Commit Graph

176 Commits

Author SHA1 Message Date
Jan Vcelak 5ae2484fb8 fix: verification of self issued certificates
Resolves: #657984
2011-01-06 20:59:33 +01:00
Jan Vcelak 40bc33f600 fix database upgrade process
Resolves: #656257
2010-11-23 17:45:47 +01:00
Jan Vcelak 82b8ccaded update list of overlays in slapd.conf
Resolves: #655899
2010-11-22 18:49:05 +01:00
Jan Vcelak bff7316e6d MozNSS - implement full non-blocking semantics
fix: ldapsearch -Z hangs server if starttls fails (#652822)

Resolves: #652822
2010-11-22 18:49:05 +01:00
Jan Vcelak ce2de9613d various TLS bugfixes
- reject non-file keyfiles in TLS_CACERTDIR (#652315)
- TLS_CACERTDIR precedence over TLS_CACERT (#652304)
- accept only files in hash.0 format in TLS_CACERTDIR (#650288)
- improve SSL/TLS trace messages (#652818)
- add support for multiple prefixed Mozilla NSS database files in TLS_CACERTDIR

Resolves: #652315 #652304 #650288 #652818
2010-11-18 11:28:30 +01:00
Jan Vcelak ffc47c51f8 spec: forgot to remove autofs schema from %files 2010-11-01 14:16:53 +01:00
Jan Vcelak b7ea9f6802 initscript: fix possible infinite loop
Resolves: #641946
2010-11-01 13:21:43 +01:00
Jan Vcelak 60cf0d9290 removed outdated autofs.schema and old readmes
resolves: #643045
2010-11-01 10:19:07 +01:00
Jan Vcelak 86a180f019 fixed buildrequires for db4 2010-08-27 15:18:09 +02:00
Jan Vcelak 95d8d32fc5 rebase to 2.4.23
- package rebased
- removed embeded db4
- removed patches merged by upstream
- removed no longer required patches
- merged patches doing manpage changes
- merged patches exporting ldif API
- reapplied patches and added description to each one
- removed unnecessary BuildRequires
- cleaned %config, %build and %install sections
- updated database upgrade process:
  - database is exported (slapcat) and reimported (slapadd) when minor
	version of openldap changes (safe and recomended way)
  - database is upgraded (db4) when minor version of db4 package changes
	(this is not done in %post anymore, as the database is not embeded,
	but using triggers)

