CVS log for servers/slapd/slap.h

Up to [OpenLDAP] / servers / slapd

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

Happy New Year

ITS#6758 slap.h: Cast REP_* #defines to slap_mask_t

ITS#6693 value dependent ACL didn't work when they were the first ACL

add support for ADD_IF_NOT_PRESENT and SOFTDEL internal modification types (ITS#6561)

allow '-o value-check={yes|no}' for optional value checking, disabled in quick mode (ITS#6592)

Add SLAP_SYNTAX_DN syntax flag

add support for don't use copy in SASL auxprops lookup/store (ITS#6475; TODO: document new directives)

allow to specify a per-database list of attributes that need to be always collected, even if not explicitly requested by clients (addresses ITS#6513)

properly initialize acl_attrval_style (ITS#6520)

happy belated New Year

implement support for selective iteration in slaptools (ITS#6442)

ITS#6437, move structs slab_object and slab_heap from slap.h to sl_malloc.c

ITS#6435: Added optional SLAP_SCHEMA_EXPOSE define.

Fix typo in last commit (ITS#5340: REP_ENTRY_MUSTFLUSH)

ITS#5340: REP_ENTRY_MUSTFLUSH, rs_replace_entry(), rs_ensure_entry_modifiable()

allow parsing/unparsing of keepalive stuff in bindconf (first part of ITS#6389)

connid is unsigned; offset real conns by maxrid + 1

use macros for fake connid

Move connection state enums to slap.h to ease debugging

ITS#6373 add sync_use_subentry keyword

ITS#6287 Rewritten the ACL state cache

add support for TCP buffer configuration (ITS#6234)

Change AttributeName.an_oc_exclude to an_oc_flags, avoid multiple
futile searches for OC matches.

Undef SLAP_CONTROL_X_SORTEDRESULTS, use sssvlv overlay now.
Will unifdef all relevant code later...

ITS#6101: Move sru_search first in union SlapReply.sr_un, for initialization.

ITS#5836, #6089 fix c_writers counting

Cleanup: Remove SLAP_CB_FREEME, an unused internal result code

ITS#6001 SID of queued CSN must match the one in the op

ITS#5392 use lutil_debug for Statslog if HAVE_DEBUG && !HAVE_SYSLOG

ITS#5655 TLS_PROTOCOL_MIN from Philip Guenther

Update copyright notices

ITS#5835 fix connection teradown when there are waiting writers

add shadow mask

fix previous commit (related to ITS#5804)

ITS#5572 from Rein

ITS#4556 allow Add content checking to be configured per-DB

ITS#5710 fix stupid updateCookie hack, use explicit o_dont_replicate flag

Add DBFLAG_CLEAN for a DB that was cleanly shut down; don't bother
scanning to verify contextCSN for clean shutdowns (ITS#5640)

add dontUseCopy and proxiedAuthz "non_critical" disallow switches (ITS#5785)

be->be_pcl_mutexp superseded by be->bd_self

add "What Failed?" LDAP control (ITS#5784)

ITS#5734: Search limits by baseDN - limits dn.this="..."

allow definition of syntaxes via configuration, including X-SUBST (ITS#5663)

allow controls deletion to be deferred; pass response controls back to frontend in extops (ITS#5711)

implement X-SUBST substitute syntax extension (ITS#5663)

implement caseIgnoreListMatch (ITS#5608)

enable back-config delete support with LDAP_DEVEL

Config should presrve OID macros in attr syntax field as well

parenthesize some macro args

ITS#5346 overlay_db_open needs to preserve the original *be.

