CVS log for doc/man/man5/slapd.conf.5

Up to [OpenLDAP] / doc / man / man5

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

ITS#6816 cleanup

ITS#6816 MozNSS doc additions from Rich Megginson @ Red Hat. Needs cleanup.

ITS#6780 document multi-listener-thread support

ITS#6525 gnutls cipher spec is unclear

Happy New Year

Add syncrepl suffixmassage

allow to specify a per-database list of attributes that need to be always collected, even if not explicitly requested by clients (addresses ITS#6513)

happy belated New Year

document keepalive (ITS#6389)

minimal documentation of authid-rewrite* stuff

ITS#6394 rid is decimal not hex

ITS#6373 sync_use_subentry keyword

ITS#6297 Allow hex in serverID directive

add support for TCP buffer configuration (ITS#6234)

ITS#5829 document the default modulepath

ITS#6023 minor formatting tweaks

ITS#6147 fix typos

ITS#6147 add sasl-auxprop config

ITS#5975: Fix pidfile/argsfile doc - they are independent of debug mode.

ITS#5836 add writetimeout keyword

Update copyright notices

retry every hour, but don't save it; on the contrary, complain every time syncrepl is configured without retry (ITS#5825)

fix typo (ITS#5821)

ITS#5788: Add references to subordinate keyword/olcSubordinate attribute.

ITS#4556 clarify Add requirements

ITS#4556 add_content_acl keyword

add dontUseCopy and proxiedAuthz "non_critical" disallow switches (ITS#5785)

ITS#5734: Search limits by baseDN - limits dn.this="..."

minor clarifications

allow definition of syntaxes via configuration, including X-SUBST (ITS#5663)

ITS#5536 note serverID requirement for glued databases

Use network-timeout instead

Add syncrepl timeout / network_timeout options

replica keyword is obsolete, remove it

Revert prev commit, ITS#4871 was already addressed in 1.278

ITS#4871 - index directive & slapd.conf(5)

Happy New Year (belated)

Integer indexing - handle huge values

Forced commit to check logs/cvsweb

index_intlen defaults to 4 now

further clarify size limit related issues in sync replication (ITS#5243)

Tweak prev commit

Add index_intlen keyword

ITS#5200 fix typo in ITS#1749 patch

document the "monitoring" option

Clarify rootdn requirements

Add sortvals doc

improve previous commit; fix ITS#5108 by letting both SID and RID be 0..4095, input/output in decimal, but consistently handled in hexadecimals within CSN

ITS#5076 and remove reference to ldbm as a backend option

Recommend loglevel stats

note default loglevel (ITS#5027)

Removed all references to ldbm from test data and man pages. Only slapd-ldbm.5 left.

Explain rootDSE

Added GNUtls notes

slurpd is strongly deprecated

Fix typo in prev commit

ITS#4910 note that mirrormode now requires serverID

Note overlay config ordering

More logging tweaks

Document the "hidden" keyword.

Uncomment logfile doc - it's been implemented this whole time, and it's
useful on Windows

a (clearer) remainder...

a remainder...

Document serverID directive

Align pidfile example with default slapd.conf

syncrepl inherits default TLS settings from main slapd config

Use soelim to fix .so problem
(Assumes soelim is generally available)

happy new year

Moved lists of backends and overlays to their own manpages

further clarify validity of search limits, and "beautify" paragraph

note that the replication identity may need to be treated specially by the consumer

mirrormode is still single-master, but must be enforced externally

five forms.

Nobody expects the Spanish Inquisition! s/three/four/

Note line length limit.

ITS#4613 note that lastmod also controls entryCSN and entryUUID

Add access control note to authz-regexp discussion

fix "require" inheritance and handling of "none" (ITS#4574)

Update RFC references

Clarify that "disallow bind_anon" doesn't prohibit anonymous access.

Add syncrepl TLS config keywords

fix typos

fix "packets" debug value

refuse illegal values for "threads" (ITS#4433)

Add subord scope for syncrepl

s/multimaster/mirrormode/

Add multimaster keyword

ITS#4354 add a note about avoiding Anonymous DH.

LDBM is obsolete.

refine fix to ITS#4320

factor ACI code out of slapd; now it can only use dynacl layer

minor fixes: typos, comments about ITS#3523

Happy new year!

part of ITS#3523

don't expose unused (and deprecated) log levels

add more checks on input values

ITS#4146,#4266 syncrepl search spec is not identical to ldapsearch(1)...

