kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
295899 commits 166 branches 0 tags 1.5 GiB
Commit graph

47 commits

Author SHA1 Message Date
adam
794895f7cb openldap: updated to 2.4.47 
OpenLDAP 2.4.47:
Added slapd-sock DN qualifier for subtrees to be processed
Added slapd-sock ability to send extended operations to external listeners
Fixed liblber to avoid incremental access to user-supplied bv in dupbv
Fixed libldap dn to domain parsing with bad input
Fixed slapd slapcat to correctly honor -g option
Fixed slapd to correctly handle NO_SUCH_OBJECT with dynamic groups
Fixed slapd to check status of rdnNormalize
Fixed slapd cn=config when modifying slapo-syncprov config
Fixed slapd sasl authz-policy "all" behavior
Fixed slapd sasl minor typo
Fixed slapd to correctly hide hidden DBs in the rootDSE
Fixed slapd domainScope control to match Microsoft specification
Fixed slapd-bdb/hdb/mdb to not convert certain IDLs to ranges
Fixed slapo-accesslog deadlock during cleanup
Fixed slapo-memberof cn=config modifications
Fixed slapo-ppolicy with multimaster replication
Fixed slapo-syncprov with NULL modlist
Build Environment
	Added slapd reproducible build support
	Fixed missing includes with OpenSSL 1.0.2
Contrib
	Fixed slapo-pbkdf2 hash generation
Documentation
	admin24 fixed minor typo
 2018-12-20 17:54:09 +00:00
adam
4520b0f88a openldap: updated to 2.4.46 
OpenLDAP 2.4.46 Release (2018/03/22)
	Fixed libldap connection delete callbacks when TLS fails to start
	Fixed libldap to not reuse tls_session if TLS hostname check fails
	Fixed libldap cross-compiling with OpenSSL 1.1
	Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method
	Fixed libldap MozNSS CA certificate hash matching
	Fixed libldap MozNSS with PEM certs when also using an NSS cert db
	Fixed libldap MozNSS initialization
	Fixed libldap GnuTLS with GNUTLS_E_AGAIN
	Fixed libldap memory leak with cancel operations
	Fixed slapd Eventlog registry key creation on 64-bit Windows
	Fixed slapd to maintain SSF across SASL binds
	Fixed slapd syncrepl deadlock when updating cookie
	Fixed slapd syncrepl callback to always be last in the stack
	Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens
	Fixed slapd CSN queue processing
	Fixed slapd-ldap TLS connection timeout with high latency connections
	Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set
	Fixed slapd-mdb with an optimization for long lived read transactions
	Fixed slapd-meta assert when olcDbRewrite is modified
	Fixed slapd-sock with LDAP_MOD_INCREMENT operations
	Fixed slapo-accesslog cleanup to only occur on failed operations
	Fixed slapo-dds entryTTL to actually decrease as per RFC 2589
	Fixed slapo-syncprov memory leak with delete operations
	Fixed slapo-syncprov to not clear pending operation when checkpointing
	Fixed slapo-syncprov to correctly record contextCSN values in the accesslog
	Fixed slapo-syncprov not to log checkpoints to accesslog db
	Fixed slapo-syncprov to process changes from this SID on REFRESH
	Fixed slapo-syncprov session log parsing to not block other operations
	Build Environment
		Fixed Windows build with newer MINGW version
		Fixed compiler warnings and removed unused variables
	Contrib
		Fixed ldapc++ Control structure
	Documentation
		Delete stub manpage for back-ldbm
		Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism
		Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only
		Fixed slapd-config(5) typo for olcTLSCipherSuite
		Fixed slapo-syncprov(5) indexing requirements
 2018-04-02 13:40:44 +00:00
rillig
17e39f419d Fix indentation in buildlink3.mk files. 
The actual fix as been done by "pkglint -F */*/buildlink3.mk", and was
reviewed manually.

There are some .include lines that still are indented with zero spaces
although the surrounding .if is indented. This is existing practice.
 2018-01-07 13:03:53 +00:00
adam
efb3ecd7bc OpenLDAP 2.4.45 Release (2017/06/01) 
Added slapd support for OpenSSL 1.1.0 series (ITS-8353, ITS-8533, ITS-8634)
	Fixed libldap to fail ldap_result if the handle is already bad (ITS-8585)
	Fixed libldap to expose error if user specified CA doesn't exist (ITS-8529)
	Fixed libldap handling of Diffie-Hellman parameters (ITS-7506)
	Fixed libldap GnuTLS use after free (ITS-8385)
	Fixed libldap SASL initialization (ITS-8648)
	Fixed slapd bconfig rDN escape handling (ITS-8574)
	Fixed slapd segfault with invalid hostname (ITS-8631)
	Fixed slapd sasl SEGV rebind in same session (ITS-8568)
	Fixed slapd syncrepl filter handling (ITS-8413)
	Fixed slapd syncrepl infinite looping mods with delta-sync MMR (ITS-8432)
	Fixed slapd callback struct so older modules without writewait should function.
                    Custom modules may need to be updated for sc_writewait callback (ITS-8435)
	Fixed slapd-ldap/meta broken LDAP_TAILQ macro (ITS-8576)
	Fixed slapd-mdb so it passes ITS6794 regression test (ITS-6794)
	Fixed slapd-mdb double free with size zero paged result (ITS-8655)
	Fixed slapd-meta uninitialized diagnostic message (ITS-8442)
	Fixed slapo-accesslog to honor pauses during purge for cn=config update (ITS-8423)
	Fixed slapo-accesslog with multiple modifications to the same attribute (ITS-6545)
	Fixed slapo-relay to correctly initialize sc_writewait (ITS-8428)
	Fixed slapo-sssvlv double free (ITS-8592)
	Fixed slapo-unique with empty modifications (ITS-8266)
	Build Environment
		Added test065 for proxyauthz (ITS-8571)
		Fix test008 to be portable (ITS-8414)
		Fix test064 to wait for slapd to start (ITS-8644)
		Fix its4336 regression test (ITS-8534)
		Fix its4337 regression test (ITS-8535)
		Fix regression tests to execute on all backends (ITS-8539)
	Contrib
		Added slapo-autogroup(5) man page (ITS-8569)
		Added passwd missing conversion scripts for apr1 (ITS-6826)
		Fixed contrib modules where the writewait callback was not correctly initialized (ITS-8435)
		Fixed smbk5pwd to build with newer OpenSSL releases (ITS-8525)
	Documentation
		admin24 fixed tls_cipher_suite bindconf option (ITS-8099)
		admin24 fixed typo cn=config to be slapd.d (ITS-8449)
		admin24 fixed slapo-syncprov information to be curent (ITS-8253)
		admin24 fixed typo in access control docs (ITS-7341, ITS-8391)
		admin24 fixed minor typo in tuning guide (ITS-8499)
		admin24 fixed information about the limits option (ITS-7700)
		admin24 fixed missing options for syncrepl configuration (ITS-7700)
		admin24 fixed accesslog documentation to note it should not be replicated (ITS-8344)
		Fixed ldap.conf(5) missing information on SASL_NOCANON option (ITS-7177)
		Fixed ldapsearch(1) information on the V[V] flag behavior (ITS-7177, ITS-6339)
		Fixed slapd-config(5), slapd.conf(5) clarification on interval keyword for refreshAndPersist (ITS-8538)
		Fixed slapd-config(5), slapd.conf(5) clarify serverID requirements (ITS-8635)
		Fixed slapd-config(5), slapd.conf(5) clarification on loglevel settings (ITS-8123)
		Fixed slapo-ppolicy(5) to clearly note rootdn requirement (ITS-8565)
		Fixed slapo-memberof(5) to note it is not safe to use with replication (ITS-8613)
		Fixed slapo-syncprov(5) documentation to be current (ITS-8253)
		Fixed slapadd(8) manpage to note slapd-mdb (ITS-8215)
		Fixed various minor grammar issues in the man pages (ITS-8544)
		Fixed various typos (ITS-8587)
 2017-06-02 08:29:56 +00:00
he
2b59f84fa6 Apply fix from https://bugzilla.redhat.com/show_bug.cgi?id=1238322 
Incorrect multi-keyword mode cipherstring parsing.
Fixes CVE-2015-3276.
Submitted upstream as ITS#8543, it apparently wasn't already(!)
http://www.openldap.org/its/index.cgi/Incoming?id=8543

