Merge ~sergiodj/ubuntu/+source/openldap:merge-2.5.5-experimental into ubuntu/+source/openldap:debian/sid

[Sergio Durigan Junior]

This is the merge of openldap 2.5.5 from Debian experimental.

After weeks working to make sure that every reverse dependency builds fine with it and that all of their autopkgtests are also passing, it is finally time to upload the package to the archive so that we can start the transition process.

Bear in mind a few things, though:

1) Not all rdeps are building successfully, but that is not happening because of the openldap update; rather, the ones that are failing are already FTBFSing in the archive. You can take a look at the full list of rdeps (including the failing ones) in this PPA:

https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/4572

The PPA is a few days old, but should still give a good idea on what is failing and what is not.

2) There is currently one rdep whose autopkgtest is failing *because of the transition*: nss-pam-ldapd. Ryan (the Debian openldap maintainer) and I are working to get this resolved. There is a Debian bug that I filed here:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989409

We will see this failure on Ubuntu as well, but as I said above I intend to work on a fix for it in the next days.

3) With this new update, I was able to drop a bunch of old and unnecessary stuff from our delta. Here are the main things that I dropped:

  - GSSAPI support.
  - NSS overlay support.
  - CLDAP (UDP) support.

All 3 were either "marked" to be dropped in d/changelog when the soname changed, or (for the NSS overlay support) is something old that doesn't make sense for us to carry anymore.

4) It is important to keep in mind that this package is still somewhat experimental. There is at least one upgrade path that currently does not work OOTB, and there may be more corner cases that will need some polishing.

Here is what doesn't work: if a user installed openldap on a previous Ubuntu version (Bionic, most likely) and chose to use the BDB backend, which has been deprecated in the 2.5.x release, and kept using BDB until now, the upgrade will break when the user installs this version of openldap.

We are working on having an "escape hatch" for these scenarios.

Having said all that: you can find a PPA with the proposed package here:

https://launchpad.net/~ci-train-ppa-service/+archive/ubuntu/4585

I scheduled autopkgtest runs for all architectures using this PPA as a base, and everything has passed (although the current tests are only superficial):

autopkgtest [23:10:46]: @@@@@@@@@@@@@@@@@@@@ summary
slapd PASS (superficial)
smbk5pwd PASS (superficial)

[Sergio Durigan Junior (sergiodj)]

Requesting a review specifically from Andreas because he is very familiar with this package.

[Andreas Hasenack (ahasenack)]

This is on my radar.

[Sergio Durigan Junior (sergiodj)]

On Wednesday, June 16 2021, Andreas Hasenack wrote:

> This is on my radar.

Thanks, Andreas.

--
Sergio
GPG key ID: E92F D0B3 6B14 F1F4 D8E0 EB2F 106D A1C8 C3CB BF14

[Andreas Hasenack (ahasenack)]

This was surprisingly easy to review, great job!

Some comments:
- what do you think about updating debian/slapd.NEWS with information about what we dropped in this update? The BDB backend, nss overlay, old gssapi patch, cldap
- from the debian changelog for 2.5.4, looks like we also dropped HDB and the shell backend, this should also go into the news file, and eventually be handled by the escape hatch?

I'm gonna run some tests now. What I would like to check:
- if the apport hook still works with 2.5.5
- if the apparmor profile still works with 2.5.5
- run linter, to see if something serious pops up

[Andreas Hasenack (ahasenack)]

diff --git a/debian/slapd.py b/debian/slapd.py
new file mode 100644
index 0000000000..7d78699ec0
--- /dev/null
+++ b/debian/slapd.py
@@ -0,0 +1,51 @@
+#!/usr/bin/python
+

This didn't prevent it from working, but I think it's time we change the shebang line to /usr/bin/python3 :)

[Andreas Hasenack (ahasenack)]

apport works, apparmor is fine, linter shows nothing new we added.

Delta correctly applied.

Known issues with upgrade from deprecated backends will be handled during this cycle.

+1!

Remember we will also have a NEW package here, due to the soname change, so an AA will have to accept it before the transition begins.

review: Approve

[Sergio Durigan Junior (sergiodj)]

On Sunday, June 20 2021, Andreas Hasenack wrote:

> This was surprisingly easy to review, great job!

Thank you very much for the review, Andreas.

> Some comments:
> - what do you think about updating debian/slapd.NEWS with information about what we dropped in this update? The BDB backend, nss overlay, old gssapi patch, cldap

Yeah, totally agreed. I think it's better if we handle this on the
Debian package, so I will file an MR against openldap on salsa and
discuss with Ryan the best wording for the NEWS entry.

> - from the debian changelog for 2.5.4, looks like we also dropped HDB and the shell backend, this should also go into the news file, and eventually be handled by the escape hatch?

Sure thing. I intend to contemplate these changes in the escape hatch.

On Sunday, June 20 2021, Andreas Hasenack wrote:

> diff --git a/debian/slapd.py b/debian/slapd.py
> new file mode 100644
> index 0000000000..7d78699ec0
> --- /dev/null
> +++ b/debian/slapd.py
> @@ -0,0 +1,51 @@
> +#!/usr/bin/python
> +
>
> This didn't prevent it from working, but I think it's time we change the shebang line to /usr/bin/python3 :)

Heh, good point. I've updated the shebang.

On Sunday, June 20 2021, Andreas Hasenack wrote:

> Review: Approve
>
> apport works, apparmor is fine, linter shows nothing new we added.
>
> Delta correctly applied.
>
> Known issues with upgrade from deprecated backends will be handled during this cycle.
>
> +1!

Thank you!

> Remember we will also have a NEW package here, due to the soname change, so an AA will have to accept it before the transition begins.

+1 :-)

--
Sergio
GPG key ID: E92F D0B3 6B14 F1F4 D8E0 EB2F 106D A1C8 C3CB BF14

[Sergio Durigan Junior (sergiodj)]

Pushed & uploaded:

$ git push pkg upload/2.5.5+dfsg-1_exp1ubuntu1
Enumerating objects: 45, done.
Counting objects: 100% (45/45), done.
Delta compression using up to 8 threads
Compressing objects: 100% (39/39), done.
Writing objects: 100% (39/39), 23.88 KiB | 1.71 MiB/s, done.
Total 39 (delta 25), reused 2 (delta 0)
To ssh://git.launchpad.net/ubuntu/+source/openldap
 * [new tag] upload/2.5.5+dfsg-1_exp1ubuntu1 -> upload/2.5.5+dfsg-1_exp1ubuntu1

$ dput openldap_2.5.5+dfsg-1~exp1ubuntu1_source.changes
Trying to upload package to ubuntu
Checking signature on .changes
gpg: /home/sergio/work/openldap/openldap_2.5.5+dfsg-1~exp1ubuntu1_source.changes: Valid signature from 106DA1C8C3CBBF14
Checking signature on .dsc
gpg: /home/sergio/work/openldap/openldap_2.5.5+dfsg-1~exp1ubuntu1.dsc: Valid signature from 106DA1C8C3CBBF14
Package includes an .orig.tar.gz file although the debian revision suggests
that it might not be required. Multiple uploads of the .orig.tar.gz may be
rejected by the upload queue management software.
Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading openldap_2.5.5+dfsg-1~exp1ubuntu1.dsc: done.
  Uploading openldap_2.5.5+dfsg.orig.tar.gz: done.
  Uploading openldap_2.5.5+dfsg-1~exp1ubuntu1.debian.tar.xz: done.
  Uploading openldap_2.5.5+dfsg-1~exp1ubuntu1_source.buildinfo: done.
  Uploading openldap_2.5.5+dfsg-1~exp1ubuntu1_source.changes: done.
Successfully uploaded packages.

