603 - A logic error in str2simple
Ticket #604 - Required attribute not checked during search operation
Ticket #585 - Behaviours of "db2ldif -a <filename>" and "db2ldif.pl -a <filename>" are inconsistent
Fixing a compiler warning introduced by Ticket #561 - disable writing unhashed#user#password to changelog
Ticket #634 - Deadlock in DNA plug-in
Ticket #627 - ns-slapd crashes sporadically with segmentation fault in libslapd.so
Ticket #47308 - unintended information exposure when anonymous access is set to rootdse
Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
Ticket #618 - Crash at shutdown while stopping replica agreements
Ticket 458 - Need to properly check if the password admin dn is set
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket #608 - Posix Winsync plugin throws "posix_winsync_end_update_cb: failed to add task entry" error message
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket 623 - cleanAllRUV task fails to cleanup config upon completion
bump version to 1.3.2.pre.a1
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket 528 - RFE - get rid of instance specific scripts
Ticket #47330 - changelog db extension / upgrade is obsolete
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket #47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
Ticket #47330 - changelog db extension / upgrade is obsolete
Ticket #47347 - Simple paged results should support async search
Ticket #529 - dn normalization must handle multiple space characters in attributes
Ticket #47320 - put conn on work_q not poll list if conn has buffered more_data
Ticket 47331 - Self entry access ACI not working properly
Ticket #529 - dn normalization must handle multiple space characters in attributes
Coverity fix -- 13164: Logically dead code
Ticket #47343 - 389-ds-base: Does not support aarch64 in f19 and rawhide
Ticket #47327 - error syncing group if group member user is not synced
Ticket #428 - posix winsync should support ADD user/group entries from DS to AD
Trac Ticket #402 - nhashed#user#password in entry extension
Ticket #569 - examine replication code to reduce amount of stored state information
Ticket 47379 - DNA plugin failed to fetch replication agreement
Ticket #47391 - deleting and adding userpassword fails to update the password
Ticket #47391 - deleting and adding userpassword fails to update the password (additional fix)
Ticket #47400 - MMR stress test with dna enabled causes a deadlock
Ticket #47384 - Plugin library path validation
Ticket #47374 - flush.pl is not included in perl5
Ticket #47420 - An upgrade script 80upgradednformat.pl fails to handle a server instance name incuding '-'
Ticket #47419 - Unhashed userpassword can accidentally get removed from mods
Ticket #47384 - Plugin library path validation
Ticket #47367 - (phase 1) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
Ticket #47367 - (phase 2) ldapdelete returns non-leaf entry error while trying to remove a leaf entry
Ticket #47435 - Very large entryusn values after enabling the USN plugin and the lastusn value is negative.
Ticket #521 - modrdn + NSMMReplicationPlugin - Consumer failed to replay change
Ticket #47378 - fix recent compiler warnings
Ticket #630 - The backend name provided to bak2db is not validated
Ticket #415 - winsync doesn't sync DN valued attributes if DS DN value doesn't exist
Ticket #47314 - Winsync should support range retrieval
Ticket #47310 - Attribute "dsOnlyMemberUid" not allowed when syncing nested posix groups from AD with posixWinsync
Ticket #48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort.
Ticket #609 - nsDS5BeginReplicaRefresh attribute accepts any value and it doesn't throw any error when server restarts.
Ticket #197 - BDB backend - clear free page files to reduce changelog size
Ticket #48 - Active Directory has certain uids which are reserved and will cause a Directory Server replica initialization of an AD server to abort.
Ticket #460 - support multiple subtrees and filters
coverity 11956 - Dereference after null check
Ticket #47492 - PassSync removes User must change password flag on the Windows side
Ticket #47523 - Set up replcation/agreement before initializing the sub suffix, the sub suffix is not found by ldapsearch
Ticket #47534 - RUV tombstone search with scope "one" doesn`t work
Ticket #47463 - IDL-style can become mismatched during partial restoration
Coverity fixes - 12023, 12024, and 12025
Ticket #54 - locale "nl" not supported by collation plugin
Ticket #53 - Need to update supported locales
Ticket #53 - Need to update supported locales
Ticket #53 - Need to update supported locales
Ticket #47530 - dbscan on entryrdn should show all matching values
Ticket #47422 - With 1.3.04 and subtree-renaming OFF, when a user is deleted after restarting the server, the same entry can't be added
Ticket #47530 - dbscan on entryrdn should show all matching values
Ticket #538 - hardcoded sasl2 plugin path in ldaputil.c, saslbind.c
Ticket #47555 - db2bak.pl issue when specifying non-default directory
Ticket #47581 - Winsync plugin segfault during incremental backoff
Ticket #47581 - Winsync plugin segfault during incremental backoff (phase 2)
Ticket #605 - support TLS 1.1
Ticket #605 - support TLS 1.1 - adding backward compatibility
Ticket #342 - better error message when cache overflows (phase 2)
Ticket #605 - support TLS 1.1 - lower the log level for the supported NSS version range
Ticket #605 - support TLS 1.1 - Fixing "Coverity 12415 - Logically dead code"
Ticket #47313 - Indexed search with filter containing '&' and "!" with attribute subtypes gives wrong result
Ticket #47606 - replica init/bulk import errors should be more verbose
Ticket #447 - Possible to add invalid attribute to nsslapd-allowed-to-delete-attrs
Ticket #47571 - targetattr ACIs ignore subtype
Revert "Ticket 47653 - Need a way to allow users to create entries assigned to themselves"
Ticket #47660 - config_set_allowed_to_delete_attrs: Valgrind reports Invalid read
Ticket #47571 - targetattr ACIs ignore subtype
Ticket #342 - better error message when cache overflows
Ticket #443 - Deleting attribute present in nsslapd-allowed-to-delete-attrs returns Operations error
Ticket #47649 - Server hangs in cos_cache when adding a user entry
Ticket #47659 - ldbm_usn_init: Valgrind reports Invalid read / SIGSEGV
Ticket #47570 - slapi_ldap_init unusable during independent plugin development
Ticket #47693 - Environment variables are not passed when DS is started via service
Ticket #47677 - Size returned by slapi_entry_size is not accurate
Ticket #47608 - change slapi_entry_attr_get_bool to handle "on"/"off" values, support default value
Ticket #47602 - Make ldbm_back_seq independently support transactions
Ticket #47642 - Windows Sync group issues
Ticket #47701 - Make retro changelog trim interval programmable
Ticket #47701 - Make retro changelog trim interval programmable
Ticket #47700 - Unresolved external symbol references break loading of the ACL plugin
Ticket #47709 - package issue in 389-ds-base
Ticket #47709 - package issue in 389-ds-base
Ticket #47709 - package issue in 389-ds-base
Ticket #47701 - Make retro changelog trim interval programmable
Ticket 525 - Replication retry time attributes cannot be added
Ticket 408 - create a normalized dn cache
Ticket 571 (dup 47361) - Empty control list causes LDAP protocol error is thrown
Ticket 408 - create a normalized dn cache
Ticket #47725 - compiler error on daemon.c
Ticket #47735 - e_uniqueid fails to set if an entry is a conflict entry
Ticket #47737 - Under heavy stress, failure of turning a tombstone into glue makes the server hung
Ticket #47739 - directory server is insecurely misinterpreting authzid on a SASL/GSSAPI bind
Ticket #47734 - Change made in resolving ticket #346 fails on Debian SPARC64
Ticket #47740 - Coverity issue in 1.3.3
Ticket #47735 - e_uniqueid fails to set if an entry is a conflict entry
Ticket #47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
Ticket #346 - Slow ldapmodify operation time for large quantities of multi-valued attribute values
Ticket #47707 - 389 DS Server crashes and dies while handles paged searches from clients
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing;
Ticket #47764 - Problem with deletion while replicated
Ticket #47780 - Some VLV search request causes memory leaks
Ticket #47804 - db2bak.pl error with changelogdb
Ticket #47720 - Normalization from old DN format to New DN format doesnt handel condition properly when there is space in a suffix after the seperator operator.
Ticket #47770 - #481 breaks possibility to reassemble memberuid list
Ticket #47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed.
Ticket 47313 - CI test: add test case for ticket 47313
Ticket 47808 - CI test: add test case for ticket 47808
Ticket #47809 - find a way to remove replication plugin errors messages "changelog iteration code returned a dummy entry with csn %s, skipping ..."
Ticket #555 - add fixup-memberuid.pl script
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing
Ticket #47763 - winsync plugin modify is broken
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47835 - Coverity: 12687..12692
Ticket #47839 - 389-ds production segfault: __memcpy_sse2_unaligned...
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Revert "Ticket #47835 - Coverity: 12687..12692"
Ticket #47852 - Updating winsync one-way sync does not affect the behaviour dynamically
Ticket #47832 - attrcrypt_generate_key calls slapd_pk11_TokenKeyGenWithFlags with improper macro
Ticket #47843 - Fix various typos in manpages & code
Ticket #47844 - Fix hyphens used as minus signed and other manpage mistakes
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Revert "Revert "Ticket #47835 - Coverity: 12687..12692""
Ticket #47859 - Coverity: 12692 & 12717
Ticket #47859 - Coverity: 12692 & 12717
Ticket #47711 - improve dbgen rdn generation, output and man page.
Ticket #47746 - ldap/servers/slapd/back-ldbm/dblayer.c: possible minor problem with sscanf
Ticket #47824 - paged results control is not working in some cases when we have a subsuffix.
Ticket 47824 - CI test: add test case for ticket 47824
Ticket #47664 - Page control does not work if effective rights control is specified
Ticket 47664 - CI test: add test case for ticket 47664
Ticket #47714 - [RFE] Update lastLoginTime also in Account Policy plugin if account lockout is based on passwordExpirationTime.
Ticket 47714 - CI test: add test case for ticket 47713
Ticket 47714 - CI test: add test case for ticket 47714
Ticket #346 - Fixing memory leaks
Ticket #47579 - add dbmon.sh
Ticket #47579 - add dbmon.sh
Ticket #47869 - unauthenticated information disclosure (Bug 1123477)
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Ticket 47824 - CI test: add test case for ticket 47824
Ticket 47664 - CI test: add test case for ticket 47664
Ticket #47838 - harden the list of ciphers available by default
Ticket 47838 - CI test: add test case for ticket 47838
Ticket #47838 - harden the list of ciphers available by default
Ticket 47869 - CI test: add test case for ticket 47869
Ticket #47838 - harden the list of ciphers available by default
Ticket #47574 - start dirsrv after ntpd
Ticket #47874 - Performance degradation with scope ONE after some load
Ticket #47875 - dirsrv not running with old openldap
Ticket #47875 - dirsrv not running with old openldap
Ticket #47875 - dirsrv not running with old openldap
Ticket #47875 - dirsrv not running with old openldap
Revert "Ticket #47875 - dirsrv not running with old openldap"
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Ticket #47876 - coverity defects in slapd/tools/mmldif.c
Ticket #47879 - coverity defects in plugins/replication/windows_protocol_util.c
bump version to 1.3.3.0
Ticket #47875 - dirsrv not running with old openldap
Ticket #47875 - dirsrv not running with old openldap
bump version to 1.3.3.1
Ticket #47748 - Simultaneous adding a user and binding as the user could fail in the password policy check
Ticket #47834 - Tombstone_to_glue: if parents are also converted to glue, the target entry's DN must be adjusted.
Ticket #47890 - minor memory leaks in utilities
Ticket #47838 - harden the list of ciphers available by default
Ticket 47838,47895 - CI test: add test cases for ticket 47838 and 47895
Ticket #47895 - If no effective ciphers are available, disable security setting.
bump version to 1.3.3.2
Ticket #47750 - Creating a glue fails if one above level is a conflict or missing
Ticket #47907 - ldclt: assertion failure with -e "add,counteach" -e "object=<ldif file>,rdn=uid:test[A=INCRNNOLOOP(0;24
Ticket #47908 - 389-ds 1.3.3.0 does not adjust cipher suite configuration on upgrade, breaks itself and pki-server
Ticket #47838 - harden the list of ciphers available by default (phase 2)
Ticket 47838 - CI test: adjusted test cases based on the phase 2 fixes for ticket 47838
Ticket #47880 - provide enabled ciphers as search result
Ticket 47880 - CI test: added test cases for ticket 47880
bump version to 1.3.3.4
Ticket #47892 - coverity defects found in 1.3.3.x
Ticket #47919 - ldbm_back_modify SLAPI_PLUGIN_BE_PRE_MODIFY_FN does not return even if one of the preop plugins fails.
Ticket #47912 - Proper handling of "No original_tombstone for changenumber" errors
Ticket #47897 - Need to move slapi_pblock_set(pb, SLAPI_MODRDN_EXISTING_ENTRY, original_entry->ep_entry) prior to original_entry overwritten
Ticket #47922 - dynamically added macro aci is not evaluated on the fly
bump version to 1.3.3.5
Ticket #47553 - Enhance ACIs to have more control over MODRDN operations
Ticket #47928 - Disable SSL v3, by default.
Ticket 47928 - CI test: added test cases for ticket 47928
Ticket #47928 - Disable SSL v3, by default.
Ticket #47939 - Malformed cookie for LDAP Sync makes DS crash
Ticket #47945 - Add SSL/TLS version info to the access log
Ticket #47948 - ldap_sasl_bind fails assertion (ld != NULL) if it is called from chainingdb_bind over SSL/startTLS
Ticket #47928 - Disable SSL v3, by default.
Ticket #47960 - cookie_change_info returns random negative number if there was no change in a tree
Ticket #47960 - cookie_change_info returns random negative number if there was no change in a tree
Ticket #47935 - Error: failed to open an LDAP connection to host 'example.org' port '389' as user 'cn=Directory Manager'. Error: unknown.
Ticket 47965 - Fix coverity issues (2014/12/16)
Ticket #47947 - start dirsrv after chrony on RHEL7 and Fedora
Ticket #47905 - Bad manipulation of passwordhistory
Ticket #47934 - nsslapd-db-locks modify not taking into account.
Ticket #47989 - Windows Sync accidentally cleared raw_entry
Ticket #47996 - ldclt needs to support SSL Version range
Ticket 47988: Schema learning mechanism, in replication, unable to extend an existing definition
Coverity 12970 - Explicit null dereference
bump version to 1.3.3.7
Ticket #48001 - ns-activate.pl fails to activate account if it was disabled on AD
bump version to 1.3.3.8
Ticket #48001 - ns-activate.pl fails to activate account if it was disabled on AD
Ticket #47728 - compilation failed with ' incomplete struct/union/enum' if not set USE_POSIX_RWLOCKS
Ticket #47836 - Do not return '0' as empty fallback value of nsds5replicalastupdatestart and nsds5replicalastupdatestart
Ticket #47742 - 64bit problem on big endian: auth method not supported
Ticket #48005 - ns-slapd crash in shutdown phase
Ticket 48005 - CI test: added test cases for ticket 48005
Ticket #48030 - spec file should run "systemctl stop" against each running instance instead of dirsrv.target
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48048 - Fix coverity issues - 2015/2/24
Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
Ticket 48109 - CI test: added test cases for ticket 48109
Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
Ticket #48048 - Fix coverity issues - 2015/3/1
Ticket #47431 - Duplicate values for the attribute nsslapd-pluginarg are not handled correctly
Ticket 47431 - CI test: added test cases for ticket 47431
Ticket #47957 - Make ReplicaWaitForAsyncResults configurable
Ticket #47801 - RHDS keeps on logging write_changelog_and_ruv: failed to update RUV for unknown
bump version to 1.3.3.9
Ticket #48133 - Non tombstone entry which dn starting with "nsuniqueid=...," cannot be deleted
Ticket #48146 - async simple paged results issue
Ticket #48109 - substring index with nssubstrbegin: 1 is not being used with filters like (attr=x*)
Ticket #48146 - async simple paged results issue; log pr index
Ticket #48146 - async simple paged results issue; need to close a small window for a pr index competed among multiple threads.
Ticket #48146 - async simple paged results issue
Ticket #48183 - bind on db chained to AD returns err=32
Ticket #48146 - async simple paged results issue
Ticket #48146 - async simple paged results issue
Ticket #48190 - idm/ipa 389-ds-base entry cache converges to 500 KB in dblayer_is_cachesize_sane
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
bump version to 1.3.3.11
Ticket #48194 - nsSSL3Ciphers preference not enforced server side
bump version to 1.3.3.12
Ticket #48212 - Dynamic nsMatchingRule changes had no effect on the attrinfo thus following reindexing, as well.
Ticket #48212 - CI test: added test cases for ticket 48212
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #48226 - In MMR, double free coould occur under some special condition
Ticket #48226 - CI test: added test cases for ticket 48226
Ticket #48232 - winsync lastlogon attribute not syncing between DS and AD.
Ticket #48231 - logconv autobind handling regression caused by 47446
Ticket #48228 - wrong password check if passwordInHistory is decreased.
Ticket #48228 - CI test: added test cases for ticket 48228
Ticket #48245 - Man pages and help for remove-ds.pl doesn't display "-a" option
Ticket #48254 - CLI db2index fails with usage errors
Ticket #48252 - db2index creates index entry from deleted records
Ticket #48228 - wrong password check if passwordInHistory is decreased.
Ticket #48252 - db2index creates index entry from deleted records
Ticket #47981 - COS cache doesn't properly mark vattr cache as invalid when there are multiple suffixes
Ticket #48265 - Complex filter in a search request doen't work as expected. (regression)
bump version to 1.3.3.13
Ticket #48226 - In MMR, double free coould occur under some special condition
Ticket #48299 - pagedresults - when timed out, search results could have been already freed.
Ticket #48192 - Individual abandoned simple paged results request has no chance to be cleaned up
Ticket #48304 - ns-slapd - LOGINFO:Unable to remove file
Ticket #48305 - perl module conditional test is not conditional when checking SELinux policies
Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
bump version to 1.3.3.14
Petr Viktorin (1):
Ticket 47899: Fix slapi_td_plugin_lock_init prototype
Rich Megginson (469):
Net::LDAP password modify extop breaks; msgid in response is 0xFF
Clean up assert for entrydn
Bug 543080 - Bitwise plugin fails to return the exact matched entries for Bitwise search filter
Bug 537466 - nsslapd-distribution-plugin should not require plugin name to begin with "lib"
bump version to 1.2.6.a2
Do not use syntax plugins directly for filters, indexing
wrap new style matching rule plugins for use in old style indexing code
change extensible filter code to use new syntax function style mr funcs
change syntax plugins to register required matching rule plugins
crash looking up compat syntax; numeric string syntax using integer; make octet string ordering work correctly
fix memory leak in attr replace when replacement fails
fix dso linking issues found by fedora 13 linking
problems linking with -z defs
389 DS segfaults on libsyntax-plugin.so - part 1
389 DS segfaults on libsyntax-plugin.so - part 2
389 DS segfaults on libsyntax-plugin.so - part 3
Bug 460162 - FedoraDS "with-FHS" installs init.d StartupScript in wrong location on non-RHEL/Fedora OS
Bug 568196 - Install DS8.2 on Solaris fails
Bug 568196 - Install DS8.2 on Solaris fails - part 2
Bug 551198 - LDAPI: incorrect logging to access log
bump version to 1.2.6.a3
fix various memory leaks
Bug 551198 - LDAPI: incorrect logging to access log - part 2
Bug 554573 - ACIs use bind DN from bind req rather than cert mapped DN from sasl/external
cleanup build warnings
Bug 571514 - upgrade to 1.2.6 should upgrade 05rfc4523.ldif (cert schema)
Bug 570905 - postalAddress syntax should allow empty lines (should allow $$)
Add support for additional schema/matching rules included with 389
Bug 572677 - Memory leak in searches including GER control
Bug 571677 - Busy replica on consumers when directly deleting a replication conflict
Bug 576074 - search filters with parentheses fail
Bug 567429 - slapd didn't close connection and get into CLOSE_WAIT state
Bug 578167 - repl. of mod/replace deletes multi-valued attrs
Bug 561575 - setup-ds-admin fails to supply nsds5ReplicaName when configuring via ConfigFile
Bug 572162 - the string "|*" within a search filter on a non-indexed attribute returns all elements.