Bump PKGREVISION for both openldap, openldap-server and openldap-client
(to be on the safe side...)
 2016-12-13 10:38:06 +00:00
jperkin
10f4f7f7e0 Apply upstream patch to fix pthread mutex initialisation on SunOS. Bump 
PKGREVISION for client and server.
 2016-06-17 14:01:58 +00:00
jperkin
17661ff9a5 Bump PKGREVISION for security/openssl ABI bump. 2016-03-05 11:27:40 +00:00
adam
f1d8051950 OpenLDAP 2.4.43 Release (2015/11/30) 
Fixed liblber remove obsolete assert (ITS-8240, ITS-8301)
	Fixed libldap file URLs on windows (ITS-8273)
	Fixed libldap microsecond timer for windows (ITS-8295)
	Fixed slap tools minor one time memory leak (ITS-8082)
	Fixed slapd to avoid redundant processing of abandon ops (ITS-8232)
	Fixed slapd syncrepl segv when present list is NULL (ITS-8231, ITS-8042)
	Fixed slapd segfault with invalid SASL URI (ITS-8218)
	Fixed slapd configuration parser with unbalanced quotes (ITS-8233)
	Fixed slapd syncrepl check with config db on windows (ITS-8277)
	Fixed slapd with mod Increment and inherited attribute type (ITS-8289)
	Fixed slapd-ldap SEGV after failed retry (ITS-8173)
	Fixed slapd-ldap to skip client controls in ldap_back_entry_get (ITS-8244)
	Fixed slapd-null to have an option to return a search entry (ITS-8249)
	Fixed slapd-relay to correctly handle quoted options (ITS-8284)
	Fixed slapo-accesslog delta-sync MMR with interrupted refresh phase (ITS-8281)
	Fixed slapo-dds segfault when using slapo-memberof (ITS-8133)
	Fixed slapo-ppolicy to allow purging of stale pwdFailureTime attributes (ITS-8185)
	Fixed slapo-ppolicy to release entry on failure (ITS-7537)
	Fixed slapo-ppolicy to fall back to default policy if there is a parsing error (ITS-8234)
	Fixed slapo-syncprov with interrupted refresh phase (ITS-8281)
	Fixed slapo-refint with subtree renames (ITS-8220)
	Fixed slapo-rwm missing olcDropUnrequested attribute (ITS-7889)
	Fixed slapo-rwm parsing to avoid double-escaping rewrite rules (ITS-7964)
	Build Environment
		Fixed ldif-filter option parsing (ITS-8292)
		Fixed slapd-tester EOL handling in test output for windows (ITS-8280)
		Fixed slapd-tester executable suffix for windows (ITS-8216)
		Fixed test061 timing issues (ITS-8297)
	Contrib
		Added libnettle support to pw-pbkdf2 (ITS-8198)
		Fixed smbk5pwd compiler warnings with libnettle (ITS-8235)
		Fixed passwd symbol collisions with other crypto libraries (ITS-8294)
	Documentation
		Updated guide to reflect changes to how TLS is handled with syncrepl
 2015-12-02 17:04:56 +00:00
manu
a3141bf547 Add support for ECDH, from upstream 
After the recent logjam attack, longer DH parameter size have been advised.
Unfortunately, this comes with a high computational cost. ECDH is a good
alternative to acheive forward secrecy with lower CPU Loads.

This patch is a backport from upstream ECDH umplementation. ECDH is
enabled by speciying a curve name through the TLSECName directive.
Valid curve names can be obtaines by openssl ecparam -list_curves

Advised usage for a forward-secrecy only setup wiht only ECDH:
TLSCipherSuite EECDH:!RC4:!SHA:!MD5:!DES:!aNULL:!eNULL
TLSECName      prime256v1

If backward compatibility with older clients is required:
TLSCipherSuite EECDH:HIGH:!RC4:!SHA:!MD5:!DES:!aNULL:!eNULL
TLSECName      prime256v1

Backward compatible flavor with more forward secrecy, at
the expense of using costly DH. dh2048.pem is obtained using openssl
dhparam 2048 > /etc/openssl/certs/dh2048.pem
TLSCipherSuite EECDH:EDH:HIGH:!RC4:!SHA:!MD5:!DES:!aNULL:!eNULL
TLSDHParamFile /etc/openssl/certs/dh2048.pem
TLSECName      prime256v1
 2015-09-14 16:32:26 +00:00
adam
3f03bcd668 OpenLDAP 2.4.41 Release (2015/06/21) 
Fixed ldapsearch to explicitly flush its buffer (ITS-8118)
	Fixed libldap async connections (ITS-8090)
	Fixed libldap double free of request during abandon (ITS-7967)
	Fixed libldap error string for LDAP_X_CONNECTING (ITS-8093)
	Fixed libldap segfault in ldap_sync_initialize (ITS-8001)
	Fixed libldap ldif-wrap off by one error (ITS-8003)
	Fixed libldap handling of TLS in async mode (ITS-8022)
	Fixed libldap null pointer dereference (ITS-8028)
	Fixed libldap mutex handling with LDAP_OPT_SESSION_REFCNT (ITS-8050)
	Fixed slapd slapadd config db import of minimal frontend entry (ITS-8150)
	Fixed slapd slapadd onetime leak with -w (ITS-8014)
	Fixed slapd sasl auxprop crash with invalid config (ITS-8092)
	Fixed slapd syncrepl delta-mmr issue with overlays and slapd.conf (ITS-7976)
	Fixed slapd syncrepl mutex for cookie state (ITS-7968)
	Fixed slapd syncrepl memory leaks (ITS-8035)
	Fixed slapd syncrepl to free presentlist at end of refresh mode (ITS-8038)
	Fixed slapd syncrepl to streamline presentlist (ITS-8042)
	Fixed slapd syncrepl concurrency when CHECK_CSN is enabled (ITS-8120)
	Fixed slapd rootdn checks for hidden backends (ITS-8108)
	Fixed slapd segfault when using matched values control (ITS-8046)
	Fixed slapd-ldap reconnection behavior on remote failure (ITS-8142)
	Fixed slapd-mdb minor case typo (ITS-8049)
	Fixed slapd-mdb one-level search (ITS-7975)
	Fixed slapd-mdb heap corruption (ITS-7965)
	Fixed slapd-mdb crash after deleting in-use schema (ITS-7995)
	Fixed slapd-mdb minor code cleanup (ITS-8011)
	Fixed slapd-mdb to return errors when using incorrect env flags (ITS-8016)
	Fixed slapd-mdb to correctly update search candidates (ITS-8036, ITS-7904)
	Fixed slapd-mdb when there were more than 65535 aliases in scope (ITS-8103)
	Fixed slapd-mdb alias deref when objectClass is not indexed (ITS-8146)
	Fixed slapd-meta TLS initialization with ldaps URIs (ITS-8022)
	Fixed slapd-meta to have better error logging (ITS-8131)
	Fixed slapd-perl conversion to cn=config (ITS-8105)
	Fixed slapd-sql autocommit config variable (ITS-8129,ITS-6613)
	Fixed slapo-collect segfault (ITS-7797)
	Fixed slapo-constraint with 0 count constraint (ITS-7780,ITS-7781)
	Fixed slapo-deref with empty attribute list (ITS-8027)
	Fixed slapo-memberof to correctly reject invalid members (ITS-8107)
	Fixed slapo-sock result parser for CONTINUE (ITS-8048)
	Fixed slapo-syncprov synprov_matchops usage of test_filter (ITS-8013)
	Fixed slapo-syncprov segfault on disconnect/abandon (ITS-5452,ITS-8012)
	Fixed slapo-syncprov memory leak (ITS-8039)
	Fixed slapo-syncprov segfault on disconnect/abandon (ITS-8043)
	Fixed slapo-syncprov deadlock when autogroup is in use (ITS-8063)
	Fixed slapo-syncprov potential loss of changes when under load (ITS-8081)
	Fixed slapo-unique enforcement of uniqueness with manageDSAit control (ITS-8057)
	Build Environment
		Fixed libdb detection with gcc 5.x (ITS-8056)
		Fixed ftello reference for Win32 (ITS-8127)
		Enhanced contrib modules build paths (ITS-7782)
		Fixed contrib/autogroup internal operation identity (ITS-8006)
		Fixed contrib/autogroup to skip internal ops with accesslog (ITS-8065)
		Fixed contrib/passwd/sha2 compiler warning (ITS-8000)
		Fixed contrib/noopsrch compiler warning (ITS-7998)
		Fixed contrib/dupent compiler warnings (ITS-7997)
		Test suite: Added vrFilter test (ITS-8046)
	Contrib
		Added pbkdf2 sha256 and sha512 schemes (ITS-7977)
		Fixed autogroup modification callback responses (ITS-6970)
		Fixed nssov compare with usergroup (ITS-8079)
		Fixed nssov password change behavior (ITS-8080)
		Fixed nssov updated to 0.9.4 (ITS-8097)
	Documentation
		Added ldap_get_option(3) LDAP_FEATURE_INFO_VERSION information (ITS-8032)
		Added ldap_get_option(3) LDAP_OPT_API_INFO_VERSION information (ITS-8032)
		Fixed slapd-config(5), slapd.conf(5) tls_cipher_suite option (ITS-8099)
		Fixed slapd-meta(5), slapd-ldap(5) tls_cipher_suite option (ITS-8099)
		Fixed slapd-meta(5) fix minor typo (ITS-7769)
 2015-07-17 14:49:05 +00:00
manu
573c685dca Upstream fix for ignored TLSDHParamFile option 
From 6f120920d359d3b880c5c56bde4c1b91c3bedb01 Mon Sep 17 00:00:00 2001
From: Ben Jencks <ben@bjencks.net>
Date: Sun, 27 Jan 2013 18:27:03 -0500
Subject: [PATCH] ITS#7506 tls_o.c: Fix Diffie-Hellman parameter usage.

