head 1.1; branch 1.1.1; access; symbols netbsd-11-0-RC4:1.1.1.9 netbsd-11-0-RC3:1.1.1.9 netbsd-11-0-RC2:1.1.1.9 netbsd-11-0-RC1:1.1.1.9 OPENLDAP2_6_10:1.1.1.10 perseant-exfatfs-base-20250801:1.1.1.9 netbsd-11:1.1.1.9.0.6 netbsd-11-base:1.1.1.9 netbsd-10-1-RELEASE:1.1.1.9 perseant-exfatfs-base-20240630:1.1.1.9 perseant-exfatfs:1.1.1.9.0.4 perseant-exfatfs-base:1.1.1.9 netbsd-8-3-RELEASE:1.1.1.5 netbsd-9-4-RELEASE:1.1.1.6.6.1 netbsd-10-0-RELEASE:1.1.1.9 netbsd-10-0-RC6:1.1.1.9 netbsd-10-0-RC5:1.1.1.9 netbsd-10-0-RC4:1.1.1.9 netbsd-10-0-RC3:1.1.1.9 netbsd-10-0-RC2:1.1.1.9 netbsd-10-0-RC1:1.1.1.9 netbsd-10:1.1.1.9.0.2 netbsd-10-base:1.1.1.9 netbsd-9-3-RELEASE:1.1.1.6.6.1 OPENLDAP2_5_6:1.1.1.9 cjep_sun2x-base1:1.1.1.8 cjep_sun2x:1.1.1.8.0.4 cjep_sun2x-base:1.1.1.8 cjep_staticlib_x-base1:1.1.1.8 netbsd-9-2-RELEASE:1.1.1.6.6.1 cjep_staticlib_x:1.1.1.8.0.2 cjep_staticlib_x-base:1.1.1.8 netbsd-9-1-RELEASE:1.1.1.6.6.1 OPENLDAP2_4_50:1.1.1.8 phil-wifi-20200421:1.1.1.7 phil-wifi-20200411:1.1.1.7 is-mlppp:1.1.1.7.0.2 is-mlppp-base:1.1.1.7 phil-wifi-20200406:1.1.1.7 netbsd-8-2-RELEASE:1.1.1.5 netbsd-9-0-RELEASE:1.1.1.6.6.1 netbsd-9-0-RC2:1.1.1.6.6.1 netbsd-9-0-RC1:1.1.1.6.6.1 phil-wifi-20191119:1.1.1.7 OPENLDAP_2_4_48:1.1.1.7 netbsd-9:1.1.1.6.0.6 netbsd-9-base:1.1.1.6 phil-wifi-20190609:1.1.1.6 netbsd-8-1-RELEASE:1.1.1.5 netbsd-8-1-RC1:1.1.1.5 pgoyette-compat-merge-20190127:1.1.1.6 pgoyette-compat-20190127:1.1.1.6 pgoyette-compat-20190118:1.1.1.6 pgoyette-compat-1226:1.1.1.6 pgoyette-compat-1126:1.1.1.6 pgoyette-compat-1020:1.1.1.6 pgoyette-compat-0930:1.1.1.6 pgoyette-compat-0906:1.1.1.6 netbsd-7-2-RELEASE:1.1.1.4 pgoyette-compat-0728:1.1.1.6 netbsd-8-0-RELEASE:1.1.1.5 phil-wifi:1.1.1.6.0.4 phil-wifi-base:1.1.1.6 pgoyette-compat-0625:1.1.1.6 netbsd-8-0-RC2:1.1.1.5 pgoyette-compat-0521:1.1.1.6 pgoyette-compat-0502:1.1.1.6 pgoyette-compat-0422:1.1.1.6 netbsd-8-0-RC1:1.1.1.5 pgoyette-compat-0415:1.1.1.6 pgoyette-compat-0407:1.1.1.6 pgoyette-compat-0330:1.1.1.6 pgoyette-compat-0322:1.1.1.6 pgoyette-compat-0315:1.1.1.6 netbsd-7-1-2-RELEASE:1.1.1.4 pgoyette-compat:1.1.1.6.0.2 pgoyette-compat-base:1.1.1.6 OPENLDAP_2_4_45:1.1.1.6 netbsd-7-1-1-RELEASE:1.1.1.4 matt-nb8-mediatek:1.1.1.5.0.8 matt-nb8-mediatek-base:1.1.1.5 perseant-stdc-iso10646:1.1.1.5.0.6 perseant-stdc-iso10646-base:1.1.1.5 netbsd-8:1.1.1.5.0.4 netbsd-8-base:1.1.1.5 prg-localcount2-base3:1.1.1.5 prg-localcount2-base2:1.1.1.5 prg-localcount2-base1:1.1.1.5 prg-localcount2:1.1.1.5.0.2 prg-localcount2-base:1.1.1.5 pgoyette-localcount-20170426:1.1.1.5 bouyer-socketcan-base1:1.1.1.5 pgoyette-localcount-20170320:1.1.1.5 netbsd-7-1:1.1.1.4.0.12 netbsd-7-1-RELEASE:1.1.1.4 netbsd-7-1-RC2:1.1.1.4 OPENLDAP_2_4_44:1.1.1.5 netbsd-7-nhusb-base-20170116:1.1.1.4 bouyer-socketcan:1.1.1.4.0.10 bouyer-socketcan-base:1.1.1.4 pgoyette-localcount-20170107:1.1.1.4 netbsd-7-1-RC1:1.1.1.4 pgoyette-localcount-20161104:1.1.1.4 netbsd-7-0-2-RELEASE:1.1.1.4 localcount-20160914:1.1.1.4 netbsd-7-nhusb:1.1.1.4.0.8 netbsd-7-nhusb-base:1.1.1.4 pgoyette-localcount-20160806:1.1.1.4 pgoyette-localcount-20160726:1.1.1.4 pgoyette-localcount:1.1.1.4.0.6 pgoyette-localcount-base:1.1.1.4 netbsd-7-0-1-RELEASE:1.1.1.4 netbsd-7-0:1.1.1.4.0.4 netbsd-7-0-RELEASE:1.1.1.4 netbsd-7-0-RC3:1.1.1.4 netbsd-7-0-RC2:1.1.1.4 netbsd-7-0-RC1:1.1.1.4 netbsd-5-2-3-RELEASE:1.1.1.1 netbsd-5-1-5-RELEASE:1.1.1.1 netbsd-6-0-6-RELEASE:1.1.1.3 netbsd-6-1-5-RELEASE:1.1.1.3 netbsd-7:1.1.1.4.0.2 netbsd-7-base:1.1.1.4 OPENLDAP_2_4_39:1.1.1.4 yamt-pagecache-base9:1.1.1.3 yamt-pagecache-tag8:1.1.1.3 netbsd-6-1-4-RELEASE:1.1.1.3 netbsd-6-0-5-RELEASE:1.1.1.3 tls-earlyentropy:1.1.1.3.0.24 tls-earlyentropy-base:1.1.1.4 riastradh-xf86-video-intel-2-7-1-pre-2-21-15:1.1.1.3 riastradh-drm2-base3:1.1.1.3 netbsd-6-1-3-RELEASE:1.1.1.3 netbsd-6-0-4-RELEASE:1.1.1.3 netbsd-5-2-2-RELEASE:1.1.1.1 netbsd-5-1-4-RELEASE:1.1.1.1 netbsd-6-1-2-RELEASE:1.1.1.3 netbsd-6-0-3-RELEASE:1.1.1.3 netbsd-5-2-1-RELEASE:1.1.1.1 netbsd-5-1-3-RELEASE:1.1.1.1 netbsd-6-1-1-RELEASE:1.1.1.3 riastradh-drm2-base2:1.1.1.3 riastradh-drm2-base1:1.1.1.3 riastradh-drm2:1.1.1.3.0.16 riastradh-drm2-base:1.1.1.3 netbsd-6-1:1.1.1.3.0.22 netbsd-6-0-2-RELEASE:1.1.1.3 netbsd-6-1-RELEASE:1.1.1.3 khorben-n900:1.1.1.3.0.20 netbsd-6-1-RC4:1.1.1.3 netbsd-6-1-RC3:1.1.1.3 agc-symver:1.1.1.3.0.18 agc-symver-base:1.1.1.3 netbsd-6-1-RC2:1.1.1.3 netbsd-6-1-RC1:1.1.1.3 yamt-pagecache-base8:1.1.1.3 netbsd-5-2:1.1.1.1.0.8 netbsd-6-0-1-RELEASE:1.1.1.3 yamt-pagecache-base7:1.1.1.3 netbsd-5-2-RELEASE:1.1.1.1 netbsd-5-2-RC1:1.1.1.1 matt-nb6-plus-nbase:1.1.1.3 yamt-pagecache-base6:1.1.1.3 netbsd-6-0:1.1.1.3.0.14 netbsd-6-0-RELEASE:1.1.1.3 netbsd-6-0-RC2:1.1.1.3 tls-maxphys:1.1.1.3.0.12 tls-maxphys-base:1.1.1.4 matt-nb6-plus:1.1.1.3.0.10 matt-nb6-plus-base:1.1.1.3 netbsd-6-0-RC1:1.1.1.3 yamt-pagecache-base5:1.1.1.3 yamt-pagecache-base4:1.1.1.3 netbsd-6:1.1.1.3.0.8 netbsd-6-base:1.1.1.3 netbsd-5-1-2-RELEASE:1.1.1.1 netbsd-5-1-1-RELEASE:1.1.1.1 yamt-pagecache-base3:1.1.1.3 yamt-pagecache-base2:1.1.1.3 yamt-pagecache:1.1.1.3.0.6 yamt-pagecache-base:1.1.1.3 cherry-xenmp:1.1.1.3.0.4 cherry-xenmp-base:1.1.1.3 bouyer-quota2-nbase:1.1.1.3 bouyer-quota2:1.1.1.3.0.2 bouyer-quota2-base:1.1.1.3 matt-mips64-premerge-20101231:1.1.1.3 matt-nb5-mips64-premerge-20101231:1.1.1.1 matt-nb5-pq3:1.1.1.1.0.20 matt-nb5-pq3-base:1.1.1.1 OPENLDAP_2_4_23:1.1.1.3 netbsd-5-1:1.1.1.1.0.18 netbsd-5-1-RELEASE:1.1.1.1 netbsd-5-1-RC4:1.1.1.1 matt-nb5-mips64-k15:1.1.1.1 netbsd-5-1-RC3:1.1.1.1 netbsd-5-1-RC2:1.1.1.1 netbsd-5-1-RC1:1.1.1.1 OPENLDAP_2_4_21:1.1.1.2 netbsd-5-0-2-RELEASE:1.1.1.1 matt-nb5-mips64-premerge-20091211:1.1.1.1 matt-premerge-20091211:1.1.1.1 matt-nb5-mips64-u2-k2-k4-k7-k8-k9:1.1.1.1 matt-nb4-mips64-k7-u2a-k9b:1.1.1.1 matt-nb5-mips64-u1-k1-k5:1.1.1.1 matt-nb5-mips64:1.1.1.1.0.16 netbsd-5-0-1-RELEASE:1.1.1.1 jym-xensuspend-nbase:1.1.1.1 netbsd-5-0:1.1.1.1.0.14 netbsd-5-0-RELEASE:1.1.1.1 netbsd-5-0-RC4:1.1.1.1 netbsd-5-0-RC3:1.1.1.1 netbsd-5-0-RC2:1.1.1.1 jym-xensuspend:1.1.1.1.0.12 jym-xensuspend-base:1.1.1.1 netbsd-5-0-RC1:1.1.1.1 haad-dm-base2:1.1.1.1 haad-nbase2:1.1.1.1 netbsd-5:1.1.1.1.0.10 netbsd-5-base:1.1.1.1 matt-mips64-base2:1.1.1.1 haad-dm-base1:1.1.1.1 wrstuden-revivesa-base-3:1.1.1.1 wrstuden-revivesa:1.1.1.1.0.6 wrstuden-revivesa-base:1.1.1.1 wrstuden-revivesa-base-2:1.1.1.1 OPENLDAP_2_4_11:1.1.1.1 haad-dm:1.1.1.1.0.4 haad-dm-base:1.1.1.1 wrstuden-revivesa-base-1:1.1.1.1 yamt-pf42-base4:1.1.1.1 yamt-pf42:1.1.1.1.0.2 yamt-pf42-base3:1.1.1.1 OPENLDAP_2_4_9:1.1.1.1 OPENLDAP:1.1.1; locks; strict; comment @# @; 1.1 date 2008.05.22.14.20.36; author lukem; state Exp; branches 1.1.1.1; next ; 1.1.1.1 date 2008.05.22.14.20.36; author lukem; state Exp; branches 1.1.1.1.2.1 1.1.1.1.6.1; next 1.1.1.2; 1.1.1.2 date 2010.03.08.02.14.20; author lukem; state Exp; branches; next 1.1.1.3; 1.1.1.3 date 2010.12.12.15.20.15; author adam; state Exp; branches 1.1.1.3.12.1 1.1.1.3.24.1; next 1.1.1.4; 1.1.1.4 date 2014.05.28.09.58.34; author tron; state Exp; branches 1.1.1.4.6.1 1.1.1.4.10.1; next 1.1.1.5; commitid dRrhRzdJtb2OZhCx; 1.1.1.5 date 2017.02.09.01.46.52; author christos; state Exp; branches; next 1.1.1.6; commitid gy2a9lwOnK7GwdFz; 1.1.1.6 date 2018.02.06.01.53.11; author christos; state Exp; branches 1.1.1.6.4.1 1.1.1.6.6.1; next 1.1.1.7; commitid 4d0sB6TqBlLqVJpA; 1.1.1.7 date 2019.08.08.13.31.28; author christos; state Exp; branches; next 1.1.1.8; commitid epB5sf4Wz4DHaeyB; 1.1.1.8 date 2020.08.11.13.12.10; author christos; state Exp; branches; next 1.1.1.9; commitid X6bSG6T2qbuhcEjC; 1.1.1.9 date 2021.08.14.16.05.16; author christos; state Exp; branches; next 1.1.1.10; commitid KGC86c2DM9XNjX4D; 1.1.1.10 date 2025.09.05.21.09.41; author christos; state Exp; branches; next ; commitid fYrnJMLV6F5flz9G; 1.1.1.1.2.1 date 2008.05.22.14.20.36; author yamt; state dead; branches; next 1.1.1.1.2.2; 1.1.1.1.2.2 date 2008.06.04.02.03.44; author yamt; state Exp; branches; next ; 1.1.1.1.6.1 date 2008.05.22.14.20.36; author wrstuden; state dead; branches; next 1.1.1.1.6.2; 1.1.1.1.6.2 date 2008.09.18.05.14.46; author wrstuden; state Exp; branches; next ; 1.1.1.3.12.1 date 2014.08.19.23.51.58; author tls; state Exp; branches; next ; commitid jTnpym9Qu0o4R1Nx; 1.1.1.3.24.1 date 2014.08.10.07.09.45; author tls; state Exp; branches; next ; commitid qulgVEu69f74HMLx; 1.1.1.4.6.1 date 2017.03.20.06.56.12; author pgoyette; state Exp; branches; next ; commitid jjw7cAwgyKq7RfKz; 1.1.1.4.10.1 date 2017.04.21.16.52.25; author bouyer; state Exp; branches; next ; commitid dUG7nkTKALCadqOz; 1.1.1.6.4.1 date 2020.04.13.07.56.11; author martin; state Exp; branches; next ; commitid X01YhRUPVUDaec4C; 1.1.1.6.6.1 date 2019.08.10.06.17.12; author martin; state Exp; branches; next ; commitid hXdXSkz1NgtyHryB; desc @@ 1.1 log @Initial revision @ text @# $OpenLDAP: pkg/openldap-guide/admin/slapdconf2.sdf,v 1.20.2.12 2008/04/14 22:37:01 quanah Exp $ # Copyright 2005-2008 The OpenLDAP Foundation, All Rights Reserved. # COPYING RESTRICTIONS APPLY, see COPYRIGHT. H1: Configuring slapd Once the software has been built and installed, you are ready to configure {{slapd}}(8) for use at your site. Unlike previous OpenLDAP releases, the slapd(8) runtime configuration in 2.3 (and later) is fully LDAP-enabled and can be managed using the standard LDAP operations with data in {{TERM:LDIF}}. The LDAP configuration engine allows all of slapd's configuration options to be changed on the fly, generally without requiring a server restart for the changes to take effect. The old style {{slapd.conf}}(5) file is still supported, but must be converted to the new {{slapd-config}}(5) format to allow runtime changes to be saved. While the old style configuration uses a single file, normally installed as {{F:/usr/local/etc/openldap/slapd.conf}}, the new style uses a slapd backend database to store the configuration. The configuration database normally resides in the {{F:/usr/local/etc/openldap/slapd.d}} directory. When converting from the slapd.conf format to slapd.d format, any include files will also be integrated into the resulting configuration database. An alternate configuration directory (or file) can be specified via a command-line option to {{slapd}}(8). This chapter describes the general format of the configuration system, followed by a detailed description of commonly used config settings. Note: some of the backends and of the distributed overlays do not support runtime configuration yet. In those cases, the old style {{slapd.conf}}(5) file must be used. H2: Configuration Layout The slapd configuration is stored as a special LDAP directory with a predefined schema and DIT. There are specific objectClasses used to carry global configuration options, schema definitions, backend and database definitions, and assorted other items. A sample config tree is shown in Figure 5.1. !import "config_dit.png"; align="center"; title="Sample configuration tree" FT[align="Center"] Figure 5.1: Sample configuration tree. Other objects may be part of the configuration but were omitted from the illustration for clarity. The {{slapd-config}} configuration tree has a very specific structure. The root of the tree is named {{EX:cn=config}} and contains global configuration settings. Additional settings are contained in separate child entries: * Dynamically loaded modules .. These may only be used if the {{EX:--enable-modules}} option was used to configure the software. * Schema definitions .. The {{EX:cn=schema,cn=config}} entry contains the system schema (all the schema that is hard-coded in slapd). .. Child entries of {{EX:cn=schema,cn=config}} contain user schema as loaded from config files or added at runtime. * Backend-specific configuration * Database-specific configuration .. Overlays are defined in children of the Database entry. .. Databases and Overlays may also have other miscellaneous children. The usual rules for LDIF files apply to the configuration information: Comment lines beginning with a '{{EX:#}}' character are ignored. If a line begins with a single space, it is considered a continuation of the previous line (even if the previous line is a comment) and the single leading space is removed. Entries are separated by blank lines. The general layout of the config LDIF is as follows: > # global configuration settings > dn: cn=config > objectClass: olcGlobal > cn: config > > > # schema definitions > dn: cn=schema,cn=config > objectClass: olcSchemaConfig > cn: schema > > > dn: cn={X}core,cn=schema,cn=config > objectClass: olcSchemaConfig > cn: {X}core > > > # additional user-specified schema > ... > > # backend definitions > dn: olcBackend=,cn=config > objectClass: olcBackendConfig > olcBackend: > > > # database definitions > dn: olcDatabase={X},cn=config > objectClass: olcDatabaseConfig > olcDatabase: {X} > > > # subsequent definitions and settings > ... Some of the entries listed above have a numeric index {{EX:"{X}"}} in their names. While most configuration settings have an inherent ordering dependency (i.e., one setting must take effect before a subsequent one may be set), LDAP databases are inherently unordered. The numeric index is used to enforce a consistent ordering in the configuration database, so that all ordering dependencies are preserved. In most cases the index does not have to be provided; it will be automatically generated based on the order in which entries are created. Configuration directives are specified as values of individual attributes. Most of the attributes and objectClasses used in the slapd configuration have a prefix of {{EX:"olc"}} (OpenLDAP Configuration) in their names. Generally there is a one-to-one correspondence between the attributes and the old-style {{EX:slapd.conf}} configuration keywords, using the keyword as the attribute name, with the "olc" prefix attached. A configuration directive may take arguments. If so, the arguments are separated by white space. If an argument contains white space, the argument should be enclosed in double quotes {{EX:"like this"}}. In the descriptions that follow, arguments that should be replaced by actual text are shown in brackets {{EX:<>}}. The distribution contains an example configuration file that will be installed in the {{F: /usr/local/etc/openldap}} directory. A number of files containing schema definitions (attribute types and object classes) are also provided in the {{F: /usr/local/etc/openldap/schema}} directory. H2: Configuration Directives This section details commonly used configuration directives. For a complete list, see the {{slapd-config}}(5) manual page. This section will treat the configuration directives in a top-down order, starting with the global directives in the {{EX:cn=config}} entry. Each directive will be described along with its default value (if any) and an example of its use. H3: cn=config Directives contained in this entry generally apply to the server as a whole. Most of them are system or connection oriented, not database related. This entry must have the {{EX:olcGlobal}} objectClass. H4: olcIdleTimeout: Specify the number of seconds to wait before forcibly closing an idle client connection. A value of 0, the default, disables this feature. H4: olcLogLevel: This directive specifies the level at which debugging statements and operation statistics should be syslogged (currently logged to the {{syslogd}}(8) {{EX:LOG_LOCAL4}} facility). You must have configured OpenLDAP {{EX:--enable-debug}} (the default) for this to work (except for the two statistics levels, which are always enabled). Log levels may be specified as integers or by keyword. Multiple log levels may be used and the levels are additive. To display what levels correspond to what kind of debugging, invoke slapd with {{EX:-?}} or consult the table below. The possible values for are: !block table; colaligns="RL"; align=Center; \ title="Table 5.1: Debugging Levels" Level Keyword Description -1 Any enable all debugging 0 no debugging 1 Trace trace function calls 2 Packets debug packet handling 4 Args heavy trace debugging 8 Conns connection management 16 BER print out packets sent and received 32 Filter search filter processing 64 Config configuration processing 128 ACL access control list processing 256 Stats stats log connections/operations/results 512 Stats2 stats log entries sent 1024 Shell print communication with shell backends 2048 Parse print entry parsing debugging 4096 Cache database cache processing 8192 Index database indexing 16384 Sync syncrepl consumer processing !endblock \Example: E: olcLogLevel: -1 This will cause lots and lots of debugging information to be logged. E: olcLogLevel: Conns Filter Just log the connection and search filter processing. \Default: E: olcLogLevel: Stats H4: olcReferral This directive specifies the referral to pass back when slapd cannot find a local database to handle a request. \Example: > olcReferral: ldap://root.openldap.org This will refer non-local queries to the global root LDAP server at the OpenLDAP Project. Smart LDAP clients can re-ask their query at that server, but note that most of these clients are only going to know how to handle simple LDAP URLs that contain a host part and optionally a distinguished name part. H4: Sample Entry >dn: cn=config >objectClass: olcGlobal >cn: config >olcIdleTimeout: 30 >olcLogLevel: Stats >olcReferral: ldap://root.openldap.org H3: cn=module If support for dynamically loaded modules was enabled when configuring slapd, {{EX:cn=module}} entries may be used to specify sets of modules to load. Module entries must have the {{EX:olcModuleList}} objectClass. H4: olcModuleLoad: Specify the name of a dynamically loadable module to load. The filename may be an absolute path name or a simple filename. Non-absolute names are searched for in the directories specified by the {{EX:olcModulePath}} directive. H4: olcModulePath: Specify a list of directories to search for loadable modules. Typically the path is colon-separated but this depends on the operating system. H4: Sample Entries >dn: cn=module{0},cn=config >objectClass: olcModuleList >cn: module{0} >olcModuleLoad: /usr/local/lib/smbk5pwd.la > >dn: cn=module{1},cn=config >objectClass: olcModuleList >cn: module{1} >olcModulePath: /usr/local/lib:/usr/local/lib/slapd >olcModuleLoad: accesslog.la >olcModuleLoad: pcache.la H3: cn=schema The cn=schema entry holds all of the schema definitions that are hard-coded in slapd. As such, the values in this entry are generated by slapd so no schema values need to be provided in the config file. The entry must still be defined though, to serve as a base for the user-defined schema to add in underneath. Schema entries must have the {{EX:olcSchemaConfig}} objectClass. H4: olcAttributeTypes: <{{REF:RFC4512}} Attribute Type Description> This directive defines an attribute type. Please see the {{SECT:Schema Specification}} chapter for information regarding how to use this directive. H4: olcObjectClasses: <{{REF:RFC4512}} Object Class Description> This directive defines an object class. Please see the {{SECT:Schema Specification}} chapter for information regarding how to use this directive. H4: Sample Entries >dn: cn=schema,cn=config >objectClass: olcSchemaConfig >cn: schema > >dn: cn=test,cn=schema,cn=config >objectClass: olcSchemaConfig >cn: test >olcAttributeTypes: ( 1.1.1 > NAME 'testAttr' > EQUALITY integerMatch > SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) >olcAttributeTypes: ( 1.1.2 NAME 'testTwo' EQUALITY caseIgnoreMatch > SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 ) >olcObjectClasses: ( 1.1.3 NAME 'testObject' > MAY ( testAttr $ testTwo ) AUXILIARY ) H3: Backend-specific Directives Backend directives apply to all database instances of the same type and, depending on the directive, may be overridden by database directives. Backend entries must have the {{EX:olcBackendConfig}} objectClass. H4: olcBackend: This directive names a backend-specific configuration entry. {{EX:}} should be one of the supported backend types listed in Table 5.2. !block table; align=Center; coltags="EX,N"; \ title="Table 5.2: Database Backends" Types Description bdb Berkeley DB transactional backend config Slapd configuration backend dnssrv DNS SRV backend hdb Hierarchical variant of bdb backend ldap Lightweight Directory Access Protocol (Proxy) backend ldif Lightweight Data Interchange Format backend meta Meta Directory backend monitor Monitor backend passwd Provides read-only access to {{passwd}}(5) perl Perl Programmable backend shell Shell (extern program) backend sql SQL Programmable backend !endblock \Example: > olcBackend: bdb There are no other directives defined for this entry. Specific backend types may define additional attributes for their particular use but so far none have ever been defined. As such, these directives usually do not appear in any actual configurations. H4: Sample Entry > dn: olcBackend=bdb,cn=config > objectClass: olcBackendConfig > olcBackend: bdb H3: Database-specific Directives Directives in this section are supported by every type of database. Database entries must have the {{EX:olcDatabaseConfig}} objectClass. H4: olcDatabase: [{}] This directive names a specific database instance. The numeric {} may be provided to distinguish multiple databases of the same type. Usually the index can be omitted, and slapd will generate it automatically. {{EX:}} should be one of the supported backend types listed in Table 5.2 or the {{EX:frontend}} type. The {{EX:frontend}} is a special database that is used to hold database-level options that should be applied to all the other databases. Subsequent database definitions may also override some frontend settings. The {{EX:config}} database is also special; both the {{EX:config}} and the {{EX:frontend}} databases are always created implicitly even if they are not explicitly configured, and they are created before any other databases. \Example: > olcDatabase: bdb This marks the beginning of a new {{TERM:BDB}} database instance. H4: olcAccess: to [ by [] [] ]+ This directive grants access (specified by ) to a set of entries and/or attributes (specified by ) by one or more requestors (specified by ). See the {{SECT:Access Control}} section of this guide for basic usage. !if 0 More detailed discussion of this directive can be found in the {{SECT:Advanced Access Control}} chapter. !endif Note: If no {{EX:olcAccess}} directives are specified, the default access control policy, {{EX:to * by * read}}, allows all users (both authenticated and anonymous) read access. Note: Access controls defined in the frontend are appended to all other databases' controls. H4: olcReadonly { TRUE | FALSE } This directive puts the database into "read-only" mode. Any attempts to modify the database will return an "unwilling to perform" error. \Default: > olcReadonly: FALSE H4: olcRootDN: This directive specifies the DN that is not subject to access control or administrative limit restrictions for operations on this database. The DN need not refer to an entry in this database or even in the directory. The DN may refer to a SASL identity. Entry-based Example: > olcRootDN: "cn=Manager,dc=example,dc=com" SASL-based Example: > olcRootDN: "uid=root,cn=example.com,cn=digest-md5,cn=auth" See the {{SECT:SASL Authentication}} section for information on SASL authentication identities. H4: olcRootPW: This directive can be used to specify a password for the DN for the rootdn (when the rootdn is set to a DN within the database). \Example: > olcRootPW: secret It is also permissible to provide a hash of the password in {{REF:RFC2307}} form. {{slappasswd}}(8) may be used to generate the password hash. \Example: > olcRootPW: {SSHA}ZKKuqbEKJfKSXhUbHG3fG8MDn9j1v4QN The hash was generated using the command {{EX:slappasswd -s secret}}. H4: olcSizeLimit: This directive specifies the maximum number of entries to return from a search operation. \Default: > olcSizeLimit: 500 H4: olcSuffix: This directive specifies the DN suffix of queries that will be passed to this backend database. Multiple suffix lines can be given, and usually at least one is required for each database definition. (Some backend types, such as {{EX:frontend}} and {{EX:monitor}} use a hard-coded suffix which may not be overridden in the configuration.) \Example: > olcSuffix: "dc=example,dc=com" Queries with a DN ending in "dc=example,dc=com" will be passed to this backend. Note: When the backend to pass a query to is selected, slapd looks at the suffix value(s) in each database definition in the order in which they were configured. Thus, if one database suffix is a prefix of another, it must appear after it in the configuration. H4: olcSyncrepl > olcSyncrepl: rid= > provider=ldap[s]://[:port] > [type=refreshOnly|refreshAndPersist] > [interval=dd:hh:mm:ss] > [retry=[ <# of retries>]+] > searchbase= > [filter=] > [scope=sub|one|base] > [attrs=] > [attrsonly] > [sizelimit=] > [timelimit=] > [schemachecking=on|off] > [bindmethod=simple|sasl] > [binddn=] > [saslmech=] > [authcid=] > [authzid=] > [credentials=] > [realm=] > [secprops=] > [starttls=yes|critical] > [tls_cert=] > [tls_key=] > [tls_cacert=] > [tls_cacertdir=] > [tls_reqcert=never|allow|try|demand] > [tls_ciphersuite=] > [tls_crlcheck=none|peer|all] > [logbase=] > [logfilter=] > [syncdata=default|accesslog|changelog] This directive specifies the current database as a replica of the master content by establishing the current {{slapd}}(8) as a replication consumer site running a syncrepl replication engine. The master database is located at the replication provider site specified by the {{EX:provider}} parameter. The replica database is kept up-to-date with the master content using the LDAP Content Synchronization protocol. See {{REF:RFC4533}} for more information on the protocol. The {{EX:rid}} parameter is used for identification of the current {{EX:syncrepl}} directive within the replication consumer server, where {{EX:}} uniquely identifies the syncrepl specification described by the current {{EX:syncrepl}} directive. {{EX:}} is non-negative and is no more than three decimal digits in length. The {{EX:provider}} parameter specifies the replication provider site containing the master content as an LDAP URI. The {{EX:provider}} parameter specifies a scheme, a host and optionally a port where the provider slapd instance can be found. Either a domain name or IP address may be used for . Examples are {{EX:ldap://provider.example.com:389}} or {{EX:ldaps://192.168.1.1:636}}. If is not given, the standard LDAP port number (389 or 636) is used. Note that the syncrepl uses a consumer-initiated protocol, and hence its specification is located at the consumer site, whereas the {{EX:replica}} specification is located at the provider site. {{EX:syncrepl}} and {{EX:replica}} directives define two independent replication mechanisms. They do not represent the replication peers of each other. The content of the syncrepl replica is defined using a search specification as its result set. The consumer slapd will send search requests to the provider slapd according to the search specification. The search specification includes {{EX:searchbase}}, {{EX:scope}}, {{EX:filter}}, {{EX:attrs}}, {{EX:attrsonly}}, {{EX:sizelimit}}, and {{EX:timelimit}} parameters as in the normal search specification. The {{EX:searchbase}} parameter has no default value and must always be specified. The {{EX:scope}} defaults to {{EX:sub}}, the {{EX:filter}} defaults to {{EX:(objectclass=*)}}, {{EX:attrs}} defaults to {{EX:"*,+"}} to replicate all user and operational attributes, and {{EX:attrsonly}} is unset by default. Both {{EX:sizelimit}} and {{EX:timelimit}} default to "unlimited", and only positive integers or "unlimited" may be specified. The {{TERM[expand]LDAP Sync}} protocol has two operation types: {{EX:refreshOnly}} and {{EX:refreshAndPersist}}. The operation type is specified by the {{EX:type}} parameter. In the {{EX:refreshOnly}} operation, the next synchronization search operation is periodically rescheduled at an interval time after each synchronization operation finishes. The interval is specified by the {{EX:interval}} parameter. It is set to one day by default. In the {{EX:refreshAndPersist}} operation, a synchronization search remains persistent in the provider {{slapd}} instance. Further updates to the master replica will generate {{EX:searchResultEntry}} to the consumer slapd as the search responses to the persistent synchronization search. If an error occurs during replication, the consumer will attempt to reconnect according to the retry parameter which is a list of the and <# of retries> pairs. For example, retry="60 10 300 3" lets the consumer retry every 60 seconds for the first 10 times and then retry every 300 seconds for the next three times before stop retrying. + in <# of retries> means indefinite number of retries until success. The schema checking can be enforced at the LDAP Sync consumer site by turning on the {{EX:schemachecking}} parameter. If it is turned on, every replicated entry will be checked for its schema as the entry is stored into the replica content. Every entry in the replica should contain those attributes required by the schema definition. If it is turned off, entries will be stored without checking schema conformance. The default is off. The {{EX:binddn}} parameter gives the DN to bind as for the syncrepl searches to the provider slapd. It should be a DN which has read access to the replication content in the master database. The {{EX:bindmethod}} is {{EX:simple}} or {{EX:sasl}}, depending on whether simple password-based authentication or {{TERM:SASL}} authentication is to be used when connecting to the provider {{slapd}} instance. Simple authentication should not be used unless adequate data integrity and confidentiality protections are in place (e.g. TLS or IPsec). Simple authentication requires specification of {{EX:binddn}} and {{EX:credentials}} parameters. SASL authentication is generally recommended. SASL authentication requires specification of a mechanism using the {{EX:saslmech}} parameter. Depending on the mechanism, an authentication identity and/or credentials can be specified using {{EX:authcid}} and {{EX:credentials}}, respectively. The {{EX:authzid}} parameter may be used to specify an authorization identity. The {{EX:realm}} parameter specifies a realm which a certain mechanisms authenticate the identity within. The {{EX:secprops}} parameter specifies Cyrus SASL security properties. The {{EX:starttls}} parameter specifies use of the StartTLS extended operation to establish a TLS session before authenticating to the provider. If the {{EX:critical}} argument is supplied, the session will be aborted if the StartTLS request fails. Otherwise the syncrepl session continues without TLS. Note that the main slapd TLS settings are not used by the syncrepl engine; by default the TLS parameters from a {{ldap.conf}}(5) configuration file will be used. TLS settings may be specified here, in which case any {{ldap.conf}}(5) settings will be completely ignored. Rather than replicating whole entries, the consumer can query logs of data modifications. This mode of operation is referred to as {{delta syncrepl}}. In addition to the above parameters, the {{EX:logbase}} and {{EX:logfilter}} parameters must be set appropriately for the log that will be used. The {{EX:syncdata}} parameter must be set to either {{EX:"accesslog"}} if the log conforms to the {{slapo-accesslog}}(5) log format, or {{EX:"changelog"}} if the log conforms to the obsolete {{changelog}} format. If the {{EX:syncdata}} parameter is omitted or set to {{EX:"default"}} then the log parameters are ignored. The {{syncrepl}} replication mechanism is supported by the {{bdb}} and {{hdb}} backends. See the {{SECT:LDAP Sync Replication}} chapter of this guide for more information on how to use this directive. H4: olcTimeLimit: This directive specifies the maximum number of seconds (in real time) slapd will spend answering a search request. If a request is not finished in this time, a result indicating an exceeded timelimit will be returned. \Default: > olcTimeLimit: 3600 H4: olcUpdateref: This directive is only applicable in a slave slapd. It specifies the URL to return to clients which submit update requests upon the replica. If specified multiple times, each {{TERM:URL}} is provided. \Example: > olcUpdateref: ldap://master.example.net H4: Sample Entries >dn: olcDatabase=frontend,cn=config >objectClass: olcDatabaseConfig >objectClass: olcFrontendConfig >olcDatabase: frontend >olcReadOnly: FALSE > >dn: olcDatabase=config,cn=config >objectClass: olcDatabaseConfig >olcDatabase: config >olcRootDN: cn=Manager,dc=example,dc=com H3: BDB and HDB Database Directives Directives in this category apply to both the {{TERM:BDB}} and the {{TERM:HDB}} database. They are used in an olcDatabase entry in addition to the generic database directives defined above. For a complete reference of BDB/HDB configuration directives, see {{slapd-bdb}}(5). In addition to the {{EX:olcDatabaseConfig}} objectClass, BDB and HDB database entries must have the {{EX:olcBdbConfig}} and {{EX:olcHdbConfig}} objectClass, respectively. H4: olcDbDirectory: This directive specifies the directory where the BDB files containing the database and associated indices live. \Default: > olcDbDirectory: /usr/local/var/openldap-data H4: olcDbCachesize: This directive specifies the size in entries of the in-memory cache maintained by the BDB backend database instance. \Default: > olcDbCachesize: 1000 H4: olcDbCheckpoint: This directive specifies how often to checkpoint the BDB transaction log. A checkpoint operation flushes the database buffers to disk and writes a checkpoint record in the log. The checkpoint will occur if either data has been written or minutes have passed since the last checkpoint. Both arguments default to zero, in which case they are ignored. When the argument is non-zero, an internal task will run every minutes to perform the checkpoint. See the Berkeley DB reference guide for more details. \Example: > olcDbCheckpoint: 1024 10 H4: olcDbConfig: This attribute specifies a configuration directive to be placed in the {{EX:DB_CONFIG}} file of the database directory. At server startup time, if no such file exists yet, the {{EX:DB_CONFIG}} file will be created and the settings in this attribute will be written to it. If the file exists, its contents will be read and displayed in this attribute. The attribute is multi-valued, to accommodate multiple configuration directives. No default is provided, but it is essential to use proper settings here to get the best server performance. Any changes made to this attribute will be written to the {{EX:DB_CONFIG}} file and will cause the database environment to be reset so the changes can take immediate effect. If the environment cache is large and has not been recently checkpointed, this reset operation may take a long time. It may be advisable to manually perform a single checkpoint using the Berkeley DB {{db_checkpoint}} utility before using LDAP Modify to change this attribute. \Example: > olcDbConfig: set_cachesize 0 10485760 0 > olcDbConfig: set_lg_bsize 2097512 > olcDbConfig: set_lg_dir /var/tmp/bdb-log > olcDbConfig: set_flags DB_LOG_AUTOREMOVE In this example, the BDB cache is set to 10MB, the BDB transaction log buffer size is set to 2MB, and the transaction log files are to be stored in the /var/tmp/bdb-log directory. Also a flag is set to tell BDB to delete transaction log files as soon as their contents have been checkpointed and they are no longer needed. Without this setting the transaction log files will continue to accumulate until some other cleanup procedure removes them. See the Berkeley DB documentation for the {{EX:db_archive}} command for details. For a complete list of Berkeley DB flags please see - {{URL:http://www.oracle.com/technology/documentation/berkeley-db/db/api_c/env_set_flags.html}} Ideally the BDB cache must be at least as large as the working set of the database, the log buffer size should be large enough to accommodate most transactions without overflowing, and the log directory must be on a separate physical disk from the main database files. And both the database directory and the log directory should be separate from disks used for regular system activities such as the root, boot, or swap filesystems. See the FAQ-o-Matic and the Berkeley DB documentation for more details. H4: olcDbNosync: { TRUE | FALSE } This option causes on-disk database contents to not be immediately synchronized with in memory changes upon change. Setting this option to {{EX:TRUE}} may improve performance at the expense of data integrity. This directive has the same effect as using > olcDbConfig: set_flags DB_TXN_NOSYNC H4: olcDbIDLcacheSize: Specify the size of the in-memory index cache, in index slots. The default is zero. A larger value will speed up frequent searches of indexed entries. The optimal size will depend on the data and search characteristics of the database, but using a number three times the entry cache size is a good starting point. \Example: > olcDbIDLcacheSize: 3000 H4: olcDbIndex: { | default} [pres,eq,approx,sub,none] This directive specifies the indices to maintain for the given attribute. If only an {{EX:}} is given, the default indices are maintained. The index keywords correspond to the common types of matches that may be used in an LDAP search filter. \Example: > olcDbIndex: default pres,eq > olcDbIndex: uid > olcDbIndex: cn,sn pres,eq,sub > olcDbIndex: objectClass eq The first line sets the default set of indices to maintain to present and equality. The second line causes the default (pres,eq) set of indices to be maintained for the {{EX:uid}} attribute type. The third line causes present, equality, and substring indices to be maintained for {{EX:cn}} and {{EX:sn}} attribute types. The fourth line causes an equality index for the {{EX:objectClass}} attribute type. There is no index keyword for inequality matches. Generally these matches do not use an index. However, some attributes do support indexing for inequality matches, based on the equality index. A substring index can be more explicitly specified as {{EX:subinitial}}, {{EX:subany}}, or {{EX:subfinal}}, corresponding to the three possible components of a substring match filter. A subinitial index only indexes substrings that appear at the beginning of an attribute value. A subfinal index only indexes substrings that appear at the end of an attribute value, while subany indexes substrings that occur anywhere in a value. Note that by default, setting an index for an attribute also affects every subtype of that attribute. E.g., setting an equality index on the {{EX:name}} attribute causes {{EX:cn}}, {{EX:sn}}, and every other attribute that inherits from {{EX:name}} to be indexed. By default, no indices are maintained. It is generally advised that minimally an equality index upon objectClass be maintained. > olcDbindex: objectClass eq Additional indices should be configured corresponding to the most common searches that are used on the database. Presence indexing should not be configured for an attribute unless the attribute occurs very rarely in the database, and presence searches on the attribute occur very frequently during normal use of the directory. Most applications don't use presence searches, so usually presence indexing is not very useful. If this setting is changed while slapd is running, an internal task will be run to generate the changed index data. All server operations can continue as normal while the indexer does its work. If slapd is stopped before the index task completes, indexing will have to be manually completed using the slapindex tool. H4: olcDbLinearIndex: { TRUE | FALSE } If this setting is {{EX:TRUE}} slapindex will index one attribute at a time. The default settings is {{EX:FALSE}} in which case all indexed attributes of an entry are processed at the same time. When enabled, each indexed attribute is processed individually, using multiple passes through the entire database. This option improves slapindex performance when the database size exceeds the BDB cache size. When the BDB cache is large enough, this option is not needed and will decrease performance. Also by default, slapadd performs full indexing and so a separate slapindex run is not needed. With this option, slapadd does no indexing and slapindex must be used. H4: olcDbMode: This directive specifies the file protection mode that newly created database index files should have. \Default: > olcDbMode: 0600 H4: olcDbSearchStack: Specify the depth of the stack used for search filter evaluation. Search filters are evaluated on a stack to accommodate nested {{EX:AND}} / {{EX:OR}} clauses. An individual stack is allocated for each server thread. The depth of the stack determines how complex a filter can be evaluated without requiring any additional memory allocation. Filters that are nested deeper than the search stack depth will cause a separate stack to be allocated for that particular search operation. These separate allocations can have a major negative impact on server performance, but specifying too much stack will also consume a great deal of memory. Each search uses 512K bytes per level on a 32-bit machine, or 1024K bytes per level on a 64-bit machine. The default stack depth is 16, thus 8MB or 16MB per thread is used on 32 and 64 bit machines, respectively. Also the 512KB size of a single stack slot is set by a compile-time constant which may be changed if needed; the code must be recompiled for the change to take effect. \Default: > olcDbSearchStack: 16 H4: olcDbShmKey: Specify a key for a shared memory BDB environment. By default the BDB environment uses memory mapped files. If a non-zero value is specified, it will be used as the key to identify a shared memory region that will house the environment. \Example: > olcDbShmKey: 42 H4: Sample Entry >dn: olcDatabase=hdb,cn=config >objectClass: olcDatabaseConfig >objectClass: olcHdbConfig >olcDatabase: hdb >olcSuffix: "dc=example,dc=com" >olcDbDirectory: /usr/local/var/openldap-data >olcDbCacheSize: 1000 >olcDbCheckpoint: 1024 10 >olcDbConfig: set_cachesize 0 10485760 0 >olcDbConfig: set_lg_bsize 2097152 >olcDbConfig: set_lg_dir /var/tmp/bdb-log >olcDbConfig: set_flags DB_LOG_AUTOREMOVE >olcDbIDLcacheSize: 3000 >olcDbIndex: objectClass eq @ 1.1.1.1 log @OpenLDAP 2.4.9 @ text @@ 1.1.1.2 log @OpenLDAP 2.4.21. Numerous fixes, including: * properly handle NUL in CN of SSL certs (CVE-2009-3767) @ text @d1 2 a2 2 # OpenLDAP: pkg/openldap-guide/admin/slapdconf2.sdf,v 1.20.2.20 2009/06/27 17:55:39 quanah Exp # Copyright 2005-2009 The OpenLDAP Foundation, All Rights Reserved. d8 1 a8 3 to configure {{slapd}}(8) for use at your site. Unlike previous d14 1 a14 3 to take effect. The old style {{slapd.conf}}(5) file is still d21 9 a29 7 {{F:/usr/local/etc/openldap/slapd.d}} directory. An alternate configuration directory (or file) can be specified via a command-line option to {{slapd}}(8). This chapter briefly discusses converting to the new style configuration, then describes the general format of the configuration system, followed by a detailed description of commonly used config settings. d128 1 a128 1 separated by whitespace. If an argument contains whitespace, d174 1 a174 1 correspond to what kind of debugging, invoke slapd with {{EX:-d?}} d179 18 a196 17 Level Keyword Description -1 any enable all debugging 0 no debugging 1 (0x1 trace) trace function callss 2 (0x2 packets) debug packet handling 4 (0x4 args) heavy trace debugging 8 (0x8 conns) connection management 16 (0x10 BER) print out packets sent and received 32 (0x20 filter) search filter processing 64 (0x40 config) configuration processing 128 (0x80 ACL) access control list processing 256 (0x100 stats) stats log connections/operations/results 512 (0x200 stats2) stats log entries sent 1024 (0x400 shell) print communication with shell backends 2048 (0x800 parse) print entry parsing debugging 16384 (0x4000 sync) syncrepl consumer processing 32768 (0x8000 none) only messages that get logged whatever log level is set d199 1 a199 3 The desired log level can be input as a single integer that combines the (ORed) desired levels, both in decimal or in hexadecimal notation, as a list of integers (that are ORed internally), or as a list of the names that are shown between brackets, such that d201 1 a201 11 > olcLogLevel 129 > olcLogLevel 0x81 > olcLogLevel 128 1 > olcLogLevel 0x80 0x1 > olcLogLevel acl trace are equivalent. \Examples: E: olcLogLevel -1 d206 1 a206 1 E: olcLogLevel conns filter a209 6 E: olcLogLevel none Log those messages that are logged regardless of the configured loglevel. This differs from setting the log level to 0, when no logging occurs. At least the {{EX:None}} level is required to have high priority messages logged. d212 1 a212 4 E: olcLogLevel stats Basic stats logging is configured by default. However, if no olcLogLevel is defined, no logging occurs (equivalent to a 0 level). a476 2 See the {{SECT:Limits}} section of this guide and slapd-config(5) for more details. a670 3 See the {{SECT:Limits}} section of this guide and slapd-config(5) for more details. d888 1 a888 1 H4: olcDbMode: { | } d891 1 a891 2 created database index files should have. This can be in the form {{EX:0600}} or {{EX:-rw-------}} a948 140 H2: Configuration Example The following is an example configuration, interspersed with explanatory text. It defines two databases to handle different parts of the {{TERM:X.500}} tree; both are {{TERM:BDB}} database instances. The line numbers shown are provided for reference only and are not included in the actual file. First, the global configuration section: E: 1. # example config file - global configuration entry E: 2. dn: cn=config E: 3. objectClass: olcGlobal E: 4. cn: config E: 5. olcReferral: ldap://root.openldap.org E: 6. Line 1 is a comment. Lines 2-4 identify this as the global configuration entry. The {{EX:olcReferral:}} directive on line 5 means that queries not local to one of the databases defined below will be referred to the LDAP server running on the standard port (389) at the host {{EX:root.openldap.org}}. Line 6 is a blank line, indicating the end of this entry. E: 7. # internal schema E: 8. dn: cn=schema,cn=config E: 9. objectClass: olcSchemaConfig E: 10. cn: schema E: 11. Line 7 is a comment. Lines 8-10 identify this as the root of the schema subtree. The actual schema definitions in this entry are hardcoded into slapd so no additional attributes are specified here. Line 11 is a blank line, indicating the end of this entry. E: 12. # include the core schema E: 13. include: file:///usr/local/etc/openldap/schema/core.ldif E: 14. Line 12 is a comment. Line 13 is an LDIF include directive which accesses the {{core}} schema definitions in LDIF format. Line 14 is a blank line. Next comes the database definitions. The first database is the special {{EX:frontend}} database whose settings are applied globally to all the other databases. E: 15. # global database parameters E: 16. dn: olcDatabase=frontend,cn=config E: 17. objectClass: olcDatabaseConfig E: 18. olcDatabase: frontend E: 19. olcAccess: to * by * read E: 20. Line 15 is a comment. Lines 16-18 identify this entry as the global database entry. Line 19 is a global access control. It applies to all entries (after any applicable database-specific access controls). The next entry defines a BDB backend that will handle queries for things in the "dc=example,dc=com" portion of the tree. Indices are to be maintained for several attributes, and the {{EX:userPassword}} attribute is to be protected from unauthorized access. E: 21. # BDB definition for example.com E: 22. dn: olcDatabase=bdb,cn=config E: 23. objectClass: olcDatabaseConfig E: 24. objectClass: olcBdbConfig E: 25. olcDatabase: bdb E: 26. olcSuffix: "dc=example,dc=com" E: 27. olcDbDirectory: /usr/local/var/openldap-data E: 28. olcRootDN: "cn=Manager,dc=example,dc=com" E: 29. olcRootPW: secret E: 30. olcDbIndex: uid pres,eq E: 31. olcDbIndex: cn,sn,uid pres,eq,approx,sub E: 32. olcDbIndex: objectClass eq E: 33. olcAccess: to attrs=userPassword E: 34. by self write E: 35. by anonymous auth E: 36. by dn.base="cn=Admin,dc=example,dc=com" write E: 37. by * none E: 38. olcAccess: to * E: 39. by self write E: 40. by dn.base="cn=Admin,dc=example,dc=com" write E: 41. by * read E: 42. Line 21 is a comment. Lines 22-25 identify this entry as a BDB database configuration entry. Line 26 specifies the DN suffix for queries to pass to this database. Line 27 specifies the directory in which the database files will live. Lines 28 and 29 identify the database {{super-user}} entry and associated password. This entry is not subject to access control or size or time limit restrictions. Lines 30 through 32 indicate the indices to maintain for various attributes. Lines 33 through 41 specify access control for entries in this database. For all applicable entries, the {{EX:userPassword}} attribute is writable by the entry itself and by the "admin" entry. It may be used for authentication/authorization purposes, but is otherwise not readable. All other attributes are writable by the entry and the "admin" entry, but may be read by all users (authenticated or not). Line 42 is a blank line, indicating the end of this entry. The next section of the example configuration file defines another BDB database. This one handles queries involving the {{EX:dc=example,dc=net}} subtree but is managed by the same entity as the first database. Note that without line 52, the read access would be allowed due to the global access rule at line 19. E: 43. # BDB definition for example.net E: 44. dn: olcDatabase=bdb,cn=config E: 45. objectClass: olcDatabaseConfig E: 46. objectClass: olcBdbConfig E: 47. olcDatabase: bdb E: 48. olcSuffix: "dc=example,dc=net" E: 49. olcDbDirectory: /usr/local/var/openldap-data-net E: 50. olcRootDN: "cn=Manager,dc=example,dc=com" E: 51. olcDbIndex: objectClass eq E: 52. olcAccess: to * by users read H2: Converting old style {{slapd.conf}}(5) file to {{cn=config}} format An existing {{slapd.conf}}(5) file can be converted to the new format using {{slaptest}}(8) or any of the slap tools: > slaptest -f /usr/local/etc/openldap/slapd.conf -F /usr/local/etc/openldap/slapd.d You can then discard the old {{slapd.conf}}(5) file. Make sure to launch {{slapd}}(8) with the {{-F}} option to specify the configuration directory. Note: When converting from the slapd.conf format to slapd.d format, any included files will also be integrated into the resulting configuration database. @ 1.1.1.3 log @Imported openldap-2.4.23 @ text @d1 2 a2 2 # OpenLDAP: pkg/openldap-guide/admin/slapdconf2.sdf,v 1.20.2.21 2010/04/13 20:22:35 kurt Exp # Copyright 2005-2010 The OpenLDAP Foundation, All Rights Reserved. @ 1.1.1.3.12.1 log @Rebase to HEAD as of a few days ago. @ text @d1 2 a2 2 # $OpenLDAP$ # Copyright 2005-2014 The OpenLDAP Foundation, All Rights Reserved. d10 5 a14 7 OpenLDAP 2.3 and later have transitioned to using a dynamic runtime configuration engine, {{slapd-config}}(5). {{slapd-config}}(5) * is fully LDAP-enabled * is managed using the standard LDAP operations * stores its configuration data in an {{TERM:LDIF}} database, generally in the {{F:/usr/local/etc/openldap/slapd.d}} directory. * allows all of slapd's configuration options to be changed on the fly, d18 18 a35 25 This chapter describes the general format of the {{slapd-config}}(5) configuration system, followed by a detailed description of commonly used settings. The older style {{slapd.conf}}(5) file is still supported, but its use is deprecated and support for it will be withdrawn in a future OpenLDAP release. Configuring {{slapd}}(8) via {{slapd.conf}}(5) is described in the next chapter. Refer to {{slapd}}(8) for information on how to have slapd automatically convert from {{slapd.conf}}(5) to {{slapd-config}}(5). Note: Although the {{slapd-config}}(5) system stores its configuration as (text-based) LDIF files, you should {{1:never}} edit any of the LDIF files directly. Configuration changes should be performed via LDAP operations, e.g. {{ldapadd}}(1), {{ldapdelete}}(1), or {{ldapmodify}}(1). Note: You will need to continue to use the older {{slapd.conf}}(5) configuration system if your OpenLDAP installation requires the use of one or more backends or overlays that have not been updated to use the {{slapd-config}}(5) system. As of OpenLDAP 2.4.33, all of the official backends have been updated. There may be additional contributed or experimental overlays that also have not been updated. d184 1 a184 1 1 (0x1 trace) trace function calls a1035 23 Line 20 is a blank line. The next entry defines the config backend. E: 21. # set a rootpw for the config database so we can bind. E: 22. # deny access to everyone else. E: 23. dn: olcDatabase=config,cn=config E: 24. objectClass: olcDatabaseConfig E: 25. olcDatabase: config E: 26. olcRootPW: {SSHA}XKYnrjvGT3wZFQrDD5040US592LxsdLy E: 27. olcAccess: to * by * none E: 28. Lines 21-22 are comments. Lines 23-25 identify this entry as the config database entry. Line 26 defines the {{super-user}} password for this database. (The DN defaults to {{"cn=config"}}.) Line 27 denies all access to this database, so only the super-user will be able to access it. (This is already the default access on the config database. It is just listed here for illustration, and to reiterate that unless a means to authenticate as the super-user is explicitly configured, the config database will be inaccessible.) Line 28 is a blank line. d1042 26 a1067 26 E: 29. # BDB definition for example.com E: 30. dn: olcDatabase=bdb,cn=config E: 31. objectClass: olcDatabaseConfig E: 32. objectClass: olcBdbConfig E: 33. olcDatabase: bdb E: 34. olcSuffix: dc=example,dc=com E: 35. olcDbDirectory: /usr/local/var/openldap-data E: 36. olcRootDN: cn=Manager,dc=example,dc=com E: 37. olcRootPW: secret E: 38. olcDbIndex: uid pres,eq E: 39. olcDbIndex: cn,sn pres,eq,approx,sub E: 40. olcDbIndex: objectClass eq E: 41. olcAccess: to attrs=userPassword E: 42. by self write E: 43. by anonymous auth E: 44. by dn.base="cn=Admin,dc=example,dc=com" write E: 45. by * none E: 46. olcAccess: to * E: 47. by self write E: 48. by dn.base="cn=Admin,dc=example,dc=com" write E: 49. by * read E: 50. Line 29 is a comment. Lines 30-33 identify this entry as a BDB database configuration entry. Line 34 specifies the DN suffix for queries to pass to this database. Line 35 specifies the directory d1070 1 a1070 1 Lines 36 and 37 identify the database {{super-user}} entry and associated d1074 1 a1074 1 Lines 38 through 40 indicate the indices to maintain for various d1077 1 a1077 1 Lines 41 through 49 specify access control for entries in this d1084 1 a1084 1 Line 50 is a blank line, indicating the end of this entry. d1086 1 a1086 1 The next entry defines another d1089 1 a1089 1 as the first database. Note that without line 60, the read access d1092 10 a1101 10 E: 51. # BDB definition for example.net E: 52. dn: olcDatabase=bdb,cn=config E: 53. objectClass: olcDatabaseConfig E: 54. objectClass: olcBdbConfig E: 55. olcDatabase: bdb E: 56. olcSuffix: "dc=example,dc=net" E: 57. olcDbDirectory: /usr/local/var/openldap-data-net E: 58. olcRootDN: "cn=Manager,dc=example,dc=com" E: 59. olcDbIndex: objectClass eq E: 60. olcAccess: to * by users read a1105 19 Before converting to the {{cn=config}} format you should make sure that the config backend is properly configured in your existing config file. While the config backend is always present inside slapd, by default it is only accessible by its rootDN, and there are no default credentials assigned so unless you explicitly configure a means to authenticate to it, it will be unusable. If you do not already have a {{EX:database config}} section, add something like this to the end of {{EX:slapd.conf}} > database config > rootpw VerySecret Note: Since the config backend can be used to load arbitrary code into the slapd process, it is extremely important to carefully guard whatever credentials are used to access it. Since simple passwords are vulnerable to password guessing attacks, it is usually better to omit the rootpw and only use SASL authentication for the config rootDN. a1110 5 Test that you can access entries under {{EX:cn=config}} using the default {{rootdn}} and the {{rootpw}} configured above: > ldapsearch -x -D cn=config -w VerySecret -b cn=config d1112 1 a1112 2 {{slapd}}(8) with the {{-F}} option to specify the configuration directory if you are not using the default directory path. @ 1.1.1.3.24.1 log @Rebase. @ text @d1 2 a2 2 # $OpenLDAP$ # Copyright 2005-2014 The OpenLDAP Foundation, All Rights Reserved. d10 5 a14 7 OpenLDAP 2.3 and later have transitioned to using a dynamic runtime configuration engine, {{slapd-config}}(5). {{slapd-config}}(5) * is fully LDAP-enabled * is managed using the standard LDAP operations * stores its configuration data in an {{TERM:LDIF}} database, generally in the {{F:/usr/local/etc/openldap/slapd.d}} directory. * allows all of slapd's configuration options to be changed on the fly, d18 18 a35 25 This chapter describes the general format of the {{slapd-config}}(5) configuration system, followed by a detailed description of commonly used settings. The older style {{slapd.conf}}(5) file is still supported, but its use is deprecated and support for it will be withdrawn in a future OpenLDAP release. Configuring {{slapd}}(8) via {{slapd.conf}}(5) is described in the next chapter. Refer to {{slapd}}(8) for information on how to have slapd automatically convert from {{slapd.conf}}(5) to {{slapd-config}}(5). Note: Although the {{slapd-config}}(5) system stores its configuration as (text-based) LDIF files, you should {{1:never}} edit any of the LDIF files directly. Configuration changes should be performed via LDAP operations, e.g. {{ldapadd}}(1), {{ldapdelete}}(1), or {{ldapmodify}}(1). Note: You will need to continue to use the older {{slapd.conf}}(5) configuration system if your OpenLDAP installation requires the use of one or more backends or overlays that have not been updated to use the {{slapd-config}}(5) system. As of OpenLDAP 2.4.33, all of the official backends have been updated. There may be additional contributed or experimental overlays that also have not been updated. d184 1 a184 1 1 (0x1 trace) trace function calls a1035 23 Line 20 is a blank line. The next entry defines the config backend. E: 21. # set a rootpw for the config database so we can bind. E: 22. # deny access to everyone else. E: 23. dn: olcDatabase=config,cn=config E: 24. objectClass: olcDatabaseConfig E: 25. olcDatabase: config E: 26. olcRootPW: {SSHA}XKYnrjvGT3wZFQrDD5040US592LxsdLy E: 27. olcAccess: to * by * none E: 28. Lines 21-22 are comments. Lines 23-25 identify this entry as the config database entry. Line 26 defines the {{super-user}} password for this database. (The DN defaults to {{"cn=config"}}.) Line 27 denies all access to this database, so only the super-user will be able to access it. (This is already the default access on the config database. It is just listed here for illustration, and to reiterate that unless a means to authenticate as the super-user is explicitly configured, the config database will be inaccessible.) Line 28 is a blank line. d1042 26 a1067 26 E: 29. # BDB definition for example.com E: 30. dn: olcDatabase=bdb,cn=config E: 31. objectClass: olcDatabaseConfig E: 32. objectClass: olcBdbConfig E: 33. olcDatabase: bdb E: 34. olcSuffix: dc=example,dc=com E: 35. olcDbDirectory: /usr/local/var/openldap-data E: 36. olcRootDN: cn=Manager,dc=example,dc=com E: 37. olcRootPW: secret E: 38. olcDbIndex: uid pres,eq E: 39. olcDbIndex: cn,sn pres,eq,approx,sub E: 40. olcDbIndex: objectClass eq E: 41. olcAccess: to attrs=userPassword E: 42. by self write E: 43. by anonymous auth E: 44. by dn.base="cn=Admin,dc=example,dc=com" write E: 45. by * none E: 46. olcAccess: to * E: 47. by self write E: 48. by dn.base="cn=Admin,dc=example,dc=com" write E: 49. by * read E: 50. Line 29 is a comment. Lines 30-33 identify this entry as a BDB database configuration entry. Line 34 specifies the DN suffix for queries to pass to this database. Line 35 specifies the directory d1070 1 a1070 1 Lines 36 and 37 identify the database {{super-user}} entry and associated d1074 1 a1074 1 Lines 38 through 40 indicate the indices to maintain for various d1077 1 a1077 1 Lines 41 through 49 specify access control for entries in this d1084 1 a1084 1 Line 50 is a blank line, indicating the end of this entry. d1086 1 a1086 1 The next entry defines another d1089 1 a1089 1 as the first database. Note that without line 60, the read access d1092 10 a1101 10 E: 51. # BDB definition for example.net E: 52. dn: olcDatabase=bdb,cn=config E: 53. objectClass: olcDatabaseConfig E: 54. objectClass: olcBdbConfig E: 55. olcDatabase: bdb E: 56. olcSuffix: "dc=example,dc=net" E: 57. olcDbDirectory: /usr/local/var/openldap-data-net E: 58. olcRootDN: "cn=Manager,dc=example,dc=com" E: 59. olcDbIndex: objectClass eq E: 60. olcAccess: to * by users read a1105 19 Before converting to the {{cn=config}} format you should make sure that the config backend is properly configured in your existing config file. While the config backend is always present inside slapd, by default it is only accessible by its rootDN, and there are no default credentials assigned so unless you explicitly configure a means to authenticate to it, it will be unusable. If you do not already have a {{EX:database config}} section, add something like this to the end of {{EX:slapd.conf}} > database config > rootpw VerySecret Note: Since the config backend can be used to load arbitrary code into the slapd process, it is extremely important to carefully guard whatever credentials are used to access it. Since simple passwords are vulnerable to password guessing attacks, it is usually better to omit the rootpw and only use SASL authentication for the config rootDN. a1110 5 Test that you can access entries under {{EX:cn=config}} using the default {{rootdn}} and the {{rootpw}} configured above: > ldapsearch -x -D cn=config -w VerySecret -b cn=config d1112 1 a1112 2 {{slapd}}(8) with the {{-F}} option to specify the configuration directory if you are not using the default directory path. @ 1.1.1.4 log @Import OpenLDAP version 2.4.39. The list of changes since version 2.4.23 is too long to put here (over 650 lines of changelog). @ text @d1 2 a2 2 # $OpenLDAP$ # Copyright 2005-2014 The OpenLDAP Foundation, All Rights Reserved. d10 5 a14 7 OpenLDAP 2.3 and later have transitioned to using a dynamic runtime configuration engine, {{slapd-config}}(5). {{slapd-config}}(5) * is fully LDAP-enabled * is managed using the standard LDAP operations * stores its configuration data in an {{TERM:LDIF}} database, generally in the {{F:/usr/local/etc/openldap/slapd.d}} directory. * allows all of slapd's configuration options to be changed on the fly, d18 18 a35 25 This chapter describes the general format of the {{slapd-config}}(5) configuration system, followed by a detailed description of commonly used settings. The older style {{slapd.conf}}(5) file is still supported, but its use is deprecated and support for it will be withdrawn in a future OpenLDAP release. Configuring {{slapd}}(8) via {{slapd.conf}}(5) is described in the next chapter. Refer to {{slapd}}(8) for information on how to have slapd automatically convert from {{slapd.conf}}(5) to {{slapd-config}}(5). Note: Although the {{slapd-config}}(5) system stores its configuration as (text-based) LDIF files, you should {{1:never}} edit any of the LDIF files directly. Configuration changes should be performed via LDAP operations, e.g. {{ldapadd}}(1), {{ldapdelete}}(1), or {{ldapmodify}}(1). Note: You will need to continue to use the older {{slapd.conf}}(5) configuration system if your OpenLDAP installation requires the use of one or more backends or overlays that have not been updated to use the {{slapd-config}}(5) system. As of OpenLDAP 2.4.33, all of the official backends have been updated. There may be additional contributed or experimental overlays that also have not been updated. d184 1 a184 1 1 (0x1 trace) trace function calls a1035 23 Line 20 is a blank line. The next entry defines the config backend. E: 21. # set a rootpw for the config database so we can bind. E: 22. # deny access to everyone else. E: 23. dn: olcDatabase=config,cn=config E: 24. objectClass: olcDatabaseConfig E: 25. olcDatabase: config E: 26. olcRootPW: {SSHA}XKYnrjvGT3wZFQrDD5040US592LxsdLy E: 27. olcAccess: to * by * none E: 28. Lines 21-22 are comments. Lines 23-25 identify this entry as the config database entry. Line 26 defines the {{super-user}} password for this database. (The DN defaults to {{"cn=config"}}.) Line 27 denies all access to this database, so only the super-user will be able to access it. (This is already the default access on the config database. It is just listed here for illustration, and to