StartTLS cleanup

reflect recent code changes

mention base scoped search requests with empty base DN (ITS#4162)

need to reharse hexadecimals and powers of 2...

clarify some logging issues

ITS#4017 add TLSDHParamFile

Comment out obsolete ucdata-path directive

One more try, deleted corrupt revision. Add tool-threads keyword.

Cleanup, proxy cache is no longer tied to meta

Delta-syncrepl doc updates

ITS#3996 add notes about glue interaction with other overlays (syncprov)

Remove more glue references

Reinstate subordinate directive, delete references to slapo-glue

moved to contrib/slapd-overlays/allop

note slapo-allop

Add userPassword protection to example.

Add OVERLAYS section

Note that relay backend is experimental (copied from slapd-relay.5).

Add slapd-hdb

refresh list of known overlays

add an "OBSOLETED DIRECTIVES" section and list "subordinate"

refresh info about supported backends (added config, ldif; trimmed tcl) addresses ITS#3866

Manpage typos

Undocument LDAPv2 Kerberos options

remove slapd-tcl(5)

Remove redundant note indication.

Cleanup prev commit

ITS#3293 add description of syncrepl starttls keyword

Deleted syncrepl updatedn

ITS#3478 the rootdn is always needed when using syncrepl

Happy New Year!

fix ITS#3441

Deleted "subordinate" keyword, added slapo-glue doc

more on ITS#3396: note that the filter is mandatory, and that the protocol must be ldap://

CRL checking options for ldap.conf and slapd.conf

clearly indicate what the default rules are

syncrepl retry feature

clarify that the names of the configure statements are case-insensitive, despite style considerations lead to use uppercase for some and lowercase for others

NEW_LOGGING

Clarify which kinds of regexs are used.

ITS#2588, ITS#2661 docs.

Update SSF comments

Add default note

Add localSSF slapd.conf(5) directive to set SSF associated
with ldapi:// sessions.

update and cleanup

further improve loglevel selection

allow to use names to set loglevel

use hard limit instead of returning adminLimitExceeded when requested limit exceeds hard; improve (and document) syntax; modify test025 accordingly

manual cleanup

cleanup limits

mention new tools

Add note about syncrepl Persist retries

add granular op restriction

add group authz

typo

Rename config options and attribute names (for 2.3).

fix braindead config option (mostly harmless)

further clarify size limits

document search disable feature (spin-off of limit on unchecked entries)

completion of limits w/ paged results control

Add NEW_LOGGING note for the commented-out "debug" and "logfile" options.

clarify updatedn (again)

ITS#2768: configuring slurpd's interval between replog checks
based upon a patch submitted by Jason Townsend (Apple).

Add note about overlay directive

cleanup DN style in limits

document saslAuthzTo/saslAuthzFrom new syntax; add onelevel style to DN type

password-hash now takes a list of mechanisms

Clarify updatedn

allow search limits based on groups (ITS#2967)

Happy new year

allow 'all' vs. 'any' sasl-authz-policy

Fix typos

Clarify that the updatedn should not be same as the rootdn.

misc updates
 - syncrepl : id -> rid
 - man page update

Support multiple sync replication at the consumer :
1) simultaneous operation of multiple active sync replication threads
2) cookie management for individual sync replication thread
   (include rid=%3d to the slapd cookie command line option (-c))

keeps syncrepl manpage sections current

Add a basic DIT content rule test.
Fix DIT rules to allow extensibleObject in AUX
unifdef -DSLAP_EXTENDED_SCHEMA

ITS#2621, reference slapd.plugin

document ditcontentrule directive

Schema checking option for LDAP Sync replication

manual update for proxy cache (apurva)

slapd.conf man page update (LDAP Sync replication configuration)

Add clarification about authzDN which don't exist in the DIT

sasl-regexp clarifications

ITS#2622: ucdata is in DATADIR

Replace some tabs with spaces.
Split some too long preformatted lines.

Remove SEE ALSO locale(5); the locale option has been gone for ages.

Add BACKENDS section in slapd.conf(5).
Briefly compare back-bdb and back-ldbm.
Remove mention of MDBM and NDBM.  Rename GNU DBM to GDBM.
Fix spacing typos.  Prefix an octal file mode with 0.
Mention "notags" (new name for "nolang" from the attribute options patch).
Add SEE ALSO slapd-monitor(5) to slapd.conf(5).

