CVS log for clients/tools/ldapsearch.c

Up to [OpenLDAP] / clients / tools

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

ITS#6755 pagedresults loop was accessing a closed FILE*.

Happy New Year

Fix rev 1.270: free def_urlpre correctly.  Also free urlpre.

For ITS#5421: Remove unnecessary #include "ldap_log.h"

note ITS#6651 fix (forced commit)

fix multiple generic control parsing

plug one-time leak

fix ITS#6638

happy belated New Year

move getpassphrase inside tool_bind; make sure password is always malloc'd and freed

silence warnings

rework common options (ITS#6049)

Add VLV support

Fix typo in derefcrit control

mem cleanup (see ITS#6005) not worth chasing them all down

Update copyright notices

fix LDAP deref control response; fix tool response handling; add lutil_memcopy() for API uniformity (more about ITS#5768)

ITS#5812 add SASL_NOCANON / -N option

allow to override (more than one \!) specs requirements on control criticality (for testing purposes; do not advertise)

slight fixes and improvements to previous commit

add support for (experimental) dereference control (ITS#5768); need to re-run autoconf (and autoheader?)

Warning cleanup: signed meets unsigned. (Adds variable dosearch():outlen.)

Warning cleanup: signed meets unsigned.  ber_printf() returns -1 on
error, not LBER_ERROR.

note RFC for each standard track control

silence warnings

Add server side sorting control

More for ITS#5317

for ITS#5317: initialize exit code for -f/dev/null

Happy New Year (belated)

fix one-time leaks

cleanup

ITS#4799 remove kbind

happy new year

Add common -o nettimeout option to specify network timeout

ITS#3755 silence strict-aliasing warnings

allow continuous mode

ITS#4647: error on bad filter patterns

remove dontusecopy ifdefs

Misc RFC reference updates

split lines in additional info (ITS#4543)

note when the default base is being used (more about ITS#4504)

print the correct search base when taken from ldaprc (ITS#4504)

Protect from sprintf buffer overrun in ldapsearch -f file "(cn=%100000s)"

cleanup

Macro cleanup

streamline server control requests

cleanup

use new paged results control client API (ITS#4314)

rework control response handling

paged results may not be the only control response

minor cleanup

Happy new year!

Add dontUseCopy control to ldapcompare(1) and ldapsearch(1).
No slapd(8) support yet.
Also removed unnecessary #ifdefs

clarify ALL

add some friendly output of server control responses; please review

print control response (may need to condition with an arg switch?)

check reponse tags in ldapmodify; other functions rely on client library, which might need further work.  Also, remove or silence all deprecated API calls

improve previous commit

allow to inject whatever control doesn't need response handling

Plug memory leaks

Remove spurious cvalue=NULL printf argument.

Fix typo: Scope "base" was only matched properly on 32-bit hosts.

allow abandon/cancel for all tools

enable abandon/cancel in ldapsearch (ITS#3670)

ITS#3620: Initial Unbind control fix
A better fix would be to use the _ext interface
Also add and use a tool_destroy() function (to destroy SASL/TLS contexts).

Add code to aid in testing Abandon/Cancel processing

add support for Chaining Behavior control (<draft-sermersheim-ldap-chaining>, a work in progress)

Happy New Year!

why scan with {im} when the value need sbe copied?  moreover, cookie must be freed after use

More NEW_LOGGING removal

advertize LDAP_SCOPE_SUBORDINATE support

ldapsearch doesn't handle correctly setting paged results size to 0 to abort

fix response output

parse page control only in case of succes...

Add LDAP_MAXINT macro
Add additional error checks
Fix a few typos and cleanup

allow max for time/size limits

improve client parsing - first step

Fix a limit typo
Use 0 not maxint when 'none' is selected.

Remove extra sequence

helper for unlimited time/size limits request

cleanup

do not prompt for next page in case of search failure

cleanup for release engineering

Start of client-side LDAP tranactions (non-working)
and lots of cleanup (hence the commit)
(ldapmodify will need much more work for transactions)

-E/-e are not just for controls

unifdef -UOLD_WAY

Enable prompting of paged results with /prompt or /noprompt rather than /true or /false

Allow paged results to be requested without interaction by specifying
/false after the page result size (/true is still the default)

Fix crasher if paged results size is not specified

Fix for RFC 2696 compliance - avoids infinite loop when talking to
Active Directory (which returns no cookie but size in the last
paged results - this is permitted).

cleanup

ITS#2922 disable argument globbing under Cygwin and MinGW.