reiterate that unless a means to authenticate as the super-user is explicitly configured, the config database will be inaccessible.) Line 28 is a blank line. d1042 26 a1067 26 E: 29. # BDB definition for example.com E: 30. dn: olcDatabase=bdb,cn=config E: 31. objectClass: olcDatabaseConfig E: 32. objectClass: olcBdbConfig E: 33. olcDatabase: bdb E: 34. olcSuffix: dc=example,dc=com E: 35. olcDbDirectory: /usr/local/var/openldap-data E: 36. olcRootDN: cn=Manager,dc=example,dc=com E: 37. olcRootPW: secret E: 38. olcDbIndex: uid pres,eq E: 39. olcDbIndex: cn,sn pres,eq,approx,sub E: 40. olcDbIndex: objectClass eq E: 41. olcAccess: to attrs=userPassword E: 42. by self write E: 43. by anonymous auth E: 44. by dn.base="cn=Admin,dc=example,dc=com" write E: 45. by * none E: 46. olcAccess: to * E: 47. by self write E: 48. by dn.base="cn=Admin,dc=example,dc=com" write E: 49. by * read E: 50. Line 29 is a comment. Lines 30-33 identify this entry as a BDB database configuration entry. Line 34 specifies the DN suffix for queries to pass to this database. Line 35 specifies the directory d1070 1 a1070 1 Lines 36 and 37 identify the database {{super-user}} entry and associated d1074 1 a1074 1 Lines 38 through 40 indicate the indices to maintain for various d1077 1 a1077 1 Lines 41 through 49 specify access control for entries in this d1084 1 a1084 1 Line 50 is a blank line, indicating the end of this entry. d1086 1 a1086 1 The next entry defines another d1089 1 a1089 1 as the first database. Note that without line 60, the read access d1092 10 a1101 10 E: 51. # BDB definition for example.net E: 52. dn: olcDatabase=bdb,cn=config E: 53. objectClass: olcDatabaseConfig E: 54. objectClass: olcBdbConfig E: 55. olcDatabase: bdb E: 56. olcSuffix: "dc=example,dc=net" E: 57. olcDbDirectory: /usr/local/var/openldap-data-net E: 58. olcRootDN: "cn=Manager,dc=example,dc=com" E: 59. olcDbIndex: objectClass eq E: 60. olcAccess: to * by users read a1105 19 Before converting to the {{cn=config}} format you should make sure that the config backend is properly configured in your existing config file. While the config backend is always present inside slapd, by default it is only accessible by its rootDN, and there are no default credentials assigned so unless you explicitly configure a means to authenticate to it, it will be unusable. If you do not already have a {{EX:database config}} section, add something like this to the end of {{EX:slapd.conf}} > database config > rootpw VerySecret Note: Since the config backend can be used to load arbitrary code into the slapd process, it is extremely important to carefully guard whatever credentials are used to access it. Since simple passwords are vulnerable to password guessing attacks, it is usually better to omit the rootpw and only use SASL authentication for the config rootDN. a1110 5 Test that you can access entries under {{EX:cn=config}} using the default {{rootdn}} and the {{rootpw}} configured above: > ldapsearch -x -D cn=config -w VerySecret -b cn=config d1112 1 a1112 2 {{slapd}}(8) with the {{-F}} option to specify the configuration directory if you are not using the default directory path. @ 1.1.1.4.10.1 log @Sync with HEAD @ text @d2 1 a2 1 # Copyright 2005-2016 The OpenLDAP Foundation, All Rights Reserved. d670 4 a673 2 without TLS. The tls_reqcert setting defaults to {{EX:"demand"}} and the other TLS settings default to the same as the main slapd TLS settings. @ 1.1.1.4.6.1 log @Sync with HEAD @ text @d2 1 a2 1 # Copyright 2005-2016 The OpenLDAP Foundation, All Rights Reserved. d670 4 a673 2 without TLS. The tls_reqcert setting defaults to {{EX:"demand"}} and the other TLS settings default to the same as the main slapd TLS settings. @ 1.1.1.5 log @OpenLDAP 2.4 Change Log OpenLDAP 2.4.44 Release (2016/02/05) Fixed slapd-bdb/hdb missing olcDbChecksum config attr (ITS#8337) Fixed slapd-mdb behavior with long lived read transactions (ITS#8226) Fixed slapd-mdb cleanup after failed transaction (ITS#8360) Fixed slapd-sql missing id_query/olcSqlIdQuery (ITS#8329) Fixed slapo-accesslog callback initialization (ITS#8351) Fixed slapo-ppolicy pwdMaxRecordedFailure must never be zero (ITS#8327) Fixed slapo-syncprov abandon processing (ITS#8354) Fixed slapo-syncprov ctxcsn snapshot on refresh (ITS#8281, ITS#8365) Documentation admin24 Stop linking to Berkeley DB downloads (ITS#8362) admin24 Update documentation for LMDB preference OpenLDAP 2.4.43 Release (2015/11/30) Fixed liblber remove obsolete assert (ITS#8240, ITS#8301) Fixed libldap file URLs on windows (ITS#8273) Fixed libldap microsecond timer for windows (ITS#8295) Fixed slap tools minor one time memory leak (ITS#8082) Fixed slapd to avoid redundant processing of abandon ops (ITS#8232) Fixed slapd syncrepl segv when present list is NULL (ITS#8231, ITS#8042) Fixed slapd segfault with invalid SASL URI (ITS#8218) Fixed slapd configuration parser with unbalanced quotes (ITS#8233) Fixed slapd syncrepl check with config db on windows (ITS#8277) Fixed slapd with mod Increment and inherited attribute type (ITS#8289) Fixed slapd-ldap SEGV after failed retry (ITS#8173) Fixed slapd-ldap to skip client controls in ldap_back_entry_get (ITS#8244) Fixed slapd-null to have an option to return a search entry (ITS#8249) Fixed slapd-relay to correctly handle quoted options (ITS#8284) Fixed slapo-accesslog delta-sync MMR with interrupted refresh phase (ITS#8281) Fixed slapo-dds segfault when using slapo-memberof (ITS#8133) Fixed slapo-ppolicy to allow purging of stale pwdFailureTime attributes (ITS#8185) Fixed slapo-ppolicy to release entry on failure (ITS#7537) Fixed slapo-ppolicy to fall back to default policy if there is a parsing error (ITS#8234) Fixed slapo-syncprov with interrupted refresh phase (ITS#8281) Fixed slapo-refint with subtree renames (ITS#8220) Fixed slapo-rwm missing olcDropUnrequested attribute (ITS#7889) Fixed slapo-rwm parsing to avoid double-escaping rewrite rules (ITS#7964) Build Environment Fixed ldif-filter option parsing (ITS#8292) Fixed slapd-tester EOL handling in test output for windows (ITS#8280) Fixed slapd-tester executable suffix for windows (ITS#8216) Fixed test061 timing issues (ITS#8297) Contrib Added libnettle support to pw-pbkdf2 (ITS#8198) Fixed smbk5pwd compiler warnings with libnettle (ITS#8235) Fixed passwd symbol collisions with other crypto libraries (ITS#8294) Documentation Updated guide to reflect changes to how TLS is handled with syncrepl (ITS#7897) OpenLDAP 2.4.42 Release (2015/08/14) Fixed liblber address length for CLDAP (ITS#8158) Fixed libldap dnssrv potential overflow with port number (ITS#7027,ITS#8195) Fixed slapd cn=config when updating olcAttributeTypes (ITS#8199) Fixed slapd-mdb to correctly update search candidates for scoped searches (ITS#8203) Fixed slapo-ppolicy with redundant mod ops on glued trees (ITS#8184) Fixed slapo-rwm crash when deleting rewrite rules (ITS#8213) Build Environment Fixed libdb detection with gcc 5.x (ITS#8056) OpenLDAP 2.4.41 Release (2015/06/21) Fixed ldapsearch to explicitly flush its buffer (ITS#8118) Fixed libldap async connections (ITS#8090) Fixed libldap double free of request during abandon (ITS#7967) Fixed libldap error string for LDAP_X_CONNECTING (ITS#8093) Fixed libldap segfault in ldap_sync_initialize (ITS#8001) Fixed libldap ldif-wrap off by one error (ITS#8003) Fixed libldap handling of TLS in async mode (ITS#8022) Fixed libldap null pointer dereference (ITS#8028) Fixed libldap mutex handling with LDAP_OPT_SESSION_REFCNT (ITS#8050) Fixed slapd slapadd config db import of minimal frontend entry (ITS#8150) Fixed slapd slapadd onetime leak with -w (ITS#8014) Fixed slapd sasl auxprop crash with invalid config (ITS#8092) Fixed slapd syncrepl delta-mmr issue with overlays and slapd.conf (ITS#7976) Fixed slapd syncrepl mutex for cookie state (ITS#7968) Fixed slapd syncrepl memory leaks (ITS#8035) Fixed slapd syncrepl to free presentlist at end of refresh mode (ITS#8038) Fixed slapd syncrepl to streamline presentlist (ITS#8042) Fixed slapd syncrepl concurrency when CHECK_CSN is enabled (ITS#8120) Fixed slapd rootdn checks for hidden backends (ITS#8108) Fixed slapd segfault when using matched values control (ITS#8046) Fixed slapd-ldap reconnection behavior on remote failure (ITS#8142) Fixed slapd-mdb minor case typo (ITS#8049) Fixed slapd-mdb one-level search (ITS#7975) Fixed slapd-mdb heap corruption (ITS#7965) Fixed slapd-mdb crash after deleting in-use schema (ITS#7995) Fixed slapd-mdb minor code cleanup (ITS#8011) Fixed slapd-mdb to return errors when using incorrect env flags (ITS#8016) Fixed slapd-mdb to correctly update search candidates (ITS#8036, ITS#7904) Fixed slapd-mdb when there were more than 65535 aliases in scope (ITS#8103) Fixed slapd-mdb alias deref when objectClass is not indexed (ITS#8146) Fixed slapd-meta TLS initialization with ldaps URIs (ITS#8022) Fixed slapd-meta to have better error logging (ITS#8131) Fixed slapd-perl conversion to cn=config (ITS#8105) Fixed slapd-sql autocommit config variable (ITS#8129,ITS#6613) Fixed slapo-collect segfault (ITS#7797) Fixed slapo-constraint with 0 count constraint (ITS#7780,ITS#7781) Fixed slapo-deref with empty attribute list (ITS#8027) Fixed slapo-memberof to correctly reject invalid members (ITS#8107) Fixed slapo-sock result parser for CONTINUE (ITS#8048) Fixed slapo-syncprov synprov_matchops usage of test_filter (ITS#8013) Fixed slapo-syncprov segfault on disconnect/abandon (ITS#5452,ITS#8012) Fixed slapo-syncprov memory leak (ITS#8039) Fixed slapo-syncprov segfault on disconnect/abandon (ITS#8043) Fixed slapo-syncprov deadlock when autogroup is in use (ITS#8063) Fixed slapo-syncprov potential loss of changes when under load (ITS#8081) Fixed slapo-unique enforcement of uniqueness with manageDSAit control (ITS#8057) Build Environment Fixed ftello reference for Win32 (ITS#8127) Enhanced contrib modules build paths (ITS#7782) Fixed contrib/autogroup internal operation identity (ITS#8006) Fixed contrib/autogroup to skip internal ops with accesslog (ITS#8065) Fixed contrib/passwd/sha2 compiler warning (ITS#8000) Fixed contrib/noopsrch compiler warning (ITS#7998) Fixed contrib/dupent compiler warnings (ITS#7997) Test suite: Added vrFilter test (ITS#8046) Contrib Added pbkdf2 sha256 and sha512 schemes (ITS#7977) Fixed autogroup modification callback responses (ITS#6970) Fixed nssov compare with usergroup (ITS#8079) Fixed nssov password change behavior (ITS#8080) Fixed nssov updated to 0.9.4 (ITS#8097) Documentation Added ldap_get_option(3) LDAP_FEATURE_INFO_VERSION information (ITS#8032) Added ldap_get_option(3) LDAP_OPT_API_INFO_VERSION information (ITS#8032) Fixed slapd-config(5), slapd.conf(5) tls_cipher_suite option (ITS#8099) Fixed slapd-meta(5), slapd-ldap(5) tls_cipher_suite option (ITS#8099) Fixed slapd-meta(5) fix minor typo (ITS#7769) OpenLDAP 2.4.40 Release (2014/09/20) Fixed libldap DNS SRV priority handling (ITS#7027) Fixed libldap don't leak libldap err codes (ITS#7676) Fixed libldap CR/LF handling (ITS#4635) Fixed libldap ldif-wrap length (ITS#7871) Fixed libldap GnuTLS ciphersuite parsing (ITS#7500) Fixed libldap GnuTLS with newer versions (ITS#7430,ITS#6359) Fixed libldif to correctly handle 4096 character lines (ITS#7859) Fixed librewrite reference counting (ITS#7723) Fixed slapacl with back-mdb reader transactions (ITS#7920) Fixed slapd syncrepl to send cookie on fallback (ITS#7849) Fixed slapd syncrepl SEGV when abandoning a connection (ITS#7928) Fixed slapd slapcat with external schema (ITS#7895) Fixed slapd schema RDN normalization (ITS#7935) Fixed slapd with repeated language tags (ITS#7941) Fixed slapd modrdn crash on naming attr with no matching rule (ITS#7850) Fixed slapd memory leak in control handling (ITS#7942) Fixed slapd-ldap removed dead code (ITS#7922) Fixed slapd-mdb to work concurrently with slapadd (ITS#7798) Fixed slapd-mdb with paged results (ITS#7705, ITS#7800) Fixed slapd-mdb slapcat with nonexistent indices (ITS#7870) Fixed slapd-mdb long lived reader transactions (ITS#7904) Fixed slapd-mdb memory leak on matchedDN (ITS#7872) Fixed slapd-mdb sorting of attribute values (ITS#7902) Fixed slapd-mdb to flag attribute values as sorted (ITS#7903) Fixed slapd-mdb index config handling (ITS#7912) Fixed slapd-mdb entry release handling (ITS#7915) Fixed slapd-mdb with aliases and referrals (ITS#7927) Fixed slapd-mdb alias dereferencing (ITS#7702) Fixed slapd-sock socket flushing (ITS#7937) Fixed slapo-accesslog attribute normalization (ITS#7934) Fixed slapo-accesslog internal search logging (ITS#7929) Fixed slapo-auditlog connection destroy logic (ITS#7906,ITS#7923) Fixed slapo-chain interaction with slapo-rwm (ITS#7930) Fixed slapo-constraint connection destroy logic (ITS#7906,ITS#7923) Fixed slapo-dds connection destroy logic (ITS#7906,ITS#7923) Fixed slapo-dyngroup connection destroy logic (ITS#7906,ITS#7923) Fixed slapo-memberof attr count (ITS#7893) Fixed slapo-memberof frontendDB handling (ITS#7249) Fixed slapo-memberof internal search logging (ITS#7929) Fixed slapo-pcache config processing (ITS#7919) Fixed slapo-pcache connection destroy logic (ITS#7906,ITS#7923) Added slapo-ppolicy ORDERING rules (ITS#7838) Fixed slapo-ppolicy timestamp resolution to use microseconds (ITS#7161) Fixed slapo-ppolicy connection destroy logic (ITS#7906,ITS#7923) Fixed slapo-refint to check for pauses in cn=config (ITS#7873) Fixed slapo-refint internal search logging (ITS#7929) Fixed slapo-refint connection destroy logic (ITS#7906,ITS#7923) Fixed slapo-seqmod connection destroy logic (ITS#7906,ITS#7923) Fixed slapo-slapover connection destroy logic (ITS#7906,ITS#7923) Fixed slapo-sock db_init (ITS#7868) Fixed slapo-sssvlv fix olcSssVlvMaxPerConn (ITS#7908) Fixed slapo-translucent double free (ITS#7587) Fixed slapo-translucent to work with manageDSAit (ITS#7864) Fixed slapo-translucent to use local backend with local entries (ITS#7915) Fixed slapo-unique connection destroy logic (ITS#7906,ITS#7923) Fixed slapcacl with invalid suffix (ITS#7827) Build Environment Remove support for gcrypt (ITS#7877) BDB 6.0.20 and later is not supported (ITS#7890) Fixed ODBC link check (ITS#7891) Fixed slapd.ldif frontend config (ITS#7933) Contrib Added pbkdf2 module (ITS#7742) Fixed autogroup double free (ITS#7831) Fixed autogroup modification callback responses (ITS#6970) Fixed ldapc++ memory leak in Async connection (ITS#7806) Fixed nssov install path (ITS#7858) Fixed passwd rpath (ITS#7885) Fixed apr1 do_phk_hash argument order (ITS#7869) Fixed slapd-sha2 buffer overrun (ITS#7851) Documentation Fixed slapd.ldif man page reference (ITS#7803) Fixed slapd.conf(5) man page to reference exattrs (ITS#7847) Fixed guide to work with mkrelease (ITS#7887) Fixed ldap_get_dn(3) ldap_ava definition (ITS#7860) @ text @d2 1 a2 1 # Copyright 2005-2016 The OpenLDAP Foundation, All Rights Reserved. d670 4 a673 2 without TLS. The tls_reqcert setting defaults to {{EX:"demand"}} and the other TLS settings default to the same as the main slapd TLS settings. @ 1.1.1.6 log @OpenLDAP 2.4.45 Release (2017/06/01) Added slapd support for OpenSSL 1.1.0 series (ITS#8353, ITS#8533, ITS#8634) Fixed libldap to fail ldap_result if the handle is already bad (ITS#8585) Fixed libldap to expose error if user specified CA doesn't exist (ITS#8529) Fixed libldap handling of Diffie-Hellman parameters (ITS#7506) Fixed libldap GnuTLS use after free (ITS#8385) Fixed libldap SASL initialization (ITS#8648) Fixed slapd bconfig rDN escape handling (ITS#8574) Fixed slapd segfault with invalid hostname (ITS#8631) Fixed slapd sasl SEGV rebind in same session (ITS#8568) Fixed slapd syncrepl filter handling (ITS#8413) Fixed slapd syncrepl infinite looping mods with delta-sync MMR (ITS#8432) Fixed slapd callback struct so older modules without writewait should function. Custom modules may need to be updated for sc_writewait callback (ITS#8435) Fixed slapd-ldap/meta broken LDAP_TAILQ macro (ITS#8576) Fixed slapd-mdb so it passes ITS6794 regression test (ITS#6794) Fixed slapd-mdb double free with size zero paged result (ITS#8655) Fixed slapd-meta uninitialized diagnostic message (ITS#8442) Fixed slapo-accesslog to honor pauses during purge for cn=config update (ITS#8423) Fixed slapo-accesslog with multiple modifications to the same attribute (ITS#6545) Fixed slapo-relay to correctly initialize sc_writewait (ITS#8428) Fixed slapo-sssvlv double free (ITS#8592) Fixed slapo-unique with empty modifications (ITS#8266) Build Environment Added test065 for proxyauthz (ITS#8571) Fix test008 to be portable (ITS#8414) Fix test064 to wait for slapd to start (ITS#8644) Fix its4336 regression test (ITS#8534) Fix its4337 regression test (ITS#8535) Fix regression tests to execute on all backends (ITS#8539) Contrib Added slapo-autogroup(5) man page (ITS#8569) Added passwd missing conversion scripts for apr1 (ITS#6826) Fixed contrib modules where the writewait callback was not correctly initialized (ITS#8435) Fixed smbk5pwd to build with newer OpenSSL releases (ITS#8525) Documentation admin24 fixed tls_cipher_suite bindconf option (ITS#8099) admin24 fixed typo cn=config to be slapd.d (ITS#8449) admin24 fixed slapo-syncprov information to be curent (ITS#8253) admin24 fixed typo in access control docs (ITS#7341, ITS#8391) admin24 fixed minor typo in tuning guide (ITS#8499) admin24 fixed information about the limits option (ITS#7700) admin24 fixed missing options for syncrepl configuration (ITS#7700) admin24 fixed accesslog documentation to note it should not be replicated (ITS#8344) Fixed ldap.conf(5) missing information on SASL_NOCANON option (ITS#7177) Fixed ldapsearch(1) information on the V[V] flag behavior (ITS#7177, ITS#6339) Fixed slapd-config(5), slapd.conf(5) clarification on interval keyword for refreshAndPersist (ITS#8538) Fixed slapd-config(5), slapd.conf(5) clarify serverID requirements (ITS#8635) Fixed slapd-config(5), slapd.conf(5) clarification on loglevel settings (ITS#8123) Fixed slapo-ppolicy(5) to clearly note rootdn requirement (ITS#8565) Fixed slapo-memberof(5) to note it is not safe to use with replication (ITS#8613) Fixed slapo-syncprov(5) documentation to be current (ITS#8253) Fixed slapadd(8) manpage to note slapd-mdb (ITS#8215) Fixed various minor grammar issues in the man pages (ITS#8544) Fixed various typos (ITS#8587) @ text @d2 1 a2 1 # Copyright 2005-2017 The OpenLDAP Foundation, All Rights Reserved. d367 1 a367 1 bdb Berkeley DB transactional backend (deprecated) d370 1 a370 1 hdb Hierarchical variant of bdb backend (deprecated) a372 1 mdb Memory-Mapped DB backend d452 1 a452 2 perform" error. If set on a consumer, modifications sent by syncrepl will still occur. d563 1 a563 1 > [tls_cipher_suite=] d684 2 a685 2 The {{syncrepl}} replication mechanism is supported by the {{bdb}}, {{hdb}}, and {{mdb}} backends. @ 1.1.1.6.4.1 log @Mostly merge changes from HEAD upto 20200411 @ text @d2 1 a2 1 # Copyright 2005-2019 The OpenLDAP Foundation, All Rights Reserved. d471 1 a471 1 > olcRootDN: cn=Manager,dc=example,dc=com d475 1 a475 1 > olcRootDN: uid=root,cn=example.com,cn=digest-md5,cn=auth d525 1 a525 1 > olcSuffix: dc=example,dc=com d976 1 a976 1 >olcSuffix: dc=example,dc=com d1129 1 a1129 1 E: 56. olcSuffix: dc=example,dc=net d1131 1 a1131 1 E: 58. olcRootDN: cn=Manager,dc=example,dc=com @ 1.1.1.6.6.1 log @Pull up following revision(s) (requested by christos in ticket #41): external/bsd/openldap/dist/include/openldap.h up to 1.1.1.1 external/bsd/openldap/dist/servers/slapd/back-sock/extended.c up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8444/its8444 up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8444/slapd-provider1.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8444/slapd-provider2.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8444/slapd-provider3.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8444/slapd-provider4.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8616/its8616 up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8616/slapd-provider.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8663/its8663 up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8663/slapd-provider.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8667/accounting.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8667/administrative.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8667/its8667 up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8667/janitorial.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8667/root.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8667/slapd.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8752/its8752 up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8752/slapd.conf up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8752/slapd.conf.mmr up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8800/db.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8800/its8800 up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8800/slapd-provider1.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8800/slapd-provider2.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8800/slapd-provider3.ldif up to 1.1.1.1 external/bsd/openldap/dist/tests/data/regressions/its8800/slapd-provider4.ldif up to 1.1.1.1 external/bsd/openldap/dist/doc/man/man5/slapd-ldbm.5 delete external/bsd/openldap/dist/tests/scripts/test058-syncrepl-asymmetric delete external/bsd/openldap/dist/ANNOUNCEMENT up to 1.1.1.7 external/bsd/openldap/dist/CHANGES up to 1.1.1.8 external/bsd/openldap/dist/COPYRIGHT up to 1.1.1.8 external/bsd/openldap/dist/INSTALL up to 1.1.1.7 external/bsd/openldap/dist/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/README up to 1.1.1.7 external/bsd/openldap/dist/configure up to 1.1.1.7 external/bsd/openldap/dist/configure.in up to 1.1.1.7 external/bsd/openldap/dist/build/dir.mk up to 1.1.1.7 external/bsd/openldap/dist/build/info.mk up to 1.1.1.7 external/bsd/openldap/dist/build/lib-shared.mk up to 1.1.1.7 external/bsd/openldap/dist/build/lib-static.mk up to 1.1.1.7 external/bsd/openldap/dist/build/lib.mk up to 1.1.1.7 external/bsd/openldap/dist/build/ltmain.sh up to 1.1.1.7 external/bsd/openldap/dist/build/man.mk up to 1.1.1.7 external/bsd/openldap/dist/build/missing up to 1.1.1.7 external/bsd/openldap/dist/build/mkdep up to 1.1.1.7 external/bsd/openldap/dist/build/mkdep.aix up to 1.1.1.7 external/bsd/openldap/dist/build/mkrelease up to 1.1.1.7 external/bsd/openldap/dist/build/mkvers.bat up to 1.1.1.7 external/bsd/openldap/dist/build/mkversion up to 1.8 external/bsd/openldap/dist/build/mod.mk up to 1.1.1.7 external/bsd/openldap/dist/build/openldap.m4 up to 1.1.1.7 external/bsd/openldap/dist/build/rules.mk up to 1.1.1.7 external/bsd/openldap/dist/build/srv.mk up to 1.1.1.7 external/bsd/openldap/dist/build/top.mk up to 1.1.1.7 external/bsd/openldap/dist/build/version.h up to 1.1.1.7 external/bsd/openldap/dist/build/version.sh up to 1.1.1.7 external/bsd/openldap/dist/build/version.var up to 1.1.1.8 external/bsd/openldap/dist/clients/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/common.c up to 1.8 external/bsd/openldap/dist/clients/tools/common.h up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/ldapcompare.c up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/ldapdelete.c up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/ldapexop.c up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/ldapmodify.c up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/ldapmodrdn.c up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/ldappasswd.c up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/ldapsearch.c up to 1.1.1.7 external/bsd/openldap/dist/clients/tools/ldapurl.c up to 1.1.1.6 external/bsd/openldap/dist/clients/tools/ldapwhoami.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/COPYRIGHT up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/Makefile.am up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/configure up to 1.1.1.8 external/bsd/openldap/dist/contrib/ldapc++/configure.in up to 1.1.1.8 external/bsd/openldap/dist/contrib/ldapc++/version.sh up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/version.var up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/examples/Makefile.am up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/examples/Makefile.in up to 1.1.1.8 external/bsd/openldap/dist/contrib/ldapc++/examples/main.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/examples/readSchema.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/examples/startTls.cpp up to 1.1.1.5 external/bsd/openldap/dist/contrib/ldapc++/examples/urlTest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAddRequest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAddRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAsynConnection.cpp up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAsynConnection.h up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAttrType.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAttrType.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAttribute.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAttribute.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAttributeList.cpp up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPAttributeList.h up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPBindRequest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPBindRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPCompareRequest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPCompareRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPConnection.cpp up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPConnection.h up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPConstraints.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPConstraints.h up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPControl.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPControl.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPControlSet.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPControlSet.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPDeleteRequest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPDeleteRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPEntry.cpp up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPEntry.h up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPEntryList.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPEntryList.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPException.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPException.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPExtRequest.cpp up to 1.1.1.5 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPExtRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPExtResult.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPExtResult.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPMessage.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPMessage.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPMessageQueue.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPMessageQueue.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPModDNRequest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPModDNRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPModList.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPModList.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPModification.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPModification.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPModifyRequest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPModifyRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPObjClass.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPObjClass.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPRebind.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPRebind.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPRebindAuth.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPRebindAuth.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPReferenceList.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPReferenceList.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPRequest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPResult.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPResult.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSaslBindResult.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSaslBindResult.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSchema.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSchema.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSearchReference.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSearchReference.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSearchRequest.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSearchRequest.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSearchResult.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSearchResult.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSearchResults.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPSearchResults.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPUrl.cpp up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPUrl.h up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPUrlList.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LDAPUrlList.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LdifReader.cpp up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldapc++/src/LdifReader.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LdifWriter.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/LdifWriter.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/Makefile.am up to 1.1.1.8 external/bsd/openldap/dist/contrib/ldapc++/src/Makefile.in up to 1.1.1.8 external/bsd/openldap/dist/contrib/ldapc++/src/SaslInteraction.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/SaslInteraction.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/SaslInteractionHandler.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/SaslInteractionHandler.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/StringList.cpp up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/StringList.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/TlsOptions.cpp up to 1.1.1.5 external/bsd/openldap/dist/contrib/ldapc++/src/TlsOptions.h up to 1.1.1.5 external/bsd/openldap/dist/contrib/ldapc++/src/debug.h up to 1.1.1.6 external/bsd/openldap/dist/contrib/ldapc++/src/ac/time.h up to 1.1.1.7 external/bsd/openldap/dist/contrib/ldaptcl/COPYRIGHT up to 1.1.1.5 external/bsd/openldap/dist/contrib/slapd-modules/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/acl/README.posixgroup up to 1.1.1.5 external/bsd/openldap/dist/contrib/slapd-modules/acl/posixgroup.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/addpartial/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/addpartial/addpartial-overlay.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/allop/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/allop/allop.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/allop/slapo-allop.5 up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/allowed/Makefile up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/allowed/README up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/allowed/allowed.c up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/autogroup/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/autogroup/autogroup.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/autogroup/slapo-autogroup.5 up to 1.1.1.2 external/bsd/openldap/dist/contrib/slapd-modules/cloak/cloak.c up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/cloak/slapo-cloak.5 up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/comp_match/Makefile up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/denyop/denyop.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/dsaschema/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/dsaschema/dsaschema.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/dupent/Makefile up to 1.1.1.4 external/bsd/openldap/dist/contrib/slapd-modules/dupent/dupent.c up to 1.1.1.4 external/bsd/openldap/dist/contrib/slapd-modules/kinit/README up to 1.1.1.4 external/bsd/openldap/dist/contrib/slapd-modules/kinit/kinit.c up to 1.1.1.4 external/bsd/openldap/dist/contrib/slapd-modules/lastbind/lastbind.c up to 1.1.1.4 external/bsd/openldap/dist/contrib/slapd-modules/lastbind/slapo-lastbind.5 up to 1.1.1.2 external/bsd/openldap/dist/contrib/slapd-modules/lastmod/lastmod.