CVS log for libraries/libldap/ldap-int.h

Up to [OpenLDAP] / libraries / libldap

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

ITS#5421 comment ldapoptions vs ldapoptions_prefix

Silence stupid MUTEX_FIRSTCREATE warnings

Happy New Year

ITS#6625 concurrency patch cleanup

ITS#6625 concurrency patch from Doug Leavitt @ Oracle .com

Add ldap_sasl_interactive_bind()

ITS#6672 mutex cleanup

happy belated New Year

wrap gmtime for reentrancy (ITS#6262)

Introduce options to configure tcp-keepalive settings per connection. These
settings only work on Linux and are ignore when not supported (see
discussion on -devel)

(nearly blind) fix for NULL in TLS error message (ITS#6079)

fix ldap namespace (part of ITS#5974)

fix misc warnings

ITS#5916 - externally callable functions are ldap_pvt, not ldap_int.

Allow alias dereferencing in search C API; use new API in proxy backends (ITS#5916)

ITS#5655 TLS_PROTOCOL_MIN from Philip Guenther

Update copyright notices

ITS#5812 add SASL_NOCANON / -N option

ITS#5369 SASL/GSSAPi refactoring from Stefan Metzmacher <metze@samba.org>
and Rafal Szczeniak <mimir@samba.org>, with minor cleanups

Pass LDAPURLDescs to connect functions instead of host/port

Connect callbacks need error recovery checks

Add LDAP_OPT_CONNECT_CB connection callbacks

Modular TLS support, proof of concept. tls2.c would replace tls.c,
but I'm leaving tls.c intact for now.

Happy New Year (belated)

cleanup tools

Add LDAP_OPT_X_TLS_CRLFILE, peer cert verification for GNUtls

ITS#4935 SASL_MAX_BUFF_SIZE should be 2^24 - 1

Cleanup last commit

Needs <ac/time.h>

Timeouts should not be malloc'd

ITS#4799 remove kerberos / kbind references

ITS#4799 remove all references to kbind

honor network timeout even when doing full async

First cut to truly async connect:
	- after connect(2), if async the connection is in "connecting" state
	- the first time a request is sent, "connecting" conns are polled
		- in case of success, the request is sent
		- in case still connecting, LDAP_X_CONNECTING is returned;
		  clients are expected to retry later
	- the "async" behavior must be explicitly enabled by setting
	  the LDAP_OPT_CONNECT_ASYNC option

"local" connections need work

minor cleanup

happy new year

don't leave dependencies on liblutil in libldap :)

fix request/result abandon

s/ldap_int_discard/ldap_pvt_discard/

add ldap_int_discard(); use it in proxies (ITS#4717)

better function name

keep count of requests in use

add URI list resorting feature (ITS#4524)

ITS#4422, #4475
Move TLS options into struct ldapoptions.
  Added ldap_int_tls_destroy()
  Added LDAP_OPT_X_TLS_NEWCTX to generate new SSL_CTX

Happy new year!

cleanup

Move lconn_tls_ctx to ldo_tls_ctx. Otherwise clients cannot set it after
ldap_initializ'ing an LD and before connecting on it. Really all of the
global TLS options belong in the ldapoptions struct, instead of static vars.

Fix ITS#3832 must mutex protect ld->ld_conns

ITS#2942 skip referrals that we've already chased

Cast LDAP_BOOL value to LDAP_BOOLEANS; it could only use flags fitting in int.

allow to muck with referrals while chasing...

Happy New Year!

Add callbacks for client TLS connection establishment:
LDAP_OPT_X_TLS_CONNECT_CB and LDAP_OPT_X_TLS_CONNECT_ARG
with int (LDAP_TLS_CONNECT_CB) (LDAP *ld, SSL *ssl, SSL_CTX *ctx, void *arg)
To be called whenever the client library allocates a new SSL* handle.

Poll code needs a bit more work.

Patch for fast synchronous search result processing

basic poll(2) implementation for connect(2) (needs work)
Need to deal with selectinfo...