Happy new year

Use ldap_unbind_ext(3)

Sync with HEAD

Notice/Acknowledge updates

Notice updates

Revert/Fix prev commit

Fix parse order in new print_entry ( ctrls )

mv ldap_int_get_controls to ldap_pvt_get_controls

Fix prev commit for empty attrs

Make new print_entry() the default

unifdef LDAP_SYNC and LDAP_SYNCREPL

ITS#2657: authzid (and assertion) should apply to most everything
(preliminary modify/incr client-side code)

LCUP primitive routines removed

Merge partial and intermediate responses

ldap_pvt_tls_destroy depends on HAVE_TLS
These calls belong in an ldap_destroy() library function.

Fix ldap_get_attribute_ber to get values in-place.
Revert previous memleak fix in ldapsearch.c

plug memleak in alternate print_entry()

Fix assignment of <char/int>* to unsigned <char/int>* and vice versa.

Check HAVE_CYRUS_SASL for sasl_done().

#include "ldap_pvt.h", to get ldap_pvt_tls_destroy().
Cast argument to isspace() to unsigned char.

Mark translatable strings.  Needs work.

ITS#2423 plug some memleaks

Revert previous commit

Use ol_version.h

Fix undef'd code for empty attributes.

Misc LCUP cleanup

add domainScope control support

Rework #ifdef'ing of expermental controls to ease release engineering
using LDAP_DEVEL (to indicate experimental) to enable experimental features
(true for HEAD unless LDAP_REL_ENG is defined)

remove printf

LDAP Sync Operation (draft-zeilenga-ldup-sync) as a groundwork for an LDAP replication design

First cut at -V (version) argument.  Needs work.

Silence gcc warnings (signed vs. unsigned, implicit declarations, unused vars).

Cast ctype.h arguments to unsigned char.

Fix LBER_ERROR vs. -1 confusion.

Happy new year

more readable diffs and reduced number of conflicts when adding new client-side controls

lcup persistent search option

Use ber_flatten2 to avoid excess mallocs

Factor out common client code to file common.c

Plug memory leak from ldap_<first/next>_attribute().

Fix Solaris SEGV when base is not specified

First-cut proxy authorization support.

Esthetic change:  Move break; out of if() to before the next case:

put 'break' only at the end of the 'case'

ldapsearch -E subentries=... lacked a break; for case 'E':

Clean up error messages

Add -e authzid argument processing

#unifdef paged results, remove lint

Add whoami.c and passwd.c and other minor tweaks to control cleanups

proxy authz control (client only)
Misc control cleanups (client only)

enforce the declared behavior when using -L[L[L]]

add limits to entries count for paged results

- allow interactive pagedResults size change
- implement pagedResults abandon by setting size=0
- misc code cleanup

Support for RFC 2696:
LDAP Control Extension for Simple Paged Results Manipulation

contributed by Lynn Moss <lynnmoss@us.ibm.com> (ITS#2189)

applied with changes.

Add more LDIF comments

Merged ldap_get_values_ber into ldap_get_attribute_ber.

Added 2nd version of print_entry using new ldap_get_*_ber functions.
#if'd out by default, but it works fine. Kept both for easy comparison.

Generate subentries control

Add client-side subentries control support.
Make sure client controls are not specified multiple times.
NT port updates.

Remove those #ifdefs NOOP just added.

Place NOOP behind #ifdef

Print information about control used.

Allow generation of no-op control

Rework client control parsing...  need to implement
common controls across all tools.

improve control support thru -E switch

Patch: 'ldapmodify -y file' reads password from file  (ITS#2031)

            ================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
            ================
Adapted by Kurt Zeilenga for inclusion in OpenLDAP.  My comments are
marked with enclosed with square brackets (e.g. [Kurt's comment] below.
            ================

If I run ldapmodify & co from a script, I don't want to use '-W password'
because the password shows up in the output of 'ps' for everyone,
and I can't pipe the password to 'ldapmodify -w' because -w uses
getpassphrase() which reads from the tty instead of stdin.
So I added '-y file' which reads the password from file.  The programs
exit if the file cannot be read.

