.gitattributes

+configure.ac ident
+.git*	export-ignore
+/doc/drafts/draft-*.xml	export-ignore

.github/workflows/close-pull-request.yaml

+name: Close Pull Request
+
+on:
+  pull_request_target:
+    types: [opened]
+
+jobs:
+  run:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: superbrothers/close-pull-request@v3
+      with:
+        # Optional. Post a issue comment just before closing a pull request.
+        comment: "We do not accept PRs. Please use the [OpenLDAP Issue Tracker](https://bugs.openldap.org) to file issues."

.gitignore

+# for Unix/Linux
+*~
+*.o
+*.la
+*.lo
+*.so
+*.a
+
+# for MacOS/X
+*.dylib
+*.dSYM
+.DS_Store
+
+# for Windows
+*.exe
+*.obj
+*.dll
+*.exp
+*.pdb
+lib*.lib
+lib*.dll
+resource.RES
+resource.rc
+*_.RES
+*_.rc
+*0000.bin
+*.ilk
+
+# Misc
+*.eml
+*.patch
+*.orig
+*.rej
+*.swp
+
+# For OpenLDAP
+*.tmp
+.libs
+.links
+
+version.c
+
+Makefile
+!/contrib/slapd-modules/*/Makefile
+!/contrib/slapd-modules/*/*/Makefile
+!/doc/guide/admin/Makefile
+!/libraries/libmdb/Makefile
+!/servers/slapd/back-sql/rdbms_depend/timesten/dnreverse/Makefile
+
+/config.status
+/config.log
+/include/stamp-h?
+/libtool
+/stamp-h
+/clients/tools/l*version.c
+/clients/tools/ldapcompare
+/clients/tools/ldapdelete
+/clients/tools/ldapexop
+/clients/tools/ldapmodify
+/clients/tools/ldapmodrdn
+/clients/tools/ldappasswd
+/clients/tools/ldapsearch
+/clients/tools/ldapurl
+/clients/tools/ldapvc
+/clients/tools/ldapwhoami
+/include/lber_types.h
+/include/ldap_config.h
+/include/ldap_features.h
+/include/portable.h
+libraries/libl*/*test
+libraries/libl*/*.pc
+libraries/libldap/testavl
+libraries/liblunicode/ucdata.c
+libraries/liblunicode/ucdata.h
+libraries/liblunicode/ucgendat
+libraries/liblunicode/ucgendat.c
+libraries/liblunicode/uctable.h
+libraries/liblunicode/ure.c
+libraries/liblunicode/ure.h
+libraries/liblunicode/urestubs.c
+libraries/liblunicode/version.c
+libraries/liblutil/slapdmsg.res
+libraries/liblutil/version.c
+libraries/librewrite/rewrite
+libraries/librewrite/version.c
+servers/slapd/.backend
+servers/slapd/all-cffiles
+servers/slapd/backends.c
+servers/slapd/overlays/statover.c
+servers/slapd/slapacl
+servers/slapd/slapadd
+servers/slapd/slapauth
+servers/slapd/slapcat
+servers/slapd/slapd
+servers/slapd/slapdn
+servers/slapd/slapindex
+servers/slapd/slapmodify
+servers/slapd/slappasswd
+servers/slapd/slapschema
+servers/slapd/slaptest
+servers/lloadd/lloadd
+servers/lloadd/Makefile.module
+servers/lloadd/Makefile.server
+tests/progs/ldif-filter
+tests/progs/slapd-addel
+tests/progs/slapd-bind
+tests/progs/slapd-modify
+tests/progs/slapd-modrdn
+tests/progs/slapd-mtread
+tests/progs/slapd-read
+tests/progs/slapd-search
+tests/progs/slapd-tester
+tests/progs/slapd-watcher
+tests/schema
+tests/testdata
+tests/testrun
+tests/run