For ITS#5346 - reintroduce bd_self pointer (from 2008-03-13)

ITS#5419 only Hidden DBs get special treatment

Use <ldap_queue.h> macros for prev commit

More for prev commit

Happy New Year (belated)

pass ConfigReply to overlays; don't complain unless once-only overlays are instantiated multiple times

fix declarations of buffers for numeric strings; other related cleanup

Align MRA desc with AVA/SSA desc

Change integer indexing to ordered only, no backward compatibility

ITS#5186 check for multiple suffixes at config time, not open time

ITS#5191 do all pagedresult control parsing in the frontend, don't
re-parse in the backend. Keep track of pagedresult controls and state
in backglue.

Forced commit: forgot to note that SLAP_LIGHTWEIGHT_DISPATCHER is
now unifdef'd.

Use per-thread slap_counters to eliminate lock contention

Repack Connection structure for alignment

Concurrency tweaks:
  store conn->c_sd, don't use ber_sockbuf_ctrl to retrieve it.
  use per-thread free lists for operations, no mutexes needed.

support de-normalization

back out hex RID

Use attr_valfind instead of value_find_ex to optimize lookups

Preliminary sorted value support

Attribute/Modification value counters

add helper for internal searchs for objectClass=*

add support for session tracking (draft-wahl-ldap-sessio) to proxy backends requests

minimal implementation of draft-wahl-ldap-session-03

cleanup experimental controls: rename macros, ifdef code

re-sort funcs (and enums) in "logical" order

let req_modify_s and req_modrdn_s have a common portion to interoperate within slap_mods_opattrs() (ITS#5093)

fix previous commit

s/orb_tmp_mech/orb_mech/

Remove tool_id2entry_get

Reworked recent backend API changes, now using a separate struct,
(ConfigReply) for the error messages.

Added a new parameter (ConfigArgs*) to the _db_init, _db_open, _db_close and
_db_destroy functions.

For ITS#4943: Axe thread pool semaphore code

Give OperationBuffer normal struct members instead of using
LBER_ALIGNED_BUFFER(OPERATION_BUFFER_SIZE), as discussed in ITS#4078.
Add a corresponding SyncOperationBuffer in overlays/syncprov.c.

allow array of more generic syntaxes

allow attribute inheritance with syntax restriction (please review)

Axe slurpd / replog support

ITS#4893 fix prev commit

More struct cleanup

cleanup struct declarations

Optimization: send sid in cookie to avoid getting our changes sent
back to us.

Add timeout / network timeout to bindconf

Preliminary multi-context support for syncrepl. Passes all single-master
tests, needs multi-master testing.

fix modify opattrs sync replication (ITS#4820; test019 can't be fixed right now)

allow to specify the required access privileges in internal operations (ITS#4806)

ITS#4554 slapindex takes a list of attributes to index

ITS#4799 remove kerberos / kbind

happy new year

Use temporary AttributeDescriptions to prevent unbounded growth

ITS#3707 preserve filter input, allow (and ignore) undefined attributes

Unify rs_modlist in Add/Modify/Modrdn req structs

Use a specific sr_type for intermediate Glue results

ITS#4638 restore original parameters on op completion
(this is preliminary, more work remains)

more portable fix to ITS#4756

implement full IPv6 support in ACLs; use URL notation (as suggested by Howard) to disambiguate parsing (ITS#4756)

Remainder of fix for ITS#4615 - stop processing overlay stack at glue
boundary

fix DN (and berval'ued items requiring) normalization in bindconf_parse (ITS#4766)

LDAPBIS cleanup

Remove extraneous SLAP_RELAX macro

Use a single malloc for entry_decode instead of two - partially decode
the entry to get nvals first, so the size can be computed.

