head 1.8; access; symbols pkgsrc-2021Q2:1.7.0.76 pkgsrc-2021Q2-base:1.7 pkgsrc-2021Q1:1.7.0.74 pkgsrc-2021Q1-base:1.7 pkgsrc-2020Q4:1.7.0.72 pkgsrc-2020Q4-base:1.7 pkgsrc-2020Q3:1.7.0.70 pkgsrc-2020Q3-base:1.7 pkgsrc-2020Q2:1.7.0.66 pkgsrc-2020Q2-base:1.7 pkgsrc-2020Q1:1.7.0.46 pkgsrc-2020Q1-base:1.7 pkgsrc-2019Q4:1.7.0.68 pkgsrc-2019Q4-base:1.7 pkgsrc-2019Q3:1.7.0.64 pkgsrc-2019Q3-base:1.7 pkgsrc-2019Q2:1.7.0.62 pkgsrc-2019Q2-base:1.7 pkgsrc-2019Q1:1.7.0.60 pkgsrc-2019Q1-base:1.7 pkgsrc-2018Q4:1.7.0.58 pkgsrc-2018Q4-base:1.7 pkgsrc-2018Q3:1.7.0.56 pkgsrc-2018Q3-base:1.7 pkgsrc-2018Q2:1.7.0.54 pkgsrc-2018Q2-base:1.7 pkgsrc-2018Q1:1.7.0.52 pkgsrc-2018Q1-base:1.7 pkgsrc-2017Q4:1.7.0.50 pkgsrc-2017Q4-base:1.7 pkgsrc-2017Q3:1.7.0.48 pkgsrc-2017Q3-base:1.7 pkgsrc-2017Q2:1.7.0.44 pkgsrc-2017Q2-base:1.7 pkgsrc-2017Q1:1.7.0.42 pkgsrc-2017Q1-base:1.7 pkgsrc-2016Q4:1.7.0.40 pkgsrc-2016Q4-base:1.7 pkgsrc-2016Q3:1.7.0.38 pkgsrc-2016Q3-base:1.7 pkgsrc-2016Q2:1.7.0.36 pkgsrc-2016Q2-base:1.7 pkgsrc-2016Q1:1.7.0.34 pkgsrc-2016Q1-base:1.7 pkgsrc-2015Q4:1.7.0.32 pkgsrc-2015Q4-base:1.7 pkgsrc-2015Q3:1.7.0.30 pkgsrc-2015Q3-base:1.7 pkgsrc-2015Q2:1.7.0.28 pkgsrc-2015Q2-base:1.7 pkgsrc-2015Q1:1.7.0.26 pkgsrc-2015Q1-base:1.7 pkgsrc-2014Q4:1.7.0.24 pkgsrc-2014Q4-base:1.7 pkgsrc-2014Q3:1.7.0.22 pkgsrc-2014Q3-base:1.7 pkgsrc-2014Q2:1.7.0.20 pkgsrc-2014Q2-base:1.7 pkgsrc-2014Q1:1.7.0.18 pkgsrc-2014Q1-base:1.7 pkgsrc-2013Q4:1.7.0.16 pkgsrc-2013Q4-base:1.7 pkgsrc-2013Q3:1.7.0.14 pkgsrc-2013Q3-base:1.7 pkgsrc-2013Q2:1.7.0.12 pkgsrc-2013Q2-base:1.7 pkgsrc-2013Q1:1.7.0.10 pkgsrc-2013Q1-base:1.7 pkgsrc-2012Q4:1.7.0.8 pkgsrc-2012Q4-base:1.7 pkgsrc-2012Q3:1.7.0.6 pkgsrc-2012Q3-base:1.7 pkgsrc-2012Q2:1.7.0.4 pkgsrc-2012Q2-base:1.7 pkgsrc-2012Q1:1.7.0.2 pkgsrc-2012Q1-base:1.7 pkgsrc-2011Q4:1.6.0.24 pkgsrc-2011Q4-base:1.6 pkgsrc-2011Q3:1.6.0.22 pkgsrc-2011Q3-base:1.6 pkgsrc-2011Q2:1.6.0.20 pkgsrc-2011Q2-base:1.6 pkgsrc-2011Q1:1.6.0.18 pkgsrc-2011Q1-base:1.6 pkgsrc-2010Q4:1.6.0.16 pkgsrc-2010Q4-base:1.6 pkgsrc-2010Q3:1.6.0.14 pkgsrc-2010Q3-base:1.6 pkgsrc-2010Q2:1.6.0.12 pkgsrc-2010Q2-base:1.6 pkgsrc-2010Q1:1.6.0.10 pkgsrc-2010Q1-base:1.6 pkgsrc-2009Q4:1.6.0.8 pkgsrc-2009Q4-base:1.6 pkgsrc-2009Q3:1.6.0.6 pkgsrc-2009Q3-base:1.6 pkgsrc-2009Q2:1.6.0.4 pkgsrc-2009Q2-base:1.6 pkgsrc-2009Q1:1.6.0.2 pkgsrc-2009Q1-base:1.6 pkgsrc-2008Q4:1.5.0.26 pkgsrc-2008Q4-base:1.5 pkgsrc-2008Q3:1.5.0.24 pkgsrc-2008Q3-base:1.5 cube-native-xorg:1.5.0.22 cube-native-xorg-base:1.5 pkgsrc-2008Q2:1.5.0.20 pkgsrc-2008Q2-base:1.5 cwrapper:1.5.0.18 pkgsrc-2008Q1:1.5.0.16 pkgsrc-2008Q1-base:1.5 pkgsrc-2007Q4:1.5.0.14 pkgsrc-2007Q4-base:1.5 pkgsrc-2007Q3:1.5.0.12 pkgsrc-2007Q3-base:1.5 pkgsrc-2007Q2:1.5.0.10 pkgsrc-2007Q2-base:1.5 pkgsrc-2007Q1:1.5.0.8 pkgsrc-2007Q1-base:1.5 pkgsrc-2006Q4:1.5.0.6 pkgsrc-2006Q4-base:1.5 pkgsrc-2006Q3:1.5.0.4 pkgsrc-2006Q3-base:1.5 pkgsrc-2006Q2:1.5.0.2 pkgsrc-2006Q2-base:1.5 pkgsrc-2006Q1:1.4.0.4 pkgsrc-2006Q1-base:1.4 pkgsrc-2005Q4:1.4.0.2 pkgsrc-2005Q4-base:1.4 pkgsrc-2005Q3:1.3.0.2 pkgsrc-2005Q3-base:1.3 pkgsrc-2005Q2:1.1.0.4 pkgsrc-2005Q2-base:1.1 pkgsrc-2005Q1:1.1.0.2 pkgsrc-2005Q1-base:1.1; locks; strict; comment @# @; 1.8 date 2021.08.23.09.58.58; author adam; state dead; branches; next 1.7; commitid 7pL4ZryIb0xf156D; 1.7 date 2012.03.13.19.57.11; author adam; state Exp; branches; next 1.6; 1.6 date 2009.03.07.22.26.23; author manu; state Exp; branches; next 1.5; 1.5 date 2006.05.15.19.01.23; author ghen; state Exp; branches; next 1.4; 1.4 date 2005.10.26.15.08.13; author jlam; state Exp; branches 1.4.4.1; next 1.3; 1.3 date 2005.08.03.21.01.40; author jlam; state Exp; branches; next 1.2; 1.2 date 2005.08.01.09.49.37; author jlam; state Exp; branches; next 1.1; 1.1 date 2005.01.24.12.46.25; author seb; state Exp; branches; next ; 1.4.4.1 date 2006.05.22.12.58.24; author salo; state Exp; branches; next ; desc @@ 1.8 log @openldap: updated to 2.5.7 OpenLDAP 2.5.7 Release (2021/08/18) Fixed lloadd client state tracking Fixed slapd bconfig to canonicalize structuralObjectclass Fixed slapd-ldif duplicate controls response Fixed slapd-mdb multival crash when attribute is missing an equality matchingrule Fixed slapd-mdb compatibility with OpenLDAP 2.4 MDB databases Fixed slapd-mdb idlexp maximum size handling Fixed slapd-monitor number of ops executing with asynchronous backends Fixed slapd-sql to add support for ppolicy attributes Fixed slapd-sql to close transactions after bind and search Fixed slapo-accesslog to make reqMod optional Fixed slapo-ppolicy logging when pwdChangedTime attribute is not present Documentation slapd-mdb(5) note max idlexp size is 30, not 31 slapo-accesslog(5) note that reqMod is optional Add ldapvc(1) man page Add guide section on load balancer Updated guide to document multiprovider as replacement for mirrormode Updated guide to clarify slapd-mdb upgrade requirements Updated guide to document removal of deprecated options from client tools OpenLDAP 2.5.6 Release (2021/07/27) Fixed libldap buffer overflow Fixed libldap missing mutex unlock on connection alloc failure Fixed lloadd cn=config olcBkLloadClientMaxPending setting Fixed slapd multiple config defaults Fixed slapd ipv6 addresses to work with tcp wrappers Fixed slapo-syncprov delete of nonexistent sessionlog Build Fixed library symbol versioning on Solaris Fixed compile warning in libldap/tpool.c Fixed compile warning in libldap/tls_o.c Contrib Fixed ppm module for sysconfdir Documentation Updated guide to document multival, idlexp, and maxentrysize OpenLDAP 2.5.5 Release (2021/06/03) Added libldap LDAP_OPT_TCP_USER_TIMEOUT support Added lloadd tcp-user-timeout support Added slapd-asyncmeta tcp-user-timeout support Added slapd-ldap tcp-user-timeout support Added slapd-meta tcp-user-timeout support Fixed incorrect control OIDs for AuthZ Identity Fixed libldap typo in util-int.c Fixed libldap double free of LDAP_OPT_DEFBASE Fixed libldap better TLS1.3 cipher suite handling Fixed lloadd multiple issues Fixed slapd slap_op_time to avoid duplicates across restarts Fixed slapd typo in daemon.c Fixed slapd slapi compilation Fixed slapd to handle empty DN in extended filters Fixed slapd syncrepl searches with empty base Fixed slapd syncrepl refresh on startup Fixed slapd abort due to typo Fixed slapd-asyncmeta quarantine handling Fixed slapd-asyncmeta to have a default operations