.gitlab-ci.yml

+workflow:
+  rules:
+    - if: '$CI_COMMIT_REF_NAME == "master" && $CI_PROJECT_NAMESPACE != "openldap"'
+      when: never
+    - if: '$CI_COMMIT_REF_NAME =~ /^OPENLDAP_REL_ENG_/ && $CI_PROJECT_NAMESPACE != "openldap"'
+      when: never
+    - if: '$CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH && $CI_OPEN_MERGE_REQUESTS'
+      when: never
+    - when: always
+
+stages:
+  - build
+
+build-no-threads-no-slapd:
+  stage: build
+  script:
+    - export STARTTIME=$(date +%s)
+    - apt update
+    - DEBIAN_FRONTEND=noninteractive apt install -y build-essential autoconf pkg-config groff-base libsasl2-dev libssl-dev
+    - autoreconf
+    - echo "$(date -u -d "now - $STARTTIME sec" +%T) Configuring"
+    - ./configure --without-threads --disable-slapd
+    - make depend
+    - echo "$(date -u -d "now - $STARTTIME sec" +%T) Building"
+    - make
+
+build-openssl-heimdal-lloadd:
+  stage: build
+  script:
+    - export STARTTIME=$(date +%s)
+    - apt update
+    - DEBIAN_FRONTEND=noninteractive apt install -y build-essential python3 gdb procps pkg-config automake libsasl2-dev heimdal-multidev libssl-dev libltdl-dev groff-base unixodbc-dev libwiredtiger-dev libperl-dev heimdal-kdc libsasl2-modules-gssapi-heimdal sasl2-bin libevent-dev libargon2-dev libsystemd-dev
+    - autoreconf
+    - mkdir obj
+    - cd obj
+    - echo "$(date -u -d "now - $STARTTIME sec" +%T) Configuring"
+    - ../configure --enable-backends=mod --enable-overlays=mod --enable-modules --enable-dynamic --enable-balancer=mod --enable-argon2 --with-systemd
+    - make depend
+    - echo "$(date -u -d "now - $STARTTIME sec" +%T) Building"
+    - make
+    - ulimit -n 4096 # back-monitor takes a while scanning a long connections array
+    - SLAPD_COMMON_WRAPPER=gdb make test
+  artifacts:
+    name: testdir
+    when: on_failure
+    expire_in: '1 week'
+    paths:
+      - obj/tests/testrun/
+      - obj/servers/
+      - obj/libraries/
+
+build-gnutls-mit-standalone-lloadd:
+  stage: build
+  script:
+    - export STARTTIME=$(date +%s)
+    - apt update
+    - DEBIAN_FRONTEND=noninteractive apt install -y build-essential python3 gdb procps pkg-config automake libsasl2-dev libltdl-dev groff-base unixodbc-dev libwiredtiger-dev libperl-dev krb5-user krb5-kdc krb5-admin-server libsasl2-modules-gssapi-mit sasl2-bin libgnutls28-dev libevent-dev libargon2-dev libsystemd-dev
+    - autoreconf
+    - mkdir obj
+    - cd obj
+    - echo "$(date -u -d "now - $STARTTIME sec" +%T) Configuring"
+    - ../configure --enable-backends=mod --enable-overlays=mod --disable-autoca --enable-modules --enable-dynamic --enable-balancer=yes --enable-argon2 --with-systemd
+    - make depend
+    - echo "$(date -u -d "now - $STARTTIME sec" +%T) Building"
+    - make
+    - ulimit -n 4096 # back-monitor takes a while scanning a long connections array
+    - SLAPD_COMMON_WRAPPER=gdb make test
+  artifacts:
+    name: testdir
+    when: on_failure
+    expire_in: '1 week'
+    paths:
+      - obj/tests/testrun/
+      - obj/servers/
+      - obj/libraries/
+
+build-mbedtls-mit-standalone-lloadd:
+  image: "debian:testing"
+  stage: build
+  script:
+    - export STARTTIME=$(date +%s)
+    - apt update
+    - DEBIAN_FRONTEND=noninteractive apt install -y build-essential python3 gdb procps pkg-config automake libsasl2-dev libltdl-dev groff-base unixodbc-dev libwiredtiger-dev libperl-dev krb5-user krb5-kdc krb5-admin-server libsasl2-modules-gssapi-mit sasl2-bin libmbedtls-dev libevent-dev libargon2-dev libsystemd-dev
+    - autoreconf
+    - mkdir obj
+    - cd obj
+    - echo "$(date -u -d "now - $STARTTIME sec" +%T) Configuring"
+    - ../configure --with-tls=mbedtls --enable-backends=mod --enable-overlays=mod --disable-autoca --enable-modules --enable-dynamic --enable-balancer=mod --enable-argon2 --with-systemd
+    - make depend
+    - echo "$(date -u -d "now - $STARTTIME sec" +%T) Building"
+    - make
+    - ulimit -n 4096 # back-monitor takes a while scanning a long connections array
+    - SLAPD_COMMON_WRAPPER=gdb make test
+  artifacts:
+    name: testdir
+    when: on_failure
+    expire_in: '1 week'
+    paths:
+      - obj/tests/testrun/
+      - obj/servers/
+      - obj/libraries/