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/lastmod/slapo-lastmod.5 up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/noopsrch/Makefile up to 1.1.1.4 external/bsd/openldap/dist/contrib/slapd-modules/noopsrch/noopsrch.c up to 1.1.1.4 external/bsd/openldap/dist/contrib/slapd-modules/nops/nops.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/Makefile up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/alias.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/ether.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/group.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/host.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/netgroup.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/network.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/nssov.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/nssov.h up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/pam.c up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/nssov/passwd.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/protocol.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/rpc.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/service.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/shadow.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/nssov/slapo-nssov.5 up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/passwd/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/passwd/kerberos.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/passwd/netscape.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/passwd/radius.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/passwd/pbkdf2/README up to 1.1.1.3 external/bsd/openldap/dist/contrib/slapd-modules/passwd/pbkdf2/pw-pbkdf2.c up to 1.1.1.3 external/bsd/openldap/dist/contrib/slapd-modules/passwd/sha2/README up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/passwd/sha2/slapd-sha2.c up to 1.1.1.6 external/bsd/openldap/dist/contrib/slapd-modules/proxyOld/Makefile up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/proxyOld/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/proxyOld/proxyOld.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/samba4/Makefile up to 1.1.1.5 external/bsd/openldap/dist/contrib/slapd-modules/samba4/README up to 1.1.1.5 external/bsd/openldap/dist/contrib/slapd-modules/samba4/pguid.c up to 1.1.1.5 external/bsd/openldap/dist/contrib/slapd-modules/samba4/rdnval.c up to 1.1.1.5 external/bsd/openldap/dist/contrib/slapd-modules/samba4/vernum.c up to 1.1.1.5 external/bsd/openldap/dist/contrib/slapd-modules/smbk5pwd/Makefile up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/smbk5pwd/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-modules/smbk5pwd/smbk5pwd.c up to 1.1.1.8 external/bsd/openldap/dist/contrib/slapd-modules/trace/trace.c up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-tools/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapd-tools/statslog up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapi-plugins/addrdnvalues/README up to 1.1.1.7 external/bsd/openldap/dist/contrib/slapi-plugins/addrdnvalues/addrdnvalues.c up to 1.1.1.7 external/bsd/openldap/dist/doc/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/plain.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/preamble.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/Makefile up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/README.spellcheck up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/abstract.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/access-control.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/admin.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/appendix-changes.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/appendix-common-errors.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/appendix-configs.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/appendix-contrib.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/appendix-deployments.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/appendix-ldap-result-codes.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/appendix-recommended-versions.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/appendix-upgrading.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/backends.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/config.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/dbtools.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/glossary.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/guide.html up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/guide.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/index.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/install.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/intro.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/limits.sdf up to 1.1.1.6 external/bsd/openldap/dist/doc/guide/admin/maintenance.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/master.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/monitoringslapd.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/overlays.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/preface.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/quickstart.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/referrals.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/replication.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/runningslapd.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/sasl.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/schema.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/security.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/slapdconf2.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/slapdconfig.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/title.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/tls.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/admin/troubleshooting.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/admin/tuning.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/images/src/README.fonts up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/release/copyright-plain.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/release/copyright.sdf up to 1.1.1.8 external/bsd/openldap/dist/doc/guide/release/install.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/release/license-plain.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/guide/release/license.sdf up to 1.1.1.7 external/bsd/openldap/dist/doc/man/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man1/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man1/ldapcompare.1 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man1/ldapdelete.1 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man1/ldapmodify.1 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man1/ldapmodrdn.1 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man1/ldappasswd.1 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man1/ldapsearch.1 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man1/ldapurl.1 up to 1.1.1.6 external/bsd/openldap/dist/doc/man/man1/ldapwhoami.1 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/lber-decode.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/lber-encode.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/lber-memory.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/lber-sockbuf.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/lber-types.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_abandon.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_add.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_bind.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_compare.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_controls.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_delete.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_dup.3 up to 1.1.1.4 external/bsd/openldap/dist/doc/man/man3/ldap_error.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_extended_operation.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_first_attribute.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_first_entry.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_first_message.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_first_reference.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_get_dn.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_get_option.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_get_values.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_memory.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_modify.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_modrdn.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_open.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_parse_reference.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_parse_result.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_parse_sort_control.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_parse_vlv_control.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_rename.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_result.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_schema.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_search.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_sort.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_sync.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_tls.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man3/ldap_url.3 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/ldap.conf.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/ldif.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-bdb.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-config.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapd-dnssrv.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-ldap.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapd-ldif.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-mdb.5 up to 1.1.1.4 external/bsd/openldap/dist/doc/man/man5/slapd-meta.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapd-monitor.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-ndb.5 up to 1.1.1.6 external/bsd/openldap/dist/doc/man/man5/slapd-null.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-passwd.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-relay.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-shell.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd-sock.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd.access.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapd.backends.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd.conf.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapd.overlays.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapd.plugin.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-accesslog.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-auditlog.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-chain.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-collect.5 up to 1.1.1.6 external/bsd/openldap/dist/doc/man/man5/slapo-constraint.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapo-dds.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-dyngroup.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-dynlist.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-memberof.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-pbind.5 up to 1.1.1.5 external/bsd/openldap/dist/doc/man/man5/slapo-pcache.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapo-ppolicy.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-refint.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapo-retcode.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapo-rwm.5 up to 1.1.1.8 external/bsd/openldap/dist/doc/man/man5/slapo-sssvlv.5 up to 1.1.1.6 external/bsd/openldap/dist/doc/man/man5/slapo-syncprov.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-translucent.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-unique.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man5/slapo-valsort.5 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slapacl.8 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slapadd.8 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slapauth.8 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slapcat.8 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slapd.8 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slapdn.8 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slapindex.8 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slappasswd.8 up to 1.1.1.7 external/bsd/openldap/dist/doc/man/man8/slapschema.8 up to 1.1.1.6 external/bsd/openldap/dist/doc/man/man8/slaptest.8 up to 1.1.1.7 external/bsd/openldap/dist/include/Makefile.in up to 1.8 external/bsd/openldap/dist/include/avl.h up to 1.1.1.7 external/bsd/openldap/dist/include/getopt-compat.h up to 1.1.1.7 external/bsd/openldap/dist/include/lber.h up to 1.1.1.7 external/bsd/openldap/dist/include/lber_pvt.h up to 1.1.1.7 external/bsd/openldap/dist/include/lber_types.hin up to 1.1.1.7 external/bsd/openldap/dist/include/ldap.h up to 1.1.1.8 external/bsd/openldap/dist/include/ldap_cdefs.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_config.hin up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_defaults.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_features.hin up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_int_thread.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_log.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_pvt.h up to 1.2 external/bsd/openldap/dist/include/ldap_pvt_thread.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_pvt_uc.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_queue.h up to 1.6 external/bsd/openldap/dist/include/ldap_rq.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_schema.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldap_utf8.h up to 1.1.1.7 external/bsd/openldap/dist/include/ldif.h up to 1.1.1.7 external/bsd/openldap/dist/include/lutil.h up to 1.1.1.7 external/bsd/openldap/dist/include/lutil_hash.h up to 1.1.1.7 external/bsd/openldap/dist/include/lutil_ldap.h up to 1.1.1.7 external/bsd/openldap/dist/include/lutil_lockf.h up to 1.1.1.7 external/bsd/openldap/dist/include/lutil_md5.h up to 1.1.1.7 external/bsd/openldap/dist/include/lutil_sha1.h up to 1.1.1.7 external/bsd/openldap/dist/include/portable.hin up to 1.8 external/bsd/openldap/dist/include/rewrite.h up to 1.1.1.7 external/bsd/openldap/dist/include/slapi-plugin.h up to 1.1.1.7 external/bsd/openldap/dist/include/sysexits-compat.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/alloca.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/assert.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/bytes.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/crypt.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/ctype.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/dirent.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/errno.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/fdset.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/localize.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/param.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/regex.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/setproctitle.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/signal.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/socket.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/stdarg.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/stdlib.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/string.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/sysexits.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/syslog.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/termios.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/time.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/unistd.h up to 1.1.1.7 external/bsd/openldap/dist/include/ac/wait.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/assert.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/bprint.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/debug.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/decode.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/dtest.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/encode.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/etest.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/idtest.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/io.c up to 1.1.1.8 external/bsd/openldap/dist/libraries/liblber/lber-int.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/memory.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/nt_err.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/options.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/sockbuf.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblber/stdio.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/Makefile.in up to 1.1.1.8 external/bsd/openldap/dist/libraries/libldap/abandon.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/add.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/addentry.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/apitest.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/assertion.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/bind.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/cancel.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/charray.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/compare.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/controls.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/cyrus.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/dds.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/delete.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/deref.c up to 1.1.1.6 external/bsd/openldap/dist/libraries/libldap/dnssrv.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/dntest.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/error.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/extended.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/fetch.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/libldap/filter.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/free.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/ftest.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/getattr.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/getdn.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/getentry.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/getvalues.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/gssapi.c up to 1.1.1.6 external/bsd/openldap/dist/libraries/libldap/init.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/ldap-int.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/ldap-tls.h up to 1.1.1.6 external/bsd/openldap/dist/libraries/libldap/ldap_sync.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/ldif.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/libldap/messages.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/modify.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/open.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/options.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/os-ip.c up to 1.9 external/bsd/openldap/dist/libraries/libldap/os-local.c up to 1.10 external/bsd/openldap/dist/libraries/libldap/pagectrl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/passwd.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/ppolicy.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/print.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/references.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/request.c up to 1.1.1.8 external/bsd/openldap/dist/libraries/libldap/result.c up to 1.1.1.8 external/bsd/openldap/dist/libraries/libldap/sasl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/sbind.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/schema.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/search.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/sort.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/sortctrl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/stctrl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/string.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/t61.c up to 1.1.1.8 external/bsd/openldap/dist/libraries/libldap/test.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/tls2.c up to 1.1.1.6 external/bsd/openldap/dist/libraries/libldap/tls_g.c up to 1.1.1.6 external/bsd/openldap/dist/libraries/libldap/tls_m.c up to 1.1.1.6 external/bsd/openldap/dist/libraries/libldap/tls_o.c up to 1.7 external/bsd/openldap/dist/libraries/libldap/turn.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/txn.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/unbind.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/url.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/urltest.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/utf-8-conv.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/utf-8.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/util-int.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/vlvctrl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap/whoami.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/Makefile.in up to 1.1.1.8 external/bsd/openldap/dist/libraries/libldap_r/ldap_thr_debug.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/rdwr.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/rmutex.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/rq.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/thr_cthreads.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/thr_debug.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/thr_nt.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/thr_posix.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/thr_pth.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/thr_stub.c up to 1.1.1.8 external/bsd/openldap/dist/libraries/libldap_r/thr_thr.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/threads.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/libldap_r/tpool.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblmdb/CHANGES up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/COPYRIGHT up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/intro.doc up to 1.1.1.3 external/bsd/openldap/dist/libraries/liblmdb/lmdb.h up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mdb.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mdb_copy.1 up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mdb_copy.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mdb_dump.1 up to 1.1.1.3 external/bsd/openldap/dist/libraries/liblmdb/mdb_dump.c up to 1.1.1.3 external/bsd/openldap/dist/libraries/liblmdb/mdb_load.1 up to 1.1.1.3 external/bsd/openldap/dist/libraries/liblmdb/mdb_load.c up to 1.1.1.3 external/bsd/openldap/dist/libraries/liblmdb/mdb_stat.1 up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mdb_stat.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/midl.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/midl.h up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mtest.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mtest2.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mtest3.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mtest4.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mtest5.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/mtest6.c up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblmdb/sample-bdb.txt up to 1.1.1.3 external/bsd/openldap/dist/libraries/liblmdb/sample-mdb.txt up to 1.1.1.3 external/bsd/openldap/dist/libraries/liblunicode/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ucstr.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ucdata/ucdata.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ucdata/ucdata.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ucdata/ucgendat.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ucdata/ucpgba.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ucdata/ucpgba.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ucdata/uctable.h up to 1.1.1.4 external/bsd/openldap/dist/libraries/liblunicode/ure/ure.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ure/ure.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/ure/urestubs.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/utbm/utbm.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/utbm/utbm.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblunicode/utbm/utbmstub.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/avl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/base64.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/detach.c up to 1.6 external/bsd/openldap/dist/libraries/liblutil/entropy.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/getopt.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/getpass.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/getpeereid.c up to 1.1.1.8 external/bsd/openldap/dist/libraries/liblutil/hash.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/lockf.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/md5.c up to 1.6 external/bsd/openldap/dist/libraries/liblutil/memcmp.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/ntservice.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/passfile.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/passwd.c up to 1.7 external/bsd/openldap/dist/libraries/liblutil/ptest.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/sasl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/setproctitle.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/sha1.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/signal.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/sockpair.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/tavl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/testavl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/testtavl.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/utils.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/liblutil/uuid.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/config.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/context.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/info.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/ldapmap.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/map.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/params.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/parse.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/rewrite-int.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/rewrite-map.h up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/rewrite.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/rule.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/session.c up to 1.5 external/bsd/openldap/dist/libraries/librewrite/subst.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/var.c up to 1.1.1.7 external/bsd/openldap/dist/libraries/librewrite/xmap.c up to 1.1.1.7 external/bsd/openldap/dist/servers/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/abandon.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/aci.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/acl.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/aclparse.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/ad.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/add.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/alock.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/alock.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/at.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/attr.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/ava.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/backend.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/backglue.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/backover.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/bconfig.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/cancel.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/ch_malloc.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/component.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/component.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/config.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/config.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/connection.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/controls.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/cr.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/ctxcsn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/daemon.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/delete.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/dn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/entry.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/extended.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/filter.c up to 1.6 external/bsd/openldap/dist/servers/slapd/filterentry.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/frontend.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/globals.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/index.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/ldapsync.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/limits.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/lock.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/main.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/matchedValues.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/mods.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/module.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/mr.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/mra.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/nt_svc.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/oc.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/oidm.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/operation.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/operational.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/passwd.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/phonetic.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/proto-slap.h up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/referral.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/result.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/root_dse.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/sasl.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/saslauthz.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema_check.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema_init.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/schema_prep.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/schemaparse.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/sets.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/sets.h up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/sl_malloc.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slap.h up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/slapacl.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapadd.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapauth.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapcat.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapcommon.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapcommon.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapindex.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slappasswd.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapschema.c up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/slaptest.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/starttls.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/str2filter.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/syncrepl.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/syntax.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/txn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/unbind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/user.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/value.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/zn_malloc.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/add.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/attr.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-bdb/back-bdb.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/cache.