Thanks again.

[Christian Ehrhardt  (paelzer)]

While not migrated, this is in impish and in git-ubuntu by now.
Setting the MR to merged

 openldap | 2.5.5+dfsg-1~exp1ubuntu1 | impish-proposed | source

diff --git a/ANNOUNCEMENT b/ANNOUNCEMENT
index ddcdcab..bce8a23 100644
--- a/ANNOUNCEMENT
+++ b/ANNOUNCEMENT
@@ -1,37 +1,98 @@
-A N N O U N C E M E N T -- OpenLDAP 2.4
+A N N O U N C E M E N T -- OpenLDAP 2.5
 
     The OpenLDAP Project is pleased to announce the availability
-    of OpenLDAP Software 2.4, a suite of the Lightweight Directory
+    of OpenLDAP Software 2.5, a suite of the Lightweight Directory
     Access Protocol (v3) servers, clients, utilities, and
     development tools.
 
     This release contains the following major enhancements:
 
         * Slapd(8) enhancements
-            - Syncrepl enhancements, including push-mode and
-              Multi-Provider support
-            - Dynamic configuration enhancements, including
-              online schema editing and full access control
-            - Dynamic monitoring enhancements, including
-              cache usage information
+            - kqueue support for BSD based OSes
+            - cn=config delete support
+            - Don't use copy control support
+            - Threadpool queues
+            - non-blocking TLS support
+            - Configurable TCP read and write buffers
+               for listeners.
+            - LDAP Transaction support
+            - MS AD Lazy commit control
+            - MS AD replication support
+            - DSEE replication support
+            - Sun/Netscape draft persistent search support
+            - HAProxy proxy protocol v2 support
+        * New backends
+            - back-wt: Wiredtiger backend to slapd (Experimental)
+            - back-asyncmeta: Async version of back-meta
+        * Backend updates
+            - back-ldap: CANCHAINOPS
+            - back-meta META_CLIENT_PR
+            - back-monitor is always built as a part of slapd
+        * Retired backends
+            - back-bdb
+            - back-hdb
+            - back-shell
+        * Deprecated backends
+            - back-ndb
+            - back-sql
+            - back-perl
         * New overlays
-            - Attribute value constraints
-            - Dynamic Directory Services (RFC2589)
-            - Reverse Group Membership maintenance (memberof)
+            - autoca
+            - homedir
+            - otp
+            - remoteauth
+        * New password hashing module
+            - argon2
+        * Overlay updates
+            - pcache can access private DB with control
+            - pcache can remove a query from the cache
+               with exop
+            - back-monitor support for pcache
+            - ppolicy updated with password policy
+               draft 10 support
+            - dynlist can now generate (is)memberOf
+               dynamically
+            - dynlist do reverse lookups to find all
+               groups a user belongs to
+            - unique can now do db wide locking to avoid
+               race conditions
+        * New Library
+            - libldif provides an LDIF parsing API
+        * Library updates
+            - libldap_r has been merged with libldap
+            - libldap has TLS channel binding support
+            - libldap has TLS public key pinning support
+            - libldap has TLS SNI support
+            - libldap has GSSAPI channel binding support
         * Clients and tools
-            - Full support of request/response controls
-            - New ldapexop tool for arbitrary extend operations
-            - Support of DNS SRV records for default server
+            - slapmodify for offline updates to cn=config
         * Significant performance enhancements throughout
             the client and server code base
-        * Multiple new features in libldap and liblber
-        * Expanded documentation
-            - Function-complete manual pages
-            - Numerous new examples in the Admin Guide
+        * New contrib overlays
+            - adremap remaps attributes for PAM/NSS MS AD
+               support
+            - authzid implements RFC 3829 support
+            - datamorph stores enumerated values and fixed
+               size integers
+            - ppm adds additional password checking criteria
+               to the slapo-ppolicy overlay
+            - pw-radius allows bind operations to be
+               passed to the specified radius server(s)
+            - rbac intercepts, decodes and enforces specific
+               RBAC policies per the Apache Fortress RBAC
+               data formats
+            - totp provides one time password support
+            - usn adds MS AD usnCreated and usnChanged
+               operational attributes to entries
+            - variant allows attributes/values to be shared
+               between several entries
+            - vc provides the verify credentials
+               extended operation
 
     This release includes the following major components:
 
         * slapd - a stand-alone LDAP directory server
+        * lloadd - a stand-alone LDAP load balancing proxy server
         * -lldap - a LDAP client library
         * -llber - a lightweight BER/DER encoding/decoding library
         * LDIF tools - data conversion tools for use with slapd
@@ -61,38 +122,34 @@ AVAILABILITY
     an non-restrictive, "free", open-source license.  Download
     information is available at:
 
-        http://www.OpenLDAP.org/software/download/
+        https://www.OpenLDAP.org/software/download/
 
 
 SUPPORT
 
     OpenLDAP Software is user supported:
 
-        http://www.openldap.org/support/
+        https://www.openldap.org/support/
 
     The OpenLDAP Administrator's Guide, which includes quick
     start instructions, is available at:
 
-        http://www.openldap.org/doc/admin/
-
-    The project maintains a FAQ which you may find useful:
-
-        http://www.openldap.org/faq/
+        https://www.openldap.org/doc/admin/
 
     In addition, there are also a number of discussion lists
     related to OpenLDAP Software.  A list of mailing lists is
     available at:
 
-        http://www.OpenLDAP.org/lists/
+        https://www.OpenLDAP.org/lists/
 
     To report bugs, please use project's Issue Tracking System:
 
-        http://www.openldap.org/its/
+        https://bugs.openldap.org/
 
     The OpenLDAP home page containing lots of interesting information
     and online documentation is available at this URL:
 