Bug 576644 - segfault while multimaster replication (paired node won't find deleted entries)
start of 1.2.6.a4
Bug 572018 - Upgrading from 1.2.5 to 1.2.6.a2 deletes userRoot
Fix too few args for format warning in acllas
Bug 586571 - DS Console shows escaped DNs
Bug 591685 - Server instances Fail to Start on Solaris due to Library Path and pcre
bump console version to 1.2.3
Repl Session API needs to check for NULL api before init
Bug 593392 - setup-ds-admin.pl -k creates world readable file
Bug 595874 - 99user.ldif getting overpopulated
bump version to 1.2.6.a5
bump version to 1.2.6.rc1
bump version to 1.2.6.rc2
bump version to 1.2.6.rc3
Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
Bug 604453 - SASL Stress and Server crash: Program quits with the assertion failure in PR_Poll
Bug 603942 - null deref in _ger_parse_control() for subjectdn
bump version to 1.2.6.rc4
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 602530 - coverity: op_shared_modify: compare pre, post and original entries before freeing them
Bug 602531 - coverity: op_shared_delete: compare preop entry and GLUE_PARENT_ENTRY before freeing them
Bug 609590 - fix coverity Defect Type: Memory - corruptions issues
Bug 610177 - fix coverity Defect Type: Uninitialized variables issues
Bug 610276 - fix coverity Defect Type: API usage errors issues
Bug 611850 - fix coverity Defect Type: Error handling issues
Bug 614242 - C99/ANSI C++ related compile errors on HP-UX
Bug 547503 - replication broken again, with 389 MMR replication and TCP errors
Bug 617013 - repl-monitor.pl use cpu upto 90%
fix build failures due to libtool problems
Bug 617629 - Missing aliases in new schema files
Bug 617862 - Replication: Unable to delete tombstone errors
bump version to 1.2.7.a1
Bug 610281 - fix coverity Defect Type: Control flow issues - daemon.c:write_function()
Bug 610281 - fix coverity Defect Type: Control flow issues - last repl init status
postalAddress syntax does not accept empty values
ger should support both "dn" and "distinguishedName"
openldap - ldap_url_parse_ext is not part of the public api
fix memleak in ldbm_config_read_instance_entries
Add -x option to ldap tools when using openldap
openldap - add support for missing controls, add ldif api, fix NSS usage
port client tools to use openldap API
use the mozldap versions of the proxy auth control create function
document slapi wrappers for openldap/mozldap functions that differ
fix some compiler warnings
use strcasecmp with ptype and type->bv_val
ber_printf 'o' cannot handle NULL bv_val
fix the url_parse logic when looking for a missing suffix DN
openldap ldapsearch uses -LLL to suppress # version: N
add ldaptool_opts for the non BUNDLE case in Makefile.am
openldap ldapsearch returns empty line at end of LDIF output
have to use LDAP_OPT_X_TLS_NEVER to defeat cert hostname checking
openldap_read_function needs to set EWOULDBLOCK if the buffer is empty
do not terminate unwrapped LDIF line with another newline
slapi_ldap_url_parse must handle multiple host:port in url
convert mozldap host list to openldap uri list
move the out pointer back if continuation lines were removed
check src < *out only; only check for \nspace if src < *out - 2
use slapi_ldap_url_parse in the acl code
do not un-null-terminate normalized DN until new url is constructed
implement slapi_ldap_explode_dn and slapi_ldap_explode_rdn
use slapi_pblock_set to set the ldap result code for the be postop plugins
pass the string copy to slapi_dn_normalize_original
bug 614511 - fix coverity null reference - revert macro aci $dn logic
fix compiler warnings - unused vars/funcs, invalid casts
use slapi_mods_init_passin/get_ldapmods_passout if modifying the smods
Have to explicitly set protocol version to 3
Only check modrdn ops for backend/suffix correctness if not the default backend
Bug 634561 - Server crushes when using Windows Sync Agreement
openldap ber_init will assert if the bv->bv_val is NULL
add the account policy plugin and related server code, schema, and config
fix pblock memory leak
do not register pre/post op plugins if disabled
add support for global inactivity limit
fix typos in Makefile.am, acctpolicy schema
bump version to 1.2.7.a2
remove extra format argument; use %lu for size_t printf format
Bug 644013 - uniqueness plugin segfault bug
bump version to 1.2.7.a3
bump to 1.2.7.a4
bump version to 1.2.7.a5
put replication config entries in separate file
bump version to 1.2.7.a6
bump version to 1.2.7.1
bump version to 1.2.7.2
bump version to 1.2.7.3
bump version to 1.2.7.4
Bug 515329 - Multiple mods in one operation can result in an inconsistent replica
bump version to 1.2.8.a1
Bug 642046 - Segfault when using SASL/GSSAPI multimaster replication, possible krb5_creds doublefree
Bug 624485 - setup dsktune check step should default to "yes" if no problems found
Bug 622907 - support piped passwords to perl-based maintenance commands
Bug 624485 - setup dsktune check step should default to "yes" if no problems found
Bug 576534 - Password displayed on console when entered in command-line utilities
Bug 667935 - DS pipe log script's logregex.py plugin is not redirecting the log output to the text file
bump version to 1.2.8.a2
Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
Bug 676689 - crash while adding a new user to be synced to windows
Bug 675113 - ns-slapd core dump in windows_tot_run if oneway sync is used
Bug 677440 - clean up compiler warnings in 389-ds-base 1.2.8
Bug 677774 - DS fails to start after reboot
Bug 666076 - dirsrv crash (1.2.7.5) with multiple simple paged result searches
Bug 675320 - empty modify operation with repl on or lastmod off will crash server
bump version to 1.2.9.a1 - console version to 1.2.4
Bug 677705 - ds-logpipe.py script is failing to validate "-s" and "--serverpid" options with "-t".
Bug 676655 - winsync stops working after server restart
Bug 680555 - ns-slapd segfaults if I have more than 100 DBs
Bug 514190 - setup-ds-admin.pl --debug does not log to file
Bug 518890 - setup-ds-admin.pl - improve hostname validation
Bug 644784 - Memory leak in "testbind.c" plugin
Bug 683250 - slapd crashing when traffic replayed
Bug 690584 - #10691 ldbm_back_init() - fix coverity resource leak issues
Bug 690584 - #10690 #10689 attrcrypt_get_ssl_cert_name() - fix coverity resource leak issues
Bug 690584 - #10688 - dblayer_make_env - fix coverity resource leak issues
Bug 690584 - #10669 #10668 cl5ImportLDIF - fix coverity resource leak issues
Bug 690584 - #10658 linked_attrs_pre_op - fix coverity resource leak issues
Bug 690584 - #10655 acllas__handle_group_entry - fix coverity resource leak issues
Bug 690584 - #10654 #10653 str2entry_dupcheck - fix coverity resource leak issues
Bug 690584 - #10652 #10651 #10650 #10649 #10648 #10647 send_specific_attrs send_all_attrs - fix coverity resource leak issues
Bug 690584 - #10643 hash_rootpw - fix coverity resource leak issues
Bug 690584 - #10641 reslimit_bv2int - fix coverity resource leak issues
Bug 691422 - sdt_destroy - fix coverity control flow issues
Bug 691422 - ldbm_back_upgradedb - fix coverity control flow issues
Bug 691422 - csnplFree - fix coverity control flow issues
Bug 691422 - SetUnicodeStringFromUTF_8 - fix coverity control flow issues
Bug 691422 - cl5DeleteRUV - fix coverity control flow issues
Bug 691422 - acl_read_access_allowed_on_entry - fix coverity control flow issues
Bug 691422 - search_internal_callback_pb - fix coverity control flow issues
Bug 691422 - cl5WriteRUV - fix coverity control flow issues
Bug 691422 - windows_replay_update - fix coverity control flow issues
Bug 690584 - #10691 ldbm_back_init() - fix coverity resource leak issues
Bug 690584 - #10652 #10651 #10650 #10649 #10648 #10647 send_specific_attrs send_all_attrs - fix coverity resource leak issues
Bug 668385 - DS pipe log script is executed as many times as the dirsrv service is restarted
Bug 692937 - Replica install fails after step for "enable GSSAPI for replication"
Bug 692331 - Segfault on index update during full replication push on 1.2.7.5
Bug 693451 - cannot use localized matching rules
Bug 693455 - nsMatchingRule does not work with multiple values
Bug 693503 - matching rules do not inherit from superior attribute type
Bug 693466 - Unable to change schema online
Bug 692991 - rhds82 - windows_tot_run: failed to obtain data to send to the consumer; LDAP error - -1
Bug 693473 - rhds82 rfe - windows_tot_run to log Sizelimit exceeded instead of LDAP error - -1
Bug 693962 - Full replica push loses some entries with multi-valued RDNs
Bug 694336 - Group sync hangs Windows initial Sync
Bug 700145 - userpasswd not replicating
Bug 703990 - Support upgrade from Red Hat Directory Server
bump console version to 1.2.5
Bug 703990 - Support upgrade from Red Hat Directory Server
Bug 703990 - Support upgrade from Red Hat Directory Server
Bug 707015 - Cannot disable SSLv3 and use TLS only
bump version to 1.2.9.a2
Bug 707384 - only allow FIPS approved cipher suites in FIPS mode
Bug 711906 - ns-slapd segfaults using suffix referrals
Bug 706209 - LEGAL: RHEL6.1 License issue for 389-ds-base package
Bug 703703 - setup-ds-admin.pl asks for legal agreement to a non-existant file
Bug 711679 - unresponsive LDAP service when deleting vlv on replica
bump console version to 1.2.6
Bug 697694 - rhds82 - incr update state stop_fatal_error "requires administrator action", with extop_result: 9
Bug 716980 - winsync uses old AD entry if new one not found
add support for ldif files with changetype: add
writing Inf file shows SchemaFile = ARRAY(0xhexnum)
look for separate openldap ldif library
bump version to 1.2.9.a3
Bug 709468 - RSA Authentication Server timeouts when using simple paged results on RHDS 8.2.
Bug 720059 - RDN with % can cause crashes or missing entries
bump version to 1.2.9.0
Bug 725542 - Instance upgrade fails when upgrading 389-ds-base package
Bug 725953 - Winsync: DS entries fail to sync to AD, if the User's CN entry contains a comma
Bug 723937 - replication failing on RUV errors
bump version to 1.2.9.1
Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
bump version to 1.2.9.2
Bug 727511 - ldclt SSL search requests are failing with "illegal error numbe
bump version to 1.2.9.3
Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
bump version to 1.2.9.4
Bug 727511 - ldclt SSL search requests are failing with "illegal error number -1" error
bump version to 1.2.9.5
Bug 729378 - delete user subtree container in AD + modify password in DS == DS crash
Bug 723937 - replication failing on RUV errors
Bug 729369 - upgrade DB to upgrade from entrydn to entryrdn format is not working.
make sure the DBVERSION file ends in a newline
bump version to 1.2.10.a1
Bug 633803 - passwordisglobalpolicy attribute brakes TLS chaining
Bug 733103 - large targetattr list with syntax errors cause server to crash or hang
Bug 703990 - cross-platform - Support upgrade from Red Hat Directory Server
Bug 735121 - simple paged search + ip/dns based ACI hangs server
Bug 695736 - Providing native systemd file for upcoming F15 Feature Systemd
Bug 590826 - Reloading database from ldif causes changelog to emit "data no longer matches" errors
Bug 736712 - Modifying ruv entry deadlocks server
Add support for pre/post db transaction plugins
Make all backend operations transaction aware
Bug 741744 - MOD operations with chained delete/add get back error 53 on backend config
Bug 742324 - allow nsslapd-idlistscanlimit to be set dynamically and per-user
Bug 741744 - part2 - MOD operations with chained delete/add get back error 53 on backend config
Bug 740942 - allow resource limits to be set for paged searches independently of limits for other searches/operations
bump version to 1.2.10.a2
bump version to 1.2.10.a3
fix transaction support in ldbm_delete
bump version to 1.2.10.a4
set the ENTRY_POST_OP for modrdn betxnpostoperation plugins
pass the plugin config entry to the plugin init function
make memberof transaction aware and able to be a betxnpostoperation plugin
Bug 741744 - part3 - MOD operations with chained delete/add get back error 53
bump version to 1.2.10.a5
Change referential integrity to be a betxnpostoperation plugin
Use new PLUGIN_CONFIG_ENTRY feature to allow switching between txn and regular
Bug 748575 - rhds81 modrn operation and 100% cpu use in replication
Bug 748575 - part 2 - rhds81 modrdn operation and 100% cpu use in replication
Bug 751495 - 'setup-ds.pl -u' fails with undefined routine 'updateSystemD'
bump version to 1.2.10.a6
Bug 751645 - crash when simple paged fails to send entry to client
csn_as_string - use slapi_uN_to_hex instead of sprintf
uniqueid formatting - use slapi_u8_to_hex instead of sprintf
fix member variable name error in slapi_uniqueIDFormat
reduce calls to csn_as_string and slapi_log_error
csn_init_as_string should not use sscanf
use slapi_hexchar2int and slapi_str_to_u8 everywhere
Bug 755754 - Unable to start dirsrv service using systemd
Bug 755725 - 389 programs linked against openldap crash during shutdown
Ticket 1 - pre-normalize filter and pre-compile substring regex - and other optimizations
Ticket #162 - Infinite loop / spin inside strcmpi_fast, acl_read_access_allowed_on_attr, server DoS
bak2db gets stuck in infinite loop
Ticket #256 - debug build assertion in ACL_EvalDestroy()
bump version to 1.2.10.a7
Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock
fix mep sdn compiler warnings
add a hack to disable sasl hostname canonicalization - helps with testing when you don't want to set up correct host name resolution and/or cannot set the default system hostname
Ticket #12 - 389 DS DNA Plugin / Replication failing on GSSAPI
Ticket #257 - repl-monitor doesn't work if leftmost hostnames are the same
fix recent compiler warnings
Ticket #15 - Get rid of rwlock.h/rwlock.c and just use slapi_rwlock instead
fix compiler warnings
Remove redundant code - make a global into a static
Ticket #262 - pid file not removed with systemd
fix mozldap build issues
Ticket #264 - upgrade needs better check for "server is running"
Ticket #263 - add systemd include directive
bump version to 1.2.10.rc1
change version to 1.2.10.a8
Ticket #272 - add tombstonenumsubordinates to schema
bump version to 1.2.10.rc1
Ticket #161 - Review and address latest Coverity issues
Ticket #22 - RFE: Support sendmail LDAP routing schema
Ticket #29 - Samba3-schema is missing sambaTrustedDomainPassword
Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
Ticket #273 - ruv tombstone searches don't work after reindex entryrdn
fix a couple of minor coverity issues
Ticket #87 - Manpages fixes
Ticket #13 - slapd process exits when put the database on read only mode while updates are coming to the server
Ticket #55 - Limit of 1024 characters for nsMatchingRule
Ticket #277 - cannot set repl referrals or state
Ticket #278 - Schema replication update failed: Invalid syntax
Ticket #277 - cannot set repl referrals or state
Ticket #279 - filter normalization does not use matching rules
Ticket #280 - extensible binary filters do not work
Ticket #281 - TLS not working with latest openldap
coverity 12488 Resource leak In attr_index_config(): Leak of memory or pointers to system resources
bump version to 1.2.10.rc2
fix compiler warning in acct policy plugin
bump version to 1.2.11.a1
Ticket #294 - 389 DS Segfaults during replica install in FreeIPA
coverity uninit var and resource leak
Revert "Ticket #111 - ability to control behavior of modifyTimestamp/modifiersName"
Revert "Ticket #167 - Mixing transaction and non-transaction plugins can cause deadlock"
Revert "Change referential integrity to be a betxnpostoperation plugin"
Revert "make memberof transaction aware and able to be a betxnpostoperation plugin"
Revert "pass the plugin config entry to the plugin init function"
coverity 12559 Uninitialized pointer read In ldbm_back_modify(): Reads an uninitialized pointer or its target
Ticket #281 - TLS not working with latest openldap
Trac Ticket #298 - crash when replicating orphaned tombstone entry
Ticket #301 - implement transaction support using thread local storage
init txn thread private data for all database modes
handle null smods
memleak in mep_parse_config_entry
memleak in normalize_mods2bvals
destroy the entry cache and dn cache in the dse post op delete callback
Ticket #289 - allow betxn plugin config changes
coverity 12563 Read from pointer after free
Ticket 317 - RHDS fractional replication with excluded password policy attributes leads to wrong error messages.