Mark areas needed poll(2) support with HAVE_POLL.

Happy new year

Add LDAP_DEPRECATED macro
Need to remove use of deprecated functions.

Updated notices and acknowledgements

Back out previous commit - files apart from test.c

ITS#2777 - fix previous commit

mv ldap_int_get_controls to ldap_pvt_get_controls

Make all debug output macros conditional on defined(LDAP_DEBUG).

ITS#2424 use two SASL contexts per session to conform to RFC 2222

Don't do (unsafe) DNS reverse lookups.
HEADS UP: May break some Kerberos deployments.

ITS#2459 (partial) fix.  Eliminate address parameter all together.
Need to look closely at the memcpy.  (It likely can be eliminated
as well.)

More memory context tweaks

More for re-entrant LDAP* handles. Works much better.

Added ld_req_mutex and ld_res_mutex to protect ld_requests and ld_responses
queues for multithreaded access to LDAP*'s. Also used to protect writes and
reads of ld_sb, respectively. Appears to work...

improve last commit

Happy new year

Remove unneeded sasl_ssf param from ldap_int_sasl_open(),
it's set by ldap_int_sasl_external().

ITS#2221: getaddrinfo(3) not thread-safe on some platforms (namely
due to res_() routines).  Change all res_() dependent routines to
share same mutex.

Forced commit, undo previous accidental checkin.

ITS#2153, make sure sockbuf buffer is empty before returning (-2) from
try_read1msg. Blind fix, problem was not duplicated/tested.

ITS #2121 submitted by Dave Steck <dsteck@novell.com> with minor changes.
Patch to allow referrals to be read on synchronous non-search operations.
Treat referrals the same way as MatchDN or ErrorString values.
Store them in the ld structure and provide an option for ldap_get_option
to retrieve them

Move ldap_control_dup() to ldap_pvt.h

Fix ITS#1983, handle writing of large requests. Only one pending request is
allowed per LDAP* handle. It works, but needs review.

Eliminate SASL client session_callbacks. Since proc was always NULL they
never did anything anyway.

ITS#1806, Cyrus 1 doesn't give back our callbacks pointer, must stash it
ourselves.

Mostly based on patches provided by Hallvard B. Furuseth

ITS#1677 - cast away const warnings
ITS#1678 - unsigned char args to ctype funcs
ITS#1682 - don't redefine ldap_debug
ITS#1683 - uninitialized vars
ITS#1703 - ldo_debug initialization
ITS#1705 - unsigned testing
ITS#1706 - socklen_t args
ITS#1719 - back-tcl update (other cleanups/fixes/improvements; yet untested)
ITS#1724 - integerNormalize/integerFilter/integerIndexer bugs
ITS#1725 - libdes not required

Implement back-null (/dev/null style backend)
Cleanup some misc warnings ("%lu" format, unused/uninitialized vars,
        ambiguous operator precedence)

Kurt, please regenerate configure

move ldap_int_put_filter to ldap_pvt_put_filter
and other cleanup

Fix #include of sasl.h

Don't use 'shtool mkln' as ln(1) replacement.
Allow both <sasl/sasl.h> and <sasl.h>

Update Cyrus SASL detection to always look for <sasl.h> regardless
of version and then try -lsasl2 and -lsasl.  Make SASL code
conditional on SASL_VERSION_MAJOR, not HAVE_CYRUS_SASL.

Support for Cyrus SASLv2. Untested.

Misc allocator cleanup

Update copyright statements

Some misc cleanup

We'll need queue macros in -llber...

Fix queue.h include

Renamed parse_numericoid to ldap_int_parse_numericoid since it is
no longer static. Moved declaration to ldap-int.h and removed extern
from getdn.c

More str2rdn tweaks

Add ftest (filter test) to the mix, needs work.
Misc cleanup of other tests.
Add *.dsp files for tests

Clean up some symbol scoping

Back out last change

Remove srchpref and disptmpl stuff.

from jon@symas.com - misc Windows cleanup

Remove lint and misc MSVC updates

NT updates from jon@symas.com.

skeleton of ldap_str2nd/dn2str; works with most of the simple cases, but there's much to do with unicode, I think

Added the easy part of NLS support, behind an #ifdef.

