The Suretec Blog - OpenLDAP

OpenLDAP 2.4.25 released

nospam@example.com (Gavin Henry) — Sat, 26 Mar 2011 21:59:40 +0000

OpenLDAP 2.4.25 is now officially out. Download now and review the final changes list:

OpenLDAP 2.4.25 is now available for download as detailed on our download page:

http://www.openldap.org/software/download/

and should soon be available on all official mirrors:

ftp://ftp.openldap.org/pub/OpenLDAP/MIRRORS

This is a maintenance release and is made available for general use. Users of OpenLDAP Software are encouraged to upgrade.

Significant contributors include:

Howard Chu (Symas Corp)
Quanah Gibson-Mount (VMware, Inc)
Ralf Haferkamp (SUSE Linux)
Pierangelo Masarati (Politecnico di Milano)

OpenLDAP 2.4.25 Release (2011/03/26)
Fixed ldapsearch pagedresults loop (ITS#6755)
Fixed tools for incompatible args (ITS#6849)
Fixed libldap MozNSS crash (ITS#6863)
Fixed slapd add objectclasses in order (ITS#6837)
Added slapd ordering for uidNumber and gidNumber (ITS#6852)
Fixed slapd segfault when adding values out of order (ITS#6858)
Fixed slapd sortval handling (ITS#6845)
Fixed slapd-bdb with slapadd/index quick option (ITS#6853)
Fixed slapd-ldap^[?] chain cn=config support (ITS#6837)
Fixed slapd-ldap chain with slapd.conf (ITS#6857)
Fixed slapd-meta deadlock (ITS#6846)
Fixed slapo-sssvlv with multiple requests (ITS#6850)
Fixed contrib/lastbind install rules (ITS#6238)
Fixed contrib/cloak install rules (ITS#6877)
Build Environment
Fixed windows NT threads build (ITS#6859)
Fixed libldap/lberl/util if/else usage (ITS#6832)
Fixed Windows odbc32 detection (ITS#6125)
Fixed Windows msys build (ITS#6870)
Fixed test020 exit codes (ITS#6404)
Documentation
admin24 guide ldapi usage (ITS#6839)
admin24 guide conversion notes (ITS#6834)
admin24 guide fix drawback math for syncrepl (ITS#6866)
admin24 guide note manpages are definitive (ITS#6855)

MD5 (openldap-2.4.25.tgz) = ec63f9c2add59f323a0459128846905b
SHA1 (openldap-2.4.25.tgz) = 56efaf3656cc68d3b5be66422c0c89f0104d7183

OpenLDAP 2.4.24 released

nospam@example.com (Gavin Henry) — Sat, 12 Feb 2011 18:51:58 +0000

OpenLDAP 2.4.24 is now officially out. Download now and review the final changes list:

OpenLDAP 2.4.24 is now available for download as detailed on our download page:

http://www.openldap.org/software/download/

and should soon be available on all official mirrors:

ftp://ftp.openldap.org/pub/OpenLDAP/MIRRORS

This is a maintenance release and is made available for general use. Users of OpenLDAP Software are encouraged to upgrade.

Significant contributors include:
Howard Chu (Symas Corp)
Hallvard Furuseth (University of Oslo)
Quanah Gibson-Mount (VMware, Inc)
Ralf Haferkamp (SUSE Linux)
Gavin Henry (Suretec Systems)
Pierangelo Masarati (Politecnico di Milano)
Rein Tollevik (Basefarm AS)

