ITS#10063 - Fix typo in configure variable

Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5

Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5

ITS#8447

ITS#8447 fix cursor_put(MDB_CURRENT) on DUPSORT DB with different-sized data

ITS#10023

ITS#10023 libldap: fix asynch connects

This is option #1

Fix hanging indent in slapo-ldap manpage

Check slapadd result before continuing with test

ITS#10039

ITS#10039 - Regenerate configure

ITS#10039 Test for SSL_CTX_set_ciphersuites()

When configuring OpenLDAP using --with-tls=openssl with LibreSSL the
configure will fail to detect SSL_export_keyring_material_early() since
LibreSSL doesn't support this function yet. However OpenLDAP doesn't
actually use this function and only checks for it to ensure a modern
OpenSSL API is used. This can be easily solved by checking for an
equivalent modern OpenSSL function which both LibreSSL and OpenSSL both
support such as SSL_CTX_set_ciphersuites(). Doing this allows the build
and tests to succeed with modern LibreSSL versions. This was tested with
LibreSSL >= 3.6.

Bug: https://bugs.openldap.org/show_bug.cgi?id=10039

fix typo in lload.conf.5 cerificate -> certificate

ITS#10046

ITS#10046 Update manpage

ITS#10048

ITS#10048 Improve regex config error handling

ITS#9855

ITS#9855 Adapt other contrib module's tests

ITS#10041

ITS#10041 Restrict group searching

ITS#10033

ITS#10033 - Remove references to back-bdb/hdb cachesize parameter

ITS#10045

ITS#10045 Also check for abandon when things have settled

ITS#10037

ITS#10037 Update argon2 README

ITS#10032

ITS#10032 Use the correct ocs field

ITS#10035

ITS#10035 Fix setting TLSv1.3 ciphersuite

ITS#10030

ITS#9436,ITS#10030 libldap: OpenSSL 3.0 compat

Add OpenSSL 3.0 compatibility to OpenLDAP 2.5 series

ITS#10031

ITS#10031 Adjust *err if we free it

ITS#10028

ITS#10028 - crash with pwdMinDelay

ITS#10016

ITS#10016: slapo-syncprov: fix Abandon with active qtask

ITS#10015

ITS#10015 libldap: fix KEEPALIVE opts from ITS#9490

ITS#9953

ITS#9953 Check for push replication

ITS#10004

ITS#10004: librewrite: plug potential ld leak in ldapmap

ITS#10003

ITS#10003: ldap_open_internal_connection: fix mutex usage

Note: this is a non-standard function with no use cases

ITS#10000

ITS#10000 slapd-watcher: plug potential leak

ITS#9999

ITS#9999 slapd-search: plug potential leak

ITS#9998

ITS#9998 slapd-mtread: plug potential leak

ITS#9997

ITS#9997 syncrepl: plug potential leak in changelog search

Note this is only used with changelog, which is nonstandard and obsolete.

ITS#9996

ITS#9996 librewrite plug potential leak in ldapmap map_ldap_apply()

ITS#9995 ldapdelete: plug potential search leak

ITS#9989

ITS#9989 Keep .pc files on «make clean»

ITS#10011

ITS#10011 - Regenerate configure

ITS#10011 servers: fix -Wstrict-prototypes

For more information, see LWN.net [0] or LLVM's Discourse [1], the Gentoo wiki [2],
or the (new) c-std-porting mailing list [3].

[0] https://lwn.net/Articles/913505/
[1] https://discourse.llvm.org/t/configure-script-breakage-with-the-new-werror-implicit-function-declaration/65213
[2] https://wiki.gentoo.org/wiki/Modern_C_porting
[3] hosted at lists.linux.dev.

Signed-off-by: Sam James <sam@gentoo.org>

ITS#10011 contrib: fix old-style K&R declarations

Removed in C23.

For more information, see LWN.net [0] or LLVM's Discourse [1], the Gentoo wiki [2],
or the (new) c-std-porting mailing list [3].

[0] https://lwn.net/Articles/913505/
[1] https://discourse.llvm.org/t/configure-script-breakage-with-the-new-werror-implicit-function-declaration/65213
[2] https://wiki.gentoo.org/wiki/Modern_C_porting
[3] hosted at lists.linux.dev.

Signed-off-by: Sam James <sam@gentoo.org>

ITS#10011 build: fix compatibility with stricter C99 compilers

Fix the following warnings:
- -Wimplicit-int (fatal with Clang 16)
- -Wimplicit-function-declaration (fatal with Clang 16)
- -Wincompatible-function-pointer-types (fatal with Clang 16)
- -Wint-conversion (fatal with Clang 15)
- Old style prototypes (K&R, removed from C23)

These warnings-now-error led to misconfigurations and failure to build
OpenLDAP, as the tests used during configure caused the wrong results
to be emitted.

For more information, see LWN.net [0] or LLVM's Discourse [1], the Gentoo wiki [2],
or the (new) c-std-porting mailing list [3].

[0] https://lwn.net/Articles/913505/
[1] https://discourse.llvm.org/t/configure-script-breakage-with-the-new-werror-implicit-function-declaration/65213
[2] https://wiki.gentoo.org/wiki/Modern_C_porting
[3] hosted at lists.linux.dev.

Bug: https://bugs.gentoo.org/871288
Signed-off-by: Sam James <sam@gentoo.org>

ITS#9990

ITS#9990 Preserve callbacks added already

Return to engineering

Return to engineering

Prep for release (2.5.14)

Merge remote-tracking branch 'origin/mdb.RE/0.9' into OPENLDAP_REL_ENG_2_5

Update MDB_VERSION_DATE for the release

Update release date for 0.9.30

ITS#9718 - Fix nonportable sed usage

ITS#9985

ITS#9985 - Fix module name to pw-totp

ITS#9991

ITS#9991 send_ldap_ber: make sure we're only closing our own connection

ITS#8102

ITS#8102 Do not continue if deconfigured during pause

ITS#9930 Do not reschedule consumers that are shutting down

ITS#9045

ITS#9045 rlock only if there may be other threads

We can't rlock if we've registered ourselves as a writer. We can only
figure that out by checking if we're the thread that initiated the
pause: is the server paused already?

Revert "Revert "ITS#9045 Do not share cn=config entries with outside code""

This reverts commit 393308ac1c3eb9d65b682c06826d60a0bf856070.

ITS#9930 Just wait until si_mutex is ready

We're in a much better place now and there is only a single task active
for a given syncinfo_t plus the task that's just scheduled it and is
wrapping up. Any remaining times this wouldn't be true are probably bugs
to be fixed.

ITS#9983

ITS#9983 Also fix c_refcnt sequencing

ITS#9983 Rework op->o_refcnt decref sequencing

epoch_append should be called at the point the object is not reachable
anymore, otherwise a thread from a "future" might still access it post
reclamation.

ITS#9984

ITS#9984 Keep listener base around even if not active

Fix options for olcIndexHash64

Use cn=config format of TRUE/FALSE instead of slapd.conf format on/off

ITS#9976

ITS#9976 doc: ldap_sasl_bind: mention ber_bvfree

typo unsuccesSful, presense/presence, accessSlog

ITS#9957

ITS#9957 slapo-dynlist: more explicit config doc

ITS#9966

ITS#9966 slapo-pcache: fix crash in consistency_check

ITS#9960

ITS#9960 slapo-dynlist: mark internal searches as internal