ITS#2594 add URI support for replica config

s/tls/starttls/

remove documentation for bind_simple_unprotected
(which was axed log ago)

clarify that updatedn permits replica updating subject to access controls.

add slurpd pid/args files

Clarify "users" terminology

ITS#2389, describe conn_max_pending/auth keywords

Fix typo (ITS#2379)

LDAPv2 is Historic

suffixalias is no longer supported

Max workers was lowered to 16.

Disable reverse lookups by default for security
(and performance) reasons.

Happy new year

Fix typos.

Implement user-defined tagging attribute options and ranges

set keyword to noEstimate and document it

improve limits handling and consistency; return "Admin limit exceeded" instead of "Unwilling to perform"

clarify how to specify no limits

use keyword "unlimited" instead of -1 for no limits

Update anon

Rework unprotected simple bind checks

if "disallow bind_simple_unprotected", require at least SSF of 2

Clarify that "security ssf=n" applies to "disallow bind_simple_unprotected".

Clean up hash password scheme stuff

Add some clarification as to what hash algorithms are used
with each password-hash scheme.

Fix errors in replica directive

ITS#1893 Add (terse) schemadn description

Remove misleading (untrue) text about known syntax OID macros.

Add option to disallow unprotected simple authentication.
Add protected simple authentication as a "strong" mechanism.

Added sasl-authz-policy

Generate man page date from version.sh

Update to the 'gentle SIGHUP' patch.  (ITS#1679)

- Let write operations return unwilling-to-perform after
  'gentle shutdown' has been initiated.
- Change -1 to 2 in slapd_gentle_shutdown and slapd_shutdown, since
  sig_atomic_t can be unsigned (ITS#1736).  The 'gentle SIGHUP' patch
  is older than ITS#1736 but was applied later, so it reintroduced
  the problem.

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, June 2002.

Add {CLEARTEXT} to password-hash possibilities

Note that rootpw can only be set if rootdn is under suffix.

Gentile HUP shutdown from Hallvard

Documentation patch #4  (ITS#1749)

			================
Written by Hallvard B. Furuseth and placed into the public domain.
This software is not subject to any license of the University of Oslo.
			================

Small changes:
- Fix typo slapd_meta -> slapd-meta in slapd-meta(5).
- Add slapd-dnssrv(5) to SEE ALSO in slapd.conf(5).
- Add descriptions of the files in FILES sections.
- Add $HOME/.udrc to FILES in ud(1) and ud.conf(5).
- Add ldaprc (without ".") and ENVIRONMENT VARIABLES in ldap.conf(5).
- Change manpage references to proper ".BR name (section)".

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, May 2002.

3rd step at updating docs by hallvard Furuseth (with minor changes in slapd-meta.5)

second round at ITS#1749

First commit of Hallvard's backend documentation effort

Backend documentation patch, version 1

================
Most of this text is taken from OpenLDAP.  The work of rewriting it
to manual pages is done by by Hallvard B. Furuseth and placed into
the public domain.  This software is not subject to any license of
the University of Oslo.
================

Hallvard B. Furuseth <h.b.furuseth@usit.uio.no>, April 2002.

ITS#1749 added maxderefdepth, suffiaxalias, TLSCACertificatePath,
ucdata-path, moduleload, modulepath. sasl-external-x509dn-convert has
been deleted from the code.

Comment out "logfile", its code is behind #ifdef NEW_LOGGING in config.c.

ITS#1749 added "debug" description, commented out because it has no effect
without NEW_LOGGING. Added logfile.

ITS#1749 added BDB options

ITS#1735 fix typos

Mostly based on patches provided by Hallvard B. Furuseth

ITS#1677 - cast away const warnings
ITS#1678 - unsigned char args to ctype funcs
ITS#1682 - don't redefine ldap_debug
ITS#1683 - uninitialized vars
ITS#1703 - ldo_debug initialization
ITS#1705 - unsigned testing
ITS#1706 - socklen_t args
ITS#1719 - back-tcl update (other cleanups/fixes/improvements; yet untested)
ITS#1724 - integerNormalize/integerFilter/integerIndexer bugs
ITS#1725 - libdes not required

Implement back-null (/dev/null style backend)
Cleanup some misc warnings ("%lu" format, unused/uninitialized vars,
        ambiguous operator precedence)

Kurt, please regenerate configure

allow attribute exclusion list in selective replica

fix typo

ITS#1680: Fix idle timeout typo

s/rootDSEfile/rootDSE/

Add clarification to password-hash directive

Added TLSVerifyClient configuration notes

rm noautosubtypes

Update copyright statements

disallow bind_v2 is now default

Undocument 'schemacheck off'

Some index clarifications

Added description of "subordinate" keyword.