COPYRIGHT

-Copyright 1998-2002 The OpenLDAP Foundation
+Copyright 1998-2024 The OpenLDAP Foundation
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without
 modification, are permitted only as authorized by the OpenLDAP
-Public License.  A copy of this license is available at
-http://www.OpenLDAP.org/license.html or in file LICENSE in the
-top-level directory of the distribution.
+Public License.
+
+A copy of this license is available in the file LICENSE in the
+top-level directory of the distribution or, alternatively, at
+<http://www.OpenLDAP.org/license.html>.
 
 OpenLDAP is a registered trademark of the OpenLDAP Foundation.
 
 Individual files and/or contributed packages may be copyright by
-other parties and subject to additional restrictions.
+other parties and/or subject to additional restrictions.
 
 This work is derived from the University of Michigan LDAP v3.3
 distribution.  Information concerning this software is available
-at: http://www.umich.edu/~dirsvcs/ldap/
+at <http://www.umich.edu/~dirsvcs/ldap/ldap.html>.
 
 This work also contains materials derived from public sources.
 
-Additional information about OpenLDAP can be obtained at:
-    http://www.openldap.org/
+Additional information about OpenLDAP can be obtained at
+<http://www.openldap.org/>.
+
+---
+
+Portions Copyright 1998-2013 Kurt D. Zeilenga.
+Portions Copyright 1998-2006 Net Boolean Incorporated.
+Portions Copyright 2001-2006 IBM Corporation.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted only as authorized by the OpenLDAP
+Public License.
+
+---
+
+Portions Copyright 1999-2008 Howard Y.H. Chu.
+Portions Copyright 1999-2008 Symas Corporation.
+Portions Copyright 1998-2003 Hallvard B. Furuseth.
+Portions Copyright 2007-2011 Gavin Henry.
+Portions Copyright 2007-2011 Suretec Systems Ltd.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that this notice is preserved.
+The names of the copyright holders may not be used to endorse or
+promote products derived from this software without their specific
+prior written permission.  This software is provided ``as is''
+without express or implied warranty.
 
 ---
 
@@ -28,7 +57,8 @@ All rights reserved.
 
 Redistribution and use in source and binary forms are permitted
 provided that this notice is preserved and that due credit is given
-to the University of Michigan at Ann Arbor. The name of the University
-may not be used to endorse or promote products derived from this
-software without specific prior written permission. This software
-is provided ``as is'' without express or implied warranty.
+to the University of Michigan at Ann Arbor.  The name of the
+University may not be used to endorse or promote products derived
+from this software without specific prior written permission.  This
+software is provided ``as is'' without express or implied warranty.
+

INSTALL

@@ -2,19 +2,13 @@ Making and Installing the OpenLDAP Distribution
 ===============================================
 
 This file provides brief instructions on how to build and install
-OpenLDAP on UNIX (and UNIX-like) system.  More detailed information
+OpenLDAP on UNIX (and UNIX-like) systems.  More detailed information
 and instructions can be found in The OpenLDAP Administrator's Guide
 (available from http://www.openldap.org/doc/).
 
 It is recommended that you read, or at least skim through, ALL of the
 instructions in this file before attempting to build the software.
 
-It is also recommended you review the Frequently Asked Questions
-(http://www.openldap.org/faq/) pages, in particular the Installation
-section (http://www.openldap.org/faq/index.cgi?file=8) and Platform
-Hints (http://www.openldap.org/faq/index.cgi?file=9) should be
-examined.
-
 Making and Installing the OpenLDAP Distribution
 -----------------------------------------------
 
@@ -32,57 +26,60 @@ Making and Installing the OpenLDAP Distribution
 
      to list available configuration options.
 
