Since GnuTLS moved to implicit initialization on library load, calling
this function deinitializes GnuTLS and then re-initializes it.

When GnuTLS uses /dev/urandom as an entropy source (getrandom() not
available, or older versions of GnuTLS), and the application closed all
file descriptors at startup, this could result in GnuTLS opening
/dev/urandom over one of the application's file descriptors when
re-initialized.

Additionally, the custom mutex functions are never reset, so if libldap
is unloaded (for example via dlclose()) after calling this, its code may
be unmapped and the application could crash when GnuTLS calls the mutex
functions.

On typical systems, GnuTLS system mutexes are probably the same as what
libldap uses anyway.

Ryan Tandy authored Aug 26, 2019 and Ondřej Kuzník committed Aug 27, 2019

Ensure gnutls_digest_get_id() is available

Adjust patch for ITS#7585 as Windows does not have LDAPI support.

This reverts commit ebf0ef5c.

Depends on custom glibc from RedHat

Don't search for scopes of entries with no children

Trying again, fixed previous attempt

This reverts commit bfe9152c.

Treat as normal user for any other DB.

Add missing matching rules for the cn=config schema elements for:

slapd-null
slapd-relay
slapo-chain

Jame Gerwe authored Dec 29, 2017 and Quanah Gibson-Mount committed Jun 17, 2019

Fix building OpenLDAP with -DLDAP_CONNECTIONLESS so that ldap_is_ldapc_url function is defined