Rework indexing code, removing "autolang" and making
"subtypes" and "lang" default behavior.

small adjustment

update limits stuff

Allow size and time limits in slapd.conf for anonymous bound search operations

access control man page

Use defined Root DSE attributes.

Developed by Julius Enarusai/IBM
Copyright IBM Corp. 2001

Use of this source code is subject to the terms of The OpenLDAP
Public License Version 2.7, 7 September 2001.  No trademarks of the
IBM Corporation are to be used to identify, endorse or promote any
products derived from this code without the prior written consent
of IBM.

Password-hash doesn't support UNIX, KERBEROS, SASL schemes.

Add dnnolocking warning

allow multiple limits setting on one global/per backend config line

more intuitive special limits configuration

fix a couple of typos; schemacheck was duplicated

add global, per backend and per op_ndn time/size soft, hard and to-be-checked limits (exploited by back-ldbm); see slapd.conf(5) for details

regex-based per op_ndn time/size limits

suffix option; allows partial replication of a database

Move backend_syncfreq code down into back-ldbm.  Creates new configuration
for LDBM backends called "dbsync", which takes minimum of one argument up
to 3 args which are sync frequency, # of delays, and delay periods.  See
man page update for "dbsync" configuration for more details.

Backout directory config option

Misc updates to password codes / docs

Add support for separate max incoming for anonymous and authenticated
sessions (defaults: 256K and 16M respectively).

document sockbuf_max_incoming

Add an LDBM backend "directory" directive (in addition to
the existing database "directory" directive) to allow setting
of a DB_ENV directory.  Should likely be database specific.

Randfile

Document the "threads" directive

Fix typo in concurrency description

Note that the directory containing the replogfile as well as
the slurpd temporary directory should have limited read/write/execute
access.

Zap defaultaccess option

fix maxbufsize=factor typo

Make sure authzid form produces a valid subject DN.  Support
both u: and dn: forms.
Rework sasl-regex DN be of the form
	uid=user,cn=realm,cn=mech,cn=authz
Fix up slapd.conf(5)

Comment on rootpw only be valid if rootdn is with namingContext

s/saslregex/sasl-regex/
Other minor updates

Implementation of SASL authorization.

Update slurpd with StartTLS and additional SASL parameters

Add 'defaultSearchBase' configuration directive to help support
brain-damaged LDAPv2 clients.

Add more bind allow/disallow flags

Add "allow tls_2_anon" to allow StartTLS to force session to anonymous.
Add "disallow tls_authc" to disallow StartTLS when session is authenticated.
Create and use connection2anonymous routine for consistency.

Add sasl-host directive

Add security factors to man page

Add disallow and requires to man page.  Fix sasl ssf handling bug.

Add URI to admin guide in See Also section

Document sasl_secprops

Update date as well

Update index description with substr varients and
(experimental) subtyping options.

Fix up examples

Update man page header

Add descriptions for sasl options.
Clarify other options and re-order a bit.

rename admin guide

Added SASL authentication to slurpd for connecting to slave LDAP servers.

Update date

s/SLAPD and SLURPD/OpenLDAP/ .. (admin guide)

Clean up attributetype and objectclass description

Minor updates, needs to be updated and cleaned up
Should be PRIMARY source for configuration options.

remove locale option.  OpenLDAP is designed only for the "C" locale.

Add reference to slappasswd(8)

Reworked thread code to better support thread-library specific
r/w locks and thread pools.  Hide internal structures (using
pthread'ish technics).  Place common code in threads.c.  Move
no-thread code to thr_stub.c.  Move thread pool code to tpool.c.
Removed setconcurrency call from initializer, added 'concurrency'
directive to slapd.  Tested code under pthreads, pth, and no-threads.

