CHANGES 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323
  1. OpenLDAP 2.6 Change Log
  2. OpenLDAP 2.6.9 Release (2024/11/26)
  3. Fixed libldap TLS connection timeout handling (ITS#8047)
  4. Fixed libldap GnuTLS incompatible pointer type (ITS#10253)
  5. Fixed libldap OpenSSL set_ciphersuite error handling (ITS#10223)
  6. Fixed libldap to check for OpenSSL EVP_Digest* failure (ITS#10224)
  7. Fixed slapd cn=config disallowed modification of cn=schema (ITS#10256)
  8. Fixed slapd syncrepl assert during refresh at shutdown (ITS#10232)
  9. Fixed slapd syncrepl retry state during refreshDone (ITS#10234)
  10. Fixed slapd-ldap use of multi-precision add for op counters (ITS#10237)
  11. Fixed slapd-mdb idl intersection (ITS#10233)
  12. Fixed slapd-wt idl intersection (ITS#10233)
  13. Fixed slapo-memberof to omit dynamic values (ITS#10230)
  14. Fixed slapo-nestgroup leak in nestgroup_memberFilter (ITS#10249)
  15. Fixed slapo-translucent regression with subordinate databases (ITS#10248)
  16. Fixed slapo-translucent regression when requesting attributes (ITS#10272)
  17. Fixed slappw-argon2 defaults to be more secure (ITS#9827)
  18. Minor Cleanup
  19. ITS#10155
  20. ITS#10218
  21. ITS#10219
  22. ITS#10227
  23. ITS#10231
  24. ITS#10235
  25. ITS#10263
  26. ITS#10264
  27. OpenLDAP 2.6.8 Release (2024/05/21)
  28. Fixed libldap exit handling with OpenSSL3 again (ITS#9952)
  29. Fixed libldap OpenSSL channel binding digest (ITS#10216)
  30. Fixed slapd handling of large uid/gids peercred auth (ITS#10211)
  31. Fixed slapd-asyncmeta/meta target structure allocations (ITS#10197)
  32. Fixed slapd-meta with dynlist (ITS#10164)
  33. Fixed slapd-meta binds when proxying internal op (ITS#10165)
  34. Added slapo-nestgroup overlay (ITS#10161)
  35. Added slapo-memberof 'addcheck' option (ITS#10167)
  36. Fixed slapo-accesslog startup initialization (ITS#10170)
  37. Fixed slapo-constraint double free on invalid attr (ITS#10204)
  38. Fixed slapo-dynlist with abandoned operations (ITS#10044)
  39. Build
  40. Fixed build with gcc14.x (ITS#10166)
  41. Fixed back-perl with clang15 (ITS#10177)
  42. Fixed to reduce systemd dependencies (ITS#10214)
  43. Contrib
  44. Added slapo-alias contrib module (ITS#10104, ITS#10182)
  45. Fixed slapo-autogroup to work with slapo-dynlist (ITS#10185)
  46. Fixed smbk5pwd implicit function declaration (ITS#10206)
  47. Documentation
  48. Fixed slapo-memberof exattr requirements (ITS#7400)
  49. Fixed slapo-memberof is no longer deprecated (ITS#7400)
  50. Minor Cleanup
  51. ITS#9921
  52. ITS#10103
  53. ITS#10171
  54. ITS#10172
  55. ITS#10173
  56. ITS#10179
  57. ITS#10183
  58. ITS#10186
  59. ITS#10188
  60. ITS#10193
  61. ITS#10209
  62. OpenLDAP 2.6.7 Release (2024/01/29)
  63. Added slapo-dynlist option to disable filter support (ITS#10025)
  64. Fixed liblber missing newline on long msg (ITS#10105)
  65. Fixed libldap exit handling with OpenSSL3 (ITS#9952)
  66. Fixed libldap with TLS and multiple ldap URIs (ITS#10101)
  67. Fixed libldap OpenSSL cipher suite handling (ITS#10094)
  68. Fixed libldap OpenSSL 3.0 and Diffie-Hellman param files (ITS#10124)
  69. Fixed libldap timestamps on Windows (ITS#10100)
  70. Fixed lloadd to work when resolv.conf is missing (ITS#10070)
  71. Fixed lloadd handling of closing connection (ITS#10083)