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/config.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/dbcache.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/delete.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/dn2entry.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/dn2id.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-bdb/error.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/extended.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/filterindex.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/id2entry.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/idl.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/idl.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/index.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/key.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/monitor.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-bdb/nextid.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/operational.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/proto-bdb.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/referral.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/tools.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-bdb/trans.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-dnssrv/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-dnssrv/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-dnssrv/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-dnssrv/config.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-dnssrv/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-dnssrv/proto-dnssrv.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-dnssrv/referral.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-dnssrv/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-hdb/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-hdb/back-bdb.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/add.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/back-ldap.h up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-ldap/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/chain.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/config.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-ldap/delete.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/distproc.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/extended.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/init.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-ldap/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/monitor.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldap/pbind.c up to 1.1.1.5 external/bsd/openldap/dist/servers/slapd/back-ldap/proto-ldap.h up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-ldap/search.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-ldap/unbind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldif/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ldif/ldif.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-mdb/Makefile.in up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/add.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/attr.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/back-mdb.h up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/bind.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/compare.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/config.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/delete.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/dn2entry.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/dn2id.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/extended.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/filterindex.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/id2entry.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/idl.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/idl.h up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/index.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/init.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/key.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/modify.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/modrdn.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/monitor.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/nextid.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/operational.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/proto-mdb.h up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/referral.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/search.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-mdb/tools.c up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/back-meta/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/add.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/back-meta.h up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-meta/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/candidates.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/config.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-meta/conn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/delete.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/dncache.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/init.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-meta/map.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/proto-meta.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/search.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-meta/suffixmassage.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-meta/unbind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/back-monitor.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/backend.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/cache.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/conn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/database.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-monitor/entry.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/listener.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/log.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/operation.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/operational.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/overlay.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/proto-back-monitor.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/rww.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/sent.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/thread.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-monitor/time.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-ndb/Makefile.in up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/add.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/back-ndb.h up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/bind.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/compare.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/config.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/delete.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/init.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/modify.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/modrdn.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/ndbio.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/proto-ndb.h up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/search.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-ndb/tools.cpp up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/back-null/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-null/null.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-passwd/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-passwd/back-passwd.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-passwd/config.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-passwd/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-passwd/proto-passwd.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-passwd/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/SampleLDAP.pm up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/add.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/asperl_undefs.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/close.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/config.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/delete.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/perl_back.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/proto-perl.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-perl/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-relay/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-relay/back-relay.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-relay/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-relay/op.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-relay/proto-back-relay.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/add.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/config.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/delete.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/fork.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/proto-shell.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/result.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-shell/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/searchexample.conf up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/searchexample.sh up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/shell.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-shell/unbind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/add.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/back-sock.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/config.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/delete.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/opensock.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/proto-sock.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/result.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/back-sock/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/searchexample.conf up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/searchexample.pl up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sock/unbind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/add.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/api.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/back-sql.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/bind.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/compare.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/config.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/delete.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/entry-id.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/init.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/modify.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/operational.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/proto-sql.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/schema-map.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/search.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/sql-wrap.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/util.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/rdbms_depend/timesten/dnreverse/Makefile up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/back-sql/rdbms_depend/timesten/dnreverse/dnreverse.cpp up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/accesslog.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/auditlog.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/collect.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/dds.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/deref.c up to 1.5 external/bsd/openldap/dist/servers/slapd/overlays/dyngroup.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/dynlist.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/overlays/memberof.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/overlays/overlays.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/pcache.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/overlays/ppolicy.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/overlays/refint.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/overlays/retcode.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/rwm.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/rwm.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/rwmconf.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/rwmdn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/rwmmap.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/seqmod.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/sssvlv.c up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/overlays/syncprov.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/overlays/translucent.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/overlays/unique.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/overlays/valsort.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/README up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/collective.ldif up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/schema/collective.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/corba.ldif up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/schema/corba.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/core.ldif up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/core.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/cosine.ldif up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/cosine.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/duaconf.ldif up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/schema/duaconf.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/dyngroup.ldif up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/schema/dyngroup.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/inetorgperson.ldif up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/inetorgperson.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/java.ldif up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/schema/java.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/misc.ldif up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/schema/misc.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/nis.ldif up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/nis.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/openldap.ldif up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/openldap.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/schema/pmi.ldif up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/schema/pmi.schema up to 1.1.1.6 external/bsd/openldap/dist/servers/slapd/schema/ppolicy.ldif up to 1.1.1.4 external/bsd/openldap/dist/servers/slapd/schema/ppolicy.schema up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/shell-backends/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/shell-backends/passwd-shell.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/shell-backends/shellutil.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/shell-backends/shellutil.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapi/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapi/plugin.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/slapi/printmsg.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapi/proto-slapi.h up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/slapi/slapi.h up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapi/slapi_dn.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapi/slapi_ext.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapi/slapi_ops.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapi/slapi_overlay.c up to 1.1.1.8 external/bsd/openldap/dist/servers/slapd/slapi/slapi_pblock.c up to 1.1.1.7 external/bsd/openldap/dist/servers/slapd/slapi/slapi_utils.c up to 1.1.1.7 external/bsd/openldap/dist/tests/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/tests/run.in up to 1.1.1.7 external/bsd/openldap/dist/tests/data/ditcontentrules.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/dynlist.out up to 1.1.1.3 external/bsd/openldap/dist/tests/data/idassert.out up to 1.1.1.2 external/bsd/openldap/dist/tests/data/memberof.out up to 1.1.1.4 external/bsd/openldap/dist/tests/data/ndb.conf up to 1.1.1.6 external/bsd/openldap/dist/tests/data/retcode.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-2db.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-aci.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-acl.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-cache-master-proxyauthz.conf up to 1.1.1.2 external/bsd/openldap/dist/tests/data/slapd-cache-master.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-chain1.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-chain2.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-component.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-dds.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-deltasync-master.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-deltasync-slave.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-dn.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-dnssrv.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-dynlist.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-emptydn.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-glue-ldap.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-glue-syncrepl1.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-glue-syncrepl2.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-glue.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-idassert.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-ldapglue.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-ldapgluegroups.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-ldapgluepeople.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-limits.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-master.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-meta-target1.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-meta-target2.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-meta.conf up to 1.1.1.8 external/bsd/openldap/dist/tests/data/slapd-nis-master.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-passwd.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-ppolicy.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-proxyauthz.conf up to 1.1.1.2 external/bsd/openldap/dist/tests/data/slapd-proxycache.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-pw.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-ref-slave.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-referrals.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-refint.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-relay.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-repl-slave-remote.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-retcode.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-schema.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-sql-syncrepl-master.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-sql.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-syncrepl-master.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-syncrepl-multiproxy.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-syncrepl-slave-persist-ldap.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-syncrepl-slave-persist1.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-syncrepl-slave-persist3.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-syncrepl-slave-refresh1.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-syncrepl-slave-refresh2.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-translucent-local.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-translucent-remote.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-unique.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-valregex.conf up to 1.1.1.6 external/bsd/openldap/dist/tests/data/slapd-valsort.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd-whoami.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/slapd2.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/test-idassert1.ldif up to 1.1.1.2 external/bsd/openldap/dist/tests/data/test.schema up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4184/its4184 up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4326/its4326 up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4326/slapd.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4336/its4336 up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4336/slapd.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4337/its4337 up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4337/slapd.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4448/its4448 up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its4448/slapd-meta.conf up to 1.1.1.7 external/bsd/openldap/dist/tests/data/regressions/its6794/its6794 up to 1.1.1.4 external/bsd/openldap/dist/tests/data/regressions/its6794/slapd-glue.conf up to 1.1.1.4 external/bsd/openldap/dist/tests/data/regressions/its8521/its8521 up to 1.1.1.2 external/bsd/openldap/dist/tests/progs/Makefile.in up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/ldif-filter.c up to 1.1.1.5 external/bsd/openldap/dist/tests/progs/slapd-addel.c up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/slapd-bind.c up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/slapd-common.c up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/slapd-common.h up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/slapd-modify.c up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/slapd-modrdn.c up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/slapd-mtread.c up to 1.1.1.4 external/bsd/openldap/dist/tests/progs/slapd-read.c up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/slapd-search.c up to 1.1.1.7 external/bsd/openldap/dist/tests/progs/slapd-tester.c up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/all up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/conf.sh up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/defines.sh up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/its-all up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/monitor_data.sh up to 1.1.1.6 external/bsd/openldap/dist/tests/scripts/passwd-search up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/relay up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/sql-all up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/sql-test000-read up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/sql-test001-concurrency up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/sql-test900-write up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/sql-test901-syncrepl up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/start-server up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/start-server-nolog up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/start-server2 up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/start-server2-nolog up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/startup_nis_ldap_server.sh up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test000-rootdse up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test001-slapadd up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test002-populate up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test003-search up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test004-modify up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test005-modrdn up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test006-acls up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test008-concurrency up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test009-referral up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test010-passwd up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test011-glue-slapadd up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test012-glue-populate up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test013-language up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test014-whoami up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test015-xsearch up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test016-subref up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test017-syncreplication-refresh up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test018-syncreplication-persist up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test019-syncreplication-cascade up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test020-proxycache up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test021-certificate up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test022-ppolicy up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test023-refint up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test024-unique up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test025-limits up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test026-dn up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test027-emptydn up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test028-idassert up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test029-ldapglue up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test030-relay up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test031-component-filter up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test032-chain up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test033-glue-syncrepl up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test034-translucent up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test035-meta up to 1.1.1.8 external/bsd/openldap/dist/tests/scripts/test036-meta-concurrency up to 1.1.1.8 external/bsd/openldap/dist/tests/scripts/test037-manage up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test038-retcode up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test039-glue-ldap-concurrency up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test040-subtree-rename up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test041-aci up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test042-valsort up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test043-delta-syncrepl up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test044-dynlist up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test045-syncreplication-proxied up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test046-dds up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test047-ldap up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test048-syncrepl-multiproxy up to 1.1.1.8 external/bsd/openldap/dist/tests/scripts/test049-sync-config up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test050-syncrepl-multimaster up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test051-config-undo up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test052-memberof up to 1.1.1.7 external/bsd/openldap/dist/tests/scripts/test054-syncreplication-parallel-load up to 1.1.1.6 external/bsd/openldap/dist/tests/scripts/test055-valregex up to 1.1.1.6 external/bsd/openldap/dist/tests/scripts/test056-monitor up to 1.1.1.6 external/bsd/openldap/dist/tests/scripts/test057-memberof-refint up to 1.1.1.6 external/bsd/openldap/dist/tests/scripts/test059-slave-config up to 1.1.1.4 external/bsd/openldap/dist/tests/scripts/test060-mt-hot up to 1.1.1.4 external/bsd/openldap/dist/tests/scripts/test061-syncreplication-initiation up to 1.1.1.4 external/bsd/openldap/dist/tests/scripts/test063-delta-multimaster up to 1.1.1.4 external/bsd/openldap/dist/tests/scripts/test065-proxyauthz up to 1.1.1.2 external/bsd/openldap/include/ldap_features.h up to 1.6 external/bsd/openldap/include/portable.h up to 1.8 doc/3RDPARTY: revision 1.1642 Import OpenLDAP 2.4.48 @ text @d2 1 a2 1 # Copyright 2005-2019 The OpenLDAP Foundation, All Rights Reserved. d471 1 a471 1 > olcRootDN: cn=Manager,dc=example,dc=com d475 1 a475 1 > olcRootDN: uid=root,cn=example.com,cn=digest-md5,cn=auth d525 1 a525 1 > olcSuffix: dc=example,dc=com d976 1 a976 1 >olcSuffix: dc=example,dc=com d1129 1 a1129 1 E: 56. olcSuffix: dc=example,dc=net d1131 1 a1131 1 E: 58. olcRootDN: cn=Manager,dc=example,dc=com @ 1.1.1.7 log @OpenLDAP 2.4.48 (2019/07/24) Added libldap OpenSSL Elliptic Curve support (ITS#7595) Added libldap Expose OpenLDAP specific interfaces via openldap.h (ITS#8671) Added slapd-monitor support for slapd-mdb (ITS#7770) Fixed liblber leaks (ITS#8727) Fixed liblber with partial flush (ITS#8864) Fixed libldap ASYNC TLS so it works (ITS#8957,ITS#8980) Fixed libldap ASYNC connections with Solaris 10 (ITS#8968) Fixed libldap with SASL_NOCANON=on and ldapi connections (ITS#7585) Fixed libldap to be able to unset syncrepl TLS options (ITS#7042) Fixed libldap race condition in ldap_int_initialize (ITS#7996, ITS#8450) Fixed libldap return code in ldap_create_assertion_control_value (ITS#8674) Fixed libldap to correctly disable IPv6 when configured to do so (ITS#8754) Fixed libldap to correctly close TLS connection (ITS#8755) Fixed libldap_r handling of deprecated OpenSSL function (ITS#8353) Fixed liblunicode case correspondance (ITS#8508) Fixed slapd with an idletimeout of less than four seconds (ITS#8952) Fixed slapd config parser variable for Windows64 (ITS#9012) Fixed slapd syncrepl fallback handling with delta-syncrepl (ITS#9015) Fixed slapd telephoneNumberNormalize, cert DN validation (ITS#8999) Fixed slapd syncrepl for relax with delta-syncrepl (ITS#8037) Fixed slapd to restrict rootDN proxyauthz to its own databases (ITS#9038) Fixed slapd to initialize SASL SSF per connection (ITS#9052) Fixed slapo-accesslog with SLAP_MOD_SOFT modifications (ITS#8990) Fixed slapd-ldap starttls connections timeout behavior (ITS#8963) Fixed slapd-ldap segfault when entry result doesn't match filter (ITS#8997) Fixed slapd-meta conversion from slapd.conf to cn=config (ITS#8743) Fixed slapd-meta assertion when network interface goes down (ITS#8841) Fixed slapd-mdb fix bitshift integer overflow (ITS#8989) Fixed slapd-mdb index cleanup with cn=config (ITS#8472) Fixed slapd-mdb to improve performance with alias deref (ITS#7657) Fixed slapo-accesslog possible assert with exops (ITS#8971) Fixed slapo-chain to correctly reject multiple chaining URIs (ITS#8637) Fixed slapo-chain conversion from slapd.conf to cn=config (ITS#8799) Fixed slapo-memberof conversion from slapd.conf to cn=config (ITS#8663) Fixed slapo-memberof for group name change to itself (ITS#9000) Fixed slapo-ppolicy behavior when pwdInHistory is changed (ITS#8349) Fixed slapo-rwm to not free original filter (ITS#8964) Fixed slapo-syncprov contextCSN generation (ITS#9015) Build Environment Fixed slapd to only link to BDB libraries with static build (ITS#8948) Fixed libldap implicit declaration with LDAP_CONNECTIONLESS (ITS#8794) Fixed libldap double inclusion of limits.h in cyrus.c (ITS#9041) Documentation General - Fixed minor typos (ITS#8764, ITS#8761) admin24 - Miscellaneous updates promoting mdb and fixing examples (ITS#9031) slapd.access(5) - Note MDB is the primary backend (ITS#8881) slapd.backends(5) - Note MDB is the recommended backend (ITS#8771) slapd-ldap(5) - Document starttls parameter (ITS#8693) Contrib Added slapo-lastbind capability to forward authTimestamp updates (ITS#7721) OpenLDAP 2.4.47 Release (2018/12/19) Added slapd-sock DN qualifier for subtrees to be processed (ITS#8051) Added slapd-sock ability to send extended operations to external listeners (ITS#8714) Fixed liblber to avoid incremental access to user-supplied bv in dupbv (ITS#8752) Fixed libldap dn to domain parsing with bad input (ITS#8842) Fixed slapd slapcat to correctly honor -g option (ITS#8667) Fixed slapd to correctly handle NO_SUCH_OBJECT with dynamic groups (ITS#8923) Fixed slapd to check status of rdnNormalize (ITS#8932) Fixed slapd cn=config when modifying slapo-syncprov config (ITS#8616) Fixed slapd sasl authz-policy "all" behavior (ITS#8909) Fixed slapd sasl minor typo (ITS#8918) Fixed slapd to correctly hide hidden DBs in the rootDSE (ITS#8912) Fixed slapd domainScope control to match Microsoft specification (ITS#8840) Fixed slapd-bdb/hdb/mdb to not convert certain IDLs to ranges (ITS#8868) Fixed slapo-accesslog deadlock during cleanup (ITS#8752) Fixed slapo-memberof cn=config modifications (ITS#8663) Fixed slapo-ppolicy