Changelog for openldap2-client-2.4.20-1.2.x86_64.rpm :
Fri Feb 5 13:00:00 2010 rhaferAATTnovell.com
- push replication to lead to a state where the \"entryCSN\"
Attributes of the suffix entries were out of sync between the
provider and the consumer (bnc#577439, ITS#6469)
- The fix for bnc#558397 introduced a problem when converting
existing slapd.conf configurations to cn=config (back-config)
(bnc#576114, ITS#6465)

Fri Jan 22 13:00:00 2010 rhaferAATTnovell.com
- Backported some fixes from upstream cvs (bnc#572949):

* ITS#6459: (small) memory leak in syncprov overlay

* ITS#6405: syncrepl issues when clock is going backwards
(might happen when running in virtual machines)

* ITS#6413: race condition when replication cn=config

* ITS#6425: Unitialized variable in syncrepl

* ITS#6412: endless loop when using SSL/TLS

* ITS#6270: problems when using ppolicy and unique overlay together
- Fixes deletion of overlays from the configuration (bnc#548773)

* unregister controls when removing overlays from cn=config
(syncprov, ppolicy, valsort, chain and sssvlv)

* Send error to active psearches upon syncprov overlay removal

* syncprov: reset BackendInfo to original value after checkpoint.
Leaks memory otherwise (with -DSLAP_CONFIG_DELETE)

Thu Dec 10 13:00:00 2009 rhaferAATTnovell.com
- Fixed an issue in back-config\'s objectclass inheritence code that
could cause the server to fail to start or to spin in an endless
loop (bnc#558059,ITS#6408)
- default the tls_reqcert parameter of a syncrepl config to
\"demand\" as documented even if other tls_ options are absent
(bnc#558397, ITS#6319)
- apply changes to the global size and timelimits to all database
that don\'t specify limits themself. (bnc#562184, ITS#6428)

Mon Nov 30 13:00:00 2009 rhaferAATTnovell.com
- Update to 2.4.20 (fate#306593), most important fixes since 2.4.19

* Fixed liblber embedded NUL values in BerValues (ITS#6353)

* Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334)

* Fixed libldap uninitialized return value (ITS#6355)

* Fixed libldap unlimited timeout (ITS#6388)

* Added slapd handling of hex server IDs (ITS#6297)

* Fixed slapd checks of str2filter (ITS#6391)

* Fixed slapd configArgs initialization (ITS#6363)

* Fixed slapd db_open with connection_fake_init (ITS#6381)

* Fixed slapd with embedded \\0 in bervals (ITS#6378,ITS#6379)

* Fixed slapd inclusion of ac/unistd.h (ITS#6342)

* Fixed slapd sl_free to better reclaim memory (ITS#6380)

* Fixed slapd syncrepl deletes in MirrorMode (ITS#6368)

* Fixed slapd syncrepl to use correct SID (ITS#6367)

* Fixed slapd tls_accept to retry in certain cases (ITS#6304)

* Fixed slapd-bdb/hdb cache corruption (ITS#6341)

* Fixed slapd-bdb/hdb entry cache (ITS#6360)

* Fixed slapo-syncprov checkpoint conversion (ITS#6370)

* Fixed slapo-syncprov deadlock (ITS#6335)

* Fixed slapo-syncprov out of order changes (ITS#6346)

Thu Nov 19 13:00:00 2009 rhaferAATTnovell.com
- Disabled testsuite for now (causes too much failures in the
buildsystem)
- Updated openldap-2.3.37.dif to fix openldap-2.3-slapcat build
issues with newer glibc (struct ucred hidden behind _GNU_SOURCE)
- Updated config_del_vals-its6363 to align with upstream fix
(bnc#552901)

Fri Nov 6 13:00:00 2009 rhaferAATTnovell.com
- fixed back-config rejecting valid Modify Request (bnc#552901)
- disabled test058-syncrepl-asymmetric (fails to often in
buildservice)

Fri Oct 23 14:00:00 2009 rhaferAATTnovell.com
- improved errormessages for SSL/TLS related failures (bnc#549200)
- slapd crash after deleting/re-adding last LDAP Entry from bdb/hdb
databases (bnc#549491, ITS#6341)

Fri Oct 16 14:00:00 2009 rhaferAATTnovell.com
- Update to 2.4.19 (fate#306593), most important fixes since 2.4.12:

* Added libldap TLS_PROTOCOL_MIN (ITS#5655)

* Fixed libldap IPv6 address handling (ITS#5937)

* Fixed libldap error code return (ITS#5762)

* Fixed slapd dncachesize behavior to unlimited by default (ITS#6222)

* Fixed slapd abandon/cancel handling for some ops (ITS#6157)