Ticket #305 - Certain CMP operations hang or cause ns-slapd to crash
Ticket #320 - allow most plugins to be betxn plugins
Ticket #324 - Sync with group attribute containing () fails
Ticket #324 - redux: Sync with group attribute containing () fails
Ticket #316 and Ticket #70 - add post add/mod and AD add callback hooks
Ticket #261 - Add Solaris i386
Ticket #331 - transaction errors with db 4.3 and db 4.2
schema def must have DESC '' - close paren must be preceded by space
Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
Ticket #336 - [abrt] 389-ds-base-1.2.10.4-2.fc16: index_range_read_ext: Process /usr/sbin/ns-slapd was killed by signal 11 (SIGSEGV)
Ticket #347 - IPA dirsvr seg-fault during system longevity test
Ticket #348 - crash in ldap_initialize with multiple threads
Ticket #351 - use betxn plugins by default
Ticket #353 - coverity 12625-12629 - leaks, dead code, unchecked return
Ticket #348 - crash in ldap_initialize with multiple threads
Ticket #351 - use betxn plugins by default
bump version to 1.3.0.a1
Ticket #358 - managed entry doesn't delete linked entry
Trac Ticket #359 - Database RUV could mismatch the one in changelog under the stress
console .2 is still compatible with 389 .3 for now
Ticket #321 - krbExtraData is being null modified and replicated on each ssh login
Ticket #360 - ldapmodify returns Operations error
Ticket #382 - DS Shuts down intermittently
Ticket #383 - usn + mmr = deletions are not replicated
Ticket #389 - ADD operations not in audit log
Ticket #360 - ldapmodify returns Operations error - fix delete caching
fix coverity issues with uninit vals, no return checking
Ticket #360 - ldapmodify returns Operations error - fix delete caching
improve txn test index handling
Ticket #387 - managed entry sometimes doesn't delete the managed entry
Ticket #387 - managed entry sometimes doesn't delete the managed entry
Ticket 378 - unhashed#user#password visible after changing password
Ticket #405 - referint modrdn not working if case is different
Ticket #406 - Impossible to rename entry (modrdn) with Attribute Uniqueness plugin enabled
Ticket #410 - Referential integrity plug-in does not work when update interval is not zero
Ticket #425 - support multiple winsync plugins
Ticket #430 - server to server ssl client auth broken with latest openldap
Ticket #426 - support posix schema for user and group sync
coverity - mbo dead code - winsync leaks, deadcode, null check, test code
Ticket #355 - winsync should not delete entry that appears to be out of scope
Ticket #440 - periodic dirsync timed event causes server to loop repeatedly
fix mem leaks with parent dn log message, setting winsync windows domain
coverity - posix winsync mem leaks, null check, deadcode, null ref, use after free
fix coverity resource leak in windows_plugin_add
Ticket #426 - support posix schema for user and group sync
Ticket #374 - consumer can go into total update mode for no reason
Ticket #461 - fix build problem with mozldap c sdk
Ticket #462 - add test for include file mntent.h
Ticket #463 - different parameters of getmntent in Solaris
add eclipse generated files to the ignore list
fix compiler warnings in ticket 374 code
Ticket #491 - multimaster_extop_cleanruv returns wrong error codes
minor fixes for bdb 4.2/4.3 and mozldap
Ticket #322 - Create DOAP description for the 389 Directory Server project
Ticket #508 - part 1 - lock-free access to FrontendConfig structure
Ticket #508 - part 2 - lock-free access to FrontendConfig structure
Ticket #612 - improve dbgen rdn generation, output
Ticket #613 - ldclt: add timestamp, interval, nozeropad, other improvements
Ticket #47299 - allow cmdline scripts to work with non-root user
Ticket #47302 - get rid of sbindir start/stop/restart slapd scripts
Ticket #47303 - start/stop/restart dirsrv scripts should report and error if no instances
Ticket #47302 - get rid of sbindir start/stop/restart slapd scripts
Ticket #565 - turbo mode and replication - allow disable of turbo mode
Ticket #633 - allow nsslapd-nagle to be disabled, and also tcp cork
Ticket #613 - ldclt: add timestamp, interval, nozeropad, other improvements
Ticket #47312 - replace PR_GetFileInfo with PR_GetFileInfo64
Ticket #574 - problems with dbcachesize disk space calculation
Ticket #47312 - replace PR_GetFileInfo with PR_GetFileInfo64
Ticket #514 - investigate connection locking
Ticket #513 - recycle operation pblocks
Ticket #47319 - make connection buffer size adjustable
Ticket #47320 - put conn on work_q not poll list if conn has buffered more_data
Ticket #47299 - allow cmdline scripts to work with non-root user
Ticket #47336 - logconv.pl -m not working for all stats
Ticket #47341 - logconv.pl -m time calculation is wrong
Ticket #47348 - add etimes to per second/minute stats
Ticket #47349 - DS instance crashes under a high load
Ticket #47362 - ipa upgrade selinuxusermap data not replicating
Ticket #47359 - new ldap connections can block ldaps and ldapi connections
Ticket #47359 - new ldap connections can block ldaps and ldapi connections
Ticket #47359 - new ldap connections can block ldaps and ldapi connections
Ticket #47378 - fix recent compiler warnings
Ticket #47387 - improve logconv.pl performance with large access logs
Ticket #47377 - make listen backlog size configurable
Ticket #47375 - flush_ber error sending back start_tls response will deadlock
Ticket #47409 - allow setting db deadlock rejection policy
Ticket #47409 - allow setting db deadlock rejection policy
Ticket #47409 - allow setting db deadlock rejection policy
Ticket #47387 - improve logconv.pl performance with large access logs
Ticket #47410 - changelog db deadlocks with DNA and replication
Ticket #47392 - ldbm errors when adding/modifying/deleting entries
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket #47424 - Replication problem with add-delete requests on single-valued attributes
Ticket 47427 - Overflow in nsslapd-disk-monitoring-threshold
Ticket #47448 - Segfault in 389-ds-base-1.3.1.4-1.fc19 when setting up FreeIPA replication
Ticket #47455 - valgrind - value mem leaks, uninit mem usage
Ticket #47456 - delete present values should append values to deleted values
fix coverity 11895 - null deref - caused by fix to ticket 47392
fix coverity 11915 - dead code - introduced with fix for ticket 346
Ticket #47455 - valgrind - value mem leaks, uninit mem usage
Bug 999634 - ns-slapd crash due to bogus DN
Ticket #47455 - valgrind - value mem leaks, uninit mem usage
Ticket #47516 replication stops with excessive clock skew
Ticket #47504 idlistscanlimit per index/type/value
Ticket #47504 idlistscanlimit per index/type/value
Ticket #47504 idlistscanlimit per index/type/value
Ticket #47501 logconv.pl uses /var/tmp for BDB temp files
Ticket 47533 logconv: some stats do not work across server restarts
Ticket #47515 Fedora 20: setup-ds-admin.pl
Ticket #47551 logconv: -V does not produce unindexed search report
bump autoconf to 2.69, automake to 1.13.4, libtool to 2.4.2
ticket #47550 wip
Ticket #47550 logconv: failed logins: Use of uninitialized value in numeric comparison at logconv.pl line 949
Ticket #47559 hung server - related to sasl and initialize
Ticket #47585 Replication Failures related to skipped entries due to cleaned rids
Revert "Ticket #47559 hung server - related to sasl and initialize"
Ticket #47596 attrcrypt fails to find unlocked key
Ticket #47605 CVE-2013-4485: DoS due to improper handling of ger attr searches
bump version to 1.3.3.a1
Ticket #381 Recognize compressed log files
Ticket 47599 - Reduce lock scope in retro changelog plug-in
bump version to 1.3.3.a2
Ticket #47596 attrcrypt fails to find unlocked key
Ticket #47623 fix memleak caused by 47347
Ticket #47623 fix memleak caused by 47347
Ticket #47631 objectclass may, must lists skip rest of objectclass once first is found in sup
Ticket #47645 reset stack, op fields to NULL - clean up stacks at shutdown - free unused plugin config entries
Ticket #47634 support AttributeTypeDescription USAGE userApplications distributedOperation dSAOperation
Ticket #47647 remove bogus definition in 60rfc3712.ldif
Ticket #47657 add schema test suite and tests for Ticket #47634
Ticket #47675 logconv errors when search has invalid bind dn
Ticket #47516 replication stops with excessive clock skew
Ticket #47374 - flush.pl is not included in perl5
Ticket #471 logconv.pl tool removes the access logs contents if "-M" is not correctly used
Ticket #47692 single valued attribute replicated ADD does not work
Ticket #47773 - mem leak in do_bind when there is an error
Ticket #47774 mem leak in do_search - rawbase not freed upon certain errors
Ticket #47772 empty modify returns LDAP_INVALID_DN_SYNTAX
Ticket #47772 empty modify returns LDAP_INVALID_DN_SYNTAX
Ticket #47831 - server restart wipes out index config if there is a default index
Ticket #47692 single valued attribute replicated ADD does not work
Ticket 47446 - logconv.pl memory continually grows
Ticket #47892 coverity defects found in 1.3.3.1
bump version to 1.3.3.3
Ticket #48224 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
Ticket #48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
Ticket #48224 - redux - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
Ticket #48224 - redux 2 - logconv.pl should handle *.tar.xz, *.txz, *.xz log files
Simon Pichugin (4):
Ticket #47569 - Added a testcase to ACL testsuite
Ticket #47553 - Automated the verification procedure
Ticket 47957 - Add replication test suite for a wait async feature
Ticket 48264 - Ticket 47553 tests refactoring
Thierry Bordaz (5):
CVE-2015-1854 389ds-base: access control bypass with modrdn
Ticket 48266: Fractional replication evaluates several times the same CSN
Ticket 48266: coverity issue
Ticket 47978: Deadlock between two MODs on the same entry between entry cache and backend lock
Ticket 47976: deadlock in mep delete post op
Thierry bordaz (tbordaz) (57):
Ticket #487 - Possible to add invalid attribute values to PAM PTA plugin configuration
Ticket 600 - Server should return unavailableCriticalExtension when processing a badly formed critical control
Ticket 616 - High contention on computed attribute lock
Ticket 618 - Crash at shutdown while stopping replica agreements
Ticket 512 - improve performance of vattr code
Ticket 205 - snmp counters index strings for multiple network interfaces with ip addr and tcp port pairs
Ticket 47325 - Crash at shutdown on a replica aggrement
Ticket 47331 - Self entry access ACI not working properly
Ticket 47361 - Empty control list causes LDAP protocol error is thrown
Ticket 47354 - Indexed search are logged with 'notes=U' in the access logs
Ticket 47350 - Allow search to look up 'in memory RUV'
Compilation warnings (ticket 47350)
Ticket 47350 - (Cont.) Allow search to look up 'in memory RUV'
Ticket 564 - Is ldbm_txn_ruv_modify_context still required
Ticket 47393 - Attribute are not encrypted on a consumer after a full initialization
Ticket 208 - [RFE] Roles with explicit scoping in RHDS
Ticket 47433 - With SeLinux, setup-ds.pl and setup-ds-admin.pl fail to detect already ranged labelled ports
Ticket 512 - improve performance of vattr code
Ticket 47489 - Under specific values of nsDS5ReplicaName, replication may get broken or updates missing
Ticket 47490 - Schema replication between DS versions may overwrite newer base schema
Ticket 47398 - memberOf on a user is converted to lowercase
Ticket 47560: fixup memberof task does not work: task entry not added
Ticket 47586 - CI tests: test case for 47490
Ticket 47586 - CI tests: follow up
Ticket 47586 - Need to rebind after a stop (fix to run direct python script)
Ticket 47575 - CI test: add test case for ticket47560
Ticket 47628: port testcases to new DirSrv interface
Ticket 47651 - Finaliser to remove instances backups
Ticket 47668 - test: port ticket47490_test to Replica/Agreement interface (47600)
Ticket 47653 - Need a way to allow users to create entries assigned to themselves.
Ticket 47676 : Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
Ticket 47676 : (cont.) Replication of the schema fails 'master branch' -> 1.2.11 or 1.3.1
Ticket 47573: schema push can be erronously prevented
Update test cases due to new modules: Schema, tasks, plugins and index
Ticket 47619: cannot reindex retrochangelog
Ticket 47699: Propagate plugin precedence to all registered function types
Ticket 47553: Enhance ACIs to have more control over MODRDN operations
Ticket 47721 - Schema Replication Issue
Ticket 47721 - Schema Replication Issue (follow up + cleanup)
Ticket 47721 - Schema Replication Issue (follow up)
Ticket 47787 - A replicated MOD fails (Unwilling to perform) if it targets a tombstone
Ticket 47808 - If be_txn plugin fails in ldbm_back_add, adding entry is double freed
Ticket 47815 - Add operations rejected by betxn plugins remain in cache
Ticket 47829: memberof scope: allow to exclude subtrees
Ticket 47823 - attribute uniqueness enforced on all subtrees
Ticket 47797 - DB deadlock when two threads (on separated backend) try to record changes in retroCL
Ticket 47797 - fix the indentation
Ticket 47871 - 389-ds-base-1.3.2.21-1.fc20 crashed over the weekend
Ticket 47889 - DS crashed during ipa-server-install on test_ava_filter
Ticket 47920: Encoding of SearchResultEntry is missing tag
Ticket 47553: Enhance ACIs to have more control over MODRDN operations
Ticket 47942: DS hangs during online total update
Ticket 47988: Schema learning mechanism, in replication, unable to extend an existing definition
Ticket 47901: After total init, nsds5replicaLastInitStatus can report an erroneous error status (like 'Referral')
Ticket 47988: test case
Ticket 47828: DNA scope: allow to exlude some subtrees
Ticket 47936: Create a global lock to serialize write operations over several backends
nturpin (1):
Ticket #3: acl cache overflown problem
root (4):
Bug 480787 - Autoconf parameter --with and --without
Ticket #326 - MemberOf plugin should work on all backends
Ticket #337 - RFE - Improve CLEANRUV functionality
Ticket #216 - RFE - Disable replication agreements
---
.gitignore | 5
389-doap.rdf | 47
Makefile.am | 429
Makefile.in | 8366 +-
README | 11
VERSION.sh | 18
aclocal.m4 | 7490 -
autogen.sh | 108
compile | 245
config.guess | 763
config.h.in | 40
config.sub | 443
configure |40020 ++++------
configure.ac | 273
depcomp | 637
dirsrv.pc.in | 7
dirsrvtests/create_test.py | 570
dirsrvtests/data/README | 11
dirsrvtests/data/basic/dse.ldif.broken | 95
dirsrvtests/data/ticket47953/ticket47953.ldif | 27
dirsrvtests/data/ticket47988/schema_ipa3.3.tar.gz |binary
dirsrvtests/data/ticket47988/schema_ipa4.1.tar.gz |binary
dirsrvtests/data/ticket48212/example1k_posix.ldif |17017 ++++
dirsrvtests/suites/acct_usability_plugin/acct_usability_test.py | 85
dirsrvtests/suites/acctpolicy_plugin/acctpolicy_test.py | 85
dirsrvtests/suites/acl/acl_test.py | 1051
dirsrvtests/suites/attr_encryption/attr_encrypt_test.py | 85
dirsrvtests/suites/attr_uniqueness_plugin/attr_uniqueness_test.py | 237
dirsrvtests/suites/automember_plugin/automember_test.py | 85
dirsrvtests/suites/basic/basic_test.py | 703
dirsrvtests/suites/betxns/betxn_test.py | 257
dirsrvtests/suites/chaining_plugin/chaining_test.py | 85
dirsrvtests/suites/clu/clu_test.py | 107
dirsrvtests/suites/clu/db2ldif_test.py | 84
dirsrvtests/suites/collation_plugin/collatation_test.py | 85
dirsrvtests/suites/config/config_test.py | 189
dirsrvtests/suites/cos_plugin/cos_test.py | 85
dirsrvtests/suites/deref_plugin/deref_test.py | 85
dirsrvtests/suites/disk_monitoring/disk_monitor_test.py | 85
dirsrvtests/suites/distrib_plugin/distrib_test.py | 85
dirsrvtests/suites/dna_plugin/dna_test.py | 85
dirsrvtests/suites/ds_logs/ds_logs_test.py | 85
dirsrvtests/suites/dynamic-plugins/constants.py | 33
dirsrvtests/suites/dynamic-plugins/finalizer.py | 57
dirsrvtests/suites/dynamic-plugins/plugin_tests.py | 2318
dirsrvtests/suites/dynamic-plugins/stress_tests.py | 141
dirsrvtests/suites/dynamic-plugins/test_dynamic_plugins.py | 541
dirsrvtests/suites/filter/filter_test.py | 144
dirsrvtests/suites/get_effective_rights/ger_test.py | 85
dirsrvtests/suites/ldapi/ldapi_test.py | 85
dirsrvtests/suites/linkedattrs_plugin/linked_attrs_test.py | 85
dirsrvtests/suites/mapping_tree/mapping_tree_test.py | 85
dirsrvtests/suites/memberof_plugin/memberof_test.py | 85
dirsrvtests/suites/memory_leaks/range_search_test.py | 130
dirsrvtests/suites/mep_plugin/mep_test.py | 85
dirsrvtests/suites/monitor/monitor_test.py | 85
dirsrvtests/suites/paged_results/paged_results_test.py | 85
dirsrvtests/suites/pam_passthru_plugin/pam_test.py | 85
dirsrvtests/suites/passthru_plugin/passthru_test.py | 85
dirsrvtests/suites/password/password_test.py | 135
dirsrvtests/suites/password/pwdAdmin_test.py | 439
dirsrvtests/suites/password/pwdPolicy_test.py | 74
dirsrvtests/suites/posix_winsync_plugin/posix_winsync_test.py | 85
dirsrvtests/suites/psearch/psearch_test.py | 85
dirsrvtests/suites/referint_plugin/referint_test.py | 85
dirsrvtests/suites/replication/cleanallruv_test.py | 1486
dirsrvtests/suites/replication/wait_for_async_feature_test.py | 280
dirsrvtests/suites/replsync_plugin/repl_sync_test.py | 85
dirsrvtests/suites/resource_limits/res_limits_test.py | 85
dirsrvtests/suites/retrocl_plugin/retrocl_test.py | 85
dirsrvtests/suites/reverpwd_plugin/reverpwd_test.py | 85
dirsrvtests/suites/roles_plugin/roles_test.py | 85
dirsrvtests/suites/rootdn_plugin/rootdn_plugin_test.py | 770
dirsrvtests/suites/sasl/sasl_test.py | 85
dirsrvtests/suites/schema/constants.py | 33
dirsrvtests/suites/schema/finalizer.py | 51
dirsrvtests/suites/schema/test_schema.py | 277
dirsrvtests/suites/schema_reload_plugin/schema_reload_test.py | 85
dirsrvtests/suites/snmp/snmp_test.py | 85
dirsrvtests/suites/ssl/ssl_test.py | 85