Clean up CLDAP stuff

Resurrection/rewrite of CLDAP (RFC1798 Connectionless LDAP).

Compile with -DLDAP_CONNECTIONLESS to use this code.
For slapd, use "-h cldap://" to listen on UDP.
For ldapsearch, use "-H cldap://" to query on UDP.
Client-side support is very minimal:
  no automatic timeout/retries
  no basedn wildcard expansion on results
  no support for specifying multiple servers at once.

chasing multi-level referrals core dumps (ITS#1346) bug fix
from Zachary Amsden <zach@mirapoint.com>.

Blindly fix TLS/SASL external interaction.

Fix -H ldaps:// crashes due to rework of TLS code

Check for critical client controls.

Another round of TLS updates to support secure referral chasing

move TLS ctx to lconn struct in prep for supporting TLS with referrals
need to rework cert check to use per lconn host name

Sync with 2.x

new rebind proc
new SASL locking

unifdef -ULDAP_UFN

Trim last of CLDAP cruft

Update SASL bufsize checks

Rework scope defaulting to only default scope for references.
Might break LDAPv2 partial results

First cut of SASL/EXTERNAL

remove LDAP_Debug macro

References with empty dn (ITS#817)

s/LDAP_PF_UNIX/LDAP_PF_LOCAL/ so that we actually declare ldap_connect_to_path(). Also fix the decleration to match the function

ITS#717 kbind fixes

Fix port defaulting

Remove CLDAP cruft

Expose ldap_create_control
Conform schema routines to ldap naming conventions

Expose sasl flags to -lldap (so they can be quiet)
Fix interactive and automatic modes.  Quiet needs work.

First cut SASL "interactive" and "quiet" modes (default is "automatic")

Rework SASL command line arguments.  Default is now to authenticate
using best available mechanism.  (authzid prompting to be disabled)
To use simple bind, -x is required (implied if -P 2) with -D/-[Ww]
To use simple "anonymous" bind, just -x will do.

Update SASL code to reuse context through life of session.
Replace 'negotiated' with 'interactive' bind
Add hooks for SASL/EXTERNAL
Disable SASL security layers
Rework SASL command line and config file parameters

Minor cleanup

Added -llber 'N' ber_printf format which inserts a NULL if
an internal flag set.  Used for SEQUENCE testing.  Flag must
be set using debugger.  Modified ber_printf to use new format
were needed for extensibility testing.

Added first cut -lldap support for extended responses.
Modified ldapsearch(1) to handle v3 search references when not
chasing.  Also added extended/unsolicited notification handling
and extended partial response handling.  Changes include a
number of LDIF enhancements.

Fixed getpassphrase() returns NULL bugs

Round one of LDAP_F() macro changes.  In this round we rename
macros into our namespace and limit use to headers.  A subsequent
round will add macros to separately handle forward declarations
of variables from declaration of function prototypes.  The last
round will add additional macros for declaring actual variables and
functions.

Update PF_INET6 and PF_UNIX detection, both default to auto

Apply Novell's IN_KERNEL support (ITS#576)

Add VLV and SortList Control API and related (and other) I-Ds

Use LDAP_VFREE and friends.  Other misc code cleanup.

DNSSRV use res_query, not res_search
Update configure and depend --enable-dnssrv upon finding res_query
Update back-dnssrv to better handle ManageDSAit control

Remove support for DNS DNs (not to be confused with X.500 DN using
domainComponents (DC)).

remove old STR_TRANSLATION feature.  The use of this feature
was only of limited use with LDAPv2 (worked okay if no non-T.61
values existed) but downright dangerous in the face of LDAPv3.
Any translation must be schema aware and the BER isn't.

move --enable-dns (LDAP_API_FEATURE_X_OPENLDAP_V2_DNS) to Attic

ITS#537: lber io rewrite from Gambor Gombas.
Copyright 2000 Gábor Gombás. All rights reserved.
This is free software. You may redistribute and use it under the same
terms as OpenLDAP itself.