* Fixed slapd bind race condition (ITS#6189)

* Fixed slapd cert validation (ITS#6098)

* Fixed slapd csn normalization (ITS#6195)

* Fixed slapd hung writers (ITS#5836)

* Fixed slapd tls context after changes (ITS#6135)

* Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176)

* Fixed slapd-bdb/hdb crashes during delete (ITS#6177)

* Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196)

* Fixed slapd-bdb/hdb cachesize handling (ITS#5860)

* Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006)

* Fixed slapd-bdb/hdb with NULL transactions (ITS#6012)

* Fixed slapd-bdb/hdb dncachesize handling (ITS#5860)

* Fixed slapd-bdb/hdb RFC4528 control support (ITS#5861)

* Fixed slapd-bdb/hdb invalid db crash (ITS#5698)

* Fixed slapd-bdb/hdb indexing of entryDN (ITS#5790)

* Fixed slapd-bdb/hdb lookup of entryDN with equality (ITS#5791)

* Fixed slapd-bdb/hdb uninitialized bli_flag

* Fixed slapd-hdb idlcache with empty suffix (ITS#5859)

* Fixed slapd-hdb entryinfo cleanup (ITS#6088)

* Fixed slapd-hdb dncache lockups (ITS#6095)

* Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968)

* Fixed slapd corrupt contextCSN (ITS#5947)

* Fixed slapd adding rdn with other values (ITS#5965)

* Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956)

* Added slapd TLS_PROTOCOL_MIN (ITS#5655)

* Fixed slapd bconfig to return error codes (ITS#5867)

* Fixed slapd frontend/backend options handling (ITS#5857)

* Various syncprov fixes (ITS#5972, ITS#6020, ITS#5985, ITS#5999,
ITS#5973, ITS#6045, ITS#6024, ITS#5988, ITS#5969, ITS#5776,
ITS#5709, ITS#5827)

* Various syncrepl fixes (ITS#6256, ITS#5972, ITS#6011, ITS#6020,
ITS#5988, ITS#5954, ITS#5825, ITS#5809, ITS#5850, ITS#5843,
ITS#5866, ITS#5901, ITS#5881, ITS#5935, ITS#5710, ITS#5781,
ITS#5809 , ITS#5798 , ITS#5826)

* obsoleted most 2.4.12 patches: libldap-tls_chkhost-its6239.dif,
libldap_ctrl_lderrno.dif, libldap_r-tpool-resume-ITS5841.diff,
slapadd-no-trickle.dif, slapd-bdb-stop-checkpoint.dif,
slapd-db-close-error-its5745.dif, slapd-privdb-config-its5736.dif,
slapo-chain-dangling-its5742.dif, slapo-collect-include.dif,
slapo-syncprov-skip-its5709.dif
- back-config could create multiple olcDbIndex Attributes for the same
Attributetype (bnc#508137)
- init script took too long to finish when Root-DSE was unreadable
(bnc#510295)
- added schema2ldif script for converting schema files to back-config
compatible LDIF

Wed Sep 9 14:00:00 2009 rhaferAATTnovell.com
- libldap\'s check of the hostname against the TLS Certificate\'s CN
Attribute did not handle possible NUL bytes in the CN correctly
and was vulnerable against attacks with spoofed Certificates.
(bnc#537143, ITS#6239)

Wed Jan 7 13:00:00 2009 olhAATTsuse.de
- obsolete old -XXbit packages (bnc#437293)

Fri Dec 12 13:00:00 2008 rhaferAATTsuse.de
- Fixed openldap2-devel dependencies (bnc#457989)

Tue Dec 9 13:00:00 2008 rhaferAATTsuse.de
- Fixed a bug in the threadpool implementation that could cause
slapd to lockup when shutting down while the pool is paused.
(bnc#450457, ITS#5841)

Fri Nov 28 13:00:00 2008 rhaferAATTsuse.de
- Disable the slapadd trickle-task it cause performance issues
when using libdb-4.5 (bnc#449641)
- removed obsolete configure option (ldbm backend does not exist
in OpenLDAP 2.4)

Fri Nov 21 13:00:00 2008 roAATTsuse.de
- update check-build.sh

Wed Nov 5 13:00:00 2008 rhaferAATTsuse.de
- Fixed database shutdown sequence (bnc#441774, ITS#5745)

Tue Nov 4 13:00:00 2008 rhaferAATTsuse.de
- Handle ldbm databases in updates from 2.3 release (bnc#440589)

Thu Oct 23 14:00:00 2008 rhaferAATTsuse.de
- the helper function to create various LDAP controls returned
wrong error codes under certain circumstances
(bnc#429064, ITS#5762)
- Fixed referral chasing in chain-overlay (bnc#438088, ITS#5742)
- Fixed back-config integration of overlays with private instances
of databases (translucent, chain, ...) (bnc#438094, ITS#5736)