Remove obsolete SLAP_FILTER_DN definitions

Support dynamic add/delete of attributeTypes and objectClasses

Add BackendInfo.bi_extra for backend custom APIs
Use bi_extra for back-monitor entry points. Backends should never
directly reference each other's symbols.

add sb_version to slap_bindconf;
rework slap_client_connect() and slap_discover_feature() accordingly

custom monitoring can be enabled/disabled via config

move req2op selection into a helper

Entry/Attribute struct caching, to minimize malloc fragmentation
Note: this breaks LDAP_COMP_MATCH and SLAP_ZONE_MALLOC. But they
were probably broken already anyway.

s/managedit/relax/
#unifdef -DSLAP_RELAX

remove dontusecopy ifdefs

More LDAP_DEVEL cleanup
Rename ManageDIT to Relax

Some LDAP_DEVEL cleanup

Cleanup unused fields from prev commit

ITS#4253 fix value-dependent ACL caching - just record the ACL we'll start
looking for, don't cache anything else.

add o_no_subordinate_glue member to operation

Add "hidden" database config, allow hidden DBs with redundant suffixes

allow tools to syslog

Cleanup - no more SLAP_MULTI_CONN_ARRAY

Detect TLS config changes

#define Statslog() also when --disable-debug (disappeared in rev 1.754)

group SlapReply search flags

unifdef -DSLAP_ACL_HONOR_DISCLOSE
unifdef -DSLAP_ACL_HONOR_MANAGE
unifdef -DSLAP_OVERLAY_ACCESS
unifdef -DSLAP_ORDERED_PRETTYNORM
unifdef -DSLAP_AUTHZ_SYNTAX
Move LDAP_COLLECTIVE_ATTRIBUTES, LDAP_COMP_MATCH, and LDAP_SYNC_TIMESTAMP
back behind LDAP_DEVEL (as these either too experimental or not yet
implemented).

really fix it

Fix bad edit - like cause of ITS#4484

remove more LDBM cruft

remove LDAP_DEVEL around lightweight dispatcher code
(presently in 2.4)

Use TLS context stuff in syncrepl

Add TLS options to bindconf struct

fix operational attrs return with chain overlay (ITS#4431); misc cleanup

more txn infrastructure

Some more txn infrastructure

Additional TXN changes

TXN protocol element parsers (without any backend support)
Misc cleanup

remove c_pb, it is no longer needed

Unifdef SLAPD_MULTIMASTER, use config setting instead

unifdef -DSLAPD_CONF_UNKNOWN_BAILOUT -DSLAPD_CONF_UNKNOWN_IGNORED=""
	-DSLAPD_DEBUG_CONFIG_ERROR=LDAP_DEBUG_ANY

let overlays define if they must appear exactly once in a chain, and if they must be global/per-db only, and holler in case

refine fix to ITS#4320

apparently Statslog() doesn't really differ any more from just Log()...

Add -s option to slapadd to disable schema checking

rfc2589 support (ITS#4293)

complete ACI commit

factor ACI code out of slapd; now it can only use dynacl layer

Happy new year!

fix {add,delete} access (ITS#4295)

allow modules to register callbacks for dynamic data in root DSE

Backout accidental private part of previous commit

Add orr_modlist member to request structure, containing a list of
modifications to be applied by the backend atomically with a modify
RDN request.

Handle updating of RDN values in frontend.

Code that calls a backend's be_modrdn should call slap_modrdn2mods(op, rs)
before invoking the backend and cleanup with slap_mods_free( op->orr_modlist, 1 ).
See do_modrdn() for an example.

add severity-aware logging (ITS#4282)

(Quick)fix UUID naming attributes

plug one-time leaks; misc cleanup

forgot binds

shortcut to allow restricting all operations

allow per-replogfile pid/args file & replication interval (ITS#3523)

Tweak syncrepl messageID

add support for backend/overlay obsolete names...

fix previous commit (overlay initializer prototypes were incorrect)

Primitive handling of dontUseCopy (always error).

use LDAP_SIZELIMIT_EXCEEDED; rework the return values of slap_send_search_entry(); silence a few warnings

streamline overlay configuration

check sizelimit in frontend (ITS#4213)

rework typedefs for functions

more URI into bindconf

further isolation and cleanup of ACI code

move bindconf_[un]parse() into generic API

fix -USLAP_LIGHTWEIGHT_DISPACTHER sl_busy issue

silence SLAP_SEM_LOAD_CONTROL related warnings...

disable SLAP_SEM_LOAD_CONTROL by default, needs additional review/work
Misc. other cleanup

Revised lightweight dispatcher -- writers moved into worker threads
Presently spawns operations in separate thread to ease clr_read/wake handling.
Seems to perform reasonable well...