LDAPv3 referrals changes by Steve Sonntag @ Novell

Y2k copyright update

Added debuglevel parameter to ldap_int_initialize().

ITS#503: Extend ldap tools to support SASL/TLS
Submitted by Gabor Gombas <gombasg@inf.elte.hu>

Eliminate second session protocol version field.

Move ldap_utf8_*() declarations from ldap-int.h to ldap_pvt.h.
We may likely want to expose the routines at a later date (ldap_utf8.h?).

We'll need ldap_utf8_strpbrk() as well.

Add initial (untested) implementations of ldap_utf8_strtok,
ldap_utf8_strcspn, ldap_utf8_strtok.

Add additional UTF-8 routines

Initial UTF-8 routines.

Initial implementation of Kerberos password verification for
simple bind via:
	{KERBEROS}principal
Code is disabled by default (for security reasons).  Use
--enable-kpasswd to enable.  Behind SLAPD_KPASSWD.
Reworked Kerberos detection and split out KBIND as independent
feature (--disable-kbind) (LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND).
KBIND depends upon detection of KRB4 (or KRB425) support.  Detection,
building with eBones (as distributed with FreeBSD 3.4) okay, but
wasn't able to test as I don't have a K4 KDC handy.
--with-kerberos has a number of detection options... most likely
don't work properly.

Added support for connecting to LDAP servers located using DNS
SRV records. Added lock around resolver library which is shared
by the DNS SRV code and the getdxbyname() code.

Added ldap_pvt_sasl_bind() prototype to ldap_pvt.h. This
required importing sasl.h into ldap_pvt.h, thus that import
was removed from ldap-int.h.

Merged in preliminary support for Cyrus SASL library;
support for DCE slash-delimited, left-to-right DNs;
support for a domain socket transport (enable with
--enable-ldapi); and extensions to URL parsing to
support the latter transport.

Add BINDDN user-only directive to .ldaprc
Used only for simple bind when dn == NULL and password != NULL.

Changes for URI spport:  New routines ldap_initialize and ldap_create; LDAPURLDesc replaces LDAPServer, LDAPURLDesc list used instead of ldo_defhost.

Fixes for NT dynamic linking.

Fixed use of LDAP_F macro
See README 1.27 log

experimental ITS#109 fix: make kbind open default connection if necessary.
implemented ldap_open_defconn() to centralize default connection
opening in open.c.  Used by ldap_open, kbind, and send_initial_request().

Add OpenLDAP RCSid to *.[ch] in clients, libraries, and servers.
Replace old Id as needed (back-tcl).
Leave updating of contribWare to contributors (for now).

Introduce and use LDAP_GCCATTR() = __attributes__() in gcc

LDAP_OPT_NETWORK_TIMEOUT feature (ITS#239) from Lars Uffmann.
Needs a bit more work.
	- global net/api timeouts are not inherited on session creation.
	- need configure check for inet_aton() (coming soon)
	- ioctl/fcntl portability issues (should share implementation
		with lber routines)

make ldap.ld_lberoptions unsigned, like berelement.ber_options

Options for TLS

Fix LDAP_CONNECTIONLESS code rot

Forced commit to correct previous log, files were not changed:

Create ldap_int_tblsize and ldap_int_ip_init().
Initialize from ldap_int_initialize().

ldap-int.h

constify ldap_int_put_controls, ldap_control_dup, ldap_controls_dup

ber_int_t, ber_tag_t, ber_socket_t, ber_len_t
added lber_types.h.nt, lber_types.h.in
removal of NULLxxx internal macros (in favor of NULL).
ch_free added to slapd,slurpd/ch_malloc.c
#define free ch_free (should be removed after s/free/ch_free/g) in proto-slap.h
ch_malloc and friends use ber_memalloc and friends

Add ber_strdup(), remove ldap_int_strdup(), add LDAP_STRDUP macro
and ripple change through -lldap.