-        http://www.OpenLDAP.org/
+        https://www.OpenLDAP.org/
 
 
 SUPPORTED PLATFORMS
diff --git a/CHANGES b/CHANGES
index a97874c..e8bb245 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,2059 +1,37 @@
-OpenLDAP 2.4 Change Log
-
-OpenLDAP 2.4.57 Release (2021/01/18)
-	Fixed ldapexop to use correct return code (ITS#9417)
-	Fixed slapd to remove asserts in UUIDNormalize (ITS#9391)
-	Fixed slapd to remove assert in csnValidate (ITS#9410)
-	Fixed slapd validity checks for issuerAndThisUpdateCheck (ITS#9411, ITS#9427)
-	Fixed slapd validity checks for serialNumberAndIssuerCheck (ITS#9404, ITS#9424)
-	Fixed slapd AVA sort with invalid RDN (ITS#9412)
-	Fixed slapd ldap_X509dn2bv to check for invalid BER after RDN count (ITS#9423, ITS#9425)
-	Fixed slapd saslauthz to remove asserts in validation (ITS#9406, ITS#9407)
-	Fixed slapd saslauthz to use slap_sl_free on normalized DN (ITS#9409)
-	Fixed slapd saslauthz SEGV in slap_parse_user (ITS#9413)
-	Fixed slapd modrdn memory leak (ITS#9420)
-	Fixed slapd double-free in vrfilter (ITS#9408)
-	Fixed slapd cancel operation to correctly terminate (ITS#9428)
-	Fixed slapd-ldap fix binds on retry with closed connection (ITS#9400)
-	Fixed slapo-syncprov to ignore duplicate sessionlog entries (ITS#9394)
-
-OpenLDAP 2.4.56 Release (2020/11/10)
-	Fixed slapd to remove assert in certificateListValidate (ITS#9383)
-	Fixed slapd to remove assert in csnNormalize23 (ITS#9384)
-	Fixed slapd to better parse ldapi listener URIs (ITS#9379)
-
-OpenLDAP 2.4.55 Release (2020/10/26)
-	Fixed slapd normalization handling with modrdn (ITS#9370)
-	Fixed slapd-meta to check ldap_install_tls return code (ITS#9366)
-	Contrib
-		Fixed nssov misplaced semicolon (ITS#8731, ITS#9368)
-
-OpenLDAP 2.4.54 Release (2020/10/12)
-	Fixed slapd delta-syncrepl to ignore delete ops on deleted entry (ITS#9342)
-	Fixed slapd delta-syncrepl to be fully serialized (ITS#9330)
-	Fixed slapd delta-syncrepl MOD on zero-length context entry (ITS#9352)
-	Fixed slapd syncrepl to be fully serialized (ITS#8102)
-	Fixed slapd syncrepl to call check_syncprov on fresh consumer (ITS#9345)
-	Fixed slapd syncrepl to propagate errors from overlay_entry_get_ov (ITS#9355)
-	Fixed slapd syncrepl to not create empty ADD ops (ITS#9359)
-	Fixed slapd syncrepl replace usage on single valued attrs (ITS#9295)
-	Fixed slapd-monitor fix monitor_back_register_database for empty suffix DB (ITS#9353)
-	Fixed slapo-accesslog normalizer for reqStart (ITS#9358)
-	Fixed slapo-accesslog to not generate new contextCSN on purge (ITS#9361)
-	Fixed slapo-syncprov contextCSN generation with empty suffix (ITS#9015)
-	Fixed slapo-syncprov sessionlog to use a TAVL tree (ITS#8486)
-
-OpenLDAP 2.4.53 Release (2020/09/07)
-	Added slapd syncrepl additional SYNC logging (ITS#9043)
-	Fixed slapd syncrepl segfault on NULL cookie on REFRESH (ITS#9282)
-	Fixed slapd syncrepl to use fresh connection on REFRESH fallback (ITS#9338)
-	Fixed slapo-ppolicy race condition for pwdFailureTime (ITS#9302,ITS#9334)
-	Build
-		Require OpenSSL 1.0.2 or later (ITS#9323)
-		Fixed libldap compilation issue with broken C compilers (ITS#9332)
-
-OpenLDAP 2.4.52 Release (2020/08/28)
-	Added libldap LDAP_OPT_X_TLS_REQUIRE_SAN option (ITS#9318)
-	Added libldap OpenSSL support for multiple EECDH curves (ITS#9054)
-	Added slapd OpenSSL support for multiple EECDH curves (ITS#9054)
-	Fixed librewrite malloc/free corruption (ITS#9249)
-	Fixed libldap hang when using UDP and server down (ITS#9328)
-	Fixed slapd syncrepl rare deadlock due to network issues (ITS#9324)
-	Fixed slapd syncrepl regression that could trigger an assert (ITS#9329)
-	Fixed slapd-mdb index error with collapsed range (ITS#9135)
-
-OpenLDAP 2.4.51 Release (2020/08/11)
-	Added slapo-ppolicy implement Netscape password policy controls (ITS#9279)
-	Fixed libldap retry loop in ldap_int_tls_connect (ITS#8650)
-	Fixed libldap to use getaddrinfo in ldap_pvt_get_fqdn (ITS#9287)
-	Fixed slapd to enforce singular existence of some overlays (ITS#9309)
-	Fixed slapd syncrepl to not delete non-replicated attrs (ITS#9227)
-	Fixed slapd syncrepl to correctly delete entries on resync (ITS#9282)
-	Fixed slapd syncrepl to use replace on single valued attrs (ITS#9294, ITS#9295)
-	Fixed slapd-perl dynamic config with threaded slapd (ITS#7573)
-	Fixed slapo-ppolicy to expose the ppolicy control (ITS#9285)
-	Fixed slapo-ppolicy race condition for pwdFailureTime (ITS#9302)
-	Fixed slapo-ppolicy so it can only exist once per DB (ITS#9309)
-	Fixed slapo-chain to check referral (ITS#9262)
-	Build Environment
-		Fix test064 so it no longer uses bashisms (ITS#9263)
-	Contrib
-		Fix default prefix value for pw-argon2, pw-pbkdf2 modules (ITS#9248)
-		slapo-allowed - Fix usage of unitialized variable (ITS#9308)
-	Documentation
-		ldap_parse_result(3) - Document ldap_parse_intermediate (ITS#9271)
-
-OpenLDAP 2.4.50 Release (2020/04/28)
-	Fixed client benign typos (ITS#8890)
-	Fixed libldap type cast (ITS#9175)
-	Fixed libldap retry loop in ldap_int_tls_connect (ITS#8650)
-	Fixed libldap_r race on Windows mutex initialization (ITS#9181)
-	Fixed liblunicode memory leak (ITS#9198)
-	Fixed slapd benign typos (ITS#8890)
-	Fixed slapd to limit depth of nested filters (ITS#9202)
-	Fixed slapd-mdb memory leak in dnSuperiorMatch (ITS#9214)
-	Fixed slapo-pcache database initialization (ITS#9182)
-	Fixed slapo-ppolicy callback (ITS#9171)
-	Build
-		Fix olcDatabaseDummy initialization for windows (ITS#7074)
-		Fix detection for ws2tcpip.h for windows (ITS#8383)
-		Fix back-mdb types for windows (ITS#7878)
-	Contrib
-		Update ldapc++ config.guess and config.sub to support newer architectures (ITS#7855)
-		Added pw-argon2 module (ITS#9233, ITS#8575, ITS#9203, ITS#9206)
-	Documentation
-		slapd-ldap(5) - Clarify idassert-authzfrom behavior (ITS#9003)
-		slapd-meta(5) - Remove client-pr option (ITS#8683)
-		slapindex(8) - Fix truncate option information for back-mdb (ITS#9230)
-
-OpenLDAP 2.4.49 Release (2020/01/30)
-	Added slapd-monitor database entry count for slapd-mdb (ITS#9154)
-	Fixed client tools to not add controls on cancel/abandon (ITS#9145)
-	Fixed client tools SyncInfo message to be LDIF compliant (ITS#8116)
-	Fixed libldap to correctly free sb (ITS#9081, ITS#8755)
-	Fixed libldap descriptor leak if ldaps fails (ITS#9147)
-	Fixed libldap remove unnecessary global mutex for GnuTLS (ITS#9069)
-	Fixed slapd syntax evaluation of preferredDeliveryMethod (ITS#9067)