Mon Oct 13 14:00:00 2008 rhaferAATTsuse.de
- Added missing #include to slapo-collect

Sun Oct 12 14:00:00 2008 rhaferAATTsuse.de
- Update to 2.4.12. Most important changes:

* Fixed libldap ldap_utf8_strchar arguments (ITS#5720)

* Fixed libldap TLS_CRLFILE (ITS#5677)

* Fixed librewrite memory handling (ITS#5691)

* Fixed slapd attribute leak (ITS#5683)

* Fixed slapd config backend with index greater than sibs (ITS#5684)

* Fixed slapd custom attribute inheritance (ITS#5642)

* Fixed slapd firstComponentMatch normalization (ITS#5634)

* Fixed slapd connection events enabled twice (ITS#5725)

* Fixed slapd memory handling (ITS#5691)

* Fixed slapd objectClass canonicalization (ITS#5681)

* Fixed slapd objectClass termination (ITS#5682)

* Fixed slapd overlay control registration (ITS#5649)

* Fixed slapd runqueue checking (ITS#5726)

* Fixed slapd sortvals comparison (ITS#5578)

* Fixed slapd syncrepl contextCSN detection (ITS#5675)

* Fixed slapd syncrepl error logging (ITS#5618)

* Fixed slapd syncrepl runqueue interval (ITS#5719)

* Fixed slapd-bdb entry return if attr not present (ITS#5650)

* Fixed slapd-bdb/hdb release search entries earlier (ITS#5728,ITS#5730)

* Fixed slapd-bdb/hdb subtree search with empty suffix (ITS#5729)

* Fixed slapo-memberof internal operations DN (ITS#5622)

* Fixed slapo-pcache attrset crash (ITS#5665)

* Fixed slapo-pcache caching with invalid schema (ITS#5680)

* Fixed slapo-ppolicy control return on password modify exop (ITS#5711)
- removed obsolete patches

Mon Oct 6 14:00:00 2008 rhaferAATTsuse.de
- remove some problematic test-cases, that cause a lot of
unreproducable buildfailures
- check for exisitence of /etc/openldap/slapd.conf in init-script
assume back-config usage if it isn\'t present (bnc#428168)

Wed Sep 24 14:00:00 2008 rhaferAATTsuse.de
- Mark Schema and SuSEfirewall files as %config
- openldap2-back-perl requires perl
- Give more meaningful error messages when index configuration
fails (bnc#429150)

Fri Sep 19 14:00:00 2008 rhaferAATTsuse.de
- Reduced debug-level during \"make test\" to reduce required disk
space and buildtime

Thu Sep 18 14:00:00 2008 rhaferAATTsuse.de
- Fixed init-script dependencies (bnc#426214)

Fri Sep 12 14:00:00 2008 rhaferAATTsuse.de
- Backported fix for a crash in back-config when adding entries with
a too large index (ITS#5684)
- Backported fix for a crash when adding an invalid olcBdbConfig
Entry to back-config (ITS#5698)

Tue Sep 9 14:00:00 2008 rhaferAATTsuse.de
- Removed getaddrinfo workaround. Recent glibc doesn\'t need it
anymore (bnc#288879, ITS#5251)
- Server requires libldap of the same version.

Mon Sep 8 14:00:00 2008 rhaferAATTsuse.de
- Import back-config support for deleting databases from CVS HEAD

Tue Sep 2 14:00:00 2008 rhaferAATTsuse.de
- Dropped evolution specific ntlm-bind Patch (Fate#303480)

Thu Aug 28 14:00:00 2008 rhaferAATTsuse.de
- added ldapns.schema , to allow to use pam_ldap\'s \"check_host_attr\"
and \"check_service_attr\" features (bnc#419984)
- backport overlay_register_control fix from HEAD (bnc#420016,
ITS#5649)

Mon Aug 18 14:00:00 2008 mrueckertAATTsuse.de
- remove outdated options in the fillup_and_insserv call

Mon Aug 18 14:00:00 2008 rhaferAATTsuse.de
- fixed LSB-Headers in init-script

Wed Aug 13 14:00:00 2008 roAATTsuse.de
- try to fix build for buildservice
(BUILD_INCARNATION can be empty)

Mon Aug 11 14:00:00 2008 rhaferAATTsuse.de
- /usr/lib/sasl2/slapd.conf was moved to /etc/sasl2/slapd.conf
(bnc#412652)
- adjust ownerships of database directories even when using
back-config

Thu Jul 31 14:00:00 2008 rhaferAATTsuse.de
- Enable back-config delete support

Tue Jul 29 14:00:00 2008 rhaferAATTsuse.de
- Update to Version 2.4.11. Most important changes:

