CVS log for servers/slapd/bconfig.c

Up to [OpenLDAP] / servers / slapd

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Set appropriate error code, when trying to delete non-leaf
entry from cn=config

Allow deleting Cft_Misc config entries by setting a delete
handler in the ConfigOCs structure

silence warning

removing global overlays should work now as well

ITS#6858 fix segv if adding values out of order

ITS#6843 Fix cn=config slapadd for global overlays with private
database instances (e.g. slapo-chain)

ITS#6837 make sure objectclasses are processed in correct
inheritance order

Add substring matching rules for some of the olc-schema attributes.
Allows for easy extraction of individual objectclass definitions using
matchedValues searches.

config OID for back-perl

Fixed the overlay delete code to allow removing
cn=config overlays again.

Dynamic config for back-shell

Dynamic config for back-passwd

ITS#6822 fix back-config's default ACL when overlays are in place

Happy New Year

ITS#6758 config_back_add: Don't set sr_text if compareTrue

ITS#6758 Avoid SlapReply reuse, simple cases.
Caller provides and reuses a SlapReply it does not read after
initialization.  So reinitialize or move the declaration inwards.
In case of refint, move the rs parameter into refint_repair().

ITS#6758 config_build_entry, avoid SlapReply reuse

Do not use the 'SlapReply *rs' passed to config_build_entry().  Instead
pass a new one to op->o_bd->be_add() and copy the output sr_err to rs.
This takes care of most SlapReply reuse in bconfig.c.

ITS#6758 bconfig.c: ensure sr_text==NULL if sr_err==LDAP_SUCCESS
config_modify_internal(): Do not send rs->sr_text with success.
config_back_modify(): When slap_bv2ad() can set rs->sr_text,
set sr->sr_err too and catch failure.

noop commit for ITS#6758: simplify future commits

add support for ADD_IF_NOT_PRESENT and SOFTDEL internal modification types (ITS#6561)

support back-config (ITS#6624, Ondrej Kuznik)

Add support for multiple listener threads. Lightly tested on Linux,
Winsock needs a couple more tweaks

Disallow removing global and cn=config overlays for now.
Those require some special handling.

add support for don't use copy in SASL auxprops lookup/store (ITS#6475; TODO: document new directives)

allow to specify a per-database list of attributes that need to be always collected, even if not explicitly requested by clients (addresses ITS#6513)

happy belated New Year

implement support for selective iteration in slaptools (ITS#6442)

declaration after code (introduced by ITS#6428 fix)

Fix rev 1.403 (ITS#6428): C90 does not accept mixed declarations and code

ITS#6428 fixes for olcTimeLimit

global limits can also be set in "cn=config" (more forITS#6428)

apply frontend limits when deleting olcSizeLimit from a database (more forITS#6428)

ITS#6428 apply global sizelimit changes to all databases

ITS#6408, fix r1.265 (from ITS#4884) - use correct ce_type

Ignore attempts to Add cn=schema,cn=config

ITS#6392 fix authid-rewrite parsing

ITS#6363 cleanup prev commit

ITS#6373 fix subentry keyword

ITS#6373 add sync_use_subentry keyword

Initialize ConfigArgs before calling config_del_vals (ITS#6363)

remove unused parameter idx (ITS#6356)

Alternate ITS#6324 fix.  Use bitmask, handle -1 (LDAP_DEBUG_ANY) specially.

more ITS#6324: fix fprintf(%u, long) format

ITS#6342 include <ac/unistd.h>

more about ITS#6324

don't "overflow" debug levels (ITS#6324)

ITS#6297 Allow hex in serverID directive

remove unneded code

Fix Debug() format (%x -> %lx) since rev 1.385

More ITS#6234: // comment from rev 1.384 -> /**/

silence warning

add support for TCP buffer configuration (ITS#6234)

use UINT where appropriate (silence warnings)

ITS#5946 always allow mirrormode to be set to FALSE

ITS#5942 consolidate server URL match to config_check_my_url().
In syncrepl, assume consumer pointing to same server but different
searchbase is OK otherwise ignore config.

