Howard Chu authored 4 years ago and Quanah Gibson-Mount committed 4 years ago

Always retry ldap_int_tls_connect() if it didn't complete,
regardless of blocking or non-blocking socket. Code from
ITS#7428 was wrong to only retry for async.

Fixes potential segfault in ldapsearch

Ryan Tandy authored 5 years ago and Quanah Gibson-Mount committed 5 years ago

Since GnuTLS moved to implicit initialization on library load, calling
this function deinitializes GnuTLS and then re-initializes it.

When GnuTLS uses /dev/urandom as an entropy source (getrandom() not
available, or older versions of GnuTLS), and the application closed all
file descriptors at startup, this could result in GnuTLS opening
/dev/urandom over one of the application's file descriptors when
re-initialized.

Additionally, the custom mutex functions are never reset, so if libldap
is unloaded (for example via dlclose()) after calling this, its code may
be unmapped and the application could crash when GnuTLS calls the mutex
functions.

On typical systems, GnuTLS system mutexes are probably the same as what
libldap uses anyway.

mdb_load wasn't properly inserting escaped backslashes into the data.
mdb_dump wasn't escaping backslashes when generating printable output.

Adjust patch for ITS#7585 as Windows does not have LDAPI support.

This reverts commit 33945aeb.

Depends on custom glibc from RedHat

Jame Gerwe authored 7 years ago and Quanah Gibson-Mount committed 5 years ago

Fix building OpenLDAP with -DLDAP_CONNECTIONLESS so that ldap_is_ldapc_url function is defined

Zebediah Figura authored 8 years ago and Quanah Gibson-Mount committed 5 years ago

ITS#8508 - Allow ucgendat.c to recognize title-case characters even if they do not have lower-case equivalents

I, Zebediah Figura, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

Côme Chilliet authored 7 years ago and Quanah Gibson-Mount committed 5 years ago

ldap_create_assertion_control_value was returning ld->ld_errno
 upon success without reseting it to LDAP_SUCCESS first

Patrick Monnerat authored 7 years ago and Quanah Gibson-Mount committed 5 years ago

This can be done by setting them to an empty string value.

Sumit Bose authored 11 years ago and Quanah Gibson-Mount committed 5 years ago

Was using the ldapi socket path as a hostname

Kris Zyp authored 5 years ago and Howard Chu committed 5 years ago

Broken in ITS#8756