Move CSN invocations to backends

Align Operation buffers using LBER_ALIGNED_BUFFER

Better fix for req_pwdexop_s

Fix req_pwdexop definition

Add slap_overinfo oi_origdb field to point to original BackendDB

improved authz_backend detection for internal databases (ITS#4018)

Move uidNumber and gidNumber into slapd(8)
to ensure they are available for ldapi://.

allow undefined attrs to be "proxied" (ITS#3959)

allow options in dynacl configuration

further ACI factoring out & confinement

SLAP_OP_* enums are always used. Delete #ifdef SLAPD_MONITOR around definition.

allow objectClass checking including sups

merge sml_managing into sml_flags (SLAP_MOD_MANAGING)

more on manage

ACIs almost entirely factored out of slapd
Added OpenLDAPaciSyntax based on ITS#3877 by Nikita Shulga
aci_mask() doesn't exploit the normalized value yet (next step)
The case #define SLAPD_ACI_ENABLED / #undef SLAP_DYNACL should
be removed

Add missing Statslog() statements (loglevel stats/stats2):
  "ABANDON", "STARTTLS", "CANCEL", "WHOAMI", "PASSMOD", "EXT", "INTERM",
  "TLS established", SASL and Extended Response "RESULT".
In Statslog output "conn=xx fd=yy closed", append the reason in
  "()" unless client or server closed the connection after Unbind.
Still missing Statslog output from a number of failed requests.

add authzSyntax for authzTo/authzFrom attributes; add X-ORDERED 'VALUES' if support for ordered_value_{validate,pretty,normalize} is present; exploit normalization in slap_parseURI (only #ifdef LDAP_DEVEL)

wrap validate/pretty/normalize for ordered values (only #ifdef LDAP_DEVEL)

Add o_no_schema_check to operation structure

entry_schema_check() nows takes Operation instead of Backend as first
argument, allows it to check o_no_schema_check

Remove SLAPI pblock from operation structure

More use of SLAPI accessor macros

Move most of SLAPI frontend into overlay

condition SLAP_OVERLAY_ACCESS

Add slap_operation_t

back out previous commit, fat fingers

result.c

ITS#3844 fix typo

Complete the replacement of LDAP_CONTROL_X_TREE_DELETE with
SLAP_CONTROL_X_TREE_DELETE, which is only defiend when LDAP_DEVEL.
back-sql triggered an assert(0): It expected the control to be supported.

ITS#3844 fix slap_operational_subschemaSubentry

fix further ITS#3830 issues; allow to specify a matching rule for non-DN match

Add op->o_tincr to distinguish ops with same op->o_time. (We should
be preparing to use timestamps with sub-second resolution, really.)

Add SLAP_MOD_INTERNAL flag to Modifications, allow internal ops to bypass
ACL checks when modifying user-modifiable attributes as non-root user.

Fix slap_verbmask

don't unparse starttls field in slap_bindconf if default

Additional manageDIT changes.
Now require be_isroot() instead of "manage".

improve fix

fix ACL_PRIV_MASK for manage

Add parsing for manageDIT control.

extend manageDIT test cases (now just need to find time
to implement this)

Restructured to allow miscellaneous Adds under database/overlay objects

use appropriate log level if bailing out; need to use Debug() instead fprintf( stderr ) in many places...

more on strict config parsing (ITS#3705)

unifdef SLAP_USE_CONFDIR

ITS3693: fix of authPasswordSchemes for whom ever ends up implementing this

hardcode "description" and "seeAlso"

ITS#3671 add REP_ENTRY_MUSTRELEASE flag, release the entry before
attempting to write the response on the network. (This should probably
be the default behavior anyway, since network hangs of this sort can
cause problems for any backend that has entry locks.)