Minor adjustments to the LBER_VFREE() & LDAP_VFREE macros.

Clean up memory handlers.  Share vector free routines... ber_memvfree().

Clean up LDAP_BOOL_GET and fetching via ldap_get_option().
Modify apitest to test for non-zero instead of LDAP_OPT_ON.

Initial round 2 memory allocation changes.  THIS IS A WORK IN PROGRESS.
includes single to multiple hooks changes.
ber_mem* reimplementation.
namespace glue (finally naming has not be decided upon nor implemented).
Added ldap_int_strdup to handle "internal" strdup'ing, this version uses hooks.
ldap_pvt_strdup still available for when strdup() is missing, this version
directly uses system allocators.
Updated -lldif to use ber allocators.  Items returned by ldif routines
should be ber_memfree()d as needed.

Add LBER_ and LDAP_ memory allocators/deallocators for internal
library use:
  LBER_ macros expand to system routines.
  LDAP_ macros expand to new ber_ allocators.

Add ber_ and ldap_ memory allocators/deallocator:
  ber_ routines are wrappers of LBER_ macros.
  ldap_ routines are wrappers of ber_ routines.

Removed safe_realloc() macro from various files.  This issue
(if an issue) should be resolved across whole package.

ldapmodify.c now uses ber_ allocators to resolve ber_bvfree()
vs. WIN32 multiple heaps issue.

These changes should facilate implementation of
  ber_set_option( NULL, LBER_OPT_MEMORY_FN, ...)
and
  ldap_set_option( NULL, LDAP_OPT_MEMORY_FN, ...).

Changed lc_conn to be a pointer to a BerElement to aid in state management.
Added validation to exposed opaque data structures (BerElement, Sockbuf,
and LDAP).  Added macros BER_VALID, SOCKBUF_VALID, LDAP_VALID.
Added ber_pvt_ber_bytes() and ber_pvt_ber_remaining() macros to hide
some ber internals.  These really should be handled by ber_get_option().

Use difftime() to determine cache age.

rename ldap_pvt_init_utils() to ldap_int_utils_init() and provide
prototype in ldap-int.h.

ldap.h:
 added comments
 removed LDAP_MAX_ATTR_LEN
 removed LDAP_COMPAT* from <ldap.h> but not code.
 move LDAP_DEFAULT_REFHOPCOUNT to ldap-int.h
 added experimental options macros
 added LDAP_CONTROL_REFERRALS macros
libldap:
 Replace ld_attrbuffer with per use allocated attributed.
 ldap_first/next_attribute attributes now must be freed (as per draft).
 unifdef -DLDAP_API_FEATURE_X_OPENLDAP_V2_REFERRALS

Initial checkin of ldap_search_ext() and friends.

Add UL to LBER tags.

Add LDAP_CONST to kerberos bind routines

Vienna Bulk Commit
This commit includes many changes.  All changes compile under NT but
have not been tested under UNIX.

A Summary of changes (likely incomplete):

NT changes:
	Removed lint.
	Clean up configuration support for "Debug", "Release", "SDebug",
		and "SRelease" configurations.
	Share output directories for clients, libraries,
		and slapd.  (maybe they should be combined further
		and moved to build/{,S}{Debug,Release}).
	Enable threading when _MT is defined.
	Enable debuging when _DEBUG is defined.
	Disable setting of NDEBUG under Release/SRelease.  Asserts
		are disabled in <ac/assert.h> when LDAP_DEBUG is not
		defined.
	Added 'build/main.dsp' Master project.
	Removed non-slapd projects from slapd.dsp (see main.dsp).
	Removed replaced many uses of _WIN32 macro with feature based
		macros.

