[Git][openldap-team/openldap][upstream] 54 commits: Return to engineering

Ryan Tandy (@rtandy) gitlab at salsa.debian.org
Thu Jun 13 03:43:16 BST 2024



Ryan Tandy pushed to branch upstream at Debian OpenLDAP Maintainers / openldap


Commits:
a3690aa6 by Quanah Gibson-Mount at 2024-01-29T20:42:54+00:00
Return to engineering

- - - - -
0f326100 by Howard Chu at 2024-02-15T17:47:13+00:00
ITS#10166 slapi: fix plugin.c plugin_pblock_new() usage

Broken in 9142da8eaf691720f7d6288954250ef085bd3da0

- - - - -
a984408b by Quanah Gibson-Mount at 2024-02-15T17:48:08+00:00
ITS#10166

- - - - -
97e2034b by Nadezhda Ivanova at 2024-02-15T17:49:13+00:00
ITS#10165 back-meta fails to bind to target when proxying an internal operation

- - - - -
d4dfa939 by Quanah Gibson-Mount at 2024-02-15T17:51:34+00:00
ITS#10165

- - - - -
8111aea1 by Howard Chu at 2024-02-15T17:52:40+00:00
slapo-autogroup: fix typo in Debug msg

Was present in original commit 946e8591088b557cbd326a904c138d910a7b9f9e

- - - - -
c4a8fce7 by Ondřej Kuzník at 2024-02-15T17:55:05+00:00
ITS#9823 Move to a place that is better associated with accesslog

- - - - -
166a010e by Stephen Gallagher at 2024-02-15T18:07:05+00:00
ITS#10171 - Explicitly cast private values

Fixes issues with -Werror=incompatible-pointer-types

Signed-off-by: Stephen Gallagher <sgallagh at redhat.com>

- - - - -
0d7524ad by Quanah Gibson-Mount at 2024-02-15T18:07:18+00:00
ITS#10171

- - - - -
b870fbff by Ondřej Kuzník at 2024-02-15T18:08:00+00:00
ITS#10173 Populate li_minCSN on conversion

- - - - -
6ca9a124 by Quanah Gibson-Mount at 2024-02-15T18:10:41+00:00
ITS#10173

- - - - -
0ce2afd8 by Nadezhda Ivanova at 2024-02-15T18:12:46+00:00
ITS#10164 back-meta hangs when used with dynlist overlay

Make sure every proxied operation has a separate candidates structure.

- - - - -
16de33bd by Quanah Gibson-Mount at 2024-02-15T18:13:13+00:00
ITS#10164

- - - - -
de1c44af by Nadezhda Ivanova at 2024-02-15T18:14:32+00:00
ITS#10179 back-asyncmeta(5) man page incorrectly mentions rewrite

back-asyncmeta does not currently support the rewrite engine.

- - - - -
6300d127 by Quanah Gibson-Mount at 2024-02-15T18:14:42+00:00
ITS#10179

- - - - -
321a6b33 by Howard Chu at 2024-02-15T19:37:49+00:00
ITS#10170 accesslog: skip response if not fully initialized yet

- - - - -
d7810ffb by Quanah Gibson-Mount at 2024-02-15T19:38:26+00:00
ITS#10170

- - - - -
83dc42c5 by Howard Chu at 2024-03-26T14:52:42+00:00
ITS#9037 mdb_page_search: fix error code when DBI record is missing

Use the more relevant MDB_BAD_DBI instead of MDB_NOTFOUND error code

- - - - -
7077d5e6 by Quanah Gibson-Mount at 2024-03-26T16:25:55+00:00
ITS#9037

- - - - -
dcbd0113 by Howard Chu at 2024-03-26T16:32:23+00:00
Revert "ITS#9952 libldap: use atexit for TLS teardown"

This reverts commit 337455eb3a66176cc3f66d2c663a72cc7b4178bd.
The change was non-portable, caused ITS#10176. OpenSSL 3 is
broken and should be fixed.

- - - - -
6dc030a8 by Howard Chu at 2024-03-26T16:32:29+00:00
ITS#9952 TLS/OpenSSL: disable use of atexit()

This will only have any effect if libldap is the first caller to
initialize OpenSSL, but that should be all that matters when libldap
is part of a dynmically loaded module. It prevents the crash in the
example cases given.

- - - - -
c5768809 by Quanah Gibson-Mount at 2024-03-26T16:33:40+00:00
ITS#9952

- - - - -
619afacc by HAMANO Tsukasa at 2024-03-26T16:40:27+00:00
ITS#10177 fix back-perl build for clang15 or later

Remove problematic and unnecessary compile flags.

- - - - -
7b59a5ad by Quanah Gibson-Mount at 2024-03-26T16:40:38+00:00
ITS#10177

- - - - -
abd8706e by Howard Chu at 2024-03-26T16:43:13+00:00
ITS#10044 dynlist: check for abandon in search2resp

- - - - -
25bf6462 by Quanah Gibson-Mount at 2024-03-26T16:43:21+00:00
ITS#10044

- - - - -
8deecaf3 by Howard Chu at 2024-03-26T17:03:48+00:00
ITS#10186 overlay response callbacks should ignore op->o_abandon

- - - - -
0c0fe01e by Quanah Gibson-Mount at 2024-03-26T17:03:57+00:00
ITS#10186

- - - - -
2eadd152 by Quanah Gibson-Mount at 2024-03-26T19:46:02+00:00
Happy New Year!