Isolate syncrepl stuff in syncrepl.c

Fix X-ORDERED SIBLINGS

hide changes behind specific #ifdef, conditioned by LDAP_DEBUG; always allow access on back-dnssrv

add ACL hook to overlays

more bindconf cleanup

same for objectClass; improve previous commit

Added further consistency checks and a new schema parse error value
which should help in debugging schema development for back-config.
The check essentially verifies, when a duplicate attributeType is found,
that the new attributeType definition is an exact duplicate of the
definition already present in the schema.

Preserve OID macros for display in back-config

implement add/delete granularity in write access (ITS#3631)

cleanup previous commits

Add conn->c_sasl_authz_dn, store SASL authzDN separately from authcDN

implement "realdn" by clause in ACLs (ITS#3627; accounting for Howard's remarks)

rework few members of slap_bindconf; silence few warnings

Added a conformant sortedResults support which is unable to sort anything.

initial commit of "level" styles for "dn" and "self" by clauses (ITS#3615)

Convert backendInfo/backendDB to STAILQs

Define SLAP_USE_CONFDIR, fix moduleload

Schema unparsing support

Add HARDCODE schema flags

move honor disclose back behind LDAP_DEVEL
needs more work before really ready for release (2.4?)

Add ordered-values schema flag

"disclose" implementation good enough for beta

cleanup

Move cn=config from namingContexts to configContext

More verbmasks cleanup, added index unparsing

Cleanup verb/mask processing

Added limits_unparse_one

Added oidm retrieval

Fix compiler error and warnings.

Added syncrepl retrieval

Added replica retrieval

Added acl_unparse, slap_sasl_getpolicy

Adding back-config pieces

ITS#3546 fix consumer crash on interrupt (provider crash still unresolved)

Attribute Aliasing : equality matching support

Delete unused syncrepl_pool

fix spelling

honor SLAP_GLUE_INSTANCE() flag; allow to advertize subordinate databases

looks a little better (but test033 doesn't work any more; disabling)

cleanup previous commit

use direct access instead of string comparison to check supported controls

remove commented out kludge macro

Less kludgy willing-to-perform check for recognized and appropriate
global controls

Place control availability kludge behind
	#ifdef SLAP_CONTROL_AVAILABILITY_KLUDGE
for now.  Me think its still needed (at least for FRONTEND controls).

fix controls run-time registered by global overlays (kludge non longer required?)

fix dynamically registered controls check; NOTE: controls registered by global overlays don't work yet; better leave Kurt's kludge in place right now

Add '-q' "quick" option and SLAP_TOOL_QUICK def for slapadd to run
with fewer integrity checks. (may also change slapindex later.)

Hide subtree delete control

Make most LDAP_DEVEL macro uses indirect

cleanup

condition compilation of DISCLOSE checking

Delete obsolete syncprovider stuff

More consolidation for single consumer-context syncrepl

Single consumer context per database

Use a single sessionlog per context, delete sid

Deleted syncrepl updatedn

Add "disclose" and "manage" ACL levels (but no meat).

Disclose permission intended to be used for "disclose on error"
(as in our present "none"), none being "don't disclose on error".

Manage permission is intended to be used to allow DSA IT management
(e.g., changing entryCSNs, structuralObjectClass, etc.).

Happy New Year!