[Complete contents of file is used as password.  Use:
	echo -n "secret" > password
to create a file with "secret" as the password.  The -n avoids
adding a newline (which would invalidate the password).  Note
that echo is a builtin and hence its arguments are not visible
to 'ps'.]

I changed ldapmodify, ldapmodrdn, ldapdelete, ldapsearch, ldapcompare.
I did not bother to change ldappasswd and ldapwhoami, because they
prompt for many passwords.  [I fixed up ldapwhoami.]

Rerun autoconf after applying this patch. [Done.]

Note:  I do not know if Windows NT has fstat(), so I set HAVE_FSTAT to
undef in portable.nt.  (fstat() is used to warn if the file is publicly
readable or writeable.)  [I used fstat() to set the buffer size to
read.]

[Note: using the contents of a file extends the tools to support
passwords which could not normally be provided using getpassphrase()
or via the command line.]

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, Aug 2002.
[Kurt D. Zeilenga <kurt@openldap.org>, Aug 2002.]

remove warnings

ITS#1956, bvalp declaration

Use lutil_progname, #include <lutil.h> to get it.

snprintf cleanup

VLV clean

Add matched values command line support (ITS#1811).
Adapted .Sahalayev@pgr.salford.ac.uk's submission.
Needs to be extended to support comma separated list of options
	for other controls and such.

---
Copyright 2002, Mikhail Sahalaev, All rights reserved.
This software is not subject to any license of University Of
Salford.

Redistribution and use in source and binary forms are permitted
without restriction or fee of any kind as long as this notice
is preserved.

Fix ITS#1649, a filter constructed from a BUFSIZ input line combined with
an argv[] filtpattern will be larger than BUFSIZ.

Update copyright statements

 from jon@symas.com; include ldap_log.h for proper declarations, remove
 unused variable

More from Jon Leichter @ Symas - platform-independent TMPDIR usage

Don't ignore attribute list when -S is specified.

Use parens for clarity

Don't say "version: 2"

Updated pthread test and usage (avoid pthread_detach if possible)
don't use tmpnam()

Fix filter printing

detect and use fcntl (for BSD/OS)
detect inet_ntop (for MacOSX)

Add LDAP version to comment

Validate timelimit argument

Rename timelimit to timeout where it refers to the time out not the time limit.

Move -V to -F so that -V can be used for version information

use "authcid" instead of "username".

Change start tls warning message

Fix passwd clearing bug

Remove commented out (logging) code

return default to no logging

Use LDAP_VERSION3 instead of 3

example client using new logging

Add missing 'static'... (ITS#823,825,828)
as reported by Jeff Earickson <jaearick@colby.edu>
other suggestions to be separately reviewed

Fix spelling error

Fix fprintf\'s, missing `prog\' argument

Fix ldap_init/initialize error checking

Fix -R processing

Add -H to usage

Back out last change

Fix URI

Add missing fprintf param

Fix typo which escaped my obviously flawed midnight test
(I must have been dreamed that the 'make test' completed
successfully)

Add support of "-H uri"

Clean up lint.

Fix empty AND/OR search list bug

Clean up usage()

Expose sasl flags to -lldap (so they can be quiet)
Fix interactive and automatic modes.  Quiet needs work.

First cut SASL "interactive" and "quiet" modes (default is "automatic")

Make it all work.

Cleanup previous commit

Rework SASL command line arguments.  Default is now to authenticate
using best available mechanism.  (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.

Update SASL code to reuse context through life of session.
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters

Add missing EOL

Improved but still broken client tools.

Round 2 of tools work.
-R now ignored
-C added to chase.  No rebind proc yet, no checking of appropriate authentication.
complain if non-critical TLS was not started.
Fail if requested version is not supported.
ldapdelete:
  deletechildren modified to use ldap_search_ext_s()
  fixed deletechildren dn memory leak
ldapsearch:
  modified to use ldap_search_ext()

Modify ldapsearch(1) significantly.  Now handles LDAPv3 search
references, extended results, and extended partial results.  LDIF
extended to support these new features and reported version 2.
-L now limits output to LDIFv1 for compatibility reasons.  No
-L is now LDIFv2.  Old alternative form is no longer supported.