with multimaster replication (ITS#8927) Fixed slapo-syncprov with NULL modlist (ITS#8843) Build Environment Added slapd reproducible build support (ITS#8928) Fixed missing includes with OpenSSL 1.0.2 (ITS#8809) Contrib Fixed slapo-pbkdf2 hash generation (ITS#8878) Documentation admin24 fixed minor typo (ITS#8887) OpenLDAP 2.4.46 Release (2018/03/22) Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717) Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373) Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687) Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791) Fixed libldap MozNSS CA certificate hash matching (ITS#7374) Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389) Fixed libldap MozNSS initialization (ITS#8484) Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650) Fixed libldap memory leak with cancel operations (ITS#8782) Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705) Fixed slapd to maintain SSF across SASL binds (ITS#8796) Fixed slapd syncrepl deadlock when updating cookie (ITS#8752) Fixed slapd syncrepl callback to always be last in the stack (ITS#8752) Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778) Fixed slapd CSN queue processing (ITS#8801) Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720) Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520) Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226) Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404) Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692) Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752) Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100) Fixed slapo-syncprov memory leak with delete operations (ITS#8690) Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444) Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100) Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607) Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800) Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486) Build Environment Fixed Windows build with newer MINGW version (ITS#8697) Fixed compiler warnings and removed unused variables (ITS#8578) Contrib Fixed ldapc++ Control structure (ITS#8583) Documentation Delete stub manpage for back-ldbm (ITS#8713) Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121) Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818) Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715) Fixed slapo-syncprov(5) indexing requirements (ITS#5048) @ text @d2 1 a2 1 # Copyright 2005-2019 The OpenLDAP Foundation, All Rights Reserved. d471 1 a471 1 > olcRootDN: cn=Manager,dc=example,dc=com d475 1 a475 1 > olcRootDN: uid=root,cn=example.com,cn=digest-md5,cn=auth d525 1 a525 1 > olcSuffix: dc=example,dc=com d976 1 a976 1 >olcSuffix: dc=example,dc=com d1129 1 a1129 1 E: 56. olcSuffix: dc=example,dc=net d1131 1 a1131 1 E: 58. olcRootDN: cn=Manager,dc=example,dc=com @ 1.1.1.8 log @OpenLDAP 2.4.50 Release (2020/04/28) Fixed client benign typos (ITS#8890) Fixed libldap type cast (ITS#9175) Fixed libldap retry loop in ldap_int_tls_connect (ITS#8650) Fixed libldap_r race on Windows mutex initialization (ITS#9181) Fixed liblunicode memory leak (ITS#9198) Fixed slapd benign typos (ITS#8890) Fixed slapd to limit depth of nested filters (ITS#9202) Fixed slapd-mdb memory leak in dnSuperiorMatch (ITS#9214) Fixed slapo-pcache database initialization (ITS#9182) Fixed slapo-ppolicy callback (ITS#9171) Build Fix olcDatabaseDummy initialization for windows (ITS#7074) Fix detection for ws2tcpip.h for windows (ITS#8383) Fix back-mdb types for windows (ITS#7878) Contrib Update ldapc++ config.guess and config.sub to support newer architectures (ITS#7855) Added pw-argon2 module (ITS#9233, ITS#8575, ITS#9203, ITS#9206) Documentation slapd-ldap(5) - Clarify idassert-authzfrom behavior (ITS#9003) slapd-meta(5) - Remove client-pr option (ITS#8683) slapdinex(8) - Fix truncate option information for back-mdb (ITS#9230) OpenLDAP 2.4.49 Release (2020/01/30) Added slapd-monitor database entry count for slapd-mdb (ITS#9154) Fixed client tools to not add controls on cancel/abandon (ITS#9145) Fixed client tools SyncInfo message to be LDIF compliant (ITS#8116) Fixed libldap to correctly free sb (ITS#9081, ITS#8755) Fixed libldap descriptor leak if ldaps fails (ITS#9147) Fixed libldap remove unnecessary global mutex for GnuTLS (ITS#9069) Fixed slapd syntax evaluation of preferredDeliveryMethod (ITS#9067) Fixed slapd to relax domainScope control check (ITS#9100) Fixed slapd to have cleaner error handling during connection setup (ITS#9112) Fixed slapd data check when processing cancel exop (ITS#9124) Fixed slapd attribute description processing (ITS#9128) Fixed slapd-ldap to set oldctrls correctly (ITS#9076) Fixed slapd-mdb to honor unchecked limit with alias deref (ITS#7657) Fixed slapd-mdb missing final commit with slapindex (ITS#9095) Fixed slapd-mdb drop attr mappings added in an aborted txn (ITS#9091) Fixed slapd-mdb nosync FLAG configuration handling (ITS#9150) Fixed slapd-monitor global operation counter reporting (ITS#9119) Fixed slapo-ppolicy when used with slapauth (ITS#8629) Fixed slapo-ppolicy to add a missed normalised copy of pwdChangedTime (ITS#9126) Fixed slapo-syncprov fix sessionlog init (ITS#9146) Fixed slapo-unique loop termination (ITS#9077) Build Environment Fix mkdep to honor TMPDIR if set (ITS#9062) Remove ICU library detection (ITS#9144) Update config.guess and config.sub to support newer architectures (ITS#7855) Disable ITS8521 regression test as it is no longer valid (ITS#9015) Documentation admin24 - Fix inconsistent whitespace in replication section (ITS#9153) slapd-config(5)/slapd.conf(5) - Fix missing bold tag for keyword (ITS#9063) slapd-ldap(5) - Document "tls none" option (ITS#9071) slapo-ppolicy(5) - Correctly document pwdGraceAuthnLimit (ITS#9065) @ text @d2 1 a2 1 # Copyright 2005-2020 The OpenLDAP Foundation, All Rights Reserved. @ 1.1.1.9 log @Import OpenLDAP 2.5.6: OpenLDAP 2.5.6 Release (2021/07/27) Fixed libldap buffer overflow (ITS#9578) Fixed libldap missing mutex unlock on connection alloc failure (ITS#9590) Fixed lloadd cn=config olcBkLloadClientMaxPending setting (ITS#8747) Fixed slapd multiple config defaults (ITS#9363) Fixed slapd ipv6 addresses to work with tcp wrappers (ITS#9603) Fixed slapo-syncprov delete of nonexistent sessionlog (ITS#9608) Build Fixed library symbol versioning on Solaris (ITS#9591) Fixed compile warning in libldap/tpool.c (ITS#9601) Fixed compile wraning in libldap/tls_o.c (ITS#9602) Contrib Fixed ppm module for sysconfdir (ITS#7832) Documentation Updated guide to document multival, idlexp, and maxentrysize (ITS#9613, ITS#9614) OpenLDAP 2.5.5 Release (2021/06/03) Added libldap LDAP_OPT_TCP_USER_TIMEOUT support (ITS#9502) Added lloadd tcp-user-timeout support (ITS#9502) Added slapd-asyncmeta tcp-user-timeout support (ITS#9502) Added slapd-ldap tcp-user-timeout support (ITS#9502) Added slapd-meta tcp-user-timeout support (ITS#9502) Fixed incorrect control OIDs for AuthZ Identity (ITS#9542) Fixed libldap typo in util-int.c (ITS#9541) Fixed libldap double free of LDAP_OPT_DEFBASE (ITS#9530) Fixed libldap better TLS1.3 cipher suite handling (ITS#9521, ITS#9546) Fixed lloadd multiple issues (ITS#8747) Fixed slapd slap_op_time to avoid duplicates across restarts (ITS#9537) Fixed slapd typo in daemon.c (ITS#9541) Fixed slapd slapi compilation (ITS#9544) Fixed slapd to handle empty DN in extended filters (ITS#9551) Fixed slapd syncrepl searches with empty base (ITS#6467) Fixed slapd syncrepl refresh on startup (ITS#9324, ITS#9534) Fixed slapd abort due to typo (ITS#9561) Fixed slapd-asyncmeta quarantine handling (ITS#8721) Fixed slapd-asyncmeta to have a default operations timeout (ITS#9555) Fixed slapd-ldap quarantine handling (ITS#8721) Fixed slapd-mdb deletion of context entry (ITS#9531) Fixed slapd-mdb off-by-one affecting search scope (ITS#9557) Fixed slapd-meta quarantine handling (ITS#8721) Fixed slapo-accesslog to record reqNewDN for modRDN ops (ITS#9552) Fixed slapo-pcache locking during expiration (ITS#9529) Build Fixed slappw-argon2 module installation (ITS#9548) Contrib Update ldapc++/ldaptcl to use configure.ac (ITS#9554) Documentation ldap_first_attribute(3) - Document ldap_get_attribute_ber (ITS#8820) ldap_modify(3) - Delete non-existent mod_next parameter (ITS#9559) OpenLDAP 2.5.4 Release (2021/04/29) Initial release for "general use". OpenLDAP 2.4.59 Release (2021/06/03) Fixed libldap TLSv1.3 cipher suites with OpenSSL 1.1.1 (ITS#9521) Fixed libldap double free of LDAP_OPT_DEFBASE (ITS#9530) Fixed slapd syncrepl handling of add+delete on single value attr (ITS#9295) Fixed slapd-mdb cursor init check (ITS#9526) Fixed slapd-mdb deletion of context entry (ITS#9531) Fixed slapd-mdb off-by-one affecting search scope (ITS#9557) Fixed slapo-pcache locking during expiration (ITS#9529) Contrib Fixed slapo-autogroup to not thrash thread context (ITS#9494) Documentation ldap_modify(3) - Delete non-existent mod_next parameter (ITS#9559) OpenLDAP 2.4.58 Release (2021/03/16) Fixed slapd validity checks for issuerAndThisUpdateCheck (ITS#9454) Fixed slapd to alloc new conn struct after freeing old one (ITS#9458) Fixed slapd syncrepl to check all contextCSNs (ITS#9282) Fixed slapd-bdb lockdetect config (ITS#9449) OpenLDAP 2.4.57 Release (2021/01/18) Fixed ldapexop to use correct return code (ITS#9417) Fixed slapd to remove asserts in UUIDNormalize (ITS#9391) Fixed slapd to remove assert in csnValidate (ITS#9410) Fixed slapd validity checks for issuerAndThisUpdateCheck (ITS#9411, ITS#9427) Fixed slapd validity checks for serialNumberAndIssuerCheck (ITS#9404, ITS#9424) Fixed slapd AVA sort with invalid RDN (ITS#9412) Fixed slapd ldap_X509dn2bv to check for invalid BER after RDN count (ITS#9423, ITS#9425) Fixed slapd saslauthz to remove asserts in validation (ITS#9406, ITS#9407) Fixed slapd saslauthz to use slap_sl_free on normalized DN (ITS#9409) Fixed slapd saslauthz SEGV in slap_parse_user (ITS#9413) Fixed slapd modrdn memory leak (ITS#9420) Fixed slapd double-free in vrfilter (ITS#9408) Fixed slapd cancel operation to correctly terminate (ITS#9428) Fixed slapd-ldap fix binds on retry with closed connection (ITS#9400) Fixed slapo-syncprov to ignore duplicate sessionlog entries (ITS#9394) OpenLDAP 2.4.56 Release (2020/11/10) Fixed slapd to remove assert in certificateListValidate (ITS#9383) Fixed slapd to remove assert in csnNormalize23 (ITS#9384) Fixed slapd to better parse ldapi listener URIs (ITS#9379) OpenLDAP 2.4.55 Release (2020/10/26) Fixed slapd normalization handling with modrdn (ITS#9370) Fixed slapd-meta to check ldap_install_tls return code (ITS#9366) Contrib Fixed nssov misplaced semicolon (ITS#8731, ITS#9368) OpenLDAP 2.4.54 Release (2020/10/12) Fixed slapd delta-syncrepl to ignore delete ops on deleted entry (ITS#9342) Fixed slapd delta-syncrepl to be fully serialized (ITS#9330) Fixed slapd delta-syncrepl MOD on zero-length context entry (ITS#9352) Fixed slapd syncrepl to be fully serialized (ITS#8102) Fixed slapd syncrepl to call check_syncprov on fresh consumer (ITS#9345) Fixed slapd syncrepl to propagate errors from overlay_entry_get_ov (ITS#9355) Fixed slapd syncrepl to not create empty ADD ops (ITS#9359) Fixed slapd syncrepl replace usage on single valued attrs (ITS#9295) Fixed slapd-monitor fix monitor_back_register_database for empty suffix DB (ITS#9353) Fixed slapo-accesslog normalizer for reqStart (ITS#9358) Fixed slapo-accesslog to not generate new contextCSN on purge (ITS#9361) Fixed slapo-syncprov contextCSN generation with empty suffix (ITS#9015) Fixed slapo-syncprov sessionlog to use a TAVL tree (ITS#8486) OpenLDAP 2.4.53 Release (2020/09/07) Added slapd syncrepl additional SYNC logging (ITS#9043) Fixed slapd syncrepl segfault on NULL cookie on REFRESH (ITS#9282) Fixed slapd syncrepl to use fresh connection on REFRESH fallback (ITS#9338) Fixed slapo-ppolicy race condition for pwdFailureTime (ITS#9302,ITS#9334) Build Require OpenSSL 1.0.2 or later (ITS#9323) Fixed libldap compilation issue with broken C compilers (ITS#9332) OpenLDAP 2.4.52 Release (2020/08/28) Added libldap LDAP_OPT_X_TLS_REQUIRE_SAN option (ITS#9318) Added libldap OpenSSL support for multiple EECDH curves (ITS#9054) Added slapd OpenSSL support for multiple EECDH curves (ITS#9054) Fixed librewrite malloc/free corruption (ITS#9249) Fixed libldap hang when using UDP and server down (ITS#9328) Fixed slapd syncrepl rare deadlock due to network issues (ITS#9324) Fixed slapd syncrepl regression that could trigger an assert (ITS#9329) Fixed slapd-mdb index error with collapsed range (ITS#9135) OpenLDAP 2.4.51 Release (2020/08/11) Added slapo-ppolicy implement Netscape password policy controls (ITS#9279) Fixed libldap retry loop in ldap_int_tls_connect (ITS#8650) Fixed libldap to use getaddrinfo in ldap_pvt_get_fqdn (ITS#9287) Fixed slapd to enforce singular existence of some overlays (ITS#9309) Fixed slapd syncrepl to not delete non-replicated attrs (ITS#9227) Fixed slapd syncrepl to correctly delete entries on resync (ITS#9282) Fixed slapd syncrepl to use replace on single valued attrs (ITS#9294, ITS#9295) Fixed slapd-perl dynamic config with threaded slapd (ITS#7573) Fixed slapo-ppolicy to expose the ppolicy control (ITS#9285) Fixed slapo-ppolicy race condition for pwdFailureTime (ITS#9302) Fixed slapo-ppolicy so it can only exist once per DB (ITS#9309) Fixed slapo-chain to check referral (ITS#9262) Build Environment Fix test064 so it no longer uses bashisms (ITS#9263) Contrib Fix default prefix value for pw-argon2, pw-pbkdf2 modules (ITS#9248) slapo-allowed - Fix usage of uninitialized variable (ITS#9308) Documentation ldap_parse_result(3) - Document ldap_parse_intermediate (ITS#9271) @ text @d2 1 a2 1 # Copyright 2005-2021 The OpenLDAP Foundation, All Rights Reserved. a36 2 For offline modifications (when the server is not running), use {{slapadd}}(8) and {{slapmodify}}(8). d72 1 a72 1 * Backend-specific configuration d177 2 a178 2 This directive specifies the level at which log statements and operation statistics should be sent to syslog (currently logged to d181 2 a182 2 to work, except for the two statistics levels, which are always enabled. Log levels may be specified as integers or by keyword. d184 3 a186 1 The possible values for are: d189 1 a189 1 title="Table 5.1: Logging Levels" d206 1 a206 1 32768 (0x8000 none) only messages that get logged regardless of configured log level d210 1 a210 1 combines the (ORed) desired levels, both in decimal or in hexadecimal d225 2 a226 1 This will enable all log levels. d242 3 a244 1 Basic stats logging is configured by default. d367 1 a367 1 asyncmeta Asynchronous Metadirectory backend d370 1 d374 1 a374 1 meta Metadirectory backend a375 2 ndb MySQL NDB backend null Null backend d378 1 a378 2 relay Relay backend sock Socket backend a379 1 wt WiredTiger backend d384 1 a384 1 > olcBackend: mdb d386 4 a389 3 This marks the beginning of a new {{TERM:MDB}} backend definition. At present, only back-mdb implements any options of this type, so this setting is not needed for any other backends. d394 1 a394 1 > dn: olcBackend=mdb,cn=config d396 1 a396 2 > olcBackend: mdb > olcBkMdbIdlExp: 16 d424 1 a424 1 > olcDatabase: mdb d426 1 a426 1 This marks the beginning of a new {{TERM:MDB}} database instance. d572 2 a573 2 This directive specifies the current database as a consumer of the provider content by establishing the current {{slapd}}(8) as a d575 3 a577 3 The provider database is located at the provider site specified by the {{EX:provider}} parameter. The consumer database is kept up-to-date with the provider content using the LDAP Content d588 1 a588 1 containing the provider content as an LDAP URI. The {{EX:provider}} d595 4 a598 1 specification is located on the consumer. d600 1 a600 1 The content of the syncrepl consumer is defined using a search d623 1 a623 1 provider will generate {{EX:searchResultEntry}} to the consumer slapd d636 2 a637 2 schema as the entry is stored on the consumer. Every entry in the consumer should contain those attributes d645 1 a645 1 provider database. d686 2 a687 2 The {{syncrepl}} replication mechanism is supported by the {{mdb}} backend. d710 1 a710 2 This directive is only applicable in a {{replica}} (or {{shadow}}) {{slapd}}(8) instance. It d717 1 a717 1 > olcUpdateref: ldap://provider.example.net d734 1 a734 1 H3: MDB Backend Directives d736 8 a743 4 Directives in this category only apply to the {{TERM:MDB}} database backend. They will apply to all "database mdb" instances in the configuration. For a complete reference of MDB backend configuration directives, see {{slapd-mdb}}(5). a744 1 H4: olcBkMdbIdlExp d746 1 a746 3 Specify a power of 2 for the maximum size of an index slot. The default is 16, yielding a maximum slot size of 2^16 or 65536. The specified value must be in the range of 16-31. d748 2 a749 4 This setting helps with the case where certain search filters are slow to return results due to an index slot having collapsed to a range value. This occurs when the number of candidate entries that match the filter for the index slot exceed the configured slot size. d751 1 a751 3 If this setting is decreased on a server with existing {{TERM:MDB}} databases, each db will immediately need its indices to be rebuilt while slapd is offline with the "slapindex -q -t" command. d753 1 a753 6 If this setting is increased on a server with existing {{TERM:MDB}} databases, each db will need its indices rebuilt to take advantage of the change for indices that have already been converted to ranges. H3: MDB Database Directives a754 7 Directives in this category apply to the {{TERM:MDB}} database backend. They are used in an olcDatabase entry in addition to the generic database directives defined above. For a complete reference of MDB configuration directives, see {{slapd-mdb}}(5). In addition to the {{EX:olcDatabaseConfig}} objectClass, MDB database entries must have the {{EX:olcMdbConfig}} objectClass. d756 1 d758 2 a759 4 H4: olcDbDirectory: This directive specifies the directory where the MDB files containing the database and associated indices live. d763 1 a763 1 > olcDbDirectory: /usr/local/var/openldap-data d768 3 a770 3 This directive specifies the frequency for flushing the database disk buffers. This directive is only needed if the {{olcDbNoSync}} option is {{EX:TRUE}}. d775 1 a775 1 checkpoint. Note: currently the _kbyte_ setting is unimplemented. d782 44 a825 1 H4: olcDbEnvFlags: {nosync,nometasync,writemap,mapasync,nordahead} a826 2 This option specifies flags for finer-grained control of the LMDB library's operation. d828 1 a828 1 * {{F:nosync}}: This is exactly the same as the dbnosync directive. d830 18 a847 19 * {{F:nometasync}}: Flush the data on a commit, but skip the sync of the meta page. This mode is slightly faster than doing a full sync, but can potentially lose the last committed transaction if the operating system crashes. If both nometasync and nosync are set, the nosync flag takes precedence. * {{F:writemap}}: Use a writable memory map instead of just read-only. This speeds up write operations but makes the database vulnerable to corruption in case any bugs in slapd cause stray writes into the mmap region. * {{F:mapasync}}: When using a writable memory map and performing flushes on each commit, use an asynchronous flush instead of a synchronous flush (the default). This option has no effect if writemap has not been set. It also has no effect if nosync is set. * {{F:nordahead}}: Turn off file readahead. Usually the OS performs readahead on every read request. This usually boosts read performance but can be harmful to random access read performance if the system's memory is full and the DB is larger than RAM. This option is not implemented on Windows. d877 1 a877 1 {{EX:subany}}, or {{EX:subfinal}}, corresponding to the three d893 1 a893 1 > olcDbIndex: objectClass eq d910 1 a910 1 H4: olcDbMaxEntrySize: d912 10 a921 23 Specify the maximum size of an entry in bytes. Attempts to store an entry larger than this size will be rejected with the error LDAP_ADMINLIMIT_EXCEEDED. The default is 0, which is unlimited. H4: olcDbMaxReaders: This directive specifies the maximum number of threads that may have concurrent read access to the database. Tools such as slapcat count as a single thread, in addition to threads in any active slapd processes. The default is 126. H4: olcDbMaxSize: This directive specifies the maximum size of the database in bytes. A memory map of this size is allocated at startup time and the database will not be allowed to grow beyond this size. The default is 10485760 bytes (10MB). This setting may be changed upward if the configured limit needs to be increased. Note: It is important to set this to as large a value as possible, (relative to anticipated growth of the actual data over time) since growing the size later may not be practical when the system is under heavy load. a934 34 H4: olcDbMultival: { | default } hi, lo Specify the number of values for which a multivalued attribute is stored in a separate table. Normally entries are stored as a single blob inside the database. When an entry gets very large or contains attributes with a very large number of values, modifications on that entry may get very slow. Splitting the large attributes out to a separate table can improve the performance of modification operations. The threshold is specified as a pair of integers. If the number of values exceeds the hi threshold the values will be split out. If a modification deletes enough values to bring an attribute below the lo threshold the values will be removed from the separate table and merged back into the main entry blob. The threshold can be set for a specific list of attributes, or the default can be configured for all other attributes. The default value for both hi and lo thresholds is UINT_MAX, which keeps all attributes in the main blob. In addition to increasing write performance of operations the use of multival can also decrease fragmentation of the primary {{TERM:MDB}} database. H4: olcDbRtxnsize: This directive specifies the maximum number of entries to process in a single read transaction when executing a large search. Long-lived read transactions prevent old database pages from being reused in write transactions, and so can cause significant growth of the database file when there is heavy write traffic. This setting causes the read transaction in large searches to be released and reacquired after the given number of entries has been read, to give writers the opportunity to reclaim old database pages. The default is 10000. d958 8 a965 1 H4: olcDbNosync: { TRUE | FALSE } d967 1 a967 3 This directive causes on-disk database contents to not be immediately synchronized with in memory changes upon change. Setting this option to {{EX:TRUE}} may improve performance at the expense of data integrity. d972 1 a972 1 >dn: olcDatabase=mdb,cn=config d974 2 a975 2 >objectClass: olcMdbConfig >olcDatabase: mdb d978 7 d992 1 a992 1 different parts of the {{TERM:X.500}} tree; both are {{TERM:MDB}} d1002 1 a1002 1 E: 6. d1016 1 a1016 1 E: 11. d1025 1 a1025 1 E: 14. d1040 1 a1040 1 E: 20. d1069 1 a1069 1 The next entry defines an MDB backend that will handle queries for things d1074 2 a1075 2 E: 29. # MDB definition for example.com E: 30. dn: olcDatabase=mdb,cn=config d1077 2 a1078 2 E: 32. objectClass: olcMdbConfig E: 33. olcDatabase: mdb d1095 1 a1095 1 E: 50. d1097 1 a1097 1 Line 29 is a comment. Lines 30-33 identify this entry as a MDB database d1119 1 a1119 1 MDB database. This one handles queries involving the d1124 2 a1125 2 E: 51. # MDB definition for example.net E: 52. dn: olcDatabase=mdb,cn=config d1127 2 a1128 2 E: 54. objectClass: olcMdbConfig E: 55. olcDatabase: mdb a1173 80 H2: Recovering from a broken configuration If the server using {{cn=config}} does not start, either because the configuration does not represent the current version or because it has been corrupted, these actions are available, in the order of decreasing preference. Make sure you have made a backup of the "broken" version before you attempt any of these: H3: Generate an ldif version of the configuration database and reload from that Most of the time, the configuration can be parsed and a text version generated with {{slapcat}}(8): > slapcat -F /usr/local/etc/openldap/slapd.d -n0 -l extracted_config.ldif After you have backed up and removed the old configuration database contents, this output ldif can be hand-edited to adjust or remove the offending entries and imported again: > slapadd -F /usr/local/etc/openldap/slapd.d -l updated_config.ldif > slaptest -F /usr/local/etc/openldap/slapd.d H3: Modify config in-place If the configuration can be parsed and you know exactly what you need to do, you can use {{slapmodify}}(8) to effect the required changes directly: > slapmodify -F /usr/local/etc/openldap/slapd.d > dn: ..., cn=config > changetype: ... > ... H3: Recover with plain back-ldif If the configuration contains items that {{slapd}}(8) cannot process as a {{cn=config}} database at all, the last resort is to disable schema checking and operate on it as a regular back-ldif database. This might cease to work with future versions of OpenLDAP without notice, attempt this only when all of the above fail. First, create a directory to serve as the hosting DB and create the structure: > mkdir ./recovery ./recovery/cn=recovery > cp /usr/local/etc/openldap/slapd.d/cn=config.ldif ./recovery/cn=recovery > cp -r /usr/local/etc/openldap/slapd.d/cn=config ./recovery/cn=recovery Or, if you have already backed up your old configuration, you can symlink it into place: > mkdir ./recovery > ln -s /usr/local/etc/openldap/slapd.d ./recovery/cn=recovery Next, create a trivial {{slapd.conf}}(5) to access the new database: > database ldif > suffix cn=recovery > directory ./recovery/ Note the change of suffix, {{EX:cn=config}} is hardcoded to correspond to an active config database, so we have to home it one level deeper - at {{EX:cn=config,cn=recovery}}. Now you can use {{slapmodify}}(8) to modify the database, it is most likely you will need to run with schema checking disabled: > slapmodify -f ./recovery.conf -s You can test the validity of your config with {{slaptest}}(8): > slaptest -F ./recovery/cn=recovery And generate a full ldif with {{slapcat}}(8): > slapcat -F ./recovery/cn=recovery -n0 @ 1.1.1.10 log @Import OpenLDAP 2.6.10 (previous was 2.5.6) A.1. New Features and Enhancements in 2.6 A.1.1. New features in slapd slapd now supports logging directly to a file, bypassing syslog. A.1.2. New features in lloadd lloadd now supports additional balancing mechansims A.2. Obsolete Features Removed From 2.6 These features were strongly deprecated in 2.5 and removed in 2.6. A.2.1. back-ndb The experimental and incomplete back-ndb backend was removed. See CHANGES for the complete list of bugfixes. @ text @d2 1 a2 1 # Copyright 2005-2024 The OpenLDAP Foundation, All Rights Reserved. d372 1 a546 1 > [exattrs=] d601 1 a601 1 {{EX:scope}}, {{EX:filter}}, {{EX:attrs}}, {{EX:exattrs}}, {{EX:attrsonly}}, d609 1 a609 2 or "unlimited" may be specified. The {{EX:exattrs}} option may also be used to specify attributes that should be omitted from incoming entries. d743 1 a743 1 The specified value must be in the range of 16-30. d1047 3 a1049 4 E: 18. objectClass: olcFrontendConfig E: 19. olcDatabase: frontend E: 20. olcAccess: to * by * read E: 21. d1052 1 a1052 1 database entry. Line 20 is a global access control. It applies to all d1054 1 a1054 1 Line 21 is a blank line. d1058 12 a1069 12 E: 22. # set a rootpw for the config database so we can bind. E: 23. # deny access to everyone else. E: 24. dn: olcDatabase=config,cn=config E: 25. objectClass: olcDatabaseConfig E: 26. olcDatabase: config E: 27. olcRootPW: {SSHA}XKYnrjvGT3wZFQrDD5040US592LxsdLy E: 28. olcAccess: to * by * none E: 29. Lines 22-23 are comments. Lines 24-26 identify this entry as the config database entry. Line 27 defines the {{super-user}} password for this database. (The DN defaults to {{"cn=config"}}.) Line 28 denies all access d1076 1 a1076 1 Line 29 is a blank line. d1083 26 a1108 26 E: 30. # MDB definition for example.com E: 31. dn: olcDatabase=mdb,cn=config E: 32. objectClass: olcDatabaseConfig E: 33. objectClass: olcMdbConfig E: 34. olcDatabase: mdb E: 35. olcSuffix: dc=example,dc=com E: 36. olcDbDirectory: /usr/local/var/openldap-data E: 37. olcRootDN: cn=Manager,dc=example,dc=com E: 38. olcRootPW: secret E: 39. olcDbIndex: uid pres,eq E: 40. olcDbIndex: cn,sn pres,eq,approx,sub E: 41. olcDbIndex: objectClass eq E: 42. olcAccess: to attrs=userPassword E: 43. by self write E: 44. by anonymous auth E: 45. by dn.base="cn=Admin,dc=example,dc=com" write E: 46. by * none E: 47. olcAccess: to * E: 48. by self write E: 49. by dn.base="cn=Admin,dc=example,dc=com" write E: 50. by * read E: 51. Line 30 is a comment. Lines 31-34 identify this entry as a MDB database configuration entry. Line 35 specifies the DN suffix for queries to pass to this database. Line 36 specifies the directory d1111 1 a1111 1 Lines 37 and 38 identify the database {{super-user}} entry and associated d1115 1 a1115 1 Lines 39 through 41 indicate the indices to maintain for various d1118 1 a1118 1 Lines 42 through 50 specify access control for entries in this d1125 1 a1125 1 Line 51 is a blank line, indicating the end of this entry. d1130 2 a1131 2 as the first database. Note that without line 61, the read access would be allowed due to the global access rule at line 20. d1133 10 a1142 10 E: 52. # MDB definition for example.net E: 53. dn: olcDatabase=mdb,cn=config E: 54. objectClass: olcDatabaseConfig E: 55. objectClass: olcMdbConfig E: 56. olcDatabase: mdb E: 57. olcSuffix: dc=example,dc=net E: 58. olcDbDirectory: /usr/local/var/openldap-data-net E: 59. olcRootDN: cn=Manager,dc=example,dc=com E: 60. olcDbIndex: objectClass eq E: 61. olcAccess: to * by users read @ 1.1.1.1.6.1 log @file slapdconf2.sdf was added on branch wrstuden-revivesa on 2008-09-18 05:14:46 +0000 @ text @d1 948 @ 1.1.1.1.6.2 log @Sync with wrstuden-revivesa-base-2. @ text @a0 948 # $OpenLDAP: pkg/openldap-guide/admin/slapdconf2.sdf,v 1.20.2.12 2008/04/14 22:37:01 quanah Exp $ # Copyright 2005-2008 The OpenLDAP Foundation, All Rights Reserved. # COPYING RESTRICTIONS APPLY, see COPYRIGHT. H1: Configuring slapd Once the software has been built and installed, you are ready to configure {{slapd}}(8) for use at your site. Unlike previous OpenLDAP releases, the slapd(8) runtime configuration in 2.3 (and later) is fully LDAP-enabled and can be managed using the standard LDAP operations with data in {{TERM:LDIF}}. The LDAP configuration engine allows all of slapd's configuration options to be changed on the fly, generally without requiring a server restart for the changes to take effect. The old style {{slapd.conf}}(5) file is still supported, but must be converted to the new {{slapd-config}}(5) format to allow runtime changes to be saved. While the old style configuration uses a single file, normally installed as {{F:/usr/local/etc/openldap/slapd.conf}}, the new style uses a slapd backend database to store the configuration. The configuration database normally resides in the {{F:/usr/local/etc/openldap/slapd.d}} directory. When converting from the slapd.conf format to slapd.d format, any include files will also be integrated into the resulting configuration database. An alternate configuration directory (or file) can be specified via a command-line option to {{slapd}}(8). This chapter describes the general format of the configuration system, followed by a detailed description of commonly used config settings. Note: some of the backends and of the distributed overlays do not support runtime configuration yet. In those cases, the old style {{slapd.conf}}(5) file must be used. H2: Configuration Layout The slapd configuration is stored as a special LDAP directory with a predefined schema and DIT. There are specific objectClasses used to carry global configuration options, schema definitions, backend and database definitions, and assorted other items. A sample config tree is shown in Figure 5.1. !import "config_dit.png"; align="center"; title="Sample configuration tree" FT[align="Center"] Figure 5.1: Sample configuration tree. Other objects may be part of the configuration but were omitted from the illustration for clarity. The {{slapd-config}} configuration tree has a very specific structure. The root of the tree is named {{EX:cn=config}} and contains global configuration settings. Additional settings are contained in separate child entries: * Dynamically loaded modules .. These may only be used if the {{EX:--enable-modules}} option was used to configure the software. * Schema definitions .. The {{EX:cn=schema,cn=config}} entry contains the system schema (all the schema that is hard-coded in slapd). .. Child entries of {{EX:cn=schema,cn=config}} contain user schema as loaded from config files or added at runtime. * Backend-specific configuration * Database-specific configuration .. Overlays are defined in children of the Database entry. .. Databases and Overlays may also have other miscellaneous children. The usual rules for LDIF files apply to the configuration information: Comment lines beginning with a '{{EX:#}}' character are ignored. If a line begins with a single space, it is considered a continuation of the previous line (even if the previous line is a comment) and the single leading space is removed. Entries are separated by blank lines. The general layout of the config LDIF is as follows: > # global configuration settings > dn: cn=config > objectClass: olcGlobal > cn: config > > > # schema definitions > dn: cn=schema,cn=config > objectClass: olcSchemaConfig > cn: schema > > > dn: cn={X}core,cn=schema,cn=config > objectClass: olcSchemaConfig > cn: {X}core > > > # additional user-specified schema > ... > > # backend definitions > dn: olcBackend=,cn=config > objectClass: olcBackendConfig > olcBackend: > > > # database definitions > dn: olcDatabase={X},cn=config > objectClass: olcDatabaseConfig > olcDatabase: {X} > > > # subsequent definitions and settings > ... Some of the entries listed above have a numeric index {{EX:"{X}"}} in their names. While most configuration settings have an inherent ordering dependency (i.e., one setting must take effect before a subsequent one may be set), LDAP databases are inherently unordered. The numeric index is used to enforce a consistent ordering in the configuration database, so that all ordering dependencies are preserved. In most cases the index does not have to be provided; it will be automatically generated based on the order in which entries are created. Configuration directives are specified as values of individual attributes. Most of the attributes and objectClasses used in the slapd configuration have a prefix of {{EX:"olc"}} (OpenLDAP Configuration) in their names. Generally there is a one-to-one correspondence between the attributes and the old-style {{EX:slapd.conf}} configuration keywords, using the keyword as the attribute name, with the "olc" prefix attached. A configuration directive may take arguments. If so, the arguments are separated by white space. If an argument contains white space, the argument should be enclosed in double quotes {{EX:"like this"}}. In the descriptions that follow, arguments that should be replaced by actual text are shown in brackets {{EX:<>}}. The distribution contains an example configuration file that will be installed in the {{F: /usr/local/etc/openldap}} directory. A number of files containing schema definitions (attribute types and object classes) are also provided in the {{F: /usr/local/etc/openldap/schema}} directory. H2: Configuration Directives This section details commonly used configuration directives. For a complete list, see the {{slapd-config}}(5) manual page. This section will treat the configuration directives in a top-down order, starting with the global directives in the {{EX:cn=config}} entry. Each directive will be described along with its default value (if any) and an example of its use. H3: cn=config Directives contained in this entry generally apply to the server as a whole. Most of them are system or connection oriented, not database related. This entry must have the {{EX:olcGlobal}} objectClass. H4: olcIdleTimeout: Specify the number of seconds to wait before forcibly closing an idle client connection. A value of 0, the default, disables this feature. H4: olcLogLevel: This directive specifies the level at which debugging statements and operation statistics should be syslogged (currently logged to the {{syslogd}}(8) {{EX:LOG_LOCAL4}} facility). You must have configured OpenLDAP {{EX:--enable-debug}} (the default) for this to work (except for the two statistics levels, which are always enabled). Log levels may be specified as integers or by keyword. Multiple log levels may be used and the levels are additive. To display what levels correspond to what kind of debugging, invoke slapd with {{EX:-?