timeout Fixed slapd-ldap quarantine handling Fixed slapd-mdb deletion of context entry Fixed slapd-mdb off-by-one affecting search scope Fixed slapd-meta quarantine handling Fixed slapo-accesslog to record reqNewDN for modRDN ops Fixed slapo-pcache locking during expiration Build Fixed slappw-argon2 module installation Contrib Update ldapc++/ldaptcl to use configure.ac Documentation ldap_first_attribute(3) - Document ldap_get_attribute_ber ldap_modify(3) - Delete non-existent mod_next parameter OpenLDAP 2.5.4 Release (2021/04/29) Initial release for "general use". @ text @$NetBSD: patch-am,v 1.7 2012/03/13 19:57:11 adam Exp $ --- libraries/libldap/cyrus.c.orig 2012-02-29 17:37:09.000000000 +0000 +++ libraries/libldap/cyrus.c @@@@ -680,7 +680,7 @@@@ ldap_int_sasl_external( LDAP *ld, LDAPConn *conn, const char * authid, - ber_len_t ssf ) + ber_uint_t ssf ) { int sc; sasl_conn_t *ctx; @@@@ -824,6 +824,7 @@@@ int ldap_pvt_sasl_secprops( char **props; unsigned sflags = 0; int got_sflags = 0; + int tmp_ssf; sasl_ssf_t max_ssf = 0; int got_max_ssf = 0; sasl_ssf_t min_ssf = 0; @@@@ -854,9 +855,9 @@@@ int ldap_pvt_sasl_secprops( if ( next == &props[i][sprops[j].key.bv_len] || next[0] != '\0' ) continue; switch( sprops[j].ival ) { case GOT_MINSSF: - min_ssf = v; got_min_ssf++; break; + min_ssf = (v >= 0 ? (sasl_ssf_t)v : 0); got_min_ssf++; break; case GOT_MAXSSF: - max_ssf = v; got_max_ssf++; break; + max_ssf = (v >= 0 ? (sasl_ssf_t)v : 0); got_max_ssf++; break; case GOT_MAXBUF: maxbufsize = v; got_maxbufsize++; break; } @@@@ -960,7 +961,7 @@@@ ldap_int_sasl_get_option( LDAP *ld, int return -1; } - *(ber_len_t *)arg = *ssf; + *(sasl_ssf_t *)arg = *ssf; } break; case LDAP_OPT_X_SASL_SSF_EXTERNAL: @@@@ -968,13 +969,13 @@@@ ldap_int_sasl_get_option( LDAP *ld, int return -1; case LDAP_OPT_X_SASL_SSF_MIN: - *(ber_len_t *)arg = ld->ld_options.ldo_sasl_secprops.min_ssf; + *(sasl_ssf_t *)arg = ld->ld_options.ldo_sasl_secprops.min_ssf; break; case LDAP_OPT_X_SASL_SSF_MAX: - *(ber_len_t *)arg = ld->ld_options.ldo_sasl_secprops.max_ssf; + *(sasl_ssf_t *)arg = ld->ld_options.ldo_sasl_secprops.max_ssf; break; case LDAP_OPT_X_SASL_MAXBUFSIZE: - *(ber_len_t *)arg = ld->ld_options.ldo_sasl_secprops.maxbufsize; + *(sasl_ssf_t *)arg = ld->ld_options.ldo_sasl_secprops.maxbufsize; break; case LDAP_OPT_X_SASL_NOCANON: *(int *)arg = (int) LDAP_BOOL_GET(&ld->ld_options, LDAP_BOOL_SASL_NOCANON ); @@@@ -1074,7 +1075,7 @@@@ ldap_int_sasl_set_option( LDAP *ld, int #else memset(&extprops, 0L, sizeof(extprops)); - extprops.ssf = * (ber_len_t *) arg; + extprops.ssf = * (sasl_ssf_t *) arg; sc = sasl_setprop( ctx, SASL_SSF_EXTERNAL, (void *) &extprops ); @@@@ -1086,13 +1087,13 @@@@ ldap_int_sasl_set_option( LDAP *ld, int } break; case LDAP_OPT_X_SASL_SSF_MIN: - ld->ld_options.ldo_sasl_secprops.min_ssf = *(ber_len_t *)arg; + ld->ld_options.ldo_sasl_secprops.min_ssf = *(sasl_ssf_t *)arg; break; case LDAP_OPT_X_SASL_SSF_MAX: - ld->ld_options.ldo_sasl_secprops.max_ssf = *(ber_len_t *)arg; + ld->ld_options.ldo_sasl_secprops.max_ssf = *(sasl_ssf_t *)arg; break; case LDAP_OPT_X_SASL_MAXBUFSIZE: - ld->ld_options.ldo_sasl_secprops.maxbufsize = *(ber_len_t *)arg; + ld->ld_options.ldo_sasl_secprops.maxbufsize = *(sasl_ssf_t *)arg; break; case LDAP_OPT_X_SASL_NOCANON: if ( arg == LDAP_OPT_OFF ) { @@@@ -1220,7 +1221,7 @@@@ ldap_int_sasl_external( LDAP *ld, LDAPConn *conn, const char * authid, - ber_len_t ssf ) + ber_uint_t ssf ) { return LDAP_SUCCESS; } #endif /* HAVE_CYRUS_SASL */ @ 1.7 log @Changes 2.4.30: Fixed libldap socket polling for writes Fixed liblutil string modifications Fixed slapd crash when attrsOnly is true Fixed slapd syncrepl delete handling Fixed slapd-mdb slapadd with -q Fixed slapd-mdb slapadd with -w Fixed slapd-mdb slapindex with -q and -t Fixed slapo-pcache time-to-refesh handling Fixed slapo-syncprov loop detection Build Environment Fixed POSIX make support Fixed slapd-mdb build on POSIX Documentation Added option "-o" to ldap*(1) pages Fixed ldap*(1) page cleanup Fixed ldap_modify(3) prototypes @ text @d1 1 a1 1 $NetBSD$ @ 1.6 log @Update to OpenLDAP 2.4.15 From OpenLDAP 2.4 Change Log OpenLDAP 2.4.15 Release (2009/02/24) Fixed libldap alias dereferencing in C API again (ITS#5916) Fixed libldap GnuTLS compilation (ITS#5955) Fixed slapd bconfig conversion again (ITS#5346) Fixed slapd behavior with superior objectClasses again (ITS#5517) Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968) Fixed slapd corrupt contextCSN (ITS#5947) Fixed slapd syncrepl order to match on add/delete (ITS#5954) Fixed slapd adding rdn with other values (ITS#5965) Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956) Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959) Fixed slapd-relay control initialization (ITS#5724) Fixed slapo-pcache caching invalid entries (ITS#5927) Fixed slapo-syncprov csn updates (ITS#5969) Fixed slapo-rwm objectClass preservation (ITS#5760) Fixed slapo-rwm rwm_bva_rewrite handling (ITS#5960) Build Environment Fixed tester library linking for windows (ITS#5740) OpenLDAP 2.4.14 Release (2009/02/14) Added libldap option to disable SASL host canonicalization (ITS#5812) Added libldap TLS_PROTOCOL_MIN (ITS#5655) Added libldap GnuTLS support for TLS_CIPHER_SUITE (ITS#5887) Added libldap GnuTLS setting random file (ITS#5462) Added libldap alias dereferencing in C API (ITS#5916) Fixed libldap chasing multiple referrals (ITS#5853) Fixed libldap deref handling (ITS#5768) Fixed libldap NULL pointer deref (ITS#5934) Fixed libldap peer cert memory leak (ITS#5849) Fixed libldap interaction with GnuTLS CN IP-based matches (ITS#5789) Fixed libldap intermediate response behavior (ITS#5896) Fixed libldap IPv6 address handling (ITS#5937) Fixed libldap_r deref building (ITS#5768) Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841) Added slapd syncrepl default retry setting (ITS#5825) Added slapd val.regex expansion (ITS#5804) Added slapd TLS_PROTOCOL_MIN (ITS#5655) Added slapd slapi_pw_find (ITS#2615,ITS#4359) Added slapd compatibility with MSAD ranged values (ITS#5927) Fixed slapd bconfig to return error codes (ITS#5867) Fixed slapd bconfig encoding incorrectly (ITS#5897) Fixed slapd bconfig dangling pointers (ITS#5924) Fixed slapd behavior with superior objectClasses (ITS#5517) Fixed slapd connection assert (ITS#5835) Fixed slapd epoll