-	Fixed slapd to relax domainScope control check (ITS#9100)
-	Fixed slapd to have cleaner error handling during connection setup (ITS#9112)
-	Fixed slapd data check when processing cancel exop (ITS#9124)
-	Fixed slapd attribute description processing (ITS#9128)
-	Fixed slapd-ldap to set oldctrls correctly (ITS#9076)
-	Fixed slapd-mdb to honor unchecked limit with alias deref (ITS#7657)
-	Fixed slapd-mdb missing final commit with slapindex (ITS#9095)
-	Fixed slapd-mdb drop attr mappings added in an aborted txn (ITS#9091)
-	Fixed slapd-mdb nosync FLAG configuration handling (ITS#9150)
-	Fixed slapd-monitor global operation counter reporting (ITS#9119)
-	Fixed slapo-ppolicy when used with slapauth (ITS#8629)
-	Fixed slapo-ppolicy to add a missed normalised copy of pwdChangedTime (ITS#9126)
-	Fixed slapo-syncprov fix sessionlog init (ITS#9146)
-	Fixed slapo-unique loop termination (ITS#9077)
-	Build Environment
-		Fix mkdep to honor TMPDIR if set (ITS#9062)
-		Remove ICU library detection (ITS#9144)
-		Update config.guess and config.sub to support newer architectures (ITS#7855)
-		Disable ITS8521 regression test as it is no longer valid (ITS#9015)
-	Documentation
-		admin24 - Fix inconsistent whitespace in replication section (ITS#9153)
-		admin24 - Fix dmoz URL to point to Curlie (ITS#9289)
-		slapd-config(5)/slapd.conf(5) - Fix missing bold tag for keyword (ITS#9063)
-		slapd-ldap(5) - Document "tls none" option (ITS#9071)
-		slapo-ppolicy(5) - Correctly document pwdGraceAuthnLimit (ITS#9065)
-
-OpenLDAP 2.4.48 Release (2019/07/24)
-	Added libldap OpenSSL Elliptic Curve support (ITS#7595)
-	Added libldap Expose OpenLDAP specific interfaces via openldap.h (ITS#8671)
-	Added slapd-monitor support for slapd-mdb (ITS#7770)
-	Fixed liblber leaks (ITS#8727)
-	Fixed liblber with partial flush (ITS#8864)
-	Fixed libldap ASYNC TLS so it works (ITS#8957,ITS#8980)
-	Fixed libldap ASYNC connections with Solaris 10 (ITS#8968)
-	Fixed libldap with SASL_NOCANON=on and ldapi connections (ITS#7585)
-	Fixed libldap to be able to unset syncrepl TLS options (ITS#7042)
-	Fixed libldap race condition in ldap_int_initialize (ITS#7996, ITS#8450)
-	Fixed libldap return code in ldap_create_assertion_control_value (ITS#8674)
-	Fixed libldap to correctly disable IPv6 when configured to do so (ITS#8754)
-	Fixed libldap to correctly close TLS connection (ITS#8755)
-	Fixed libldap with non-blocking TLS and referals (ITS#8167)
-	Fixed libldap_r handling of deprecated OpenSSL function (ITS#8353)
-	Fixed liblunicode case correspondance (ITS#8508)
-	Fixed slapd with an idletimeout of less than four seconds (ITS#8952)
-	Fixed slapd config parser variable for Windows64 (ITS#9012)
-	Fixed slapd syncrepl fallback handling with delta-syncrepl (ITS#9015)
-	Fixed slapd telephoneNumberNormalize, cert DN validation (ITS#8999)
-	Fixed slapd syncrepl for relax with delta-syncrepl (ITS#8037)
-	Fixed slapd to restrict rootDN proxyauthz to its own databases (ITS#9038)
-	Fixed slapd to initialize SASL SSF per connection (ITS#9052)
-	Fixed slapd-ldap starttls connections timeout behavior (ITS#8963)
-	Fixed slapd-ldap segfault when entry result doesn't match filter (ITS#8997)
-	Fixed slapd-meta conversion from slapd.conf to cn=config (ITS#8743)
-	Fixed slapd-meta assertion when network interface goes down (ITS#8841)
-	Fixed slapd-mdb fix bitshift integer overflow (ITS#8989)
-	Fixed slapd-mdb index cleanup with cn=config (ITS#8472)
-	Fixed slapd-mdb to improve performance with alias deref (ITS#7657)
-	Fixed slapo-accesslog with SLAP_MOD_SOFT modifications (ITS#8990)
-	Fixed slapo-accesslog possible assert with exops (ITS#8971)
-	Fixed slapo-chain to correctly reject multiple chaining URIs (ITS#8637)
-	Fixed slapo-chain conversion from slapd.conf to cn=config (ITS#8799)
-	Fixed slapo-memberof conversion from slapd.conf to cn=config (ITS#8663)
-	Fixed slapo-memberof for group name change to itself (ITS#9000)
-	Fixed slapo-ppolicy behavior when pwdInHistory is changed (ITS#8349)
-	Fixed slapo-rwm to not free original filter (ITS#8964)
-	Fixed slapo-syncprov contextCSN generation (ITS#9015)
-	Build Environment
-		Fixed slapd to only link to BDB libraries with static build (ITS#8948)
-		Fixed libldap implicit declaration with LDAP_CONNECTIONLESS (ITS#8794)
-		Fixed libldap double inclusion of limits.h in cyrus.c (ITS#9041)
-	Documentation
-		General - Fixed minor typos (ITS#8764, ITS#8761)
-		admin24 - Miscellaneous updates promoting mdb and fixing examples (ITS#9031)
-		slapd.access(5) - Note MDB is the primary backend (ITS#8881)
-		slapd.backends(5) - Note MDB is the recommended backend (ITS#8771)
-		slapd-ldap(5) - Document starttls parameter (ITS#8693)
-	Contrib
-		Added slapo-lastbind capability to forward authTimestamp updates (ITS#7721)
-
-OpenLDAP 2.4.47 Release (2018/12/19)
-	Added slapd-sock DN qualifier for subtrees to be processed (ITS#8051)
-	Added slapd-sock ability to send extended operations to external listeners (ITS#8714)
-	Fixed liblber to avoid incremental access to user-supplied bv in dupbv (ITS#8752)
-	Fixed libldap dn to domain parsing with bad input (ITS#8842)
-	Fixed slapd slapcat to correctly honor -g option (ITS#8667)
-	Fixed slapd to correctly handle NO_SUCH_OBJECT with dynamic groups (ITS#8923)
-	Fixed slapd to check status of rdnNormalize (ITS#8932)
-	Fixed slapd cn=config when modifying slapo-syncprov config (ITS#8616)
-	Fixed slapd sasl authz-policy "all" behavior (ITS#8909)
-	Fixed slapd sasl minor typo (ITS#8918)
-	Fixed slapd to correctly hide hidden DBs in the rootDSE (ITS#8912)
-	Fixed slapd domainScope control to match Microsoft specification (ITS#8840)
-	Fixed slapd-bdb/hdb/mdb to not convert certain IDLs to ranges (ITS#8868)
-	Fixed slapo-accesslog deadlock during cleanup (ITS#8752)
-	Fixed slapo-memberof cn=config modifications (ITS#8663)
-	Fixed slapo-ppolicy with multi-provider replication (ITS#8927)
-	Fixed slapo-syncprov with NULL modlist (ITS#8843)
-	Build Environment
-		Added slapd reproducible build support (ITS#8928)
-		Fixed missing includes with OpenSSL 1.0.2 (ITS#8809)
-	Contrib
-		Fixed slapo-pbkdf2 hash generation (ITS#8878)
-	Documentation
-		admin24 fixed minor typo (ITS#8887)
-
-OpenLDAP 2.4.46 Release (2018/03/22)
-	Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
-	Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
-	Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