Remove old schema directives

Y2k copyright update

Move default LDBM directory from /usr/tmp to $(localstatedir)

Add comment concerning 'directory' LDBM option... a separate directory
must be specified for each database.

Add reference to RFC 2307 (rootpw)

Initial commit of new ACL engine.  Engine supports descrete access
privs, additive/substractive rules, and rule continuation.  Existing
rules that use 'defaultaccess none' should be 100% compatible.  Rules
that rely other defaultaccess settings will require addition of
explicit clauses granting the access.
Needs additional testing and tuning of logs

Change 'attribute' directive to 'attributetype'
(and allowing 'attribute' for backwards compatibility).
manuals and *.schema to be updated as time permits.

Reimplement LDBM_SYNC/LDBM_NOSYNC code (dbnosync).
Old code applied sync flags to store(), however supported DBMs
require such flags to be specified during open().  The new
code now applies flags in ldbm_cache_open (which calls ldbm_open).
ldbm_cache_close() now calls ldbm_sync().  This will force
a updating of on-disk contents after each LDAP operation.
The old code either failed to sync the on-disk contents until
close or synced on every store.   Per LDBM operation syncing
*should* be safe enough... real data safety requires transactions.
Removed nosync option from BDB2 as it is not compatible with
txn support.
Also added code to disable DBM level locking as slapd is only
process acessing the databases (dbnolocking).

Add RCSid and Copyright

Update for attribute, objectclass, and objectidentifier descriptions.

s/ldif2ldbm/slapadd/ and similiar changes
ldif updates (add URL description).

lastmod is on by default.

Document a few TLS options that do something.

Import experimental referral implementation from OPENLDAP_DEVEL_REFERRALS.
Includes support for update referral for each replicated backend.
	Reworked replication test to use update referral.
Includes major rewrite of response encoding codes (result.c).
Includes reworked alias support and eliminates old suffix alias codes
(can be emulated using named alias).
Includes (untested) support for the Manage DSA IT control.
Works in LDAPv2 world.  Still testing in LDAPv3 world.
Added default referral (test009) test.

initial commit of idletimeout code...  everything but the actual timeout.

ITS#118: Remove "delete" and add [self] in access levels for "defaultaccess"

Make 'schemacheck on' the default.

Add locale support (slapd.conf keyword "locale") to slapd if HAVE_LOCALE_H

Definition of slapd pid and args files as slapd.conf general parameters;
introduction of pid/agrs parameters to the test-suite slapd.conf files;
creation of sub-directory test/var for storage of pid/args files during test;
update of the slapd and slapd.conf man pages.
(The change reduces dependency on ldapconfig.h, since SLAPD_PIDEXT
 and SLAPD_ARGSEXT are deleted from the code.)

Document fact that rootpw need not be cleartext.

Fix typo in dbcachenowsync description.

Fix minor formatting problem (missing .TP) with dbcachenowsync description.

Make flush_writes the default.  Change option to 'dbcachenowsync'.
Change backend struct option to li_dbcachewsync.

merged with autoconf branch

Initial revision

Import of FreeBSD LDAP 3.3 Port

Import of Umich LDAP 3.3

U-MICH -> OpenLDAP change.
Added ACKNOWLEDGEMENT of U. Michigan contribution.

U-Mich -> OpenLDAP update

Import slapd.conf and ldap.conf changes from -devel
Mainly comment on 'read' privs and provide references to man pages

Apply minor fixes from -devel.

Mongo patch: changes from -devel from 981105 snap to present
    Changed LDBM default to sync on writes
    Added mail500 BOUNCEFROM patch
    Added dbcachenowsync option
    Fixed slapd/ldbm id2children bug
    Fixed slapd/shell newline bug
    Fixed whois++ get_dn leak
    Fixed DEC OSF1 (alpha) support
    Fixed r/w lock initialization on non-final Pthreads
    Fixed slapd/slurpd file unlock bugs
    Fixed slurpd string translation bug
    Fixed slurpd/st mutex unlock bug
    Moved detach() to -llutil
    Added lutil_passwd() to -llutil
    Autoconf:
        Fixed thread detection
        Removed gcc -traditional tests
        Changed --enable-dns to require --enable-referrals
        Added -lresolv tests for ldapd and LDAP_DNS
        Added basic ISODE checks
        Added pwd.h &  getpwuid() tests
        Added sys/resource.h test
    Updated NT support (now builds ud)
    Removed lint

Change slapd.conf example directory to $localstatedir/openldap-ldbm

Import updated SLAPD .args/.pid file handling from devel.