* Fixed liblber ber_get_next length decoding (ITS#5580)

* Added libldap assertion control (ITS#5560)

* Fixed liblutil missing return code (ITS#5615)

* Fixed slapd cert serial number parsing (ITS#5588)

* Fixed slapd check for structural_class failures (ITS#5540)

* Fixed slapd config backend renumbering (ITS#5571)

* Fixed slapd configContext OID (ITS#5383)

* Fixed slapd crash with no listeners (ITS#5563)

* Fixed slapd sets memory leak (ITS#5557)

* Fixed slapd sortvals binary search (ITS#5578)

* Fixed slapd syncrepl updates with multiple masters (ITS#5597)

* Fixed slapd syncrepl superior objectClass delete/add (ITS#5600)

* Fixed slapd syncrepl/slapo-syncprov contextCSN updates as internal ops (ITS#5596)

* Fixed slapo-memberof replace handling (ITS#5584)

* Added slapo-nssov contrib module

* Fixed slapo-pcache handling of negative search caches (ITS#5546)

* Fixed slapo-ppolicy DNs with whitespaces (ITS#5552)

* Fixed slapo-ppolicy modify with internal ops (ITS#5569)

* Fixed slapo-syncprov ACL evaluation (ITS#5548)

* Fixed slapo-syncprov crash with delcsn (ITS#5589)

* Fixed slapo-syncprov full reload (ITS#5564)

* Fixed slapo-syncprov missing olcSpReloadHint attr(ITS#5591)

* Fixed slapo-unique filter normalization (ITS#5581)

Mon Jun 30 14:00:00 2008 rhaferAATTsuse.de
- Only apply -fPIE patch to recent Distributions
- removed -fPIE from the slapcat-2.3 build
- Adjust BuildRequires for older Distributions

Fri Jun 27 14:00:00 2008 cooloAATTsuse.de
- make sure the subpacks are only in one spec file declared

Tue Jun 24 14:00:00 2008 rhaferAATTsuse.de
- branched off libldap-2_4-2 package to support the shared library
packaging policy

Wed Jun 11 14:00:00 2008 rhaferAATTsuse.de
- Update to Version 2.4.10. Most important changes:

* Fixed libldap ld_defconn cleanup if it was freed (ITS#5518,
ITS#5525)

* Fixed libldap msgid handling (ITS#5318)

* Fixed libldap t61 infinite loop (ITS#5542)

* Fixed libldap_r missing stubs (ITS#5519)

* Fixed slapd initialization of sr_msgid, rs->sr_tag (ITS#5461)

* Fixed slapd missing termination of integerFilter keys
(ITS#5503)

* Fixed slapd multiple attrs in URI (ITS#5516)

* Fixed slapd sasl_ssf retrieval (ITS#5403)

* Fixed slapd socket assert (ITS#5489)

* Fixed slapd syncrepl cookie (ITS#5536)

* Fixed slapd-bdb/hdb MAXPATHLEN (ITS#5531)

* Fixed slapd-bdb indexing in single ADD/MOD (ITS#5521)

* Fixed slapd-ldap entry_get() op-dependent behavior (ITS#5513)

* Fixed slapd-meta quarantine crasher (ITS#5522)

* Fixed slapo-refint to allow setting modifiers name (ITS#5505)

* Fixed slapo-syncprov contextCSN passing on syncprov consumers
(ITS#5488)

* Fixed slapo-syncprov csn update with delta-syncrepl (ITS#5493)

* Fixed slapo-syncprov op2.o_extra reset (ITS#5501, #5506)

* Fixed slapo-syncprov searching wrong backend (ITS#5487)

* Fixed slapo-syncprov sending ops without queued CSNs (ITS#5465)

* Fixed slapo-syncprov max csn search on startup (ITS#5537)

* Fixed slapo-unique config structs (ITS#5526)

* Fixed slapo-unique filter terminator (ITS#5511)

Fri May 16 14:00:00 2008 rhaferAATTsuse.de
- Support update from 2.3 releases (bnc#390247)

Thu May 8 14:00:00 2008 rhaferAATTsuse.de
- Update to Version 2.4.9. Most important changes:

* Fixed libldap to use unsigned port (ITS#5436)

* Fixed libldap error message for missing close paren (ITS#5458)

* Fixed libldap_r tpool pause checks (ITS#5364, #5407)

* Fixed slapcat error checking (ITS#5387)

* Fixed slapd abstract objectClass inheritance check (ITS#5474)

* Fixed slapd add operations requiring naming attrs (ITS#5412)

* Fixed slapd connection handling (ITS#5469)