If a DHParamFile or olcDHParamFile is specified, then it will be used,
otherwise a hardcoded 1024 bit parameter will be used. This allows the use of
larger parameters; previously only 512 or 1024 bit parameters would ever be
used.

From cfeb28412c28ce9feeea6e6c055286f201bd0a34 Mon Sep 17 00:00:00 2001
From: Howard Chu <hyc@openldap.org>
Date: Sat, 7 Sep 2013 06:39:53 -0700
Subject: [PATCH] ITS#7506 fix prev commit

The patch unconditionally enabled DHparams, which is a significant
change of behavior. Reverting to previous behavior, which only enables
DH use if a DHparam file was configured.
 2015-07-15 16:33:57 +00:00
adam
1720391df0 Changes 2.4.40: 
Fixed libldap DNS SRV priority handling (ITS-7027)
Fixed libldap don't leak libldap err codes (ITS-7676)
Fixed libldap CR/LF handling (ITS-4635)
Fixed libldap ldif-wrap length (ITS-7871)
Fixed libldap GnuTLS ciphersuite parsing (ITS-7500)
Fixed libldap GnuTLS with newer versions (ITS-7430,ITS-6359)
Fixed libldif to correctly handle 4096 character lines (ITS-7859)
Fixed librewrite reference counting (ITS-7723)
Fixed slapacl with back-mdb reader transactions (ITS-7920)
Fixed slapd syncrepl to send cookie on fallback (ITS-7849)
Fixed slapd syncrepl SEGV when abandoning a connection (ITS-7928)
Fixed slapd slapcat with external schema (ITS-7895)
Fixed slapd schema RDN normalization (ITS-7935)
Fixed slapd with repeated language tags (ITS-7941)
Fixed slapd modrdn crash on naming attr with no matching rule (ITS-7850)
Fixed slapd memory leak in control handling (ITS-7942)
Fixed slapd-ldap removed dead code (ITS-7922)
Fixed slapd-mdb to work concurrently with slapadd (ITS-7798)
Fixed slapd-mdb with paged results (ITS-7705, ITS-7800)
Fixed slapd-mdb slapcat with nonexistent indices (ITS-7870)
Fixed slapd-mdb long lived reader transactions (ITS-7904)
Fixed slapd-mdb memory leak on matchedDN (ITS-7872)
Fixed slapd-mdb sorting of attribute values (ITS-7902)
Fixed slapd-mdb to flag attribute values as sorted (ITS-7903)
Fixed slapd-mdb index config handling (ITS-7912)
Fixed slapd-mdb entry release handling (ITS-7915)
Fixed slapd-mdb with aliases and referrals (ITS-7927)
Fixed slapd-mdb alias dereferencing (ITS-7702)
Fixed slapd-sock socket flushing (ITS-7937)
Fixed slapo-accesslog attribute normalization (ITS-7934)
Fixed slapo-accesslog internal search logging (ITS-7929)
Fixed slapo-auditlog connection destroy logic (ITS-7906,ITS-7923)
Fixed slapo-chain interaction with slapo-rwm (ITS-7930)
Fixed slapo-constraint connection destroy logic (ITS-7906,ITS-7923)
Fixed slapo-dds connection destroy logic (ITS-7906,ITS-7923)
Fixed slapo-dyngroup connection destroy logic (ITS-7906,ITS-7923)
Fixed slapo-memberof attr count (ITS-7893)
Fixed slapo-memberof frontendDB handling (ITS-7249)
Fixed slapo-memberof internal search logging (ITS-7929)
Fixed slapo-pcache config processing (ITS-7919)
Fixed slapo-pcache connection destroy logic (ITS-7906,ITS-7923)
Added slapo-ppolicy ORDERING rules (ITS-7838)
Fixed slapo-ppolicy timestamp resolution to use microseconds (ITS-7161)
Fixed slapo-ppolicy connection destroy logic (ITS-7906,ITS-7923)
Fixed slapo-refint to check for pauses in cn=config (ITS-7873)
Fixed slapo-refint internal search logging (ITS-7929)
Fixed slapo-refint connection destroy logic (ITS-7906,ITS-7923)
Fixed slapo-seqmod connection destroy logic (ITS-7906,ITS-7923)
Fixed slapo-slapover connection destroy logic (ITS-7906,ITS-7923)
Fixed slapo-sock db_init (ITS-7868)
Fixed slapo-sssvlv fix olcSssVlvMaxPerConn (ITS-7908)
Fixed slapo-translucent double free (ITS-7587)
Fixed slapo-translucent to work with manageDSAit (ITS-7864)
Fixed slapo-translucent to use local backend with local entries (ITS-7915)
Fixed slapo-unique connection destroy logic (ITS-7906,ITS-7923)
Fixed slapcacl with invalid suffix
 2014-10-01 08:32:31 +00:00
obache
852e2a4aac indent 2014-07-21 12:58:31 +00:00
obache
9ac836309b Prevent unsupported build option detection for the case using builtin one. 
Fixes PR pkg/47221.
 2014-07-21 12:57:20 +00:00
ryoon
b276f6c681 Fix SCO OpenServer 5.0.7/3.2 build. 2014-07-18 11:25:14 +00:00
tron
73d05e2276 Recursive PKGREVISION bump for OpenSSL API version bump. 2014-02-12 23:17:32 +00:00
adam
9e610cf0b7 OpenLDAP 2.4.34 Release (2013/03/03) 
Fixed libldap connections with EINTR (ITS7476)
	Fixed libldap lineno overflow in ldif_read_record (ITS7497)
	Fixed liblmdb mdb_env_open flag handling (ITS7453)
	Fixed liblmdb mdb_midl_sort array optimization (ITS7432)
	Fixed liblmdb freelist with large entries (ITS7455)
	Fixed liblmdb to check for filled dirty page list (ITS7491)
	Fixed liblmdb to validate data limits (ITS7485)
	Fixed liblmdb mdb_update_key for large keys (ITS7505)
	Fixed ldapmodify to not core dump with invalid LDIF (ITS7477)
	Fixed slapd syncrepl for old entries in MMR setup (ITS7427)
	Fixed slapd signedness for index_substr_any_* (ITS7449)
	Fixed slapd enforce SLAPD_MAX_DAEMON_THREADS (ITS7450)
	Fixed slapd mutex in send_ldap_ber (ITS6164)
	Added slapd-ldap onerr option (ITS7492)
	Added slapd-ldap keepalive support (ITS7501)
	Fixed slapd-ldif with empty dir (ITS7451)
	Fixed slapd-mdb to reopen attr DBs after env reopen (ITS7416)
	Fixed slapd-mdb handling of missing entries (ITS7483,7496)
	Fixed slapd-mdb environment flag setting (ITS7452)
	Fixed slapd-mdb with sub db slapcat (ITS7469)
	Fixed slapd-mdb to correctly work with toolthreads > 2 (ITS7488,ITS7527)
	Fixed slapd-mdb subtree search speed (ITS7473)
	Fixed slapd-meta conversion to cn=config (ITS7525)
	Fixed slapd-meta segfault when modifying olcDbUri (ITS7526)
	Fixed slapd-sql back-config support (ITS7499)
	Fixed slapo-constraint handle uri and restrict correctly (ITS7418)
	Fixed slapo-constraint with multi-master replication (ITS7426)
	Fixed slapo-constraint segfault (ITS7431)
	Fixed slapo-deref control initialization (ITS7436)
	Fixed slapo-deref control exposure (ITS7445)
	Fixed slapo-memberof with internal ops (ITS7487)
	Fixed slapo-pcache matching rules for config db (ITS7459)
	Fixed slapo-rwm modrdn cleanup (ITS7414)
	Fixed slapo-sssvlv maxperconn parameter (ITS7484)
	Build Environment
		Fixed slapo-constraint test suite (ITS7423)
	Contrib
		Added nssov nssov_config support (ITS7518)
		Added nssov password_prohibit_message (ITS7518)
		Fixed ldapc++ with gcc-4.7 (ITS7281,ITS7304)
		Fixed nssov olcNssPamSession handling (ITS7481)
		Fixed nssov connection DN (ITS7518)
		Add missing Makefile for various modules (ITS7308)
		Unify Makefile structure for modules (ITS7309)
		Fixed slapo-allowed attribute replication (ITS7493)
		Fixed slapo-passwd SHA2 to correctly zero buffer (ITS7490)
	Documentation
		ldapurl(1) fix example usage (ITS7454)
		ldap_get_option(3) fixed trailing whitespace (ITS7411)
		slapd-config(5) olcExtraAttrs is per db (ITS7421)
		slapd-overlays(5) update manpage index (ITS7489)
		slapo-dynlist(5) Search behavior notes (ITS7486)
		slapo-valsort(5) Document valsort control syntax (ITS7523)
 2013-03-16 12:49:54 +00:00
jperkin
becd113253 PKGREVISION bumps for the security/openssl 1.0.1d update. 2013-02-06 23:20:50 +00:00
obache
64deda1dc9 recursive bump from cyrus-sasl libsasl2 shlib major bump. 2012-12-16 01:51:57 +00:00
joerg
b359811619 Do not use libfetch in openldap-client. 2012-10-21 09:00:55 +00:00
sbd
135deb8dac Add libfetch buildlink to openldap-client's buildlink3.mk 2012-10-21 00:20:27 +00:00
asau
354ee694fd Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. 2012-10-02 21:25:15 +00:00
wiz
f98e8b0585 Add inet6 to default suggested options. It's 2012. 2012-06-12 15:45:54 +00:00
adam
63d3d2de02 Changes 2.4.30: 
Fixed libldap socket polling for writes
Fixed liblutil string modifications
Fixed slapd crash when attrsOnly is true
Fixed slapd syncrepl delete handling
Fixed slapd-mdb slapadd with -q
Fixed slapd-mdb slapadd with -w
Fixed slapd-mdb slapindex with -q and -t
Fixed slapo-pcache time-to-refesh handling
Fixed slapo-syncprov loop detection
Build Environment
	Fixed POSIX make support
	Fixed slapd-mdb build on POSIX
Documentation
	Added option "-o" to ldap*(1) pages
	Fixed ldap*(1) page cleanup
	Fixed ldap_modify(3) prototypes
 2012-03-13 19:57:10 +00:00
drochner
c1d713a9e4 update to 2.4.24 
changes:
-Added LDIF line wrapping setting
-Added libldap cert x500UniqueIdentifier handling
-Added libldap_r,libldap formal concurrency API
-Added slapadd attribute value checking
-Added slapcat continue mode for problematic DBs
-Added slapd syncrepl suffixmassage support
-Added slapd multiple listener threads
-Added slapd extensible match for ordering rules
-Added slapd-meta paged results control forwarding
-Added slapd-meta subtree-include support
-Added slapd-null back-config support
-Added slapd-sql autocommit support
-Added slapd-sql support for long long keys
-Added slapo-sssvlv multiple sorts per connection
-many bugfixes
-documentation improvements

