Brett Sheffield authored Feb 20, 2017 and Ondřej Kuzník committed Jun 23, 2020

ldif_open_mem() is the fmemopen(3) equivalent of ldif_open() which opens
an ldif steam from memory, rather than from a file.

Sergio Gelato authored Dec 06, 2015 and Quanah Gibson-Mount committed Jun 22, 2020

The fallback to a straight Fisher-Yates shuffle needs to occur whenever the
sum of the *remaining* weights is zero, or else the remaining records will
not be reordered. Testing only once at the beginning covers the case when
all weights are zero, and obviously no shuffling is needed when only one
weight is zero; but other weight combinations are possible, such as (1, 0, 0).

Sergio Gelato authored Dec 06, 2015 and Quanah Gibson-Mount committed Jun 22, 2020

Prior to this change, given two records of weight 1 the algorithm would
return them in the order (0,1) with 100% probability instead of the
desired 50%. This was due to an off-by-one error in the range test.

srv_rand() returns a float in the range [0.0, 1.0[, so r is an integer in the
range [0, total[. The correct probability for record 0 to be chosen is
a[0].weight/total, not (a[0].weight+1)/total.

Implemented for OpenSSL, GnuTLS just stubbed

Isaac Boukris authored Apr 23, 2020 and Quanah Gibson-Mount committed Apr 23, 2020

Reported-by: Ryan Tandy @ryan

Add LDAP_OPT_X_SASL_CBINDING option to define the binding type to use,
defaults to "none".

Add "tls-endpoint" binding type implementing "tls-server-end-point" from
RCF 5929, which is compatible with Windows.

Fix "tls-unique" to include the prefix in the bindings as per RFC 5056.

Always retry ldap_int_tls_connect() if it didn't complete,
regardless of blocking or non-blocking socket. Code from
ITS#7428 was wrong to only retry for async.

Sergei Trofimovich authored Jun 19, 2017 and Quanah Gibson-Mount committed Mar 26, 2020

thr_posix.c: In function 'ldap_pvt_thread_set_concurrency':
thr_posix.c:96:9: error: implicit declaration of function 'pthread_setconcurrency'
  return pthread_setconcurrency( n );
         ^~~~~~~~~~~~~~~~~~~~~~
         pthread_setcanceltype
Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>

Fixes potential segfault in ldapsearch

This reverts commit be61a967.

Add lutil_tm2gtime for Proleptic Gregorian calendar,
revert lutil_tm2time to previous behavior using Unix epoch