Jan Vcelak
49f6078a21
incorrect behavior of allow/try options of VerifyCert and TLS_REQCERT
...
Resolves : #725819
2011-08-24 18:40:37 +02:00
Jan Vcelak
67c9630d50
fix: NSS_Init* functions are not thread safe
...
Resolves : #731112
2011-08-24 18:18:33 +02:00
Jan Vcelak
924b91284d
add partial RELRO support
...
Resolves : #733071
2011-08-24 18:12:01 +02:00
Rex Dieter
a27bcf4338
Rebuilt for rpm ( #728707 )
2011-08-14 14:09:44 -05:00
Jan Vcelak
c90fe38088
fix: memleak in tlsm_auth_cert_handler
...
Resolves : #717730
2011-07-20 16:44:40 +02:00
Jan Vcelak
583cde50ed
rebase to 2.4.26
...
- remove upstream included patches
2011-07-20 16:44:30 +02:00
Jan Vcelak
b35dfa8417
fix typo in patch name
2011-06-28 11:26:47 +02:00
Jan Vcelak
fd3f90103e
allow build against DB 5.2
...
Resolves : #715827
2011-06-27 18:53:29 +02:00
Jan Vcelak
2aeb38e146
fix: segfault when LDIF input is not terminated by newline
...
Resolves : #716858
2011-06-27 18:53:29 +02:00
Jan Vcelak
4098fcd663
fix: segfault when input line in LDIF file is indented incorrectly
...
Resolves : #716855
2011-06-27 18:53:29 +02:00
Jan Vcelak
9925959a7d
fix: segmentation fault caused by double-free in ldapexop
...
Resolves : #699683
2011-06-27 18:53:29 +02:00
Jan Vcelak
865ea62898
fix: connection failure if TLS_CACERTDIR doesn't exist but TLS_REQCERT is set to 'never'
...
Resolves : #716854
2011-06-27 18:53:28 +02:00
Jan Vcelak
cea83df834
openldap-servers scriptlets require initscripts package
...
Resolves : #716857
2011-06-27 18:53:28 +02:00
Jan Vcelak
2ce75ca315
root user management ACLs on cn=config
...
Resolves : #712495
2011-06-27 18:53:28 +02:00
Jan Vcelak
356967b885
default database type BDB -> HDB
2011-06-27 18:53:28 +02:00
Jan Vcelak
bf7ea0e4df
slapd.conf as separate source, not patch
2011-06-27 18:53:28 +02:00
Jan Vcelak
31a7816a3a
add ldif.h interface into -devel subpackage
2011-06-27 18:53:28 +02:00
Jan Vcelak
b2338c38f5
remove obsolete configure options
2011-06-27 18:53:28 +02:00
Jan Vcelak
a40d05ac93
rebase to 2.4.25
...
- remove upstream included patches
2011-06-27 18:11:38 +02:00
Jan Vcelak
d1578e311f
release bump (2.4.24-2)
2011-03-18 23:15:56 +01:00
Jan Vcelak
1db8d2e348
server upgrade hangs or do not upgrade the database
...
Resolves : #664433
2011-03-18 23:15:49 +01:00
Jan Vcelak
86c082e423
fix: possible null pointer dereference in NSS implementation
...
Resolves : #684035 (RHEL)
2011-03-18 20:09:39 +01:00
Jan Vcelak
1f856268f5
fix update: openldap can't use TLS after fork()
...
Resolves : #636956
2011-03-18 19:50:00 +01:00
Jan Vcelak
89eb4eb56b
version bump (2.4.24-1)
2011-02-14 14:33:45 +01:00
Jan Vcelak
d433ca0255
BDB backend switch from DB4 to DB5
2011-02-14 14:33:18 +01:00
Jan Vcelak
202278bcf4
new sources (2.4.24), remove old patches
2011-02-14 13:06:31 +01:00
Dennis Gilmore
84e21763c3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
2011-02-08 21:15:56 -06:00
Jan Vcelak
8e5df252b6
fix update: restart NSS modules after fork
...
version bump 2.4.23-8
Resolves : #636956
2011-02-02 12:55:23 +01:00
Jan Vcelak
b791235bfc
release bump 2.4.23-7
2011-01-25 14:12:34 +01:00
Jan Vcelak
a56681c41a
fix: upgrade gets stuck when the database is damaged
...