-	Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
-	Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
-	Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
-	Fixed libldap MozNSS initialization (ITS#8484)
-	Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
-	Fixed libldap memory leak with cancel operations (ITS#8782)
-	Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
-	Fixed slapd to maintain SSF across SASL binds (ITS#8796)
-	Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
-	Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
-	Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
-	Fixed slapd CSN queue processing (ITS#8801)
-	Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
-	Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
-	Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
-	Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
-	Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
-	Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
-	Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
-	Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
-	Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
-	Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
-	Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
-	Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
-	Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
-	Build Environment
-		Fixed Windows build with newer MINGW version (ITS#8697)
-		Fixed compiler warnings and removed unused variables (ITS#8578)
-	Contrib
-		Fixed ldapc++ Control structure (ITS#8583)
-	Documentation
-		Delete stub manpage for back-ldbm (ITS#8713)
-		Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
-		Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
-		Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
-		Fixed slapo-syncprov(5) indexing requirements (ITS#5048)
-
-OpenLDAP 2.4.45 Release (2017/06/01)
-	Added slapd support for OpenSSL 1.1.0 series (ITS#8353, ITS#8533, ITS#8634)
-	Fixed libldap to fail ldap_result if the handle is already bad (ITS#8585)
-	Fixed libldap to expose error if user specified CA doesn't exist (ITS#8529)
-	Fixed libldap handling of Diffie-Hellman parameters (ITS#7506)
-	Fixed libldap GnuTLS use after free (ITS#8385)
-	Fixed libldap SASL initialization (ITS#8648)
-	Fixed slapd bconfig rDN escape handling (ITS#8574)
-	Fixed slapd segfault with invalid hostname (ITS#8631)
-	Fixed slapd sasl SEGV rebind in same session (ITS#8568)
-	Fixed slapd syncrepl filter handling (ITS#8413)
-	Fixed slapd syncrepl infinite looping mods with delta-sync MPR (ITS#8432)
-	Fixed slapd callback struct so older modules without writewait should function.
-                    Custom modules may need to be updated for sc_writewait callback (ITS#8435)
-	Fixed slapd-ldap/meta broken LDAP_TAILQ macro (ITS#8576)
-	Fixed slapd-mdb so it passes ITS6794 regression test (ITS#6794)
-	Fixed slapd-mdb double free with size zero paged result (ITS#8655)
-	Fixed slapd-meta uninitialized diagnostic message (ITS#8442)
-	Fixed slapo-accesslog to honor pauses during purge for cn=config update (ITS#8423)
-	Fixed slapo-accesslog with multiple modifications to the same attribute (ITS#6545)
-	Fixed slapo-relay to correctly initialize sc_writewait (ITS#8428)
-	Fixed slapo-sssvlv double free (ITS#8592)
-	Fixed slapo-unique with empty modifications (ITS#8266)
-	Build Environment
-		Added test065 for proxyauthz (ITS#8571)
-		Fix test008 to be portable (ITS#8414)
-		Fix test064 to wait for slapd to start (ITS#8644)
-		Fix its4336 regression test (ITS#8534)
-		Fix its4337 regression test (ITS#8535)
-		Fix regression tests to execute on all backends (ITS#8539)
-	Contrib
-		Added slapo-autogroup(5) man page (ITS#8569)
-		Added passwd missing conversion scripts for apr1 (ITS#6826)
-		Fixed contrib modules where the writewait callback was not correctly initialized (ITS#8435)
-		Fixed smbk5pwd to build with newer OpenSSL releases (ITS#8525)
-	Documentation
-		admin24 fixed tls_cipher_suite bindconf option (ITS#8099)
-		admin24 fixed typo cn=config to be slapd.d (ITS#8449)
-		admin24 fixed slapo-syncprov information to be current (ITS#8253)
-		admin24 fixed typo in access control docs (ITS#7341, ITS#8391)
-		admin24 fixed minor typo in tuning guide (ITS#8499)
-		admin24 fixed information about the limits option (ITS#7700)
-		admin24 fixed missing options for syncrepl configuration (ITS#7700)
-		admin24 fixed accesslog documentation to note it should not be replicated (ITS#8344)
-		admin24 fix typos (ITS#8562)
-		admin24 fix replication sections to include back-mdb (ITS#8563)
-		Fixed ldap.conf(5) missing information on SASL_NOCANON option (ITS#7177)
-		Fixed ldapsearch(1) information on the V[V] flag behavior (ITS#7177, ITS#6339)
-		Fixed slapd-config(5), slapd.conf(5) clarification on interval keyword for refreshAndPersist (ITS#8538)
-		Fixed slapd-config(5), slapd.conf(5) clarify serverID requirements (ITS#8635)
-		Fixed slapd-config(5), slapd.conf(5) clarification on loglevel settings (ITS#8123)
-		Fixed slapo-ppolicy(5) to clearly note rootdn requirement (ITS#8565)
-		Fixed slapo-memberof(5) to note it is not safe to use with replication (ITS#8613)
-		Fixed slapo-syncprov(5) documentation to be current (ITS#8253)
-		Fixed slapadd(8) manpage to note slapd-mdb (ITS#8215)
-		Fixed various minor grammar issues in the man pages (ITS#8544)
-		Fixed various typos (ITS#8587)
-
-OpenLDAP 2.4.44 Release (2016/02/05)
-	Fixed slapd-bdb/hdb missing olcDbChecksum config attr (ITS#8337)
-	Fixed slapd-mdb behavior with long lived read transactions (ITS#8226)
-	Fixed slapd-mdb cleanup after failed transaction (ITS#8360)
-	Fixed slapd-sql missing id_query/olcSqlIdQuery (ITS#8329)
-	Fixed slapo-accesslog callback initialization (ITS#8351)
-	Fixed slapo-ppolicy pwdMaxRecordedFailure must never be zero (ITS#8327)
-	Fixed slapo-syncprov abandon processing (ITS#8354)
-	Fixed slapo-syncprov ctxcsn snapshot on refresh (ITS#8281, ITS#8365)
-	Documentation
-		admin24 Stop linking to Berkeley DB downloads (ITS#8362)
-		admin24 Update documentation for LMDB preference
-
-OpenLDAP 2.4.43 Release (2015/11/30)
-	Fixed liblber remove obsolete assert (ITS#8240, ITS#8301)
-	Fixed libldap file URLs on windows (ITS#8273)
-	Fixed libldap microsecond timer for windows (ITS#8295)
-	Fixed slap tools minor one time memory leak (ITS#8082)
-	Fixed slapd to avoid redundant processing of abandon ops (ITS#8232)