approved by Geert Hendrickx (the MAINTAINER)
 2011-03-17 14:09:20 +00:00
ghen
d3d7c5854b Update to OpenLDAP 2.4.23, now the "stable" release. 
OpenLDAP 2.4.23 Release (2010/06/30)
	Fixed libldap to return server's error code (ITS#6569)
	Fixed libldap memleaks (ITS#6568)
	Fixed liblutil off-by-one with delta (ITS#6541)
	Fixed slapd acls with glued databases (ITS#6468)
	Fixed slapd syncrepl rid logging (ITS#6533)
	Fixed slapd modrdn handling of invalid values (ITS#6570)
	Fixed slapd-bdb hasSubordinates computation (ITS#6549)
	Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474)
	Fixed slapd-bdb entry cache delete failure (ITS#6577)
	Fixed slapd-ldap to return control responses (ITS#6530)
	Fixed slapo-ppolicy to use Debug (ITS#6566)
	Fixed slapo-refint to zero out freed DN vals (ITS#6572)
	Fixed slapo-rwm to use Debug (ITS#6566)
	Fixed slapo-sssvlv to use Debug (ITS#6566)
	Fixed slapo-syncprov lost deletes in refresh phase (ITS#6555)
	Fixed slapo-valsort to use Debug (ITS#6566)
 	Fixed contrib/nssov network.c missing patch (ITS#6562)
	Build Environment
		Fixed test043 attribute sorting (ITS#6553)
	Documentation
	        slapd-config(5) note default rootdn (ITS#6546)

OpenLDAP 2.4.22 Release (2010/04/24)
	Added slapd SLAP_SCHEMA_EXPOSE flag for hidden schema elements (ITS#6435)
	Added slapd tools selective iterations (ITS#6442)
	Added slapd syncrepl TCP keepalive (ITS#6389)
	Added slapo-ldap idassert-passthru (ITS#6456)
	Added slapo-pbind
	Fixed libldap gmtime re-entrancy (ITS#6262)
	Fixed libldap gssapi off by one error (ITS#6223)
	Fixed libldap GnuTLS serial length (ITS#6460)
	Fixed libldap MozNSS context and PEM support (ITS#6432)
	Fixed libldap referral on bind behavior(ITS#6510)
	Fixed slapd acl non-entry internal searches (ITS#6481)
	Fixed slapd acl attrval style initialization (ITS#6520)
	Fixed slapd certificateListValidate (ITS#6466)
	Fixed slapd empty URI parsing (ITS#6465)
	Fixed slapd glued misplaced entries (ITS#6506)
	Fixed slapd glued paged cookies (ITS#6507)
	Fixed slapd glued paged results (ITS#6504)
	Fixed slapd gmtime re-entrancy (ITS#6262)
	Fixed slapd to ignore controls with unrecognized flags (ITS#6480)
	Fixed slapd entry ownership (ITS#5340)
	Fixed slapd sasl auxprop_lookup (ITS#6441)
	Fixed slapd sasl auxprop ssf (ITS#5195)
	Fixed slapd syncrepl for attributes with no matching rule (ITS#6458)
	Fixed slapd syncrepl for unknown attrs and delta-sync (ITS#6473)
	Fixed slapd syncrepl loop with moddn (ITS#6472)
	Fixed slapo-accesslog to not replicate internal purges (ITS#6519)
	Fixed slapd-bdb contextCSN updates from updatedn (ITS#6469)
	Fixed slapd-bdb lockobj zeroing (ITS#6501)
	Fixed slapd-ldap/meta control criticality (ITS#6523)
	Fixed slapd-ldap/meta with ordered values (ITS#6516)
	Fixed slapo-collect entry ownership (ITS#5340,ITS#6423)
	Fixed slapo-dds with NULL backend (ITS#6490)
	Fixed slapo-dynlist entry ownership (ITS#5340,ITS#6423)
	Fixed slapo-memberof attr count (ITS#6508)
	Fixed slapo-pcache to release its own entries (ITS#6484)
	Fixed slapo-pcache with NULL backend (ITS#6490)
	Fixed slapo-rwm entry release handling (ITS#6484)
	Fixed slapo-rwm memory handling with rewrites (ITS#6526)
	Fixed slapo-rwm olcRwmMap handling (ITS#6436)
	Fixed slapo-rwm entry ownership (ITS#5340,ITS#6423)
	Fixed slapo-syncprov memory leak (ITS#6459)
	Fixed slapo-translucent counter increment (ITS#6497)
	Fixed slapo-valsort entry ownership (ITS#5340,ITS#6423)
	Fixed contrib/sha2 adds mechs for more hashes (ITS#6433)
	Fixed contrib/nssov to use nss-pam-ldapd (ITS#6488)
	Build Environment
		Added back-ldif, back-null test support (ITS#5810)
	Documentation
		admin24 avoid explicit moduleload statements (ITS#6486)
		admin24 broken link fixes (ITS#6493,ITS#6515)
	        slapd.access(5) val.regex explanation (ITS#5804)
 2010-07-24 11:15:16 +00:00
wiz
579796a3e5 Recursive PKGREVISION bump for jpeg update to 8. 2010-01-17 12:02:03 +00:00
ghen
7431b869be Update OpenLDAP packages to 2.4.19, which is now the "stable release". 
OpenLDAP 2.4.19 Release (2009/10/06)
	Fixed client tools with null timeouts (ITS#6282)
	Fixed slapadd to warn about missing attrs for replicas (ITS#6281)
	Fixed slapd acl cache (ITS#6287)
	Fixed slapd tools to allow -n for conversion (ITS#6258)
	Fixed slapd-ldap with null timeouts (ITS#6282)
	Fixed slapd-ldap with strong binds with relay/translucent (ITS#6296)
	Fixed slapd-ldif buffer overflow (ITS#6303)
	Fixed slapo-auditlog comments when modifying (ITS#6286)
	Fixed slapo-dynlist lock leak (ITS#6308)
	Fixed slapo-pcache cache corruption (ITS#6242)
	Fixed slapo-sssvlv sort control dereferencing (ITS#6288)
	Fixed contrib/autogroup segfaults (ITS#6279)
	Fixed contrib/nssov getgroupbymembers (ITS#6291)
	Fixed contrib/smbk5pwd rpath linking (ITS#6323)
	Build Environment
		Fixed --enable-deref support (ITS#6311)
		Fixed contrib/autogroup default libtool path (ITS#6284)
		Deleted nadf.schema (ITS#6140)