-     The configure script uses environmental variables for determining
-     compiler/linker options including:
+     The configure script also looks for compiler/linker options on
+     the command line and in the environment.  These include:
 
         Variable        Description     Example
         CC              C compiler      gcc
         CFLAGS          C flags         -O -g
-        CPPFLAGS        cpp flags       -I/path/include -Ddef
+        CPPFLAGS        cpp flags       -I/path/include -D__FOO__=42
         LDFLAGS         ld flags        -L/usr/local/lib
         LIBS            libraries       -llib
         PATH            command path    /usr/local/bin:/usr/bin:/bin
 
-3.   Configure the build system
+     See doc/install/configure for generic configure documentation.
+
+3.   Configure the build system:
 
-        % [env settings] ./configure [options]
+        % ./configure [options] [var=value ...]
 
-     If all goes well, the configure script with automatically detect
-     the appropriate settings.  However, you may need to specify
-     options and/or environment variables to obtain desired results.
+     If all goes well, the configure script will automatically detect
+     the appropriate settings.  If the configure script fails, you
+     should read the config.log file that it generated to see what it
+     was trying to do and exactly what failed.  You may need to
+     specify additional options and/or variables besides those listed
+     above to obtain desired results, depending on your operating
+     system.
 
-4.   Build dependencies
+4.   Build dependencies:
 
         % make depend
 
-5.   Build the system
+5.   Build the system:
 
         % make
 
      If all goes well, the system will build as configured.  If not,
-     return to step 3 after reviewing the configuration settings.  You
-     may want to consult the Platform Hints subsection of the FAQ if
-     you have not done so already.
+     return to step 3 after reviewing the configuration settings.
 
-6.   Test the standalone system
+6.   Test the standalone system:
 
-     This step requires the standalone LDAP server, slapd(8), with
-     LDBM support.
+     This step requires the standalone LDAP server, slapd(8), with MDB
+     support.
 
         % make test
 
      If all goes well, the system has been built as configured.  If
-     not, return to step 4 after reviewing your configuration
-     settings.  You may want to consult the Installation section of
-     the FAQ if you have not done so already.
+     not, return to step 2 after reviewing your configuration
+     settings.
 
-7.   install the binaries and man pages.  You may need to be come the
-     super-user (e.g. root) to do this (depending on where you are
-     installing things):
+7.   Install the software.  You may need to become the super-user
+     (e.g. root) to do this (depending on where you are installing
+     things):
 
         % su root -c 'make install'
 
-8.   That's it!
+8.   That's it.  Enjoy!
 
 See the OpenLDAP Administrator's Guide and the manual pages for the
 individual applications for configuration and use information. You may
@@ -92,10 +89,21 @@ configuration directory (normally /usr/local/etc/openldap).
 
         ldap.conf               client defaults
         slapd.conf              Standalone LDAP daemon
+        lload.conf              LDAP Load Balancer daemon
         schema/*.schema         Schema Definitions
 
-End of OpenLDAP INSTALL file.
+---
+This work is part of OpenLDAP Software <http://www.openldap.org/>.
+
+Copyright 1998-2024 The OpenLDAP Foundation.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted only as authorized by the OpenLDAP
+Public License.
 
-$OpenLDAP: pkg/openldap-guide/release/install.sdf,v 1.16 2002/02/18
-17:09:26 kurt Exp $
+A copy of this license is available in the file LICENSE in the
+top-level directory of the distribution or, alternatively, at
+<http://www.OpenLDAP.org/license.html>.
 
+OpenLDAP is a registered trademark of the OpenLDAP Foundation.