-	Fixed slapd syncrepl SEGV when present list is NULL (ITS#8231, ITS#8042)
-	Fixed slapd segfault with invalid SASL URI (ITS#8218)
-	Fixed slapd configuration parser with unbalanced quotes (ITS#8233)
-	Fixed slapd syncrepl check with config db on windows (ITS#8277)
-	Fixed slapd with mod Increment and inherited attribute type (ITS#8289)
-	Fixed slapd-ldap SEGV after failed retry (ITS#8173)
-	Fixed slapd-ldap to skip client controls in ldap_back_entry_get (ITS#8244)
-	Fixed slapd-null to have an option to return a search entry (ITS#8249)
-	Fixed slapd-relay to correctly handle quoted options (ITS#8284)
-	Fixed slapo-accesslog delta-sync MPR with interrupted refresh phase (ITS#8281)
-	Fixed slapo-dds segfault when using slapo-memberof (ITS#8133)
-	Fixed slapo-ppolicy to allow purging of stale pwdFailureTime attributes (ITS#8185)
-	Fixed slapo-ppolicy to release entry on failure (ITS#7537)
-	Fixed slapo-ppolicy to fall back to default policy if there is a parsing error (ITS#8234)
-	Fixed slapo-syncprov with interrupted refresh phase (ITS#8281)
-	Fixed slapo-refint with subtree renames (ITS#8220)
-	Fixed slapo-rwm missing olcDropUnrequested attribute (ITS#7889)
-	Fixed slapo-rwm parsing to avoid double-escaping rewrite rules (ITS#7964)
-	Build Environment
-		Fixed ldif-filter option parsing (ITS#8292)
-		Fixed slapd-tester EOL handling in test output for windows (ITS#8280)
-		Fixed slapd-tester executable suffix for windows (ITS#8216)
-		Fixed test061 timing issues (ITS#8297)
-	Contrib
-		Added libnettle support to pw-pbkdf2 (ITS#8198)
-		Fixed smbk5pwd compiler warnings with libnettle (ITS#8235)
-		Fixed passwd symbol collisions with other crypto libraries (ITS#8294)
-	Documentation
-		Updated guide to reflect changes to how TLS is handled with syncrepl (ITS#7897)
-
-OpenLDAP 2.4.42 Release (2015/08/14)
-	Fixed liblber address length for CLDAP (ITS#8158)
-	Fixed libldap dnssrv potential overflow with port number (ITS#7027,ITS#8195)
-	Fixed slapd cn=config when updating olcAttributeTypes (ITS#8199)
-	Fixed slapd-mdb to correctly update search candidates for scoped searches (ITS#8203)
-	Fixed slapo-ppolicy with redundant mod ops on glued trees (ITS#8184)
-	Fixed slapo-rwm crash when deleting rewrite rules (ITS#8213)
-	Build Environment
-		Fixed libdb detection with gcc 5.x (ITS#8056)
-
-OpenLDAP 2.4.41 Release (2015/06/21)
-	Fixed ldapsearch to explicitly flush its buffer (ITS#8118)
-	Fixed libldap async connections (ITS#8090)
-	Fixed libldap double free of request during abandon (ITS#7967)
-	Fixed libldap error string for LDAP_X_CONNECTING (ITS#8093)
-	Fixed libldap segfault in ldap_sync_initialize (ITS#8001)
-	Fixed libldap ldif-wrap off by one error (ITS#8003)
-	Fixed libldap handling of TLS in async mode (ITS#8022)
-	Fixed libldap null pointer dereference (ITS#8028)
-	Fixed libldap mutex handling with LDAP_OPT_SESSION_REFCNT (ITS#8050)
-	Fixed slapd slapadd config db import of minimal frontend entry (ITS#8150)
-	Fixed slapd slapadd onetime leak with -w (ITS#8014)
-	Fixed slapd sasl auxprop crash with invalid config (ITS#8092)
-	Fixed slapd syncrepl delta-mpr issue with overlays and slapd.conf (ITS#7976)
-	Fixed slapd syncrepl mutex for cookie state (ITS#7968)
-	Fixed slapd syncrepl memory leaks (ITS#8035)
-	Fixed slapd syncrepl to free presentlist at end of refresh mode (ITS#8038)
-	Fixed slapd syncrepl to streamline presentlist (ITS#8042)
-	Fixed slapd syncrepl concurrency when CHECK_CSN is enabled (ITS#8120)
-	Fixed slapd rootdn checks for hidden backends (ITS#8108)
-	Fixed slapd segfault when using matched values control (ITS#8046)
-	Fixed slapd-ldap reconnection behavior on remote failure (ITS#8142)
-	Fixed slapd-mdb minor case typo (ITS#8049)
-	Fixed slapd-mdb one-level search (ITS#7975)
-	Fixed slapd-mdb heap corruption (ITS#7965)
-	Fixed slapd-mdb crash after deleting in-use schema (ITS#7995)
-	Fixed slapd-mdb minor code cleanup (ITS#8011)
-	Fixed slapd-mdb to return errors when using incorrect env flags (ITS#8016)
-	Fixed slapd-mdb to correctly update search candidates (ITS#8036, ITS#7904)
-	Fixed slapd-mdb when there were more than 65535 aliases in scope (ITS#8103)
-	Fixed slapd-mdb alias deref when objectClass is not indexed (ITS#8146)
-	Fixed slapd-meta TLS initialization with ldaps URIs (ITS#8022)
-	Fixed slapd-meta to have better error logging (ITS#8131)
-	Fixed slapd-perl conversion to cn=config (ITS#8105)
-	Fixed slapd-sql autocommit config variable (ITS#8129,ITS#6613)
-	Fixed slapo-collect segfault (ITS#7797)
-	Fixed slapo-constraint with 0 count constraint (ITS#7780,ITS#7781)
-	Fixed slapo-deref with empty attribute list (ITS#8027)
-	Fixed slapo-memberof to correctly reject invalid members (ITS#8107)
-	Fixed slapo-sock result parser for CONTINUE (ITS#8048)
-	Fixed slapo-syncprov synprov_matchops usage of test_filter (ITS#8013)
-	Fixed slapo-syncprov segfault on disconnect/abandon (ITS#5452,ITS#8012)
-	Fixed slapo-syncprov memory leak (ITS#8039)
-	Fixed slapo-syncprov segfault on disconnect/abandon (ITS#8043)
-	Fixed slapo-syncprov deadlock when autogroup is in use (ITS#8063)
-	Fixed slapo-syncprov potential loss of changes when under load (ITS#8081)
-	Fixed slapo-unique enforcement of uniqueness with manageDSAit control (ITS#8057)
-	Build Environment
-		Fixed ftello reference for Win32 (ITS#8127)
-		Enhanced contrib modules build paths (ITS#7782)
-		Fixed contrib/autogroup internal operation identity (ITS#8006)
-		Fixed contrib/autogroup to skip internal ops with accesslog (ITS#8065)
-		Fixed contrib/passwd/sha2 compiler warning (ITS#8000)
-		Fixed contrib/noopsrch compiler warning (ITS#7998)
-		Fixed contrib/dupent compiler warnings (ITS#7997)
-		Test suite: Added vrFilter test (ITS#8046)
-	Contrib
-		Added pbkdf2 sha256 and sha512 schemes (ITS#7977)
-		Fixed autogroup modification callback responses (ITS#6970)
-		Fixed nssov compare with usergroup (ITS#8079)
-		Fixed nssov password change behavior (ITS#8080)
-		Fixed nssov updated to 0.9.4 (ITS#8097)
-	Documentation
-		Added ldap_get_option(3) LDAP_FEATURE_INFO_VERSION information (ITS#8032)
-		Added ldap_get_option(3) LDAP_OPT_API_INFO_VERSION information (ITS#8032)
-		Fixed slapd-config(5), slapd.conf(5) tls_cipher_suite option (ITS#8099)
-		Fixed slapd-meta(5), slapd-ldap(5) tls_cipher_suite option (ITS#8099)
-		Fixed slapd-meta(5) fix minor typo (ITS#7769)
-
-OpenLDAP 2.4.40 Release (2014/09/20)
-	Fixed libldap DNS SRV priority handling (ITS#7027)