Use LDAP_TMPDIR (in ldap_config.h) instead of hardcoded /tmp
Use LDAP_FILE_URI_PREFIX (in ldap_config.h) instead of hardcoded
	file://tmp/

Added -llber 'N' ber_printf format which inserts a NULL if
an internal flag set.  Used for SEQUENCE testing.  Flag must
be set using debugger.  Modified ber_printf to use new format
were needed for extensibility testing.

Added first cut -lldap support for extended responses.
Modified ldapsearch(1) to handle v3 search references when not
chasing.  Also added extended/unsolicited notification handling
and extended partial response handling.  Changes include a
number of LDIF enhancements.

Fixed getpassphrase() returns NULL bugs

Adjust -Z[Z] usage statements
Change ldapsearch to only produce LDIF.

Rename ldap_start_tls() to ldap_start_tls_s() for consistency sake.
Misc other header changes.

undef DEFSEP before defining it

Add ManageDSAit support to back-dnssrv
Fix backend critical controls crash
Move 'associatedDomain' to core.schema

Use ldap_parse_result instead of deprecated ldap_result2error

Force referrals on

Use getpassphrase() instead of getpass() if available.

Fix sasl passwd handling (needs to be copied to other tools)

Y2k copyright update

Fix off-by-one in allocation of urlpre

Change negotiated mechanism:
	If application provide one, use it.  If application doesn't
	provide one, use best of server advertised.
Fix SASL/ANONYMOUS (not normally used, but should work)
PLAIN is not currently working... might be local to me as my
Cyrus installation is a bit hosted.

Fix typos in version checking

with the -t option (writing to /tmp) open files with O_CREAT|O_EXCL to overcome race conditions

StartTLS requires LDAPv3
Set version to required protocol.

ITS#503: Extend ldap tools to support SASL/TLS
Submitted by Gabor Gombas <gombasg@inf.elte.hu>

#define LDAP_LDIF to default to LDIF output

Initial implementation of Kerberos password verification for
simple bind via:
	{KERBEROS}principal
Code is disabled by default (for security reasons).  Use
--enable-kpasswd to enable.  Behind SLAPD_KPASSWD.
Reworked Kerberos detection and split out KBIND as independent
feature (--disable-kbind) (LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND).
KBIND depends upon detection of KRB4 (or KRB425) support.  Detection,
building with eBones (as distributed with FreeBSD 3.4) okay, but
wasn't able to test as I don't have a K4 KDC handy.
--with-kerberos has a number of detection options... most likely
don't work properly.

Add checks to ensure arguments are consistent (v2 vs v3).

Fix broken MSVC builds. The previous round of Mingw32 patches changed some
ifdefs to depend on _WINNT, which is bogus. Added _WIN32 back on these ifs,
and fixed some other include problems.

Add OpenLDAP RCSid to *.[ch] in clients, libraries, and servers.
Replace old Id as needed (back-tcl).
Leave updating of contribWare to contributors (for now).

Cleanup:
Fix printf formats, remove unused variables, add missing prototypes in slapd,
add static/const, add some return types or change to void return type.

Remove extraneous newlines from non-LDIF output

Print "<DEFAULT>" instead of "0" when ldapport=0 in ldapsearch -v

printf "ALL" to stderr.

Remove temporary comment

Add copyright notices.

s/exit(1)/exit(EXIT_FAILURE)/
s/exit(0)/exit(EXIT_SUCCESS)/
add <ac/stdlib.h> where needed and other minor header adjustments

Kludge ldapmodify to accept "version: 1" in LDIF input.

Enhance LDIF handling
ldapsearch:
    use draft guidelines for determining when to use
    -t only writes binary attributes to files
    -tt writes all attributes to files
    output now lists URL instead of path to such files
    -T dir can be used to specify directory to create temp files in
    -V urlprefix can be used to change the URL prefix
    LDIF is now commented (can be disabled using -LL)
    LDIF now contains version attribute (can be disabled with -LLL)
LDIF:
    put interface changed to allow caller to specify how to encode
    put interface uses draft guidelines for determine when to base64 encode
    wrapping kludged to match old off by one bug
Tests:
    removed trailing space from some attributes (to avoid base64 encoding)
    enabled -LLL in defines.sh (should sed output to remove
        wrapping/comments/redundant separators)
Misc:
    updated codes outputting LDIF to use new put interface
TODO:
    handling of version attribute on input
    handling of URLs on input (ie: fetch URL)