Resolves : #664433
2011-01-25 14:11:40 +01:00
Jan Vcelak
2ace38858b
fix: invalid path to db_recover
2011-01-25 14:10:47 +01:00
Jan Vcelak
2bfd76d18f
fix: restart NSS modules after fork
...
Resolves : #636956
2011-01-25 11:36:54 +01:00
Jan Vcelak
2098ace56c
release bump 2.4.23-6
2011-01-20 17:38:36 +01:00
Jan Vcelak
d70540ff1d
setup tempfiles.d to create runtime directory when using tmpfs
2011-01-20 17:38:36 +01:00
Jan Vcelak
a44fb64495
fix: default encryption strength dropped in switch to using NSS
...
Resolves : #669446
2011-01-20 16:35:38 +01:00
Jan Vcelak
660d07ac75
release bump 2.4.23-5
2011-01-06 21:00:53 +01:00
Jan Vcelak
5ae2484fb8
fix: verification of self issued certificates
...
Resolves : #657984
2011-01-06 20:59:33 +01:00
Jan Vcelak
40bc33f600
fix database upgrade process
...
Resolves : #656257
2010-11-23 17:45:47 +01:00
Jan Vcelak
82b8ccaded
update list of overlays in slapd.conf
...
Resolves : #655899
2010-11-22 18:49:05 +01:00
Jan Vcelak
bff7316e6d
MozNSS - implement full non-blocking semantics
...
fix: ldapsearch -Z hangs server if starttls fails (#652822 )
Resolves : #652822
2010-11-22 18:49:05 +01:00
Jan Vcelak
ce2de9613d
various TLS bugfixes
...
- reject non-file keyfiles in TLS_CACERTDIR (#652315 )
- TLS_CACERTDIR precedence over TLS_CACERT (#652304 )
- accept only files in hash.0 format in TLS_CACERTDIR (#650288 )
- improve SSL/TLS trace messages (#652818 )
- add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR
Resolves : #652315 #652304 #650288 #652818
2010-11-18 11:28:30 +01:00
Jan Vcelak
ffc47c51f8
spec: forgot to remove autofs schema from %files
2010-11-01 14:16:53 +01:00
Jan Vcelak
b7ea9f6802
initscript: fix possible infinite loop
...
Resolves : #641946
2010-11-01 13:21:43 +01:00
Jan Vcelak
60cf0d9290
removed outdated autofs.schema and old readmes
...
resolves : #643045
2010-11-01 10:19:07 +01:00
Jan Vcelak
86a180f019
fixed buildrequires for db4
2010-08-27 15:18:09 +02:00
Jan Vcelak
95d8d32fc5
rebase to 2.4.23
...
- package rebased
- removed embeded db4
- removed patches merged by upstream
- removed no longer required patches
- merged patches doing manpage changes
- merged patches exporting ldif API
- reapplied patches and added description to each one
- removed unnecessary BuildRequires
- cleaned %config, %build and %install sections
- updated database upgrade process:
- database is exported (slapcat) and reimported (slapadd) when minor
version of openldap changes (safe and recomended way)
- database is upgraded (db4) when minor version of db4 package changes
(this is not done in %post anymore, as the database is not embeded,
but using triggers)
Resolved : #624616 Bogus links in "SEE ALSO" part of several man-pages
Resolved : #625740 openldap-2.4.23 is available
2010-08-27 14:45:25 +02:00
jvcelak
6468aa6a54
Mozilla NSS - delay token auth until needed ( #616552 )
...
Mozilla NSS - support use of self signed CA certs as server certs (#614545 )
2010-07-22 08:11:30 +00:00
jvcelak
13c47e0e20
CVE-2010-0211 openldap: modrdn processing uninitialized pointer free ( #605448 )
...
CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452 )
obsolete configuration file moved to /usr/share/openldap-servers (#612602 )
2010-07-20 14:58:07 +00:00
Jan Zeleny
2acd98790b
another shot at previous fix
2010-07-01 08:57:32 +00:00
Jan Zeleny
4d56125efa
Rebuild with connectionless support ( #587722 )
...
Updated autofs schema (#584808 )
2010-05-28 12:34:21 +00:00
Jan Zeleny
dee30b1bcb
rebased to 2.4.22, reverted changes in init script from last update
2010-05-04 09:03:13 +00:00
Jan Zeleny
4f47cf029b
moved slapd to start earlier during boot sequence
2010-03-19 09:58:01 +00:00
Jan Zeleny
eae98e4691
minor corrections of init script ( #571235 , #570057 , #573804 )
2010-03-16 14:47:34 +00:00
Jan Zeleny
9afd56665a
fixed SIGSEGV when deleting data using hdb ( #562227 )
2010-02-24 09:15:05 +00:00
Jan Zeleny
db838e465f
fixed broken link (slapschema) #559873
2010-02-01 11:13:07 +00:00
Jan Zeleny
8375d885af
removed some static libraries from openldap-devel
2010-01-19 14:16:46 +00:00
Jan Zeleny
13d1c21d4e
rebased both openldap and bdb
2010-01-11 15:47:11 +00:00
Jan Zeleny
37a7ed74cb
minor corrections of init script
2009-11-23 12:51:49 +00:00
Jan Zeleny
4333efc198
- fixed tls connection accepting when TLSVerifyClient = allow
...
- /etc/openldap/ldap.conf removed from files owned by openldap-servers
- minor changes in spec file to supress warnings
- some changes in init script, so it would be possible to use it when
using old configuration style
2009-11-16 13:06:35 +00:00
Jan Zeleny
e5c21d4af6
rebase of both openldap and bdb
2009-11-06 09:27:11 +00:00
Jan Zeleny
bc5ba6fb26
- updated smbk5pwd patch to be linked with libldap ( #526500 )
...
- the last buffer overflow patch replaced with the one from upstream
- added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
to files owned by openldap-servers
2009-10-07 13:43:58 +00:00
Jan Zeleny
9828bb7d06
Cleanup of previous patch
2009-09-24 13:23:53 +00:00
Jan Zeleny
45f722d160
- new configuration schema - directory instead of file
...
- fixed buffer overflow issue pointed out by new glibc
- fixed behaviour during installation / upgrade caused
by renamed init script
2009-09-24 11:30:24 +00:00
Jan Zeleny
a629500293
Rebase to 2.4.18, minor update of documentation
2009-09-18 10:01:45 +00:00
Jan Zeleny
5dec44106b
updated init script to be LSB-compliant ( #523434 )
2009-09-16 14:06:36 +00:00
Tomáš Mráz
f076e6e7ed
* Thu Aug 27 2009 Tomas Mraz <tmraz@redhat.com> - 2.4.16-5
...
- rebuilt with new openssl
2009-08-27 07:46:45 +00:00
Jan Zeleny
8c235c0be7
Updated spec file - correct installation of openldap group
2009-08-25 08:58:12 +00:00
Tomáš Mráz
a9ea3bd019
- rebuilt with new openssl
2009-08-21 14:54:10 +00:00
Jesse Keating
de0b01f69c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
2009-07-25 20:49:05 +00:00
Jan Zeleny
aeaf12790e
Rebase to 2.4.16, minor change in spec file
2009-07-01 12:56:24 +00:00
Jan Zeleny
2f397636b2
Added $SLAPD_URLS variable to init script and config file ( #504504 )
2009-06-09 11:43:35 +00:00
Jan Zeleny
da8543f19e
Correction of setugid patch, removed c,M and P options from some client utilities
2009-04-09 14:03:02 +00:00
Jan Zeleny
885dc35884
Removed -f option from help of client applications which didn't support it.