OpenLDAP 2.4.18 Release (2009/09/06)
	Fixed client tools common options (ITS#6049)
	Fixed liblber speed and other problems (ITS#6215)
	Added libldap MozNSS PEM support (ITS#6278)
	Added libldap option for SASL_USERNAME (ITS#6257)
	Fixed libldap error parsing (ITS#6197)
	Fixed libldap native getpass usage (ITS#4643)
	Fixed libldap tls_check_hostname for OpenSSL and MozNSS (ITS#6239)
	Added slapd tcp buffers support (ITS#6234)
	Fixed slapd allow mirrormode to be set to FALSE (ITS#5946)
	Fixed slapd certificate list parsing (ITS#6241)
	Fixed slapd writers blocking (ITS#6276)
	Fixed slapd dncachesize behavior to unlimited by default (ITS#6222)
	Fixed slapd incorrectly applying writetimeout when not set (ITS#6220)
	Fixed slapd with duplicate empty lines for olcDbConfig (ITS#6240)
	Fixed slapd server URL matching (ITS#5942)
	Fixed slapd subordinate needs a suffix (ITS#6216)
	Fixed slapd syncrepl decrement on possible NULL value (ITS#6256)
	Fixed slapd tools to properly close database (ITS#6214)
	Fixed slapd uninitialized SlapReply components (ITS#6101)
	Fixed slapd-meta starttls with targets (ITS#6190)
	Fixed slapd-monitor stats with glued subordinates (ITS#6243)
	Fixed slapd-ndb startup (ITS#6203)
	Fixed slapd-relay various issues (ITS#6133)
	Fixed slapd-relay response/cleanup callback mismatch (ITS#6154)
	Fixed slapd-sql with baseObject query (ITS#6172)
	Fixed slapd-sql with empty attribute (ITS#6163)
	Fixed slapo-dynlist uninitialized var (ITS#6266)
	Fixed slapo-pcache multiple enhancements (ITS#6152,ITS#5178)
	Fixed slapo-ppolicy updating operational attributes (ITS#6265)
	Fixed slapo-translucent attribute return (ITS#6254)
	Fixed slapo-translucent filter matching (ITS#6255)
	Fixed slapo-translucent to honor sizelimit (ITS#6253)
	Fixed slapo-unique filter matching (ITS#6077)
	Fixed tools off by one error (ITS#6233)
	Fixed tools resource leaks (ITS#6145)
	Added contrib/allowed (ITS#4730)
	Fixed contrib/autogroup with RE24 (ITS#6227)
	Fixed contrib/nss symbols (ITS#6273)
	Build Environment
		Tests note which backend is being tested (ITS#5810)
		Fixed test056-monitor with custom ports (ITS#6213)
	Documentation
		admin24 fix broken link (ITS#6264)
		ldap_open(3) document URI (ITS#6261)

OpenLDAP 2.4.17 Release (2009/07/13)
	Fixed liblber to use ber_strnlen (ITS#6080)
	Fixed libldap GnuTLS private key init (ITS#6053)
	Fixed libldap openssl digest initialization (ITS#6192)
	Fixed libldap tls NULL error messages (ITS#6079)
	Fixed libldap_r missing stub (ITS#6188)
	Fixed liblutil opendir/closedir on windows (ITS#6041)
	Fixed liblutil for _GNU_SOURCE (ITS#5464,ITS#5666)
	Added slapd sasl auxprop support (ITS#6147)
	Added slapd schema checking tool (ITS#6150)
	Added slapd writetimeout keyword (ITS#5836)
	Fixed slapd abandon/cancel handling for some ops (ITS#6157)
	Fixed slapd access setstyle to expand (ITS#6179)
	Fixed slapd assert with closing connections (ITS#6111)
	Fixed slapd bind race condition (ITS#6189)
	Fixed slapd cancel behavior (ITS#6137)
	Fixed slapd cert validation (ITS#6098)
	Fixed slapd connection_destroy assert (ITS#6089)
	Fixed slapd csn normalization (ITS#6195)
	Fixed slapd errno handling (ITS#6037)
	Fixed slapd global alloc handling (ITS#6054)
	Fixed slapd hung writers (ITS#5836)
	Fixed slapd ldapi issues (ITS#6056)
	Fixed slapd moduleload with static backends and modules (ITS#6016)
	Fixed slapd normalization of updated schema attributes (ITS#5540)
	Fixed slapd olcLimits handling (ITS#6159)
	Fixed slapd olcLogLevel with hex levels (ITS#6162)
	Fixed slapd pagedresults stacked control with overlays (ITS#6056)
	Fixed slapd password-hash incorrect limit on arg length (ITS#6139)
	Fixed slapd readonly restrictions (ITS#6109)
	Fixed slapd sending cancelled operations results (ITS#6103)
	Fixed slapd slapi_entry_has_children (ITS#6132)
	Fixed slapd sockets usage on windows (ITS#6039)
	Fixed slapd some abandon and cancel race conditions (ITS#6104)
	Fixed slapd tls context after changes (ITS#6135)
	Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176)
	Fixed slapd-bdb/hdb crashes during delete (ITS#6177)
	Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196)
	Fixed slapd-hdb freeing of already freed entries (ITS#6074)
	Fixed slapd-hdb entryinfo cleanup (ITS#6088)
	Fixed slapd-hdb dncache lockups (ITS#6095)
	Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167)
	Fixed slapd-relay to return failure on failure (ITS#5328)
	Fixed slapd-sql with BACKSQL_ARBITRARY_KEY defined (ITS#6100)
	Fixed slapo-collect collectinfo ordering (ITS#6076)
	Fixed slapo-collect missing equality match rule (ITS#6075)
	Fixed slapo-dds entry expiration (ITS#6169)
	Fixed slapo-perl symbols (ITS#5658)
	Fixed slapo-ppolicy to honor pwdLockout (ITS#6168)
	Fixed slapo-ppolicy to return check modules error message (ITS#6082)
	Fixed slapo-refint refint_repair handling (ITS#6056)
	Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057)
	Fixed slapo-rwm dn passing (ITS#6070)
	Fixed slapo-rwm entry free (ITS#6058)
	Fixed slapo-rwm entry release (ITS#6081)
	Fixed slapo-translucent entry gathering (ITS#6156)
	Fixed tools returning ldif errors (ITS#5892)
	Fixed contrib/smbk5pwd use of private functions (ITS#5535)
	Build Environment
		Added test056-monitor (ITS#5540)
		Added test057-memberof-refint (ITS#5395)
		Fixed winsock detection for windows (ITS#6102, ITS#6078)
		Removed GSSAPI configure option (ITS#6091,ITS#6092,ITS#6093,ITS#5369)
	Documentation
		admin24 relocate configuration examples (ITS#6183)
		admin24 fixed example regex (ITS#6052)
		admin24 removed temporary back-monitor note (ITS#6130)
		admin24 slapd.conf to cn=config conversion process (ITS#6060)
		man page consistency fixes (ITS#6023)
		ldapcompare(1) note -e option (ITS#6107)
		ldapdelete(1) note -e option (ITS#6107)
		ldapmodify(1) note -e option (ITS#6107)
		ldapmodrdn(1) note -e option (ITS#6107)
		ldapsearch(1) output format description (ITS#6146)
		ldapurl(1) note -e option (ITS#6107)
		ldapwhoami(1) note -e option (ITS#6107)
		ldap_result(3) Add RETURN VALUE heading (ITS#6180)
		ldap.conf(5) improve sizelimit/timelimit limits (ITS#6127)
		slapd.access(5) Fix <setstyle> to use expand (ITS#6179)
		slapd.conf(5) document default modulepath (ITS#5829)
		slapd.conf(5) pidfile/argsfile description fix (ITS#5975)
		slapd-config(5) document default modulepath (ITS#5829)
		slapd-config(5) pidfile/argsfile description fix (ITS#5975)
		slapo-constraint(5) clarify URI example (ITS#6118)
		slapo-unique(5) explicitly note rootdn requirement (ITS#6108)
		slapadd(8) note it does indexing (ITS#6160)
 2009-10-29 06:56:10 +00:00
joerg
0268c554bd Remove @dirrm entries from PLISTs 2009-06-14 17:38:38 +00:00
ghen
4caf652dd2 Update OpenLDAP packages to 2.4.16, the new stable release. 
patch-db (for openldap-cloak module) has been included upstream.

