fix typo in lload.conf.5 cerificate -> certificate

ITS#10046

ITS#10046 Update manpage

ITS#10048

ITS#10048 Improve regex config error handling

ITS#9855

ITS#9855 Adapt other contrib module's tests

ITS#10041

ITS#10041 Restrict group searching

ITS#10033

ITS#10033 - Remove references to back-bdb/hdb cachesize parameter

ITS#10045

ITS#10045 Also check for abandon when things have settled

ITS#10037

ITS#10037 Update argon2 README

ITS#10032

ITS#10032 Use the correct ocs field

ITS#10035

ITS#10035 Fix setting TLSv1.3 ciphersuite

ITS#10030

ITS#9436,ITS#10030 libldap: OpenSSL 3.0 compat

Add OpenSSL 3.0 compatibility to OpenLDAP 2.5 series

ITS#10031

ITS#10031 Adjust *err if we free it

ITS#10028

ITS#10028 - crash with pwdMinDelay

ITS#10016

ITS#10016: slapo-syncprov: fix Abandon with active qtask

ITS#10015

ITS#10015 libldap: fix KEEPALIVE opts from ITS#9490

ITS#9953

ITS#9953 Check for push replication

ITS#10004

ITS#10004: librewrite: plug potential ld leak in ldapmap

ITS#10003

ITS#10003: ldap_open_internal_connection: fix mutex usage

Note: this is a non-standard function with no use cases

ITS#10000

ITS#10000 slapd-watcher: plug potential leak

ITS#9999

ITS#9999 slapd-search: plug potential leak

ITS#9998

ITS#9998 slapd-mtread: plug potential leak

ITS#9997

ITS#9997 syncrepl: plug potential leak in changelog search

Note this is only used with changelog, which is nonstandard and obsolete.

ITS#9996

ITS#9996 librewrite plug potential leak in ldapmap map_ldap_apply()

ITS#9995 ldapdelete: plug potential search leak

ITS#9989

ITS#9989 Keep .pc files on «make clean»

ITS#10011

ITS#10011 - Regenerate configure

ITS#10011 servers: fix -Wstrict-prototypes

For more information, see LWN.net [0] or LLVM's Discourse [1], the Gentoo wiki [2],
or the (new) c-std-porting mailing list [3].

[0] https://lwn.net/Articles/913505/
[1] https://discourse.llvm.org/t/configure-script-breakage-with-the-new-werror-implicit-function-declaration/65213
[2] https://wiki.gentoo.org/wiki/Modern_C_porting
[3] hosted at lists.linux.dev.

Signed-off-by: Sam James <sam@gentoo.org>

ITS#10011 contrib: fix old-style K&R declarations

Removed in C23.

For more information, see LWN.net [0] or LLVM's Discourse [1], the Gentoo wiki [2],
or the (new) c-std-porting mailing list [3].

[0] https://lwn.net/Articles/913505/
[1] https://discourse.llvm.org/t/configure-script-breakage-with-the-new-werror-implicit-function-declaration/65213
[2] https://wiki.gentoo.org/wiki/Modern_C_porting
[3] hosted at lists.linux.dev.

Signed-off-by: Sam James <sam@gentoo.org>

ITS#10011 build: fix compatibility with stricter C99 compilers

Fix the following warnings:
- -Wimplicit-int (fatal with Clang 16)
- -Wimplicit-function-declaration (fatal with Clang 16)
- -Wincompatible-function-pointer-types (fatal with Clang 16)
- -Wint-conversion (fatal with Clang 15)
- Old style prototypes (K&R, removed from C23)

These warnings-now-error led to misconfigurations and failure to build
OpenLDAP, as the tests used during configure caused the wrong results
to be emitted.

For more information, see LWN.net [0] or LLVM's Discourse [1], the Gentoo wiki [2],
or the (new) c-std-porting mailing list [3].

[0] https://lwn.net/Articles/913505/
[1] https://discourse.llvm.org/t/configure-script-breakage-with-the-new-werror-implicit-function-declaration/65213
[2] https://wiki.gentoo.org/wiki/Modern_C_porting
[3] hosted at lists.linux.dev.

Bug: https://bugs.gentoo.org/871288
Signed-off-by: Sam James <sam@gentoo.org>

ITS#9990

ITS#9990 Preserve callbacks added already

Return to engineering

Prep for release (2.5.14)

Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5

Update MDB_VERSION_DATE for the release

Update release date for 0.9.30

ITS#9718 - Fix nonportable sed usage

ITS#9985

ITS#9985 - Fix module name to pw-totp

ITS#9991

ITS#9991 send_ldap_ber: make sure we're only closing our own connection

ITS#8102

ITS#8102 Do not continue if deconfigured during pause

ITS#9930 Do not reschedule consumers that are shutting down

ITS#9045

ITS#9045 rlock only if there may be other threads

We can't rlock if we've registered ourselves as a writer. We can only
figure that out by checking if we're the thread that initiated the
pause: is the server paused already?

Revert "Revert "ITS#9045 Do not share cn=config entries with outside code""

This reverts commit 393308ac1c3eb9d65b682c06826d60a0bf856070.

ITS#9930 Just wait until si_mutex is ready

We're in a much better place now and there is only a single task active
for a given syncinfo_t plus the task that's just scheduled it and is
wrapping up. Any remaining times this wouldn't be true are probably bugs
to be fixed.

ITS#9983

ITS#9983 Also fix c_refcnt sequencing

ITS#9983 Rework op->o_refcnt decref sequencing

epoch_append should be called at the point the object is not reachable
anymore, otherwise a thread from a "future" might still access it post
reclamation.

ITS#9984

ITS#9984 Keep listener base around even if not active

Fix options for olcIndexHash64

Use cn=config format of TRUE/FALSE instead of slapd.conf format on/off

ITS#9976

ITS#9976 doc: ldap_sasl_bind: mention ber_bvfree

typo unsuccesSful, presense/presence, accessSlog

ITS#9957

ITS#9957 slapo-dynlist: more explicit config doc

ITS#9966

ITS#9966 slapo-pcache: fix crash in consistency_check

ITS#9960

ITS#9960 slapo-dynlist: mark internal searches as internal

ITS#9880

ITS#9880 slapo-accesslog: fix reqStart ordering filter

Same as ITS#9358 but for ordering matching rule, not just equality

ITS#9961 LMDB: fix MSVC error

Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5

ITS#9929 plug memleaks

ITS#9121 dynlist: cleanup unused code

ITS#9929 preserve e_name for memberOf values

ITS#9929: more performance tweaks

For simple (non-nested) member compares, avoid unnecessary fetches
of dyngroups that can't match the filter.
cache filter/entry instance info across multiple dyn entries to
avoid refetching each filter entry for each dyngruop test.

ITS#9929 slapo-dynlist: more performance tweaks

Minimize cost of dynamic lists while still making them filterable:
require their attrs to be explicitly mapped if filtering is to be supported.

Also check config scope in compare op

ITS#9955

ITS#9955 liblunicode: fix buffer size in UTF8bvnormalize

output buffer may overrun 1 byte for specially crafted approxMatch search filters.
Not exploitable, no operational or security impact.

ITS#9947

ITS#9947 Fix race in epoch.c and simplify