  72. Fixed lloadd tiers to be correctly linked on startup (ITS#10142)
  73. Fixed slapd to honour disclose in matchedDN handling (ITS#10139)
  74. Fixed slapd handling of regex testing in ACLs (ITS#10089)
  75. Fixed slapd sync replication with glued database (ITS#10080)
  76. Fixed slapd local logging on Windows (ITS#10092)
  77. Fixed slapd-asyncmeta when remote suffix is empty (ITS#10076)
  78. Fixed slapo-dynlist so it can't be global (ITS#10091)
  79. Build
  80. Fixed lloadd type mismatches (ITS#10074)
  81. Fixed builds for Windows (ITS#10117)
  82. Fixed build with clang16 (ITS#10123)
  83. Documentation
  84. Fixed slapo-homedir(5) attribute name for olcHomedirArchivePath (ITS#10057)
  85. Minor Cleanup
  86. ITS#10059
  87. ITS#10068
  88. ITS#10098
  89. ITS#10109
  90. ITS#10110
  91. ITS#10129
  92. ITS#10130
  93. ITS#10135
  94. ITS#10143
  95. ITS#10144
  96. ITS#10145
  97. ITS#10153
  98. OpenLDAP 2.6.6 Release (2023/07/31)
  99. Fixed slapd cn=config incorrect handling of paused (ITS#10045)
  100. Fixed slapd-meta to account for MOD ops being optional (ITS#10067)
  101. Fixed slapd-asyncmeta to account for MOD ops being optional (ITS#10067)
  102. OpenLDAP 2.6.5 Release (2023/07/10)
  103. Fixed libldap handling of TCP KEEPALIVE options (ITS#10015)
  104. Fixed libldap with async connections (ITS#10023)
  105. Fixed libldap openssl TLSv1.3 cipher suite handling (ITS#10035)
  106. Fixed slapd callback handling with overlays that do extended operations (ITS#9990)
  107. Fixed slapd conversion of pcache configurations (ITS#10031)
  108. Fixed slapd cn=config modification handling with abandon (ITS#10045)
  109. Fixed slapd-mdb online indexer termination and cleanup (ITS#9993)
  110. Fixed slapd-mdb online indexer when interrupted (ITS#10047)
  111. Fixed slapd-monitor connection cleanup (ITS#10042)
  112. Fixed slapo-constraint handling of push replication (ITS#9953)
  113. Fixed slapo-dynlist filter evaluation efficiency (ITS#10041)
  114. Fixed slapo-pcache handling of invalid schema (ITS#10032)
  115. Fixed slapo-ppolicy handling of push replication (ITS#9953)
  116. Fixed slapo-ppolicy handling of pwdMinDelay (ITS#10028)
  117. Fixed slapo-syncprov abandon handling (ITS#10016)
  118. Fixed slapo-translucent handling of invalid schema (ITS#10032)
  119. Fixed slapo-unique handling of push replication (ITS#9953)
  120. Fixed slapo-variant to improve regex handling (ITS#10048)
  121. Build Environment
  122. Fixed compatibility with stricter C99 compilers (ITS#10011)
  123. Keep .pc files during make clean (ITS#9989)
  124. Contrib
  125. Fixed slapo-variant handling of push replication (ITS#9953)
  126. Minor Cleanup
  127. ITS#9855
  128. ITS#9995
  129. ITS#9996
  130. ITS#9997
  131. ITS#9998
  132. ITS#9999
  133. ITS#10000
  134. ITS#10003
  135. ITS#10004
  136. ITS#10033
  137. ITS#10037
  138. ITS#10039
  139. ITS#10046
  140. ITS#10063
  141. OpenLDAP 2.6.4 Release (2023/02/08)
  142. Fixed client tools to remove 'h' and 'p' options (ITS#9917,ITS#8618)
  143. Fixed ldapsearch memory leak with paged results (ITS#9860)
  144. Fixed libldap ldif_open_urlto check for failure (ITS#9904)
  145. Fixed libldap ldap_url_parsehosts check for failure (ITS#9904)
  146. Fixed liblunicode UTF8bvnormalize buffer size (ITS#9955)
  147. Fixed lloadd memory leaks (ITS#9907)
  148. Fixed lloadd shutdown code to protect memory correctly (ITS#9913)