ldap_cdefs.h changes
	#define LDAP_CONST const
		(see below)
	#define LDAP_F(type) LDAP_F_PRE type LDAP_F_POST
		To allow specifiers to be added before and after
		the type declaration.  (For DLL handling)

LBER/LDAP changes
	Namespace changes:
		s/lber_/ber_/ for here and there.
		s/NAME_ERROR/LDAP_NAME_ERROR/g
	Deleted NULLMSG and other NULL* macros for namespace reasons.
	"const" libraries.  Installed headers (ie: lber.h, ldap.h)
		use LDAP_CONST macro.  Normally set to 'const' when
		__STDC__.  Can be set externally to enable/disable
		'constification' of external interface.  Internal
		interface always uses 'const'.  Did not fix warnings
		in -lldif (in lieu of new LDIF parser).

	Added _ext API implementations (excepting search and bind).
		Need to implement ldap_int_get_controls() for reponses
		with controls.

	Added numberous assert() checks.

LDAP_R
	_MT defines HAVE_NT_THREADS
	Added numberous assert() checks.
	Changed ldap_pthread_t back to unsigned long.  Used cast
	to HANDLE in _join().

LDBM
	Replaced _WIN32 with HAVE_SYSLOG

ud
	Added version string if MKVERSION is not defined.  (MKVERSION
		needs to be set under UNIX).

slapd
	Made connection sockbuf field a pointer to a sockbuf.  This
		removed slap.h dependency on lber-int.h.  lber-int.h now only
		included by those files needing to mess with the sockbuf.
	Used ber_* functions/macros to access sockbuf internals whenever
		possible.
	Added version string if MKVERSION is not defined.  (MKVERSION
		needs to be set under UNIX).
	Removed FD_SET unsigned lint

slapd/tools
	Used EXEEXT to added ".exe" to routines.  Need to define EXEEXT
		under UNIX.

ldappasswd
	Added ldappasswd.dsp.  Ported to NT.  Used getpid() to seed rand().

nt_debug
	Minor cleanup.  Added "portable.h" include and used <ac/*.h> where
	appropriate.  Added const to char* format argument.

Change LDAP.ld_lberoptions to `short', to realign with BerElement.ber_options

Added support in liblber and libldap for partial reads, i.e. situations in
which only part of a LDAPMessage is available on a socket.

The server-code seemed to handle this correctly already, so I didn't touch
it.

My apologies for the hack in ber_get_next :-).

The new&improved Sockbuf. This adds the infrastructure on which
support for TLS and SASL will be build.

Please inform me of any problems.

Remaining LDAP_COMPILING_R should be LDAP_R_COMPILE.

Updates for MSVC 5.0.  Fix libraries names to be ol{ber,dap,..}32.lib.
Fix library/include paths for building "Release".
Create getpass() from ud's mygetpass().

Add lber_log_print support to libldap.
Redefine Debug macro to call ldap_log_printf(NULL, lvl, fmt, ...)
Should replace each Debug statement with direct call to ldap_log_printf
passing LDAP session if available.

Updates regarding threads and names.

Add simple copyright notice.

Add client/server control free/dup functions and
ldap_set/get_option support for controls.

Move LDAPServer, LDAPConn, LDAPRequest, and LDAPCache
from ldap.h to ldap-int.

Added lber_get/set_option.  Removed lber_debug/ldap_debug.
Updated other codes as needed.

Provide framework for ldap_r and reentrant/thread safety levels.
  -lldap_r can now be implemented...

-lldap reentrantancy improvements from Bart Hartgers <A.Hartgers@phys.tue.nl>
including use of ctime_r, gethostby*_r, etc..  Also reworked ldap_sort_entries
to be reentrant.
Need to add code to properly set LDAP_API_FEATURE_THREAD_SAFE.

Add strdup.c from -llutil, renamed to ldap_strdup() and always used.
This will allow us to substitute malloc() at a later date.

add ldap_strdup and eliminate strdup in libldap

Protoized, moved extern definitions to .h files, fixed related bugs.
Most function and variable definitions are now preceded by its extern
definition, for error checking.  Retyped a number of functions, usually
to return void.  Fixed a number of printf format errors.

