CVS log for servers/slapd/back-meta/conn.c

Up to [OpenLDAP] / servers / slapd / back-meta

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

fix and improve candidate selection (ITS#6799)

Happy New Year

noop commit: cleanup 0 -> REP_RESULT in SlapReply

add per-target tls options; start tls if required by idassert (ITS#6642)

fix potential leak introduced by fix to ITS#6574

make sure non-anonymous bind uses DN and creds (ITS#6574)

don't risk leaving around client library error codes; try to return additional information

happy belated New Year

fix previous commit (ITS#6267)

Silence warning (missing braces ininitializer)

refactor connection handling

better logging of privileged connections (more to come; might be unstable for a bit)

honor per-target tls/chase referrals/rebind as user (ITS#6190)

Update copyright notices

fix quarantine (ITS#5592)

print targets' status

Happy New Year (belated)

rename ldap_pvt_thread_pool_setkey_x() to ldap_pvt_thread_pool_setkey() (as part of ITS#5309)

silence warnings

set BINDING appropriately (ITS#5185)

better fix for ITS#5154

add helper for internal searchs for objectClass=*

cleanup back-meta according to back-ldap

fix dumb overparanoid test

one more round of cached connections fixes/improvements

better async connection and partial error handling

happy new year

pool privileged connections (ITS#4791)

- add support for "use-temporary-conn" much like back-ldap
- fix various connection creation/setup concurrency issues
- use shared connection when always idasserting (similar to ITS#4781)
- reduce the impact of schema mapping when not used (tnx to gprof)
- fix temporary/tainted connection leak in abnormal conditions

fix leak when 'rebind-as-user' is set (and client searches without prior bind)

rework compare
fix several minor issues with using dangling pointers and uninitialized data
fix caching of privileged connections
fix issues with unresponsive target failures during search

fix concurrency issue when binding before a search; rework and cleanup data structures (remove unused members)

more on clarification of special proxy identities and resilience to connection failure

don't abandon binds in progress; rather unbind (ITS#4663).
Better logging for tracing

invalidate idle connection if a candidate target does not respond for the duration of time limit...

refine previous commit

count candidate unavailable (quarantined) targets

more cleanup for previous commit

port identity assertion to back-meta; share as much code as possible with back-ldap; misc cleanup

remove unnecessary locks and resource cleanup

make sure heavy concurrency doesn't cause quarantine loops

more about previous commit

rework quarantine locking and so

more concurrency cleanup

cleanup

refine (and fix) back-meta handling of search initialization (ITS#4519)

misc cleanup

cleanup previous commit

make room for plugins that deal with quarantine end

implement proxy quarantine (ITS#4569)

line up back-meta to ITS#4546

make sure realloc'd memory is reset

cleanup

add URI list resorting feature (ITS#4524)

parallelize dobind/search (ITS#4519)

address protocol version issues (ITS#4488)

actually, if a connection is already in the AVL tree, use it if not binding; otherwise use a tainted one; taint connections that must be freed when refcnt goes to zero

complete previous commit (protect binds)

make sure only on bind at a time occurs; release resources only when appropriate

don't add unnecessary message

make sure an invalid connection is always released as appropriate

more on recovery (ITS#4429)

seems to fix the equivalent of ITS#4429 in back-meta; had to give up per-target conn-ttl and idle-timeout

cleanup previous commit

honor "chase-referrals no" (ITS#4447)

add support for "subtree-exclude"

rework connection handling on multiple binds with the same connection

make sure no invalid candidate gets used (had a core for i == META_TARGET_MULTIPLE)

implement proxy long-lived connection TTL

improve back-meta retry capabilities (ITS#4328)

refine fix to ITS#4315; apply it to back-meta as well

Happy new year!

implement (per-target) per-conn proxy-side idle-timeout (ITS#4115); revitalize (per-target) network-timeout in back-meta; fix issue with connection initialization error in ldap_back_retry(); cleanup configuration of back-ldap

fix dangling resources issue in slapd-ldap; completely rework slapo-chain to fix the resource leak/concurrency issue; add support for multiple well-known URIs to set credentials for, and deal with unknown URIs anonymously; similar reworking and cleanup for slapd-meta

silence warnings...