OpenLDAP 2.4.16 Release (2009/04/05)
	Fixed libldap GnuTLS with x509v1 CA certs (ITS#5992)
	Fixed libldap GnuTLS with CA chains (ITS#5991)
	Fixed libldap GnuTLS TLSVerifyCilent try (ITS#5981)
	Fixed libldap segfault in checking cert/DN (ITS#5976)
	Fixed libldap peer cert double free (ITS#5849)
	Fixed libldap referral chasing (ITS#5980)
	Fixed slapd backglue with empty DBs (ITS#5986)
	Fixed slapd ctxcsn race condition (ITS#6001)
	Fixed slapd debug message (ITS#6027)
	Fixed slapd redundant module loading (ITS#6030)
	Fixed slapd schema_init freed value (ITS#6036)
	Fixed slapd syncrepl newCookie sync messages (ITS#5972)
	Fixed slapd syncrepl hang during shutdown (ITS#6011)
	Fixed slapd syncrepl too many MMR messages (ITS#6020)
	Fixed slapd syncrepl skipped entries with MMR (ITS#5988)
	Fixed slapd-bdb/hdb cachesize handling (ITS#5860)
	Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006)
	Fixed slapd-bdb/hdb with NULL transactions (ITS#6012)
	Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916)
	Fixed slapd-ldap/meta with broken AD results (ITS#5977)
	Fixed slapd-ldap/meta with invalid attrs again (ITS#5959)
	Fixed slapo-accesslog interaction with ppolicy (ITS#5979)
	Fixed slapo-dynlist conversion to cn=config (ITS#6002)
	Fixed slapo-syncprov newCookie sync messages (ITS#5972)
	Fixed slapd-syncprov too many MMR messages (ITS#6020)
	Fixed slapo-syncprov replica lockout (ITS#5985)
	Fixed slapo-syncprov modtarget tracking (ITS#5999)
	Fixed slapo-syncprov multiple CSN propagation (ITS#5973)
	Fixed slapo-syncprov race condition (ITS#6045)
	Fixed slapo-syncprov sending cookies without CSN (ITS#6024)
	Fixed slapo-syncprov skipped entries with MMR (ITS#5988)
	Fixed tools passphrase free (ITS#6014)
	Build Environment
		Cleaned up alloc/free functions for Windows (ITS#6005)
		Fixed running of autosave files in testsuite (ITS#6026)
	Documentation
		admin24 clarified MMR URI requirements (ITS#5942,ITS#5987)
		Added ldapexop(1) manual page (ITS#5982)
		slapd-ldap/meta(5) added missing TLS options (ITS#5989)
 2009-04-27 07:15:43 +00:00
joerg
2d1ba244e9 Simply and speed up buildlink3.mk files and processing. 
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
 2009-03-20 19:23:50 +00:00
manu
5e12cd756a Upgrade to 2.4.13. Initial patches from ghen@ 
OpenLDAP 2.4.13 Release (2008/11/24)
  Added libldap dereference control support (ITS#5768)
  Fixed libldap parameter checking (ITS#5817)
  Fixed liblutil hex conversion (ITS#5699)
  Fixed liblutil returning undefined data (ITS#5748)
  Fixed libldap error code return (ITS#5762)
  Fixed libldap interaction with GnuTLS CN IP-based matches (ITS#5789)
  Fixed libldap MAXHOSTNAMELEN typo (ITS#5815)
  Fixed libldap Ipv6 detection (ITS#5739)
  Fixed libldap setuid usage with .ldaprc (ITS#4750)
  Fixed slapacl crasher (ITS#5820)
  Fixed slapd acl checks on ADD (ITS#4556,ITS#5723)
  Fixed slapd acl application to newly created backends (ITS#5572)
  Fixed slapd #if/#elif issues in thread includes (ITS#5824)
  Added slapd keyword add_content_acl for add checks (ITS#4556,ITS#5723)
  Fixed slapd concurrent access to connections (ITS#5814)
  Fixed slapd config backend olcLogFile support (ITS#5765)
  Fixed slapd contextCSN pending list (ITS#5709)
  Fixed slapd control criticality (ITS#5785)
  Added slapd dn.this search limits (ITS#5734)
  Fixed slapd error status on shutdown (ITS#5745)
  Fixed slapd filter substring handling (ITS#5803)
  Fixed slapd nameUIDPretty bitstring parsing (ITS#5750)
  Fixed slapd null termination of password (ITS#5794)
  Fixed slapd overlay/database open with real structure (ITS#5724)
  Fixed slapd parsing of read entry control (ITS#5741)
  Added slapd PMI schema (ITS#5695)
  Added slapd private databases in global overlays (ITS#5735,ITS#5736)
  Fixed slapd rdn generation when it isn't specified (ITS#5819)
  Fixed slapd slapd.conf validation to LDIF (ITS#5755)
  Fixed slapd startup scan for CSN (ITS#5640)
  Fixed slapd statslog printing of released entry (ITS#5775)
  Added slapd support for certificateListExactMatch (ITS#5700)
  Fixed slapd syncrepl event loss (ITS#5710)
  Fixed slapd syncrepl MOD of attrs with no EQ rule (ITS#5781)
  Fixed slapd syncrepl rename handling (ITS#5809)
  Fixed slapd syncrepl schema checking (ITS#5798)
  Fixed slapd syncrepl filter leak (ITS#5826)
  Fixed slapd undef promote (ITS#5783,ITS#5795)
  Added slapd What failed? control (ITS#5784)
  Fixed slapd-bdb/hdb invalid db crash (ITS#5698)
  Added slapd-bdb/hdb dbpagesize keyword
  Added slapd-bdb/hdb checksum keyword
  Fixed slapd-bdb/hdb indexing of entryDN (ITS#5790)
  Fixed slapd-bdb/hdb lookup of entryDN with equality (ITS#5791)
  Fixed slapd-bdb/hdb uninitialized bli_flag
  Fixed slapd-ldap snprintf buffer overflow test (ITS#4467)
  Fixed slapd-ldap search stop on minor failure (ITS#5816)
  Fixed slapd-ldif file rename on windows (ITS#5774)
  Fixed slapd-null read controls support (ITS#5757)
  Fixed slapd-sql value length with right index (ITS#5779)
  Fixed slapo-chain/translucent back-config support (ITS#5736)
  Fixed slapo-chain segv with search references (ITS#5742)
  Fixed slapo-collect compile with C89 (ITS#5747)
  Added slapo-constraint support for LDAP URI constraints (ITS#5704)
  Added slapo-constraint support for constraining rename (ITS#5703)
  Added slapo-constraint support for relax control (ITS#5705)
  Added slapo-constraint "set" type (ITS#5702)
  Fixed slapo-constraint filter parsing error (ITS#5751)
  Added slapo-dynlist URI restriction ability (ITS#5761)
  Fixed slapo-ppolicy unaligned BerElement (ITS#5770)
  Fixed slapo-rwm objectClass preservation (ITS#5760)
  Fixed slapo-rwm rewriting undefined filter (ITS#5731)
  Fixed slapo-rwm rewritten DN-valued attrs (ITS#5772)
  Fixed slapo-rwm reusing freed filter (ITS#5732)
  Fixed slapo-rwm entry get (ITS#5773)
  Fixed slapo-syncprov runqueue removal (ITS#5776)
  Fixed slapo-syncprov unreplicatable ops (ITS#5709)
  Fixed slapo-syncprov psearch leak (ITS#5827)
  Added slapo-translucent try local bind when remote fails (ITS#5656)
  Added slapo-translucent support for PasswordModify exop (ITS#5656)
  Fixed tools simple bind without SASL (ITS#5753)
  Fixed tools unaligned BerElement (ITS#5770)
  Fixed contrib nssov crash on empty groups (ITS#5800)
  Fixed contrib nssov crash with nssov-map (ITS#5801)
  Fixed contrib nssov filter and search limits (ITS#5802)
  Added contrib smbk5pwd honor principal expiration (ITS#5766)
  Build Environment
    Added ldapurl command
    Added slapd GSSAPI refactoring (ITS#5369)
    Added slapo-deref overlay (ITS#5768)
  Documentation
    admin24 added olcLimits to example (ITS#5746)
    admin24 consolidated on whitespace (ITS#5759)
    slapd.conf,config(5) subordinate/olcSubordinate keyword (ITS#5788)
    slapd.conf(5) fixed disable keyword for limits (ITS#5821)
    slapo-dds(5) manageDIT to relax (ITS#5780)
    slapo-dds(5) rootdn requirement added (ITS#5811)
    slapo-syncprov(5) sessionlog clarification (ITS#5806)

