OpenLDAP merge requestshttps://git.openldap.org/openldap/openldap/-/merge_requests2024-03-21T18:11:38Zhttps://git.openldap.org/openldap/openldap/-/merge_requests/676ITS#10161 Add nestgroup overlay2024-03-21T18:11:38ZHoward ChuITS#10161 Add nestgroup overlayhttps://git.openldap.org/openldap/openldap/-/merge_requests/695ITS#10188 autogroup: allow groups to be members of other groups2024-03-21T17:12:36ZHoward ChuITS#10188 autogroup: allow groups to be members of other groupsBut doesn't support recursion - modifications on one autogroup
will not trigger further updates on other autogroups that reference it.
The OpExtra will cause other dependent mods to bypass further autogroup processing.
Did some other t...But doesn't support recursion - modifications on one autogroup
will not trigger further updates on other autogroups that reference it.
The OpExtra will cause other dependent mods to bypass further autogroup processing.
Did some other trivial cleanup as well.https://git.openldap.org/openldap/openldap/-/merge_requests/692ITS#10185 autogroup: must populate dyngroup members on Add2024-03-13T16:28:20ZHoward ChuITS#10185 autogroup: must populate dyngroup members on AddThe dynamic members should be populated up front, before passing the Add op
to the backend. The original code did both group and member processing up
front; the ITS#6970 patch moved both to the response callback. Only the
member processi...The dynamic members should be populated up front, before passing the Add op
to the backend. The original code did both group and member processing up
front; the ITS#6970 patch moved both to the response callback. Only the
member processing should have been moved.https://git.openldap.org/openldap/openldap/-/merge_requests/693ITS#10186 overlay response callbacks should ignore op->o_abandon2024-03-11T15:04:30ZHoward ChuITS#10186 overlay response callbacks should ignore op->o_abandonhttps://git.openldap.org/openldap/openldap/-/merge_requests/690ITS#10182 slapo-alias: check for static operational attrs too2024-02-23T20:57:28ZHoward ChuITS#10182 slapo-alias: check for static operational attrs toohttps://git.openldap.org/openldap/openldap/-/merge_requests/689ITS#10044 dynlist: check for abandon in search2resp2024-02-22T20:37:19ZHoward ChuITS#10044 dynlist: check for abandon in search2resphttps://git.openldap.org/openldap/openldap/-/merge_requests/684ITS#10172 logging: check logdir writability2024-02-22T18:19:21ZHoward ChuITS#10172 logging: check logdir writabilityhttps://git.openldap.org/openldap/openldap/-/merge_requests/686ITS#10177 fix back-perl build for clang152024-02-22T17:18:55ZHAMANO TsukasaITS#10177 fix back-perl build for clang15https://bugs.openldap.org/show_bug.cgi?id=10177https://bugs.openldap.org/show_bug.cgi?id=10177https://git.openldap.org/openldap/openldap/-/merge_requests/688ITS#10179 back-asyncmeta(5) man page incorrectly mentions rewrite2024-02-15T18:11:01ZNadezhda IvanovaITS#10179 back-asyncmeta(5) man page incorrectly mentions rewriteback-asyncmeta does not currently support the rewrite engine.back-asyncmeta does not currently support the rewrite engine.https://git.openldap.org/openldap/openldap/-/merge_requests/679ITS#10164 back-meta hangs when used with dynlist overlay2024-02-15T17:11:40ZNadezhda IvanovaITS#10164 back-meta hangs when used with dynlist overlayMake sure every proxied operation has a separate candidates structure
When an overlay issues an internal operation on receiving an entry from a previous operation, back-meta hangs in an endless thread_yeald cycle.
This happens because ba...Make sure every proxied operation has a separate candidates structure
When an overlay issues an internal operation on receiving an entry from a previous operation, back-meta hangs in an endless thread_yeald cycle.
This happens because back-meta uses a single candidates structure per thread to hold operation status. In the above case,
it ends up proxying two operations simultaneously in the same thread, and the second operation corrupts the state for the first.
This patch ensures that every operation has a separate candidates structure to maintain the state.
This problem seems to have been there from the start, but is only discovered because dynlist starts an internal search for every group entry received for the original request - the problem will not appear if the internal op is started when the client op is received (on the way down), because in such cases the two operations are executed by meta consecutively and they do not mess up each other's data.
