openldap-2.4.48

[Bruce Dubbs]

New point version.

[Bruce Dubbs]

OpenLDAP 2.4.48 (2019/07/24)

• Added libldap OpenSSL Elliptic Curve support
• Added libldap Expose OpenLDAP specific interfaces via openldap.h
• Added slapd-monitor support for slapd-mdb
• Fixed liblber leaks
• Fixed liblber with partial flush
• Fixed libldap ASYNC TLS so it works
• Fixed libldap ASYNC connections with Solaris 10
• Fixed libldap with SASL_NOCANON=on and ldapi connections
• Fixed libldap to be able to unset syncrepl TLS options
• Fixed libldap race condition in ldap_int_initialize
• Fixed libldap return code in ldap_create_assertion_control_value
• Fixed libldap to correctly disable IPv6 when configured to do so
• Fixed libldap to correctly close TLS connection
• Fixed libldap_r handling of deprecated OpenSSL function
• Fixed liblunicode case correspondance
• Fixed slapd with an idletimeout of less than four seconds
• Fixed slapd config parser variable for Windows64
• Fixed slapd syncrepl fallback handling with delta-syncrepl
• Fixed slapd telephoneNumberNormalize, cert DN validation
• Fixed slapd syncrepl for relax with delta-syncrepl
• Fixed slapd to restrict rootDN proxyauthz to its own databases
• Fixed slapd to initialize SASL SSF per connection
• Fixed slapo-accesslog with SLAP_MOD_SOFT modifications
• Fixed slapd-ldap starttls connections timeout behavior
• Fixed slapd-ldap segfault when entry result doesn't match filter
• Fixed slapd-meta conversion from slapd.conf to cn=config
• Fixed slapd-meta assertion when network interface goes down
• Fixed slapd-mdb fix bitshift integer overflow
• Fixed slapd-mdb index cleanup with cn=config
• Fixed slapd-mdb to improve performance with alias deref
• Fixed slapo-accesslog possible assert with exops
• Fixed slapo-chain to correctly reject multiple chaining URIs
• Fixed slapo-chain conversion from slapd.conf to cn=config
• Fixed slapo-memberof conversion from slapd.conf to cn=config
• Fixed slapo-memberof for group name change to itself
• Fixed slapo-ppolicy behavior when pwdInHistory is changed
• Fixed slapo-rwm to not free original filter
• Fixed slapo-syncprov contextCSN generation
• Build Environment
  • Fixed slapd to only link to BDB libraries with static build
  • Fixed libldap implicit declaration with LDAP_CONNECTIONLESS
  • Fixed libldap double inclusion of limits.h in cyrus.c
• Documentation
  • General - Fixed minor typos
  • admin24 - Miscellaneous updates promoting mdb and fixing examples
  • slapd.access(5) - Note MDB is the primary backend
  • slapd.backends(5) - Note MDB is the recommended backend
  • slapd-ldap(5) - Document starttls parameter
• Contrib
  • Added slapo-lastbind capability to forward authTimestamp updates

[Bruce Dubbs]

Fixed at revision 21868.