ReOpenLDAP 1.1.10 (Golden Bull)

The restored archived release from 2018-09-26 after the Github’s intentional malicious disaster. Please refer to the master branch for a non-outdated code.

We have migrated to a reliable trusted infrastructure

The origin for now is at GitFlic since on 2022-04-15 the Github administration, without any warning nor explanation, deleted ReOpenLDAP along with a lot of other projects, simultaneously blocking access for many developers. For the same reason Github is blacklisted forever.

GitFlic’s developers plan to support other languages, including English 和 中文, in the near future. You are welcome!

On the Golden Bull of Sicily day.

Briefly:

1. Prevention mdb-backend database corruption.

   Corresponding rebalance bug inheritred from LMDB/OpenLDAP. Now it completely fixed in the devel branch and future ReOpenLDAP 1.2.x versions, where the new libmdbx version is used.

   Unfortunately these fixes cannot be backported into the legacy libmdbx version, which used in the master branch and 1.1.x versions. On the other hand, the conditions prerequisite for DB corruption are extremely rare and maybe cannot be reproduced by LDAP use cases.

   Therefore 1.1.10 will not contain the complete fix, but only the minimal changes for prevention such corruption, i.e. will return error and abort transaction instead of DB corruption.

2. Improvements for configure, building. Cleanup and reformatting the source code.

3. Other minor bugs were fixed.

New features and Compatibility breaking: none

Documentation:

• mdbx: mdb_cursor_del don’t invalidate the cursor (ITS#8857).
• mdbx: GET_MULTIPLE don’t return the key (ITS#8908).
• doc: update README.md

Major and Security bugs:

• mdbx: prevent DB corruption due rebalance bugs.

Minor bugs:

• libreldap: fix “retry gnutls_handshake after GNUTLS_E_AGAIN” (ITS#8650).
• slapd: omit hidden DBs from rootDse (ITS#8912).
• slapd: fix authz-policy all condition (ITS#8909).
• backend-mdb, backend-bdb: fix index delete.

Performance: none

Build:

• reopenldap: fix GCC-8.x warnings.
• libreldap: add missing includes (ITS#8809).
• configure: rework search NdbClient headers and libraries.
• configure: add OSSP-UUID search for modern Fedora/RHEL.
• configure: fix EXTRA_CFLAGS typo.
• configure: explicit separation of experimental backends.
• configure: refine error-msg for mysql_cluster’s mysql_config.

Cosmetics:

• reopenldap: fix typo with ITS#8843 description.
• reopenldap: reformat source code by clang-format-6.0.
• reopenldap: remove LDAP_P macro.
• reopenldap: drop LDAP_CONST macro.

Other:

• mdbx: drop inherited broken audit.
• tests: export LC_ALL=C as workaround as Fedora’s diff utility bugs.
• ci: add LIBTOOL_SUPPRESS_DEFAULT=no into scripts.
• ci: add ci/fedora.sh script.
• ci: update ci/debian.sh script.