All checksums have been double-checked against existing RMD160 and
SHA512 hashes
The following distfiles could not be fetched (some may be only fetched
conditionally):
./databases/cstore/distinfo D6.data.ros.gz
./databases/cstore/distinfo cstore0.2.tar.gz
./databases/cstore/distinfo data4.tar.gz
OpenLDAP 2.5.8 Release (2021/10/11)
Fixed libldap ldap_int_tls_connect: isdigit() requires unsigned char
Fixed libldap memory leak in ldap_get_option LDAP_OPT_X_TLS_PEERCERT
Fixed slapd to allow normalized values for namingContexts in cn=monitor
Fixed slapd to normalize the suffix in rootDSE
Fixed slapd slapadd to avoid destroying configDB prematurely
Fixed slapd to not spam logs with lastbind information
Fixed slapd slaptest migration to correctly set olcTSLVerifyClient
Fixed slapd-mdb multival delete handling
Fixed slapd-sql ldap_entry_objectclass table for mariadb/mysql
Fixed slapd-wt multiple issues
Fixed slapd-wt to close cache db correctly
Fixed slapo-ppolicy to restore OpenLDAP 2.4 compatibilty
Fixed slapo-syncprov to free uuid list when finished replaying sessionlog
Build
Fixed libldap result.c compilation on musl systems
Fixed slapd duplicate definition of peerbv
Fixed test suite with memberof modular builds
Contrib
Added man page for ppm contrib module
Fix crash when pwdCheckModuleArg is not defined for ppm
Documentation
Fixed guide download link for heimdal
Fixed guide documentation for TLSECName
Fixed guide documentation missing tags
Fixed guide loadbalancer typo
Fixed guide synprov-nopresent redundant text
Fixed guide various typos and fix config alignment
Removed ppolicy.schema from servers/slapd/schema/README
Fixed slapd.conf(5)/slapd-config(5) to document default for database monitoring
Fixed slapd-meta(5)/slapd-asyncmeta(5) verbiage for try-propagate
Fixed slapo-syncprov(5) to note entryCSN indexing is highly recommended
OpenLDAP 2.5.7 Release (2021/08/18)
Fixed lloadd client state tracking
Fixed slapd bconfig to canonicalize structuralObjectclass
Fixed slapd-ldif duplicate controls response
Fixed slapd-mdb multival crash when attribute is missing an equality matchingrule
Fixed slapd-mdb compatibility with OpenLDAP 2.4 MDB databases
Fixed slapd-mdb idlexp maximum size handling
Fixed slapd-monitor number of ops executing with asynchronous backends
Fixed slapd-sql to add support for ppolicy attributes
Fixed slapd-sql to close transactions after bind and search
Fixed slapo-accesslog to make reqMod optional
Fixed slapo-ppolicy logging when pwdChangedTime attribute is not present
Documentation
slapd-mdb(5) note max idlexp size is 30, not 31
slapo-accesslog(5) note that reqMod is optional
Add ldapvc(1) man page
Add guide section on load balancer
Updated guide to document multiprovider as replacement for mirrormode
Updated guide to clarify slapd-mdb upgrade requirements
Updated guide to document removal of deprecated options from client tools
OpenLDAP 2.5.6 Release (2021/07/27)
Fixed libldap buffer overflow
Fixed libldap missing mutex unlock on connection alloc failure
Fixed lloadd cn=config olcBkLloadClientMaxPending setting
Fixed slapd multiple config defaults
Fixed slapd ipv6 addresses to work with tcp wrappers
Fixed slapo-syncprov delete of nonexistent sessionlog
Build
Fixed library symbol versioning on Solaris
Fixed compile warning in libldap/tpool.c
Fixed compile warning in libldap/tls_o.c
Contrib
Fixed ppm module for sysconfdir
Documentation
Updated guide to document multival, idlexp, and maxentrysize
OpenLDAP 2.5.5 Release (2021/06/03)
Added libldap LDAP_OPT_TCP_USER_TIMEOUT support
Added lloadd tcp-user-timeout support
Added slapd-asyncmeta tcp-user-timeout support
Added slapd-ldap tcp-user-timeout support
Added slapd-meta tcp-user-timeout support
Fixed incorrect control OIDs for AuthZ Identity
Fixed libldap typo in util-int.c
Fixed libldap double free of LDAP_OPT_DEFBASE
Fixed libldap better TLS1.3 cipher suite handling
Fixed lloadd multiple issues
Fixed slapd slap_op_time to avoid duplicates across restarts
Fixed slapd typo in daemon.c
Fixed slapd slapi compilation
Fixed slapd to handle empty DN in extended filters
Fixed slapd syncrepl searches with empty base
Fixed slapd syncrepl refresh on startup
Fixed slapd abort due to typo
Fixed slapd-asyncmeta quarantine handling
Fixed slapd-asyncmeta to have a default operations timeout
Fixed slapd-ldap quarantine handling
Fixed slapd-mdb deletion of context entry
Fixed slapd-mdb off-by-one affecting search scope
Fixed slapd-meta quarantine handling
Fixed slapo-accesslog to record reqNewDN for modRDN ops
Fixed slapo-pcache locking during expiration
Build
Fixed slappw-argon2 module installation
Contrib
Update ldapc++/ldaptcl to use configure.ac
Documentation
ldap_first_attribute(3) - Document ldap_get_attribute_ber
ldap_modify(3) - Delete non-existent mod_next parameter
OpenLDAP 2.5.4 Release (2021/04/29)
Initial release for "general use".