handling (ITS#5886) Fixed slapd frontend/backend options handling (ITS#5857) Fixed slapd glue with MMR (ITS#5925) Fixed slapd logging on Windows (ITS#5392) Fixed slapd listener comparison (ITS#5613) Fixed slapd manageDSAit with glue entries (ITS#5921) Fixed slapd relax behavior with structuralObjectClass (ITS#5792) Fixed slapd syncrepl rename handling (ITS#5809) Fixed slapd syncrepl MMR when adding new server (ITS#5850) Fixed slapd syncrepl MMR with deleted entries (ITS#5843) Fixed slapd syncrepl replication with glued DB (ITS#5866) Fixed slapd syncrepl replication with moddn (ITS#5901) Fixed slapd syncrepl replication with referrals (ITS#5881) Fixed slapd syncrepl replication with config tree (ITS#5935) Fixed slapd wake_sds close on Windows (ITS#5855) Fixed slapd-bdb/hdb dncachesize handling (ITS#5860) Fixed slapd-bdb/hdb RFC4528 control support (ITS#5861) Fixed slapd-bdb/hdb trickle task usage (ITS#5864) Fixed slapd-hdb idlcache with empty suffix (ITS#5859) Fixed slapd-ldap idassert-bind validity checking (ITS#5863) Fixed slapd-ldap/meta RFC4525 increment support (ITS#5912) Fixed slapd-ldap/meta search dereferencing (ITS#5916) Fixed slapd-ldap/meta with intermediate response (ITS#5931) Fixed slapd-ldif numerous bugs (ITS#5408) Fixed slapd-ldif rename on same DN (ITS#5319) Fixed slapd-ldif deadlock (ITS#5329) Fixed slapd-meta double response sending (ITS#5854) Fixed slapd-meta alias deref for retry (ITS#5889) Fixed slapd-relay recursion detection (ITS#5943) Fixed slapd-sock descriptor leak (ITS#5939) Fixed slapo-accesslog on glued dbs (ITS#5907) Fixed slapo-dynlist handling of flags (ITS#5898) Fixed slapo-memberof multiple instantiation (ITS#5903) Fixed slapo-pcache filter sorting (ITS#5756) Fixed slapo-ppolicy to not be global (ITS#5858) Fixed slapo-rwm double free (ITS#5923) Fixed slapo-rwm with back-config (ITS#5906) Fixed slapo-rwm olcRwmRewrite modification (ITS#5940) Added slapo-rwm newRDN rewriting (ITS#5834) Added slapadd progress meter (ITS#5922) Updated contrib/addpartial module (ITS#5764) Added contrib/cloak module (ITS#5872) Added contrib/smbk5pwd gcrypt support (ITS#5410) Added contrib/passwd sha2 support (ITS#5660) Build Environment Fixed test006 appending to log file (ITS#5910) Fixed test036,test039 behavior on error (ITS#5893) Fixed test048 sed pathname substitution (ITS#5910) Fixed test049,test050 to work on windows (ITS#5842) Updated test017,test018,test019 to cover more cases (ITS#5883) Removed patch for BerkeleyDB 4.7.25 (Official patch available) Fixed MSVC 9.0 build issues (ITS#5888) Fixed gss detection on Solaris (ITS#5846) Fixed uuid_create/uuid_unparse_lower detection (ITS#5905) Fixed liblutil tavl_delete to macroize constants (ITS#5909) Documentation admin24 added limits chapter (ITS#5818) admin24 access-control clarify global ACLS (ITS#5851,ITS#5852) admin24 search on nested naming contexts (ITS#5788) admin24 consistent loglevel documentation (ITS#5904) slapd-bdb/hdb expansion on dncachesize behavior (ITS#5721) slapo-constraint(5) example fix (ITS#5895) slap*(8) man pages should mention slapd-config (ITS#5828) slapacl(8c) fix wording (ITS#5918) slapd(8) document sid (ITS#5873) slapd.access(5) clarify global ACLS (ITS#5851,ITS#5852) slapadd/cat/index(8) note -n 0 for slapd-config (ITS#5891) Added SEE ALSO slapd-config(5) to relevant man pages (ITS#5914) @ text @d2 4 a5 4 --- libraries/libldap/cyrus.c.orig 2009-02-08 06:06:04.000000000 +0000 +++ libraries/libldap/cyrus.c 2009-03-07 21:21:47.000000000 +0000 @@@@ -712,9 +712,9 @@@@ ldap_int_sasl_external( d14 1 a14 3 #if SASL_VERSION_MAJOR < 2 @@@@ -856,8 +856,9 @@@@ unsigned i, j, l; d22 1 a22 3 int got_min_ssf = 0; @@@@ -886,11 +887,11 @@@@ v = strtoul( &props[i][sprops[j].key.bv_len], &next, 10 ); d34 1 a34 3 } else { @@@@ -992,23 +993,23 @@@@ if ( sc != SASL_OK ) { d43 1 a43 1 /* this option is write only */ d60 1 a60 3 break; @@@@ -1061,9 +1062,9 @@@@ sc = sasl_setprop( ctx, SASL_SSF_EXTERNAL, &sasl_ssf); d69 1 a69 3 #endif @@@@ -1073,15 +1074,15 @@@@ } d86 1 a86 3 LDAP_BOOL_CLR(&ld->ld_options, LDAP_BOOL_SASL_NOCANON ); @@@@ -1185,8 +1186,8 @@@@ ldap_int_sasl_external( @ 1.5 log @Update OpenLDAP from 2.3.11 to 2.3.21. Ok with joerg. Here are all the changes: OpenLDAP 2.3.21 Release Fixed libldap referral chasing issue (ITS#4448) Fixed libldap invalid free bug (ITS#4436) Fixed libldap mutex leak (ITS#4441) Fixed libldap_r thr_yield(2) return handling (ITS#4469) Fixed slapd syncprov/glue interaction issue (ITS#4323, ITS#4417) Fixed slapd operational attrs in presence of global overlays (ITS#4431) Fixed slapd "threads" config value checking (ITS#4433) Fixed slapd connection index bound check (ITS#4449) Fixed slapd connection cleanup (ITS#4465) Fixed slapd slap_realloc misuse (ITS#4477) Fixed slapd size limit check when pagesize=1 (ITS#4479) Fixed slapd-bdb/hdb cache issue (ITS#4439) Fixed slapd-ldbm crash on modify bug (ITS#4464) Fixed slapd-ldap potential bind deadlock (ITS#4409) Fixed slapd-ldap/meta conn expiration concurrency (ITS#4429) Fixed slapd-ldap failed bind connection trashing (ITS#4428) Fixed slapd-ldap/meta chase-referrals disabling (ITS#4447) Fixed slapd-ldap controls forwarding (ITS#4457) Fixed slapd-ldap pretty DN in proxied requests (ITS#4456) Fixed slapd-ldbm crash on modify bug (ITS#4464) Fixed slapd-meta write error mapping (ITS#4419) Removed lint Build Environment Added slapo-auditlog build support (ITS#4372) Fixed multi-precision sizeof detection (ITS#4416) Fixed liblunicode build (ITS#4435) Updated libtool to version 1.5.22 (ITS#4471) Updated shtool to version 2.0.5 OpenLDAP 2.3.20 Release Added libldap SASL workaround for broken LDAP servers (ITS#4391) Fixed libldap/slapd valuesReturnFilter OID (ITS#4404) Fixed slapd config_generic_wrapper missing parameter bug (ITS#4376) Fixed slapd extensible filter value normalization bug (ITS#4380) Fixed slapd context CSN not updating issue (ITS#4384) Fixed slapd non-read/write epoll event handling (ITS#4395) Fixed slapd syncrepl de-normalize UUID issue Fixed slapd syncrepl dynamic reconfig issue (ITS#4401) Added slapd syncrepl log messages (ITS#4369) Added slapd permissive modify/increment support Added slapd dynamically registered debug level support Fixed slapd connectionless LDAP support Fixed slapd cn=config error on create failure issue (ITS#4407) Fixed slapd-bdb/hdb wake