* Fixed slapd frontendDB backend selection (ITS#5419)

* Fixed slapd pagedresults stale state (ITS#5409)

* Fixed slapd pointer dereference (ITS#5388)

* Fixed slapd null argument dereference (ITS#5435)

* Fixed slapd REP_ENTRY flags (ITS#5340)

* Fixed slapd value list termination (ITS#5450)

* Fixed slapd-bdb ID_NOCACHE handling (ITS#5439)

* Fixed slapd-bdb entryinfo state if db_lock fails (ITS#5455)

* Fixed slapd-bdb referral rewrite (ITS#5339)

* Fixed slapd-config overlay stacking (ITS#5346)

* Fixed slapd-config attribute publishing (ITS#5383)

* Fixed slapd-ldap connection handler (ITS#5404)

* Fixed slapd-ldif file name handling & multi-suffix/dir catch
(ITS#5408)

* Fixed slapd-meta connections on error (ITS#5440)

* Fixed slapd-meta crash on search (ITS#5481)

* Various syncrepl fixes (ITS#5407, ITS#5413, ITS#5426, ITS#5430,
ITS#5432, ITS#5454, ITS#5397, ITS#5470)

* Various slapo-syncprov fixes (ITS#5401, ITS#5405, ITS#5418,
ITS#5486, ITS#5433, ITS#5434, ITS#5437, ITS#5444, ITS#5445,
ITS#5484, ITS#5451)

Fri Apr 25 14:00:00 2008 rhaferAATTsuse.de
- Adjust ownership of DB_CONFIG to ldap:ldap (bnc#376204)

Thu Apr 10 14:00:00 2008 matzAATTsuse.de
- Compile with glibc 2.8.

Thu Apr 10 14:00:00 2008 roAATTsuse.de
- added baselibs.conf file to build xxbit packages
for multilib support

Thu Apr 3 14:00:00 2008 rhaferAATTsuse.de
- removed apparmor profile

Mon Mar 3 13:00:00 2008 rhaferAATTsuse.de
- revert last change and make libldap_r available again as some
packages seem to directly rely on libldap_r. Assume they know
of the libldap_r\'s limitations.

Wed Feb 27 13:00:00 2008 rhaferAATTsuse.de
- Moved libldap_r from -client subpackage to the main server
package as it is only meant to be used by slapd.
- Removed static libldap_r.a library and libldap_r.so link from
- devel subpackage. External programs should only use the \"normal\"
libldap library.

Wed Feb 20 13:00:00 2008 rhaferAATTsuse.de
- Update to Version 2.4.8. Most important changes:

* Fixed libldap extended decoding (ITS#5304)

* Fixed libldap filter abort (ITS#5300)

* Fixed libldap ldap_parse_sasl_bind_result (ITS#5263)

* Fixed libldap result codes for open (ITS#5338)

* Fixed libldap search timeout crash (ITS#5291)

* Fixed libldap paged results crash (ITS#5315)

* Fixed slapd support for 2.1 CSN (ITS#5348)

* Fixed slapd include handling (ITS#5276)

* Fixed slapd modrdn check for valid new DN (ITS#5344)

* Fixed slapd multi-step SASL binds (ITS#5298)

* Fixed slapd overlay ordering when moving to slapd.d (ITS#5284)

* Fixed slapd NULL printf (ITS#5264)

* Fixed slapd NULL set values (ITS#5286)

* Fixed slapd timestamp race condition (ITS#5370)

* Fixed slapd cn=config crash on delete (ITS#5343)

* Fixed slapd cn=config global acls (ITS#5352)

* Fixed slapd truncated cookie (ITS#5362)

* Fixed slapd str2entry with no attrs (ITS#5308)

* Fixed slapd TLSVerifyClient default (ITS#5360)

* Fixed slapd delta-syncrepl refresh mode (ITS#5376)

* Fixed slapd ACL sets URI attrs (ITS#5384)

* Fixed slapd invalid entryUUID filter (ITS#5386)

* Fixed slapd-bdb idlcache on adds (ITS#5086)

* Fixed slapd-bdb crash with modrdn (ITS#5358)

* Fixed slapd-bdb modrdn to same dn (ITS#5319)

* Fixed slapd-bdb MMR (ITS#5332)

* Fixed slapd-meta setting of sm_nvalues (ITS#5375)

* Fixed slapd-monitor crash (ITS#5311)

* Fixed slapo-ppolicy only password check with policy (ITS#5285)

* Fixed slapo-ppolicy del/replace password without new one (ITS#5373)

* Fixed slapo-syncprov hang on checkpoint (ITS#5261)

Thu Jan 10 13:00:00 2008 rhaferAATTsuse.de
- Removed bogus debugging output from slapd_getaddrinfo_dupl.dif