check the value of the olcSubordinate attribute

subordinate needs a suffix (ITS#6216)

Add sssvlv config

ITS#6162 accept non-decimal loglevels

For ITS#6157: Catch most invalid cancels/abandons, and honor them before waits

allow to delete olcLimits values (ITS#6159)

ITS#6147 fix typos

ITS#6147 add sasl-auxprop config, default to "slapd"

ITS#6135 reinit TLS context after changes

ITS#6139 password-hash has no max # args

set Conf->what for authz-regexp

ITS#6109 fix readonly restriction

ITS#5836, add writetimeout keyword for timing out hung writers

fix ldap namespace (part of ITS#5974)

more about ITS#5940

ITS#5613 compare listener URLs verbatim with serverID URLs

fix use of dangling pointers (ITS#5924)

fix structuralObjectClass modification (glue, ITS#5921; w/ relax, ITS#5792)

FIx prev commit, OID clash

ITS#5655 TLS_PROTOCOL_MIN from Philip Guenther

Update copyright notices

ITS#5897 fix bval length of serverID w/URL

return error codes (ITS#5867)

don't muck with shadow flags if database is already shadow (ITS#5850)

ITS#5572 cleanup unneeded code

ITS#4556 allow Add content checking to be configured per-DB

add dontUseCopy and proxiedAuthz "non_critical" disallow switches (ITS#5785)

olcLogFile missing from olcGlobal (ITS#5765)

ITS#5755 values from slapd.conf aren't all strictly validated; detect and
report syntax errors when generating LDAP format.

Warning cleanup: signed meets unsigned.

fix overlays with private instances of databases (ITS#5736)

allow private databases to be instantiated by global overlays (ITS#5735)

Make sur attribute ACL are evaluated on ADD operations (see ITS#4556)

allow definition of syntaxes via configuration, including X-SUBST (ITS#5663)

add back-config support to slapo-retcode(5)

silence warnings

allow databases to be deleted  (hidden behind LDAP_DEVEL)

don't dereference NULL pointer

A new entry's index should not be larger than the number of its siblings (ITS#5684)

Fix prev commit

ITS#5571 prevent Adds from displacing {0}config

Forced commit - prev commit fixes ITS#5571

Fix entry insert order

ITS#5440 add eq rules for olcRootDN / olcSchemaDN

ITS#5540 check for structural_class() failures

ITS#5563 don't die if there are no listeners when matching serverID URL.

Experimental code for delete support in back-config. Only overlays
supported currently.

pass ConfigReply into overlay_config() to allow progating error messages
back through back-config

ITS#5383 use public OID for config schema, no more hiding

ITS#5328 - return LDAP result code from config_back_entry_get (back-config bi_entry_get_rw)

Don't emit global ACLs for other database than frontendDB (ITS#5352)

don't error out if replacing a non-existant attribute, create opattrs in
config_build_entry() to have them also when started with -f (ITS#5343)

error out if modify_delete_vindex() fails (ITS#5343)

Clean up config.h

Happy New Year (belated)

Convert back-sock to dynamic config

ITS#5284 fix overlay order

Integer indexing - handle huge values

Change integer indexing to ordered only, no backward compatibility

Silently restrict index_intlen to 4-255.

Tweak prev commit

Add index_intlen keyword for ordered indexing of integers

Fix test050

Fix rev 1.266, was creating {0}config entry prematurely.

ITS#5186 check for multiple suffixes at config time, not open time

ITS#5209 sasl_host may be different from global_host

Don't leak logfiles

Fix error message propagation

Revert prev commit, bogus

Save return code from cleanup handler

Partial revert from 1.246, not sure what's the point

Check for cleanup on Adds, not just Modifies

ITS#4884 fix prev commit

Use attr_valfind instead of value_find_ex to optimize lookups

Preliminary sorted value support

Use OLcfgCt{Oc|At} arc for contrib modules

Attribute/Modification value counters

Add IA5String macro

Fix schema undo crash

ITS#5082 RE23 compatibility, allow olcPasswordHash in global entry

Partially resurrect cn=Include stuff - parse from LDIF and ignore.

note what SID the server is assuming

Convert collect to dynamic config. Even though it's only a demo...

allocate OID for back-sql configuration

improve previous commit; fix ITS#5108 by letting both SID and RID be 0..4095, input/output in decimal, but consistently handled in hexadecimals within CSN

add memberOf overlay

Register dyngroup OID

fix yet another potential dereference of NULL op (caught by Coverity)

uniformly exploit rootdn bind; add support for rootdn bind to backends that didn't have it (ITS#4962)

Fix prev commit

ITS#5082 must remove olcPasswordHash from global config...

