SATOH Fumiyasu authored May 31, 2012 and Quanah Gibson-Mount committed May 31, 2012

Add "-o module-path=<pathspec>" and "-o module-load=<filename>"
options to load a dynamically loadable password hash module
(e.g., slapd-sha2).

Jan Vcelak authored May 18, 2012 and Quanah Gibson-Mount committed May 30, 2012

Prior to this patch, if TLS_CACERTDIR was set to Mozilla NSS certificate
database and TLS_CACERT was set to a PEM bundle file with CA
certificates, the PEM file content was not loaded.

With this patch and the same settings, OpenLDAP can verify certificates
which are signed by CAs stored both in certdb and PEM bundle file.

Frederik Deweerdt authored May 11, 2012 and Quanah Gibson-Mount committed May 30, 2012

Not protecting the accesses to ldap_int_hostname could lead to a double
free.

Howard Chu authored May 29, 2012 and Quanah Gibson-Mount committed May 30, 2012

If slapadd'ing a config DB and tool-threads is set in the config LDIF,
the checks for slap_tool_thread_max will be invalid.

ITS#7278

SATOH Fumiyasu authored May 24, 2012 and Quanah Gibson-Mount committed May 30, 2012

Support {SSHA256}, {SSHA384} and {SSHA512} hash schemes

SATOH Fumiyasu authored May 10, 2012 and Quanah Gibson-Mount committed May 30, 2012

Remove sha*_hex_hash() and replace chk_sha*() with
libraries/liblutil/passwd.c:chk_sha1() implementation to
avoid a race condition.

SATOH Fumiyasu authored May 08, 2012 and Quanah Gibson-Mount committed May 09, 2012

contrib/slapd-modules/passwd/sha2/sha2.[ch] need portable.h and
some macros to be portable source.

contrib/slapd-modules/passwd/sha2/slapd-sha2.c:hash_sha*() must
declare "struct berval digest" before a statement for K&R C,
and must replace C++ "// foo"-style comments with C style.

Prefix ID, NOID, ID2, IDL, ID2L with 'MDB_'.
Also drop bdb from file description.

Put one call in #if MDB_DEBUG. Move DPRINTF(Using meta page #) there.