Wed Jan 9 13:00:00 2008 rhaferAATTsuse.de
- Fixed allocation for paged results cookie (Bug #352255, ITS#5315)

Fri Dec 14 13:00:00 2007 rhaferAATTsuse.de
- Update to Version 2.4.7. Most important changes:

* Added slapd ordered indexing of integer attributes (ITS#5239)

* Fixed slapd paged results control handling (ITS#5191)

* Fixed slapd sasl-host parsing (ITS#5209)

* Fixed slapd filter normalization (ITS#5212)

* Fixed slapd multiple suffix checking (ITS#5186)

* Fixed slapd paged results handling when using rootdn (ITS#5230)

* Fixed slapd syncrepl presentlist handling (ITS#5231)

* Fixed slapd core schema \'c\' definition for RFC4519 (ITS#5236)

* Fixed slapd 3-way Multi-Master Replication (ITS#5238)

* Fixed slapd hash collisions in index slots (ITS#5183)

* Fixed slapd replication of dSAOperation attributes (ITS#5268)

* Fixed slapadd contextCSN updating (ITS#5225)

* Fixed slapd-bdb/hdb to report and fail on internal errors (ITS#5232)

* Fixed slapd-bdb/hdb dn2entry lock bug (ITS#5257)

* Fixed slapd-bdb/hdb dn2id lock bug (ITS#5262)

* Fixed slapd-hdb caching on rename ops (ITS#5221)

* Fixed slapo-accesslog abandoned op cleanup (ITS#5161)

* Fixed slapo-dds deleting from nonexistent db (ITS#5267)

* Fixed slapo-memberOf deleted values saving (ITS#5258)

* Fixed slapo-pcache op->o_abandon handling (ITS#5187)

* Fixed slapo-ppolicy single password check on modify (ITS#5146)

* Fixed slapo-ppolicy internal search (ITS#5235)

* Fixed slapo-syncprov refresh and persist cookie sending (ITS#5210)

* Fixed slapo-syncprov ignore invalid cookies (ITS#5211)

* Fixed slapo-translucent interaction with slapo-rwm (ITS#4889)

Thu Nov 29 13:00:00 2007 rhaferAATTsuse.de
- check for duplicates in getaddrinfo results and ignore them.
(Bug #288879)

Tue Nov 27 13:00:00 2007 rhaferAATTsuse.de
- The init-script removed directory access on /etc/openldap/slapd.d
(Bug #344091)

Mon Nov 26 13:00:00 2007 rhaferAATTsuse.de
- Update to Version 2.4.6. Initial 2.4 release for \"general use\".
New features:

* Usability/Manageability:
- More complete Documentation (manual pages and Admin Guide)
- dynamic configuration and monitoring improvments

* More functionality
- New overlays (dds, memberof, constraint)
- Multimaster syncrepl replication

* Performance improvments:
- Further optimized frontend
- Reduced locking contention in backend
- back-config support through new sysconfig option
\"OPENLDAP_CONFIG_BACKEND\"
- Install admin guide from the main tarball, to get rid of the
admin-guide tarball
- New sysconfig options:

* OPENLDAP_START_LDAP to allow to disable the ldap:// listener

* OPENLDAP_LDAPI_INTERFACES to specify the paths for the ldapi:///
listeners

Mon Oct 29 13:00:00 2007 rhaferAATTsuse.de
- Update to Version 2.3.39. Most important changes:

* Fixed slapd database/overlay config conflict (ITS#4848)

* Fixed slapd password_hash config order (ITS#5082)

* Fixed slapd slap_mods_check bug (ITS#5119)

* Fixed slapd ACL sets memory handling (ITS#4860,ITS#4873)

* Fixed slapd ordered values add normalization issue (ITS#5136)

* Fixed slapd-bdb DB_CONFIG conversion bug (ITS#5118)

* Fixed slapd-ldap search control parsing (ITS#5138)

* Fixed slapd-ldap SASL idassert w/o authcId

* Fixed slapd-ldif directory separators in DN (ITS#5172)

* Fixed slapd-meta conn caching on bind failure (ITS#5154)

* Fixed slapd-meta bind timeout assertion (ITS#5185)

* Fixed slapd-sql concurrency issue (ITS#5095)

* Fixed slapo-chain double-free (ITS#5137)

* Fixed slapo-pcache and -rwm interaction fix (ITS#4991)

* Fixed slapo-pcache non-null terminated array crasher (ITS#5163)

* Fixed slapo-rwm modlist handling (ITS#5124)

* Fixed slapo-rwm UUID in filter (ITS#5168)

* Fixed sasl SASL_SSF_EXTERNAL type (ITS#3864)

* Fixed liblber Windows x64 portability (ITS#5105)