ITS#5082 allow olcPassdwordHash in frontendDB config

add back-config support to back-relay

Reworked recent backend API changes, now using a separate struct,
(ConfigReply) for the error messages.

initialize msg[] Array, fixed typo

Added a new parameter (ConfigArgs*) to the _db_init, _db_open, _db_close and
_db_destroy functions.

Revert integer type change from rev 1.281 (ITS#5035) for now.  It just
replaced one inttype bug with another, the proper fix is to change the API.

"register" slapo-rwm

Fallout from ITS#4986 - remove unused param of select_backend()

Fix integer overflow in slap_loglevel_get() - ITS#5035.

ITS#4870 remove lint

Give OperationBuffer normal struct members instead of using
LBER_ALIGNED_BUFFER(OPERATION_BUFFER_SIZE), as discussed in ITS#4078.
Add a corresponding SyncOperationBuffer in overlays/syncprov.c.

Add CRLfile option for GNUtls

Add back-monitor (and its OID arc) to Backend/Database registry

Remove unused variables

ITS#4949 make config_syslog accumulate across multiple values
Can set to zero to explicitly clear it. (As well as just deleting
all values.)

Disallow runtime delete of modload values

Fix prev commit, config_obsolete

Axe slurpd / replog support

olcDatabase=config always gets index 0,
don't allow multiple olcDatabase=config entries (ITS#4914)

Fix uninit'd serverID field

use slap_add_opattrs as discussed on -devel.

Add operational Attributes when creating frontend and config database entries.
(Otherwise test049-sync-config fails)

Create frontend and config database entries automatically during slapadd

improve previous commit (check result of structural_class())

exploit inheritance in add (ITS#4884): passes all tests; modify may need work.  Please review

Don't generate schema entries for include files that didn't define schema
elements. Use proper directory separator on Windows

Fix prev commit

ITS#4848 better config context tracking

Plug leaks

Coverity scan - saved attr may not exist for a Replace

ITS#4833 refix

Fix entry ordering in config_build_entry

ITS#4833 fix olcDatabase index offset

ITS#4752 add undo for schema entries.

ITS#4752 try to undo failed Modifies

Add equality match for olcSyncrepl

Fix typos

Preliminary multi-context support for syncrepl. Passes all single-master
tests, needs multi-master testing.

Add olcServerID for configuring serverID portion of CSN

Note for future - we should provide macros for all of the syntaxes
listed in RFC4517 and just let users use them.

More for syncrepl support

Delete olcInclude support

More for syncrepl

Fixes for syncrepl compatibility

Preliminary steps to enabling sync replication of config. Needs work.
Allow configuring a consumer on the provider that points to the provider
but is a no-op. This ensures that the consumer will continue to be a
consumer after the replication occurs.

Fix - don't just generate missing cn=schema entry in memory, write it
out as well.

Delete unused variables.

ITS#4799 remove kerberos / kbind

Make syncrepl inherit default TLS settings from main slapd config (except
for reqcert, default demand)

happy new year

plug rootDSE info one-time leak

Fix prev commit, renaming schema

ITS#4337 insert EntryInfo in proper slot

ITS#4337 allow suffix overlap when inserting new DB before existing ones

ITS#4337 implement modrdn for back-config

ITS#4733 make sure frontend and config DB entries exist.