listener on runqueue submit (ITS#4385) Fixed slapd-ldap/meta resources leaks on multiple binds (ITS#4387) Fixed slapd-ldap/meta assert on connection shutdown (ITS#4390) Added slapd-meta subtree-exclude feature Fixed slapo-syncprov update latency issue (ITS#4385) Fixed slapo-auditlog crash (ITS#4394) Fixed slapo-accesslog unbind crash (ITS#4386) Fixed slurpd reject error formating (ITS#4382) Fixed ldappasswd unbind issue (ITS#4403) Fixed slapo-pcache assert on attrsonly search (ITS#4406) Added slapo-pcache max_queries enhancement (ITS#4225) Added slapo-pcache negative caching enhancement Build Environment Fixed liblunicode cross compiling problem (ITS#4363) Updated detection for AIX (ITS#4312) Updated multi-precision library detection Documentation Updated misc. manual pages OpenLDAP 2.3.19 Release Fixed libldap disable DH key exchange with DH params (ITS#4354) Fixed libldap_r thread pool destroy hang (ITS#4349,ITS#4368) Fixed slapd slap_daemon destroy issue (ITS#4370) Fixed slapd-hdb livelock issue (ITS#4360) Fixed slapd-bdb/hdb auto-recovery issue (ITS#4361,ITS#4373) Fixed slapd-bdb/hdb BDB 4.4 compatibility issues (ITS#4362) Fixed slapo-ppolicy modify issue (ITS#4355) Fixed slapo-syncprov/pcache filter dup issue (ITS#4364) Fixed slapo-syncprov playlog nentries reset issue (ITS#4365) Build environment Fixed slaptools when --disable-debug (ITS#4351) Fixed slapd(8) solaris select(2) issue (ITS#4357) OpenLDAP 2.3.18 Release Fixed slapd syncrepl variable used before set bug (ITS#4331) Updated slapd-meta retry capabilities (ITS#4328) Fixed slapd-bdb slapcat autorecover bug (ITS#4324) Fixed slapo-chain search limits (ITS#4336) Fixed slapo-pcache attrsets issues (ITS#4316) Fixed slapo-translucent connection destroy (ITS#4334) Fixed slapd-config handling of attribute options (ITS#4339) Fixed slapd-ldap idassert resource leak (ITS#4326) Fixed slapd-meta nretries issue (ITS#4059) Fixed slapd wake_listener loses wakes (ITS#4343) Fixed slapd connection manager issue (ITS#4338) Fixed slapd handling of old style configuration directives (ITS#4341) Removed slapd-bdb/hdb extraneous yields (ITS#3950) Build Environment Removed problematic Linux sched_yield(2) workarounds (ITS#3950) Documentation Updated release documents Updated misc. manual pages OpenLDAP 2.3.17 Release Fixed slapd anonymous proxy authorization issue (ITS#4320) Fixed slapd-ldap/meta session reuse issue (ITS#4315) Fixed slapd-ldap idassert anon-to-anon issue (ITS#4321) Fixed slapd-monitor thread issue (ITS#4318) Build environment Updated Linux sched_yield(2) workaround to use nanosleep(2) (ITS#3950) Fixed configure report-to URL OpenLDAP 2.3.16 Release Fixed slapd-bdb reindexing via cn=config not noticed issue (ITS#4260) Fixed slapd-monitor connection search crash (ITS#4300) Flapd slapd cn=config bad ACL syntax modify crash (ITS#4306) Fixed slapd ACL/suffix configuration issue (ITS#4307) Fixed slapd-bdb/hdb cache issue (ITS#4308) Fixed slapd-bdb/hdb/ldbm suffix add with default referral issue (ITS#4310) Fixed slapd-ldbm compare cache release issue (ITS#4313) Fixed slapd syncrepl time/size limit parsing Fixed slapi slapi_op_bind_callback fix (ITS#4311) Fixed slapi pluginlog fix (ITS#4291) Fixed ldapsearch response control handling issue Build environment Replace sched_yield(2) on Linux with select(2) (ITS#3950) Documentation Added slapd-bdb(5) cachefree description Updated misc. manual pages OpenLDAP 2.3.15 Release Fixed slapd strerror logging bug (ITS#4292) Fixed slapd ACL add/delete fraction issue (ITS#4295) Fixed slapd ACL users selfwrite issue (ITS#4299) Fixed slapd attrs/objectclass replog issues (ITS#4298) Fixed slapd-ldap password modify exop password return (ITS#4294) Build environment Disable test030-relay when threads are unavailable (ITS#4297) OpenLDAP 2.3.14 Release Fixed slapd assertion control restrictions Fixed slapd sc_prev update after free bug (ITS#4237) Fixed slapd pid file creation (ITS#4241,4251) Fixed slapd DEBUG dependency (ITS#4245) Added slapd warning for excessive threads number (ITS#4249) Fixed slapd passwd incomplete mod structure issue (ITS#4278) Fixed slapd ACL exact attrval clause normalization (ITS#4255) Fixed slapd modify/delete by ordered index issue Fixed slapd strerror NULL bug (ITS#4285) Fixed slapd-glue issues (ITS#4084,4133) Fixed slapd-hdb idl Delete bug (ITS#4250) Fixed slapd-hdb cache deadlock (ITS#4254) Fixed slapd-bdb/hdb alock_close bug (ITS#4259) Fixed slapd-bdb dn2id IDL cache bug (ITS#4263) Fixed slapd-bdb/hdb mode argument parsing (ITS#4257) Fixed slapd-bdb/hdb cn=config reindexing (ITS#4260) Fixed slapd-bdb/hdb cn=config olcDbIndex modify/replace (ITS#4262) Fixed slapd-bdb/hdb lockup issue (ITS#4184) Fixed slapd-ldap anonymous identity assertion (ITS#4272) Added slapd-ldap/meta idle-timeout support (ITS#4115) Fixed slapd-meta bind-timeout handling Fixed slapd-sql plug leak Fixed slapo-dynlist/dyngroup nonexistant object return code (ITS#4224) Updated slapo-dynlist (ITS#3756,3781) Fixed slapo-rwm static DN free bug (ITS#4248) Fixed slapo-syncprov unpublished control (ITS#4238) Fixed slapo-syncprov message id issue Fixed slapo-unique extraneous searches (ITS#4267) Build environment Fixed thread dependency of test028 (ITS#4141) Updated test026-dn Updated test033-glue-syncrepl (ITS#4264) Documentation Updated slapd.conf(5) and Admin Guide (ITS#4146,4266) Updated slapo-dynlist(5) (ITS#4197) Updated slapo-pcache(5) (ITS#4232) Updated slapindex(8) (ITS#4242) OpenLDAP 2.3.13 Release Fixed libldap/liblutil MSG_ACCRIGHTSLEN bug (ITS#4206) Fixed libldap ldap_bv2escaped_filter_value issue (ITS#4212) Fixed liblutil URL value-specs issue (ITS#4221) Fixed slapd sizelimit disclose issue (ITS#4213) Fixed slapd gentlehup write restrict issue (ITS#3717) Fixed slapd gentlehup abnormal issue (ITS#4217) Fixed slapd delta-sync subtree scope issue (ITS#4227) Fixed slapd cn=config OID/name pollution issue (ITS#4185) Fixed slapd cn=config rootdn issue (ITS#4192) Fixed slapd cn=config slaptest -F without -f issue (ITS#4194) Fixed slapd cn=config ACL issue (ITS#4218) Fixed slapd-bdb negative results IDL cache issue (ITS#4223) Fixed slapd-bdb cursor close issue (ITS#4226) Fixed slapd-hdb slapadd -q issue (ITS#4210) Fixed slapd-hdb missing results issue (ITS#4186) Fixed slapd-ldap potential double free issue (ITS#4189) Fixed slapd-meta matched DN