- - - - -
d3ae7c36 by Howard Chu at 2024-04-04T07:17:35+01:00
ITS#10198 Win32 mdb_strerror - stop passing "ignored" parameter

The M$ docs say the parameter is ignored, but it actually isn't,
and will cause a SEGV if the pointed memory isn't an init'd va_list.

- - - - -
37829ce4 by Howard Chu at 2024-05-02T16:33:14+01:00
ITS#10212 LMDB: init txnid for read-only DBs

- - - - -
d83d6b4e by Howard Chu at 2024-05-03T20:44:48+01:00
ITS#10212 LMDB: better fix

- - - - -
a29649f5 by Ryan Tandy at 2024-05-07T16:33:53+00:00
ITS#10206 Include <kadm5/private.h> for kadm5_s_init_with_password_ctx

- - - - -
4c1132dc by Quanah Gibson-Mount at 2024-05-07T16:36:40+00:00
ITS#10206

- - - - -
98985948 by Nick Porter at 2024-05-07T16:36:46+00:00
ITS#10211 slapd: Fix peercred uid and gid format

uid and gid are unsigned int and so should be formatted as such when
creating the authid string.

- - - - -
98ae4a9e by Quanah Gibson-Mount at 2024-05-07T16:37:58+00:00
ITS#10211

- - - - -
f7390ca2 by Ondřej Kuzník at 2024-05-07T16:43:51+00:00
ITS#10084 Switch MECH default away from DIGEST-MD5

- - - - -
2b1e7e3d by Quanah Gibson-Mount at 2024-05-07T16:45:46+00:00
ITS#10208

- - - - -
ccbec372 by Quanah Gibson-Mount at 2024-05-07T16:49:00+00:00
ITS#10198

- - - - -
7c997997 by Quanah Gibson-Mount at 2024-05-07T16:49:34+00:00
ITS#10212

- - - - -
6823f11f by Quanah Gibson-Mount at 2024-05-07T17:29:07+00:00
Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5

- - - - -
f640d170 by Howard Chu at 2024-05-08T15:30:13+00:00
ITS#9921 fix vlvResult comment

- - - - -
3279ce21 by Quanah Gibson-Mount at 2024-05-08T17:56:59+00:00
ITS#9921

- - - - -
f7c76e2d by HAMANO Tsukasa at 2024-05-09T17:10:49+00:00
ITS#10214 Reduce library dependencies

Currently, slapd links libsystemd to notify service state to systemd.
However, libsystemd link several unnecessary libraries, which increases security risks.
The systemd documentation provides a method to send state notifications to systemd using a simple protocol without the need to link against libsystemd.

https://www.freedesktop.org/software/systemd/man/devel/sd_notify.html

- - - - -
f1919331 by Quanah Gibson-Mount at 2024-05-09T17:12:24+00:00
ITS#10214 - regenerate configure

- - - - -
69dd3f82 by Quanah Gibson-Mount at 2024-05-09T17:13:06+00:00
ITS#10214

- - - - -
c3e710dc by Howard Chu at 2024-05-09T19:09:29+00:00
ITS#10209 libldap: only use OPENSSL_INIT_NO_ATEXIT if it's defined

Fake OpenSSL clones like LibreSSL don't support it.

In general we will make no effort to support fake OpenSSL clones.

- - - - -
1e75e3d6 by Quanah Gibson-Mount at 2024-05-09T19:09:42+00:00
ITS#10209

- - - - -
8bb35fd8 by Howard Chu at 2024-05-21T15:42:09+00:00
ITS#10216 libldap: fix OpenSSL channel binding digest

The OBJ_find_ API is undocumented but this is what OpenSSL libcrypto does itself.

- - - - -
1d4e1a97 by Quanah Gibson-Mount at 2024-05-21T16:05:47+00:00
ITS#10216

- - - - -
3a29a247 by Quanah Gibson-Mount at 2024-05-21T17:16:06+00:00
Prep for release

- - - - -
d537918d by Quanah Gibson-Mount at 2024-05-21T17:16:55+00:00
Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5

- - - - -
675b5165 by Quanah Gibson-Mount at 2024-05-21T17:19:57+00:00
Prep for release (2.5.18)

- - - - -
53c32341 by Ryan Tandy at 2024-06-12T16:24:02-07:00
New upstream version 2.5.18+dfsg
- - - - -


30 changed files:

- ANNOUNCEMENT
- CHANGES
- COPYRIGHT
- INSTALL
- Makefile.in
- README
- aclocal.m4
- build/dir.mk
- build/info.mk
- build/lib-shared.mk
- build/lib-static.mk
- build/lib.mk
- build/man.mk
- build/mkdep
- build/mkdep.aix
- build/mkrelease
- build/mkvers.bat
- build/mkversion
- build/mod.mk
- build/openldap.m4
- build/rules.mk
- build/srv.mk
- build/top.mk
- build/version.h
- build/version.sh
- build/version.var
- clients/Makefile.in
- clients/tools/Makefile.in
- clients/tools/common.c
- clients/tools/common.h


View it on GitLab: https://salsa.debian.org/openldap-team/openldap/-/compare/73c770ab8d11ebf130b356584ee768e6c97bcd67...53c32341d5be191bdebf3e15222a8cd338c6f5dd

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/openldap-team/openldap/-/compare/73c770ab8d11ebf130b356584ee768e6c97bcd67...53c32341d5be191bdebf3e15222a8cd338c6f5dd
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20240613/1e7aa5b8/attachment-0001.htm>


More information about the Pkg-openldap-devel mailing list