Avoid unnecessary calls to oc_bvfind

Better tracking of system schema, refresh cn=schema after moduleloads

Convert schema parsers to ConfigArgs so they can pass errors back to clients

Add valx arg to config_parse_add - indicate which value in the current
operation is executing (as opposed to c->valx which indicates which
value in the target is being changed)

fix format; silence warning

Tweak ordered index check in check_vals

Forgot the OC delete handler

Support dynamic add/delete of attributeTypes and objectClasses

re-enable "-d '?'" as a means to list what loglevels are available (ITS#4666)

custom monitoring can be enabled/disabled via config

Entry/Attribute struct caching, to minimize malloc fragmentation
Note: this breaks LDAP_COMP_MATCH and SLAP_ZONE_MALLOC. But they
were probably broken already anyway.

fix uri rewriting

Fix SEGV when ldapadd'ing new schema entries. This functionality needs work.

refine previous commit

fix "require" inheritance and handling of "none" (ITS#4574)

fix leak in prev commit

ITS#4580 make sure port number is preserved in replica info

Add dynamic config support for auditlog and ppolicy

Add "hidden" database config, allow hidden DBs with redundant suffixes

ITS#4535 set default cn=config access to NONE

coverity cleanup

fix "host=", broken by rev 1.446 of servers/slapd/config.c

ITS#4515 add missing equality rules

FIx rev 1.207, ACL parsing

Kludge to allow reading undefined attrs in DNs at startup

Honor ACLs, don't just require root any more

Fix adding ACLs to specific DBs vs global/frontend

Fix slapadd of config tree, broken by ITS#4194

OIDs for more overlays

unifdef -DSLAP_ACL_HONOR_DISCLOSE
unifdef -DSLAP_ACL_HONOR_MANAGE
unifdef -DSLAP_OVERLAY_ACCESS
unifdef -DSLAP_ORDERED_PRETTYNORM
unifdef -DSLAP_AUTHZ_SYNTAX
Move LDAP_COLLECTIVE_ATTRIBUTES, LDAP_COMP_MATCH, and LDAP_SYNC_TIMESTAMP
back behind LDAP_DEVEL (as these either too experimental or not yet
implemented).

Use new TLS SSL_CTX support

Cast ctype.h char arguments to unsigned char

plug leaks

refuse illegal values for "threads" (ITS#4433)

Fix prev commit

FIx olcMirrorMode keyword

fixed last commit

Error out if creating the back-config entries fails when converting from
config file to config backend. [ITS: #4407]

s/olcMultiMaster/olcMirrorMode

s/multimaster/mirrormode/ we don't want folks confusing this with real
multimaster.

Unifdef SLAPD_MULTIMASTER, use config setting instead

Reparse unknown debug flags after config is read to allow use
of dynamically registered debug levels

unifdef -DSLAPD_CONF_UNKNOWN_BAILOUT -DSLAPD_CONF_UNKNOWN_IGNORED=""
	-DSLAPD_DEBUG_CONFIG_ERROR=LDAP_DEBUG_ANY

cleanup

further cleanup

refine previous commit (error out before actual add)

ITS#4337: renaming not implemented yet(need a better fix)

tolerate that config_get_vals() returns success with no values (ITS#4341)

ITS#4339 attributeoptions patch from Ralf Haferkamp @ SuSE

refine fix to ITS#4320

rfc2589 support (ITS#4293)

ITS#4306 fix for syslog with NULL string on modify

Happy new year!

cleanup debug handling

more unparsing buffer overflow cleanup

fix potential overflow in syncrepl_unbind() and related helpers

plug one-time leaks; misc cleanup

shortcut to allow restricting all operations

allow per-replogfile pid/args file & replication interval (ITS#3523)

warn if "excessive" thread number is set (ITS#4249)

complete merging of dyngroup into dynlist; add back-config support

cleanup OID comments

ITS#4220 - add warnings for unsupported modules. Note that back-monitor
causes a warning due to its no-op bi_db_config entry point. Unimplemented
entry points are supposed to be NULL.

use LDAP_SIZELIMIT_EXCEEDED; rework the return values of slap_send_search_entry(); silence a few warnings

frontend/config/monitor cannot be shadow, I bet

detect if trying to make back-monitor shadow

one s/strtol/lutil_atoi/ too much...

always set sr_flags before sending an entry

use lutil_ato*() whenever appropriate

ITS#4192 (reverts ITS#4035 patch) always use "cn=config" as the underlying
DB's rootDN independently of the configured back-config rootDN.