-	Fixed libldap don't leak libldap err codes (ITS#7676)
-	Fixed libldap CR/LF handling (ITS#4635)
-	Fixed libldap ldif-wrap length (ITS#7871)
-	Fixed libldap GnuTLS ciphersuite parsing (ITS#7500)
-	Fixed libldap GnuTLS with newer versions (ITS#7430,ITS#6359)
-	Fixed libldif to correctly handle 4096 character lines (ITS#7859)
-	Fixed librewrite reference counting (ITS#7723)
-	Fixed slapacl with back-mdb reader transactions (ITS#7920)
-	Fixed slapd syncrepl to send cookie on fallback (ITS#7849)
-	Fixed slapd syncrepl SEGV when abandoning a connection (ITS#7928)
-	Fixed slapd slapcat with external schema (ITS#7895)
-	Fixed slapd schema RDN normalization (ITS#7935)
-	Fixed slapd with repeated language tags (ITS#7941)
-	Fixed slapd modrdn crash on naming attr with no matching rule (ITS#7850)
-	Fixed slapd memory leak in control handling (ITS#7942)
-	Fixed slapd-ldap removed dead code (ITS#7922)
-	Fixed slapd-mdb to work concurrently with slapadd (ITS#7798)
-	Fixed slapd-mdb with paged results (ITS#7705, ITS#7800)
-	Fixed slapd-mdb slapcat with nonexistent indices (ITS#7870)
-	Fixed slapd-mdb long lived reader transactions (ITS#7904)
-	Fixed slapd-mdb memory leak on matchedDN (ITS#7872)
-	Fixed slapd-mdb sorting of attribute values (ITS#7902)
-	Fixed slapd-mdb to flag attribute values as sorted (ITS#7903)
-	Fixed slapd-mdb index config handling (ITS#7912)
-	Fixed slapd-mdb entry release handling (ITS#7915)
-	Fixed slapd-mdb with aliases and referrals (ITS#7927)
-	Fixed slapd-mdb alias dereferencing (ITS#7702)
-	Fixed slapd-sock socket flushing (ITS#7937)
-	Fixed slapo-accesslog attribute normalization (ITS#7934)
-	Fixed slapo-accesslog internal search logging (ITS#7929)
-	Fixed slapo-auditlog connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapo-chain interaction with slapo-rwm (ITS#7930)
-	Fixed slapo-constraint connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapo-dds connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapo-dyngroup connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapo-memberof attr count (ITS#7893)
-	Fixed slapo-memberof frontendDB handling (ITS#7249)
-	Fixed slapo-memberof internal search logging (ITS#7929)
-	Fixed slapo-pcache config processing (ITS#7919)
-	Fixed slapo-pcache connection destroy logic (ITS#7906,ITS#7923)
-	Added slapo-ppolicy ORDERING rules (ITS#7838)
-	Fixed slapo-ppolicy timestamp resolution to use microseconds (ITS#7161)
-	Fixed slapo-ppolicy connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapo-refint to check for pauses in cn=config (ITS#7873)
-	Fixed slapo-refint internal search logging (ITS#7929)
-	Fixed slapo-refint connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapo-seqmod connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapo-slapover connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapo-sock db_init (ITS#7868)
-	Fixed slapo-sssvlv fix olcSssVlvMaxPerConn (ITS#7908)
-	Fixed slapo-translucent double free (ITS#7587)
-	Fixed slapo-translucent to work with manageDSAit (ITS#7864)	
-	Fixed slapo-translucent to use local backend with local entries (ITS#7915)
-	Fixed slapo-unique connection destroy logic (ITS#7906,ITS#7923)
-	Fixed slapcacl with invalid suffix (ITS#7827)
-	Build Environment
-		Remove support for gcrypt (ITS#7877)
-		BDB 6.0.20 and later is not supported (ITS#7890)
-		Fixed ODBC link check (ITS#7891)
-		Fixed slapd.ldif frontend config (ITS#7933)
-	Contrib
-		Added pbkdf2 module (ITS#7742)
-		Fixed autogroup double free (ITS#7831)
-		Fixed autogroup modification callback responses (ITS#6970)
-		Fixed ldapc++ memory leak in Async connection (ITS#7806)
-		Fixed nssov install path (ITS#7858)
-		Fixed passwd rpath (ITS#7885)
-		Fixed apr1 do_phk_hash argument order (ITS#7869)
-		Fixed slapd-sha2 buffer overrun (ITS#7851)
-	Documentation
-		Fixed slapd.ldif man page reference (ITS#7803)
-		Fixed slapd.conf(5) man page to reference exattrs (ITS#7847)
-		Fixed guide to work with mkrelease (ITS#7887)
-		Fixed ldap_get_dn(3) ldap_ava definition (ITS#7860)
-
-OpenLDAP 2.4.39 Release (2014/01/26)
-	Fixed libldap MozNSS crash (ITS#7783)
-	Fixed libldap memory leak with SASL (ITS#7757)
-	Fixed libldap assert in parse_passwdpolicy_control (ITS#7759)
-	Fixed libldap shortcut NULL RDNs (ITS#7762)
-	Fixed libldap deref to use correct control
-	Fixed liblmdb keysizes with mdb_update_key (ITS#7756)
-	Fixed slapd cn=config olcDbConfig modification (ITS#7750)
-	Fixed slapd-bdb/hdb to bail out of search if config is paused (ITS#7761)
-	Fixed slapd-bdb/hdb indexing issue with derived attributes (ITS#7778)
-	Fixed slapd-mdb to bail out of search if config is paused (ITS#7761)
-	Fixed slapd-mdb indexing issue with derived attributes (ITS#7778)
-	Fixed slapd-perl to bail out of search if config is paused (ITS#7761)
-	Fixed slapd-sql to bail out of search if config is paused (ITS#7761)
-	Fixed slapo-constraint handling of softadd/softdel (ITS#7773)
-	Fixed slapo-syncprov assert with findbase (ITS#7749)
-	Build Environment
-		Test suite: Use $(MAKE) for tests (ITS#7753)
-	Documentation
-		admin24 fix TLSDHParamFile to be correct (ITS#7684)
-
-OpenLDAP 2.4.38 Release (2013/11/16)
-	Fixed liblmdb nordahead flag (ITS#7734)
-	Fixed liblmdb to check cursor index before cursor_del (ITS#7733)
-	Fixed liblmdb wasted space on split (ITS#7589)
-	Fixed slapd for certs with a NULL issuerDN (ITS#7746)
-	Fixed slapd cn=config with empty nested includes (ITS#7739)
-	Fixed slapd syncrepl memory leak with delta-sync MPR (ITS#7735)
-	Fixed slapd-bdb/hdb to stop processing on dn not found (ITS#7741)
-	Fixed slapd-bdb/hdb with indexed ANDed filters (ITS#7743)
-	Fixed slapd-mdb to stop processing on dn not found (ITS#7741)
-	Fixed slapd-mdb dangling reader (ITS#7662)
-	Fixed slapd-mdb matching rule for OlcDbEnvFlags (ITS#7737)
-	Fixed slapd-mdb with indexed ANDed filters (ITS#7743)
-	Fixed slapd-meta from blocking other threads (ITS#7740)
-	Fixed slapo-syncprov assert with findbase (ITS#7749)
-
-OpenLDAP 2.4.37 Release (2013/10/27)
-	Added liblmdb nordahead environment flag (ITS#7725)
-	Fixed client tools CLDAP with IPv6 (ITS#7695)
-	Fixed libldap CLDAP with IPv6 (ITS#7695)
-	Fixed libldap lock ordering with abandon op (ITS#7712)
-	Fixed liblmdb segfault with mdb_cursor_del (ITS#7718)
-	Fixed liblmdb when converting to writemap (ITS#7715)
-	Fixed liblmdb assert on MDB_NEXT with delete (ITS#7722)
-	Fixed liblmdb wasted space on split (ITS#7589)