* Fixed libldap ppolicy control creation (ITS#5103)
- Silenced some rpmlint warnings

Wed Aug 22 14:00:00 2007 rhaferAATTsuse.de
- Call \"ldconfig\" from %post and %postun in openldap2-client
(Bug #298297)

Tue Jul 24 14:00:00 2007 rhaferAATTsuse.de
- Update to Version 2.3.37. Most important changes:

* Fixed slapd-glue/syncprov interaction (ITS#4623)

* Fixed slapd-ldap search reference crash (ITS#5025)

* Fixed slapd-ldbm crash on Compare op (ITS#5044)

* Fixed slapo-rwm searchFilter double free (ITS#5043)
- Most important changes in 2.3.36:

* Fixed slapd mutex bug after failed startup (ITS#4957)

* Fixed slapd sasl failed Bind bug (ITS#4954)

* Fixed slapd sasl ssf logging (ITS#5001)

* Fixed slapd tool op init (ITS#4911)

* Fixed slapd-bdb no-op crasher (ITS#4925)

* Fixed slapd-relay crash when no database can be selected (ITS#4958)

* Fixed slapo-chain RFC3062 passwd exop handling (ITS#4964)

* Fixed slapo-dynlist multiple group/url[/member] config (ITS#4989)

* Fixed slapo-pcache handling of abandoned Operations (#5015)

* Fixed slapo-pcache and -rwm interaction (ITS#4991)

* Fixed slapo-ppolicy pwdReset/pwdMinAge (ITS#4970)

* Fixed slapo-ppolicy control cleanup from ITS#4665

* Fixed slapo-syncprov cookie parsing error (ITS#4977)

* Fixed slapo-valsort crash on delete op (ITS#4966)

* Fixed libldap referral chasing loop (ITS#4955)

* Fixed libldap response code handling on rebind (ITS#4924)

* Fixed libldap SASL_MAX_BUFF_SIZE (ITS#4935)

Wed Jun 13 14:00:00 2007 dmuellerAATTsuse.de
- remove binutils prereq

Mon May 21 14:00:00 2007 dmuellerAATTsuse.de
- reduce duplicated buildrequires against db42 and db45

Tue May 15 14:00:00 2007 rhaferAATTsuse.de
- imported apparmor profile from apparmor (this profile is not
enabled by default)

Fri May 4 14:00:00 2007 rhaferAATTsuse.de
- Update to Version 2.3.35. Most important changes:

* Fixed ldapmodify to use correct memory free functions (ITS#4901)

* Fixed slapd acl set minor typo (ITS#4874)

* Fixed slapd entry consistency check in str2entry2 (ITS#4852)

* Fixed slapd ldapi:// credential issue (ITS#4893)

* Fixed slapd str2anlist handling of undefined attrs/OCs (ITS#4854)

* Fixed slapd syncrepl delta-sync modlist free (ITS#4904)

* Added slapd syncrepl retry logging (ITS#4915)

* Fixed slapd zero-length IA5string handling (ITS#4823)

* Fixed slapd-bdb/hdb startup with missing shm env (ITS#4851)

* Fixed slapd-ldap/meta consistency in referral proxying (ITS#4861)

* Fixed slapd-ldap bind cleanup in case of unauthorized idassert

* Fixed slapd-meta search cleanup

* Fixed slapd-meta/slapo-rwm filter mapping

* Fixed slapd-sql subtree shortcut (ITS#4856)

* Fixed slapo-dynlist crasher (ITS#4891)

* Fixed slapo-refint config message (ITS#4853)

* Fixed libldap time_t signedness (ITS#4872)

* Fixed libldap_r tpool reset (ITS#4855,#4899)

Wed May 2 14:00:00 2007 dmuellerAATTsuse.de
- Fix comparison with string literal

Wed Apr 18 14:00:00 2007 schwabAATTsuse.de
- Fix generation of debuginfo packages.

Tue Mar 20 13:00:00 2007 rguentherAATTsuse.de
- removed krb5-devel BuildRequires (support via cyrus-sasl)

Thu Mar 15 13:00:00 2007 rhaferAATTsuse.de
- added Service definitions for SuSEfirewall2 (Bug #251654)

Thu Feb 22 13:00:00 2007 rhaferAATTsuse.de
- Updated to Version 2.3.34. Most important changes:

* Fixed libldap missing get_option(TLS CipherSuite) (ITS#4815)

* Fixed ldapmodify printing error from ldap_result() (ITS#4812)

* Fixed slapadd LDIF parsing (ITS#4817)

* Fixed slapd libltdl link ordering (ITS#4830)

* Fixed slapd syncrepl memory leaks (ITS#4805)