OpenLDAP 2.4.24 Release (2011/02/10)
Added LDIF line wrapping setting (ITS#6645)
Added MozNSS support (ITS#6714,ITS#6742,ITS#6790,ITS#6791)
Added MozNSS support (ITS#6802,ITS#6811,ITS#6816,ITS#5696)
Added libldap cert x500UniqueIdentifier handling (ITS#6741)
Added libldap_r,libldap formal concurrency API (ITS#6625,ITS#5421)
Added slapadd attribute value checking (ITS#6592)
Added slapcat continue mode for problematic DBs (ITS#6482)
Added slapd syncrepl suffixmassage support (ITS#6781)
Added slapd multiple listener threads (ITS#6780)
Added slapd extensible match for ordering rules (ITS#6532)
Added slapd-meta paged results control forwarding (ITS#6664)
Added slapd-meta subtree-include support (ITS#6801)
Added slapd-null back-config support (ITS#6624)
Added slapd-sql autocommit support (ITS#6612)
Added slapd-sql support for long long keys (ITS#6617)
Added slapo-sssvlv multiple sorts per connection (ITS#6686)
Added contrib/autogroup LDAP^[?] URI with attribute filter (ITS#6536)
Added contrib/dupent module (ITS#6630)
Added contrib/lastbind (ITS#6238)
Added contrib/kinit for kerberos tickets
Added contrib/noopsrch for entry counting (ITS#6598)
Fixed client tools control logging (ITS#6775)
Fixed client tools one time leak (ITS#6778)
Fixed liblber to not close invalid sockets (ITS#6585)
Fixed liblber unmatched brace handling (ITS#6764)
Fixed liblber error setting (ITS#6732)
Fixed liblber memory debugging (ITS#6733)
Fixed libldap connectionless warnings (ITS#6747)
Fixed libldap dnssrv port format specifier (ITS#6644)
Fixed libldap EOF handling (ITS#6723)
Fixed libldap GnuTLS hang on socket close (ITS#6673)
Fixed libldap sasl partial write handling (ITS#6639)
Fixed libldap search leak (ITS#6453)
Fixed libldap referral chasing (ITS#6602)
Fixed libldap leak when chasing referrals (ITS#6744)
Fixed libldap url parsing with NULL host (ITS#6653)
Fixed libldap ldap_open_internal_connection (ITS#6788)
Fixed libldap sync checking for BER errors (ITS#6738)
Fixed libldap variable usage (ITS#6813)
Fixed liblutil getpass prompts (ITS#6702)
Fixed ldapsearch segfault with deref (ITS#6638)
Fixed ldapsearch multiple controls parsing (ITS#6651)
Fixed slapd SlapReply usage (ITS#6758)
Fixed slapd acl parsing overflow (ITS#6611)
Fixed slapd acl when resuming parsing (ITS#6804)
Fixed slapd Compare operation (ITS#6753)
Fixed slapd default config acls with overlays (ITS#6822)
Fixed slapd assert control (ITS#5862)
Fixed slapd assertions and debugging (ITS#6759)
Fixed slapd config leak with olcDbDirectory (ITS#6634)
Fixed slapd connectionless warnings (ITS#6747)
Fixed slapd listeners destruction (ITS#6736)
Fixed slapd to free controls if needed (ITS#6629)
Fixed slapd to stop if given unknown options (ITS#6754)
Fixed slapd filter leak (ITS#6635)
Fixed slapd matching rules for strict ordering (ITS#6722)
Fixed slapd when first acl is value dependent (ITS#6693)
Fixed slapd modify to return actual error (ITS#6581)
Fixed slapd modrdn with empty DN (ITS#6768)
Fixed slapd c_authz_backend setting (ITS#6824)
Fixed slapd sortvals of attributes with 1 value (ITS#6715)
Fixed slapd syncrepl reuse of presence list (ITS#6707)
Fixed slapd syncrepl uninitialized return code (ITS#6719)
Fixed slapd syncrepl variable initialization (ITS#6739)
Fixed slapd syncrepl refresh to use complete cookie (ITS#6807)
Fixed slapd-bdb hasSubordinates generation (ITS#6712)
Fixed slapd-bdb entry cache delete failure (ITS#6577)
Fixed slapd-bdb entry cache leak on multi-core systems (ITS#6660)
Fixed slapd-bdb error propagation to overlays (ITS#6633)
Fixed slapd-bdb slapadd -q with glued dbs (ITS#6794)
Fixed slapd-ldap^[?] debug output of timeout (ITS#6721)
Fixed slapd-ldap DNSSRV referral chaining (ITS#6565)
Fixed slapd-ldap chaining with bind failures (ITS#6607)
Fixed slapd-ldap chaining with onelevel scope (ITS#6699)
Fixed slapd-ldap chaining with ppolicy (ITS#6540)
Fixed slapd-ldap with SASL/EXTERNAL (ITS#6642)
Fixed slapd-ldap crasher on matchedDN (ITS#6793)
Fixed slapd-ldap with unknown objectClasses (ITS#6814)
Fixed slapd-ldif error strings (ITS#6731)
Fixed slapd-ndb to honor rootpw setting (ITS#6661)