OpenLDAP 2.4.12 Release (2008/10/12)
  Fixed libldap ldap_utf8_strchar arguments (ITS#5720)
  Fixed libldap TLS_CRLFILE (ITS#5677)
  Fixed liblutil executables on Windows (ITS#5604)
  Fixed liblutil microsecond overflows on Windows (ITS#5668)
  Fixed librewrite memory handling (ITS#5691)
  Fixed slapd aci performance (ITS#5636)
  Fixed slapd aci's with sets (ITS#5627)
  Fixed slapd attribute leak (ITS#5683)
  Fixed slapd config backend with index greater than sibs (ITS#5684)
  Fixed slapd custom attribute inheritance (ITS#5642)
  Fixed slapd dynacl mask handling (ITS#5637)
  Fixed slapd firstComponentMatch normalization (ITS#5634)
  Added slapd caseIgnoreListMatch (ITS#5608)
  Fixed slapd connection events enabled twice (ITS#5725)
  Fixed slapd memory handling (ITS#5691)
  Fixed slapd objectClass canonicalization (ITS#5681)
  Fixed slapd objectClass termination (ITS#5682)
  Fixed slapd overlay control registration (ITS#5649)
  Fixed slapd runqueue checking (ITS#5726)
  Fixed slapd spurious text output (ITS#5688)
  Fixed slapd socket closing on Windows (ITS#5606)
  Fixed slapd sortvals comparison (ITS#5578)
  Added slapd substitute syntax support (ITS#5663)
  Fixed slapd syncrepl contextCSN detection (ITS#5675)
  Fixed slapd syncrepl error logging (ITS#5618)
  Fixed slapd syncrepl runqueue interval (ITS#5719)
  Fixed slapd-bdb entry return if attr not present (ITS#5650)
  Fixed slapd-bdb olcDbMode syntax (ITS#5713)
  Fixed slapd-bdb/hdb release search entries earlier (ITS#5728,ITS#5730)
  Fixed slapd-bdb/hdb subtree search with empty suffix (ITS#5729)
  Fixed slapd-dnssrv memory handling (ITS#5691)
  Fixed slapd-ldap,slapd-meta invalid filter behavior (ITS#5614)
  Fixed slapd-meta memory handling (ITS#5691)
  Fixed slapd-meta objectClass filtering (ITS#5647)
  Fixed slapd-meta quarantine behavior (ITS#5592)
  Added slapd-ndb experimental backend
  Fixed slapd-relay initialization (ITS#5643)
  Fixed slapd-sql freeing of connection (ITS#5607)
  Fixed slapd-sql fault on NULL fields (ITS#5653)
  Fixed slapo-accesslog entryCSN generation on purge (ITS#5694)
  Fixed slapo-constraint string termination (ITS#5609)
  Fixed slapo-dynlist expansion with mapped attributes (ITS#5717)
  Fixed slapo-memberof internal operations DN (ITS#5622)
  Fixed slapo-pcache attrset crash (ITS#5665)
  Fixed slapo-pcache caching with invalid schema (ITS#5680)
  Fixed slapo-ppolicy control return on password modify exop (ITS#5711)
  Fixed slapo-rwm callback cleanup (ITS#5601,ITS#5687)
  Fixed slapo-rwm attr mapping and merging (ITS#5624)
  Fixed slapo-rwm objectClass filtering (ITS#5647)
  Fixed slapo-translucent back-config support (ITS#5689)
  Fixed slapo-translucent filter usage on merged entries (ITS#5679)
  Fixed slapo-unique filter validation (ITS#5581)
  Fixed slapo-unique suffix testing (ITS#5641)
  Build Environment
    Fixed ODBC library detection (ITS#5602)
    Removed pre-BerkeleyDB 4.4 support
    Added BerkeleyDB 4.7 support (ITS#5523)
    Included patch for BerkeleyDB 4.7.25 (build/db.4.7.25.patch)
    Added slapo-collect overlay with enhancements(ITS#5659)
  Documentation
    Added slapd-ldap(5), slapd-meta(5) noundeffilter (ITS#5614)
    Fixed slapd-ldap(5), slapd-meta(5), slapo-pcache(5)
	  schema requirements (ITS#5680)
    Added slapo-collect(5) man page (ITS#5706)
    Added slapo-pcache(5) proxycheckcacheability option (ITS#5680)
    Added slapo-retcode(5) retcode.conf location (ITS#5633)
    admin24 dontusecopy control update (ITS#5718)
    admin24 guide updates (ITS#5616)
    admin24 octetString fix (ITS#5670)
 2009-01-24 21:10:48 +00:00
ahoka
522deefd68 Implement builtin detection for openldap client. 
Tested on NetBSD 4.99.72.
 2008-10-12 20:49:19 +00:00
ghen
f0d3b7ec89 Update openldap packages to 2.4.11. 
OpenLDAP 2.4.11 Release (2008/07/16)
	Fixed liblber ber_get_next length decoding (ITS#5580)
	Added libldap assertion control (ITS#5560)
	Fixed libldap GnuTLS CRL result handling (ITS#5577)
	Fixed libldap GnuTLS SSF computation (ITS#5585)
	Fixed liblutil missing return code (ITS#5615)
	Fixed slapd cert serial number parsing (ITS#5588)
	Fixed slapd check for structural_class failures (ITS#5540)
	Fixed slapd config backend renumbering (ITS#5571)
	Fixed slapd configContext OID (ITS#5383)
	Fixed slapd crash with no listeners (ITS#5563)
	Fixed slapd equality rules for olcRootDN/olcSchemaDN (ITS#5540)
	Fixed slapd sets memory leak (ITS#5557)
	Fixed slapd sortvals binary search (ITS#5578)
	Fixed slapd syncrepl updates with multiple masters (ITS#5597)
	Fixed slapd syncrepl superior objectClass delete/add (ITS#5600)
	Fixed slapd syncrepl/slapo-syncprov contextCSN updates as internal ops (ITS#5596)
	Added slapd-ldap/slapd-meta option to filter out search references (ITS#5593)
	Fixed slapd-meta link to slapd-ldap (ITS#5355)
	Fixed slapd-sock, back-shell buffer count (ITS#5558)
	Fixed slapo-dynlist dg attrs lookup (ITS#5583)
	Fixed slapo-dynlist entry release (ITS#5135)
	Fixed slapo-memberof replace handling (ITS#5584)
	Added slapo-nssov contrib module
	Fixed slapo-pcache handling of negative search caches (ITS#5546)
	Fixed slapo-ppolicy DNs with whitespaces (ITS#5552)
	Fixed slapo-ppolicy modify with internal ops (ITS#5569)
	Fixed slapo-syncprov ACL evaluation (ITS#5548)
	Fixed slapo-syncprov crash with delcsn (ITS#5589)
	Fixed slapo-syncprov full reload (ITS#5564)
	Fixed slapo-syncprov missing olcSpReloadHint attr(ITS#5591)
	Fixed slapo-unique filter normalization (ITS#5581)
	Fixed contrib smbk5pwd terminator (ITS#5575)
	Build Environment
		Fixed test048 to skip if threads is not available (ITS#5529)
	Documentation
		Added slapo-pcache(5) sizelimit caching (ITS#5559)
		Added slapd-access(5) add and delete privs (ITS#5566)
		admin24 GnuTLS documentation (ITS#5554)

OpenLDAP 2.4.10 Release (2008/06/08)
	Fixed libldap file descriptor leak with SELinux (ITS#5507)
	Fixed libldap ld_defconn cleanup if it was freed (ITS#5518, ITS#5525)
	Fixed libldap msgid handling (ITS#5318)
	Fixed libldap t61 infinite loop (ITS#5542)
	Fixed libldap_r missing stubs (ITS#5519)
	Fixed slapd initialization of sr_msgid, rs->sr_tag (ITS#5461)
	Fixed slapd missing termination of integerFilter keys (ITS#5503)
	Fixed slapd multiple attrs in URI (ITS#5516)
	Fixed slapd sasl_ssf retrieval (ITS#5403)
	Fixed slapd socket assert (ITS#5489)
	Fixed slapd syncrepl cookie (ITS#5536)
	Fixed slapd-bdb/hdb MAXPATHLEN (ITS#5531)
	Fixed slapd-bdb indexing in single ADD/MOD (ITS#5521)
	Fixed slapd-ldap entry_get() op-dependent behavior (ITS#5513)
	Fixed slapd-meta quarantine crasher (ITS#5522)
	Fixed slapo-refint to allow setting modifiers name (ITS#5505)
	Fixed slapo-syncprov contextCSN passing on syncprov consumers (ITS#5488)
	Fixed slapo-syncprov csn update with delta-syncrepl (ITS#5493)
	Fixed slapo-syncprov op2.o_extra reset (ITS#5501, #5506)
	Fixed slapo-syncprov searching wrong backend (ITS#5487)
	Fixed slapo-syncprov sending ops without queued CSNs (ITS#5465)
	Fixed slapo-syncprov max csn search on startup (ITS#5537)
	Fixed slapo-unique config structs (ITS#5526)
	Fixed slapo-unique filter terminator (ITS#5511)
	Documentation
		Add search privileges documentation (ITS#5512)
		admin24 security document updates (ITS#5524)
 2008-07-19 21:08:42 +00:00
tonnerre
18b8636b81 Add patch to fix a libBER Denial of Service in OpenLDAP. (CVE-2008-2952) 2008-07-03 22:14:50 +00:00
ghen
899d74c194 Update OpenLDAP packages to 2.4.8 (bugfixes). 
OpenLDAP 2.4.8 Release (2008/02/19)
	Fixed ldapmodify verbose logging (ITS#5247)
	Fixed ldapdelete with sizelimit (ITS#5294)
	Fixed ldapdelete with subentries control (ITS#5293)
	Fixed ldapsearch exit code init (ITS#5317)
	Fixed libldap extended decoding (ITS#5304)
	Fixed libldap filter abort (ITS#5300)
	Fixed libldap ldap_parse_sasl_bind_result (ITS#5263)
	Fixed libldap result codes for open (ITS#5338)
	Fixed libldap search timeout crash (ITS#5291)
	Fixed libldap paged results crash (ITS#5315)
	Fixed libldap cipher suite with GnuTLS (ITS#5341)
	Fixed slapd support for 2.1 CSN (ITS#5348)
	Fixed slapd include handling (ITS#5276)
	Fixed slapd modrdn check for valid new DN (ITS#5344)
	Fixed slapd multi-step SASL binds (ITS#5298)
	Fixed slapd non-atomic signal variables (ITS#5248)
	Fixed slapd overlay ordering when moving to slapd.d (ITS#5284)
	Fixed slapd NULL printf (ITS#5264)
	Fixed slapd NULL set values (ITS#5286)
	Fixed slapd segv with SASL/OTP (ITS#5259)
	Fixed slapd timestamp race condition (ITS#5370)
	Fixed slapd cn=config crash on delete (ITS#5343)
	Fixed slapd cn=config global acls (ITS#5352)
	Fixed slapd truncated cookie (ITS#5362)
	Fixed slapd sasl with CLEARTEXT (ITS#5368)
	Fixed slapd str2entry with no attrs (ITS#5308)
	Fixed slapd TLSVerifyClient default (ITS#5360)
	Fixed slapd HAVE_TLS dependency (ITS#5379)
	Fixed slapd delta-syncrepl refresh mode (ITS#5376)
	Fixed slapd ACL sets URI attrs (ITS#5384)
	Fixed slapd invalid entryUUID filter (ITS#5386)
	Fixed slapd-bdb idlcache on adds (ITS#5086)
	Fixed slapd-bdb crash with modrdn (ITS#5358)
	Fixed slapd-bdb segv with bdb4.6 (ITS#5322)
	Fixed slapd-bdb modrdn to same dn (ITS#5319)
	Fixed slapd-bdb MMR (ITS#5332)
	Added slapd-bdb/slapd-hdb DB encryption (ITS#5359)
	Fixed slapd-ldif delete (ITS#5265)
	Fixed slapd-meta link to slapd-ldap (ITS#5355)
	Fixed slapd-meta setting of sm_nvalues (ITS#5375)
	Fixed slapd-monitor crash (ITS#5311)
	Fixed slapd-relay compare (ITS#4937)
	Added slapd-sock (ITS#4094)
	Fixed slapo-accesslog cleanup on successful response (ITS#5374)
	Added slapo-autogroup contrib module (ITS#5145)
	Added slapo-constraint cross-attribute constraints (ITS#4987)
	Fixed slapo-memberof objectClass inheritance (ITS#5299)
	Added slapo-memberof global overlay support (ITS#5301)
	Fixed slapo-memberof leak (ITS#5302)
	Fixed slapo-ppolicy only password check with policy (ITS#5285)
	Fixed slapo-ppolicy del/replace password without new one (ITS#5373)
	Fixed slapo-syncprov hang on checkpoint (ITS#5261)
	Added slapo-translucent local searching (ITS#5283)
	Removed lint
	Build Environment
		Fixed libldap_r threaded library linking (ITS#4982)
		Fixed libldap use of %n (ITS#5324)
		Fixed test047 to skip if rwm is not available (ITS#5292)
	Documentation
		DB_CONFIG.example URL wrong in comments (ITS#5288)
		Add cn=config example for auditlog (ITS#5245)
		ldapmodify(1) clarification for RFC2849 (ITS#5312)
 2008-02-24 20:15:05 +00:00
tnn
ad6ceadd25 Per the process outlined in revbump(1), perform a recursive revbump 
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@
 2008-01-18 05:06:18 +00:00
ghen
fb30bb7abe Update openldap packages to OpenLDAP 2.4.7 (forced update for db4-4.6.x 
support, reported via PR pkg/37745 ).