* Fixed slapd dynacl/ACI compatibility with 2.1

* Fixed slapd-bdb/hdb be_entry_get with aliases/referrals
(ITS#4810)

* Fixed slapd-ldap more response handling bugs (ITS#4782)

* Fixed slapd-ldap C-API code tests (ITS#4808)

* Fixed slapd-monitor NULL printf (ITS#4811)

* Fixed slapo-chain spurious additional info in response
(ITS#4828)

* Fixed slapo-syncprov presence list (ITS#4813)

* Fixed slapo-syncprov contextCSN checkpoint again (ITS#4720)

* Added slapo-ppolicy cn=config support (ITS#4836)

* Added slapo-auditlog cn=config support

Fri Jan 26 13:00:00 2007 rhaferAATTsuse.de
- Updated to Version 2.3.33. Most important changes:

* Fixed slapd-ldap chase-referrals switch (ITS#4557)

* Fixed slapd-ldap bind behavior when idassert is always used
(ITS#4781)

* Fixed slapd-ldap response handling bugs (ITS#4782)

* Fixed slapd-ldap idassert mode=self anonymous ops (ITS#4798)

* Fixed slapd-ldap/meta privileged connections handling
(ITS#4791)

* Fixed slapd-meta retrying (ITS#4594, 4762)

* Fixed slapo-chain referral DN use (ITS#4776)

* Fixed slapo-dynlist dangling pointer after entry free
(ITS#4801)

* Fixed libldap ldap_pvt_put_filter syntax checks (ITS#4648)

Fri Jan 12 13:00:00 2007 rhaferAATTsuse.de
- Updated to Version 2.3.32. Most important changes:

* Fixed libldap unchased referral leak (ITS#4545)

* Fixed libldap tls callback (ITS#4723)

* Fixed slapd memleak on failed bind (ITS#4771)

* Fixed slapd connections_shutdown assert

* Fixed slapd add redundant duplicate value check (ITS#4600)

* Fixed slapd ACL set memleak (ITS#4780)

* Fixed slapd syncrepl shutdown hang (ITS#4790)

Fri Nov 17 13:00:00 2006 rhaferAATTsuse.de
- Fix for a flaw in libldap\'s strval2strlen() function when processing the
authcid string of certain Bind Requests, which could allow attackers to
cause an affected application to crash (especially the OpenLDAP Server),
creating a denial of service condition (Bug#221154,ITS#4740)

Tue Nov 14 13:00:00 2006 rhaferAATTsuse.de
- Additional back-perl fixes from CVS. The first revision of the
patch did not fix the problem completely (Bug#207618, ITS#4751)

Fri Oct 27 14:00:00 2006 rhaferAATTsuse.de
- cyrus-sasl configuration moved from %{_libdir}/sasl2 to
/etc/sasl2/ (Bug: #206414)

Wed Oct 4 14:00:00 2006 rhaferAATTsuse.de
- Add $network to Should-Start/Should-Stop in init scripts
(Bug: #206823)
- Imported latest back-perl changes from CVS, to fix back-perl
initialization (Bug: #207618)

Tue Aug 22 14:00:00 2006 rhaferAATTsuse.de
- Updated to Version 2.3.27

* Fixed libldap dnssrv bug with \"not present\" positive statement
(ITS#4610)

* Fixed libldap dangling pointer issue (ITS#4405)

* Fixed slapd incorrect rebuilding of replica URI (ITS#4633)

* Fixed slapd DN X.509 normalization crash (ITS#4644)

* Fixed slapd-monitor operations order via callbacks (ITS#4631)

* Fixed slapo-accesslog purge task during shutdown

* Fixed slapo-ppolicy handling of default policy (ITS#4634)

* Fixed slapo-ppolicy logging verbosity when using default policy

* Fixed slapo-syncprov incomplete sync on restart issues (ITS#4622)

Wed Aug 2 14:00:00 2006 rhaferAATTsuse.de
- Updated to Version 2.3.25

* Add libldap_r TLS concurrency workaround (ITS#4583)

* Fixed slapd acl selfwrite bug (ITS#4587)

* Fixed various syncrepl and slapo-syncprov bugs (ITS#4582, 4622,
4534,4613, 4589)

* Fixed slapd-bdb/hdb lock bug with virtual root (ITS#4572)

* Fixed slapd-bdb/hdb modrdn new entry disappearing bug (ITS#4616)

* Fixed slapd-bdb/hdb cache job issue

* Fixed slapo-ppolicy password hashing bug (ITS#4575)

* Fixed slapo-ppolicy password modify pwdMustChange reset bug (ITS#4576)

* Fixed slapo-ppolicy control can be critical (ITS#4596)
- Enabled CLDAP (LDAP over UDP) support