Download OpenLDAP 2.4.14

OpenLDAP is, as the name suggests, an open source implementation of LDAP. It can keep records of all kinds of objects and is therefore basically comparable to Novell’s eDirectory and Microsoft’s Active Directory. OpenLDAP is made up of several parts including an LDAP daemon, LDAP replication daemon, several libs that implement the LDAP protocol, and numerous client tools and examples. This collection is under a own license released and works on most Posix systems. For more information, we refer you to this instructions for administrators. The developers have pushed out version 2.4.14 with the following patch of changes:

Version 2.4.14:

• Added libldap option to disable SASL host canonicalization (ITS#5812)
• Added libldap TLS_PROTOCOL_MIN (ITS#5655)
• Added libldap GnuTLS support for TLS_CIPHER_SUITE (ITS#5887)
• Added libldap GnuTLS setting random file (ITS#5462)
• Added libldap alias dereferencing in C API (ITS#5916)
• Fixed libldap chasing multiple referrals (ITS#5853)
• Fixed libldap deref handling (ITS#5768)
• Fixed libldap NULL pointer deref (ITS#5934)
• Fixed libldap peer cert memory leak (ITS#5849)
• Fixed libldap interaction with GnuTLS CN IP-based matches (ITS#5789)
• Fixed libldap intermediate response behavior (ITS#5896)
• Fixed libldap IPv6 address handling (ITS#5937)
• Fixed libldap_r deref building (ITS#5768)
• Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841)
• Added slapd syncrepl default retry setting (ITS#5825)
• Added slapd val.regex expansion (ITS#5804)
• Added slapd TLS_PROTOCOL_MIN (ITS#5655)
• Added slapd slapi_pw_find (ITS#2615,ITS#4359)
• Added slapd compatibility with MSAD ranged values ​​(ITS#5927)
• Fixed slapd bconfig to return error codes (ITS#5867)
• Fixed slapd bconfig encoding incorrectly (ITS#5897)
• Fixed slapd bconfig dangling pointers (ITS#5924)
• Fixed slapd behavior with superior objectClasses (ITS#5517)
• Fixed slapd connection assert (ITS#5835)
• Fixed slap epoll handling (ITS#5886)
• Fixed slapd frontend/backend options handling (ITS#5857)
• Fixed slapd glue with MMR (ITS#5925)
• Fixed slapd logging on Windows (ITS#5392)
• Fixed slapd listener comparison (ITS#5613)
• Fixed slapd manageDSAit with glue entries (ITS#5921)
• Fixed slapd syncrepl rename handling (ITS#5809)
• Fixed slapd syncrepl MMR when adding new server (ITS#5850)
• Fixed slapd syncrepl MMR with deleted entries (ITS#5843)
• Fixed slapd syncrepl replication with glued DB (ITS#5866)
• Fixed slapd syncrepl replication with moddn (ITS#5901)
• Fixed slapd syncrepl replication with referrals (ITS#5881)
• Fixed slapd syncrepl replication with config tree (ITS#5935)
• Fixed slapd wake_sds close on Windows (ITS#5855)
• Fixed slapd-bdb/hdb dncachesize handling (ITS#5860)
• Fixed slapd-bdb/hdb RFC4528 control support (ITS#5861)
• Fixed slapd-bdb/hdb trickle task usage (ITS#5864)
• Fixed slapd-hdb idlcache with empty suffix (ITS#5859)
• Fixed slapd-ldap idassert-bind validity checking (ITS#5863)
• Fixed slapd-ldap/meta RFC4525 increment support (ITS#5912)
• Fixed slapd-ldap/meta search dereferencing (ITS#5916)
• Fixed slapd-ldap/meta with intermediate response (ITS#5931)
• Fixed slapd-ldif numerous bugs (ITS#5408)
• Fixed slapd-ldif rename on same DN (ITS#5319)
• Fixed slapd-ldif deadlock (ITS#5329)
• Fixed slapd meta double response sending (ITS#5854)
• Fixed slapd-meta alias deref for retry (ITS#5889)
• Fixed slapd-relay recursion detection (ITS#5943)
• Fixed slapd-sock descriptor leak (ITS#5939)
• Fixed slapo accesslog on glued dbs (ITS#5907)
• Fixed slapo-dynlist handling of flags (ITS#5898)
• Fixed slapo member of multiple instantiation (ITS#5903)
• Fixed slapo-pcache filter sorting (ITS#5756)
• Fixed slap policy to not be global (ITS#5858)
• Fixed slapo-rwm double free (ITS#5923)
• Fixed slapo-rwm with back-config (ITS#5906)
• Fixed slapo-rwm olcRwmRewrite modification (ITS#5940)
• Added slapo-rwm newRDN rewriting (ITS#5834)
• Added Slapadd Progress Meter (ITS#5922)
• Updated contrib/addpartial module (ITS#5764)
• Added contrib/cloak module (ITS#5872)
• Added contrib/smbk5pwd gcrypt support (ITS#5410)
• Added contrib/passwd sha2 support (ITS#5660)

Build Environment

• Fixed test006 appending to log file (ITS#5910)
• Fixed test036,test039 behavior on error (ITS#5893)
• Fixed test048 sed pathname substitution (ITS#5910)
• Fixed test049,test050 to work on windows (ITS#5842)
• Updated test017,test018,test019 to cover more cases (ITS#5883)
• Removed patch for BerkeleyDB 4.7.25 (Official patch available)
• Fixed MSVC 9.0 build issues (ITS#5888)
• Fixed gss detection on Solaris (ITS#5846)
• Fixed uuid_create/uuid_unparse_lower detection (ITS#5905)
• Fixed liblutil tavl_delete to macroize constants (ITS#5909)

Documentation

• admin24 added limits chapter (ITS#5818)
• admin24 access-control clarify global ACLS (ITS#5851,ITS#5852)
• admin24 search on nested naming contexts (ITS#5788)
• admin24 consistent log level documentation (ITS#5904)
• slapd-bdb/hdb expansion on dncachesize behavior (ITS#5721)
• slapo-constraint(5) example fix (ITS#5895)
• slap*(8) man pages should mention slapd-config (ITS#5828)
• slapacl(8c) fix wording (ITS#5918)
• slapd(8) document sid (ITS#5873)
• slapd.access(5) clarify global ACLS (ITS#5851,ITS#5852)
• slapadd/cat/index(8) note -n 0 for slapd-config (ITS#5891)
• Added SEE ALSO slapd-config(5) to relevant man pages (ITS#5914)