  149. Fixed lloadd race in epoch.c (ITS#9947)
  150. Fixed lloadd potential deadlock with cn=monitor (ITS#9951)
  151. Fixed lloadd to keep listener base around when not active (ITS#9984)
  152. Fixed lloadd object reclamation sequencing (ITS#9983)
  153. Fixed slapd memory leak with olcAuthIDRewrite (ITS#6035)
  154. Fixed slapd free of redundant cmdline option (ITS#9912)
  155. Fixed slapd transactions extended operations cleanup after write (ITS#9892)
  156. Fixed slapd deadlock with replicated cn=config (ITS#9930,ITS#8102)
  157. Fixed slapd connection close logic (ITS#9991)
  158. Fixed slapd bconfig locking of cn=config entries (ITS#9045)
  159. Fixed slapd-mdb max number of index databases to 256 (ITS#9895)
  160. Fixed slapd-mdb to always release entries from ADD operations (ITS#9942)
  161. Fixed slapd-mdb to fully init empty DN in tool_entry_get (ITS#9940)
  162. Fixed slapd-monitor memory leaks with lloadd (ITS#9906)
  163. Fixed slapd-monitor to free remembered cookies (ITS#9339)
  164. Fixed slapo-accesslog reqStart ordering matching rule (ITS#9880)
  165. Fixed slapo-deref memory leak (ITS#9924)
  166. Fixed slapo-dynlist to ignore irrelevant objectClasses (ITS#9897)
  167. Fixed slapo-dynlist to avoid unnecessary searches (ITS#9929)
  168. Fixed slapo-dynlist to mark internal searches as such (ITS#9960)
  169. Fixed slapo-pcache crash in consistency_check (ITS#9966)
  170. Fixed slapo-remoteauth memory leaks (ITS#9438)
  171. Fixed slapo-rwm memory leaks (ITS#9817)
  172. Build Environment
  173. Fixed ancient DOS related ifdef checks (ITS#9925)
  174. Fixed build process to not use gmake specific features (ITS#9894)
  175. Fixed source tree to remove symlinks (ITS#9926)
  176. Fixed slapo-otp testdir creation (ITS#9437)
  177. Fixed slapd-tester memory leak (ITS#9908)
  178. Fixed usage of non-standard C syntax (ITS#9898, ITS#9899, ITS#9901)
  179. Fixed usage of bashism (ITS#9900)
  180. Fixed test suite portability (ITS#9931)
  181. Documentation
  182. Fixed ldap_bind(3) to document ber_bvfree in ldap_sasl_bind (ITS#9976)
  183. Fixed slapo-asyncmeta(5) to clarify scheduling for target connections (ITS#9941)
  184. Fixed slapo-dynlist(5) to clarify configuration settings (ITS#9957)
  185. Fixed slapo-unique(5) to clarify when quoting should be used (ITS#9915)
  186. Minor cleanup
  187. ITS#9935
  188. ITS#9336
  189. ITS#9337
  190. ITS#9985
  191. OpenLDAP 2.6.3 Release (2022/07/14)
  192. Fixed libldap to check for NULL ld (ITS#9157)
  193. Fixed libldap memory leaks (ITS#9876)
  194. Fixed lloadd to correctly tag Notice of Disconnection (ITS#9856)
  195. Fixed slapd kqueue support (ITS#9847)
  196. Fixed slapd delta-sync DN leak on ADD ops (ITS#9866)
  197. Fixed slapd replication with back-glue (ITS#9868)
  198. Fixed slapd lastbind replication with chaining (ITS#9863)
  199. Fixed slapd-ldap to correctly set authzid (ITS#9863)
  200. Fixed slapd-mdb to check for stale readers on MDB_READERS_FULL (ITS#7165)
  201. Fixed slapd-mdb indexer task with replicated config (ITS#9858)
  202. Fixed slapo-accesslog onetime memory leak (ITS#9864)
  203. Fixed slapo-ppolicy interaction with slapo-rwm (ITS#9871)
  204. Fixed slapo-rwm to handle escaping special characters (ITS#9817)
  205. Fixed slapo-syncprov memory leaks (ITS#9867)
  206. Fixed slapo-syncprov fallback in delta-sync mode (ITS#9823)