LICENSE

 The OpenLDAP Public License
-  Version 2.7, 7 September 2001
+  Version 2.8, 17 August 2003
 
 Redistribution and use of this software and associated documentation
 ("Software"), with or without modification, are permitted provided
 that the following conditions are met:
 
-1. Redistributions of source code must retain copyright statements
+1. Redistributions in source form must retain copyright statements
    and notices,
 
 2. Redistributions in binary form must reproduce applicable copyright
@@ -37,11 +37,11 @@ POSSIBILITY OF SUCH DAMAGE.
 The names of the authors and copyright holders must not be used in
 advertising or otherwise to promote the sale, use or other dealing
 in this Software without specific, written prior permission.  Title
-to copyright in this Software shall at all times remain with
-copyright holders.
+to copyright in this Software shall at all times remain with copyright
+holders.
 
 OpenLDAP is a registered trademark of the OpenLDAP Foundation.
 
-Copyright 1999-2001 The OpenLDAP Foundation, Redwood City,
+Copyright 1999-2003 The OpenLDAP Foundation, Redwood City,
 California, USA.  All Rights Reserved.  Permission to copy and
 distribute verbatim copies of this document is granted.

Makefile.in

-# $OpenLDAP$
 # Master Makefile for OpenLDAP
+# $OpenLDAP$
+## This work is part of OpenLDAP Software <http://www.openldap.org/>.
 ##
-## Copyright 1998-2002 The OpenLDAP Foundation, Redwood City, California, USA
+## Copyright 1998-2024 The OpenLDAP Foundation.
 ## All rights reserved.
 ##
-## Redistribution and use in source and binary forms are permitted only
-## as authorized by the OpenLDAP Public License.  A copy of this
-## license is available at http://www.OpenLDAP.org/license.html or
-## in file LICENSE in the top-level directory of the distribution.
+## Redistribution and use in source and binary forms, with or without
+## modification, are permitted only as authorized by the OpenLDAP
+## Public License.
 ##
+## A copy of this license is available in the file LICENSE in the
+## top-level directory of the distribution or, alternatively, at
+## <http://www.OpenLDAP.org/license.html>.
 
 SUBDIRS= include libraries clients servers tests doc
 CLEANDIRS=
@@ -22,13 +25,14 @@ makefiles:	FORCE
 install-common: all FORCE
 
 clean-local: FORCE
-	$(RM) config.log
+	$(RM) config.cache config.log configure.lineno
+	$(RM) -r autom4te.cache
 
 veryclean-local: FORCE
-	$(RM) config.cache config.status libtool stamp-h stamp-h.in
+	$(RM) config.status libtool stamp-h stamp-h.in libraries/libldap/ldap.pc libraries/liblber/lber.pc
 
 distclean: veryclean FORCE
 
 check: test
 test: FORCE
-	cd tests; make test
+	cd tests && $(MAKE) test

README

 OpenLDAP Devel README
-	This software was obtained from the development branch (HEAD) of
-	the OpenLDAP Software Repository.  This copy is likely already
+	This software was obtained from a development branch of the
+	OpenLDAP Software Repository.  This copy is likely already
 	not current, the development branch changes frequently.  These
 	changes include code implementing experimental features and
 	unproven bug fixes.  Please do NOT redistribute copies of the
 	development branch.
 
 	The OpenLDAP Developer's FAQ is available at:
-		http://www.openldap.org/faq/index.cgi?file=4
+		<http://www.openldap.org/faq/index.cgi?file=4>
 
 	Client developers seeking a suitable development platform
 	should use "release" or "stable" versions.
-		http://www.openldap.org/software/
+		<http://www.openldap.org/software/>
+
+Contributing
+	See <http://www.openldap.org/devel/contributing.html> for how to
+	contribute code or documentation to OpenLDAP.  Use the Issue Tracking
+	System <http://www.openldap.org/its/> to submit contributions.
+	While you are encouraged to coordinate and discuss the development
+	activities on the openldap-devel@openldap.org mailing list prior
+	to submission, it is noted that contributions must be submitted
+	using the Issue Tracking System to be considered.
 