Fixed slapd-ndb hasSubordinates generation (ITS#6712)
Fixed slapd-ndb variable initialization (ITS#6806)
Fixed slapd-ndb with out of order attributes (ITS#6821)
Fixed slapd-meta anon retry with failed auth method (ITS#6643)
Fixed slapd-meta rebind proc (ITS#6665)
Fixed slapd-meta to correctly rebind as user (ITS#6574)
Fixed slapd-meta with SASL/EXTERNAL (ITS#6642)
Fixed slapd-meta matchedDN return code (ITS#6774)
Fixed slapd-meta candidate selection (ITS#6799)
Fixed slapd-meta attribute normalization (ITS#6818)
Fixed slapd-monitor hasSubordinates generation (ITS#6712)
Fixed slapd-monitor abandon processing (ITS#6783)
Fixed slapd-monitor entry locks (ITS#6787)
Fixed slapd-sock missing newline in Compare operation (ITS#6809)
Fixed slapd-sql with null objectClass (ITS#6616)
Fixed slapd-sql hasSubordinates generation (ITS#6712)
Fixed slapo-accesslog with controls (ITS#6652)
Fixed slapo-dynlist Compare operation (ITS#6752)
Fixed slapo-dynlist entry handling (ITS#6752)
Fixed slapo-memberof CSN generation (ITS#6766)
Fixed slapo-memberof log messages (ITS#6748)
Fixed slapo-memberof with an empty groupOfNames (ITS#6670)
Fixed slapo-memberof with modrdn operations (ITS#6700)
Fixed slapo-pcache callback freeing (ITS#6640)
Fixed slapo-pcache to ignore undefined attrs (ITS#6600)
Fixed slapo-pcache pointer freeing (ITS#6797)
Fixed slapo-pcache with negative caching (ITS#6796)
Fixed slapo-pcache monitoring cleanup (ITS#6808)
Fixed slapo-ppolicy don't update opattrs on consumers (ITS#6608)
Fixed slapo-ppolicy to allow userPassword deletion (ITS#6620)
Fixed slapo-refint when last group member is deleted (ITS#6663)
Fixed slapo-refint with subtree rename (ITS#6730)
Fixed slapo-rwm double free (ITS#6720)
Fixed slapo-rwm crasher (ITS#6632,ITS#6727)
Fixed slapo-rwm entry handling (ITS#6760)
Fixed slapo-rwm response hang (ITS#6792)
Fixed slapo-sssvlv initialization (ITS#6649)
Fixed slapo-sssvlv to not advertise when unused (ITS#6647)
Fixed slapo-sssvlv result code (ITS#6685)
Fixed slapo-syncprov to send error if consumer is newer (ITS#6606)
Fixed slapo-syncprov filter race condition (ITS#6708)
Fixed slapo-syncprov active mod race (ITS#6709)
Fixed slapo-syncprov to refresh if context is dirty (ITS#6710)
Fixed slapo-syncprov CSN updates to all replicas (ITS#6718)
Fixed slapo-syncprov sessionlog ordering (ITS#6716)
Fixed slapo-syncprov sessionlog with adds (ITS#6503)
Fixed slapo-syncprov mutex (ITS#6438)
Fixed slapo-syncprov mincsn check with MMR (ITS#6717)
Fixed slapo-syncprov control leak (ITS#6795)
Fixed slapo-syncprov error codes (ITS#6812)
Fixed slapo-translucent entry leak (ITS#6746)
Fixed contrib/autogroup install location (ITS#6684)
Fixed contrib/autogroup crash with ppolicy (ITS#6684)
Fixed contrib/autogroup with non-DN URIs (ITS#6684)
Fixed contrib/autogroup with memberOf overlay (ITS#6684)
Fixed contrib/cloak when returning multiple entries (ITS#6762)
Fixed contrib/nssov to only close socket on shutdown (ITS#6676)
Fixed contrib/nssov multi platform support (ITS#6604)
Build Environment
Added support for [unsigned] long long (ITS#6622)
Added slapd support for BDB 5.0+ (ITS#6698)
Fixed config.guess/sub to pick up newer OSes (ITS#6547)
Fixed libldap mutex code - cleanup (ITS#6672)
Fixed libldap unnecessary ifdef's (ITS#6603)
Fixed slapd-tester EOF handling (ITS#6723)
Fixed slapd-tester filter initialization (ITS#6735)
Fixed test scripts with alternate testdir (ITS#6782)
Removed antiquated SunOS LWP support (ITS#6669)
Documentation
admin24 guide fix examples (ITS#6681)
admin24 guide typo fixes (ITS#6609)
admin24 guide refint rootdn requirement (ITS#6364)
admin24 add pcache overlay section (ITS#6521)
ldap_open(3) document ldap_set_urllist_proc (ITS#6601)
ldap.conf(5) GnuTLS cipher spec info (ITS#6525)
slapd.conf(5) GnlTLS cipher spec info (ITS#6525)
slapd.conf(5) multi-listener support (ITS#6780)
slapd-config(5) GnuTLS cipher spec info (ITS#6525)
slapd-config(5) multi-listener support (ITS#6780)
slapd-meta(5) note deprecated items (ITS#6800)
slapd-meta(5) document subtree-include (ITS#6801)
slapo-pcache(5) note rootdn requirement (ITS#6522)
slapo-refint(5) rootdn requirement (ITS#6364)

MD5 (openldap-2.4.24.tgz) = 116fe1e23a7b67686d5e62274367e6c0
SHA1 (openldap-2.4.24.tgz) = a4baad3d45ae5810ba5fee48603210697c70d52f

NORTH EAST IT COMPANY BECOMES COUNTRY’S FIRST DEDICATED INTERNET TELEPHONY SERVICE PROVIDER

nospam@example.com (Suretec) — Mon, 15 Nov 2010 07:47:00 +0000

North-east IT and telecoms support specialist, the Suretec Group, has become the first dedicated internet telephony service provider in Scotland, with the launch of a new company division, SureVoIP.

The creation of SureVoIP – a Voice over Internet Protocol (VoIP) service provider – follows Suretec securing approval from UK communications industry regulatory body, Ofcom, to assign UK telephone numbers.

As an Ofcom regulated VoIP provider with its own telephone number allocations, SureVoIP has been approved to assign phone numbers to clients across the UK and Northern Ireland. The company can also supply global numbers for at least 60 countries.

This is a unique offer within the Scottish market, as other internet telephony specialists within the country must act as ‘middle-men’ between the client and an approved service provider. The result is that SureVoIP and its partners have higher control over costs and can offer preferential and transparent rates that are to the benefit of clients.

VoIP technology transmits voice and multimedia communication through the Internet as opposed to the fast-disappearing Public Switched Telephone Network (PSTN), which has been the basic form of service connection to the telephone network in most parts of the world for the last century.

Heralded as the natural successor to its PSTN predecessor, VoIP offers significant improvements to the flexibility, speed and cost of global communication.

Top line advantages of this new technology include the ability to make and receive calls from anywhere in the world where a user has access to an internet connection, at a cheaper rate; make and receive as many calls as an internet connection can support; ensure the security and confidentiality of a communication; and rapid provision of telephone numbers and outbound calling.

SureVoIP has chosen to work in partnership with British Telecom (BT) by way of a VoIP Interconnect, which offers clients a range of additional advantages such as further cost-effectiveness by accessing BT’s UK and global networks.

SureVoIP has also chosen to partner with Xconnect on their Global Alliance program, as well as two other UK VoIP carriers. The Global Alliance interconnection hub allows VoIP service providers to bypass the PSTN to exchange VoIP traffic with over 100 networks worldwide under the policies and settlement terms they choose.

The division has also taken the extra – and equally unique - step to provide clients with 24/7 emergency telephone support.

Gavin Henry, Managing Director of SureVoIP, and founding member of the Suretec Group, said: “This is a hugely exciting time for Suretec. Our journey to securing the approval from Ofcom has been long and complex, involving the submission of detailed business plans, demonstrating an in-depth knowledge of the Communications Act 2003, various legal requirements, documentation and a significant investment in equipment throughout the UK.

“It is predicted that VoIP will fully replace its predecessor in the next five to ten years. As such, to have received this approval at such a critical period in this global development is a fantastic result for us.

“Our position as an Ofcom regulated service provider will make us a preferred supplier, as we are ideally placed to offer a holistic and competitive service to clients within the North-east of Scotland and beyond.

“The applications of VoIP technology are clear and we see it being of particular interest to the oil and gas, shipping, legal and financial industries as they need to make international, reliable and cost effective communications as a basic function.”

Established in Scotland in 2003, the Suretec Group specialises in open source IT support and consultancy, open source telecoms and training in open source software. SureVoIP is the fourth division within the group, which also includes Suretec Systems, Suretec Telecoms and Suretec Training.

For further information about the Suretec Group and SureVoIP please call 01224 279484 or visit www.suretecgroup.com and www.surevoip.co.uk

ENDS

Issued by Mackenzie PR on behalf of Suretec Group. For further information please contact Paul Beaton or Andrew Reid on (01224) 580 188 or email paul@mackenziepr.co.uk

Increase in enquiries for migrations from Sun Directory and other directory servers to OpenLDAP

nospam@example.com (Suretec) — Tue, 12 Oct 2010 11:31:56 +0100

Hi all,

Everyone involved in the directory sector and OpenLDAP has been seeing lots more enquiries to migrate from Sun Directory to OpenLDAP as the future of Sun Directory, now Oracle owns Sun is becoming a concern, as is their new pricing model. We obviously have experience doing this and migration from any other directory server.

If you want to convert your enterprise directory from a proprietary and expensive closed-source supplier to OpenLDAP, a modern, more efficient, and less expensive Open Source software solution please do contact us.

Our partners Symas also have a Directory Services Upgrade Program that we can do for you in the UK:

Convert your Enterprise Directory from a proprietary and expensive closed-source supplier to OpenLDAP, a modern, more efficient, and less expensive Open Source software solution. Typically, enterprises dramatically reduce their annual cost converting to OpenLDAP from Sun, Oracle, Netscape, or iPlanet Directory Services products. The workload requires half or less the power and capacity for substantially improved performance. This is a relatively easy transition to make because LDAPv3 is highly standardized and OpenLDAP conforms to the most demanding requirements of the Internet Standards (RFC^[?] 4511 and related RFCs)..

Symas Corporation will be glad to consult with your team and offer you a fixed-price, fixed schedule offer for conversion of your Enterprise Directory technology. This service includes:

- A complete evaluation of your present Directory Services servers
- A Detailed plan for implementation of the new technology
- A roadmap for conversion of existing LDAP^[?] applications and data feeds
- Conversion of schema definitions
- Access Control conversions/implementation
- Database transfer and clean-up
- OpenLDAP deployment, tuning and configuration
- SSL Certificate Conversion
- Database reload
- Assistance with application testing
- Operational team training (LDAP University)
- One year of standard Gold
- level Symas OpenLDAP technical support

Please do contact us.

Thanks,

Gavin.

OpenLDAP 2.4.23 released

nospam@example.com (Gavin Henry) — Thu, 01 Jul 2010 23:09:38 +0100

OpenLDAP 2.4.23 is now officially out. Download now and review the final changes list:

OpenLDAP 2.4.23 is now available for download as detailed on our download page:
http://www.openldap.org/software/download/

and should soon be available on all official mirrors:
ftp://ftp.openldap.org/pub/OpenLDAP/MIRRORS

This is a maintenance release and is made available for general use. Users of OpenLDAP Software are encouraged to upgrade.

Significant contributors to this release include:
Howard Chu (Symas Corp)
Quanah Gibson-Mount (Yahoo! Inc)
Ralf Haferkamp (SUSE Linux)
Pierangelo Masarati (Politecnico di Milano)

OpenLDAP 2.4.23 Release (2010/06/30)
Fixed libldap to return server's error code (ITS#6569)
Fixed libldap memleaks (ITS#6568)
Fixed liblutil off-by-one with delta (ITS#6541)
Fixed slapd acls with glued databases (ITS#6468)
Fixed slapd syncrepl rid logging (ITS#6533)
Fixed slapd modrdn handling of invalid values (ITS#6570)
Fixed slapd-bdb hasSubordinates computation (ITS#6549)
Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474)
Fixed slapd-bdb entry cache delete failure (ITS#6577)
Fixed slapd-ldap^[?] to return control responses (ITS#6530)
Fixed slapo-ppolicy to use Debug (ITS#6566)
Fixed slapo-refint to zero out freed DN vals (ITS#6572)
Fixed slapo-rwm to use Debug (ITS#6566)
Fixed slapo-sssvlv to use Debug (ITS#6566)
Fixed slapo-syncprov lost deletes in refresh phase (ITS#6555)
Fixed slapo-valsort to use Debug (ITS#6566)
Fixed contrib/nssov network.c missing patch (ITS#6562)
Build Environment
Fixed test043 attribute sorting (ITS#6553)
Documentation
slapd-config(5) note default rootdn (ITS#6546)

MD5 (openldap-2.4.23.tgz) = 90150b8c0d0192e10b30157e68844ddf
SHA1 (openldap-2.4.23.tgz) = 26027e7020256c5f47e17787f17ee8b31af42378

OpenLDAP News: openldap-software mailing list, cURL, libcurl, and LDAP

nospam@example.com (Gavin Henry) — Tue, 25 May 2010 13:10:06 +0100

Hi all,

Two bits of important news today:

"For those of you who use libcurl in your own applications, you may be interested to know that I've written a new LDAP^[?] implementation for libcurl." - Howard Chu from Symas

and

Shutdown of the OpenLDAP-Software list in favor of the OpenLDAP-Technical list

So when you post to openldap-software@openldap.org don't get scared, nothing has happened to OpenLDAP!

Thanks,

Gavin.

Suretec allocated a Communications Provider Identity ("CUPID") code by Ofcom

nospam@example.com (Suretec) — Tue, 27 Apr 2010 12:13:19 +0100

Exciting news!

Our Communications Provider Identity ("CUPID") code application has been processed by Ofcom and we just received our number of 291.

The start of many good things to come with our own VoIP provider SureVoIP (brand and website being worked on now). We're also listed as an ITSP at ITSPA.

Thanks,

Gavin.

OpenLDAP 2.4.22 released

nospam@example.com (Suretec) — Mon, 26 Apr 2010 17:22:05 +0100

OpenLDAP 2.4.22 is now officially out. Download now and review the final changes list:

OpenLDAP 2.4.22 is now available for download as detailed on our download page:
http://www.openldap.org/software/download/

and should soon be available on all official mirrors:
ftp://ftp.openldap.org/pub/OpenLDAP/MIRRORS

This is a maintenance release and is made available for general use. Users of OpenLDAP Software are encouraged to upgrade.

Significant contributors to this release include:
Howard Chu (Symas Corp)
Hallvard Furuseth (University of Oslo)
Quanah Gibson-Mount (Yahoo! Inc)
Ralf Haferkamp (SUSE Linux)
Pierangelo Masarati (Politecnico di Milano)
Rein Tollevik (Basefarm AS)

OpenLDAP 2.4.22 Release (2010/04/24)
Added slapd SLAP_SCHEMA_EXPOSE flag for hidden schema elements (ITS#6435)
Added slapd tools selective iterations (ITS#6442)
Added slapd syncrepl TCP keepalive (ITS#6389)
Added slapo-ldap^[?] idassert-passthru (ITS#6456)
Added slapo-pbind
Fixed libldap gmtime re-entrancy (ITS#6262)
Fixed libldap gssapi off by one error (ITS#6223)
Fixed libldap GnuTLS serial length (ITS#6460)
Fixed libldap MozNSS context and PEM support (ITS#6432)
Fixed libldap referral on bind behavior(ITS#6510)
Fixed slapd acl non-entry internal searches (ITS#6481)
Fixed slapd acl attrval style initialization (ITS#6520)
Fixed slapd certificateListValidate (ITS#6466)
Fixed slapd empty URI parsing (ITS#6465)
Fixed slapd glued misplaced entries (ITS#6506)
Fixed slapd glued paged cookies (ITS#6507)
Fixed slapd glued paged results (ITS#6504)
Fixed slapd gmtime re-entrancy (ITS#6262)
Fixed slapd to ignore controls with unrecognized flags (ITS#6480)
Fixed slapd entry ownership (ITS#5340)
Fixed slapd sasl auxprop_lookup (ITS#6441)
Fixed slapd sasl auxprop ssf (ITS#5195)
Fixed slapd syncrepl for attributes with no matching rule (ITS#6458)
Fixed slapd syncrepl for unknown attrs and delta-sync (ITS#6473)
Fixed slapd syncrep loop with moddn (ITS#6472)
Fixed slapo-accesslog to not replicate internal purges (ITS#6519)
Fixed slapd-bdb contextCSN^[?] updates from updatedn (ITS#6469)
Fixed slapd-bdb lockobj zeroing (ITS#6501)
Fixed slapd-ldap/meta control criticality (ITS#6523)
Fixed slapd-ldap/meta with ordered values (ITS#6516)
Fixed slapo-collect entry ownership (ITS#5340,ITS#6423)
Fixed slapo-dds with NULL backend (ITS#6490)
Fixed slapo-dynlist entry ownership (ITS#5340,ITS#6423)
Fixed slapo-memberof attr count (ITS#6508)
Fixed slapo-pcache to release its own entries (ITS#6484)
Fixed slapo-pcache with NULL backend (ITS#6490)
Fixed slapo-rwm entry release handling (ITS#6484)
Fixed slapo-rwm memory handling with rewrites (ITS#6526)
Fixed slapo-rwm olcRwmMap handling (ITS#6436)
Fixed slapo-rwm entry ownership (ITS#5340,ITS#6423)
Fixed slapo-syncprov memory leak (ITS#6459)
Fixed slapo-translucent counter increment (ITS#6497)
Fixed slapo-valsort entry ownership (ITS#5340,ITS#6423)
Fixed contrib/sha2 adds mechs for more hashes (ITS#6433)
Fixed contrib/nssov to use nss-pam-ldapd (ITS#6488)
Build Environment
Added back-ldif, back-null test support (ITS#5810)
Documentation
admin24 avoid explicity moduleload statements (ITS#6486)
admin24 broken link fixes (ITS#6493,ITS#6515)
slapd.access(5) val.regex explanation (ITS#5804)

MD5 (openldap-2.4.22.tgz) = ef01b52255ce8e3fbf8aa34f6fe7598b
SHA1 (openldap-2.4.22.tgz) = dd506b461c1fccd55dfff123b87aa6d07c899136

UC Expo 10th March

nospam@example.com (Suretec) — Thu, 04 Mar 2010 09:45:05 +0000

A quick note to say we will be attending UC Expo - The UK's leading Business Enterprise Communications Event.

I know we've been very quiet this year, but there's a good reason for this. Keep your eyes pealed for a big announcement in the next few months about our new VoIP provider (Internet Telephony Service Provider) - SureVoIP (redirects to main site for now).

Gavin.

Yubico key has arrived!

nospam@example.com (Gavin Henry) — Thu, 17 Dec 2009 15:39:58 +0000

It's taken us a while to get round to ordering one of these Yubikeys from Yubico, but they do look great and have lots of documentation via the wiki.

We're going to be testing them via the pam module for SSH access (and of course using pam_ldap).

So, users in LDAP^[?] via pam, and a Yubikey, let's see how it goes!

(will be interesting for logging in a SIP handset via Asterisk or FreeSWITCH that needs one too and all the others technologies Suretec use and support (Catalyst, Perl, PostgresSQL, Squid and more....). We'll see....

Monitoring your LDAP directory

nospam@example.com (Gavin Henry) — Fri, 23 Oct 2009 17:04:18 +0100

Hi all,

Andreas Andersson posted this on the openldap technical list last week about CN=Montior:

My name is Andreas and I want to inform you about a little project I've been working on called CN=Monitor.
It's about monitoring and verifying directory servers with focus on open source LDAP^[?] servers. From single installed servers to large scaled deployments.

Its a webbased application where you can:
- Verify availability, compare load and performance between servers
- Collect historical events for long term analysis (and get weekly reports by mail)
- Verify cluster and load balancing functionality
- Query several directories at the same time for data consistancy verification
... and a lot more.

Why the name CN=Monitor. Well.. a lot of the information collected and analyzed is gathered from the CN=Monitor base DN.

Looks very promising!!!

Will keep you posted,

Gavin.

Aberdeen Techmeetup tomorrow

nospam@example.com (Gavin Henry) — Tue, 20 Oct 2009 09:39:00 +0100

We founded the TechMeetup because there is an abundance of events for entrepreneurs to meet investors and lawyers, and next to nothing for techies and tech. Considering the wealth of tech talent around (yes you), why haven’t we made the effort before to get to know everyone – see what else everyone is working on – get help on our projects from others – and talk about some of the cool stuff we’re doing – web apps, software, mobile apps, hardware, games…

I'll be there at the Aberdeen Techmeetup 6.30pm tomorrow:

TIME: Wed, 21th Oct, 6.30pm

VENUE: North Side Meston Building, Aberdeen Uni (map)

SPEAKERS: Gavin MacLean, James Littlejohn

Suretec now have a merchant account!

nospam@example.com (Gavin Henry) — Fri, 16 Oct 2009 13:16:34 +0100

It's been a long process, almost 6 weeks, what with the new laws regarding PCI DSS compliance as of the 1st of October 2009, PCI DSS Scans, Business plans, website terms and connditions and many more things we have a merchant account at last!!!

This is mainly for our new Internet Telephony Service Provider called SureVoIP which is currently live with various customers but has no front facing sales and marketing site yet, only the admin and customer portal.

We'll keep you posted with a proper press release in due course.

Thanks,

Gavin.

OpenLDAP 2.4.19 Released

nospam@example.com (Suretec) — Tue, 06 Oct 2009 10:02:25 +0100

OpenLDAP 2.4.19 is now officially out. Download now and review the final changes list:

OpenLDAP 2.4.19 is now available for download as detailed on our
download page:
http://www.openldap.org/software/download/

and should soon be available on all official mirrors:
ftp://ftp.openldap.org/pub/OpenLDAP/MIRRORS

This is a maintenance release and is made available for general use.
Users of OpenLDAP Software are encouraged to upgrade.

Significant contributors to this release include:
Howard Chu (Symas Corp)
Hallvard Furuseth (University of Oslo)
Quanah Gibson-Mount (Yahoo! Inc)
Ralf Haferkamp (SUSE Linux)
Pierangelo Masarati (Politecnico di Milano)
Rein Tollevik (Basefarm AS)

OpenLDAP 2.4.19 Release (2009/10/06)
Fixed client tools with null timeouts (ITS#6282)
Fixed slapadd to warn about missing attrs for replicas (ITS#6281)
Fixed slapd acl cache (ITS#6287)
Fixed slapd tools to allow -n for conversion (ITS#6258)
Fixed slapd-ldap^[?] with null timeouts (ITS#6282)
Fixed slapd-ldap with strong binds with relay/translucent
(ITS#6296)
Fixed slapd-ldif buffer overflow (ITS#6303)
Fixed slapo-auditlog comments when modifying (ITS#6286)
Fixed slapo-dynlist lock leak (ITS#6308)
Fixed slapo-pcache cache corruption (ITS#6242)
Fixed slapo-sssvlv sort control dereferencing (ITS#6288)
Fixed contrib/autogroup segfaults (ITS#6279)
Fixed contrib/nssov getgroupbymembers (ITS#6291)
Fixed contrib/smbk5pwd rpath linking (ITS#6323)
Build Environment
Fixed --enable-deref support (ITS#6311)
Fixed contrib/autogroup default libtool path (ITS#6284)
Deleted nadf.schema (ITS#6140)

MD5 (openldap-2.4.19.tgz) = 4a6dab2711fcf141f19bb680bc335887
SHA1 (openldap-2.4.19.tgz) = 4a78acae0dd6d51d22ff50eef77912e59b31779a

Keep an eye on the Symas Release Notices site for when Symas OpenLDAP is at 2.4.19.

Suretec.

Updated LDAP RFCs drafts - "LDAP as a Network Information Service" and "Password Policy for LDAP Directories"

nospam@example.com (Gavin Henry) — Mon, 17 Aug 2009 10:10:43 +0100

As OpenLDAP sets the standard for being the most standards based LDAP^[?] directory, you'll be pleased to know that our partners Symas are keeping everyone updated about the wonderful world of collaboration in the LDAP world and in the process updating some much needed draft RFCs.

So, when you've got a second have a read of:

Password Policy for LDAP Directories - draft-behera-ldap^[?]-password-policy-10.txt

and

An Approach for Using LDAP as a Network Information Service - draft-howard-rfc2307bis-02.txt

Gavin.