dirsrvtests/suites/syntax_plugin/syntax_test.py | 85
dirsrvtests/suites/usn_plugin/usn_test.py | 85
dirsrvtests/suites/views_plugin/views_test.py | 85
dirsrvtests/suites/vlv/vlv_test.py | 85
dirsrvtests/suites/whoami_plugin/whoami_test.py | 85
dirsrvtests/tickets/constants.py | 69
dirsrvtests/tickets/finalizer.py | 57
dirsrvtests/tickets/ticket365_test.py | 161
dirsrvtests/tickets/ticket47313_test.py | 226
dirsrvtests/tickets/ticket47384_test.py | 159
dirsrvtests/tickets/ticket47431_test.py | 251
dirsrvtests/tickets/ticket47462_test.py | 452
dirsrvtests/tickets/ticket47490_test.py | 677
dirsrvtests/tickets/ticket47553_test.py | 166
dirsrvtests/tickets/ticket47560_test.py | 307
dirsrvtests/tickets/ticket47573_test.py | 418
dirsrvtests/tickets/ticket47619_test.py | 301
dirsrvtests/tickets/ticket47653MMR_test.py | 555
dirsrvtests/tickets/ticket47653_test.py | 435
dirsrvtests/tickets/ticket47664_test.py | 273
dirsrvtests/tickets/ticket47676_test.py | 488
dirsrvtests/tickets/ticket47714_test.py | 312
dirsrvtests/tickets/ticket47721_test.py | 495
dirsrvtests/tickets/ticket47781_test.py | 238
dirsrvtests/tickets/ticket47787_test.py | 633
dirsrvtests/tickets/ticket47808_test.py | 215
dirsrvtests/tickets/ticket47815_test.py | 230
dirsrvtests/tickets/ticket47819_test.py | 348
dirsrvtests/tickets/ticket47823_test.py | 1049
dirsrvtests/tickets/ticket47824_test.py | 313
dirsrvtests/tickets/ticket47828_test.py | 720
dirsrvtests/tickets/ticket47829_test.py | 712
dirsrvtests/tickets/ticket47838_test.py | 872
dirsrvtests/tickets/ticket47869MMR_test.py | 416
dirsrvtests/tickets/ticket47871_test.py | 306
dirsrvtests/tickets/ticket47900_test.py | 398
dirsrvtests/tickets/ticket47920_test.py | 251
dirsrvtests/tickets/ticket47931_test.py | 207
dirsrvtests/tickets/ticket47937_test.py | 237
dirsrvtests/tickets/ticket47950_test.py | 273
dirsrvtests/tickets/ticket47953_test.py | 120
dirsrvtests/tickets/ticket47963_test.py | 191
dirsrvtests/tickets/ticket47970_test.py | 206
dirsrvtests/tickets/ticket47973_test.py | 235
dirsrvtests/tickets/ticket47980_test.py | 710
dirsrvtests/tickets/ticket47981_test.py | 345
dirsrvtests/tickets/ticket47988_test.py | 576
dirsrvtests/tickets/ticket48005_test.py | 407
dirsrvtests/tickets/ticket48109_test.py | 386
dirsrvtests/tickets/ticket48212_test.py | 210
dirsrvtests/tickets/ticket48226_test.py | 249
dirsrvtests/tickets/ticket48228_test.py | 327
dirsrvtests/tickets/ticket48325_test.py | 270
dirsrvtests/tmp/README | 10
include/base/dbtbase.h | 2
include/base/file.h | 5
include/base/lexer.h | 126
include/base/pool.h | 5
include/base/rwlock.h | 91
include/i18n.h | 121
include/ldaputil/ldaputil.h | 10
include/libaccess/acl.h | 4
include/libaccess/aclerror.h | 13
include/libaccess/acleval.h | 3
include/libaccess/aclproto.h | 25
include/libaccess/aclstruct.h | 2
include/libaccess/dbtlibaccess.h | 3
include/libaccess/las.h | 6
include/libaccess/nsautherr.h | 2
include/libaccess/nserror.h | 2
include/libaccess/symbols.h | 4
include/public/nsacl/aclapi.h | 18
include/public/nsacl/acldef.h | 2
include/public/nsacl/nserrdef.h | 2
install-sh | 538
ldap/admin/src/base-initconfig.in | 44
ldap/admin/src/initconfig.in | 37
ldap/admin/src/logconv.pl | 3561
ldap/admin/src/scripts/10cleanupldapi.pl | 23
ldap/admin/src/scripts/10fixrundir.pl | 11
ldap/admin/src/scripts/20betxn.pl | 74
ldap/admin/src/scripts/50AES-pbe-plugin.ldif | 16
ldap/admin/src/scripts/50acctusabilityplugin.ldif | 21
ldap/admin/src/scripts/50automemberplugin.ldif | 15
ldap/admin/src/scripts/50contentsync.ldif | 23
ldap/admin/src/scripts/50fixNsState.pl | 240
ldap/admin/src/scripts/50managedentriesplugin.ldif | 16
ldap/admin/src/scripts/50nstombstonecsn.ldif | 7
ldap/admin/src/scripts/50refintprecedence.ldif | 4
ldap/admin/src/scripts/50rootdnaccesscontrolplugin.ldif | 15
ldap/admin/src/scripts/50smd5pwdstorageplugin.ldif | 5
ldap/admin/src/scripts/50targetuniqueid.ldif | 7
ldap/admin/src/scripts/50updateconfig.ldif | 10
ldap/admin/src/scripts/52updateAESplugin.pl | 84
ldap/admin/src/scripts/60upgradeconfigfiles.pl | 69
ldap/admin/src/scripts/60upgradeschemafiles.pl | 2
ldap/admin/src/scripts/70upgradefromldif.pl | 108
ldap/admin/src/scripts/80upgradednformat.pl.in | 307
ldap/admin/src/scripts/81changelog.pl | 34
ldap/admin/src/scripts/82targetuniqueidindex.pl | 52
ldap/admin/src/scripts/90subtreerename.pl | 21
ldap/admin/src/scripts/91subtreereindex.pl | 148
ldap/admin/src/scripts/DSCreate.pm.in | 478
ldap/admin/src/scripts/DSDialogs.pm | 12
ldap/admin/src/scripts/DSMigration.pm.in | 49
ldap/admin/src/scripts/DSSharedLib.in | 227
ldap/admin/src/scripts/DSUpdate.pm.in | 52
ldap/admin/src/scripts/DSUtil.pm.in | 884
ldap/admin/src/scripts/DialogManager.pm | 241
ldap/admin/src/scripts/DialogManager.pm.in | 241
ldap/admin/src/scripts/Inf.pm | 67
ldap/admin/src/scripts/Migration.pm.in | 20
ldap/admin/src/scripts/Setup.pm.in | 20
ldap/admin/src/scripts/SetupDialogs.pm.in | 31
ldap/admin/src/scripts/SetupLog.pm | 8
ldap/admin/src/scripts/bak2db.in | 76
ldap/admin/src/scripts/bak2db.pl.in | 149
ldap/admin/src/scripts/cleanallruv.pl.in | 154
ldap/admin/src/scripts/db2bak.in | 76
ldap/admin/src/scripts/db2bak.pl.in | 178
ldap/admin/src/scripts/db2index.in | 83
ldap/admin/src/scripts/db2index.pl.in | 213
ldap/admin/src/scripts/db2ldif.in | 160
ldap/admin/src/scripts/db2ldif.pl.in | 293
ldap/admin/src/scripts/dbmon.sh | 221
ldap/admin/src/scripts/dbverify.in | 70
ldap/admin/src/scripts/dn2rdn.in | 58
ldap/admin/src/scripts/dnaplugindepends.ldif | 3
ldap/admin/src/scripts/ds-logpipe.py | 223
ldap/admin/src/scripts/exampleupdate.ldif | 2
ldap/admin/src/scripts/exampleupdate.sh | 10
ldap/admin/src/scripts/fixup-linkedattrs.pl.in | 140
ldap/admin/src/scripts/fixup-memberof.pl.in | 149
ldap/admin/src/scripts/ldif2db.in | 109
ldap/admin/src/scripts/ldif2db.pl.in | 243
ldap/admin/src/scripts/ldif2ldap.in | 173
ldap/admin/src/scripts/logregex.py | 16
ldap/admin/src/scripts/migrate-ds.pl.in | 13
ldap/admin/src/scripts/monitor.in | 170
ldap/admin/src/scripts/ns-accountstatus.pl.in | 708
ldap/admin/src/scripts/ns-activate.pl.in | 710
ldap/admin/src/scripts/ns-inactivate.pl.in | 712
ldap/admin/src/scripts/ns-newpwpolicy.pl.in | 217
ldap/admin/src/scripts/remove-ds.pl.in | 43
ldap/admin/src/scripts/repl-monitor.pl.in | 782
ldap/admin/src/scripts/restart-dirsrv.in | 28
ldap/admin/src/scripts/restoreconfig.in | 52
ldap/admin/src/scripts/saveconfig.in | 53
ldap/admin/src/scripts/schema-reload.pl.in | 139
ldap/admin/src/scripts/setup-ds.pl.in | 17
ldap/admin/src/scripts/setup-ds.res.in | 41
ldap/admin/src/scripts/start-dirsrv.in | 63
ldap/admin/src/scripts/stop-dirsrv.in | 65
ldap/admin/src/scripts/suffix2instance.in | 58
ldap/admin/src/scripts/syntax-validate.pl.in | 151
ldap/admin/src/scripts/template-bak2db.in | 44
ldap/admin/src/scripts/template-bak2db.pl.in | 102
ldap/admin/src/scripts/template-cleanallruv.pl.in | 54
ldap/admin/src/scripts/template-db2bak.in | 23
ldap/admin/src/scripts/template-db2bak.pl.in | 93
ldap/admin/src/scripts/template-db2index.in | 26
ldap/admin/src/scripts/template-db2index.pl.in | 192
ldap/admin/src/scripts/template-db2ldif.in | 79
ldap/admin/src/scripts/template-db2ldif.pl.in | 238
ldap/admin/src/scripts/template-dbverify.in | 41
ldap/admin/src/scripts/template-dn2rdn.in | 23
ldap/admin/src/scripts/template-fixup-linkedattrs.pl.in | 120
ldap/admin/src/scripts/template-fixup-memberof.pl.in | 131
ldap/admin/src/scripts/template-fixup-memberuid.pl.in | 180
ldap/admin/src/scripts/template-ldif2db.in | 23
ldap/admin/src/scripts/template-ldif2db.pl.in | 194
ldap/admin/src/scripts/template-ldif2ldap.in | 15
ldap/admin/src/scripts/template-monitor.in | 14
ldap/admin/src/scripts/template-ns-accountstatus.pl.in | 810
ldap/admin/src/scripts/template-ns-activate.pl.in | 810
ldap/admin/src/scripts/template-ns-inactivate.pl.in | 810
ldap/admin/src/scripts/template-ns-newpwpolicy.pl.in | 253
ldap/admin/src/scripts/template-restart-slapd.in | 12
ldap/admin/src/scripts/template-restoreconfig.in | 16
ldap/admin/src/scripts/template-saveconfig.in | 17
ldap/admin/src/scripts/template-schema-reload.pl.in | 120
ldap/admin/src/scripts/template-start-slapd.in | 12
ldap/admin/src/scripts/template-stop-slapd.in | 11
ldap/admin/src/scripts/template-suffix2instance.in | 15
ldap/admin/src/scripts/template-syntax-validate.pl.in | 131
ldap/admin/src/scripts/template-upgradedb.in | 17
ldap/admin/src/scripts/template-upgradednformat.in | 5
ldap/admin/src/scripts/template-usn-tombstone-cleanup.pl.in | 149
ldap/admin/src/scripts/template-verify-db.pl.in | 223
ldap/admin/src/scripts/template-vlvindex.in | 16
ldap/admin/src/scripts/upgradedb.in | 59
ldap/admin/src/scripts/upgradednformat.in | 71
ldap/admin/src/scripts/usn-tombstone-cleanup.pl.in | 155
ldap/admin/src/scripts/verify-db.pl.in | 268
ldap/admin/src/scripts/vlvindex.in | 64
ldap/admin/src/slapd.inf.in | 2
ldap/admin/src/template-initconfig.in | 18
ldap/docs/LICENSE.txt | 132
ldap/docs/README.txt | 11
ldap/include/ldaplog.h | 32
ldap/ldif/50posix-winsync-plugin.ldif | 21
ldap/ldif/50replication-plugins.ldif | 27
ldap/ldif/template-baseacis.ldif.in | 2
ldap/ldif/template-bitwise.ldif.in | 6
ldap/ldif/template-dnaplugin.ldif.in | 2
ldap/ldif/template-dse.ldif.in | 214
ldap/ldif/template-pampta.ldif.in | 2
ldap/ldif/template-suffix-db.ldif.in | 1
ldap/libraries/libavl/avl.c | 7
ldap/schema/00core.ldif | 72
ldap/schema/01core389.ldif | 234
ldap/schema/02common.ldif | 25
ldap/schema/05rfc4523.ldif | 14
ldap/schema/05rfc4524.ldif | 30
ldap/schema/06inetorgperson.ldif | 5
ldap/schema/10automember-plugin.ldif | 123
ldap/schema/10dna-plugin.ldif | 248
ldap/schema/10mep-plugin.ldif | 104
ldap/schema/30ns-common.ldif | 4
ldap/schema/50ns-directory.ldif | 4
ldap/schema/50ns-mail.ldif | 10
ldap/schema/60acctpolicy.ldif | 47
ldap/schema/60nis.ldif | 2
ldap/schema/60pam-plugin.ldif | 3
ldap/schema/60posix-winsync-plugin.ldif | 44
ldap/schema/60qmail.ldif | 24
ldap/schema/60radius.ldif | 132
ldap/schema/60rfc3712.ldif | 9
ldap/schema/60sabayon.ldif | 10
ldap/schema/60samba3.ldif | 36
ldap/schema/60sendmail.ldif | 54
ldap/schema/60sudo.ldif | 58
ldap/schema/slapd-collations.conf | 234
ldap/servers/plugins/acct_usability/acct_usability.c | 457
ldap/servers/plugins/acct_usability/acct_usability.h | 63
ldap/servers/plugins/acctpolicy/acct_config.c | 175
ldap/servers/plugins/acctpolicy/acct_init.c | 299
ldap/servers/plugins/acctpolicy/acct_plugin.c | 497
ldap/servers/plugins/acctpolicy/acct_util.c | 277
ldap/servers/plugins/acctpolicy/acctpolicy.h | 100
ldap/servers/plugins/acctpolicy/sampleconfig.ldif | 40
ldap/servers/plugins/acctpolicy/samplepolicy.ldif | 27
ldap/servers/plugins/acl/acl.c | 1056
ldap/servers/plugins/acl/acl.h | 121
ldap/servers/plugins/acl/acl_ext.c | 290
ldap/servers/plugins/acl/aclanom.c | 85
ldap/servers/plugins/acl/acleffectiverights.c | 218
ldap/servers/plugins/acl/aclgroup.c | 32
ldap/servers/plugins/acl/aclinit.c | 6
ldap/servers/plugins/acl/acllas.c | 619
ldap/servers/plugins/acl/acllist.c | 204
ldap/servers/plugins/acl/aclparse.c | 958
ldap/servers/plugins/acl/aclplugin.c | 58
ldap/servers/plugins/acl/aclproxy.c | 232
ldap/servers/plugins/acl/aclutil.c | 141
ldap/servers/plugins/automember/automember.c | 2767
ldap/servers/plugins/automember/automember.h | 134
ldap/servers/plugins/bitwise/bitwise.c | 23
ldap/servers/plugins/chainingdb/cb.h | 15
ldap/servers/plugins/chainingdb/cb_add.c | 245
ldap/servers/plugins/chainingdb/cb_bind.c | 230
ldap/servers/plugins/chainingdb/cb_close.c | 78
ldap/servers/plugins/chainingdb/cb_compare.c | 104
ldap/servers/plugins/chainingdb/cb_config.c | 221
ldap/servers/plugins/chainingdb/cb_conn_stateless.c | 103
ldap/servers/plugins/chainingdb/cb_controls.c | 52
ldap/servers/plugins/chainingdb/cb_delete.c | 263
ldap/servers/plugins/chainingdb/cb_init.c | 6
ldap/servers/plugins/chainingdb/cb_instance.c | 646
ldap/servers/plugins/chainingdb/cb_modify.c | 305
ldap/servers/plugins/chainingdb/cb_modrdn.c | 308
ldap/servers/plugins/chainingdb/cb_monitor.c | 6
ldap/servers/plugins/chainingdb/cb_schema.c | 4
ldap/servers/plugins/chainingdb/cb_search.c | 552
ldap/servers/plugins/chainingdb/cb_utils.c | 60
ldap/servers/plugins/collation/collate.c | 49
ldap/servers/plugins/collation/orfilter.c | 19
ldap/servers/plugins/cos/cos.c | 85
ldap/servers/plugins/cos/cos_cache.c | 942
ldap/servers/plugins/cos/cos_cache.h | 1
ldap/servers/plugins/deref/deref.c | 166
ldap/servers/plugins/distrib/Makefile | 2
ldap/servers/plugins/dna/dna.c | 2524
ldap/servers/plugins/http/http_impl.c | 85
ldap/servers/plugins/linkedattrs/fixup_task.c | 238
ldap/servers/plugins/linkedattrs/linked_attrs.c | 442
ldap/servers/plugins/linkedattrs/linked_attrs.h | 5
ldap/servers/plugins/memberof/memberof.c | 1723
ldap/servers/plugins/memberof/memberof.h | 33
ldap/servers/plugins/memberof/memberof_config.c | 775
ldap/servers/plugins/mep/mep.c | 2883
ldap/servers/plugins/mep/mep.h | 130
ldap/servers/plugins/pam_passthru/pam_passthru.h | 50
ldap/servers/plugins/pam_passthru/pam_ptconfig.c | 735
ldap/servers/plugins/pam_passthru/pam_ptimpl.c | 90
ldap/servers/plugins/pam_passthru/pam_ptpreop.c | 661
ldap/servers/plugins/passthru/passthru.h | 9
ldap/servers/plugins/passthru/ptbind.c | 6
ldap/servers/plugins/passthru/ptconfig.c | 484
ldap/servers/plugins/passthru/ptconn.c | 8
ldap/servers/plugins/passthru/ptpreop.c | 32
ldap/servers/plugins/posix-winsync/README | 50
ldap/servers/plugins/posix-winsync/posix-group-func.c | 1027
ldap/servers/plugins/posix-winsync/posix-group-func.h | 25
ldap/servers/plugins/posix-winsync/posix-group-task.c | 520
ldap/servers/plugins/posix-winsync/posix-winsync-config.c | 327
ldap/servers/plugins/posix-winsync/posix-winsync.c | 2119
ldap/servers/plugins/posix-winsync/posix-wsp-ident.h | 58
ldap/servers/plugins/pwdstorage/smd5_pwd.c | 9
ldap/servers/plugins/referint/referint.c | 2165
ldap/servers/plugins/replication/cl4_api.c | 2
ldap/servers/plugins/replication/cl5.h | 5
ldap/servers/plugins/replication/cl5_api.c | 3595
ldap/servers/plugins/replication/cl5_api.h | 184
ldap/servers/plugins/replication/cl5_clcache.c | 180
ldap/servers/plugins/replication/cl5_clcache.h | 2
ldap/servers/plugins/replication/cl5_config.c | 373
ldap/servers/plugins/replication/cl5_init.c | 4
ldap/servers/plugins/replication/cl5_test.c | 4
ldap/servers/plugins/replication/cl_crypt.c | 203
ldap/servers/plugins/replication/cl_crypt.h | 53
ldap/servers/plugins/replication/csnpl.c | 74
ldap/servers/plugins/replication/legacy_consumer.c | 43
ldap/servers/plugins/replication/llist.c | 8
ldap/servers/plugins/replication/repl-session-plugin.h | 115
ldap/servers/plugins/replication/repl.h | 16
ldap/servers/plugins/replication/repl5.h | 240
ldap/servers/plugins/replication/repl5_agmt.c | 1439
ldap/servers/plugins/replication/repl5_agmtlist.c | 330
ldap/servers/plugins/replication/repl5_connection.c | 632
ldap/servers/plugins/replication/repl5_inc_protocol.c | 1594
ldap/servers/plugins/replication/repl5_init.c | 462
ldap/servers/plugins/replication/repl5_mtnode_ext.c | 19
ldap/servers/plugins/replication/repl5_plugins.c | 462
ldap/servers/plugins/replication/repl5_prot_private.h | 10
ldap/servers/plugins/replication/repl5_protocol.c | 191
ldap/servers/plugins/replication/repl5_protocol_util.c | 574
ldap/servers/plugins/replication/repl5_replica.c | 2011
ldap/servers/plugins/replication/repl5_replica_config.c | 3100
ldap/servers/plugins/replication/repl5_replica_dnhash.c | 26
ldap/servers/plugins/replication/repl5_replica_hash.c | 30
ldap/servers/plugins/replication/repl5_ruv.c | 776
ldap/servers/plugins/replication/repl5_ruv.h | 32
ldap/servers/plugins/replication/repl5_tot_protocol.c | 190
ldap/servers/plugins/replication/repl5_total.c | 26
ldap/servers/plugins/replication/repl5_updatedn_list.c | 126
ldap/servers/plugins/replication/repl_bind.c | 9
ldap/servers/plugins/replication/repl_compare.c | 18
ldap/servers/plugins/replication/repl_connext.c | 158
ldap/servers/plugins/replication/repl_controls.c | 2
ldap/servers/plugins/replication/repl_extop.c | 930
ldap/servers/plugins/replication/repl_globals.c | 26
ldap/servers/plugins/replication/repl_init.c | 1
ldap/servers/plugins/replication/repl_objset.c | 9
ldap/servers/plugins/replication/repl_ops.c | 15
ldap/servers/plugins/replication/repl_session_plugin.c | 188
ldap/servers/plugins/replication/repl_shared.h | 20
ldap/servers/plugins/replication/replutil.c | 167
ldap/servers/plugins/replication/test_repl_session_plugin.c | 335
ldap/servers/plugins/replication/urp.c | 420
ldap/servers/plugins/replication/urp.h | 8
ldap/servers/plugins/replication/urp_glue.c | 51
ldap/servers/plugins/replication/urp_tombstone.c | 116
ldap/servers/plugins/replication/windows_connection.c | 394
ldap/servers/plugins/replication/windows_inc_protocol.c | 239
ldap/servers/plugins/replication/windows_private.c | 2890
ldap/servers/plugins/replication/windows_protocol_util.c | 2595
ldap/servers/plugins/replication/windows_tot_protocol.c | 229
ldap/servers/plugins/replication/windowsrepl.h | 83
ldap/servers/plugins/replication/winsync-plugin.h | 499
ldap/servers/plugins/retrocl/retrocl.c | 333
ldap/servers/plugins/retrocl/retrocl.h | 13
ldap/servers/plugins/retrocl/retrocl_cn.c | 59
ldap/servers/plugins/retrocl/retrocl_create.c | 17
ldap/servers/plugins/retrocl/retrocl_po.c | 273
ldap/servers/plugins/retrocl/retrocl_trim.c | 237
ldap/servers/plugins/rever/des.c | 521
ldap/servers/plugins/rever/pbe.c | 621
ldap/servers/plugins/rever/rever.c | 122
ldap/servers/plugins/rever/rever.h | 11
ldap/servers/plugins/roles/roles_cache.c | 217
ldap/servers/plugins/roles/roles_cache.h | 2
ldap/servers/plugins/roles/roles_plugin.c | 74
ldap/servers/plugins/rootdn_access/rootdn_access.c | 751