I would like the reviewers' opinion - originally meta used the thread context to store that data. I am not sure why this is a good approach, but I kept it, making sure to use the op as a key, so that each op has it's own. As I understand the number of keys is limited to MAXKEYS, potentially limiting the number of concurrent ops executed by a single thread inside meta. It seems to me extremely unlikely to have such a large number, but it is possible alternatively to hold the candidates in op_extra instead.https://git.openldap.org/openldap/openldap/-/merge_requests/685ITS#10173 Populate li_minCSN on conversion2024-02-12T19:52:15ZOndřej KuzníkITS#10173 Populate li_minCSN on conversionhttps://git.openldap.org/openldap/openldap/-/merge_requests/683ITS#10171 - Explicitly cast private values2024-02-12T18:49:37ZStephen GallagherITS#10171 - Explicitly cast private valuesFixes issues with -Werror=incompatible-pointer-types
Also fixed an error seen on i686 where an `unsigned long` was being assigned to a `size_t` (which is `unsigned int` on that platform)
Signed-off-by: Stephen Gallagher <sgallagh@redha...Fixes issues with -Werror=incompatible-pointer-types
Also fixed an error seen on i686 where an `unsigned long` was being assigned to a `size_t` (which is `unsigned int` on that platform)
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>https://git.openldap.org/openldap/openldap/-/merge_requests/681ITS#10167 slapo-memberof: add addcheck option2024-02-06T01:55:33ZHoward ChuITS#10167 slapo-memberof: add addcheck optionCheck memberships of newly added entries.Check memberships of newly added entries.https://git.openldap.org/openldap/openldap/-/merge_requests/677ITS#9823 Move to a place that is better associated with accesslog2024-02-05T23:29:57ZOndřej KuzníkITS#9823 Move to a place that is better associated with accessloghttps://git.openldap.org/openldap/openldap/-/merge_requests/678ITS#10163 cleanup configure/tests integration2024-02-05T21:46:21ZHoward ChuITS#10163 cleanup configure/tests integrationStreamline backend/overlay definition.Streamline backend/overlay definition.https://git.openldap.org/openldap/openldap/-/merge_requests/680ITS#10165 back-meta fails to bind to target when proxying an internal operation2024-01-31T17:21:42ZNadezhda IvanovaITS#10165 back-meta fails to bind to target when proxying an internal operationFor some reason meta would skip calling meta_back_proxy_authz_cred if op->o_do_not_cache is set. This is redundant, since meta_back_proxy_authz_cred does have a check for this. When meta_back_proxy_authz_cred is skipped, the dn/cred comb...For some reason meta would skip calling meta_back_proxy_authz_cred if op->o_do_not_cache is set. This is redundant, since meta_back_proxy_authz_cred does have a check for this. When meta_back_proxy_authz_cred is skipped, the dn/cred combo is not initialized correctly, and instead of the proper sasl bind, meta attempts an anonymous bind, with dn, which the target server rejects. Invoking meta_back_proxy_authz_cred makes meta behave exactly like back-ldap in the same scenario, which seems to be the correct behavior.https://git.openldap.org/openldap/openldap/-/merge_requests/675ITS#10014 Non blocking TLS session accept for mbedtls handle2024-01-30T16:57:54ZJohan PascalITS#10014 Non blocking TLS session accept for mbedtls handlehttps://git.openldap.org/openldap/openldap/-/merge_requests/674ITS#10059 - Add configuration example for slapo-homedir(5)2024-01-18T18:25:20ZQuanah Gibson-MountITS#10059 - Add configuration example for slapo-homedir(5)https://git.openldap.org/openldap/openldap/-/merge_requests/673slapd(8) describe -T modify (slapmodify)2024-01-18T16:56:30ZQuanah Gibson-Mountslapd(8) describe -T modify (slapmodify)https://git.openldap.org/openldap/openldap/-/merge_requests/671ITS#10154 - Add github action to automatically close PRs2024-01-15T17:51:28ZQuanah Gibson-MountITS#10154 - Add github action to automatically close PRsGitHub is a mirror, nothing should be opened there for the project.GitHub is a mirror, nothing should be opened there for the project.