Fix ITS#4194, require config dir to be usable if only -F is specified.

Fix threads vs tool_threads settings

more URI into bindconf

don't trust strchr/strrchr with bervals

add overlay config schema registry

silence warnings

ITS#4128 use backend_db_init to init the private backend

s/sprintf/snprintf/

allow the "none" log level

check length (FIXME: snprintf return value may not be portable?)

cleanup namespace (ITS#423)

address ITS#4127 (please review)

ITS#4017, additional revisions for DH parameters

Add tool-threads config keyword, init thread pool in tool mode.

complete fix of slapd-monitor log modify (ITS#4091)

Align Operation buffers using LBER_ALIGNED_BUFFER

Improve prev commit

ITS#4035 let underlying backend know about updated rootdn

ITS#4017 add TLSDHParamDir for Diffie-Hellman key parameters

ITS#4021: add new {CLEARTEXT} kludge as bv_len=0 kludge no
longer works well.

ITS#4009 set X-ORDERED extension on olcReplica

Fix olcSubordinate OID clash

Moving glue overlay back into slapd core, returning to 2.2 config syntax

don't let back-monitor appear __after__ a database that hides it; currently, only <suffix ""> :-( ; make error messages more descriptive

In ordered_value_sort, allow zero-length ordered values.
In check_vals, log msg when ordered_value_sort fails.

More for ITS#3937, pick up pre-set ldap_syslog values.

ITS#3937 add config_syslog var to track state of loglevel directive,
copy to ldap_syslog when in SLAP_SERVER_MODE

Additional log msg for config tree processing failures

More for ITS#3900 - olcDefaultSearchBase doesn't belong in root entry

Rename label "leave" to "done".
Tru64 5.1 alpha's <pthread.h> turns "leave" into an exception handling keyword.

ITS#3961 better fix - provide a context for the main thread. The context
must be reset by the caller to clear out temp allocations etc.

ITS#3961 provide ldap_pvt_thread_pool_fake_context_init/destroy, don't
use arbitrary context pointers.

Remove unused variables in config_updatedn()

allow textual log levels in command line

more about freeing replica resources

cleanup resources

Add o_no_schema_check to operation structure

entry_schema_check() nows takes Operation instead of Backend as first
argument, allows it to check o_no_schema_check

Cleanup

fix conditional compilation of config schema

ITS#3900 move olcDefaultSearchBase to frontend DB
expose config DB

don't complain during EMIT

Silence unused variable warnings

Fix debug format %d -> %lu

plug leaks

add infrastructure to register verbmasks; allow to register loglevels programmatically; cleanup glue protos

don't crash if no underlying database was initialized

Fix prev commit

Plug more memleaks

Add config_back_db_close, free some structures

improve previous commit

Solaris doesn't like being passed NULL pointers to [vsf[n]]printf

Fix format arg to "overlay...configuration failed" message

Remove spurious snprintf(..., "<%s> cannot be deleted") lacking a format arg

Make ConfigArgs.lineno int like elsewhere instead of unsigned long

Delete unused variables

#include <ldif.h> for ldif_must_b64_encode_*()

improve diagnostics when configuring suffix for special databases

Fix loglevel to accept negative integers

fix previous commit (check for co_type==Cft_Overlay before calling
overlay_destroy_one)

Destroy Backend/Overlay after an error happend during one of the
config_parse_add() calls, as backend_db_init() might have been called.

ITS#3829 fix attributeoptions parse order

ITS#3820 fix olcReadOnly check

ITS#3818 fix index_substr_any_step keyword

better fix to ITS#3806

fix spaces in DN-valued attrs (ITS#3806)

ITS#3774 delete backend/overlay structures after a failed add

Fix prev commit

Fix modload/modpath, allow either/both to be empty

Tweak mask_to_verbs for multiple-bit masks

Fix dynamic modload, make sure to use correct modulepath.