ldap/servers/plugins/rootdn_access/rootdn_access.h | 55
ldap/servers/plugins/schema_reload/schema_reload.c | 114
ldap/servers/plugins/shared/plugin-utils.h | 112
ldap/servers/plugins/shared/utils.c | 508
ldap/servers/plugins/statechange/statechange.c | 125
ldap/servers/plugins/sync/sync.h | 204
ldap/servers/plugins/sync/sync_init.c | 177
ldap/servers/plugins/sync/sync_persist.c | 725
ldap/servers/plugins/sync/sync_refresh.c | 771
ldap/servers/plugins/sync/sync_util.c | 743
ldap/servers/plugins/syntaxes/bin.c | 142
ldap/servers/plugins/syntaxes/bitstring.c | 68
ldap/servers/plugins/syntaxes/ces.c | 172
ldap/servers/plugins/syntaxes/cis.c | 321
ldap/servers/plugins/syntaxes/deliverymethod.c | 32
ldap/servers/plugins/syntaxes/dn.c | 72
ldap/servers/plugins/syntaxes/facsimile.c | 38
ldap/servers/plugins/syntaxes/guide.c | 32
ldap/servers/plugins/syntaxes/int.c | 96
ldap/servers/plugins/syntaxes/nameoptuid.c | 73
ldap/servers/plugins/syntaxes/numericstring.c | 148
ldap/servers/plugins/syntaxes/sicis.c | 32
ldap/servers/plugins/syntaxes/string.c | 455
ldap/servers/plugins/syntaxes/syntax.h | 61
ldap/servers/plugins/syntaxes/syntax_common.c | 118
ldap/servers/plugins/syntaxes/tel.c | 94
ldap/servers/plugins/syntaxes/teletex.c | 32
ldap/servers/plugins/syntaxes/telex.c | 31
ldap/servers/plugins/syntaxes/validate.c | 17
ldap/servers/plugins/syntaxes/validate_task.c | 44
ldap/servers/plugins/syntaxes/value.c | 134
ldap/servers/plugins/uiduniq/7bit.c | 168
ldap/servers/plugins/uiduniq/plugin-utils.h | 96
ldap/servers/plugins/uiduniq/uid.c | 824
ldap/servers/plugins/uiduniq/utils.c | 249
ldap/servers/plugins/usn/usn.c | 428
ldap/servers/plugins/usn/usn.h | 3
ldap/servers/plugins/usn/usn_cleanup.c | 101
ldap/servers/plugins/views/views.c | 180
ldap/servers/plugins/whoami/whoami.c | 148
ldap/servers/slapd/abandon.c | 13
ldap/servers/slapd/add.c | 439
ldap/servers/slapd/agtmmap.c | 117
ldap/servers/slapd/agtmmap.h | 2
ldap/servers/slapd/apibroker.c | 60
ldap/servers/slapd/attr.c | 412
ldap/servers/slapd/attrlist.c | 50
ldap/servers/slapd/attrsyntax.c | 1030
ldap/servers/slapd/auditlog.c | 87
ldap/servers/slapd/auth.c | 154
ldap/servers/slapd/ava.c | 2
ldap/servers/slapd/back-ldbm/ancestorid.c | 228
ldap/servers/slapd/back-ldbm/archive.c | 141
ldap/servers/slapd/back-ldbm/back-ldbm.h | 155
ldap/servers/slapd/back-ldbm/backentry.c | 7
ldap/servers/slapd/back-ldbm/cache.c | 513
ldap/servers/slapd/back-ldbm/dbhelp.c | 77
ldap/servers/slapd/back-ldbm/dblayer.c | 3196
ldap/servers/slapd/back-ldbm/dblayer.h | 20
ldap/servers/slapd/back-ldbm/dbsize.c | 7
ldap/servers/slapd/back-ldbm/dbtest.c | 349
ldap/servers/slapd/back-ldbm/dbverify.c | 19
ldap/servers/slapd/back-ldbm/dbversion.c | 82
ldap/servers/slapd/back-ldbm/dn2entry.c | 63
ldap/servers/slapd/back-ldbm/filterindex.c | 348
ldap/servers/slapd/back-ldbm/findentry.c | 147
ldap/servers/slapd/back-ldbm/id2entry.c | 199
ldap/servers/slapd/back-ldbm/idl.c | 172
ldap/servers/slapd/back-ldbm/idl_common.c | 42
ldap/servers/slapd/back-ldbm/idl_new.c | 554
ldap/servers/slapd/back-ldbm/idl_shim.c | 17
ldap/servers/slapd/back-ldbm/import-merge.c | 44
ldap/servers/slapd/back-ldbm/import-threads.c | 1891
ldap/servers/slapd/back-ldbm/import.c | 493
ldap/servers/slapd/back-ldbm/import.h | 57
ldap/servers/slapd/back-ldbm/index.c | 801
ldap/servers/slapd/back-ldbm/init.c | 89
ldap/servers/slapd/back-ldbm/instance.c | 178
ldap/servers/slapd/back-ldbm/ldbm_add.c | 1605
ldap/servers/slapd/back-ldbm/ldbm_attr.c | 953
ldap/servers/slapd/back-ldbm/ldbm_attrcrypt.c | 1034
ldap/servers/slapd/back-ldbm/ldbm_attrcrypt_config.c | 4
ldap/servers/slapd/back-ldbm/ldbm_bind.c | 44
ldap/servers/slapd/back-ldbm/ldbm_compare.c | 27
ldap/servers/slapd/back-ldbm/ldbm_config.c | 561
ldap/servers/slapd/back-ldbm/ldbm_config.h | 19
ldap/servers/slapd/back-ldbm/ldbm_delete.c | 1418
ldap/servers/slapd/back-ldbm/ldbm_entryrdn.c | 1848
ldap/servers/slapd/back-ldbm/ldbm_index_config.c | 699
ldap/servers/slapd/back-ldbm/ldbm_instance_config.c | 293
ldap/servers/slapd/back-ldbm/ldbm_modify.c | 834
ldap/servers/slapd/back-ldbm/ldbm_modrdn.c | 1814
ldap/servers/slapd/back-ldbm/ldbm_search.c | 903
ldap/servers/slapd/back-ldbm/ldbm_usn.c | 83
ldap/servers/slapd/back-ldbm/ldif2ldbm.c | 1068
ldap/servers/slapd/back-ldbm/matchrule.c | 60
ldap/servers/slapd/back-ldbm/misc.c | 322
ldap/servers/slapd/back-ldbm/monitor.c | 72
ldap/servers/slapd/back-ldbm/nextid.c | 17
ldap/servers/slapd/back-ldbm/parents.c | 148
ldap/servers/slapd/back-ldbm/perfctrs.c | 26
ldap/servers/slapd/back-ldbm/proto-back-ldbm.h | 115
ldap/servers/slapd/back-ldbm/seq.c | 115
ldap/servers/slapd/back-ldbm/sort.c | 196
ldap/servers/slapd/back-ldbm/start.c | 109
ldap/servers/slapd/back-ldbm/upgrade.c | 72
ldap/servers/slapd/back-ldbm/vlv.c | 408
ldap/servers/slapd/back-ldbm/vlv_srch.c | 17
ldap/servers/slapd/back-ldbm/vlv_srch.h | 3
ldap/servers/slapd/back-ldif/back-ldif.h | 2
ldap/servers/slapd/back-ldif/bind.c | 4
ldap/servers/slapd/back-ldif/modify.c | 2
ldap/servers/slapd/back-ldif/modrdn.c | 12
ldap/servers/slapd/backend.c | 252
ldap/servers/slapd/backend_manager.c | 59
ldap/servers/slapd/bind.c | 466
ldap/servers/slapd/bulk_import.c | 39
ldap/servers/slapd/charray.c | 41
ldap/servers/slapd/compare.c | 43
ldap/servers/slapd/computed.c | 184
ldap/servers/slapd/config.c | 91
ldap/servers/slapd/configdse.c | 113
ldap/servers/slapd/connection.c | 1185
ldap/servers/slapd/conntable.c | 52
ldap/servers/slapd/control.c | 64
ldap/servers/slapd/csn.c | 89
ldap/servers/slapd/csngen.c | 75
ldap/servers/slapd/csnset.c | 4
ldap/servers/slapd/daemon.c | 1203
ldap/servers/slapd/defbackend.c | 3
ldap/servers/slapd/delete.c | 132
ldap/servers/slapd/dl.c | 2
ldap/servers/slapd/dn.c | 2243
ldap/servers/slapd/dse.c | 1212
ldap/servers/slapd/dynalib.c | 36
ldap/servers/slapd/entry.c | 2174
ldap/servers/slapd/entrywsi.c | 812
ldap/servers/slapd/errormap.c | 18
ldap/servers/slapd/eventq.c | 4
ldap/servers/slapd/extendop.c | 37
ldap/servers/slapd/factory.c | 211
ldap/servers/slapd/fe.h | 33
ldap/servers/slapd/fedse.c | 251
ldap/servers/slapd/filter.c | 255
ldap/servers/slapd/filter.h | 1
ldap/servers/slapd/filtercmp.c | 26
ldap/servers/slapd/filterentry.c | 50
ldap/servers/slapd/generation.c | 1
ldap/servers/slapd/getfilelist.c | 4
ldap/servers/slapd/globals.c | 7
ldap/servers/slapd/index_subsystem.c | 38
ldap/servers/slapd/init.c | 2
ldap/servers/slapd/intrinsics.h | 7
ldap/servers/slapd/ldaputil.c | 1371
ldap/servers/slapd/lenstr.c | 6
ldap/servers/slapd/libglobs.c | 3384
ldap/servers/slapd/libslapd.def | 10
ldap/servers/slapd/log.c | 484
ldap/servers/slapd/log.h | 20
ldap/servers/slapd/main.c | 483
ldap/servers/slapd/mapping_tree.c | 656
ldap/servers/slapd/match.c | 96
ldap/servers/slapd/modify.c | 850
ldap/servers/slapd/modrdn.c | 373
ldap/servers/slapd/modutil.c | 77
ldap/servers/slapd/mozldap.h | 45
ldap/servers/slapd/ntperfdll/nsldapctr.cpp | 32
ldap/servers/slapd/ntperfdll/nsldapctrdef.h | 2
ldap/servers/slapd/ntperfdll/nsldapctrs.h | 10
ldap/servers/slapd/openldapber.h | 25
ldap/servers/slapd/operation.c | 217
ldap/servers/slapd/opshared.c | 713
ldap/servers/slapd/pagedresults.c | 893
ldap/servers/slapd/passwd_extop.c | 210
ldap/servers/slapd/pblock.c | 742
ldap/servers/slapd/plugin.c | 1980
ldap/servers/slapd/plugin_acl.c | 52
ldap/servers/slapd/plugin_internal_op.c | 204
ldap/servers/slapd/plugin_mr.c | 474
ldap/servers/slapd/plugin_syntax.c | 507
ldap/servers/slapd/protect_db.c | 24
ldap/servers/slapd/protect_db.h | 7
ldap/servers/slapd/proto-slap.h | 274
ldap/servers/slapd/proxyauth.c | 253
ldap/servers/slapd/psearch.c | 117
ldap/servers/slapd/pw.c | 1490
ldap/servers/slapd/pw.h | 32
ldap/servers/slapd/pw_mgmt.c | 177
ldap/servers/slapd/pw_retry.c | 124
ldap/servers/slapd/rdn.c | 293
ldap/servers/slapd/referral.c | 29
ldap/servers/slapd/regex.c | 35
ldap/servers/slapd/resourcelimit.c | 84
ldap/servers/slapd/result.c | 990
ldap/servers/slapd/rootdse.c | 12
ldap/servers/slapd/rwlock.c | 257
ldap/servers/slapd/rwlock.h | 65
ldap/servers/slapd/sasl_io.c | 352
ldap/servers/slapd/sasl_map.c | 278
ldap/servers/slapd/saslbind.c | 303
ldap/servers/slapd/schema.c | 6247 +
ldap/servers/slapd/schemaparse.c | 17
ldap/servers/slapd/search.c | 227
ldap/servers/slapd/security_wrappers.c | 42
ldap/servers/slapd/slap.h | 686
ldap/servers/slapd/slapi-plugin-compat4.h | 6
ldap/servers/slapd/slapi-plugin.h | 2308
ldap/servers/slapd/slapi-private.h | 239
ldap/servers/slapd/slapi2nspr.c | 93
ldap/servers/slapd/slapi_counter.c | 26
ldap/servers/slapd/snmp_collator.c | 112
ldap/servers/slapd/sort.c | 11
ldap/servers/slapd/ssl.c | 1571
ldap/servers/slapd/start_tls_extop.c | 230
ldap/servers/slapd/str2filter.c | 7
ldap/servers/slapd/task.c | 816
ldap/servers/slapd/test-plugins/Makefile.server | 2
ldap/servers/slapd/test-plugins/testbind.c | 1
ldap/servers/slapd/test-plugins/testdbinterop.c | 6
ldap/servers/slapd/test-plugins/testpostop.c | 3
ldap/servers/slapd/thread_data.c | 243
ldap/servers/slapd/time.c | 91
ldap/servers/slapd/tools/dbscan.c | 145
ldap/servers/slapd/tools/ldclt/data.c | 85
ldap/servers/slapd/tools/ldclt/ldapfct.c | 1233
ldap/servers/slapd/tools/ldclt/ldclt.c | 112
ldap/servers/slapd/tools/ldclt/ldclt.h | 22
ldap/servers/slapd/tools/ldclt/ldclt.man | 2
ldap/servers/slapd/tools/ldclt/ldclt.use | 2
ldap/servers/slapd/tools/ldclt/ldcltU.c | 28
ldap/servers/slapd/tools/ldclt/opCheck.c | 2
ldap/servers/slapd/tools/ldclt/parser.c | 19
ldap/servers/slapd/tools/ldclt/scalab01.c | 190
ldap/servers/slapd/tools/ldclt/threadMain.c | 24
ldap/servers/slapd/tools/ldclt/utils.c | 16
ldap/servers/slapd/tools/ldclt/utils.h | 1
ldap/servers/slapd/tools/ldclt/workarounds.c | 2
ldap/servers/slapd/tools/ldif.c | 9
ldap/servers/slapd/tools/migratecred.c | 15
ldap/servers/slapd/tools/mmldif.c | 47
ldap/servers/slapd/tools/pwenc.c | 25
ldap/servers/slapd/tools/rsearch/addthread.c | 51
ldap/servers/slapd/tools/rsearch/infadd.c | 7
ldap/servers/slapd/tools/rsearch/nametable.c | 13
ldap/servers/slapd/tools/rsearch/rsearch.c | 11
ldap/servers/slapd/tools/rsearch/scripts/dbgen.pl.in | 161
ldap/servers/slapd/tools/rsearch/sdattable.c | 64
ldap/servers/slapd/tools/rsearch/searchthread.c | 130
ldap/servers/slapd/unbind.c | 2
ldap/servers/slapd/uniqueid.c | 99
ldap/servers/slapd/utf8compare.c | 30
ldap/servers/slapd/util.c | 800
ldap/servers/slapd/uuid.c | 24
ldap/servers/slapd/value.c | 62
ldap/servers/slapd/valueset.c | 1223
ldap/servers/slapd/vattr.c | 169
ldap/servers/snmp/NETWORK-SERVICES-MIB.txt | 650
ldap/servers/snmp/RFC-1215.txt | 38
ldap/servers/snmp/RFC1155-SMI.txt | 119
ldap/servers/snmp/SNMPv2-CONF.txt | 322
ldap/servers/snmp/SNMPv2-SMI.txt | 344
ldap/servers/snmp/SNMPv2-TC.txt | 772
ldap/servers/snmp/ldap-agent.c | 38
ldap/servers/snmp/ldap-agent.h | 5
ldap/servers/snmp/main.c | 54
ldap/servers/snmp/netscape-ldap.mib | 759
ldap/servers/snmp/ntagt/nsldapagt_nt.c | 2
ldap/servers/snmp/ntagt/nsldapagt_nt.h | 2
ldap/servers/snmp/redhat-directory.mib | 41
ldap/systools/idsktune.c | 100
lib/base/crit.cpp | 6
lib/base/ereport.cpp | 2
lib/base/file.cpp | 28
lib/base/lexer.cpp | 1015
lib/base/plist.cpp | 3
lib/base/pool.cpp | 56
lib/base/rwlock.cpp | 168
lib/base/system.cpp | 8
lib/base/util.cpp | 25
lib/ldaputil/cert.c | 16
lib/ldaputil/certmap.c | 572
lib/ldaputil/dbconf.c | 14
lib/ldaputil/utest/Makefile | 149
lib/ldaputil/utest/auth.cpp | 611
lib/ldaputil/utest/authtest | 138
lib/ldaputil/utest/certmap.conf | 68
lib/ldaputil/utest/dblist.conf | 47
lib/ldaputil/utest/example.c | 153
lib/ldaputil/utest/plugin.c | 152
lib/ldaputil/utest/plugin.h | 57
lib/ldaputil/utest/stubs.c | 144
lib/ldaputil/utest/stubs.cpp | 139
lib/ldaputil/utest/test.ref | 480
lib/ldaputil/vtable.c | 2
lib/libaccess/acl.tab.cpp | 27
lib/libaccess/acl.yy.cpp | 5
lib/libaccess/aclcache.cpp | 131
lib/libaccess/aclerror.cpp | 4
lib/libaccess/acleval.cpp | 4
lib/libaccess/aclflush.cpp | 1
lib/libaccess/aclpriv.h | 1
lib/libaccess/aclscan.h | 1
lib/libaccess/aclspace.cpp | 4
lib/libaccess/acltext.y | 6
lib/libaccess/acltools.cpp | 2015
lib/libaccess/aclutil.cpp | 13
lib/libaccess/authdb.cpp | 112
lib/libaccess/lasdns.cpp | 299
lib/libaccess/lasgroup.cpp | 10
lib/libaccess/lasip.cpp | 413
lib/libaccess/lasip.h | 3
lib/libaccess/nsautherr.cpp | 12
lib/libaccess/nseframe.cpp | 3
lib/libaccess/oneeval.cpp | 286
lib/libaccess/permhash.h | 16
lib/libaccess/register.cpp | 106
lib/libaccess/symbols.cpp | 4
lib/libaccess/usrcache.cpp | 14
lib/libaccess/utest/.purify | 19
lib/libaccess/utest/Makefile | 147
lib/libaccess/utest/acl.dat | 44
lib/libaccess/utest/aclfile0 | 87
lib/libaccess/utest/aclfile1 | 43
lib/libaccess/utest/aclfile10 | 45
lib/libaccess/utest/aclfile11 | 43
lib/libaccess/utest/aclfile12 | 43
lib/libaccess/utest/aclfile13 | 43
lib/libaccess/utest/aclfile14 | 43
lib/libaccess/utest/aclfile15 | 43
lib/libaccess/utest/aclfile16 | 43
lib/libaccess/utest/aclfile17 | 43
lib/libaccess/utest/aclfile18 | 51
lib/libaccess/utest/aclfile19 | 46
lib/libaccess/utest/aclfile2 | 43
lib/libaccess/utest/aclfile3 | 43
lib/libaccess/utest/aclfile4 | 43
lib/libaccess/utest/aclfile5 | 43
lib/libaccess/utest/aclfile6 | 55
lib/libaccess/utest/aclfile7 | 43
lib/libaccess/utest/aclfile8 | 43
lib/libaccess/utest/aclfile9 | 43
lib/libaccess/utest/aclgrp0 | 42
lib/libaccess/utest/aclgrp1 | 42
lib/libaccess/utest/aclgrp2 | 42
lib/libaccess/utest/aclgrp3 | 42
lib/libaccess/utest/aclgrp4 | 42
lib/libaccess/utest/acltest.cpp | 794
lib/libaccess/utest/onetest.cpp | 77
lib/libaccess/utest/shexp.cpp | 331
lib/libaccess/utest/shexp.h | 168
lib/libaccess/utest/test.ref | 217
lib/libaccess/utest/testmain.cpp | 89
lib/libaccess/utest/twotest.cpp | 87
lib/libaccess/utest/ustubs.cpp | 331
lib/libadmin/error.c | 9
lib/libadmin/template.c | 2
lib/libadmin/util.c | 48
lib/libsi18n/coreres.c | 141
lib/libsi18n/coreres.h | 52
lib/libsi18n/getlang.c | 330
lib/libsi18n/getstrmem.c | 160
lib/libsi18n/getstrmem.h | 1
lib/libsi18n/getstrprop.c | 89
lib/libsi18n/makstrdb.c | 21
lib/libsi18n/propset.c | 442
lib/libsi18n/propset.h | 80
lib/libsi18n/reshash.c | 21
ltmain.sh |14878 ++-
m4/db.m4 | 27
m4/fhs.m4 | 4
m4/icu.m4 | 25
m4/kerberos.m4 | 4
m4/mozldap.m4 | 38
m4/netsnmp.m4 | 15
m4/nspr.m4 | 17
m4/nss.m4 | 17
m4/openldap.m4 | 30
m4/pcre.m4 | 28
m4/sasl.m4 | 25
m4/selinux.m4 | 13
m4/svrcore.m4 | 41
man/man1/cl-dump.1 | 20
man/man1/dbgen.pl.1 | 12
man/man1/dbscan.1 | 2
man/man1/ds-logpipe.py.1 | 14
man/man1/dsktune.1 | 2
man/man1/infadd.1 | 10
man/man1/ldap-agent.1 | 2
man/man1/ldclt.1 | 2
man/man1/ldif.1 | 2
man/man1/logconv.pl.1 | 47
man/man1/migratecred.1 | 8
man/man1/mmldif.1 | 6
man/man1/pwdhash.1 | 6
man/man1/repl-monitor.1 | 43
man/man1/rsearch.1 | 2
man/man8/bak2db.8 | 58
man/man8/bak2db.pl.8 | 82
man/man8/cleanallruv.pl.8 | 85
man/man8/db2bak.8 | 59
man/man8/db2bak.pl.8 | 78
man/man8/db2index.8 | 63
man/man8/db2index.pl.8 | 85
man/man8/db2ldif.8 | 102
man/man8/db2ldif.pl.8 | 124
man/man8/dbmon.sh.8 | 56
man/man8/dbverify.8 | 63
man/man8/dn2rdn.8 | 58
man/man8/fixup-linkedattrs.pl.8 | 76
man/man8/fixup-memberof.pl.8 | 80
man/man8/ldif2db.8 | 85
man/man8/ldif2db.pl.8 | 102
man/man8/ldif2ldap.8 | 62
man/man8/migrate-ds.pl.8 | 2
man/man8/monitor.8 | 67
man/man8/ns-accountstatus.pl.8 | 74
man/man8/ns-activate.pl.8 | 73
man/man8/ns-inactivate.pl.8 | 72
man/man8/ns-newpwpolicy.pl.8 | 79
man/man8/ns-slapd.8 | 12
man/man8/remove-ds.pl.8 | 13
man/man8/restart-dirsrv.8 | 50
man/man8/restoreconfig.8 | 48
man/man8/saveconfig.8 | 48
man/man8/schema-reload.pl.8 | 74
man/man8/setup-ds.pl.8 | 6
man/man8/start-dirsrv.8 | 50
man/man8/stop-dirsrv.8 | 50
man/man8/suffix2instance.8 | 51
man/man8/syntax-validate.pl.8 | 77
man/man8/upgradedb.8 | 56
man/man8/upgradednformat.8 | 55
man/man8/usn-tombstone-cleanup.pl.8 | 80
man/man8/verify-db.pl.8 | 49
man/man8/vlvindex.8 | 58
missing | 453
rpm.mk | 67
rpm/389-ds-base-devel.README | 4
rpm/389-ds-base-git.sh | 16
rpm/389-ds-base.spec.in | 1597
rpm/add_patches.sh | 55
rpm/rpmverrel.sh | 15
selinux/dirsrv.fc.in | 2
selinux/dirsrv.if | 41
selinux/dirsrv.te | 11
wrappers/cl-dump.in | 11
wrappers/dbscan.in | 10
wrappers/infadd.in | 12
wrappers/initscript.in | 247
wrappers/ldap-agent-initscript.in | 20
wrappers/ldap-agent.in | 12
wrappers/ldclt.in | 12
wrappers/ldif.in | 12
wrappers/migratecred.in | 14
wrappers/mmldif.in | 14
wrappers/pwdhash.in | 14
wrappers/repl-monitor.in | 11
wrappers/rsearch.in | 12
wrappers/systemd-snmp.service.in | 16
wrappers/systemd.group.in | 6
wrappers/systemd.template.service.in | 28
wrappers/systemd.template.sysconfig | 3
926 files changed, 212586 insertions(+), 97106 deletions(-)
---
1
0
VERSION.sh | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit bbb2758ed021d6cd090e89f04251d3341ed9ddc8
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Wed Nov 18 16:15:33 2015 -0800
bump version to 1.3.3.14
diff --git a/VERSION.sh b/VERSION.sh
index 1ae68d2..60cd78b 100644
--- a/VERSION.sh
+++ b/VERSION.sh
@@ -10,7 +10,7 @@ vendor="389 Project"
# PACKAGE_VERSION is constructed from these
VERSION_MAJOR=1
VERSION_MINOR=3
-VERSION_MAINT=3.13
+VERSION_MAINT=3.14
# if this is a PRERELEASE, set VERSION_PREREL
# otherwise, comment it out
# be sure to include the dot prefix in the prerel
1
0
ldap/servers/slapd/pblock.c | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
New commits:
commit 0e2a753cf161ee9f50d285f6bf96f8e3e0ceeb0d
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Wed Nov 18 11:44:35 2015 -0800
Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
Description: commit 390b8bd9076e8976facc0858e60985d6b4fac05c introduced
a self deadlock (see also bz1282607: 389-ds-base-1.2.11.15-67.el6_7 hang)
First phase of the following approach:
Fix design by Ludwig Krispenz and Rich Megginson (Thanks!)