Import experimental referral implementation from OPENLDAP_DEVEL_REFERRALS.
Includes support for update referral for each replicated backend.
	Reworked replication test to use update referral.
Includes major rewrite of response encoding codes (result.c).
Includes reworked alias support and eliminates old suffix alias codes
(can be emulated using named alias).
Includes (untested) support for the Manage DSA IT control.
Works in LDAPv2 world.  Still testing in LDAPv3 world.
Added default referral (test009) test.

s/NULL/'\0'/ where appropriate

Attempt to whip user password from command line.

Check for not LDAP_OPT_SUCCESS instead of LDAP_OPT_ERROR.

s/<stdlib.h>/<ac/stdlib.h>/

Initial round 2 memory allocation changes.  THIS IS A WORK IN PROGRESS.
includes single to multiple hooks changes.
ber_mem* reimplementation.
namespace glue (finally naming has not be decided upon nor implemented).
Added ldap_int_strdup to handle "internal" strdup'ing, this version uses hooks.
ldap_pvt_strdup still available for when strdup() is missing, this version
directly uses system allocators.
Updated -lldif to use ber allocators.  Items returned by ldif routines
should be ber_memfree()d as needed.

Add warnings if ldap_set_option() fails.
Check for ldap_set_option() error using LDAP_OPT_ERROR, not -1.
(probably should check != LDAP_OPT_SUCCESS instead).
Added additional usage errors.
Used return(EXIT_FAILURE) instead of exit(1).
Used DIRSEP instead of '/' && '\\'
Moved verbose output to stderr.

ITS#159 fix.  ldaphost may be NULL when used as printf "%s" argument.

found my lber bug... ber_buf should have been freed in ber_peek_tag.  Ugh!

Vienna Bulk Commit
This commit includes many changes.  All changes compile under NT but
have not been tested under UNIX.

A Summary of changes (likely incomplete):

NT changes:
	Removed lint.
	Clean up configuration support for "Debug", "Release", "SDebug",
		and "SRelease" configurations.
	Share output directories for clients, libraries,
		and slapd.  (maybe they should be combined further
		and moved to build/{,S}{Debug,Release}).
	Enable threading when _MT is defined.
	Enable debuging when _DEBUG is defined.
	Disable setting of NDEBUG under Release/SRelease.  Asserts
		are disabled in <ac/assert.h> when LDAP_DEBUG is not
		defined.
	Added 'build/main.dsp' Master project.
	Removed non-slapd projects from slapd.dsp (see main.dsp).
	Removed replaced many uses of _WIN32 macro with feature based
		macros.

ldap_cdefs.h changes
	#define LDAP_CONST const
		(see below)
	#define LDAP_F(type) LDAP_F_PRE type LDAP_F_POST
		To allow specifiers to be added before and after
		the type declaration.  (For DLL handling)

LBER/LDAP changes
	Namespace changes:
		s/lber_/ber_/ for here and there.
		s/NAME_ERROR/LDAP_NAME_ERROR/g
	Deleted NULLMSG and other NULL* macros for namespace reasons.
	"const" libraries.  Installed headers (ie: lber.h, ldap.h)
		use LDAP_CONST macro.  Normally set to 'const' when
		__STDC__.  Can be set externally to enable/disable
		'constification' of external interface.  Internal
		interface always uses 'const'.  Did not fix warnings
		in -lldif (in lieu of new LDIF parser).

	Added _ext API implementations (excepting search and bind).
		Need to implement ldap_int_get_controls() for reponses
		with controls.

	Added numberous assert() checks.

LDAP_R
	_MT defines HAVE_NT_THREADS
	Added numberous assert() checks.
	Changed ldap_pthread_t back to unsigned long.  Used cast
	to HANDLE in _join().