Resolved: #624616 Bogus links in "SEE ALSO" part of several man-pages
Resolved: #625740 openldap-2.4.23 is available
2010-08-27 14:45:25 +02:00
jvcelak 6468aa6a54 Mozilla NSS - delay token auth until needed (#616552)
Mozilla NSS - support use of self signed CA certs as server certs (#614545)
2010-07-22 08:11:30 +00:00
jvcelak 13c47e0e20 CVE-2010-0211 openldap: modrdn processing uninitialized pointer free (#605448)
CVE-2010-0212 openldap: modrdn processing IA5StringNormalize NULL pointer dereference (#605452)
obsolete configuration file moved to /usr/share/openldap-servers (#612602)
2010-07-20 14:58:07 +00:00
Jan Zeleny 2acd98790b another shot at previous fix 2010-07-01 08:57:32 +00:00
Jan Zeleny 4d56125efa Rebuild with connectionless support (#587722)
Updated autofs schema (#584808)
2010-05-28 12:34:21 +00:00
Jan Zeleny dee30b1bcb rebased to 2.4.22, reverted changes in init script from last update 2010-05-04 09:03:13 +00:00
Jan Zeleny 4f47cf029b moved slapd to start earlier during boot sequence 2010-03-19 09:58:01 +00:00
Jan Zeleny eae98e4691 minor corrections of init script (#571235, #570057, #573804) 2010-03-16 14:47:34 +00:00
Jan Zeleny 9afd56665a fixed SIGSEGV when deleting data using hdb (#562227) 2010-02-24 09:15:05 +00:00
Jan Zeleny db838e465f fixed broken link (slapschema) #559873 2010-02-01 11:13:07 +00:00
Jan Zeleny 8375d885af removed some static libraries from openldap-devel 2010-01-19 14:16:46 +00:00
Jan Zeleny 13d1c21d4e rebased both openldap and bdb 2010-01-11 15:47:11 +00:00
Jan Zeleny 37a7ed74cb minor corrections of init script 2009-11-23 12:51:49 +00:00
Jan Zeleny 4333efc198 - fixed tls connection accepting when TLSVerifyClient = allow
- /etc/openldap/ldap.conf removed from files owned by openldap-servers
- minor changes in spec file to supress warnings
- some changes in init script, so it would be possible to use it when
  using old configuration style
2009-11-16 13:06:35 +00:00
Jan Zeleny e5c21d4af6 rebase of both openldap and bdb 2009-11-06 09:27:11 +00:00
Jan Zeleny bc5ba6fb26 - updated smbk5pwd patch to be linked with libldap (#526500)
- the last buffer overflow patch replaced with the one from upstream
- added /etc/openldap/slapd.d and /etc/openldap/slapd.conf.bak
  to files owned by openldap-servers
2009-10-07 13:43:58 +00:00
Jan Zeleny 9828bb7d06 Cleanup of previous patch 2009-09-24 13:23:53 +00:00
Jan Zeleny 45f722d160 - new configuration schema - directory instead of file
- fixed buffer overflow issue pointed out by new glibc
- fixed behaviour during installation / upgrade caused
  by renamed init script
2009-09-24 11:30:24 +00:00
Jan Zeleny a629500293 Rebase to 2.4.18, minor update of documentation 2009-09-18 10:01:45 +00:00
Jan Zeleny 5dec44106b updated init script to be LSB-compliant (#523434) 2009-09-16 14:06:36 +00:00
Tomáš Mráz f076e6e7ed * Thu Aug 27 2009 Tomas Mraz <tmraz@redhat.com> - 2.4.16-5
- rebuilt with new openssl
2009-08-27 07:46:45 +00:00
Jan Zeleny 8c235c0be7 Updated spec file - correct installation of openldap group 2009-08-25 08:58:12 +00:00
Tomáš Mráz a9ea3bd019 - rebuilt with new openssl 2009-08-21 14:54:10 +00:00
Jesse Keating de0b01f69c - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild 2009-07-25 20:49:05 +00:00
Jan Zeleny aeaf12790e Rebase to 2.4.16, minor change in spec file 2009-07-01 12:56:24 +00:00
Jan Zeleny 2f397636b2 Added $SLAPD_URLS variable to init script and config file (#504504) 2009-06-09 11:43:35 +00:00
Jan Zeleny da8543f19e Correction of setugid patch, removed c,M and P options from some client utilities 2009-04-09 14:03:02 +00:00
Jan Zeleny 885dc35884 Removed -f option from help of client applications which didn't support it. 2009-03-26 09:43:22 +00:00
Jan Šafránek 4f6f40b34c new upstream release 2009-02-25 08:08:13 +00:00
Jan Šafránek ac27aa70d7 new upstream release
upgraded to db-4.7.25
2009-02-17 11:20:45 +00:00
Tomáš Mráz 3301d7410a * Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> 2.4.11-3
- rebuild with new openssl
2009-01-17 16:19:07 +00:00
Caolan McNamara 8acdfe0fa6 rebuild for libltdl, i.e. copy config.sub|guess from new location 2008-12-15 16:57:17 +00:00
Jan Šafránek 3134f223d5 Update package summaries 2008-11-24 09:29:51 +00:00
Jan Šafránek 381aba6d21 New upstream release 2008-10-15 14:11:35 +00:00
Jan Šafránek 4c8f60bfd0 - add SLAPD_SHUTDOWN_TIMEOUT to /etc/sysconfig/ldap, allowing admins to set non-default slapd shutdown timeout
- add checkpoint to default slapd.conf file
Resolves: #458679
2008-10-13 10:16:30 +00:00
Jan Šafránek 2ba84591e1 rediff all patches 2008-09-01 08:09:50 +00:00
Jan Šafránek b37b0e9be9 provide ldif2dbm functionality for migrationtools 2008-09-01 07:03:55 +00:00
Jan Šafránek c283082258 rediff all patches to get rid of fuzz=2 2008-07-25 11:15:20 +00:00
Jan Šafránek 537c3cff38 set patch fuzz to build with new rpm 2008-07-21 08:17:30 +00:00
Jan Šafránek c3337e2059 new upstream release
apply official bdb-4.6.21 patches
2008-07-21 08:05:44 +00:00
Jan Šafránek 62f1c6f935 fix CVE-2008-2952
Resolves: #453728
2008-07-02 10:04:30 +00:00