GitLab

Test for filtered dynamic attrs, memberOf, filtered memberOf

Delete unused code, add comments

1) allow filtering on dynamic attribute values
2) populate an optionally configured memberOf attribute

test044 script still needs to be extended to test these
enhancements. We need to define an interim attributeType
for testing memberOf functionality.

Long term, overlay callbacks should not be running in tool mode at all.

Now handles +/-8740 years centered around year 0000 (1BCE)

And additional debug code for tracking errant close()s

If a txn is aborted in id2entry_put, attribute index mappings
added during that txn must also be dropped from memory.

Since GnuTLS moved to implicit initialization on library load, calling
this function deinitializes GnuTLS and then re-initializes it.

When GnuTLS uses /dev/urandom as an entropy source (getrandom() not
available, or older versions of GnuTLS), and the application closed all
file descriptors at startup, this could result in GnuTLS opening
/dev/urandom over one of the application's file descriptors when
re-initialized.

Additionally, the custom mutex functions are never reset, so if libldap
is unloaded (for example via dlclose()) after calling this, its code may
be unmapped and the application could crash when GnuTLS calls the mutex
functions.

On typical systems, GnuTLS system mutexes are probably the same as what
libldap uses anyway.

Ryan Tandy authored Aug 26, 2019 and Ondřej Kuzník committed Aug 27, 2019

Ensure gnutls_digest_get_id() is available

mdb_load wasn't properly inserting escaped backslashes into the data.
mdb_dump wasn't escaping backslashes when generating printable output.