Investigate the connection params used in the pblock access one by one and.
- for fields not used, either remove the access or just leave it as is
- With a big ASSERT to flag cases if the field is ever used, and a plan to
deprecate and remove the field.
- for fields with atomic access, like c_isreplication_session remove the mutex
- for filelds requiring copying, define them directly in the pblock and when
the pblock is created, populate them from the connection, the pblock access
would no longer need the c_mutex.
Removing PR_Lock(c_mutex) from slapi_pblock_get(SLAPI_CONN_CLIENTNETADDR) since
acquiring the lock is not necessary for the atomic reads. This change solves
the self deadlock.
https://fedorahosted.org/389/ticket/48338#comment:11
Reviewed by nkinder(a)redhat.com and mreynolds(a)redhat.com (Thank you, Nathan and Mark!)
(cherry picked from commit 79ca67d1fc5d50d8a9ae6b686b9564f3960f8592)
(cherry picked from commit 36245abd78f7abfed8219a5ac4a4cf50c1c0237c)
(cherry picked from commit 1d003452e3e01c04ae7f08f92864c28644e3d590)
diff --git a/ldap/servers/slapd/pblock.c b/ldap/servers/slapd/pblock.c
index b12881b..4e57fc3 100644
--- a/ldap/servers/slapd/pblock.c
+++ b/ldap/servers/slapd/pblock.c
@@ -251,14 +251,12 @@ slapi_pblock_get( Slapi_PBlock *pblock, int arg, void *value )
memset( value, 0, sizeof( PRNetAddr ));
break;
}
- PR_Lock( pblock->pb_conn->c_mutex );
+ /* For fields with atomic access, remove the PR_Lock(c_mutex) */
if ( pblock->pb_conn->cin_addr == NULL ) {
memset( value, 0, sizeof( PRNetAddr ));
} else {
- (*(PRNetAddr *)value) =
- *(pblock->pb_conn->cin_addr);
+ (*(PRNetAddr *)value) = *(pblock->pb_conn->cin_addr);
}
- PR_Unlock( pblock->pb_conn->c_mutex );
break;
case SLAPI_CONN_SERVERNETADDR:
if (pblock->pb_conn == NULL)
1
0
ldap/servers/slapd/pblock.c | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
New commits:
commit 1d003452e3e01c04ae7f08f92864c28644e3d590
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Wed Nov 18 11:44:35 2015 -0800
Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
Description: commit 390b8bd9076e8976facc0858e60985d6b4fac05c introduced
a self deadlock (see also bz1282607: 389-ds-base-1.2.11.15-67.el6_7 hang)
First phase of the following approach:
Fix design by Ludwig Krispenz and Rich Megginson (Thanks!)
Investigate the connection params used in the pblock access one by one and.
- for fields not used, either remove the access or just leave it as is
- With a big ASSERT to flag cases if the field is ever used, and a plan to
deprecate and remove the field.
- for fields with atomic access, like c_isreplication_session remove the mutex
- for filelds requiring copying, define them directly in the pblock and when
the pblock is created, populate them from the connection, the pblock access
would no longer need the c_mutex.
Removing PR_Lock(c_mutex) from slapi_pblock_get(SLAPI_CONN_CLIENTNETADDR) since
acquiring the lock is not necessary for the atomic reads. This change solves
the self deadlock.
https://fedorahosted.org/389/ticket/48338#comment:11
Reviewed by nkinder(a)redhat.com and mreynolds(a)redhat.com (Thank you, Nathan and Mark!)
(cherry picked from commit 79ca67d1fc5d50d8a9ae6b686b9564f3960f8592)
(cherry picked from commit 36245abd78f7abfed8219a5ac4a4cf50c1c0237c)
diff --git a/ldap/servers/slapd/pblock.c b/ldap/servers/slapd/pblock.c
index d331b57..8586428 100644
--- a/ldap/servers/slapd/pblock.c
+++ b/ldap/servers/slapd/pblock.c
@@ -252,14 +252,12 @@ slapi_pblock_get( Slapi_PBlock *pblock, int arg, void *value )
memset( value, 0, sizeof( PRNetAddr ));
break;
}
- PR_Lock( pblock->pb_conn->c_mutex );
+ /* For fields with atomic access, remove the PR_Lock(c_mutex) */
if ( pblock->pb_conn->cin_addr == NULL ) {
memset( value, 0, sizeof( PRNetAddr ));
} else {
- (*(PRNetAddr *)value) =
- *(pblock->pb_conn->cin_addr);
+ (*(PRNetAddr *)value) = *(pblock->pb_conn->cin_addr);
}
- PR_Unlock( pblock->pb_conn->c_mutex );
break;
case SLAPI_CONN_SERVERNETADDR:
if (pblock->pb_conn == NULL)
1
0
ldap/servers/slapd/pblock.c | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
New commits:
commit 36245abd78f7abfed8219a5ac4a4cf50c1c0237c
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Wed Nov 18 11:44:35 2015 -0800
Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
Description: commit 390b8bd9076e8976facc0858e60985d6b4fac05c introduced
a self deadlock (see also bz1282607: 389-ds-base-1.2.11.15-67.el6_7 hang)
First phase of the following approach:
Fix design by Ludwig Krispenz and Rich Megginson (Thanks!)
Investigate the connection params used in the pblock access one by one and.
- for fields not used, either remove the access or just leave it as is
- With a big ASSERT to flag cases if the field is ever used, and a plan to
deprecate and remove the field.
- for fields with atomic access, like c_isreplication_session remove the mutex
- for filelds requiring copying, define them directly in the pblock and when
the pblock is created, populate them from the connection, the pblock access
would no longer need the c_mutex.
Removing PR_Lock(c_mutex) from slapi_pblock_get(SLAPI_CONN_CLIENTNETADDR) since
acquiring the lock is not necessary for the atomic reads. This change solves
the self deadlock.
https://fedorahosted.org/389/ticket/48338#comment:11
Reviewed by nkinder(a)redhat.com and mreynolds(a)redhat.com (Thank you, Nathan and Mark!)
(cherry picked from commit 79ca67d1fc5d50d8a9ae6b686b9564f3960f8592)
diff --git a/ldap/servers/slapd/pblock.c b/ldap/servers/slapd/pblock.c
index bf57a33..f2017be 100644
--- a/ldap/servers/slapd/pblock.c
+++ b/ldap/servers/slapd/pblock.c
@@ -223,14 +223,12 @@ slapi_pblock_get( Slapi_PBlock *pblock, int arg, void *value )
memset( value, 0, sizeof( PRNetAddr ));
break;
}
- PR_Lock( pblock->pb_conn->c_mutex );
+ /* For fields with atomic access, remove the PR_Lock(c_mutex) */
if ( pblock->pb_conn->cin_addr == NULL ) {
memset( value, 0, sizeof( PRNetAddr ));
} else {
- (*(PRNetAddr *)value) =
- *(pblock->pb_conn->cin_addr);
+ (*(PRNetAddr *)value) = *(pblock->pb_conn->cin_addr);
}
- PR_Unlock( pblock->pb_conn->c_mutex );
break;
case SLAPI_CONN_SERVERNETADDR:
if (pblock->pb_conn == NULL)
1
0
ldap/servers/slapd/pblock.c | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
New commits:
commit 79ca67d1fc5d50d8a9ae6b686b9564f3960f8592
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Wed Nov 18 11:44:35 2015 -0800
Ticket #48338 - SimplePagedResults -- abandon could happen between the abandon check and sending results
Description: commit 390b8bd9076e8976facc0858e60985d6b4fac05c introduced
a self deadlock (see also bz1282607: 389-ds-base-1.2.11.15-67.el6_7 hang)
First phase of the following approach:
Fix design by Ludwig Krispenz and Rich Megginson (Thanks!)
Investigate the connection params used in the pblock access one by one and.
- for fields not used, either remove the access or just leave it as is
- With a big ASSERT to flag cases if the field is ever used, and a plan to
deprecate and remove the field.
- for fields with atomic access, like c_isreplication_session remove the mutex
- for filelds requiring copying, define them directly in the pblock and when
the pblock is created, populate them from the connection, the pblock access
would no longer need the c_mutex.
Removing PR_Lock(c_mutex) from slapi_pblock_get(SLAPI_CONN_CLIENTNETADDR) since
acquiring the lock is not necessary for the atomic reads. This change solves
the self deadlock.
https://fedorahosted.org/389/ticket/48338#comment:11
Reviewed by nkinder(a)redhat.com and mreynolds(a)redhat.com (Thank you, Nathan and Mark!)
diff --git a/ldap/servers/slapd/pblock.c b/ldap/servers/slapd/pblock.c
index bf57a33..f2017be 100644
--- a/ldap/servers/slapd/pblock.c
+++ b/ldap/servers/slapd/pblock.c
@@ -223,14 +223,12 @@ slapi_pblock_get( Slapi_PBlock *pblock, int arg, void *value )
memset( value, 0, sizeof( PRNetAddr ));
break;
}
- PR_Lock( pblock->pb_conn->c_mutex );
+ /* For fields with atomic access, remove the PR_Lock(c_mutex) */
if ( pblock->pb_conn->cin_addr == NULL ) {
memset( value, 0, sizeof( PRNetAddr ));
} else {
- (*(PRNetAddr *)value) =
- *(pblock->pb_conn->cin_addr);
+ (*(PRNetAddr *)value) = *(pblock->pb_conn->cin_addr);
}
- PR_Unlock( pblock->pb_conn->c_mutex );
break;
case SLAPI_CONN_SERVERNETADDR:
if (pblock->pb_conn == NULL)
1
0
dirsrvtests/tickets/ticket47838_test.py | 134 +++++++++++++++++++-------------
1 file changed, 81 insertions(+), 53 deletions(-)
New commits:
commit 341c3c185400940e9b5bd3168d693633c441c624
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Tue Nov 17 17:26:15 2015 -0800
Ticket 47838 - CI test: adjusted test cases based on the nss version
https://fedorahosted.org/389/ticket/47838
diff --git a/dirsrvtests/tickets/ticket47838_test.py b/dirsrvtests/tickets/ticket47838_test.py
index 42d25fd..6685fb8 100644
--- a/dirsrvtests/tickets/ticket47838_test.py
+++ b/dirsrvtests/tickets/ticket47838_test.py
@@ -34,6 +34,8 @@ plus_all_dcount = 0
plus_all_ecount_noweak = 0
plus_all_dcount_noweak = 0
+nss_version = ''
+NSS320 = '3.20.0'
class TopologyStandalone(object):
def __init__(self, standalone):
@@ -88,13 +90,17 @@ def _header(topology, label):
topology.standalone.log.info("###############################################")
-def test_ticket47838_init(topology):
+def _47838_init(topology):
"""
Generate self signed cert and import it to the DS cert db.
Enable SSL
"""
_header(topology, 'Testing Ticket 47838 - harden the list of ciphers available by default')
+ onss_version = os.popen("rpm -q nss | awk -F'-' '{print $2}'", "r")
+ global nss_version
+ nss_version = onss_version.readline()
+
conf_dir = topology.standalone.confdir
log.info("\n######################### Checking existing certs ######################\n")
@@ -188,7 +194,7 @@ def comp_nsSSLEnableCipherCount(topology, ecount):
assert ecount == enabledciphercnt
-def test_ticket47838_run_0(topology):
+def _47838_run_0(topology):
"""
Check nsSSL3Ciphers: +all
All ciphers are enabled except null.
@@ -209,8 +215,13 @@ def test_ticket47838_run_0(topology):
log.info("Enabled ciphers: %d" % ecount)
log.info("Disabled ciphers: %d" % dcount)
- assert ecount >= 60
- assert dcount <= 7
+ if nss_version >= NSS320:
+ assert ecount >= 53
+ assert dcount <= 17
+ else:
+ assert ecount >= 60
+ assert dcount <= 7
+
global plus_all_ecount
global plus_all_dcount
plus_all_ecount = ecount
@@ -223,7 +234,7 @@ def test_ticket47838_run_0(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_1(topology):
+def _47838_run_1(topology):
"""
Check nsSSL3Ciphers: +all
All ciphers are enabled except null.
@@ -265,7 +276,7 @@ def test_ticket47838_run_1(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_2(topology):
+def _47838_run_2(topology):
"""
Check nsSSL3Ciphers: +rsa_aes_128_sha,+rsa_aes_256_sha
rsa_aes_128_sha, tls_rsa_aes_128_sha, rsa_aes_256_sha, tls_rsa_aes_256_sha are enabled.
@@ -297,7 +308,7 @@ def test_ticket47838_run_2(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_3(topology):
+def _47838_run_3(topology):
"""
Check nsSSL3Ciphers: -all
All ciphers are disabled.
@@ -328,7 +339,7 @@ def test_ticket47838_run_3(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_4(topology):
+def _47838_run_4(topology):
"""
Check no nsSSL3Ciphers
Default ciphers are enabled.
@@ -354,7 +365,7 @@ def test_ticket47838_run_4(topology):
log.info("Disabled ciphers: %d" % dcount)
global plus_all_ecount
global plus_all_dcount
- assert ecount == 12
+ assert ecount == 20
assert dcount == (plus_all_ecount + plus_all_dcount - ecount)
weak = os.popen('egrep "SSL alert:" %s | egrep \": enabled\" | egrep "WEAK CIPHER" | wc -l' % topology.standalone.errlog)
wcount = int(weak.readline().rstrip())
@@ -364,7 +375,7 @@ def test_ticket47838_run_4(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_5(topology):
+def _47838_run_5(topology):
"""
Check nsSSL3Ciphers: default
Default ciphers are enabled.
@@ -390,7 +401,10 @@ def test_ticket47838_run_5(topology):
log.info("Disabled ciphers: %d" % dcount)
global plus_all_ecount
global plus_all_dcount
- assert ecount == 12
+ if nss_version >= NSS320:
+ assert ecount == 20
+ else:
+ assert ecount == 12
assert dcount == (plus_all_ecount + plus_all_dcount - ecount)
weak = os.popen('egrep "SSL alert:" %s | egrep \": enabled\" | egrep "WEAK CIPHER" | wc -l' % topology.standalone.errlog)
wcount = int(weak.readline().rstrip())
@@ -400,7 +414,7 @@ def test_ticket47838_run_5(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_6(topology):
+def _47838_run_6(topology):
"""
Check nsSSL3Ciphers: +all,-rsa_rc4_128_md5
All ciphers are disabled.
@@ -434,7 +448,7 @@ def test_ticket47838_run_6(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_7(topology):
+def _47838_run_7(topology):
"""
Check nsSSL3Ciphers: -all,+rsa_rc4_128_md5
All ciphers are disabled.
@@ -466,7 +480,7 @@ def test_ticket47838_run_7(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_8(topology):
+def _47838_run_8(topology):
"""
Check nsSSL3Ciphers: default + allowWeakCipher: off
Strong Default ciphers are enabled.
@@ -492,7 +506,10 @@ def test_ticket47838_run_8(topology):
log.info("Disabled ciphers: %d" % dcount)
global plus_all_ecount
global plus_all_dcount
- assert ecount == 12
+ if nss_version >= NSS320:
+ assert ecount == 20
+ else:
+ assert ecount == 12
assert dcount == (plus_all_ecount + plus_all_dcount - ecount)
weak = os.popen('egrep "SSL alert:" %s | egrep \": enabled\" | egrep "WEAK CIPHER" | wc -l' % topology.standalone.errlog)
wcount = int(weak.readline().rstrip())
@@ -502,7 +519,7 @@ def test_ticket47838_run_8(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_9(topology):
+def _47838_run_9(topology):
"""
Check no nsSSL3Ciphers
Default ciphers are enabled.
@@ -529,17 +546,23 @@ def test_ticket47838_run_9(topology):
log.info("Enabled ciphers: %d" % ecount)
log.info("Disabled ciphers: %d" % dcount)
- assert ecount == 23
+ if nss_version >= NSS320:
+ assert ecount == 27
+ else:
+ assert ecount == 23
assert dcount == 0
weak = os.popen('egrep "SSL alert:" %s | egrep \": enabled\" | egrep "WEAK CIPHER" | wc -l' % topology.standalone.errlog)
wcount = int(weak.readline().rstrip())
log.info("Weak ciphers in the default setting: %d" % wcount)
- assert wcount == 11
+ if nss_version >= NSS320:
+ assert wcount == 7
+ else:
+ assert wcount == 11
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_10(topology):
+def _47838_run_10(topology):
"""
Check nsSSL3Ciphers: -TLS_RSA_WITH_NULL_MD5,+TLS_RSA_WITH_RC4_128_MD5,
+TLS_RSA_EXPORT_WITH_RC4_40_MD5,+TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5,
@@ -573,7 +596,10 @@ def test_ticket47838_run_10(topology):
log.info("Disabled ciphers: %d" % dcount)
global plus_all_ecount
global plus_all_dcount
- assert ecount == 9
+ if nss_version >= NSS320:
+ assert ecount == 5
+ else:
+ assert ecount == 9
assert dcount == 0
weak = os.popen('egrep "SSL alert:" %s | egrep \": enabled\" | egrep "WEAK CIPHER" | wc -l' % topology.standalone.errlog)
wcount = int(weak.readline().rstrip())
@@ -584,7 +610,7 @@ def test_ticket47838_run_10(topology):
comp_nsSSLEnableCipherCount(topology, ecount)
-def test_ticket47838_run_11(topology):
+def _47838_run_11(topology):
"""
Check nsSSL3Ciphers: +fortezza
SSL_GetImplementedCiphers does not return this as a secuire cipher suite
@@ -611,7 +637,7 @@ def test_ticket47838_run_11(topology):
comp_nsSSLEnableCipherCount(topology, 0)
-def test_ticket47928_run_0(topology):
+def _47928_run_0(topology):
"""
No SSL version config parameters.