LDBM
	Replaced _WIN32 with HAVE_SYSLOG

ud
	Added version string if MKVERSION is not defined.  (MKVERSION
		needs to be set under UNIX).

slapd
	Made connection sockbuf field a pointer to a sockbuf.  This
		removed slap.h dependency on lber-int.h.  lber-int.h now only
		included by those files needing to mess with the sockbuf.
	Used ber_* functions/macros to access sockbuf internals whenever
		possible.
	Added version string if MKVERSION is not defined.  (MKVERSION
		needs to be set under UNIX).
	Removed FD_SET unsigned lint

slapd/tools
	Used EXEEXT to added ".exe" to routines.  Need to define EXEEXT
		under UNIX.

ldappasswd
	Added ldappasswd.dsp.  Ported to NT.  Used getpid() to seed rand().

nt_debug
	Minor cleanup.  Added "portable.h" include and used <ac/*.h> where
	appropriate.  Added const to char* format argument.

Pass LDAP_OPT_<ON/OFF> instead of (void*)flag to ldap_set_option

Use ldap_memfree() instead of free().

Fix ldap_send_initial_request() to open connection if not already
openned (by ldap_open()).  This allows ldap_init() to function
properly!

ignore SIGPIPE

Update ldap_first_attribute/ldap_next_attribute to handle
BerElement argument per latest IETF ldapext draft c api spec.
That is, caller is solely responsible for freeing the BerElement
allocated and returned by ldap_first_attribute.
Update man pages accordingly.
Update applications accordingly.

Should have left 'scope' alone.

Make ldap_set_option options optional.

Add support for -P protocol_version.

Added lber_get/set_option.  Removed lber_debug/ldap_debug.
Updated other codes as needed.

Added support for password prompting. (-W switch)

Streamlined Kerberos Code.

Backout previous changes made by Dave as they excessive reformatting,
reindentation, and use of spaces instead of tab.  Diffs will be reviewed
to identify and commit only functional changes as time permits.
Note: this is more my fault than Dave's.   I should have provided
clearer guidance.   Live and learn.

Updated Kerberos code, added password prompting. <dave@tamos.net>

Remove extern declarations of library functions from source.c.
  This could cause problems on odd systems.  The generic
  headers should be extended as needed to include necessary
  system headers or, if necessary, make explicit declarations.
Extended ac/string.h header to look for string.h/strings.h if
  STDC_HEADERS is not defined.  Also provide basic declarations for
  str*() functions.  This could cause problems on odd systems.
Extended ac/unistd.h header to define basic declaration for misc
  functions that might be missing from headers.   This includes
  externs for getenv(), getopt(), mktemp(), tempname().
Protect fax500.h from multiple inclusion.  Moved includes of
  system/generic headers back to source files.
Made mail500 helper functions static.
Fixed includes of ctype.h, signal.h, etc. to use generics.
lutil/tempname.c: was including stdlib.h twice, one should stdio.h.
Wrapped <sys/resource.h> with HAVE_SYS_RESOURCE_H.
lber/io.c/ber_get_next(): Changed noctets back to signed.
  Used with BerRead which expects signed int as second arg and
  returns signed int.

Protoized, moved extern definitions to .h files, fixed related bugs.
Most function and variable definitions are now preceded by its extern
definition, for error checking.  Retyped a number of functions, usually
to return void.  Fixed a number of printf format errors.

API changes (in ldap/include):
  Added avl_dup_ok, avl_prefixapply, removed ber_fatten (probably typo
  for ber_flatten), retyped ldap_sort_strcasecmp, grew lutil.h.

A number of `extern' declarations are left (some added by protoize), to
be cleaned away later.  Mostly strdup(), strcasecmp(), mktemp(), optind,
optarg, errno.

Use "generic" ac headers.

Added support for ldap.conf file.  See ldap.conf(5) for details.
Modified clients to reduce use of ldapconfig.h.edit.
ldap_{get,set}_option support is relatively complete.  Needs
to be extended to support other "features" of OpenLDAP.

Initial LDAP_API_FEATURE_X_OPENLDAP commit:
  configure generates ldap_features.h based from ldap_features.h.in
  LDAP_REFERRALS -> LDAP_API_FEATURE_OPENLDAP_V2_REFERRALS
  LDAP_DNS -> LDAP_API_FEATURE_OPENLDAP_V2_DNS

Updated MSVC5 workspaces and projects.
Added ac/stdarg.h and updated liblber encode/decode to use it.