OpenLDAP 2.4.58
Fixed slapd validity checks for issuerAndThisUpdateCheck
Fixed slapd to alloc new conn struct after freeing old one
Fixed slapd syncrepl to check all contextCSNs
Fixed slapd-bdb lockdetect config
OpenLDAP 2.4.57 Release (2021/01/18)
Fixed ldapexop to use correct return code
Fixed slapd to remove asserts in UUIDNormalize
Fixed slapd to remove assert in csnValidate
Fixed slapd validity checks for issuerAndThisUpdateCheck
Fixed slapd validity checks for serialNumberAndIssuerCheck
Fixed slapd AVA sort with invalid RDN
Fixed slapd ldap_X509dn2bv to check for invalid BER after RDN count
Fixed slapd saslauthz to remove asserts in validation
Fixed slapd saslauthz to use slap_sl_free on normalized DN
Fixed slapd saslauthz SEGV in slap_parse_user
Fixed slapd modrdn memory leak
Fixed slapd double-free in vrfilter
Fixed slapd cancel operation to correctly terminate
Fixed slapd-ldap fix binds on retry with closed connection
Fixed slapo-syncprov to ignore duplicate sessionlog entries
OpenLDAP 2.4.56
Fixed slapd to remove assert in certificateListValidate
Fixed slapd to remove assert in csnNormalize23
Fixed slapd to better parse ldapi listener URIs
OpenLDAP 2.4.54
Fixed slapd delta-syncrepl to ignore delete ops on deleted entry
Fixed slapd delta-syncrepl to be fully serialized
Fixed slapd delta-syncrepl MOD on zero-length context entry
Fixed slapd sessionlog to use a TAVL tree
Fixed slapd syncrepl to be fully serialized
Fixed slapd syncrepl to call check_syncprov on fresh consumer
Fixed slapd syncrepl to propagate errors from overlay_entry_get_ov
Fixed slapd syncrepl to not create empty ADD ops
Fixed slapd syncrepl replace usage on single valued attrs
Fixed slapd-monitor fix monitor_back_register_database for empty suffix DB
Fixed slapo-accesslog normalizer for reqStart
Fixed slapo-accesslog to not generate new contextCSN on purge
Fixed slapo-syncprov contextCSN generation with empty suffix
OpenLDAP 2.4.48
Added libldap OpenSSL Elliptic Curve support
Added libldap Expose OpenLDAP specific interfaces via openldap.h
Added slapd-monitor support for slapd-mdb
Fixed liblber leaks
Fixed liblber with partial flush
Fixed libldap ASYNC TLS so it works
Fixed libldap ASYNC connections with Solaris 10
Fixed libldap with SASL_NOCANON=on and ldapi connections
Fixed libldap to be able to unset syncrepl TLS options
Fixed libldap race condition in ldap_int_initialize
Fixed libldap return code in ldap_create_assertion_control_value
Fixed libldap to correctly disable IPv6 when configured to do so
Fixed libldap to correctly close TLS connection
Fixed libldap_r handling of deprecated OpenSSL function
Fixed liblunicode case correspondance
Fixed slapd with an idletimeout of less than four seconds
Fixed slapd config parser variable for Windows64
Fixed slapd syncrepl fallback handling with delta-syncrepl
Fixed slapd telephoneNumberNormalize, cert DN validation
Fixed slapd syncrepl for relax with delta-syncrepl
Fixed slapd to restrict rootDN proxyauthz to its own databases
Fixed slapd to initialize SASL SSF per connection
Fixed slapo-accesslog with SLAP_MOD_SOFT modifications
Fixed slapd-ldap starttls connections timeout behavior
Fixed slapd-ldap segfault when entry result doesn't match filter
Fixed slapd-meta conversion from slapd.conf to cn=config
Fixed slapd-meta assertion when network interface goes down
Fixed slapd-mdb fix bitshift integer overflow
Fixed slapd-mdb index cleanup with cn=config
Fixed slapd-mdb to improve performance with alias deref
Fixed slapo-accesslog possible assert with exops
Fixed slapo-chain to correctly reject multiple chaining URIs
Fixed slapo-chain conversion from slapd.conf to cn=config
Fixed slapo-memberof conversion from slapd.conf to cn=config
Fixed slapo-memberof for group name change to itself
Fixed slapo-ppolicy behavior when pwdInHistory is changed
Fixed slapo-rwm to not free original filter
Fixed slapo-syncprov contextCSN generation
Build Environment
Fixed slapd to only link to BDB libraries with static build
Fixed libldap implicit declaration with LDAP_CONNECTIONLESS
Fixed libldap double inclusion of limits.h in cyrus.c
Documentation
General - Fixed minor typos
admin24 - Miscellaneous updates promoting mdb and fixing examples
slapd.access(5) - Note MDB is the primary backend
slapd.backends(5) - Note MDB is the recommended backend
slapd-ldap(5) - Document starttls parameter
Contrib
Added slapo-lastbind capability to forward authTimestamp updates
LMDB 0.9.23:
Fix loose pages in dirty list
Fix mdb_load flag init
Fix mdb_env_close in forked process
Documentation
mdb_cursor_del doesn't invalidate cursor
GET_MULTIPLE etc don't change passed in key
Problems found with existing distfiles:
distfiles/D6.data.ros.gz
distfiles/cstore0.2.tar.gz
distfiles/data4.tar.gz
distfiles/sphinx-2.2.7-release.tar.gz
No changes made to the cstore or mariadb55-client distinfo files.
Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden). All existing
SHA1 digests retained for now as an audit trail.