Check SSL3 (TLS1.0) is off.
@@ -645,7 +671,7 @@ def test_ticket47928_run_0(topology):
assert False
-def test_ticket47928_run_1(topology):
+def _47928_run_1(topology):
"""
No nsSSL3, nsTLS1; sslVersionMin > sslVersionMax
Check sslVersionMax is ignored.
@@ -679,7 +705,7 @@ def test_ticket47928_run_1(topology):
assert False
-def test_ticket47928_run_2(topology):
+def _47928_run_2(topology):
"""
nsSSL3: on; sslVersionMin: TLS1.1; sslVersionMax: TLS1.2
Conflict between nsSSL3 and range; nsSSL3 is disabled
@@ -722,7 +748,7 @@ def test_ticket47928_run_2(topology):
assert False
-def test_ticket47928_run_3(topology):
+def _47928_run_3(topology):
"""
nsSSL3: on; nsTLS1: off; sslVersionMin: TLS1.1; sslVersionMax: TLS1.2
Conflict between nsSSL3/nsTLS1 and range; nsSSL3 is disabled; nsTLS1 is enabled.
@@ -766,7 +792,7 @@ def test_ticket47928_run_3(topology):
assert False
-def test_ticket47838_run_last(topology):
+def _47838_run_last(topology):
"""
Check nsSSL3Ciphers: all <== invalid value
All ciphers are disabled.
@@ -796,12 +822,12 @@ def test_ticket47838_run_last(topology):
topology.standalone.log.info("ticket47838, 47880, 47908, 47928 were successfully verified.")
-def test_ticket47838_final(topology):
+def _47838_final(topology):
topology.standalone.delete()
log.info('Testcase PASSED')
-def run_isolated():
+def test_ticket47838(topology):
'''
run_isolated is used to run these test cases independently of a test scheduler (xunit, py.test..)
To run isolated without py.test, you need to
@@ -812,30 +838,32 @@ def run_isolated():
global installation_prefix
installation_prefix = None
- topo = topology(True)
- test_ticket47838_init(topo)
-
- test_ticket47838_run_0(topo)
- test_ticket47838_run_1(topo)
- test_ticket47838_run_2(topo)
- test_ticket47838_run_3(topo)
- test_ticket47838_run_4(topo)
- test_ticket47838_run_5(topo)
- test_ticket47838_run_6(topo)
- test_ticket47838_run_7(topo)
- test_ticket47838_run_8(topo)
- test_ticket47838_run_9(topo)
- test_ticket47838_run_10(topo)
- test_ticket47838_run_11(topo)
- test_ticket47928_run_0(topo)
- test_ticket47928_run_1(topo)
- test_ticket47928_run_2(topo)
- test_ticket47928_run_3(topo)
-
- test_ticket47838_run_last(topo)
-
- test_ticket47838_final(topo)
-
+ _47838_init(topology)
+
+ _47838_run_0(topology)
+ _47838_run_1(topology)
+ _47838_run_2(topology)
+ _47838_run_3(topology)
+ _47838_run_4(topology)
+ _47838_run_5(topology)
+ _47838_run_6(topology)
+ _47838_run_7(topology)
+ _47838_run_8(topology)
+ _47838_run_9(topology)
+ _47838_run_10(topology)
+ _47838_run_11(topology)
+ _47928_run_0(topology)
+ _47928_run_1(topology)
+ _47928_run_2(topology)
+ _47928_run_3(topology)
+
+ _47838_run_last(topology)
+
+ _47838_final(topology)
if __name__ == '__main__':
- run_isolated()
+ # Run isolated
+ # -s for DEBUG mode
+
+ CURRENT_FILE = os.path.realpath(__file__)
+ pytest.main("-s %s" % CURRENT_FILE)
1
0
ldap/admin/src/scripts/50fixNsState.pl | 2 +-
ldap/admin/src/scripts/DSCreate.pm.in | 3 ++-
2 files changed, 3 insertions(+), 2 deletions(-)
New commits:
commit c0d35f7e107d80a3fb173dfbce001243fe78c254
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Mon Nov 16 11:32:27 2015 -0800
Ticket #48316 - Perl-5.20.3-328: Use of literal control characters in variable names is deprecated
Description: "$^O" issues a warning "Use of literal control characters in
variable names is deprecated at /usr/lib64/dirsrv/perl/DSCreate.pm line 839."
This patch replaces "$^O" with "$Config{'osname'}".
https://fedorahosted.org/389/ticket/48316
Reviewed by rmeggins(a)redhat.com and wibrown(a)redhat.com (Thank you, Rich and William!!)
(cherry picked from commit 65362db30f55a41de1df97c8bd92047cac52ce83)
diff --git a/ldap/admin/src/scripts/DSCreate.pm.in b/ldap/admin/src/scripts/DSCreate.pm.in
index 3ce5a73..50498fe 100644
--- a/ldap/admin/src/scripts/DSCreate.pm.in
+++ b/ldap/admin/src/scripts/DSCreate.pm.in
@@ -18,6 +18,7 @@ package DSCreate;
use DSUtil;
use Inf;
use FileConn;
+use Config;
use Sys::Hostname;
# tempfiles
@@ -836,7 +837,7 @@ sub setDefaults {
}
if (!defined($inf->{slapd}->{sasl_path})) {
- if ($ ne "linux") {
+ if ($Config{'osname'} ne "linux") {
$inf->{slapd}->{sasl_path} = "$inf->{General}->{prefix}@libdir@/sasl2";
}
}
commit 9cf628467ad33a46c6c4cb14c6535881e66bd122
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Mon Nov 16 11:24:03 2015 -0800
Ticket #48348 - Running /usr/sbin/setup-ds.pl fails with Can't locate bigint.pm, plus two warnings
Description: bigint.pm is deprecated and no longer packaged in perl-5.22.0
on FC23. This patch replaces bigint with more basic Math::BigInt.
https://fedorahosted.org/389/ticket/48348
Reviewed by rmeggins(a)redhat.com and wibrown(a)redhat.com (Thank you, Rich and William!!)
(cherry picked from commit dfc9ad00a6bf0f8b86c4c24a01e06e3434a7ca41)
diff --git a/ldap/admin/src/scripts/50fixNsState.pl b/ldap/admin/src/scripts/50fixNsState.pl
index b331e9c..bd20708 100644
--- a/ldap/admin/src/scripts/50fixNsState.pl
+++ b/ldap/admin/src/scripts/50fixNsState.pl
@@ -4,7 +4,7 @@ use Mozilla::LDAP::Utils qw(normalizeDN);
use Mozilla::LDAP::API qw(:constant ldap_url_parse ldap_explode_dn);
use DSUtil qw(debug);
use Config;
-use bigint;
+use Math::BigInt;
# # Determine the endianness of your system
my $packfmt32 = "VVA6vCx3"; # must be 20 bytes
1
0
ldap/admin/src/scripts/50fixNsState.pl | 2 +-
ldap/admin/src/scripts/DSCreate.pm.in | 3 ++-
2 files changed, 3 insertions(+), 2 deletions(-)
New commits:
commit 65362db30f55a41de1df97c8bd92047cac52ce83
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Mon Nov 16 11:32:27 2015 -0800
Ticket #48316 - Perl-5.20.3-328: Use of literal control characters in variable names is deprecated
Description: "$^O" issues a warning "Use of literal control characters in
variable names is deprecated at /usr/lib64/dirsrv/perl/DSCreate.pm line 839."
This patch replaces "$^O" with "$Config{'osname'}".
https://fedorahosted.org/389/ticket/48316
Reviewed by rmeggins(a)redhat.com and wibrown(a)redhat.com (Thank you, Rich and William!!)
diff --git a/ldap/admin/src/scripts/DSCreate.pm.in b/ldap/admin/src/scripts/DSCreate.pm.in
index 7f272f6..ac64875 100644
--- a/ldap/admin/src/scripts/DSCreate.pm.in
+++ b/ldap/admin/src/scripts/DSCreate.pm.in
@@ -18,6 +18,7 @@ package DSCreate;
use DSUtil;
use Inf;
use FileConn;
+use Config;
use Sys::Hostname;
# tempfiles
@@ -836,7 +837,7 @@ sub setDefaults {
}
if (!defined($inf->{slapd}->{sasl_path})) {
- if ($ ne "linux") {
+ if ($Config{'osname'} ne "linux") {
$inf->{slapd}->{sasl_path} = "$inf->{General}->{prefix}@libdir@/sasl2";
}
}
commit dfc9ad00a6bf0f8b86c4c24a01e06e3434a7ca41
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Mon Nov 16 11:24:03 2015 -0800
Ticket #48348 - Running /usr/sbin/setup-ds.pl fails with Can't locate bigint.pm, plus two warnings
Description: bigint.pm is deprecated and no longer packaged in perl-5.22.0
on FC23. This patch replaces bigint with more basic Math::BigInt.
https://fedorahosted.org/389/ticket/48348
Reviewed by rmeggins(a)redhat.com and wibrown(a)redhat.com (Thank you, Rich and William!!)
diff --git a/ldap/admin/src/scripts/50fixNsState.pl b/ldap/admin/src/scripts/50fixNsState.pl
index b331e9c..bd20708 100644
--- a/ldap/admin/src/scripts/50fixNsState.pl
+++ b/ldap/admin/src/scripts/50fixNsState.pl
@@ -4,7 +4,7 @@ use Mozilla::LDAP::Utils qw(normalizeDN);
use Mozilla::LDAP::API qw(:constant ldap_url_parse ldap_explode_dn);
use DSUtil qw(debug);
use Config;
-use bigint;
+use Math::BigInt;
# # Determine the endianness of your system
my $packfmt32 = "VVA6vCx3"; # must be 20 bytes
1
0
ldap/servers/slapd/daemon.c | 5 +----
1 file changed, 1 insertion(+), 4 deletions(-)
New commits:
commit a4c0a9eeba031b9304d63ca05d8b9fab9ebca1b2
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Thu Nov 5 13:08:56 2015 -0800
Ticket #48339 - Share nsslapd-threadnumber in the case nunc-stans is enabled, as well.
Description: When nunc-stans is enabled, instead of getting the
thread number from the environment variable MAX_THREADS, use the
value of config parameter nsslapd-threadnumber.
https://fedorahosted.org/389/ticket/48339
Reviewed by rmeggins(a)redhat.com (Thank you, Rich!!)
(cherry picked from commit ab8ed9a5ebb0d15b55d7525ed1d5dbeebd8c7563)
diff --git a/ldap/servers/slapd/daemon.c b/ldap/servers/slapd/daemon.c
index bd3bfb2..5d70647 100644
--- a/ldap/servers/slapd/daemon.c
+++ b/ldap/servers/slapd/daemon.c
@@ -1199,10 +1199,7 @@ void slapd_daemon( daemon_ports_t *ports )
#ifdef ENABLE_NUNC_STANS
if (enable_nunc_stans && !g_get_shutdown()) {
int ii;
- PRInt32 maxthreads = 3;
- if (getenv("MAX_THREADS")) {
- maxthreads = atoi(getenv("MAX_THREADS"));
- }
+ PRInt32 maxthreads = (PRInt32)config_get_threadnumber();
/* Set the nunc-stans thread pool config */
ns_thrpool_config_init(&tp_config);
1
0
ldap/servers/slapd/daemon.c | 23 ++++++++++++++++++++---
1 file changed, 20 insertions(+), 3 deletions(-)
New commits:
commit b03987689c3a2477630e2a3452e64cc7759ba5f3
Author: William Brown <firstyear(a)redhat.com>
Date: Fri Nov 6 14:56:44 2015 +1000
Ticket 48311 -nunc-stans: Attempt to release connection that is not acquired
https://fedorahosted.org/389/ticket/48311
Bug Description: DS with nunc stans enabled produces lots of messages like
[13/Oct/2015:11:29:24 -0400] connection - conn=98 fd=161 Attempt to release
connection that is not acquired
FixDescription: From the original patch:
* Do not call connection_acquire_nolock() inside a PR_ASSERT call.
* Also changed other PR_ASSERTs to only be called if DEBUG is set
This additionally guarantees the return codes of these functions since we have
removed the PR_ASSERT that previously wrapped these function calls. If these
assertions fail, we log to the error log in all cases.
Author: wibrown
Review by: mreynolds, nhosoi (Thanks!)
(cherry picked from commit 49aaf98732d1e16dde3edb81272de8203aded21c)
diff --git a/ldap/servers/slapd/daemon.c b/ldap/servers/slapd/daemon.c
index 82099bc..bd3bfb2 100644
--- a/ldap/servers/slapd/daemon.c
+++ b/ldap/servers/slapd/daemon.c
@@ -1839,7 +1839,12 @@ ns_handle_closure(struct ns_job_t *job)
#ifdef DEBUG
PR_ASSERT(0 == NS_JOB_IS_THREAD(ns_job_get_type(job)));
#else
- NS_JOB_IS_THREAD(ns_job_get_type(job));
+ /* This doesn't actually confirm it's in the event loop thread, but it's a start */
+ if (NS_JOB_IS_THREAD(ns_job_get_type(job)) != 0) {
+ LDAPDebug2Args(LDAP_DEBUG_ANY, "ns_handle_closure: Attempt to close outside of event loop thread %" NSPRIu64 " for fd=%d\n",
+ c->c_connid, c->c_sd);
+ return;
+ }
#endif
PR_Lock(c->c_mutex);
connection_release_nolock_ext(c, 1); /* release ref acquired for event framework */
@@ -1896,7 +1901,14 @@ ns_connection_post_io_or_closing(Connection *conn)
#ifdef DEBUG
PR_ASSERT(0 == connection_acquire_nolock(conn));
#else
- connection_acquire_nolock(conn); /* event framework now has a reference */
+ if (connection_acquire_nolock(conn) != 0) { /* event framework now has a reference */
+ /*
+ * This has already been logged as an error in ./ldap/servers/slapd/connection.c
+ * The error occurs when we get a connection in a closing state.
+ * For now we return, but there is probably a better way to handle the error case.
+ */
+ return;
+ }
#endif
ns_add_io_timeout_job(conn->c_tp, conn->c_prfd, &tv,
NS_JOB_READ|NS_JOB_PRESERVE_FD,
@@ -1922,7 +1934,12 @@ ns_handle_pr_read_ready(struct ns_job_t *job)
#ifdef DEBUG
PR_ASSERT(0 == NS_JOB_IS_THREAD(ns_job_get_type(job)));
#else
- NS_JOB_IS_THREAD(ns_job_get_type(job));
+ /* This doesn't actually confirm it's in the event loop thread, but it's a start */
+ if (NS_JOB_IS_THREAD(ns_job_get_type(job)) != 0) {
+ LDAPDebug2Args(LDAP_DEBUG_ANY, "ns_handle_pr_read_ready: Attempt to handle read ready outside of event loop thread %" NSPRIu64 " for fd=%d\n",
+ c->c_connid, c->c_sd);
+ return;
+ }
#endif
PR_Lock(c->c_mutex);
1
0
dirsrvtests/tickets/ticket48325_test.py | 270 ++++++++++++++++++++++++++++++++
1 file changed, 270 insertions(+)
New commits:
commit 7fca878ca9cf58176955786d201c025710ea2c46
Author: Mark Reynolds <mreynolds(a)redhat.com>
Date: Tue Nov 10 13:54:30 2015 -0500
Ticket 48325 - Add lib389 test script
Description: Add test script to test replication promotion
https://fedorahosted.org/389/ticket/48325
Reviewed by: wibrown(Thanks!)
(cherry picked from commit a534583fdc7aaaeda11d87fdaf09cfaa603fb48f)
diff --git a/dirsrvtests/tickets/ticket48325_test.py b/dirsrvtests/tickets/ticket48325_test.py
new file mode 100644
index 0000000..3505d1a
--- /dev/null
+++ b/dirsrvtests/tickets/ticket48325_test.py
@@ -0,0 +1,270 @@
+import os
+import sys
+import time
+import ldap
+import logging
+import pytest
+from lib389 import DirSrv, Entry, tools, tasks
+from lib389.tools import DirSrvTools
+from lib389._constants import *
+from lib389.properties import *
+from lib389.tasks import *
+from lib389.utils import *
+
+logging.getLogger(__name__).setLevel(logging.DEBUG)
+log = logging.getLogger(__name__)
+
+installation1_prefix = None
+
+
+class TopologyReplication(object):
+ def __init__(self, master1, hub1, consumer1):
+ master1.open()
+ self.master1 = master1
+ hub1.open()
+ self.hub1 = hub1
+ consumer1.open()
+ self.consumer1 = consumer1
+
+
+(a)pytest.fixture(scope="module")
+def topology(request):
+ global installation1_prefix
+ if installation1_prefix:
+ args_instance[SER_DEPLOYED_DIR] = installation1_prefix
+
+ # Creating master 1...
+ master1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_MASTER_1
+ args_instance[SER_PORT] = PORT_MASTER_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_master = args_instance.copy()
+ master1.allocate(args_master)
+ instance_master1 = master1.exists()
+ if instance_master1:
+ master1.delete()
+ master1.create()
+ master1.open()
+ master1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER,
+ replicaId=REPLICAID_MASTER_1)
+
+ # Creating hub 1...
+ hub1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_HUB_1
+ args_instance[SER_PORT] = PORT_HUB_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_HUB_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_hub = args_instance.copy()
+ hub1.allocate(args_hub)
+ instance_hub1 = hub1.exists()
+ if instance_hub1:
+ hub1.delete()
+ hub1.create()
+ hub1.open()
+ hub1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_HUB,
+ replicaId=REPLICAID_HUB_1)
+
+ # Creating consumer 1...
+ consumer1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_CONSUMER_1
+ args_instance[SER_PORT] = PORT_CONSUMER_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_CONSUMER_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_consumer = args_instance.copy()
+ consumer1.allocate(args_consumer)
+ instance_consumer1 = consumer1.exists()
+ if instance_consumer1:
+ consumer1.delete()
+ consumer1.create()
+ consumer1.open()
+ consumer1.changelog.create()
+ consumer1.replica.enableReplication(suffix=SUFFIX,
+ role=REPLICAROLE_CONSUMER,
+ replicaId=CONSUMER_REPLICAID)
+
+ #
+ # Create all the agreements
+ #
+ # Creating agreement from master 1 to hub 1
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ m1_h1_agmt = master1.agreement.create(suffix=SUFFIX, host=hub1.host,
+ port=hub1.port,
+ properties=properties)
+ if not m1_h1_agmt:
+ log.fatal("Fail to create a master -> hub replica agreement")
+ sys.exit(1)
+ log.debug("%s created" % m1_h1_agmt)
+
+ # Creating agreement from hub 1 to consumer 1
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ h1_c1_agmt = hub1.agreement.create(suffix=SUFFIX, host=consumer1.host,
+ port=consumer1.port,
+ properties=properties)
+ if not h1_c1_agmt:
+ log.fatal("Fail to create a hub -> consumer replica agreement")
+ sys.exit(1)
+ log.debug("%s created" % h1_c1_agmt)
+
+ # Allow the replicas to get situated with the new agreements...
+ time.sleep(5)
+
+ #
+ # Initialize all the agreements
+ #
+ master1.agreement.init(SUFFIX, HOST_HUB_1, PORT_HUB_1)
+ master1.waitForReplInit(m1_h1_agmt)
+ hub1.agreement.init(SUFFIX, HOST_CONSUMER_1, PORT_CONSUMER_1)
+ hub1.waitForReplInit(h1_c1_agmt)
+
+ # Check replication is working...
+ if master1.testReplication(DEFAULT_SUFFIX, consumer1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ # Delete each instance in the end
+ def fin():
+ master1.delete()
+ hub1.delete()
+ consumer1.delete()
+ pass
+
+ request.addfinalizer(fin)
+
+ # Clear out the tmp dir
+ master1.clearTmpDir(__file__)
+
+ return TopologyReplication(master1, hub1, consumer1)
+
+
+def checkFirstElement(ds, rid):
+ """
+ Return True if the first RUV element is for the specified rid
+ """
+ try:
+ entry = ds.search_s(DEFAULT_SUFFIX,
+ ldap.SCOPE_SUBTREE,
+ REPLICA_RUV_FILTER,
+ ['nsds50ruv'])
+ assert entry
+ entry = entry[0]
+ except ldap.LDAPError as e:
+ log.fatal('Failed to retrieve RUV entry: %s' % str(e))
+ assert False
+
+ ruv_elements = entry.getValues('nsds50ruv')
+ if ('replica %s ' % rid) in ruv_elements[1]:
+ return True
+ else:
+ return False
+
+
+def test_ticket48325(topology):
+ """
+ Test that the RUV element order is correctly maintained when promoting
+ a hub or consumer.