 ---
 $OpenLDAP$
+
+This work is part of OpenLDAP Software <http://www.openldap.org/>.
+
+Copyright 1998-2024 The OpenLDAP Foundation.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted only as authorized by the OpenLDAP
+Public License.
+
+A copy of this license is available in the file LICENSE in the
+top-level directory of the distribution or, alternatively, at
+<http://www.OpenLDAP.org/license.html>.
+
+OpenLDAP is a registered trademark of the OpenLDAP Foundation.

acconfig.h

-/*
- * Copyright 1998-2002 The OpenLDAP Foundation, Redwood City, California, USA
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted only as authorized by the OpenLDAP
- * Public License.  A copy of this license is available at
- * http://www.OpenLDAP.org/license.html or in file LICENSE in the
- * top-level directory of the distribution.
- */
-
-#ifndef _LDAP_PORTABLE_H
-#define _LDAP_PORTABLE_H
-
-/* end of preamble */
-
-@TOP@
-
-/* define this if needed to get reentrant functions */
-#ifndef REENTRANT
-#undef REENTRANT
-#endif
-#ifndef _REENTRANT
-#undef _REENTRANT
-#endif
-
-/* define this if needed to get threadsafe functions */
-#ifndef THREADSAFE
-#undef THREADSAFE
-#endif
-#ifndef _THREADSAFE
-#undef _THREADSAFE
-#endif
-#ifndef THREAD_SAFE
-#undef THREAD_SAFE
-#endif
-#ifndef _THREAD_SAFE
-#undef _THREAD_SAFE
-#endif
-
-#ifndef _SGI_MP_SOURCE
-#undef _SGI_MP_SOURCE
-#endif
-
-/* define this if TIOCGWINSZ is defined in sys/ioctl.h */
-#undef GWINSZ_IN_SYS_IOCTL
-
-/* These are defined in ldap_features.h */
-/*
-	LDAP_API_FEATURE_X_OPENLDAP_REENTRANT
-	LDAP_API_FEATURE_X_OPENLDAP_THREAD_SAFE
-	LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND
-	LDAP_API_FEATURE_X_OPENLDAP_V2_REFERRALS
-*/
-
-/* These are defined in lber_types.h */
-/*
-	LBER_INT_T
-	LBER_LEN_T
-	LBER_SOCKET_T
-	LBER_TAG_T
-*/
-
-/* define to character address type */
-#undef caddr_t
-
-/* define to signed size type */
-#undef ssize_t
-
-
-/* Leave that blank line there!!  Autoheader needs it. */
-
-@BOTTOM@
-
-/* begin of postamble */
-
-#ifdef _WIN32
-	/* don't suck in all of the win32 api */
-#	define WIN32_LEAN_AND_MEAN 1
-#endif
-
-#ifndef LDAP_NEEDS_PROTOTYPES
-/* force LDAP_P to always include prototypes */
-#define LDAP_NEEDS_PROTOTYPES 1
-#endif
-
-#ifdef HAVE_STDDEF_H
-#	include <stddef.h>
-#endif
-
-#if defined(LDAP_DEVEL) && !defined(LDAP_TEST)
-#define LDAP_TEST
-#endif
-#if defined(LDAP_TEST) && !defined(LDAP_DEBUG)
-#define LDAP_DEBUG
-#endif
-
-#ifdef HAVE_EBCDIC 
-/* ASCII/EBCDIC converting replacements for stdio funcs
- * vsnprintf and snprintf are used too, but they are already
- * checked by the configure script
- */
-#define fputs ber_pvt_fputs
-#define fgets ber_pvt_fgets
-#define printf ber_pvt_printf
-#define fprintf ber_pvt_fprintf
-#define vfprintf ber_pvt_vfprintf
-#define vsprintf ber_pvt_vsprintf
-#endif
-
-#include "ldap_cdefs.h"
-#include "ldap_features.h"
-
-#include "ac/assert.h"
-
-#endif /* _LDAP_PORTABLE_H */

acinclude.m4

-dnl
-dnl Copyright 1998-2002 The OpenLDAP Foundation, Redwood City, California, USA
-dnl All rights reserved.
-dnl 
-dnl Redistribution and use in source and binary forms, with or without
-dnl modification, are permitted only as authorized by the OpenLDAP
-dnl Public License.  A copy of this license is available at
-dnl http://www.OpenLDAP.org/license.html or in file LICENSE in the
-dnl top-level directory of the distribution.
-dnl
-dnl OpenLDAP Autoconf Macros
-dnl
-divert(-1)
-builtin(include, build/openldap.m4)dnl