API changes (in ldap/include):
  Added avl_dup_ok, avl_prefixapply, removed ber_fatten (probably typo
  for ber_flatten), retyped ldap_sort_strcasecmp, grew lutil.h.

A number of `extern' declarations are left (some added by protoize), to
be cleaned away later.  Mostly strdup(), strcasecmp(), mktemp(), optind,
optarg, errno.

Removed space in front of `#endif'; `make depend' did not like it.

Move extern declarations to headers.
Update NT portable.h and features.h

Added support for ldap.conf file.  See ldap.conf(5) for details.
Modified clients to reduce use of ldapconfig.h.edit.
ldap_{get,set}_option support is relatively complete.  Needs
to be extended to support other "features" of OpenLDAP.

Initialize openldap_ldap_global_options struct (not yet used).

Initial LDAP_API_FEATURE_X_OPENLDAP commit:
  configure generates ldap_features.h based from ldap_features.h.in
  LDAP_REFERRALS -> LDAP_API_FEATURE_OPENLDAP_V2_REFERRALS
  LDAP_DNS -> LDAP_API_FEATURE_OPENLDAP_V2_DNS

Split out ldapoptions from struct ldap to facilate global options.
Add openldap_ldap_initialize() call to ldap_init/ldap_open/ldap_get/set_options.

struct ldap is now opaque to clients.
updated clients to use ldap_get/set_options
ld_options is renamed ld_booleans.  ldap-int.h has accessor macros.
updated libldap to use new accessor macros.

More header work toward draft-ietf-ldapext-ldap-c-api-01.

update ldap/lber headers towards ldapext-ldap-c-api-01

merged with autoconf branch

Merged LDAPworldCurrent (P1-10,13,15,16,19-22)
Cleaned up old rcs keyworld subs

Initial revision

Import of FreeBSD LDAP 3.3 Port

Import of Umich LDAP 3.3

changes from Terry Lambert

LDAPworldP15: Internal LDAP function rename

LDAPworld P1: DEC and other portability issues

clean up includes

The world compiles and links....
Need to sort out remaining ifnames and run testsuite.

VC++ Port: round 1

Update copyright of build environment, includes, and liblber/libldap.

Add PORT of ldap.conf support from -devel.

Update 1.1alpha with latest build environment changes from -devel.
	includes libtool support
	includes select yield changes
	headers updates
Apply strdup() -> ldap_strdup() patch.

Update for Alpha3 from -devel as of OPENLDAP_DEVEL_981116.
Includes everything but ldapext & ldap.conf changes.

Mongo patch: changes from -devel from 981105 snap to present
    Changed LDBM default to sync on writes
    Added mail500 BOUNCEFROM patch
    Added dbcachenowsync option
    Fixed slapd/ldbm id2children bug
    Fixed slapd/shell newline bug
    Fixed whois++ get_dn leak
    Fixed DEC OSF1 (alpha) support
    Fixed r/w lock initialization on non-final Pthreads
    Fixed slapd/slurpd file unlock bugs
    Fixed slurpd string translation bug
    Fixed slurpd/st mutex unlock bug
    Moved detach() to -llutil
    Added lutil_passwd() to -llutil
    Autoconf:
        Fixed thread detection
        Removed gcc -traditional tests
        Changed --enable-dns to require --enable-referrals
        Added -lresolv tests for ldapd and LDAP_DNS
        Added basic ISODE checks
        Added pwd.h &  getpwuid() tests
        Added sys/resource.h test
    Updated NT support (now builds ud)
    Removed lint

s/NULLxxx/NULL
s/xxx/ber_xxx_t/

Add basic configure support for BER types and fixed build errors/warnings.
Still needs much work.

Introduction of BER types (ber_int_t, ber_tag_t, ber_len_t, ber_socket_t)
and lber_types.h (NT version only, need to write configure support for other
platforms).   Changes to sources are likely incomplete and buggy.
This is a work in progress.