remove from AVL before freeing...

backport write operation timeouts from back-meta to back-ldap; minor cleanup & silence warnings

allow per-target retry in searches; taint invalid connections; don't massage the pseudorootdn (ITS#4150)

various cleanup

fix ITS#4073

deal with the case a pseudorootn is not defined

plug selected leaks resulting from ITS#4056 & ITS#4057 implementation; may need further cleanup and reworking to streamline a bit

cleanup states/timeout handling in back-ldap/meta; add connection pooling and defer of pseudoroot bind to back-meta

fix test before releasing resources (ITS#3990)

save target errors for later evaluation

implement overlapping targets enhancement (ITS#3711)

fix resources release issue

use trylock only where necessary

more about rewrite leaks

fix yet another leak

Silence "unused <something>" warnings

fix concurrency issues

fix potential deadlock; first round of refcnt for connections

add "matchedDN" field when appropriate

first round of provisions for back-config

cleanup

a bit more reworking and streamline; the change to the LAST_CONN test seems to eliminate the last LDAP_BUSY problems on the only machine that was showing it yet; please test

honor T-F filters (ITS#3706) and lots of cleanup

fix retry; add per-target configurable number of retries; addresses ITS#3672, ITS#3676 & ITS#3680

more on error handling reworking; should address ITS#3672 and ITS#3676

cleanup

remove unnecessary call

fix previous commit

add basic support for retry; protect internal bind behind mutexes; rework search, review candidate selection; minor cleanup.  Passes concurrency test036

slightly reduce malloc overhead; minor cleanup

a) implement a new candidate selection procedure, based on target naming
   context checking and multiple match resolution via an internal search
b) move the candidate listing in a persistent per-thread buffer
c) fix bind procedure
d) minor cleanup

(a) and (b) should address ITS#2935; (b) and (c) should address ITS#3171

A test is also added

enable tls-related code only if available; import fix for asynchronous starttls from back-ldap

temporarily revert to synchronous start tls

import selected improvements from back-ldap: use asynchronous Start TLS exop; allow propagating TLS if used in the original connection; minor cleanup

import referral chaing options from back-ldap

major namespace cleanup & minor fixes

Happy New Year!

unifdef -UNEW_LOGGING

exploit new frontend API 2 protocol error mapping

add "searchFilterAttrDN" rewrite context, and allow filterstring rewrite

initial round of fixes related to ITS#2986

Happy new year

notices and acknowledgements

notices and acknowledges

add network timeout (ITS#2413 reworked)

use SLAP_PTRCMP

ensure all metasingleconns are init'ed

works fine now

first cut at grouping rewrite/map stuff; needs work

propagate selected changes to back-ldap

remove more unnecessary args

new API; compiles if proxy is disabled

cleanup versioning

Happy new year

improve error messages

rework connection pool handling (reduce amount of malloc)

operationsError != Internal Error
hence, s/LDAP_OPERATIONS_ERROR/LDAP_OTHER/

Coverted LDAP_LOG macro to use subsystem ID int values instead of string values

Deleted Connection->c_cdn. Use conn->c_dn instead...

Changed conn->c_cdn to struct berval.

leftover ber_bvdup eliminated; rewritten ber_bvdup in terms of ber_dupbv; eliminated wrapper macro; other ber_* improvements

Update copyright statements

Added dnPretty2/dnNormalize2 using preallocated destination berval

conversion to berval DN

pseudo-root dn bind; a couple of minor fixes

minor cleanup; some error handling and log fixes

added new logging to back-meta

This is the commit of:
  - librewrite, for string rewriting; it may be used in back-ldap
    by configuring with '--enable-rewrite'. It must be used in
    back-meta. There's a text file, 'libraries/librewrite/RATIONALE',
    that explains the usage and the features. More comprehensive
    documentation will follow.
  - enhancements of back-ldap (ITS#989,ITS#998,ITS#1002,ITS#1054 and ITS#1137)
    including dn rewriting, a fix to group acl matching and so
  - back-meta: a new backend that proxies a set of remote servers
    by spawning queries. It uses portions of back-ldap and the rewrite
    capabilities of librewrite. It can be compiled by configuring
    with `--enable-ldap --enable-rewrite --enable-meta'.
    There's a text file, 'servers/slapd/back-meta/Documentation', that
    describes the main features and config statements.