  207. Fixed slapo-unique to not release NULL entry (ITS#8245)
  208. Build Environment
  209. Added slapd-watcher -c contextDN option (ITS#9865)
  210. Fixed tests to use SCRAM-SHA-256 instead of DIGEST-MD5 (ITS#10208)
  211. Fixed librewrite declaration of calloc (ITS#9841)
  212. Fixed parallel builds (ITS#9840)
  213. Fixed test020 to skip back-wt (ITS#9859)
  214. Fixed slapd-watcher SID handling with single URI (ITS#9850)
  215. Fixed test043 with workaround for ITS#9878
  216. Contrib
  217. Added slapo-emptyds contrib module (ITS#8882)
  218. Added slapo-ciboolean contrib module (ITS#9855)
  219. Fixed slapo-autogroup backwards compat (ITS#9020)
  220. Update ppm module to the 2.2 release (ITS#9846)
  221. Documentation
  222. Fixed ldap_get_option(3) to clarify ldap_get/set_option restrictions (ITS#9824)
  223. Fixed slapd-ldap(5),slapd-meta(5) missing bold tag on authz parameter (ITS#9872)
  224. OpenLDAP 2.6.2 Release (2022/05/04)
  225. Added libldap support for OpenSSL 3.0 (ITS#9436)
  226. Added slapd support for OpenSSL 3.0 (ITS#9436)
  227. Fixed ldapdelete to prune LDAP subentries (ITS#9737)
  228. Fixed libldap to drop connection when non-LDAP data is received (ITS#9803)
  229. Fixed libldap to allow newlines at end of included file (ITS#9811)
  230. Fixed slapd slaptest conversion of olcLastBind (ITS#9808)
  231. Fixed slapd to correctly init global_host earlier (ITS#9787)
  232. Fixed slapd bconfig locking for cn=config replication (ITS#9584)
  233. Fixed slapd usage of thread local counters (ITS#9789)
  234. Fixed slapd to clear runqueue task correctly (ITS#9785)
  235. Fixed slapd idletimeout handling (ITS#9820)
  236. Fixed slapd syncrepl handling of new sessions (ITS#9584)
  237. Fixed slapd to clear connections on bind (ITS#9799)
  238. Fixed slapd to correctly advance connections index (ITS#9831)
  239. Fixed slapd syncrepl ODSEE replication of unknown attr (ITS#9801)
  240. Fixed slapd-asyncmeta memory leak in keepalive setting (ITS#9802)
  241. Fixed slapd-ldap memory leak in keepalive setting (ITS#9802)
  242. Fixed slapd-meta SEGV on config rewrite (ITS#9802)
  243. Fixed slapd-meta ordering on config rewrite (ITS#9802)
  244. Fixed slapd-meta memory leak in keepalive setting (ITS#9802)
  245. Fixed slapd-monitor SEGV on shutdown (ITS#9809)
  246. Fixed slapd-monitor crash when hitting sizelimit (ITS#9832)
  247. Fixed slapd-sql to properly escape filter value (ITS#9815)
  248. Added slapo-autoca support for OpenSSL 3.0 (ITS#9436)
  249. Added slapo-otp support for OpenSSL 3.0 (ITS#9436)
  250. Fixed slapo-dynlist dynamic group regression (ITS#9825)
  251. Fixed slapo-pcache SEGV on shutdown (ITS#9809)
  252. Fixed slapo-ppolicy operation handling to be consistent (ITS#9794)
  253. Fixed slapo-translucent to correctly duplicate substring filters (ITS#9818)
  254. Build Environment
  255. Add ability to override default compile time paths (ITS#9675)
  256. Fix compilation with certain versions of gcc (ITS#9790)
  257. Fix compilation with openssl exclusions (ITS#9791)
  258. Fix warnings from make jobserver (ITS#9788)
  259. Contrib
  260. Update ppm module to the 2.1 release (ITS#9814)
  261. Documentation
  262. admin26 Document new lloadd features (ITS#9780)
  263. Fixed slapd.conf(5)/slapd-config(5) syncrepl sizelimit/timelimit documentation (ITS#9804)