issue (ITS#4195) Fixed slapd-meta DN cache issue (ITS#4196) Fixed slapd-monitor shadow issue (ITS#4214) Fixed slapo-accesslog delta-syncrepl issue (ITS#4198) Fixed slapo-accesslog cleanup issue (ITS#4209) Fixed slapo-chain resource leak issue (ITS#4140) Fixed slapo-chain identity assertion issue (ITS#4256) Fixed slapo-pcache attrset check issue (ITS#4199) Fixed slapd-bdb readonly dirty alock issue (ITS#4201) Fixed slapd-pcache non-requested attributes issues (ITS#4203,4204) Fixed slaptest -F -f success with unsupported issue (ITS#4220) Build environment Improved Berkeley DB detection (ITS#3809) Updated DB_CONFIG example (ITS#4229) Documentation Updated ldif(5) to include change record description OpenLDAP 2.3.12 Release Fixed libldap ldapi:// authdn construction Added libldap ldap_bv2escaped_filter_value (ITS#2535) Added libldap/slapd TLS DSA certificate support (ITS#4017) Fixed libldap SASL bind issue (ITS#4158) Fixed ldapmodrdn empty line handling (ITS#4101) Fixed client tools additional info printing (ITS#4147) Updated slapd ldaps:// not configured fix (ITS#4082,4083) Fixed slapd connection crashes (ITS#4108) Fixed slapd illegal S option bug (ITS#4119) Fixed slapd cn=monitor log level mod issue (ITS#4091) Fixed slapd cn=config bad access issue (ITS#4111) Fixed slapd cn=config access modify issue (ITS#4127) Fixed slapd cn=config init issue (ITS#4128) Fixed slapd non-reentrant libwrap issue (ITS#4099) Fixed slapd thread v. tools_threads settings Fixed slapd spurious defer message (ITS#3850) Fixed slapd attribute SYNTAX OIDM issue (ITS#4116) Fixed slapd modify empty sequence bug (ITS#4183) Fixed slapd-bdb uninitialized condition in tool mode (ITS#4143) Fixed slapd-bdb empty suffix and syncprov issue (ITS#4171) Fixed slapd-hdb syncrepl deadlock issue (ITS#4088) Added slapd-ldap write op timeout support (ITS#4157) Fixed slapd-ldap/slapo-chain matched dn handling (ITS#4176) Fixed slapd-meta invalid DN attrs normalize/pretty issue (ITS#4107) Fixed slapd-meta rootdn erroneous success issue (ITS#4122) Fixed slapd-meta proxying bind result issue (ITS#4129) Fixed slapd-meta/slapo-rwm rwm-mapping issue (ITS#4086) Fixed slapd-meta per-target retry (ITS#4150) Fixed slapd-meta size/time limit handling (ITS#4145) Fixed slapd-sql size limit count (ITS#4181) Fixed slapo-ppolicy pwdFailureTime after bind success issue (ITS#4134) Fixed slapo-ppolicy add passord_hash quality config dependency Fixed slapo-syncprov LDAP response types (ITS#4183) Added slapd delta syncrepl support Added slapadd thread support Updated slapcat subordinate database handling (ITS#4089) Added slapd/slaptest pid/arg file consistency check (ITS#4074) Updated slaptools default debug level to "none" (ITS#4044) Fixed slurpd backwards compat issue (ITS#4151) Added slurpd pid/arg file consistency check (ITS#4152) Updated contrib smbk5pwd module Removed lint Build environment Fixed libldap HSTRERROR issue (ITS#4124) Fixed slapd AIX IFMT issue (ITS#4123) Added slapd-bind test program Added inet_ntoa_b support for VxWorks (ITS#3440) Updated test036 (ITS#4095) Fixed test036 cmp issue (ITS#4142) Dropped SSLeay support Documentation slapd.conf(5) defaultSearchBase issue (ITS#4162) slap tool man pages wll typo (ITS#4169) @ text @d2 4 a5 4 --- libraries/libldap/cyrus.c.orig 2006-05-13 11:47:50.000000000 +0200 +++ libraries/libldap/cyrus.c @@@@ -884,7 +884,7 @@@@ ldap_int_sasl_external( d14 3 a16 1 @@@@ -1026,6 +1026,7 @@@@ int ldap_pvt_sasl_secprops( d24 3 a26 1 @@@@ -1056,9 +1057,9 @@@@ int ldap_pvt_sasl_secprops( d38 3 a40 1 @@@@ -1155,7 +1156,7 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d49 1 a49 1 @@@@ -1163,13 +1164,13 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d62 1 a62 1 + *(ber_uint_t *)arg = ld->ld_options.ldo_sasl_secprops.maxbufsize; d64 5 a68 3 case LDAP_OPT_X_SASL_SECPROPS: @@@@ -1215,7 +1216,7 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d77 3 a79 1 @@@@ -1227,13 +1228,13 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d92 1 a92 1 + ld->ld_options.ldo_sasl_secprops.maxbufsize = *(ber_uint_t *)arg; d94 5 a98 3 case LDAP_OPT_X_SASL_SECPROPS: { @@@@ -1332,7 +1333,7 @@@@ ldap_int_sasl_external( @ 1.4 log @Update databases/openldap to 2.3.11, which is the first "stable" release in the 2.3.x series. This is a major update over version 2.2.x, and changes include: * Slapd(8) enhancements - Updated slapd "overlay" interface, and several example (and mostly experimental) overlays. - Updated LDAP "sync" Engine with replication support, provider now an "overlay" - Numerous access control enhancements, including experimental "don't disclose on error" capability - Configuration backend * LDAPv3 extensions, including: - LDAP Password Policy - LDAP Component Matching (requires OpenLDAP snacc) - LDAP Modify Increment @ text @d1 1 a1 1 $NetBSD: patch-am,v 1.3 2005/08/03 21:01:40 jlam Exp $ d3 1 a3 1 --- libraries/libldap/cyrus.c.orig 2005-10-05 13:42:19.000000000 -0400 d5 1 a5 1 @@@@ -835,7 +835,7 @@@@ ldap_int_sasl_external( d14 2 a15 2 @@@@ -977,6 +977,7 @@@@ int ldap_pvt_sasl_secprops( char **props = ldap_str2charray( in, "," ); d22 2 a23 2 @@@@ -1002,9 +1003,9 @@@@ int ldap_pvt_sasl_secprops( if ( next == NULL || next[ 0 ] != '\0' ) continue; d34 1 a34 1 @@@@ -1100,7 +1101,7 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d43 1 a43 1 @@@@ -1108,13 +1109,13 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d60 1 a60 1 @@@@ -1160,7 +1161,7 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d69 1 a69 1 @@@@ -1172,13 +1173,13 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d86 1 a86 1 @@@@ -1277,7 +1278,7 @@@@ ldap_int_sasl_external( @ 1.4.4.1 log @Pullup ticket 1632 - requested by ghen security update for openldap Revisions pulled up: - pkgsrc/databases/openldap/Makefile 1.111, 1.112, 1.113 - pkgsrc/databases/openldap/PLIST 1.26 - pkgsrc/databases/openldap/distinfo 1.45, 1.46, 1.47 - pkgsrc/databases/openldap/patches/patch-ac 1.11 - pkgsrc/databases/openldap/patches/patch-ad 1.7 - pkgsrc/databases/openldap/patches/patch-ah 1.5 - pkgsrc/databases/openldap/patches/patch-am 1.5 Module Name: pkgsrc Committed By: grant Date: Fri Apr 7 00:35:02 UTC 2006 Modified Files: pkgsrc/databases/openldap: Makefile Log Message: fix avl_* function prototype conflicts on Solaris, so this now builds on Solaris. --- Module Name: pkgsrc Committed By: ghen Date: Mon May 15 19:01:23 UTC 2006 Modified Files: pkgsrc/databases/openldap: Makefile PLIST distinfo pkgsrc/databases/openldap/patches: patch-ac patch-ah patch-am Log Message: Update OpenLDAP from 2.3.11 to 2.3.21. Ok with joerg. Here are all the changes: OpenLDAP 2.3.21 Release Fixed libldap referral chasing issue (ITS#4448) Fixed libldap invalid free bug (ITS#4436) Fixed libldap mutex leak (ITS#4441) Fixed libldap_r thr_yield(2) return handling (ITS#4469) Fixed slapd syncprov/glue interaction issue (ITS#4323, ITS#4417) Fixed slapd operational attrs in presence of global overlays (ITS#4431) Fixed slapd "threads" config value checking (ITS#4433) Fixed slapd connection index bound check (ITS#4449) Fixed slapd connection cleanup (ITS#4465) Fixed slapd slap_realloc misuse (ITS#4477) Fixed slapd size limit check when pagesize=3D1 (ITS#4479) Fixed slapd-bdb/hdb cache issue (ITS#4439) Fixed slapd-ldbm crash on modify bug (ITS#4464) Fixed slapd-ldap potential bind deadlock (ITS#4409) Fixed slapd-ldap/meta conn expiration concurrency (ITS#4429) Fixed slapd-ldap failed bind connection trashing (ITS#4428) Fixed slapd-ldap/meta chase-referrals disabling (ITS#4447) Fixed slapd-ldap controls forwarding (ITS#4457) Fixed slapd-ldap pretty DN in proxied requests (ITS#4456) Fixed slapd-ldbm crash on modify bug (ITS#4464) Fixed slapd-meta write error mapping (ITS#4419) Removed lint Build Environment Added slapo-auditlog build support (ITS#4372) Fixed multi-precision sizeof detection (ITS#4416) Fixed liblunicode build (ITS#4435) Updated libtool to version 1.5.22 (ITS#4471) Updated shtool to version 2.0.5 OpenLDAP 2.3.20 Release Added libldap SASL workaround for broken LDAP servers (ITS#4391) Fixed libldap/slapd valuesReturnFilter OID (ITS#4404) Fixed slapd config_generic_wrapper missing parameter bug (ITS#4376) Fixed slapd extensible filter value normalization bug (ITS#4380) Fixed slapd context CSN not updating issue (ITS#4384) Fixed slapd non-read/write epoll event handling (ITS#4395) Fixed slapd syncrepl de-normalize UUID issue Fixed slapd syncrepl dynamic reconfig issue (ITS#4401) Added slapd syncrepl log messages (ITS#4369) Added slapd permissive modify/increment support Added slapd dynamically registered debug level support Fixed slapd connectionless LDAP support Fixed slapd cn=3Dconfig error on create failure issue (ITS#4407) Fixed slapd-bdb/hdb wake listener on runqueue submit (ITS#4385) Fixed slapd-ldap/meta resources leaks on multiple binds (ITS#4387) Fixed slapd-ldap/meta assert on connection shutdown (ITS#4390) Added slapd-meta subtree-exclude feature Fixed slapo-syncprov update latency issue (ITS#4385) Fixed slapo-auditlog crash (ITS#4394) Fixed slapo-accesslog unbind crash (ITS#4386) Fixed slurpd reject error formating (ITS#4382) Fixed ldappasswd unbind issue (ITS#4403) Fixed slapo-pcache assert on attrsonly search (ITS#4406) Added slapo-pcache max_queries enhancement (ITS#4225) Added slapo-pcache negative caching enhancement Build Environment Fixed liblunicode cross compiling problem (ITS#4363) Updated detection for AIX (ITS#4312) Updated multi-precision library detection Documentation Updated misc. manual pages OpenLDAP 2.3.19 Release Fixed libldap disable DH key exchange with DH params (ITS#4354) Fixed libldap_r thread pool destroy hang (ITS#4349,ITS#4368) Fixed slapd slap_daemon destroy issue (ITS#4370) Fixed slapd-hdb livelock issue (ITS#4360) Fixed slapd-bdb/hdb auto-recovery issue (ITS#4361,ITS#4373) Fixed slapd-bdb/hdb BDB 4.4 compatibility issues (ITS#4362) Fixed slapo-ppolicy modify issue (ITS#4355) Fixed slapo-syncprov/pcache filter dup issue (ITS#4364) Fixed slapo-syncprov playlog nentries reset issue (ITS#4365) Build environment Fixed slaptools when --disable-debug (ITS#4351) Fixed slapd(8) solaris select(2) issue (ITS#4357) OpenLDAP 2.3.18 Release Fixed slapd syncrepl variable used before set bug (ITS#4331) Updated slapd-meta retry capabilities (ITS#4328) Fixed slapd-bdb slapcat autorecover bug (ITS#4324) Fixed slapo-chain search limits (ITS#4336) Fixed slapo-pcache attrsets issues (ITS#4316) Fixed slapo-translucent connection destroy (ITS#4334) Fixed slapd-config handling of attribute options (ITS#4339) Fixed slapd-ldap idassert resource leak (ITS#4326) Fixed slapd-meta nretries issue (ITS#4059) Fixed slapd wake_listener loses wakes (ITS#4343) Fixed slapd connection manager issue (ITS#4338) Fixed slapd handling of old style configuration directives (ITS#4341) Removed slapd-bdb/hdb extraneous yields (ITS#3950) Build Environment Removed problematic Linux sched_yield(2) workarounds (ITS#3950) Documentation Updated release documents Updated misc. manual pages OpenLDAP 2.3.17 Release Fixed slapd anonymous proxy authorization issue (ITS#4320) Fixed slapd-ldap/meta session reuse issue (ITS#4315) Fixed slapd-ldap idassert anon-to-anon issue (ITS#4321) Fixed slapd-monitor thread issue (ITS#4318) Build environment Updated Linux sched_yield(2) workaround to use nanosleep(2) (ITS#3950) Fixed configure report-to URL OpenLDAP 2.3.16 Release Fixed slapd-bdb reindexing via cn=3Dconfig not noticed issue (ITS#4260) Fixed slapd-monitor connection search crash (ITS#4300) Flapd slapd cn=3Dconfig bad ACL syntax modify crash (ITS#4306) Fixed slapd ACL/suffix configuration issue (ITS#4307) Fixed slapd-bdb/hdb cache issue (ITS#4308) Fixed slapd-bdb/hdb/ldbm suffix add with default referral issue (ITS#4310) Fixed slapd-ldbm compare cache release issue (ITS#4313) Fixed slapd syncrepl time/size limit parsing Fixed slapi slapi_op_bind_callback fix (ITS#4311) Fixed slapi pluginlog fix (ITS#4291) Fixed ldapsearch response control handling issue Build environment Replace sched_yield(2) on Linux with select(2) (ITS#3950) Documentation Added slapd-bdb(5) cachefree description Updated misc. manual pages OpenLDAP 2.3.15 Release Fixed slapd strerror logging bug (ITS#4292) Fixed slapd ACL add/delete fraction issue (ITS#4295) Fixed slapd ACL users selfwrite issue (ITS#4299) Fixed slapd attrs/objectclass replog issues (ITS#4298) Fixed slapd-ldap password modify exop password return (ITS#4294) Build environment Disable test030-relay when threads are unavailable (ITS#4297) OpenLDAP 2.3.14 Release Fixed slapd assertion control restrictions Fixed slapd sc_prev update after free bug (ITS#4237) Fixed slapd pid file creation (ITS#4241,4251) Fixed