Note: someone (Kurt?) should run 'autoconf' and commit 'configure' as
my autoconf version must be different: my configures contain a number
of differences and I didn't feel comfortable in adding them :)

ITS#2496 use SLAP_PTRCMP for pointer comparisons

First round of imports from HEAD

Misc changes from HEAD

Sync with head

s/LDAP_OPERATIONS_ERROR/LDAP_OTHER/

mostly new logging

Suck in changes from HEAD
    Fix slapd schema error alignment bug
    Update slapd SASL proxy policy code
    Update slapd require "strong" check
    Update back-bdb entry locking
    Add slapd disallow bind_simple_unprotected directive
    Add back-monitor added monitorContext support
    Add slapd IPv4/v6 only options
    Ass slapd SASL setpass support
    Remove lint
    Build Environment
        Add monitor backend test
        Update <ac/socket.h> SHUT_RDWR
        Fix SASL-less build issues
        Fix back-perl build issues

just in case, remove cruft (ITS#3804)

Happy new year!

Suck in changes from HEAD (CHANGES needs ITS #s)
+       Fixed slapd syncrepl replication bugs
+       Fixed slapd slurpd update bugs
+       Fixed slapd inappropriate bind error disclosure bugs
+       Fixed slapd sun_path portability bug
+       Fixed slapd passwd referral memory leak
+       Fixed slapd sasl userdb checkpass bug
+       Added slapd Delivery Method syntax validation
+       Updated slapd overlay framework
+       Updated back-ldap backend
+       Updated back-meta backend

Sync with HEAD as of 14-March-2004

Happy new year

Sync with HEAD

Sync with HEAD

Happy new year! (belated)

import fix to ITS#5185

import back-ldap/back-meta improvements from HEAD

fix dumb overparanoid test

line up with HEAD (ready for release)

better handling of critical conditions

import selected fixes/improvements to proxy backends from HEAD:

        Fixed slapd-ldap/meta privileged conn caching (ITS#4547)
        Fixed slapd-ldap chase-referrals switch (ITS#4557)
        Fixed slapd-ldap bind behavior when idassert is always used (ITS#4781)
        Fixed slapd-ldap response handling bugs (ITS#4782)
        Fixed slapd-ldap/meta privileged connections handling (ITS#4791)
        Fixed slapd-meta retrying (ITS#4594, 4762)
        Fixed slapo-chain referral DN use (ITS#4776)

happy new year

import fixes to ITS#4488,4497 and related documentation

Changes suggested by Ando.

import selected fixes/enhancements from HEAD (ITS#4387, partial ITS#4390)

Misc fixes from HEAD

Fixed slapd-ldap/meta session reuse issue (ITS#3415)
Fixed slapd-monitor thread issue (ITS#3418)

Happy new year!

ITS#4115 fixes for back-meta/ldap

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD
Ready for release?

Sync with HEAD

Sync with HEAD
Changes needs updating for release...

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Merge from HEAD

Initial round of changes for 2.3 beta

Sync with HEAD

Sync with HEAD

ITS#6758

ITS#6799

Happy New Year!

ITS#6642

More for ITS#6574

ITS#6574

don't risk leaving around client library error codes; try to return additional information

happy belated new year

Connection code refactoring

ITS#6190

Update copyright for next release

ITS#5592

print targets' status

Happy new year! (belated)

ITS#5309 work

Silence warnings

Better fix for ITS#5154

import fix to ITS#5185

Forced commit, prev was:
Import changes from HEAD
+ Helper for internal searches for objectClass=*
+ proxy cache fixes (ITS #5112, #5113, #5114)

/tmp/msg

Sync with HEAD for OL 2.4.5

Quick merge: everything from HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD

Sync with HEAD