Some gcc -W cleanup

Replaced #ifdef'ed ldap_lderrno() call with ldap_get_option() call.

struct ldap is now opaque to clients.
updated clients to use ldap_get/set_options
ld_options is renamed ld_booleans.  ldap-int.h has accessor macros.
updated libldap to use new accessor macros.

update ldap/lber headers towards ldapext-ldap-c-api-01

merged with autoconf branch

Removed use of paths not defined in ldapconfig.h.edit.
Fixed Dependency Generation not to mess with Make-templates.
	side effect: depends are not carried forward after "make makefiles"

Fixed ldapconfig.h.edit/Make-template to generate ldapconfig.h correctly.
ldif2ldbm.c defaults moved to ldapconfig.h, sed no longer needed.
Changed type of lconn_lastused to time_t.
Added include <time.h> were needed.

Initial revision

Import of FreeBSD LDAP 3.3 Port

Import of Umich LDAP 3.3

RAGE: add support for reading ldap host/base from files

Use autoconf defines

VC++ update... tools now link!

VC++ round 2

Use autoconf headers.

Make LD session options optional.

Add PORT of ldap.conf support from -devel.

Update for Alpha3 from -devel as of OPENLDAP_DEVEL_981116.
Includes everything but ldapext & ldap.conf changes.

Mongo patch: changes from -devel from 981105 snap to present
    Changed LDBM default to sync on writes
    Added mail500 BOUNCEFROM patch
    Added dbcachenowsync option
    Fixed slapd/ldbm id2children bug
    Fixed slapd/shell newline bug
    Fixed whois++ get_dn leak
    Fixed DEC OSF1 (alpha) support
    Fixed r/w lock initialization on non-final Pthreads
    Fixed slapd/slurpd file unlock bugs
    Fixed slurpd string translation bug
    Fixed slurpd/st mutex unlock bug
    Moved detach() to -llutil
    Added lutil_passwd() to -llutil
    Autoconf:
        Fixed thread detection
        Removed gcc -traditional tests
        Changed --enable-dns to require --enable-referrals
        Added -lresolv tests for ldapd and LDAP_DNS
        Added basic ISODE checks
        Added pwd.h &  getpwuid() tests
        Added sys/resource.h test
    Updated NT support (now builds ud)
    Removed lint

Update with latest NT mods.

Fix ldapsearch fp uninitialized bug (from devel)
Ignore make clean rm error (from devel)

Import DEFSEP undef change from devel

with the -t option (writing to /tmp) open files with O_CREAT|O_EXCL to overcome race conditions

Simple ldapsearch (%s) bug fix (ITS#274)

Add -W option to ldapsearch.
(note: log for rev 1.4.2.5.2.1 indicated such was added.  However,
this change appears to be Kerberos related.  in fact, it appears to
back out previous Kerberos change... should be examined by Kerberos
maintainer (if we had such).

Apply ITS#159 (null ldaphost) fix.

Minor changes to support MSVC.

A working ldap_init()!
Plus have --enable-dns imply --enable-referrals unless --disable-referrals.

lber_debug/ldap_debug are always defined and provided by the implementation.

Import password prompting from -devel.

Import improved handling of kerberos bind option.

Fix all user attributes usage statement

Improve -MM usage messages

Add -M[M] to enable manageDSAit control.

Misc updates from HEAD

Update copyrights for year 2002

Don't trim attribute list when -S is specified

Align with HEAD

Import filter print fix from HEAD

Sync with DEVEL, namely -llber handening fixes

Import usage fixes from devel

authc/authz fixes

Update start tls error reporting

Fix passwd clearing

Import minor changes from devel

Imported from devel
+ Fixed clients printf/usage bugs (ITS#749)
+ Fixed slapd spasswd support (ITS#751)
+ Fixed --enable-spasswd (ITS#751)
+ Fixed ldif(5) file:/// bug (ITS#750)

Fix fprintf\'s, missing `prog\' argument

Import changes from devel including:
+       Fixed -lldap SASL got_max_ssf bug
+       Fixed -lldap TCP_NODELAY bug
+       Fixed -llutil sa_flags never set bug
+       Removed lint
plus
	clients/tools ldap_init() fixes
	-lldap SASL fixes
	binary syntax ";binary" transfer change