Bug fix
support for multi-values attribute in Component Matching

Cleanup unused fields of ComponentDesc

Component Indexing support for BDB
- only for equality matching
- only components of ASN.1 types used in an X.509 certificate can be indexed
(composite types except for RDN and DN are not supported yet)
- how to use
index [attribute name].[component reference] eq
Ex)
index userCertificate eq
index userCertificate.toBeSigned.issuer.rdnSequence eq
index userCertificate.toBeSigned.serialNumber eq
index userCertificate.toBeSigned.version eq

adaptive caching code

zone invalidation/locking implementation

1) <select> and <content> type component reference support
2) attribute aliasing support
- x509CertificateIssuer
- x509CertificateSerial
- x509CertificateIssuerAndIssuer
3) AuthorityKeyIdentifier support(one of certificate extension)
4) Misc. improvement
- integrate OID and its decoder mapping table
- normalize and validate the values of both component asserions and
  extracted components
5) Misc. bug fix

data struct for zone allocator

Added sessionlog support. consumer needs work...

cleanup

hardcode "uid" into slapd & improve previous commit

Delete unused be_context_csn, cleanup pending csn entry

1) <all> type component reference support
2) nibble type memory support when decoding
3) description type object identifier support
4) OPTIONAL, DEFAULT support in certificate decoder/extractor/matching
5) Misc bug fix

Remove syncinfo si_UUID_dn, make consumer use modify/modrdn instead of
just deleting and adding modified entries.

make unregistered known controls show up as undefined; move LDAPsync cid to frontend; some cleanup

Add SLAP_DBFLAG_OVERLAY

More migration of syncrepl from frontend to syncprov overlay
define OPERATION_BUFFER_SIZE for dummy Operations

fix dynacl compile

Split Operation into Opheader and op

Disable back-bdb native syncrepl support, enable syncprov overlay,
remove syncrepl stuff from Operation struct

Merge op->o_sync_mode into op->o_sync

Fix send_ldap* macros

buddy allocator for sl_malloc. Configurable at thread heap creation time. Need optimization for higher perf.

Add comment for spare bits in ctrlflags

Dynamic control management

move ACIs under a dynamic infrastructure that allows run-time loadable custom access control logic (needs work)

Add SLAP_EXOP_WRITES flag, expose flags in Operation,
add exop_is_write() macro for detecting exops that modify a target entry

partially revert previous commit (the "creator" special DN pattern is redundant as "dnattr" is more expressive

move special dn patterns to style enum; add creator special dn pattern

remove back-*/external.h

ComponentFilterMatch support for userCertificate

patch for ITS#3379

Component Matching module
See "contrib/slapd-modules/comp_match/README" to understand
what's the purpose of  this patch is and how to use it.

syncrepl consistency patch: utilize BDB txn rollback

syncrepl consistency patch

Revert ITS#3353 patch, it needs to be reworked.

ITS#3353 consolidate slapd globals into a single struct

Add SLAP_MR_ORDERED_INDEX - support for inequality indexing. Currently
only implemented for generalizedTime syntax.

ITS#2661: configurable substring index lengths
ITS#2588: use subany to help long subinitial/subfinal matches

preformat "conn=%lu op=%lu"

multiple precision with BIGNUM/gmp/ulong

Modified @oc supprot code to the share anlist routines; Revised anlist routines

component cleanup

*oc support in attr list

use GMP for multiple precision in counters

memory leak fixes

Add additional DN matching rules.

Add initial dnSubtreeMatch.
Should reuse other DN routines.
Need to add various other DN matching rule functions.
This commit, combined with entryDN and slapcat -a, should
fully address ITS#3112.

Initial entryDN implementation.
Need to implement filter support (for entryDN and subschemaSubentry).
Fixed hasSubordinate assert() bug in entry filters

fix for test019 glitch

ITS#3309 better fix, add op->ord_csn in frontend and use it in backend.

ITS#3289 - exattrs support

cleanup

Move LDAP_COMP_MATCH define from ldap.h to slap.h

Misc Bug Fix:
- Remove unused variables
- Remove the attribute for component filter test in core.schema

This patch is for a component filter.  please refer ITS#3260 for detail
and "implementing GSER and Component Matching" in ODD 2004.
All codes are #ifdef'd with LDAP_COMP_MATCH.
test031-component-filter works correctly only when the LDAP_COMP_MATCH macro is set.
To disable it, set AC_WITH_COMP_MATCH "no" in "openldap_src/tests/run.in".