}} or consult the table below. The possible values for are: !block table; colaligns="RL"; align=Center; \ title="Table 5.1: Debugging Levels" Level Keyword Description -1 Any enable all debugging 0 no debugging 1 Trace trace function calls 2 Packets debug packet handling 4 Args heavy trace debugging 8 Conns connection management 16 BER print out packets sent and received 32 Filter search filter processing 64 Config configuration processing 128 ACL access control list processing 256 Stats stats log connections/operations/results 512 Stats2 stats log entries sent 1024 Shell print communication with shell backends 2048 Parse print entry parsing debugging 4096 Cache database cache processing 8192 Index database indexing 16384 Sync syncrepl consumer processing !endblock \Example: E: olcLogLevel: -1 This will cause lots and lots of debugging information to be logged. E: olcLogLevel: Conns Filter Just log the connection and search filter processing. \Default: E: olcLogLevel: Stats H4: olcReferral This directive specifies the referral to pass back when slapd cannot find a local database to handle a request. \Example: > olcReferral: ldap://root.openldap.org This will refer non-local queries to the global root LDAP server at the OpenLDAP Project. Smart LDAP clients can re-ask their query at that server, but note that most of these clients are only going to know how to handle simple LDAP URLs that contain a host part and optionally a distinguished name part. H4: Sample Entry >dn: cn=config >objectClass: olcGlobal >cn: config >olcIdleTimeout: 30 >olcLogLevel: Stats >olcReferral: ldap://root.openldap.org H3: cn=module If support for dynamically loaded modules was enabled when configuring slapd, {{EX:cn=module}} entries may be used to specify sets of modules to load. Module entries must have the {{EX:olcModuleList}} objectClass. H4: olcModuleLoad: Specify the name of a dynamically loadable module to load. The filename may be an absolute path name or a simple filename. Non-absolute names are searched for in the directories specified by the {{EX:olcModulePath}} directive. H4: olcModulePath: Specify a list of directories to search for loadable modules. Typically the path is colon-separated but this depends on the operating system. H4: Sample Entries >dn: cn=module{0},cn=config >objectClass: olcModuleList >cn: module{0} >olcModuleLoad: /usr/local/lib/smbk5pwd.la > >dn: cn=module{1},cn=config >objectClass: olcModuleList >cn: module{1} >olcModulePath: /usr/local/lib:/usr/local/lib/slapd >olcModuleLoad: accesslog.la >olcModuleLoad: pcache.la H3: cn=schema The cn=schema entry holds all of the schema definitions that are hard-coded in slapd. As such, the values in this entry are generated by slapd so no schema values need to be provided in the config file. The entry must still be defined though, to serve as a base for the user-defined schema to add in underneath. Schema entries must have the {{EX:olcSchemaConfig}} objectClass. H4: olcAttributeTypes: <{{REF:RFC4512}} Attribute Type Description> This directive defines an attribute type. Please see the {{SECT:Schema Specification}} chapter for information regarding how to use this directive. H4: olcObjectClasses: <{{REF:RFC4512}} Object Class Description> This directive defines an object class. Please see the {{SECT:Schema Specification}} chapter for information regarding how to use this directive. H4: Sample Entries >dn: cn=schema,cn=config >objectClass: olcSchemaConfig >cn: schema > >dn: cn=test,cn=schema,cn=config >objectClass: olcSchemaConfig >cn: test >olcAttributeTypes: ( 1.1.1 > NAME 'testAttr' > EQUALITY integerMatch > SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) >olcAttributeTypes: ( 1.1.2 NAME 'testTwo' EQUALITY caseIgnoreMatch > SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 ) >olcObjectClasses: ( 1.1.3 NAME 'testObject' > MAY ( testAttr $ testTwo ) AUXILIARY ) H3: Backend-specific Directives Backend directives apply to all database instances of the same type and, depending on the directive, may be overridden by database directives. Backend entries must have the {{EX:olcBackendConfig}} objectClass. H4: olcBackend: This directive names a backend-specific configuration entry. {{EX:}} should be one of the supported backend types listed in Table 5.2. !block table; align=Center; coltags="EX,N"; \ title="Table 5.2: Database Backends" Types Description bdb Berkeley DB transactional backend config Slapd configuration backend dnssrv DNS SRV backend hdb Hierarchical variant of bdb backend ldap Lightweight Directory Access Protocol (Proxy) backend ldif Lightweight Data Interchange Format backend meta Meta Directory backend monitor Monitor backend passwd Provides read-only access to {{passwd}}(5) perl Perl Programmable backend shell Shell (extern program) backend sql SQL Programmable backend !endblock \Example: > olcBackend: bdb There are no other directives defined for this entry. Specific backend types may define additional attributes for their particular use but so far none have ever been defined. As such, these directives usually do not appear in any actual configurations. H4: Sample Entry > dn: olcBackend=bdb,cn=config > objectClass: olcBackendConfig > olcBackend: bdb H3: Database-specific Directives Directives in this section are supported by every type of database. Database entries must have the {{EX:olcDatabaseConfig}} objectClass. H4: olcDatabase: [{}] This directive names a specific database instance. The numeric {} may be provided to distinguish multiple databases of the same type. Usually the index can be omitted, and slapd will generate it automatically. {{EX:}} should be one of the supported backend types listed in Table 5.2 or the {{EX:frontend}} type. The {{EX:frontend}} is a special database that is used to hold database-level options that should be applied to all the other databases. Subsequent database definitions may also override some frontend settings. The {{EX:config}} database is also special; both the {{EX:config}} and the {{EX:frontend}} databases are always created implicitly even if they are not explicitly configured, and they are created before any other databases. \Example: > olcDatabase: bdb This marks the beginning of a new {{TERM:BDB}} database instance. H4: olcAccess: to [ by [] [] ]+ This directive grants access (specified by ) to a set of entries and/or attributes (specified by ) by one or more requestors (specified by ). See the {{SECT:Access Control}} section of this guide for basic usage. !if 0 More detailed discussion of this directive can be found in the {{SECT:Advanced Access Control}} chapter. !endif Note: If no {{EX:olcAccess}} directives are specified, the default access control policy, {{EX:to * by * read}}, allows all users (both authenticated and anonymous) read access. Note: Access controls defined in the frontend are appended to all other databases' controls. H4: olcReadonly { TRUE | FALSE } This directive puts the database into "read-only" mode. Any attempts to modify the database will return an "unwilling to perform" error. \Default: > olcReadonly: FALSE H4: olcRootDN: This directive specifies the DN that is not subject to access control or administrative limit restrictions for operations on this database. The DN need not refer to an entry in this database or even in the directory. The DN may refer to a SASL identity. Entry-based Example: > olcRootDN: "cn=Manager,dc=example,dc=com" SASL-based Example: > olcRootDN: "uid=root,cn=example.com,cn=digest-md5,cn=auth" See the {{SECT:SASL Authentication}} section for information on SASL authentication identities. H4: olcRootPW: This directive can be used to specify a password for the DN for the rootdn (when the rootdn is set to a DN within the database). \Example: > olcRootPW: secret It is also permissible to provide a hash of the password in {{REF:RFC2307}} form. {{slappasswd}}(8) may be used to generate the password hash. \Example: > olcRootPW: {SSHA}ZKKuqbEKJfKSXhUbHG3fG8MDn9j1v4QN The hash was generated using the command {{EX:slappasswd -s secret}}. H4: olcSizeLimit: This directive specifies the maximum number of entries to return from a search operation. \Default: > olcSizeLimit: 500 H4: olcSuffix: This directive specifies the DN suffix of queries that will be passed to this backend database. Multiple suffix lines can be given, and usually at least one is required for each database definition. (Some backend types, such as {{EX:frontend}} and {{EX:monitor}} use a hard-coded suffix which may not be overridden in the configuration.) \Example: > olcSuffix: "dc=example,dc=com" Queries with a DN ending in "dc=example,dc=com" will be passed to this backend. Note: When the backend to pass a query to is selected, slapd looks at the suffix value(s) in each database definition in the order in which they were configured. Thus, if one database suffix is a prefix of another, it must appear after it in the configuration. H4: olcSyncrepl > olcSyncrepl: rid= > provider=ldap[s]://[:port] > [type=refreshOnly|refreshAndPersist] > [interval=dd:hh:mm:ss] > [retry=[ <# of retries>]+] > searchbase= > [filter=] > [scope=sub|one|base] > [attrs=] > [attrsonly] > [sizelimit=] > [timelimit=] > [schemachecking=on|off] > [bindmethod=simple|sasl] > [binddn=] > [saslmech=] > [authcid=] > [authzid=] > [credentials=] > [realm=] > [secprops=] > [starttls=yes|critical] > [tls_cert=] > [tls_key=] > [tls_cacert=] > [tls_cacertdir=] > [tls_reqcert=never|allow|try|demand] > [tls_ciphersuite=] > [tls_crlcheck=none|peer|all] > [logbase=] > [logfilter=] > [syncdata=default|accesslog|changelog] This directive specifies the current database as a replica of the master content by establishing the current {{slapd}}(8) as a replication consumer site running a syncrepl replication engine. The master database is located at the replication provider site specified by the {{EX:provider}} parameter. The replica database is kept up-to-date with the master content using the LDAP Content Synchronization protocol. See {{REF:RFC4533}} for more information on the protocol. The {{EX:rid}} parameter is used for identification of the current {{EX:syncrepl}} directive within the replication consumer server, where {{EX:}} uniquely identifies the syncrepl specification described by the current {{EX:syncrepl}} directive. {{EX:}} is non-negative and is no more than three decimal digits in length. The {{EX:provider}} parameter specifies the replication provider site containing the master content as an LDAP URI. The {{EX:provider}} parameter specifies a scheme, a host and optionally a port where the provider slapd instance can be found. Either a domain name or IP address may be used for . Examples are {{EX:ldap://provider.example.com:389}} or {{EX:ldaps://192.168.1.1:636}}. If is not given, the standard LDAP port number (389 or 636) is used. Note that the syncrepl uses a consumer-initiated protocol, and hence its specification is located at the consumer site, whereas the {{EX:replica}} specification is located at the provider site. {{EX:syncrepl}} and {{EX:replica}} directives define two independent replication mechanisms. They do not represent the replication peers of each other. The content of the syncrepl replica is defined using a search specification as its result set. The consumer slapd will send search requests to the provider slapd according to the search specification. The search specification includes {{EX:searchbase}}, {{EX:scope}}, {{EX:filter}}, {{EX:attrs}}, {{EX:attrsonly}}, {{EX:sizelimit}}, and {{EX:timelimit}} parameters as in the normal search specification. The {{EX:searchbase}} parameter has no default value and must always be specified. The {{EX:scope}} defaults to {{EX:sub}}, the {{EX:filter}} defaults to {{EX:(objectclass=*)}}, {{EX:attrs}} defaults to {{EX:"*,+"}} to replicate all user and operational attributes, and {{EX:attrsonly}} is unset by default. Both {{EX:sizelimit}} and {{EX:timelimit}} default to "unlimited", and only positive integers or "unlimited" may be specified. The {{TERM[expand]LDAP Sync}} protocol has two operation types: {{EX:refreshOnly}} and {{EX:refreshAndPersist}}. The operation type is specified by the {{EX:type}} parameter. In the {{EX:refreshOnly}} operation, the next synchronization search operation is periodically rescheduled at an interval time after each synchronization operation finishes. The interval is specified by the {{EX:interval}} parameter. It is set to one day by default. In the {{EX:refreshAndPersist}} operation, a synchronization search remains persistent in the provider {{slapd}} instance. Further updates to the master replica will generate {{EX:searchResultEntry}} to the consumer slapd as the search responses to the persistent synchronization search. If an error occurs during replication, the consumer will attempt to reconnect according to the retry parameter which is a list of the and <# of retries> pairs. For example, retry="60 10 300 3" lets the consumer retry every 60 seconds for the first 10 times and then retry every 300 seconds for the next three times before stop retrying. + in <# of retries> means indefinite number of retries until success. The schema checking can be enforced at the LDAP Sync consumer site by turning on the {{EX:schemachecking}} parameter. If it is turned on, every replicated entry will be checked for its schema as the entry is stored into the replica content. Every entry in the replica should contain those attributes required by the schema definition. If it is turned off, entries will be stored without checking schema conformance. The default is off. The {{EX:binddn}} parameter gives the DN to bind as for the syncrepl searches to the provider slapd. It should be a DN which has read access to the replication content in the master database. The {{EX:bindmethod}} is {{EX:simple}} or {{EX:sasl}}, depending on whether simple password-based authentication or {{TERM:SASL}} authentication is to be used when connecting to the provider {{slapd}} instance. Simple authentication should not be used unless adequate data integrity and confidentiality protections are in place (e.g. TLS or IPsec). Simple authentication requires specification of {{EX:binddn}} and {{EX:credentials}} parameters. SASL authentication is generally recommended. SASL authentication requires specification of a mechanism using the {{EX:saslmech}} parameter. Depending on the mechanism, an authentication identity and/or credentials can be specified using {{EX:authcid}} and {{EX:credentials}}, respectively. The {{EX:authzid}} parameter may be used to specify an authorization identity. The {{EX:realm}} parameter specifies a realm which a certain mechanisms authenticate the identity within. The {{EX:secprops}} parameter specifies Cyrus SASL security properties. The {{EX:starttls}} parameter specifies use of the StartTLS extended operation to establish a TLS session before authenticating to the provider. If the {{EX:critical}} argument is supplied, the session will be aborted if the StartTLS request fails. Otherwise the syncrepl session continues without TLS. Note that the main slapd TLS settings are not used by the syncrepl engine; by default the TLS parameters from a {{ldap.conf}}(5) configuration file will be used. TLS settings may be specified here, in which case any {{ldap.conf}}(5) settings will be completely ignored. Rather than replicating whole entries, the consumer can query logs of data modifications. This mode of operation is referred to as {{delta syncrepl}}. In addition to the above parameters, the {{EX:logbase}} and {{EX:logfilter}} parameters must be set appropriately for the log that will be used. The {{EX:syncdata}} parameter must be set to either {{EX:"accesslog"}} if the log conforms to the {{slapo-accesslog}}(5) log format, or {{EX:"changelog"}} if the log conforms to the obsolete {{changelog}} format. If the {{EX:syncdata}} parameter is omitted or set to {{EX:"default"}} then the log parameters are ignored. The {{syncrepl}} replication mechanism is supported by the {{bdb}} and {{hdb}} backends. See the {{SECT:LDAP Sync Replication}} chapter of this guide for more information on how to use this directive. H4: olcTimeLimit: This directive specifies the maximum number of seconds (in real time) slapd will spend answering a search request. If a request is not finished in this time, a result indicating an exceeded timelimit will be returned. \Default: > olcTimeLimit: 3600 H4: olcUpdateref: This directive is only applicable in a slave slapd. It specifies the URL to return to clients which submit update requests upon the replica. If specified multiple times, each {{TERM:URL}} is provided. \Example: > olcUpdateref: ldap://master.example.net H4: Sample Entries >dn: olcDatabase=frontend,cn=config >objectClass: olcDatabaseConfig >objectClass: olcFrontendConfig >olcDatabase: frontend >olcReadOnly: FALSE > >dn: olcDatabase=config,cn=config >objectClass: olcDatabaseConfig >olcDatabase: config >olcRootDN: cn=Manager,dc=example,dc=com H3: BDB and HDB Database Directives Directives in this category apply to both the {{TERM:BDB}} and the {{TERM:HDB}} database. They are used in an olcDatabase entry in addition to the generic database directives defined above. For a complete reference of BDB/HDB configuration directives, see {{slapd-bdb}}(5). In addition to the {{EX:olcDatabaseConfig}} objectClass, BDB and HDB database entries must have the {{EX:olcBdbConfig}} and {{EX:olcHdbConfig}} objectClass, respectively. H4: olcDbDirectory: This directive specifies the directory where the BDB files containing the database and associated indices live. \Default: > olcDbDirectory: /usr/local/var/openldap-data H4: olcDbCachesize: This directive specifies the size in entries of the in-memory cache maintained by the BDB backend database instance. \Default: > olcDbCachesize: 1000 H4: olcDbCheckpoint: This directive specifies how often to checkpoint the BDB transaction log. A checkpoint operation flushes the database buffers to disk and writes a checkpoint record in the log. The checkpoint will occur if either data has been written or minutes have passed since the last checkpoint. Both arguments default to zero, in which case they are ignored. When the argument is non-zero, an internal task will run every minutes to perform the checkpoint. See the Berkeley DB reference guide for more details. \Example: > olcDbCheckpoint: 1024 10 H4: olcDbConfig: This attribute specifies a configuration directive to be placed in the {{EX:DB_CONFIG}} file of the database directory. At server startup time, if no such file exists yet, the {{EX:DB_CONFIG}} file will be created and the settings in this attribute will be written to it. If the file exists, its contents will be read and displayed in this attribute. The attribute is multi-valued, to accommodate multiple configuration directives. No default is provided, but it is essential to use proper settings here to get the best server performance. Any changes made to this attribute will be written to the {{EX:DB_CONFIG}} file and will cause the database environment to be reset so the changes can take immediate effect. If the environment cache is large and has not been recently checkpointed, this reset operation may take a long time. It may be advisable to manually perform a single checkpoint using the Berkeley DB {{db_checkpoint}} utility before using LDAP Modify to change this attribute. \Example: > olcDbConfig: set_cachesize 0 10485760 0 > olcDbConfig: set_lg_bsize 2097512 > olcDbConfig: set_lg_dir /var/tmp/bdb-log > olcDbConfig: set_flags DB_LOG_AUTOREMOVE In this example, the BDB cache is set to 10MB, the BDB transaction log buffer size is set to 2MB, and the transaction log files are to be stored in the /var/tmp/bdb-log directory. Also a flag is set to tell BDB to delete transaction log files as soon as their contents have been checkpointed and they are no longer needed. Without this setting the transaction log files will continue to accumulate until some other cleanup procedure removes them. See the Berkeley DB documentation for the {{EX:db_archive}} command for details. For a complete list of Berkeley DB flags please see - {{URL:http://www.oracle.com/technology/documentation/berkeley-db/db/api_c/env_set_flags.html}} Ideally the BDB cache must be at least as large as the working set of the database, the log buffer size should be large enough to accommodate most transactions without overflowing, and the log directory must be on a separate physical disk from the main database files. And both the database directory and the log directory should be separate from disks used for regular system activities such as the root, boot, or swap filesystems. See the FAQ-o-Matic and the Berkeley DB documentation for more details. H4: olcDbNosync: { TRUE | FALSE } This option causes on-disk database contents to not be immediately synchronized with in memory changes upon change. Setting this option to {{EX:TRUE}} may improve performance at the expense of data integrity. This directive has the same effect as using > olcDbConfig: set_flags DB_TXN_NOSYNC H4: olcDbIDLcacheSize: Specify the size of the in-memory index cache, in index slots. The default is zero. A larger value will speed up frequent searches of indexed entries. The optimal size will depend on the data and search characteristics of the database, but using a number three times the entry cache size is a good starting point. \Example: > olcDbIDLcacheSize: 3000 H4: olcDbIndex: { | default} [pres,eq,approx,sub,none] This directive specifies the indices to maintain for the given attribute. If only an {{EX:}} is given, the default indices are maintained. The index keywords correspond to the common types of matches that may be used in an LDAP search filter. \Example: > olcDbIndex: default pres,eq > olcDbIndex: uid > olcDbIndex: cn,sn pres,eq,sub > olcDbIndex: objectClass eq The first line sets the default set of indices to maintain to present and equality. The second line causes the default (pres,eq) set of indices to be maintained for the {{EX:uid}} attribute type. The third line causes present, equality, and substring indices to be maintained for {{EX:cn}} and {{EX:sn}} attribute types. The fourth line causes an equality index for the {{EX:objectClass}} attribute type. There is no index keyword for inequality matches. Generally these matches do not use an index. However, some attributes do support indexing for inequality matches, based on the equality index. A substring index can be more explicitly specified as {{EX:subinitial}}, {{EX:subany}}, or {{EX:subfinal}}, corresponding to the three possible components of a substring match filter. A subinitial index only indexes substrings that appear at the beginning of an attribute value. A subfinal index only indexes substrings that appear at the end of an attribute value, while subany indexes substrings that occur anywhere in a value. Note that by default, setting an index for an attribute also affects every subtype of that attribute. E.g., setting an equality index on the {{EX:name}} attribute causes {{EX:cn}}, {{EX:sn}}, and every other attribute that inherits from {{EX:name}} to be indexed. By default, no indices are maintained. It is generally advised that minimally an equality index upon objectClass be maintained. > olcDbindex: objectClass eq Additional indices should be configured corresponding to the most common searches that are used on the database. Presence indexing should not be configured for an attribute unless the attribute occurs very rarely in the database, and presence searches on the attribute occur very frequently during normal use of the directory. Most applications don't use presence searches, so usually presence indexing is not very useful. If this setting is changed while slapd is running, an internal task will be run to generate the changed index data. All server operations can continue as normal while the indexer does its work. If slapd is stopped before the index task completes, indexing will have to be manually completed using the slapindex tool. H4: olcDbLinearIndex: { TRUE | FALSE } If this setting is {{EX:TRUE}} slapindex will index one attribute at a time. The default settings is {{EX:FALSE}} in which case all indexed attributes of an entry are processed at the same time. When enabled, each indexed attribute is processed individually, using multiple passes through the entire database. This option improves slapindex performance when the database size exceeds the BDB cache size. When the BDB cache is large enough, this option is not needed and will decrease performance. Also by default, slapadd performs full indexing and so a separate slapindex run is not needed. With this option, slapadd does no indexing and slapindex must be used. H4: olcDbMode: This directive specifies the file protection mode that newly created database index files should have. \Default: > olcDbMode: 0600 H4: olcDbSearchStack: Specify the depth of the stack used for search filter evaluation. Search filters are evaluated on a stack to accommodate nested {{EX:AND}} / {{EX:OR}} clauses. An individual stack is allocated for each server thread. The depth of the stack determines how complex a filter can be evaluated without requiring any additional memory allocation. Filters that are nested deeper than the search stack depth will cause a separate stack to be allocated for that particular search operation. These separate allocations can have a major negative impact on server performance, but specifying too much stack will also consume a great deal of memory. Each search uses 512K bytes per level on a 32-bit machine, or 1024K bytes per level on a 64-bit machine. The default stack depth is 16, thus 8MB or 16MB per thread is used on 32 and 64 bit machines, respectively. Also the 512KB size of a single stack slot is set by a compile-time constant which may be changed if needed; the code must be recompiled for the change to take effect. \Default: > olcDbSearchStack: 16 H4: olcDbShmKey: Specify a key for a shared memory BDB environment. By default the BDB environment uses memory mapped files. If a non-zero value is specified, it will be used as the key to identify a shared memory region that will house the environment. \Example: > olcDbShmKey: 42 H4: Sample Entry >dn: olcDatabase=hdb,cn=config >objectClass: olcDatabaseConfig >objectClass: olcHdbConfig >olcDatabase: hdb >olcSuffix: "dc=example,dc=com" >olcDbDirectory: /usr/local/var/openldap-data >olcDbCacheSize: 1000 >olcDbCheckpoint: 1024 10 >olcDbConfig: set_cachesize 0 10485760 0 >olcDbConfig: set_lg_bsize 2097152 >olcDbConfig: set_lg_dir /var/tmp/bdb-log >olcDbConfig: set_flags DB_LOG_AUTOREMOVE >olcDbIDLcacheSize: 3000 >olcDbIndex: objectClass eq @ 1.1.1.1.2.1 log @file slapdconf2.sdf was added on branch yamt-pf42 on 2008-06-04 02:03:44 +0000 @ text @d1 948 @ 1.1.1.1.2.2 log @sync with head @ text @a0 948 # $OpenLDAP: pkg/openldap-guide/admin/slapdconf2.sdf,v 1.20.2.12 2008/04/14 22:37:01 quanah Exp $ # Copyright 2005-2008 The OpenLDAP Foundation, All Rights Reserved. # COPYING RESTRICTIONS APPLY, see COPYRIGHT. H1: Configuring slapd Once the software has been built and installed, you are ready to configure {{slapd}}(8) for use at your site. Unlike previous OpenLDAP releases, the slapd(8) runtime configuration in 2.3 (and later) is fully LDAP-enabled and can be managed using the standard LDAP operations with data in {{TERM:LDIF}}. The LDAP configuration engine allows all of slapd's configuration options to be changed on the fly, generally without requiring a server restart for the changes to take effect. The old style {{slapd.conf}}(5) file is still supported, but must be converted to the new {{slapd-config}}(5) format to allow runtime changes to be saved. While the old style configuration uses a single file, normally installed as {{F:/usr/local/etc/openldap/slapd.conf}}, the new style uses a slapd backend database to store the configuration. The configuration database normally resides in the {{F:/usr/local/etc/openldap/slapd.d}} directory. When converting from the slapd.conf format to slapd.d format, any include files will also be integrated into the resulting configuration database. An alternate configuration directory (or file) can be specified via a command-line option to {{slapd}}(8). This chapter describes the general format of the configuration system, followed by a detailed description of commonly used config settings. Note: some of the backends and of the distributed overlays do not support runtime configuration yet. In those cases, the old style {{slapd.conf}}(5) file must be used. H2: Configuration Layout The slapd configuration is stored as a special LDAP directory with a predefined schema and DIT. There are specific objectClasses used to carry global configuration options, schema definitions, backend and database definitions, and assorted other items. A sample config tree is shown in Figure 5.1. !import "config_dit.png"; align="center"; title="Sample configuration tree" FT[align="Center"] Figure 5.1: Sample configuration tree. Other objects may be part of the configuration but were omitted from the illustration for clarity. The {{slapd-config}} configuration tree has a very specific structure. The root of the tree is named {{EX:cn=config}} and contains global configuration settings. Additional settings are contained in separate child entries: * Dynamically loaded modules .. These may only be used if the {{EX:--enable-modules}} option was used to configure the software. * Schema definitions .. The {{EX:cn=schema,cn=config}} entry contains the system schema (all the schema that is hard-coded in slapd). .. Child entries of {{EX:cn=schema,cn=config}} contain user schema as loaded from config files or added at runtime. * Backend-specific configuration * Database-specific configuration .. Overlays are defined in children of the Database entry. .. Databases and Overlays may also have other miscellaneous children. The usual rules for LDIF files apply to the configuration information: Comment lines beginning with a '{{EX:#}}' character are ignored. If a line begins with a single space, it is considered a continuation of the previous line (even if the previous line is a comment) and the single leading space is removed. Entries are separated by blank lines. The general layout of the config LDIF is as follows: > # global configuration settings > dn: cn=config > objectClass: olcGlobal > cn: config > > > # schema definitions > dn: cn=schema,cn=config > objectClass: olcSchemaConfig > cn: schema > > > dn: cn={X}core,cn=schema,cn=config > objectClass: olcSchemaConfig > cn: {X}core > > > # additional user-specified schema > ... > > # backend definitions > dn: olcBackend=,cn=config > objectClass: olcBackendConfig > olcBackend: > > > # database definitions > dn: olcDatabase={X},cn=config > objectClass: olcDatabaseConfig > olcDatabase: {X} > > > # subsequent definitions and settings > ... Some of the entries listed above have a numeric index {{EX:"{X}"}} in their names. While most configuration settings have an inherent ordering dependency (i.e., one setting must take effect before a subsequent one may be set), LDAP databases are inherently unordered. The numeric index is used to enforce a consistent ordering in the configuration database, so that all ordering dependencies are preserved. In most cases the index does not have to be provided; it will be automatically generated based on the order in which entries are created. Configuration directives are specified as values of individual attributes. Most of the attributes and objectClasses used in the slapd configuration have a prefix of {{EX:"olc"}} (OpenLDAP Configuration) in their names. Generally there is a one-to-one correspondence between the attributes and the old-style {{EX:slapd.conf}} configuration keywords, using the keyword as the attribute name, with the "olc" prefix attached. A configuration directive may take arguments. If so, the arguments are separated by white space. If an argument contains white space, the argument should be enclosed in double quotes {{EX:"like this"}}. In the descriptions that follow, arguments that should be replaced by actual text are shown in brackets {{EX:<>}}. The distribution contains an example configuration file that will be installed in the {{F: /usr/local/etc/openldap}} directory. A number of files containing schema definitions (attribute types and object classes) are also provided in the {{F: /usr/local/etc/openldap/schema}} directory. H2: Configuration Directives This section details commonly used configuration directives. For a complete list, see the {{slapd-config}}(5) manual page. This section will treat the configuration directives in a top-down order, starting with the global directives in the {{EX:cn=config}} entry. Each directive will be described along with its default value (if any) and an example of its use. H3: cn=config Directives contained in this entry generally apply to the server as a whole. Most of them are system or connection oriented, not database related. This entry must have the {{EX:olcGlobal}} objectClass. H4: olcIdleTimeout: Specify the number of seconds to wait before forcibly closing an idle client connection. A value of 0, the default, disables this feature. H4: olcLogLevel: This directive specifies the level at which debugging statements and operation statistics should be syslogged (currently logged to the {{syslogd}}(8) {{EX:LOG_LOCAL4}} facility). You must have configured OpenLDAP {{EX:--enable-debug}} (the default) for this to work (except for the two statistics levels, which are always enabled). Log levels may be specified as integers or by keyword. Multiple log levels may be used and the levels are additive. To display what levels correspond to what kind of debugging, invoke slapd with {{EX:-?}} or consult the table below. The possible values for are: !block table; colaligns="RL"; align=Center; \ title="Table 5.1: Debugging Levels" Level Keyword Description -1 Any enable all debugging 0 no debugging 1 Trace trace function calls 2 Packets debug packet handling 4 Args heavy trace debugging 8 Conns connection management 16 BER print out packets sent and received 32 Filter search filter processing 64 Config configuration processing 128 ACL access control list processing 256 Stats stats log connections/operations/results 512 Stats2 stats log entries sent 1024 Shell print communication with shell backends 2048 Parse print entry parsing debugging 4096 Cache database cache processing 8192 Index database indexing 16384 Sync syncrepl consumer processing !endblock \Example: E: olcLogLevel: -1 This will cause lots and lots of debugging information to be logged. E: olcLogLevel: Conns Filter Just log the connection and search filter processing. \Default: E: olcLogLevel: Stats H4: olcReferral This directive specifies the referral to pass back when slapd cannot find a local database to handle a request. \Example: > olcReferral: ldap://root.openldap.org This will refer non-local queries to the global root LDAP server at the OpenLDAP Project. Smart LDAP clients can re-ask their query at that server, but note that most of these clients are only going to know how to handle simple LDAP URLs that contain a host part and optionally a distinguished name part. H4: Sample Entry >dn: cn=config >objectClass: olcGlobal >cn: config >olcIdleTimeout: 30 >olcLogLevel: Stats >olcReferral: ldap://root.openldap.org H3: cn=module If support for dynamically loaded modules was enabled when configuring slapd, {{EX:cn=module}} entries may be used to specify sets of modules to load. Module entries must have the {{EX:olcModuleList}} objectClass. H4: olcModuleLoad: Specify the name of a dynamically loadable module to load. The filename may be an absolute path name or a simple filename. Non-absolute names are searched for in the directories specified by the {{EX:olcModulePath}} directive. H4: olcModulePath: Specify a list of directories to search for loadable modules. Typically the path is colon-separated but this depends on the operating system. H4: Sample Entries >dn: cn=module{0},cn=config >objectClass: olcModuleList >cn: module{0} >olcModuleLoad: /usr/local/lib/smbk5pwd.la > >dn: cn=module{1},cn=config >objectClass: olcModuleList >cn: module{1} >olcModulePath: /usr/local/lib:/usr/local/lib/slapd >olcModuleLoad: accesslog.la >olcModuleLoad: pcache.la H3: cn=schema The cn=schema entry holds all of the schema definitions that are hard-coded in slapd. As such, the values in this entry are generated by slapd so no schema values need to be provided in the config file. The entry must still be defined though, to serve as a base for the user-defined schema to add in underneath. Schema entries must have the {{EX:olcSchemaConfig}} objectClass. H4: olcAttributeTypes: <{{REF:RFC4512}} Attribute Type Description> This directive defines an attribute type. Please see the {{SECT:Schema Specification}} chapter for information regarding how to use this directive. H4: olcObjectClasses: <{{REF:RFC4512}} Object Class Description> This directive defines an object class. Please see the {{SECT:Schema Specification}} chapter for information regarding how to use this directive. H4: Sample Entries >dn: cn=schema,cn=config >objectClass: olcSchemaConfig >cn: schema > >dn: cn=test,cn=schema,cn=config >objectClass: olcSchemaConfig >cn: test >olcAttributeTypes: ( 1.1.1 > NAME 'testAttr' > EQUALITY integerMatch > SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 ) >olcAttributeTypes: ( 1.1.2 NAME 'testTwo' EQUALITY caseIgnoreMatch > SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 ) >olcObjectClasses: ( 1.1.3 NAME 'testObject' > MAY ( testAttr $ testTwo ) AUXILIARY ) H3: Backend-specific Directives Backend directives apply to all database instances of the same type and, depending on the directive, may be overridden by database directives. Backend entries must have the {{EX:olcBackendConfig}} objectClass. H4: olcBackend: This directive names a backend-specific configuration entry. {{EX:}} should be one of the supported backend types listed in Table 5.2. !block table; align=Center; coltags="EX,N"; \ title="Table 5.2: Database Backends" Types Description bdb Berkeley DB transactional backend config Slapd configuration backend dnssrv DNS SRV backend hdb Hierarchical variant of bdb backend ldap Lightweight Directory Access Protocol (Proxy) backend ldif Lightweight Data Interchange Format backend meta Meta Directory backend monitor Monitor backend passwd Provides read-only access to {{passwd}}(5) perl Perl Programmable backend shell Shell (extern program) backend sql SQL Programmable backend !endblock \Example: > olcBackend: bdb There are no other directives defined for this entry. Specific backend types may define additional attributes for their particular use but so far none have ever been defined. As such, these directives usually do not appear in any actual configurations. H4: Sample Entry > dn: olcBackend=bdb,cn=config > objectClass: olcBackendConfig > olcBackend: bdb H3: Database-specific Directives Directives in this section are supported by every type of database. Database entries must have the {{EX:olcDatabaseConfig}} objectClass. H4: olcDatabase: [{}] This directive names a specific database instance. The numeric {} may be provided to distinguish multiple databases of the same type. Usually the index can be omitted, and slapd will generate it automatically. {{EX:}} should be one of the supported backend types listed in Table 5.2 or the {{EX:frontend}} type. The {{EX:frontend}} is a special database that is used to hold database-level options that should be applied to all the other databases. Subsequent database definitions may also override some frontend settings. The {{EX:config}} database is also special; both the {{EX:config}} and the {{EX:frontend}} databases are always created implicitly even if they are not explicitly configured, and they are created before any other databases. \Example: > olcDatabase: bdb This marks the beginning of a new {{TERM:BDB}} database instance. H4: olcAccess: to [ by [] [] ]+ This directive grants access (specified by ) to a set of entries and/or attributes (specified by ) by one or more requestors (specified by ). See the {{SECT:Access Control}} section of this guide for basic usage. !if 0 More detailed discussion of this directive can be found in the {{SECT:Advanced Access Control}} chapter. !endif Note: If no {{EX:olcAccess}} directives are specified, the default access control policy, {{EX:to * by * read}}, allows all users (both authenticated and anonymous) read access. Note: Access controls defined in the frontend are appended to all other databases' controls. H4: olcReadonly { TRUE | FALSE } This directive puts the database into "read-only" mode. Any attempts to modify the database will return an "unwilling to perform" error. \Default: > olcReadonly: FALSE H4: olcRootDN: This directive specifies the DN that is not subject to access control or administrative limit restrictions for operations on this database. The DN need not refer to an entry in this database or even in the directory. The DN may refer to a SASL identity. Entry-based Example: > olcRootDN: "cn=Manager,dc=example,dc=com" SASL-based Example: > olcRootDN: "uid=root,cn=example.com,cn=digest-md5,cn=auth" See the {{SECT:SASL Authentication}} section for information on SASL authentication identities. H4: olcRootPW: This directive can be used to specify a password for the DN for the rootdn (when the rootdn is set to a DN within the database). \Example: > olcRootPW: secret It is also permissible to provide a hash of the password in {{REF:RFC2307}} form. {{slappasswd}}(8) may be used to generate the password hash. \Example: > olcRootPW: {SSHA}ZKKuqbEKJfKSXhUbHG3fG8MDn9j1v4QN The hash was generated using the command {{EX:slappasswd -s secret}}. H4: olcSizeLimit: This directive specifies the maximum number of entries to return from a search operation. \Default: > olcSizeLimit: 500 H4: olcSuffix: This directive specifies the DN suffix of queries that will be passed to this backend database. Multiple suffix lines can be given, and usually at least one is required for each database definition. (Some backend types, such as {{EX:frontend}} and {{EX:monitor}} use a hard-coded suffix which may not be overridden in the configuration.) \Example: > olcSuffix: "dc=example,dc=com" Queries with a DN ending in "dc=example,dc=com" will be passed to this backend. Note: When the backend to pass a query to is selected, slapd looks at the suffix value(s) in each database definition in the order in which they were configured. Thus, if one database suffix is a prefix of another, it must appear after it in the configuration. H4: olcSyncrepl > olcSyncrepl: rid= > provider=ldap[s]://[:port] > [type=refreshOnly|refreshAndPersist] > [interval=dd:hh:mm:ss] > [retry=[ <# of retries>]+] > searchbase= > [filter=] > [scope=sub|one|base] > [attrs=] > [attrsonly] > [sizelimit=] > [timelimit=] > [schemachecking=on|off] > [bindmethod=simple|sasl] > [binddn=] > [saslmech=] > [authcid=] > [authzid=] > [credentials=] > [realm=] > [secprops=] > [starttls=yes|critical] > [tls_cert=] > [tls_key=] > [tls_cacert=] > [tls_cacertdir=] > [tls_reqcert=never|allow|try|demand] > [tls_ciphersuite=] > [tls_crlcheck=none|peer|all] > [logbase=] > [logfilter=] > [syncdata=default|accesslog|changelog] This directive specifies the current database as a replica of the master content by establishing the current {{slapd}}(8) as a replication consumer site running a syncrepl replication engine. The master database is located at the replication provider site specified by the {{EX:provider}} parameter. The replica database is kept up-to-date with the master content using the LDAP Content Synchronization protocol. See {{REF:RFC4533}} for more information on the protocol. The {{EX:rid}} parameter is used for identification of the current {{EX:syncrepl}} directive within the replication consumer server, where {{EX:}} uniquely identifies the syncrepl specification described by the current {{EX:syncrepl}} directive. {{EX:}} is non-negative and is no more than three decimal digits in length. The {{EX:provider}} parameter specifies the replication provider site containing the master content as an LDAP URI. The {{EX:provider}} parameter specifies a scheme, a host and optionally a port where the provider slapd instance can be found. Either a domain name or IP address may be used for . Examples are {{EX:ldap://provider.example.com:389}} or {{EX:ldaps://192.168.1.1:636}}. If is not given, the standard LDAP port number (389 or 636) is used. Note that the syncrepl uses a consumer-initiated protocol, and hence its specification is located at the consumer site, whereas the {{EX:replica}} specification is located at the provider site. {{EX:syncrepl}} and {{EX:replica}} directives define two independent replication mechanisms. They do not represent the replication peers of each other. The content of the syncrepl replica is defined using a search specification as its result set. The consumer slapd will send search requests to the provider slapd according to the search specification. The search specification includes {{EX:searchbase}}, {{EX:scope}}, {{EX:filter}}, {{EX:attrs}}, {{EX:attrsonly}}, {{EX:sizelimit}}, and {{EX:timelimit}} parameters as in the normal search specification. The {{EX:searchbase}} parameter has no default value and must always be specified. The {{EX:scope}} defaults to {{EX:sub}}, the {{EX:filter}} defaults to {{EX:(objectclass=*)}}, {{EX:attrs}} defaults to {{EX:"*,+"}} to replicate all user and operational attributes, and {{EX:attrsonly}} is unset by default. Both {{EX:sizelimit}} and {{EX:timelimit}} default to "unlimited", and only positive integers or "unlimited" may be specified. The {{TERM[expand]LDAP Sync}} protocol has two operation types: {{EX:refreshOnly}} and {{EX:refreshAndPersist}}. The operation type is specified by the {{EX:type}} parameter. In the {{EX:refreshOnly}} operation, the next synchronization search operation is periodically rescheduled at an interval time after each synchronization operation finishes. The interval is specified by the {{EX:interval}} parameter. It is set to one day by default. In the {{EX:refreshAndPersist}} operation, a synchronization search remains persistent in the provider {{slapd}} instance. Further updates to the master replica will generate {{EX:searchResultEntry}} to the consumer slapd as the search responses to the persistent synchronization search. If an error occurs during replication, the consumer will attempt to reconnect according to the retry parameter which is a list of the and <# of retries> pairs. For example, retry="60 10 300 3" lets the consumer retry every 60 seconds for the first 10 times and then retry every 300 seconds for the next three times before stop retrying. + in <# of retries> means indefinite number of retries until success. The schema checking can be enforced at the LDAP Sync consumer site by turning on the {{EX:schemachecking}} parameter. If it is turned on, every replicated entry will be checked for its schema as the entry is stored into the replica content. Every entry in the replica should contain those attributes required by the schema definition. If it is turned off, entries will be stored without checking schema conformance. The default is off. The {{EX:binddn}} parameter gives the DN to bind as for the syncrepl searches to the provider slapd. It should be a DN which has read access to the replication content in the master database. The {{EX:bindmethod}} is {{EX:simple}} or {{EX:sasl}}, depending on whether simple password-based authentication or {{TERM:SASL}} authentication is to be used when connecting to the provider {{slapd}} instance. Simple authentication should not be used unless adequate data integrity and confidentiality protections are in place (e.g. TLS or IPsec). Simple authentication requires specification of {{EX:binddn}} and {{EX:credentials}} parameters. SASL authentication is generally recommended. SASL authentication requires specification of a mechanism using the {{EX:saslmech}} parameter. Depending on the mechanism, an authentication identity and/or credentials can be specified using {{EX:authcid}} and {{EX:credentials}}, respectively. The {{EX:authzid}} parameter may be used to specify an authorization identity. The {{EX:realm}} parameter specifies a realm which a certain mechanisms authenticate the identity within. The {{EX:secprops}} parameter specifies Cyrus SASL security properties. The {{EX:starttls}} parameter specifies use of the StartTLS extended operation to establish a TLS session before authenticating to the provider. If the {{EX:critical}} argument is supplied, the session will be aborted if the StartTLS request fails. Otherwise the syncrepl session continues without TLS. Note that the main slapd TLS settings are not used by the syncrepl engine; by default the TLS parameters from a {{ldap.conf}}(5) configuration file will be used. TLS settings may be specified here, in which case any {{ldap.conf}}(5) settings will be completely ignored. Rather than replicating whole entries, the consumer can query logs of data modifications. This mode of operation is referred to as {{delta syncrepl}}. In addition to the above parameters, the {{EX:logbase}} and {{EX:logfilter}} parameters must be set appropriately for the log that will be used. The {{EX:syncdata}} parameter must be set to either {{EX:"accesslog"}} if the log conforms to the {{slapo-accesslog}}(5) log format, or {{EX:"changelog"}} if the log conforms to the obsolete {{changelog}} format. If the {{EX:syncdata}} parameter is omitted or set to {{EX:"default"}} then the log parameters are ignored. The {{syncrepl}} replication mechanism is supported by the {{bdb}} and {{hdb}} backends. See the {{SECT:LDAP Sync Replication}} chapter of this guide for more information on how to use this directive. H4: olcTimeLimit: This directive specifies the maximum number of seconds (in real time) slapd will spend answering a search request. If a request is not finished in this time, a result indicating an exceeded timelimit will be returned. \Default: > olcTimeLimit: 3600 H4: olcUpdateref: This directive is only applicable in a slave slapd. It specifies the URL to return to clients which submit update requests upon the replica. If specified multiple times, each {{TERM:URL}} is provided. \Example: > olcUpdateref: ldap://master.example.net H4: Sample Entries >dn: olcDatabase=frontend,cn=config >objectClass: olcDatabaseConfig >objectClass: olcFrontendConfig >olcDatabase: frontend >olcReadOnly: FALSE > >dn: olcDatabase=config,cn=config >objectClass: olcDatabaseConfig >olcDatabase: config >olcRootDN: cn=Manager,dc=example,dc=com H3: BDB and HDB Database Directives Directives in this category apply to both the {{TERM:BDB}} and the {{TERM:HDB}} database. They are used in an olcDatabase entry in addition to the generic database directives defined above. For a complete reference of BDB/HDB configuration directives, see {{slapd-bdb}}(5). In addition to the {{EX:olcDatabaseConfig}} objectClass, BDB and HDB database entries must have the {{EX:olcBdbConfig}} and {{EX:olcHdbConfig}} objectClass, respectively. H4: olcDbDirectory: This directive specifies the directory where the BDB files containing the database and associated indices live. \Default: > olcDbDirectory: /usr/local/var/openldap-data H4: olcDbCachesize: This directive specifies the size in entries of the in-memory cache maintained by the BDB backend database instance. \Default: > olcDbCachesize: 1000 H4: olcDbCheckpoint: This directive specifies how often to checkpoint the BDB transaction log. A checkpoint operation flushes the database buffers to disk and writes a checkpoint record in the log. The checkpoint will occur if either data has been written or minutes have passed since the last checkpoint. Both arguments default to zero, in which case they are ignored. When the argument is non-zero, an internal task will run every minutes to perform the checkpoint. See the Berkeley DB reference guide for more details. \Example: > olcDbCheckpoint: 1024 10 H4: olcDbConfig: This attribute specifies a configuration directive to be placed in the {{EX:DB_CONFIG}} file of the database directory. At server startup time, if no such file exists yet, the {{EX:DB_CONFIG}} file will be created and the settings in this attribute will be written to it. If the file exists, its contents will be read and displayed in this attribute. The attribute is multi-valued, to accommodate multiple configuration directives. No default is provided, but it is essential to use proper settings here to get the best server performance. Any changes made to this attribute will be written to the {{EX:DB_CONFIG}} file and will cause the database environment to be reset so the changes can take immediate effect. If the environment cache is large and has not been recently checkpointed, this reset operation may take a long time. It may be advisable to manually perform a single checkpoint using the Berkeley DB {{db_checkpoint}} utility before using LDAP Modify to change this attribute. \Example: > olcDbConfig: set_cachesize 0 10485760 0 > olcDbConfig: set_lg_bsize 2097512 > olcDbConfig: set_lg_dir /var/tmp/bdb-log > olcDbConfig: set_flags DB_LOG_AUTOREMOVE In this example, the BDB cache is set to 10MB, the BDB transaction log buffer size is set to 2MB, and the transaction log files are to be stored in the /var/tmp/bdb-log directory. Also a flag is set to tell BDB to delete transaction log files as soon as their contents have been checkpointed and they are no longer needed. Without this setting the transaction log files will continue to accumulate until some other cleanup procedure removes them. See the Berkeley DB documentation for the {{EX:db_archive}} command for details. For a complete list of Berkeley DB flags please see - {{URL:http://www.oracle.com/technology/documentation/berkeley-db/db/api_c/env_set_flags.html}} Ideally the BDB cache must be at least as large as the working set of the database, the log buffer size should be large enough to accommodate most transactions without overflowing, and the log directory must be on a separate physical disk from the main database files. And both the database directory and the log directory should be separate from disks used for regular system activities such as the root, boot, or swap filesystems. See the FAQ-o-Matic and the Berkeley DB documentation for more details. H4: olcDbNosync: { TRUE | FALSE } This option causes on-disk database contents to not be immediately synchronized with in memory changes upon change. Setting this option to {{EX:TRUE}} may improve performance at the expense of data integrity. This directive has the same effect as using > olcDbConfig: set_flags DB_TXN_NOSYNC H4: olcDbIDLcacheSize: Specify the size of the in-memory index cache, in index slots. The default is zero. A larger value will speed up frequent searches of indexed entries. The optimal size will depend on the data and search characteristics of the database, but using a number three times the entry cache size is a good starting point. \Example: > olcDbIDLcacheSize: 3000 H4: olcDbIndex: { | default} [pres,eq,approx,sub,none] This directive specifies the indices to maintain for the given attribute. If only an {{EX:}} is given, the default indices are maintained. The index keywords correspond to the common types of matches that may be used in an LDAP search filter. \Example: > olcDbIndex: default pres,eq > olcDbIndex: uid > olcDbIndex: cn,sn pres,eq,sub > olcDbIndex: objectClass eq The first line sets the default set of indices to maintain to present and equality. The second line causes the default (pres,eq) set of indices to be maintained for the {{EX:uid}} attribute type. The third line causes present, equality, and substring indices to be maintained for {{EX:cn}} and {{EX:sn}} attribute types. The fourth line causes an equality index for the {{EX:objectClass}} attribute type. There is no index keyword for inequality matches. Generally these matches do not use an index. However, some attributes do support indexing for inequality matches, based on the equality index. A substring index can be more explicitly specified as {{EX:subinitial}}, {{EX:subany}}, or {{EX:subfinal}}, corresponding to the three possible components of a substring match filter. A subinitial index only indexes substrings that appear at the beginning of an attribute value. A subfinal index only indexes substrings that appear at the end of an attribute value, while subany indexes substrings that occur anywhere in a value. Note that by default, setting an index for an attribute also affects every subtype of that attribute. E.g., setting an equality index on the {{EX:name}} attribute causes {{EX:cn}}, {{EX:sn}}, and every other attribute that inherits from {{EX:name}} to be indexed. By default, no indices are maintained. It is generally advised that minimally an equality index upon objectClass be maintained. > olcDbindex: objectClass eq Additional indices should be configured corresponding to the most common searches that are used on the database. Presence indexing should not be configured for an attribute unless the attribute occurs very rarely in the database, and presence searches on the attribute occur very frequently during normal use of the directory. Most applications don't use presence searches, so usually presence indexing is not very useful. If this setting is changed while slapd is running, an internal task will be run to generate the changed index data. All server operations can continue as normal while the indexer does its work. If slapd is stopped before the index task completes, indexing will have to be manually completed using the slapindex tool. H4: olcDbLinearIndex: { TRUE | FALSE } If this setting is {{EX:TRUE}} slapindex will index one attribute at a time. The default settings is {{EX:FALSE}} in which case all indexed attributes of an entry are processed at the same time. When enabled, each indexed attribute is processed individually, using multiple passes through the entire database. This option improves slapindex performance when the database size exceeds the BDB cache size. When the BDB cache is large enough, this option is not needed and will decrease performance. Also by default, slapadd performs full indexing and so a separate slapindex run is not needed. With this option, slapadd does no indexing and slapindex must be used. H4: olcDbMode: This directive specifies the file protection mode that newly created database index files should have. \Default: > olcDbMode: 0600 H4: olcDbSearchStack: Specify the depth of the stack used for search filter evaluation. Search filters are evaluated on a stack to accommodate nested {{EX:AND}} / {{EX:OR}} clauses. An individual stack is allocated for each server thread. The depth of the stack determines how complex a filter can be evaluated without requiring any additional memory allocation. Filters that are nested deeper than the search stack depth will cause a separate stack to be allocated for that particular search operation. These separate allocations can have a major negative impact on server performance, but specifying too much stack will also consume a great deal of memory. Each search uses 512K bytes per level on a 32-bit machine, or 1024K bytes per level on a 64-bit machine. The default stack depth is 16, thus 8MB or 16MB per thread is used on 32 and 64 bit machines, respectively. Also the 512KB size of a single stack slot is set by a compile-time constant which may be changed if needed; the code must be recompiled for the change to take effect. \Default: > olcDbSearchStack: 16 H4: olcDbShmKey: Specify a key for a shared memory BDB environment. By default the BDB environment uses memory mapped files. If a non-zero value is specified, it will be used as the key to identify a shared memory region that will house the environment. \Example: > olcDbShmKey: 42 H4: Sample Entry >dn: olcDatabase=hdb,cn=config >objectClass: olcDatabaseConfig >objectClass: olcHdbConfig >olcDatabase: hdb >olcSuffix: "dc=example,dc=com" >olcDbDirectory: /usr/local/var/openldap-data >olcDbCacheSize: 1000 >olcDbCheckpoint: 1024 10 >olcDbConfig: set_cachesize 0 10485760 0 >olcDbConfig: set_lg_bsize 2097152 >olcDbConfig: set_lg_dir /var/tmp/bdb-log >olcDbConfig: set_flags DB_LOG_AUTOREMOVE >olcDbIDLcacheSize: 3000 >olcDbIndex: objectClass eq @