Import changes from devel
  Fixed clients & -lldap KBIND (ITS#717)
  Fixed clients/tools -R handling
  Fixed slapd IPv6 issues (ITS#716)
  Fixed slapd kpasswd MIT Compatibility (ITS#715)
  Fixed slapd time syntax routines (ITS#713)
  Fixed ldappasswd -A -S crash (ITS#714)
  Fixed ldappasswd user argument usage and man page
  Fixed ldapmodify man page

Import latest from devel including
	updated connection close deadlock avoidance
	SSF ACL fixes
	updated SQL docs
	updated client tool usage

Import -H support and other misc. changes

Remove lint

Import latest from devel

Latest changes from devel

Import misc changes from devel including client/tools
ldap_result() call fixes

Import from devel

Additional updates for devel (NT builds, header changes, todo update)

Merge latest devel codes into releng 2 branch.
Remove back-perl, back-sql, back-tcl from branch as they have yet
to be updated.
Additional changes are needed prior to release of alpha4.

Merge in all devel changes since 2.0-alpha2.
Move OPENLDAP_REL_ENG_2_MP forward.

Merge in all -devel changes made since branch was created.

New version management code
back-bdb cache/dbcache fixes
oidm destroy fix

version checking and empty nvals fix

Round 2 of changes from HEAD

Changes
    Updated libldap TLS certificate checking
    Updated client tool argument handling
    Updated test suite
    Updated liblutil detach handling
    Added libldap ldap_whoami routines
    Added liblber ber_flatten2 routine
    Added liblutil passwd sanity checks
    Fixed liblber PROTOS bugs
    Fixed ber_flush debug level
    Fixed libldap NULL cred bug
    Build Environment
        Check back-bdb requirement for BDB 4.1

plug leak

null base fix

Error message cleanup (already applied to HEAD)

improved LDIF handling

Additional LDIF comments

Updated new entry parsing routines from HEAD

New and improved response parsing

ReSync with HEAD

import NOOP #ifdefs

control updates

Add -y passfile support

remove lint
init variables properly

Fix minor value match bug

progname, etc.

Suck in matched values changes from HEAD

updates from HEAD

Suck in HEAD changes since 2.1alpha

Happy new year!

+       Fixed ldapsearch paged results size 0 bug
+       Fixed libldap SASL host connected to bug
+       Fixed libldap SASL proper sockbuf bug
+       Fixed libldap getaddrinfo hints portability bug

sizelimit, pageresults, and misc fixes from HEAD

Misc fixes including:
+       Fixed slapd set acl recursion (ITS#3140)
+       Fixed slapd entry2mods normalization bug (ITS#3144,3152)
+       Fixed back-ldap normalization bug
+       Fixed pcache cache_entries init bug (ITS#3150)
+       Fixed pcache consistency_check bug (ITS#3151)

from HEAD:
New module build stuff
updateref updates, new SHADOW DBFLAGS, etc.
paging control updates
limits updates
fixed duplicate value checks
fixed permissive modify
sasl auxprop propname changes
back-bdb "" suffix fixes
fixed back-bdb/ldbm approx non-indexing fixings

Sync with HEAD

Sync with HEAD

Cygwin fix

Happy new year

Sync with HEAD

Sync with HEAD

First rounded of changes in prep for 2.2.beta3

Sync with HEAD

Merge in latest changes from HEAD

Changes from HEAD for beta

Suck in changes from HEAD

Happy new year! (belated)

finish backporting ppolicy control response to client tools (ITS#5061)

happy new year

Added ldapsearch bad filter pattern check (ITS#4647)

Don't assume response control is a paged results response.
(Should loop through response controls and do something, anything
(e.g., include message in output) for each.  ldap_find_control(3)
should be avoided.)

Happy new year!

ALL clarification from HEAD

Sync with HEAD

Initial round of changes for 2.3 beta

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

ITS#6755

ITS#6625,ITS#5421

Happy New Year!

Fix rev 1.270: free def_urlpre correctly.  Also free urlpre.

ITS#6651

ITS#6638

move getpassphrase inside tool_bind; make sure password is always malloc'd and freed

happy belated new year

silence warnings

ITS#6049

Add sssvlv overlay

Fix typo in derefcrit control

ITS#6005

Update copyright for next release

ITS#5812

ITS#5768

ITS#5768

Warning cleanup: signed meets unsigned.

Warnings cleanup

silence warnings