Update copyrights for year 2002

Import multilevel referral chase bug fix from HEAD

Import TLS external fix from HEAD, hopefully it gets more testing here

Import TLS fixes from HEAD

Pull in a variety of bug fixes from HEAD including
	critical client control handling
	tls cert checking
	sasl/tls ref handling
	empty dn handling
Also removed ufn search (normally I would have left it
in but the merge was easier this way).

cyrus sasl locking

remove cldap cruft

Update bufsize handling

Update TLS codes (cert checking, fix crash condition)
Update ref chasing code

Import SASL/EXTERNAL (TLS) code from devel

Import updated referral handling codes
Fixes ITS#799 & ITS#817

s/LDAP_PF_UNIX/LDAP_PF_LOCAL/ so that we actually declare ldap_connect_to_path(). Also fix the decleration to match the function

Import changes from devel
  Fixed clients & -lldap KBIND (ITS#717)
  Fixed clients/tools -R handling
  Fixed slapd IPv6 issues (ITS#716)
  Fixed slapd kpasswd MIT Compatibility (ITS#715)
  Fixed slapd time syntax routines (ITS#713)
  Fixed ldappasswd -A -S crash (ITS#714)
  Fixed ldappasswd user argument usage and man page
  Fixed ldapmodify man page

Import latest changes from devel including connection deadlock fix,
TLS fixes, man page updates, and updated NIS schema validators.

Import latest changes from devel including removal of CLDAP and BDB2 cruft

Import latest from devel

Import from devel

Merge latest devel codes into releng 2 branch.
Remove back-perl, back-sql, back-tcl from branch as they have yet
to be updated.
Additional changes are needed prior to release of alpha4.

Merge in all devel changes since 2.0-alpha2.
Move OPENLDAP_REL_ENG_2_MP forward.

Merge in all -devel changes made since branch was created.

ldap_connect_to_host portability fix...

Happy (belated) new year

Changes
    Updated libldap TLS certificate checking
    Updated client tool argument handling
    Updated test suite
    Updated liblutil detach handling
    Added libldap ldap_whoami routines
    Added liblber ber_flatten2 routine
    Added liblutil passwd sanity checks
    Fixed liblber PROTOS bugs
    Fixed ber_flush debug level
    Fixed libldap NULL cred bug
    Build Environment
        Check back-bdb requirement for BDB 4.1

Rework SASL/EXTERNAL w/ IPC

updated ldif fixes
libldap getaddrinfo thread safety
ready for release

Sync with HEAD

Referrals and misc other changes

update headers

Sync with HEAD

Sync with HEAD

Suck in latest changes from HEAD

Suck in HEAD changes since 2.1alpha

Backout fast sync patch

sync update
restart fix

Happy new year!

Happy new year

Sync with HEAD

Sync with HEAD

First rounded of changes in prep for 2.2.beta3

Sync with HEAD

Changes from HEAD for beta

Happy new year! (belated)

ITS#4935 patch from HEAD

happy new year

Happy new year!

libldap updates from HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD
Ready for release?

Sync with HEAD

Sync with HEAD

Sync with HEAD

More for ITS#5421

More for ITS#6625

ITS#6625,ITS#5421

Add ldap_sasl_interactive_bind()

Happy New Year!

ITS#6672

ITS#6262

happy belated new year

Introduce options to configure tcp-keepalive settings per connection. These
settings only work on Linux and are ignore when not supported (see

ITS#6079

Warning fixes

ITS#5916

Use modular TLS
ITS#5655
ITS#5887
ITS#5462
ITS#5789

Update copyright for next release

ITS#5812

ITS#5369

Add LDAP_OPT_CONNECT_CB connection callbacks
Pass LDAPURLDescs to connect functions instead of host/port

Happy new year! (belated)

Sync with HEAD for OL 2.4.5

ready for release

Quick merge: everything from HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD