Prep for release (2.6.2)

ITS#9815

ITS#9815 slapd-sql: escape filter values

Escape filter values to slapd-sql (CVE-2022-29155)

ITS#9789 slapo-vc: fix typo in prev commit

Fix typo in CHANGES file

ITS#9831

ITS#9831 Advance connections[index] correctly

ITS#9832

ITS#9832 Reset e back to the entry we need to release

ITS#9820

ITS#9820 fix writewait/idletimeout interaction

Since 88d22a1ca3b28e10e6557e8aebbd75dd61fed511 the writewait check
was moved out of connections_timeout_idle() but the connection loop
was still testing the writewait flag. That test is no longer relevant.

ITS#9825

ITS#9825 dynlist: add test case

ITS#9825 dynlist: don't lose earlier filter elements

ITS#9802 Fix argv handling

Log build timing information

Log test timing information

ITS#9818

ITS#9818 Duplicate substring filters correctly

ITS#9814

ITS#9814 - upgrade ppm to 2.1 release

Reject password if it contains tokens from an attribute of the LDAP entry https://github.com/ltb-project/ppm/issues/17

More for ITS#9436

ITS#9804

ITS#9804 - Fix documentation for syncrepl sizelimit/timelimit options

ITS#9802

ITS#9802 slapd-ldap/meta/async-meta: plug memleak in keepalive config

ITS#9802 slapd-meta: fix rewrite config ordering

ITS#9802 slapd-meta: fix rewrite config SEGV

ITS#9811

ITS#9811 Allow newlines at end of included file

ITS#9737

ITS#9737 ldapdelete unable to prune LDAP subentries

ITS#9809

ITS#9809: pcache, mdb: fix SEGV in monitor shutdown

ITS#9808

ITS#9808 Store the correct value in olcLastBind

ITS#9803

ITS#9803 Drop connection when receiving non-LDAP data

ITS#8753 Improve LDAP_OPT_X_TLS_PEERKEY_HASH documentation further

ITS#8255

ITS#8255 Clarify "sockresps result" behaviour

ITS#9801

ITS#9801 syncrepl/dsee init punlock

ITS#9780

ITS#9780 Document lloadd features new in 2.6

ITS#9794 Update behera draft for submission to IETF

ITS#9502 Clarify ldap_get/set_option API

ITS#9189 Fix typo

ITS#8753 Document LDAP_OPT_X_TLS_PEERKEY_HASH

ITS#9799

ITS#9799 Clear c_n_ops_pending after we've flushed c_pending_ops

ITS#9794

ITS#9794 Update behera draft wording

ITS#9794 Synchronise how Adds and Modifies are handled

Do not define DEBUGINFOD_URLS directly.

We're retaining the core file now and starting with bullseye, gdb takes
a long time to retrieve all symbols on startup which messes with tests.

ITS#9584

ITS#9584 bconfig: protect cf entries with rwlock

Since not all config writes pause the server, must prevent
searches from seeing intermediate states.

ITS#9436

ITS#9436 OpenSSL 3.0 compat

ITS#9436 libldap: OpenSSL 3.0 compat

ITS#9675

ITS#9675 - Allow overriding default location paths

To the ldapi socket, config file, config directory,
and database directory.

ITS#9584

ITS#9584 Do not rely on retry=.* to reschedule new syncrepl sessions

ITS#9785

ITS#9785 clear runqueue task as soon as it's getting started

ITS#9789

ITS#9789 slapo-vc: Reset op->o_counters every time we migrate to a new thread

ITS#9789 slapd-asyncmeta: Reset op->o_counters every time we migrate to a new thread

ITS#9789 slapo-syncprov: Reset op->o_counters every time we migrate to a new thread

ITS#9789 Expose operation_counter_init

ITS#9790

ITS#9790 Fix build with old GCC

Versions 4.1 and 4.3 show the following error:

In file included from ../../include/lutil.h:21,
                 from passwd.c:60:
../../include/ac/socket.h:247: error: redefinition of typedef 'Sockaddr'
../../include/ldap_pvt.h:188: error: previous declaration of 'Sockaddr' was here

ITS#9788

ITS#9788 Fix make jobserver warnings

Running make -j8 issues the following warning for each directory with
make 4.3:
make[2]: warning: -j8 forced in submake: resetting jobserver mode.

There is no need to pass MFLAGS. Make picks it up from the
environment anyway.

ITS#9791

ITS#9791 Fix compilation with openssl exclusions

ITS#9787

ITS#9787 init global_host earlier so tools see it too

Return to release engineering

Prep for release

ITS#9781

ITS#9781 Relax refcount assertion for referrals

ITS#7080

ITS#7080 cn=config postread support for modrdn when back-ldif not used

ITS#7080 Fix debug message

ITS#8039

ITS#8039 Free resinfo even if opcookie is the last owner

ITS#9779

ITS#9779 add test for negated filtered memberof

ITS#9779 slapo-dynlist: fix static group filter with multiple members

ITS#9772

ITS#9772 Allow objectClass edits that don't actually change them

ITS#5972

ITS#5972 Consider all deletes for syncInfo messages

A delete of an entry that didn't match filter would be skipped
altogether and the cookie would never be sent to that consumer.

ITS#9776

ITS#9776 Fix check on what backend we're operating on

ITS#9538 Actually skip internal searches

ITS#9538 Do not attach csn on (internal) searches

ITS#9538 Populate op2.o_hdr earlier