ITS#3289 - add SLAP_AT_DYNAMIC flag for dynamically generated attributes.
Set flag for hasSubordinates and subschemaSubentry. Strip dynamic attributes
before storing entries in syncrepl.

Delete unused be_context_csn_mutex

Fix ITS#3288: use be_pcl_mutexp instead of be_pcl_mutex

cleanup attr flags; provide a helper

frontend stuff moved into a database structure, essentially to allow overlays to be processed before database selection; passes all tests (ITS#3080)

slightly rework user/operational attributes handling (including fixing a bug in the logic of the previous change to backend_operational()); cleanup; more improvements to slapo-rwm and back-relay

rework op/rs structures to deal with opeartional attributes

revert previous change; anticipate backend_operational before overlays callbacks (thanks, Howard); rework overlays cycle to allow callbacks to free themselves (thanks Howard)

use a separate field for a modified entry in SlapReply

cleanup AD stuff (ITS#3225)

implement server side of "max" limit

syncrepl retry-on-error code

improve pagedResults ignoring (hopefully)

Add SLAP_BFLAG_NOLASTMODCMD backend flag.  When set, use of
the lastmod command will fail.  To be set by backends
(e.g., back-ldap) which force the value of SLAP_DBFLAG_NOLASTMOD
database flag.

ignore the control if page is larger than requested sizelimit (as per RFC)

clarify no limits in (internal) searches

Patch for ITS#3133

fix DN_SEPARATOR() and clarify its use

fix escaped semicolon bug in back-bdb

Update substr indexing macros to better separate
initial/final string settings from any string settings.

add granular op restriction

ITS#3118: fix objectIdentifierFirstComponentMatch for schema elements

rename macro accordingly to new authz naming

ITS#3092: Rename sl_free() and friends to slap_sl_free()

remove unused structure member ps_id

enable use of librewrite for sasl-regexp only if librewrite is compiled (ITS#3084)

first round of SHADOW flags/isupdate test unification

Temporary defines for SLAP_*_SHADOW.

honor sizelimit requests on the overall count when pagedResults control is used; cleanup and more features

improve previous commit; now special limit on the number of total entries of a paged results can be set via the limits.  Need to decide whether the default should be unlimited or what

honor size limits when using paged results

bvalue cleanup

cleanup

Rework return of update referrals

Add SLAP_SHADOW(be): true if be is a shadow database (via any mech)

First rounds of backend/database flag cleanup

add referral check to functions elaborated by overlays

Replaced slap_overinfo.oi_bd with oi_orig.

cleanup for release engineering

Add c_conn_idx, to simplify external modules managing per-connection state

use "expand" instead of "regex" for group ACLs that allow substring expansion, preserving backwards compatibility; add sanity checks

Support server search flag control as alias for permissive modify
Recognise tree delete control - needs backend support

apply advanced peername ACL (ITS#2907)

move limits evaluation to frontend

ITS#2998 rename pcl -> be_pcl

Added pwdexop request structure to avoid redundant parsing

Glue entry pruning support: delete the parent entries when they are glue and become leaf

allow search limits based on groups (ITS#2967)

Happy new year

Misc cleanup

Revert prev commit, unnecessary

Fix replog sequencing - assign sequence numbers at beginning of operation,
instead of getting a timestamp at the end. This makes it possible for
slurpd to sort the log later.

Completely untested built-in EXTERNAL implementation
Needs identity mapping and proxy authorization support

Sync with HEAD

add to 'val[.<style>=<value>' ACLs special match styles for DN-valued attributes; add negated objectClass to attribute name lists for ACLs and partial replication

Tweak the codes

unifdef -DLDAP_CONTROL_PAGEDRESULTS (as it is always defined)

Added sc_next and sc_cleanup to slap_callback

Cleanup unknown config directive handling.