Add updateref directive to manual.

Update copyrights for year 2002

Import dbsync

Add replica suffix.

Backout "directory" option

Import crypt salt format and misc manual page updates from HEAD

Add BDB CDB support from HEAD
Add sb_max_incoming_auth support
Update CHANGES

randfile

Fix last commit

Document threads

Import man page updates from devel

Remove non hash schemes from passwd-hash description

Import misc manual page updates

Add TLS Support
Update SASL Support

suck in changes from devel
Fixed -lldap TLS issues (ITS#733)
Fixed -lldap_r NT threads (ITS#732)
Fixed slapd/ldbm DB_PRIVATE not set bug (ITS#725)
Fixed slapd/ldbm nextid reporting bug
Fixed slapd syntaxes/mr routines (ITS#739)
Fixed slurpd -r buffer overflow (ITS#722)
Added slapd syntax/mr routines
Added slapd allow/disallow options
Added slapd defaultSearchBase and DN verify (ITS#723)
Build Environment
  Added Corba & Java Schema
  Updated MSVC projects for BDB 3.1

Import latest from devel

Import man page updates from devel.

Suck in latest from devel, mostly example/documentation changes

Suck in last minute devel changes

Import latest changes from devel including removal of CLDAP and BDB2 cruft

Import slurpd SASL bind support

Import latest changes from devel

Import latest from devel

Import from devel

Merge latest devel codes into releng 2 branch.
Remove back-perl, back-sql, back-tcl from branch as they have yet
to be updated.
Additional changes are needed prior to release of alpha4.

Import OID config directives documentation from devel.

Merge in all -devel changes made since branch was created.

ITS#2525 import ditcontentrule description from HEAD

updatedn clarification from HEAD

Update RFC refs

Merged config patches from HEAD:
	ITS#2594 replica uri
	replica-pidfile, replica-argsfile

remove disallow bind_simple_unprotected

ITS#2493: attributeoptions man page update

ITS#2389 docs from HEAD

doc updates

clarify LDAPv2 support issue

suck in misc updates from HEAD

Happy (belated) new year

Default workers is now 16.

First round of imports from HEAD

sync with head (less paging)

Add "unlimit"

update_anon

Update build tools

Disable suffixAlias support.  Needs much work.

Sync with HEAD

Misc doc updates

sasl updates

global_schemadn

Such in changes from HEAD

Suck in changes from HEAD
    Fix slapd schema error alignment bug
    Update slapd SASL proxy policy code
    Update slapd require "strong" check
    Update back-bdb entry locking
    Add slapd disallow bind_simple_unprotected directive
    Add back-monitor added monitorContext support
    Add slapd IPv4/v6 only options
    Ass slapd SASL setpass support
    Remove lint
    Build Environment
        Add monitor backend test
        Update <ac/socket.h> SHUT_RDWR
        Fix SASL-less build issues
        Fix back-perl build issues

rootpw changes from HEAD

updates from HEAD

Suck in latest changes from HEAD

Latest changes from HEAD.

Suck in HEAD changes since 2.1alpha

Happy new year!

Import ITS#3292 syncrepl starttls doc from HEAD

Import ITS#3478 note from HEAD

ITS#3476 clarify syncrepl updatedn usage

import fix to ITS#3396

retry parameter description is move to HEAD - to be added to releng later.

syncrepl retry parameter

Forced commit, proper log entry for previous commit is:
	Fixed slapd syncrepl persist interval issue (ITS#3064)

Fixed slapd extended match memory leak (ITS#3146)

more limit fixes

Suck in latest docs

from HEAD:
New module build stuff
updateref updates, new SHADOW DBFLAGS, etc.
paging control updates
limits updates
fixed duplicate value checks
fixed permissive modify
sasl auxprop propname changes
back-bdb "" suffix fixes
fixed back-bdb/ldbm approx non-indexing fixings

Add replication interval support

sync with HEAD

Import updatedn clarification from HEAD.

Sync with HEAD

Happy new year

Sync with HEAD

Sync with HEAD

Sync with HEAD

First rounded of changes in prep for 2.2.beta3

Sync with HEAD

Changes from HEAD for beta

Happy new year! (belated)