ITS#3748 fix startup of newly added databases and overlays

ITS#3748 do necessary startup when adding databases online

ITS#3747 move subschemasubentry attr initialization

authid-rewrite*: fix parsing, rework unparsing

ISO C forbids zero-size array (ITS#3739)

manageDIT framework and obsolete objectclasses/DIT-content-rule override

finish global_schemacheck removal

Fix for slapadd'ing a config db

Mostly remove global_schemacheck.  More cleanup needed in
bconfig.c and back-sql.

Add LDAP_DEBUG_SYNC loglevel

Add comments for config_overlay

More fixes for overlay support. Converted pcache to config table.

Fix prev commit, extra objectclass table

Fix prev commit, trim unused cfOC vars

Restructured to allow miscellaneous Adds under database/overlay objects

use appropriate log level if bailing out; need to use Debug() instead fprintf( stderr ) in many places...

Propagate config errors back to caller.

more on strict config parsing (ITS#3705)

Fix prev commit

Fix global entry setup

ITS#3702 add tool entry points

ITS#3699 fix dbconfig, limits schema flags

Fix config selection:
	if -f but no -F, just read config file
	if -f and -F, convert config file to config dir
	else, try reading config dir
	if no config dir, try config filE

Fix some return codes

More error reporting for clients

More modpath fixes

Cleanup ModulePath handling

Fix prev commit

Fix single-value delete, replace

Isolate syncrepl stuff in syncrepl.c

more attr_merge cleanup (please check)

config cleanup handler

Placeholders for unimplemented Delete handlers

Fix X-ORDERED SIBLINGS

Fixes for ordered deletes

More modify support. ACL editing works.

Fix config_build_entry, normalized attributes

Ignore back-ldif if config directory is inaccessible

Generic ordered value support

Store modification in back-ldif

Fix typo in OMsInteger macro

More for Modify. Single-valued attrs working.

Basic Modify framework, still in progress

more on ITS#3652

apply naming scheme to global/database schema

clarify comment

base64 encode passwords in back-config

check parameters

Fix access error return

Ignore include file records when loading LDIF tree, their contents
have already been incorporated into the LDIF.

On add, sort attributes in schema order to enforce config sequencing

rework provious commit(s)

more cleanup?

cleanup

beautify conditional compilation warning

Tighten up some schema

Register ManageDSAit control

Fix missing break's, add overlay works

Fix search, fix add. Adding backends/databases works.

Convert backendInfo/backendDB to STAILQs

Preliminary ldapAdd support

Define SLAP_USE_CONFDIR, fix moduleload

More parsing fixes

Fix startup check

Fix unparsers, schema loading works

Schema unparsing support

Add HARDCODE schema flags

Fix config_rootpw

Fix prev commit

More for loading config from LDIF

Add ordered-values schema flag

Added some implementation notes (reminders...)

Silently ignore if back-ldif is not present

More for loading config from database. Fix non-reentrant strtok_quote.

Read config tree from back-ldif

More back-config / back-ldif integration, added config_generic_wrapper,
added -F option to specify config directory

Move cn=config from namingContexts to configContext

Added dummy config_back_modify, using ldap_pvt_thread_pool_pause/resume

Moved ACLs to their own entry

More verbmasks cleanup, added index unparsing

Cleanup verb/mask processing

Fix initial config file info

Reorganized config/bconfig. Migrated back-bdb config.

Added authz-regexp, slapi plugin retrieval

fix ITS#3570 (please review)

Fix up memory usage

Added overlay objects

Added includeFile objects

More schema fixes

Use backend#0 for config, tools default to #1

Retrieve more values, bypass tool mode (for now)

Simple values retrievable

Adding back-config pieces

Happy new year! (belated)

ITS#4848 and #5082 from HEAD - better config context tracking,
allow olcPasswordHash in global and frontendDB

Import slap_loglevel_get() integer fix (ITS#5035 part 4)

ITS#4949 config_syslog fix from HEAD

ITS#4921 disallow modload runtime delete