+ """
+
+ #
+ # Promote consumer to master
+ #
+ try:
+ DN = topology.consumer1.replica._get_mt_entry(DEFAULT_SUFFIX)
+ topology.consumer1.modify_s(DN, [(ldap.MOD_REPLACE,
+ 'nsDS5ReplicaType',
+ '3'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5ReplicaID',
+ '1234'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5Flags',
+ '1')])
+ except ldap.LDAPError as e:
+ log.fatal('Failed to promote consuemr to master: error %s' % str(e))
+ assert False
+ time.sleep(1)
+
+ #
+ # Check ruv has been reordered
+ #
+ if not checkFirstElement(topology.consumer1, '1234'):
+ log.fatal('RUV was not reordered')
+ assert False
+
+ #
+ # Create repl agreement from the newly promoted master to master1
+ #
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ new_agmt = topology.consumer1.agreement.create(suffix=SUFFIX,
+ host=topology.master1.host,
+ port=topology.master1.port,
+ properties=properties)
+
+ if not new_agmt:
+ log.fatal("Fail to create new agmt from old consumer to the master")
+ assert False
+
+ #
+ # Test replication is working
+ #
+ if topology.consumer1.testReplication(DEFAULT_SUFFIX, topology.master1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ #
+ # Promote hub to master
+ #
+ try:
+ DN = topology.hub1.replica._get_mt_entry(DEFAULT_SUFFIX)
+ topology.hub1.modify_s(DN, [(ldap.MOD_REPLACE,
+ 'nsDS5ReplicaType',
+ '3'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5ReplicaID',
+ '5678')])
+ except ldap.LDAPError as e:
+ log.fatal('Failed to promote consuemr to master: error %s' % str(e))
+ assert False
+ time.sleep(1)
+
+ #
+ # Check ruv has been reordered
+ #
+ if not checkFirstElement(topology.hub1, '5678'):
+ log.fatal('RUV was not reordered')
+ assert False
+
+ #
+ # Test replication is working
+ #
+ if topology.hub1.testReplication(DEFAULT_SUFFIX, topology.master1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ # Done
+ log.info('Test complete')
+
+
+if __name__ == '__main__':
+ # Run isolated
+ # -s for DEBUG mode
+ CURRENT_FILE = os.path.realpath(__file__)
+ pytest.main("-s %s" % CURRENT_FILE)
\ No newline at end of file
1
0
dirsrvtests/tickets/ticket48325_test.py | 270 ++++++++++++++++++++++++++++++++
1 file changed, 270 insertions(+)
New commits:
commit d192435486cf6f31f3684828490c610c9521b80e
Author: Mark Reynolds <mreynolds(a)redhat.com>
Date: Tue Nov 10 13:54:30 2015 -0500
Ticket 48325 - Add lib389 test script
Description: Add test script to test replication promotion
https://fedorahosted.org/389/ticket/48325
Reviewed by: wibrown(Thanks!)
(cherry picked from commit a534583fdc7aaaeda11d87fdaf09cfaa603fb48f)
diff --git a/dirsrvtests/tickets/ticket48325_test.py b/dirsrvtests/tickets/ticket48325_test.py
new file mode 100644
index 0000000..3505d1a
--- /dev/null
+++ b/dirsrvtests/tickets/ticket48325_test.py
@@ -0,0 +1,270 @@
+import os
+import sys
+import time
+import ldap
+import logging
+import pytest
+from lib389 import DirSrv, Entry, tools, tasks
+from lib389.tools import DirSrvTools
+from lib389._constants import *
+from lib389.properties import *
+from lib389.tasks import *
+from lib389.utils import *
+
+logging.getLogger(__name__).setLevel(logging.DEBUG)
+log = logging.getLogger(__name__)
+
+installation1_prefix = None
+
+
+class TopologyReplication(object):
+ def __init__(self, master1, hub1, consumer1):
+ master1.open()
+ self.master1 = master1
+ hub1.open()
+ self.hub1 = hub1
+ consumer1.open()
+ self.consumer1 = consumer1
+
+
+(a)pytest.fixture(scope="module")
+def topology(request):
+ global installation1_prefix
+ if installation1_prefix:
+ args_instance[SER_DEPLOYED_DIR] = installation1_prefix
+
+ # Creating master 1...
+ master1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_MASTER_1
+ args_instance[SER_PORT] = PORT_MASTER_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_master = args_instance.copy()
+ master1.allocate(args_master)
+ instance_master1 = master1.exists()
+ if instance_master1:
+ master1.delete()
+ master1.create()
+ master1.open()
+ master1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER,
+ replicaId=REPLICAID_MASTER_1)
+
+ # Creating hub 1...
+ hub1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_HUB_1
+ args_instance[SER_PORT] = PORT_HUB_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_HUB_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_hub = args_instance.copy()
+ hub1.allocate(args_hub)
+ instance_hub1 = hub1.exists()
+ if instance_hub1:
+ hub1.delete()
+ hub1.create()
+ hub1.open()
+ hub1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_HUB,
+ replicaId=REPLICAID_HUB_1)
+
+ # Creating consumer 1...
+ consumer1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_CONSUMER_1
+ args_instance[SER_PORT] = PORT_CONSUMER_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_CONSUMER_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_consumer = args_instance.copy()
+ consumer1.allocate(args_consumer)
+ instance_consumer1 = consumer1.exists()
+ if instance_consumer1:
+ consumer1.delete()
+ consumer1.create()
+ consumer1.open()
+ consumer1.changelog.create()
+ consumer1.replica.enableReplication(suffix=SUFFIX,
+ role=REPLICAROLE_CONSUMER,
+ replicaId=CONSUMER_REPLICAID)
+
+ #
+ # Create all the agreements
+ #
+ # Creating agreement from master 1 to hub 1
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ m1_h1_agmt = master1.agreement.create(suffix=SUFFIX, host=hub1.host,
+ port=hub1.port,
+ properties=properties)
+ if not m1_h1_agmt:
+ log.fatal("Fail to create a master -> hub replica agreement")
+ sys.exit(1)
+ log.debug("%s created" % m1_h1_agmt)
+
+ # Creating agreement from hub 1 to consumer 1
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ h1_c1_agmt = hub1.agreement.create(suffix=SUFFIX, host=consumer1.host,
+ port=consumer1.port,
+ properties=properties)
+ if not h1_c1_agmt:
+ log.fatal("Fail to create a hub -> consumer replica agreement")
+ sys.exit(1)
+ log.debug("%s created" % h1_c1_agmt)
+
+ # Allow the replicas to get situated with the new agreements...
+ time.sleep(5)
+
+ #
+ # Initialize all the agreements
+ #
+ master1.agreement.init(SUFFIX, HOST_HUB_1, PORT_HUB_1)
+ master1.waitForReplInit(m1_h1_agmt)
+ hub1.agreement.init(SUFFIX, HOST_CONSUMER_1, PORT_CONSUMER_1)
+ hub1.waitForReplInit(h1_c1_agmt)
+
+ # Check replication is working...
+ if master1.testReplication(DEFAULT_SUFFIX, consumer1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ # Delete each instance in the end
+ def fin():
+ master1.delete()
+ hub1.delete()
+ consumer1.delete()
+ pass
+
+ request.addfinalizer(fin)
+
+ # Clear out the tmp dir
+ master1.clearTmpDir(__file__)
+
+ return TopologyReplication(master1, hub1, consumer1)
+
+
+def checkFirstElement(ds, rid):
+ """
+ Return True if the first RUV element is for the specified rid
+ """
+ try:
+ entry = ds.search_s(DEFAULT_SUFFIX,
+ ldap.SCOPE_SUBTREE,
+ REPLICA_RUV_FILTER,
+ ['nsds50ruv'])
+ assert entry
+ entry = entry[0]
+ except ldap.LDAPError as e:
+ log.fatal('Failed to retrieve RUV entry: %s' % str(e))
+ assert False
+
+ ruv_elements = entry.getValues('nsds50ruv')
+ if ('replica %s ' % rid) in ruv_elements[1]:
+ return True
+ else:
+ return False
+
+
+def test_ticket48325(topology):
+ """
+ Test that the RUV element order is correctly maintained when promoting
+ a hub or consumer.
+ """
+
+ #
+ # Promote consumer to master
+ #
+ try:
+ DN = topology.consumer1.replica._get_mt_entry(DEFAULT_SUFFIX)
+ topology.consumer1.modify_s(DN, [(ldap.MOD_REPLACE,
+ 'nsDS5ReplicaType',
+ '3'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5ReplicaID',
+ '1234'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5Flags',
+ '1')])
+ except ldap.LDAPError as e:
+ log.fatal('Failed to promote consuemr to master: error %s' % str(e))
+ assert False
+ time.sleep(1)
+
+ #
+ # Check ruv has been reordered
+ #
+ if not checkFirstElement(topology.consumer1, '1234'):
+ log.fatal('RUV was not reordered')
+ assert False
+
+ #
+ # Create repl agreement from the newly promoted master to master1
+ #
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ new_agmt = topology.consumer1.agreement.create(suffix=SUFFIX,
+ host=topology.master1.host,
+ port=topology.master1.port,
+ properties=properties)
+
+ if not new_agmt:
+ log.fatal("Fail to create new agmt from old consumer to the master")
+ assert False
+
+ #
+ # Test replication is working
+ #
+ if topology.consumer1.testReplication(DEFAULT_SUFFIX, topology.master1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ #
+ # Promote hub to master
+ #
+ try:
+ DN = topology.hub1.replica._get_mt_entry(DEFAULT_SUFFIX)
+ topology.hub1.modify_s(DN, [(ldap.MOD_REPLACE,
+ 'nsDS5ReplicaType',
+ '3'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5ReplicaID',
+ '5678')])
+ except ldap.LDAPError as e:
+ log.fatal('Failed to promote consuemr to master: error %s' % str(e))
+ assert False
+ time.sleep(1)
+
+ #
+ # Check ruv has been reordered
+ #
+ if not checkFirstElement(topology.hub1, '5678'):
+ log.fatal('RUV was not reordered')
+ assert False
+
+ #
+ # Test replication is working
+ #
+ if topology.hub1.testReplication(DEFAULT_SUFFIX, topology.master1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ # Done
+ log.info('Test complete')
+
+
+if __name__ == '__main__':
+ # Run isolated
+ # -s for DEBUG mode
+ CURRENT_FILE = os.path.realpath(__file__)
+ pytest.main("-s %s" % CURRENT_FILE)
\ No newline at end of file
1
0
dirsrvtests/tickets/ticket48325_test.py | 270 ++++++++++++++++++++++++++++++++
1 file changed, 270 insertions(+)
New commits:
commit a534583fdc7aaaeda11d87fdaf09cfaa603fb48f
Author: Mark Reynolds <mreynolds(a)redhat.com>
Date: Tue Nov 10 13:54:30 2015 -0500
Ticket 48325 - Add lib389 test script
Description: Add test script to test replication promotion
https://fedorahosted.org/389/ticket/48325
Reviewed by: wibrown(Thanks!)
diff --git a/dirsrvtests/tickets/ticket48325_test.py b/dirsrvtests/tickets/ticket48325_test.py
new file mode 100644
index 0000000..3505d1a
--- /dev/null
+++ b/dirsrvtests/tickets/ticket48325_test.py
@@ -0,0 +1,270 @@
+import os
+import sys
+import time
+import ldap
+import logging
+import pytest
+from lib389 import DirSrv, Entry, tools, tasks
+from lib389.tools import DirSrvTools
+from lib389._constants import *
+from lib389.properties import *
+from lib389.tasks import *
+from lib389.utils import *
+
+logging.getLogger(__name__).setLevel(logging.DEBUG)
+log = logging.getLogger(__name__)
+
+installation1_prefix = None
+
+
+class TopologyReplication(object):
+ def __init__(self, master1, hub1, consumer1):
+ master1.open()
+ self.master1 = master1
+ hub1.open()
+ self.hub1 = hub1
+ consumer1.open()
+ self.consumer1 = consumer1
+
+
+(a)pytest.fixture(scope="module")
+def topology(request):
+ global installation1_prefix
+ if installation1_prefix:
+ args_instance[SER_DEPLOYED_DIR] = installation1_prefix
+
+ # Creating master 1...
+ master1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_MASTER_1
+ args_instance[SER_PORT] = PORT_MASTER_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_MASTER_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_master = args_instance.copy()
+ master1.allocate(args_master)
+ instance_master1 = master1.exists()
+ if instance_master1:
+ master1.delete()
+ master1.create()
+ master1.open()
+ master1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_MASTER,
+ replicaId=REPLICAID_MASTER_1)
+
+ # Creating hub 1...
+ hub1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_HUB_1
+ args_instance[SER_PORT] = PORT_HUB_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_HUB_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_hub = args_instance.copy()
+ hub1.allocate(args_hub)
+ instance_hub1 = hub1.exists()
+ if instance_hub1:
+ hub1.delete()
+ hub1.create()
+ hub1.open()
+ hub1.replica.enableReplication(suffix=SUFFIX, role=REPLICAROLE_HUB,
+ replicaId=REPLICAID_HUB_1)
+
+ # Creating consumer 1...
+ consumer1 = DirSrv(verbose=False)
+ args_instance[SER_HOST] = HOST_CONSUMER_1
+ args_instance[SER_PORT] = PORT_CONSUMER_1
+ args_instance[SER_SERVERID_PROP] = SERVERID_CONSUMER_1
+ args_instance[SER_CREATION_SUFFIX] = DEFAULT_SUFFIX
+ args_consumer = args_instance.copy()
+ consumer1.allocate(args_consumer)
+ instance_consumer1 = consumer1.exists()
+ if instance_consumer1:
+ consumer1.delete()
+ consumer1.create()
+ consumer1.open()
+ consumer1.changelog.create()
+ consumer1.replica.enableReplication(suffix=SUFFIX,
+ role=REPLICAROLE_CONSUMER,
+ replicaId=CONSUMER_REPLICAID)
+
+ #
+ # Create all the agreements
+ #
+ # Creating agreement from master 1 to hub 1
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ m1_h1_agmt = master1.agreement.create(suffix=SUFFIX, host=hub1.host,
+ port=hub1.port,
+ properties=properties)
+ if not m1_h1_agmt:
+ log.fatal("Fail to create a master -> hub replica agreement")
+ sys.exit(1)
+ log.debug("%s created" % m1_h1_agmt)
+
+ # Creating agreement from hub 1 to consumer 1
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ h1_c1_agmt = hub1.agreement.create(suffix=SUFFIX, host=consumer1.host,
+ port=consumer1.port,
+ properties=properties)
+ if not h1_c1_agmt:
+ log.fatal("Fail to create a hub -> consumer replica agreement")
+ sys.exit(1)
+ log.debug("%s created" % h1_c1_agmt)
+
+ # Allow the replicas to get situated with the new agreements...
+ time.sleep(5)
+
+ #
+ # Initialize all the agreements
+ #
+ master1.agreement.init(SUFFIX, HOST_HUB_1, PORT_HUB_1)
+ master1.waitForReplInit(m1_h1_agmt)
+ hub1.agreement.init(SUFFIX, HOST_CONSUMER_1, PORT_CONSUMER_1)
+ hub1.waitForReplInit(h1_c1_agmt)
+
+ # Check replication is working...
+ if master1.testReplication(DEFAULT_SUFFIX, consumer1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ # Delete each instance in the end
+ def fin():
+ master1.delete()
+ hub1.delete()
+ consumer1.delete()
+ pass
+
+ request.addfinalizer(fin)
+
+ # Clear out the tmp dir
+ master1.clearTmpDir(__file__)
+
+ return TopologyReplication(master1, hub1, consumer1)
+
+
+def checkFirstElement(ds, rid):
+ """
+ Return True if the first RUV element is for the specified rid
+ """
+ try:
+ entry = ds.search_s(DEFAULT_SUFFIX,
+ ldap.SCOPE_SUBTREE,
+ REPLICA_RUV_FILTER,
+ ['nsds50ruv'])
+ assert entry
+ entry = entry[0]
+ except ldap.LDAPError as e:
+ log.fatal('Failed to retrieve RUV entry: %s' % str(e))
+ assert False
+
+ ruv_elements = entry.getValues('nsds50ruv')
+ if ('replica %s ' % rid) in ruv_elements[1]:
+ return True
+ else:
+ return False
+
+
+def test_ticket48325(topology):
+ """
+ Test that the RUV element order is correctly maintained when promoting
+ a hub or consumer.
+ """
+
+ #
+ # Promote consumer to master
+ #
+ try:
+ DN = topology.consumer1.replica._get_mt_entry(DEFAULT_SUFFIX)
+ topology.consumer1.modify_s(DN, [(ldap.MOD_REPLACE,
+ 'nsDS5ReplicaType',
+ '3'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5ReplicaID',
+ '1234'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5Flags',
+ '1')])
+ except ldap.LDAPError as e:
+ log.fatal('Failed to promote consuemr to master: error %s' % str(e))
+ assert False
+ time.sleep(1)
+
+ #
+ # Check ruv has been reordered
+ #
+ if not checkFirstElement(topology.consumer1, '1234'):
+ log.fatal('RUV was not reordered')
+ assert False
+
+ #
+ # Create repl agreement from the newly promoted master to master1
+ #
+ properties = {RA_NAME: r'meTo_$host:$port',
+ RA_BINDDN: defaultProperties[REPLICATION_BIND_DN],
+ RA_BINDPW: defaultProperties[REPLICATION_BIND_PW],
+ RA_METHOD: defaultProperties[REPLICATION_BIND_METHOD],
+ RA_TRANSPORT_PROT: defaultProperties[REPLICATION_TRANSPORT]}
+ new_agmt = topology.consumer1.agreement.create(suffix=SUFFIX,
+ host=topology.master1.host,
+ port=topology.master1.port,
+ properties=properties)
+
+ if not new_agmt:
+ log.fatal("Fail to create new agmt from old consumer to the master")
+ assert False
+
+ #
+ # Test replication is working
+ #
+ if topology.consumer1.testReplication(DEFAULT_SUFFIX, topology.master1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ #
+ # Promote hub to master
+ #
+ try:
+ DN = topology.hub1.replica._get_mt_entry(DEFAULT_SUFFIX)
+ topology.hub1.modify_s(DN, [(ldap.MOD_REPLACE,
+ 'nsDS5ReplicaType',
+ '3'),
+ (ldap.MOD_REPLACE,
+ 'nsDS5ReplicaID',
+ '5678')])
+ except ldap.LDAPError as e:
+ log.fatal('Failed to promote consuemr to master: error %s' % str(e))
+ assert False
+ time.sleep(1)
+
+ #
+ # Check ruv has been reordered
+ #
+ if not checkFirstElement(topology.hub1, '5678'):
+ log.fatal('RUV was not reordered')
+ assert False
+
+ #
+ # Test replication is working
+ #
+ if topology.hub1.testReplication(DEFAULT_SUFFIX, topology.master1):
+ log.info('Replication is working.')
+ else:
+ log.fatal('Replication is not working.')
+ assert False
+
+ # Done
+ log.info('Test complete')
+
+
+if __name__ == '__main__':
+ # Run isolated
+ # -s for DEBUG mode
+ CURRENT_FILE = os.path.realpath(__file__)
+ pytest.main("-s %s" % CURRENT_FILE)
\ No newline at end of file
1
0
rpm/389-ds-base.spec.in | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit b3a80f2a1269f6595a6d22b2544b6ade9ebabc65
Author: Noriko Hosoi <nhosoi(a)redhat.com>
Date: Wed Nov 11 10:26:22 2015 -0800
bump nunc-stans version to 0.1.7
diff --git a/rpm/389-ds-base.spec.in b/rpm/389-ds-base.spec.in
index 724e625..ff85863 100644
--- a/rpm/389-ds-base.spec.in
+++ b/rpm/389-ds-base.spec.in
@@ -16,7 +16,7 @@
%global use_nunc_stans __NUNC_STANS_ON__
%if %{use_nunc_stans}
-%global nunc_stans_ver 0.1.6
+%global nunc_stans_ver 0.1.7
%endif
# fedora 15 and later uses tmpfiles.d
1
0
11 Nov '15
Rebased ref, commits from common ancestor:
1
0
11 Nov '15
Rebased ref, commits from common ancestor:
1
0
11 Nov '15
Rebased ref, commits from common ancestor:
1
0