  264. Fixed slapd-sock(5) to clarify "sockresps result" behavior (ITS#8255)
  265. OpenLDAP 2.6.1 Release (2022/01/20)
  266. Fixed libldap to init client socket port (ITS#9743)
  267. Fixed libldap with referrals (ITS#9781)
  268. Added slapd config keyword for logfile format (ITS#9745)
  269. Fixed slapd to allow objectClass edits with no net change (ITS#9772)
  270. Fixed slapd configtable population (ITS#9576)
  271. Fixed slapd to only set loglevel in server mode (ITS#9715)
  272. Fixed slapd logfile-rotate use of uninitialized variable (ITS#9730)
  273. Fixed slapd passwd scheme handling with slapd.conf (ITS#9750)
  274. Fixed slapd postread support for modrdn (ITS#7080)
  275. Fixed slapd syncrepl recreation of deleted entries (ITS#9282)
  276. Fixed slapd syncrepl replication with ODSEE (ITS#9707)
  277. Fixed slapd syncrepl to properly replicate glue entries (ITS#9647)
  278. Fixed slapd syncrepl to reject REFRESH for precise resync (ITS#9742)
  279. Fixed slapd syncrepl to avoid busy loop during refresh (ITS#9584)
  280. Fixed slapd syncrepl when X-ORDERED is specified (ITS#9761)
  281. Fixed slapd syncrepl to better handle out of order delete ops (ITS#9751)
  282. Fixed slapd syncrepl to correctly close connections when config is deleted (ITS#9776)
  283. Fixed slapd-mdb to update indices correctly on replace ops (ITS#9753)
  284. Fixed slapd-wt to set correct flags (ITS#9760)
  285. Fixed slapo-accesslog to fix assertion due to deprecated code (ITS#9738)
  286. Fixed slapo-accesslog to fix inconsistently normalized minCSN (ITS#9752)
  287. Fixed slapo-accesslog delete handling of multi-valued config attrs (ITS#9493)
  288. Fixed slapo-autogroup to maintain values in insertion order (ITS#9766)
  289. Fixed slapo-constraint to maintain values in insertion order (ITS#9770)
  290. Fixed slapo-dyngroup to maintain values in insertion order (ITS#9762)
  291. Fixed slapo-dynlist compare operation for static groups (ITS#9747)
  292. Fixed slapo-dynlist static group filter with multiple members (ITS#9779)
  293. Fixed slapo-ppolicy when not built modularly (ITS#9733)
  294. Fixed slapo-refint to maintain values in insertion order (ITS#9763)
  295. Fixed slapo-retcode to honor requested insert position (ITS#9759)
  296. Fixed slapo-sock cn=config support (ITS#9758)
  297. Fixed slapo-syncprov memory leak (ITS#8039)
  298. Fixed slapo-syncprov to generate a more accurate accesslog query (ITS#9756)
  299. Fixed slapo-syncprov to allow empty DB to host persistent syncrepl connections (ITS#9691)
  300. Fixed slapo-syncprov to consider all deletes for sycnInfo messages (ITS#5972)
  301. Fixed slapo-translucent to warn on invalid config (ITS#9768)
  302. Fixed slapo-unique to warn on invalid config (ITS#9767)
  303. Fixed slapo-valsort to maintain values in insertion order (ITS#9764)
  304. Build Environment
  305. Fix test022 to preserve DELAY search output (ITS#9718)
  306. Fix slapd-watcher to allow startup when servers are down (ITS#9727)
  307. Contrib
  308. Fixed slapo-lastbind to work with 2.6 lastbind-precision configuration (ITS#9725)
  309. Documentation
  310. Fixed slapd.conf(5)/slapd-config(5) documentation on lastbind-precision (ITS#9728)
  311. Fixed slapo-accesslog(5) to clarify logoldattr usage (ITS#9749)
  312. OpenLDAP 2.6.0 Release (2021/10/25)
  313. Initial release for "general use".