slapd DEBUG dependency (ITS#4245) Added slapd warning for excessive threads number (ITS#4249) Fixed slapd passwd incomplete mod structure issue (ITS#4278) Fixed slapd ACL exact attrval clause normalization (ITS#4255) Fixed slapd modify/delete by ordered index issue Fixed slapd strerror NULL bug (ITS#4285) Fixed slapd-glue issues (ITS#4084,4133) Fixed slapd-hdb idl Delete bug (ITS#4250) Fixed slapd-hdb cache deadlock (ITS#4254) Fixed slapd-bdb/hdb alock_close bug (ITS#4259) Fixed slapd-bdb dn2id IDL cache bug (ITS#4263) Fixed slapd-bdb/hdb mode argument parsing (ITS#4257) Fixed slapd-bdb/hdb cn=3Dconfig reindexing (ITS#4260) Fixed slapd-bdb/hdb cn=3Dconfig olcDbIndex modify/replace (ITS#4262) Fixed slapd-bdb/hdb lockup issue (ITS#4184) Fixed slapd-ldap anonymous identity assertion (ITS#4272) Added slapd-ldap/meta idle-timeout support (ITS#4115) Fixed slapd-meta bind-timeout handling Fixed slapd-sql plug leak Fixed slapo-dynlist/dyngroup nonexistant object return code (ITS#4224) Updated slapo-dynlist (ITS#3756,3781) Fixed slapo-rwm static DN free bug (ITS#4248) Fixed slapo-syncprov unpublished control (ITS#4238) Fixed slapo-syncprov message id issue Fixed slapo-unique extraneous searches (ITS#4267) Build environment Fixed thread dependency of test028 (ITS#4141) Updated test026-dn Updated test033-glue-syncrepl (ITS#4264) Documentation Updated slapd.conf(5) and Admin Guide (ITS#4146,4266) Updated slapo-dynlist(5) (ITS#4197) Updated slapo-pcache(5) (ITS#4232) Updated slapindex(8) (ITS#4242) OpenLDAP 2.3.13 Release Fixed libldap/liblutil MSG_ACCRIGHTSLEN bug (ITS#4206) Fixed libldap ldap_bv2escaped_filter_value issue (ITS#4212) Fixed liblutil URL value-specs issue (ITS#4221) Fixed slapd sizelimit disclose issue (ITS#4213) Fixed slapd gentlehup write restrict issue (ITS#3717) Fixed slapd gentlehup abnormal issue (ITS#4217) Fixed slapd delta-sync subtree scope issue (ITS#4227) Fixed slapd cn=3Dconfig OID/name pollution issue (ITS#4185) Fixed slapd cn=3Dconfig rootdn issue (ITS#4192) Fixed slapd cn=3Dconfig slaptest -F without -f issue (ITS#4194) Fixed slapd cn=3Dconfig ACL issue (ITS#4218) Fixed slapd-bdb negative results IDL cache issue (ITS#4223) Fixed slapd-bdb cursor close issue (ITS#4226) Fixed slapd-hdb slapadd -q issue (ITS#4210) Fixed slapd-hdb missing results issue (ITS#4186) Fixed slapd-ldap potential double free issue (ITS#4189) Fixed slapd-meta matched DN issue (ITS#4195) Fixed slapd-meta DN cache issue (ITS#4196) Fixed slapd-monitor shadow issue (ITS#4214) Fixed slapo-accesslog delta-syncrepl issue (ITS#4198) Fixed slapo-accesslog cleanup issue (ITS#4209) Fixed slapo-chain resource leak issue (ITS#4140) Fixed slapo-chain identity assertion issue (ITS#4256) Fixed slapo-pcache attrset check issue (ITS#4199) Fixed slapd-bdb readonly dirty alock issue (ITS#4201) Fixed slapd-pcache non-requested attributes issues (ITS#4203,4204) Fixed slaptest -F -f success with unsupported issue (ITS#4220) Build environment Improved Berkeley DB detection (ITS#3809) Updated DB_CONFIG example (ITS#4229) Documentation Updated ldif(5) to include change record description OpenLDAP 2.3.12 Release Fixed libldap ldapi:// authdn construction Added libldap ldap_bv2escaped_filter_value (ITS#2535) Added libldap/slapd TLS DSA certificate support (ITS#4017) Fixed libldap SASL bind issue (ITS#4158) Fixed ldapmodrdn empty line handling (ITS#4101) Fixed client tools additional info printing (ITS#4147) Updated slapd ldaps:// not configured fix (ITS#4082,4083) Fixed slapd connection crashes (ITS#4108) Fixed slapd illegal S option bug (ITS#4119) Fixed slapd cn=3Dmonitor log level mod issue (ITS#4091) Fixed slapd cn=3Dconfig bad access issue (ITS#4111) Fixed slapd cn=3Dconfig access modify issue (ITS#4127) Fixed slapd cn=3Dconfig init issue (ITS#4128) Fixed slapd non-reentrant libwrap issue (ITS#4099) Fixed slapd thread v. tools_threads settings Fixed slapd spurious defer message (ITS#3850) Fixed slapd attribute SYNTAX OIDM issue (ITS#4116) Fixed slapd modify empty sequence bug (ITS#4183) Fixed slapd-bdb uninitialized condition in tool mode (ITS#4143) Fixed slapd-bdb empty suffix and syncprov issue (ITS#4171) Fixed slapd-hdb syncrepl deadlock issue (ITS#4088) Added slapd-ldap write op timeout support (ITS#4157) Fixed slapd-ldap/slapo-chain matched dn handling (ITS#4176) Fixed slapd-meta invalid DN attrs normalize/pretty issue (ITS#4107) Fixed slapd-meta rootdn erroneous success issue (ITS#4122) Fixed slapd-meta proxying bind result issue (ITS#4129) Fixed slapd-meta/slapo-rwm rwm-mapping issue (ITS#4086) Fixed slapd-meta per-target retry (ITS#4150) Fixed slapd-meta size/time limit handling (ITS#4145) Fixed slapd-sql size limit count (ITS#4181) Fixed slapo-ppolicy pwdFailureTime after bind success issue (ITS#4134) Fixed slapo-ppolicy add passord_hash quality config dependency Fixed slapo-syncprov LDAP response types (ITS#4183) Added slapd delta syncrepl support Added slapadd thread support Updated slapcat subordinate database handling (ITS#4089) Added slapd/slaptest pid/arg file consistency check (ITS#4074) Updated slaptools default debug level to "none" (ITS#4044) Fixed slurpd backwards compat issue (ITS#4151) Added slurpd pid/arg file consistency check (ITS#4152) Updated contrib smbk5pwd module Removed lint Build environment Fixed libldap HSTRERROR issue (ITS#4124) Fixed slapd AIX IFMT issue (ITS#4123) Added slapd-bind test program Added inet_ntoa_b support for VxWorks (ITS#3440) Updated test036 (ITS#4095) Fixed test036 cmp issue (ITS#4142) Dropped SSLeay support Documentation slapd.conf(5) defaultSearchBase issue (ITS#4162) slap tool man pages wll typo (ITS#4169) --- Module Name: pkgsrc Committed By: taca Date: Thu May 18 05:14:11 UTC 2006 Modified Files: pkgsrc/databases/openldap: distinfo pkgsrc/databases/openldap/patches: patch-ad Log Message: Fix build problem of libraries/liblutil/sha1.c; function proto type mis-match. --- Module Name: pkgsrc Committed By: joerg Date: Fri May 19 14:46:10 UTC 2006 Modified Files: pkgsrc/databases/openldap: Makefile distinfo Log Message: Update to OpenLDAP 2.3.23. OpenLDAP 2.3.23 Release Fixed slapd-ldap improper free bug (ITS#4550) OpenLDAP 2.3.22 Release Fixed libldap referral input destroy issue (ITS#4533) Fixed libldap ldap_sort_entries tail bug (ITS#4536) Fixed libldap default connection concurrency issue (ITS#4541) Fixed libldap_r thread debug missing break Fixed libldap_r tpool cleanup Fixed liblutil strtoul(3) usage (ITS#4503) Fixed liblutil time resolution issue (ITS#4514) Updated ldapdelete(1) to stdout bug (ITS#4453) Updated ldapsearch(1) BASE output (ITS#4504) Fixed slapd backglue issue (ITS#4529) Fixed slapd cn=3Dconfig (ITS#4512) Fixed slapd cn=3Dconfig ACL application fix Fixed slapd cn=3Dconfig olcLimits (ITS#4515) Fixed slapd dynacl tgrant/tdeny initialization Fixed slapd runqueue use of freed memory (ITS#4517) Fixed slapd slap_send_ldap_result bug (ITS#4499) Fixed slapd thread pool init issue (ITS#4513) Added slapd syncrepl mandatory searchbase check Fixed slapd-bdb/hdb pre/post-read freeing (ITS#4532) Fixed slapd-bdb/hdb pre/post-read unavailable issue (ITS#4538) Fixed slapd-bdb/hdb referral issue (ITS#4548) Fixed slapd-hdb IDL sort issue (ITS#4531) Fixed slapd-ldap proxyAuthz of bound identity/override (ITS#4497) Fixed slapd-ldap/meta protocol version propagation (ITS#4488) Fixed slapd-ldap fd cleanup (ITS#4474) Fixed slapd-ldif deadlock (ITS#4500) Fixed slapd-shell lutil_atoi issue (ITS#4495) Fixed slapadd cn=3Dconfig issue (ITS#4194) Fixed slapo-accesslog log purging issue (ITS#4505) Added slapo-accesslog reqOld feature Fixed slapo-auditlog missing return codes Fixed slapo-ppolicy BER tags issue (ITS#4528) Fixed slapo-ppolicy rebind bug (ITS#4516) Fixed slapo-refint delete prohibit issue (ITS#4442) Fixed slapo-syncprov MODs cause DELs (ITS#4423) Fixed slapo-syncprov/syncrepl sessionlog issue (ITS#4534) Added slapo-syncprov extra logging Fixed slapo-translucent modifications (ITS#4527) Fixed slurpd potential overflow issue Build Environment Fixed OSF1 compilation problem (ITS#4537) Fixed test020-proxycache disabled debug issue (ITS#4491) Fixed test033-glue-syncrepl overlay detection (ITS#4544) Documentation Fixed slapd(8) logging header reference (ITS#4509) Clarified slapd.conf(5) "disable bind_anon" feature @ text @d1 1 a1 1 $NetBSD: patch-am,v 1.5 2006/05/15 19:01:23 ghen Exp $ d3 1 a3 1 --- libraries/libldap/cyrus.c.orig 2006-05-13 11:47:50.000000000 +0200 d5 1 a5 1 @@@@ -884,7 +884,7 @@@@ ldap_int_sasl_external( d14 2 a15 2 @@@@ -1026,6 +1026,7 @@@@ int ldap_pvt_sasl_secprops( char **props; d22 2 a23 2 @@@@ -1056,9 +1057,9 @@@@ int ldap_pvt_sasl_secprops( if ( next == &props[i][sprops[j].key.bv_len] || next[0] != '\0' ) continue; d34 1 a34 1 @@@@ -1155,7 +1156,7 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d43 1 a43 1 @@@@ -1163,13 +1164,13 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d60 1 a60 1 @@@@ -1215,7 +1216,7 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d69 1 a69 1 @@@@ -1227,13 +1228,13 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d86 1 a86 1 @@@@ -1332,7 +1333,7 @@@@ ldap_int_sasl_external( @ 1.3 log @Use the correct LDAP type instead of the SASL type, which is only available if building with SASL support. Noted in private mail by Joerg Sonnenberger. Bump PKGREVISION to 1. @ text @d1 1 a1 1 $NetBSD: patch-am,v 1.2 2005/08/01 09:49:37 jlam Exp $ d3 1 a3 1 --- libraries/libldap/cyrus.c.orig 2005-07-31 22:09:40.000000000 -0400 d5 1 a5 1 @@@@ -848,7 +848,7 @@@@ ldap_int_sasl_external( d14 1 a14 1 @@@@ -891,6 +891,7 @@@@ int ldap_pvt_sasl_secprops( d22 13 a34 21 @@@@ -935,7 +936,8 @@@@ int ldap_pvt_sasl_secprops( { if( isdigit( (unsigned char) props[i][sizeof("minssf")] ) ) { got_min_ssf++; - min_ssf = atoi( &props[i][sizeof("minssf")] ); + tmp_ssf = atoi( &props[i][sizeof("minssf")] ); + min_ssf = tmp_ssf >= 0 ? (sasl_ssf_t) tmp_ssf : 0; } else { return LDAP_NOT_SUPPORTED; } @@@@ -945,7 +947,8 @@@@ int ldap_pvt_sasl_secprops( { if( isdigit( (unsigned char) props[i][sizeof("maxssf")] ) ) { got_max_ssf++; - max_ssf = atoi( &props[i][sizeof("maxssf")] ); + tmp_ssf = atoi( &props[i][sizeof("maxssf")] ); + max_ssf = tmp_ssf >= 0 ? (sasl_ssf_t) tmp_ssf : 0; } else { return LDAP_NOT_SUPPORTED; } @@@@ -1049,7 +1052,7 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d43 1 a43 1 @@@@ -1057,13 +1060,13 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d60 1 a60 1 @@@@ -1109,7 +1112,7 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d69 1 a69 1 @@@@ -1121,13 +1124,13 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d86 1 a86 1 @@@@ -1226,7 +1229,7 @@@@ ldap_int_sasl_external( @ 1.2 log @Update databases/openldap to version 2.2.27. From now on, we'll be tracking the latest release on the 2.2.x branch, which is generally the stable branch of OpenLDAP. Changes from version 2.2.20 include: Fixed bugs in slapd behavior. Fixed bugs in various backends (bdb, hdb, ldbm, ldap) for slapd Fixed pcache all-attrs bug (ITS#3741) Fixed syncrepl runqueue (ITS#3542) Fixed ACL dn=* clause Fixed ACL val default style parsing crasher (ITS#3700) Fixed slapcat unclean exits (ITS#3764) Fixed libldap sasl connection assert (ITS#3278) Removed broken libldap fast synchronous search result processing (ITS#3612) Fixed slap tool log initialization (ITS#3579) Fixed slapi modify/increment support (ITS#3522) Fixed slapi plugins called multiple times with glue (ITS#3529) Fixed slapi 64-bit portability (ITS#3556) Fixed libldap fdset re-init for restart (ITS#3524) Fixed libldap ldap_extended_operation_s (ITS#3552) Added libldap fast synchronous search result processing Fixed slurpd replog locking (ITS#3421) Fixed slaptest failure if databases cannot be started (ITS#3461) Fixed slaptest with dynamically loaded password mechs (ITS#3495) Fixed libldap timeout option cleanup (ITS#3487) @ text @d1 1 a1 1 $NetBSD$ d10 1 a10 1 + sasl_ssf_t ssf ) d64 1 a64 1 + *(sasl_ssf_t *)arg = ld->ld_options.ldo_sasl_secprops.maxbufsize; d90 1 a90 1 + ld->ld_options.ldo_sasl_secprops.maxbufsize = *(sasl_ssf_t *)arg; d99 1 a99 1 + sasl_ssf_t ssf ) @ 1.1 log @Fix alignment/LP64 issue on NetBSD/sparc64 encountered while trying the syncrepl engine with SASL. Bump PKGREVISION. Approved by jlam@@. @ text @d3 1 a3 1 --- libraries/libldap/cyrus.c.orig 2004-08-28 13:35:42.000000000 +0000 d5 38 a42 1 @@@@ -1049,7 +1049,7 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d51 1 a51 1 @@@@ -1057,13 +1057,13 @@@@ ldap_int_sasl_get_option( LDAP *ld, int d68 1 a68 1 @@@@ -1109,7 +1109,7 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d77 1 a77 1 @@@@ -1121,13 +1121,13 @@@@ ldap_int_sasl_set_option( LDAP *ld, int d94 9 @