Move SLAB_SIZE def to slap.h

Overlay build environment, remove internal proxycache support

changes required to use rwm overlay

Updated notices

misc updates
 - syncrepl : id -> rid
 - man page update

Support multiple sync replication at the consumer :
1) simultaneous operation of multiple active sync replication threads
2) cookie management for individual sync replication thread
   (include rid=%3d to the slapd cookie command line option (-c))

Collective entryUUID transmission of PRESENT messages in a single PDU
(refer to draft-zeilenga-ldup-sync-04.txt)

misc cleanup

update ldapsync/syncrepl code according to the new version of
	the protocol (draft-zeilenga-ldup-sync-04)

1. Session history support
	- memory based session history to minimize sync traffic
	- when client is covered by a session history, then
      [add+delete] mode is used
	- when client cookie is not covered by the history because
      the cookie is too outdated and/or the history is truncated,
	  [add+present] mode is used
2. Sync cookie syntax : comma separated name=value pairs
	- csn=yyyymmddhh:mm:ssZ#0xSSSS#r#ssssr,sid=nnn

Fix ASCII_HEX tests

Update entryUUID to latest draft specification

Add support for outbound connections in main listener.
Restructure syncrepl/persist to use outbound connection manager.

Add a basic DIT content rule test.
Fix DIT rules to allow extensibleObject in AUX
unifdef -DSLAP_EXTENDED_SCHEMA

ITS#2779, cache group ACLs per operation instead of per-connection

Syncrepl code cleanup (namely prefix struct field names)

ITS#2747, Reorganize syncrepl, fix some memleaks. More remain.

Explicitly mark attribute/assertion syntax of values to be normalized

no caching flag in Operation structure

ITS#2573 dynamic group support
  moved labeledURI into system schema
  attribute types that inherit from labeledURI may be used in dynamic
    groups e.g. access to * by group/groupOfURLs/memberURL=foo

ITS#2497, implement value-level ACLs:
	access to attr=foo val.regex=bar.*

Initial support for pre/post read controls.
TODO:
	Fix transactional consistency
	Add client response control handling

Schema checking option for LDAP Sync replication

no schema checking patch for proxy cache (apurva)

slaptool update for LDAP Sync replication

unifdef LDAP_CACHING

unifdef LDAP_SYNC and LDAP_SYNCREPL

cleanup

NO_SCHEMA_CHECK backend flag

Context CSN patch (1)
- currenty works for refreshOnly mode of LDAP Sync
- Context CSN for add / modify is implemented
- code for delete / modrdn / refreshAndPersist will be soon committed

LDAP Sync protocol change : state mode (add+present) and log mode (add+delete)

Proxy caching update : op->o_caching_on flag removed

Add initial support for modify/increment.  No over/under flow detection.
Currently discovered via a "feature", but should use a control.
Start of a control made, but needs to be better integrated (with
auto use in ldapmodify(1)).

SyncRepl is changed to share the following routnines :
	 slap_mods_opattrs(), slap_mods_check(), slap_mods2entry()

Support for SLAPI plugin extensions API.

This API allows a plugin to associate arbitrary context with an
internal server object such as a connection or operation.

Some documentation is at:

http://enterprise.netscape.com/docs/directory/602/plugin/function.htm#1104211

- partial attribute replication tested ok
- conf file processing udpate
- misc updates

ITS#2618 fix

LCUP primitive routines removed

#ifdef'ing SLAP_OC_GLUE definition

not returning glue entries unless manageDSAit is set

- syncrepl uses LDAP URL only

syncrepl changes
- can handle multiple syncinfo
- ldap_sync_search() added

More overlay tweaks. Added LDAP chaining overlay.

Preliminary backend overlay support, based on backglue, not tested...

localize SYNCREPL config defines