2009-03-26 09:43:22 +00:00
Jan Šafránek
4f6f40b34c
new upstream release
2009-02-25 08:08:13 +00:00
Jan Šafránek
ac27aa70d7
new upstream release
...
upgraded to db-4.7.25
2009-02-17 11:20:45 +00:00
Tomáš Mráz
3301d7410a
* Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> 2.4.11-3
...
- rebuild with new openssl
2009-01-17 16:19:07 +00:00
Caolan McNamara
8acdfe0fa6
rebuild for libltdl, i.e. copy config.sub|guess from new location
2008-12-15 16:57:17 +00:00
Jan Šafránek
3134f223d5
Update package summaries
2008-11-24 09:29:51 +00:00
Jan Šafránek
381aba6d21
New upstream release
2008-10-15 14:11:35 +00:00
Jan Šafránek
4c8f60bfd0
- add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins to set non-default slapd shutdown timeout
...
- add checkpoint to default slapd.conf file
Resolves : #458679
2008-10-13 10:16:30 +00:00
Jan Šafránek
2ba84591e1
rediff all patches
2008-09-01 08:09:50 +00:00
Jan Šafránek
b37b0e9be9
provide ldif2dbm functionality for migrationtools
2008-09-01 07:03:55 +00:00
Jan Šafránek
c283082258
rediff all patches to get rid of fuzz=2
2008-07-25 11:15:20 +00:00
Jan Šafránek
537c3cff38
set patch fuzz to build with new rpm
2008-07-21 08:17:30 +00:00
Jan Šafránek
c3337e2059
new upstream release
...
apply official bdb-4.6.21 patches
2008-07-21 08:05:44 +00:00
Jan Šafránek
62f1c6f935
fix CVE-2008-2952
...
Resolves : #453728
2008-07-02 10:04:30 +00:00
Jan Šafránek
eae5b16c69
new upstream release
2008-06-12 07:42:29 +00:00
Jan Šafránek
09dfa0a79a
use /sbin/nologin as shell of ldap user
...
Resolves : #447919
2008-05-28 12:16:03 +00:00
Jan Šafránek
bbf6d2ca84
forgot to reset release number, 2.4.9 will start from release 4
2008-05-13 15:35:50 +00:00
Jan Šafránek
b98d016af3
Use admin guide from source tar.gz
2008-05-13 11:40:32 +00:00
Jan Šafránek
3c0bde55f7
- new upstream release
...
- removed unnecessary MigrationTools patches
2008-05-13 09:46:54 +00:00
Jan Šafránek
bb50ce36bc
- bdb upgraded to 4.6.21
...
- reworked upgrade logic again to run db_upgrade when bdb version changes
2008-04-23 10:02:32 +00:00
Jan Šafránek
68c2fe40b8
- reworked the upgrade logic, slapcat/slapadd of the whole database is needed only if minor version changes (2.3.x -> 2.4.y)
...
- do not try to save database in LDIF format, if openldap-servers package is being removed (it's up to the admin to do so manually)
2008-03-05 12:41:56 +00:00
Jan Šafránek
1c0049626b
migration tools carved out to standalone package "migrationtools"
...
Resolves : #236697
2008-02-29 08:40:16 +00:00
Jan Šafránek
83e55b87c5
new upstream release
2008-02-22 10:59:07 +00:00
Jan Šafránek
cabd0dd26c
fix version
2008-02-08 16:04:33 +00:00
Jan Šafránek
0f47a79534
Define _GNU_SOURCE to fix compilation with new glibc/gcc
2008-02-08 16:02:56 +00:00
Jan Šafránek
97ea1d6494
fix CVE-2008-0658
...
Resolves : #432014
2008-02-08 14:13:27 +00:00
Jan Šafránek
001a81b9f4
init script fixes
2008-01-28 12:12:02 +00:00
Jan Šafránek
1447738ac4
init script made LSB-compliant
...
Resolves : #247012
2008-01-28 11:45:46 +00:00