OpenLDAP 2.4.x brings a lot of new features, including multi-master support,
dynamic configuration and schema changes, automatic reverse group membership,
significant performance improvements, etc.  One of the most noticeable changes
for administrators though is the removal if the slurpd daemon (in favour of
the sync replication mechanism).  Users of slurpd replication should migrate
to sync replication before upgrading to OpenLDAP 2.4.x.
 2008-01-13 17:15:15 +00:00
ghen
861a9165d3 DESTDIR support for openldap. 2008-01-04 11:42:29 +00:00
rillig
7f125459d8 Removed some code duplication from the buildlink3 files by using the new 
pkg-build-options.mk procedure.
 2007-05-30 08:54:28 +00:00
ghen
a0b39d3c81 Update openldap packages to 2.3.31 (new stable release). 
OpenLDAP 2.3.31 Release
	Fixed libldap unchased referral leak (ITS#4545)
	Fixed libldap tls callback (ITS#4723)
	Fixed liblutil ldif file: URL parsing
	Fixed slapd syncrepl logging (ITS#4755)
	Fixed slapd group ACL caching when proxyAuthz'ing (ITS#4760)
	Fixed slapd "group" authz default member parsing (ITS#4761)
	Fixed slapd uninitialized sd_actives array (ITS#4765)
	Fixed slapd DN parsing in bindconf_parse (ITS#4766)
	Fixed slapd conditional in macro argument (ITS#4769)
	Fixed slapd send_search_reference should propagate errors
	Fixed slapd memleak on failed bind (ITS#4771)
	Fixed slapd schema preparation case to match RFCs (ITS#4764)
	Fixed slapd kbind buffer overflow condition (ITS#4775)
	Fixed slapd connections_shutdown assert
	Fixed slapd glue parent/sub db overlay nesting (ITS#4615)
	Fixed slapd-bdb/hdb/ldbm slap_add_opattrs error checking
	Fixed slapd-bdb/hdb setting up tool threads when no indices specified
	Fixed slapd-perl interpreter context (ITS#4751)
	Fixed slapo-syncprov to complain if defined outside of a database
	Fixed test021 modify ops to be syntactically correct
	Fixed contrib smbk5pwd, check kadm5 init result
	Documentation
		Fixed typo in slapo-retcode(5) man page (ITS#4753)
		Fixed syncrepl searchbase note (ITS#4540)
		Added syncrepl starttls in the admin guide (ITS#4510)
		Fixed reference to deprecated function in ldap_parse_result(3)

OpenLDAP 2.3.30 Release
	Fixed slapd authzTo/authzFrom URL matching (ITS#4744)
	Fixed slapd syncrepl consumer memory leaks (ITS#4746)
	Fixed slapd-hdb livelock (ITS#4738)
	Fixed slapo-ppolicy external quality check (ITS#4741)
	Documentation
		Fixed ldapsearch(1) man page acknowledgement (ITS#4743)

OpenLDAP 2.3.29 Release
	Fixed liblber/libldap error codes on Windows (ITS#4606)
	Fixed libldap string length assert (ITS#4740)
	Fixed liblunicode case mapping (ITS#4724)
	Fixed slapd ldapi:// socket permissions (ITS#4709)
	Fixed slapd c_writewaiters assert (ITS#4696,4736)
	Fixed slapo-accesslog purge contextCSN bug (ITS#4704)
	Fixed slapo-accesslog modify/replace bug (ITS#4728)
	Fixed slapo-dynlist leaks (ITS#4664)
	Fixed slapo-ppolicy leaks (ITS#4665)
	Fixed slapo-syncprov deadlock (ITS#4720)
	Build environment
		Added selection of ODBC (ITS#4735)
	Documentation
		Fixed slapd-ldap/meta(5) rebind-as-user usage (ITS#4715)
		Fixed slapd-ldap/meta(5) missing network-timeout (ITS#4718)

OpenLDAP 2.3.28 Release
	Fixed libldap ldap.conf max line length (ITS#4669)
	Fixed libldap use keepalive for syncrepl (ITS#4708)
	Fixed liblutil LDIF CR/LF parsing bug (ITS#4635)
	Fixed librewrite LDAP map parsing bug
	Fixed librewrite map double free bug
	Added ldapsearch bad filter pattern check (ITS#4647)
	Fixed slapd global access controls initialization (ITS#4654)
	Fixed slapd setting c_sasl_bindop only on SASL binds
	Fixed slapd max line length issue (ITS#4651)
	Fixed slapd return code not being propagated (ITS#4565)
	Fixed slapd integerBitAndMatch (ITS#4672)
	Fixed slapd syncrepl modrdn new superior (ITS#4695)
	Fixed slapd-ldap retry with idassert (ITS#4686)
	Fixed slapd-meta DN massage error code handling (ITS#4711)
	Fixed slapd-monitor locking with scope "subordinate" (ITS#4668)
	Fixed slapd-perl deletes (ITS#2612)
	Fixed slapd-perl backend initialization (ITS#4358)
	Fixed slapd-perl finding interpreter inside a thread (ITS#4358)
	Fixed slapo-ppolicy pwdChangedTime behavior (ITS#4692)
	Fixed slapo-translucent ldapmodify crash (ITS#4673)
	Documentation
		Updated ldapsearch(1) options (ITS#4371,4526,4647)
		Fixed slapd.access(5) non-optional dn= error (ITS#4522)
 2007-01-02 11:29:15 +00:00
joerg
5e43280b23 Replace mk/bsd.prefs.mk includes with bsd.fast.prefs.mk includes. 
The redundant parsing of bsd.prefs.mk is mostly avoided now and
parse time e.g. for x11/kdebase3 gets reduced by up to 10%.
 2006-12-12 21:52:34 +00:00
ghen
f260454178 Add a fix for CVE-2006-5779 as openldap/patches/patch-ap, from OpenLDAP CVS. 
Bump PKGREVISION for openldap-client and openldap-server.
 2006-11-27 12:44:36 +00:00
jlam
c16221a4db Change the format of BUILDLINK_ORDER to contain depth information as well, 
and add a new helper target and script, "show-buildlink3", that outputs
a listing of the buildlink3.mk files included as well as the depth at
which they are included.

For example, "make show-buildlink3" in fonts/Xft2 displays:

	zlib
	fontconfig
	    iconv
	    zlib
	    freetype2
	    expat
	freetype2
	Xrender
	    renderproto
 2006-07-08 23:10:35 +00:00
jlam
9430e49307 Track information in a new variable BUILDLINK_ORDER that informs us 
of the order in which buildlink3.mk files are (recursively) included
by a package Makefile.
 2006-07-08 22:38:58 +00:00
joerg
d5d04d0385 Include options.mk in -client and -server, but not the common 
Makefile.
 2006-06-02 22:02:33 +00:00
ghen
aa33a0e80d Import databases/openldap-client, formerly a part of databases/openldap but now 
split off.  This package contains only the client tools and libraries, and the
manpages.

LDAP-based applications should depend on this package, not databases/openldap
(anymore).
 2006-05-31 18:18:34 +00:00