-	Fixed slapd cn=config with olcTLSProtocolMin (ITS#7685)
-	Fixed slapd-bdb/hdb optimize index updates (ITS#7329)
-	Fixed slapd-ldap chaining with cn=config (ITS#7381, ITS#7434)
-	Fixed slapd-ldap chaining with controls (ITS#7687)
-	Fixed slapd-mdb optimize index updates (ITS#7329)
-	Fixed slapd-meta chaining with cn=config (ITS#7381, ITS#7434)
-	Fixed slapo-constraint to no-op on nonexistent entries (ITS#7692)
-	Fixed slapo-dds assert on startup (ITS#7699)
-	Fixed slapo-memberof to not replicate internal ops (ITS#7710)
-	Fixed slapo-refint to not replicate internal ops (ITS#7710)
-	Build Environment
-		Fixed slapd-mdb ptr arithmetic on void *s (ITS#7720)
-	Documentation
-		ldapsearch(1) minor typo fix (ITS#7680)
-		slapd-passwd(5) minor typo fix (ITS#7680)
-
-OpenLDAP 2.4.36 Release (2013/08/17)
-	Added back-meta target filter patterns (ITS#7609)
-	Added liblmdb mdb_txn_env to API (ITS#7660)
-	Fixed libldap CLDAP with uninit'd memory (ITS#7582)
-	Fixed libldap with UDP (ITS#7583)
-	Fixed libldap OpenSSL TLS versions (ITS#7645)
-	Fixed liblmdb MDB_PREV behavior (ITS#7556)
-	Fixed liblmdb transaction issues (ITS#7515)
-	Fixed liblmdb mdb_drop overflow page return (ITS#7561)
-	Fixed liblmdb nested split (ITS#7592)
-	Fixed liblmdb overflow page behavior (ITS#7620)
-	Fixed liblmdb race condition with read and write txns (ITS#7635)
-	Fixed liblmdb mdb_del behavior with MDB_DUPSORT and mdb_del (ITS#7658)
-	Fixed slapd cn=config with unknown schema elements (ITS#7608)
-	Fixed slapd cn=config with loglevel 0 (ITS#7611)
-	Fixed slapd slapi filterlist free behavior (ITS#7636)
-	Fixed slapd slapi control free behavior (ITS#7641)
-	Fixed slapd schema countryString as directoryString (ITS#7659)
-	Fixed slapd schema telephoneNumber as directoryString (ITS#7659)
-	Fixed slapd-bdb/hdb to wait for read locks in tool mode (ITS#6365)
-	Fixed slapd-mdb behavior with alias dereferencing (ITS#7577)
-	Fixed slapd-mdb modrdn and base-scoped searches (ITS#7604)
-	Fixed slapd-mdb refcount behavior (ITS#7628)
-	Fixed slapd-meta binding flag is set (ITS#7524)
-	Fixed slapd-meta with minimal config (ITS#7581)
-	Fixed slapd-meta missing results messages (ITS#7591)
-	Added slapd-meta TCP keepalive support (ITS#7513)
-	Fixed slapo-sssvlv double free (ITS#7588)
-	Fixed slaptest to list -Q option (ITS#7568)
-	Build Environment
-		Fixed slapd-meta declaration warnings (ITS#7654)
-	Contrib
-		Fixed nssov group enumeration bug (ITS#7569)
-		Fixed autogroup when URI has no attrs (ITS#7580)
-	Documentation
-		admin24 Update database backend notes (ITS#7590)
-		ldap.conf(5) fixed typos (ITS#7568)
-		ldapmodify(1) remove replog reference (ITS#7562)
-		ldif(5) remove replog reference (ITS#7562)
-		slapd-config(5) remove replog reference (ITS#7562)
-		slapd.conf(5) remove replog reference (ITS#7562)
-		slapd-config(5) document TLSProtocolMin (ITS#5655,ITS#7645)
-		slapd.conf(5) document TLSProtocolMin (ITS#5655,ITS#7645)
-
-OpenLDAP 2.4.35 Release (2013/03/31)
-	Fixed liblmdb mdb_cursor_put with MDB_MULTIPLE (ITS#7551)
-	Fixed liblmdb page rebalance (ITS#7536)
-	Fixed liblmdb missing parens (ITS#7377)
-	Fixed liblmdb mdb_cursor_del crash (ITS#7553)
-	Fixed slapd syncrepl updateCookie status (ITS#7531)
-	Fixed slapd connection logging (ITS#7543)
-	Fixed slapd segfault on modify (ITS#7542, ITS#7432)
-	Fixed slapd-mdb to reject undefined attrs (ITS#7540)
-	Fixed slapo-pcache with +/- attrsets (ITS#7552)
-	Build Environment
-		don't install DB_CONFIG if no BDB backends (ITS#7533)
-	Documentation
-		slapschema(8) fix tool name (ITS#7534)
-		admin24 fixed pcache example (ITS#7546)
-		admin24 fixed config examples (ITS#7522)
-
-OpenLDAP 2.4.34 Release (2013/03/01)
-	Fixed libldap connections with EINTR (ITS#7476)
-	Fixed libldap lineno overflow in ldif_read_record (ITS#7497)
-	Fixed liblmdb mdb_env_open flag handling (ITS#7453)
-	Fixed liblmdb mdb_midl_sort array optimization (ITS#7432)
-	Fixed liblmdb freelist with large entries (ITS#7455)
-	Fixed liblmdb to check for filled dirty page list (ITS#7491)
-	Fixed liblmdb to validate data limits (ITS#7485)
-	Fixed liblmdb mdb_update_key for large keys (ITS#7505)
-	Fixed ldapmodify to not core dump with invalid LDIF (ITS#7477)
-	Fixed slapd syncrepl for old entries in MPR setup (ITS#7427)
-	Fixed slapd signedness for index_substr_any_* (ITS#7449)
-	Fixed slapd enforce SLAPD_MAX_DAEMON_THREADS (ITS#7450)
-	Fixed slapd mutex in send_ldap_ber (ITS#6164)
-	Added slapd-ldap onerr option (ITS#7492)
-	Added slapd-ldap keepalive support (ITS#7501)
-	Fixed slapd-ldif with empty dir (ITS#7451)
-	Fixed slapd-mdb to reopen attr DBs after env reopen (ITS#7416)
-	Fixed slapd-mdb handling of missing entries (ITS#7483,7496)
-	Fixed slapd-mdb environment flag setting (ITS#7452)
-	Fixed slapd-mdb with sub db slapcat (ITS#7469)
-	Fixed slapd-mdb to correctly work with toolthreads > 2 (ITS#7488,ITS#7527)
-	Fixed slapd-mdb subtree search speed (ITS#7473)
-	Fixed slapd-meta conversion to cn=config (ITS#7525)
-	Fixed slapd-meta segfault when modifying olcDbUri (ITS#7526)
-	Fixed slapd-sql back-config support (ITS#7499)
-	Fixed slapo-constraint handle uri and restrict correctly (ITS#7418)
-	Fixed slapo-constraint with multi-provider replication (ITS#7426)
-	Fixed slapo-constraint segfault (ITS#7431)
-	Fixed slapo-deref control initialization (ITS#7436)
-	Fixed slapo-deref control exposure (ITS#7445)
-	Fixed slapo-memberof with internal ops (ITS#7487)
-	Fixed slapo-pcache matching rules for config db (ITS#7459)
-	Fixed slapo-rwm modrdn cleanup (ITS#7414)
-	Fixed slapo-sssvlv maxperconn parameter (ITS#7484)
-	Build Environment
-		Fixed slapo-constraint test suite (ITS#7423)
-	Contrib
-		Added nssov nssov_config support (ITS#7518)
-		Added nssov password_prohibit_message (ITS#7518)
-		Fixed ldapc++ with gcc-4.7 (ITS#7281,ITS#7304)
-		Fixed nssov olcNssPamSession handling (ITS#7481)
-		Fixed nssov connection DN (ITS#7518)
-		Add missing Makefile for various modules (ITS#7308)
-		Unify Makefile structure for modules (ITS#7309)
-		Fixed slapo-allowed attribute replication (ITS#7493)
-		Fixed slapo-passwd SHA2 to correctly zero buffer (ITS#7490)
-	Documentation
-		ldapurl(1) fix example usage (ITS#7454)
-		ldap_get_option(3) fixed trailing whitespace (ITS#7411)
-		slapd-config(5) olcExtraAttrs is per db (ITS#7421)
-		slapd-overlays(5) update manpage index (ITS#7489)
-		slapo-dynlist(5) Search behavior notes (ITS#7486)
-		slapo-valsort(5) Document valsort control syntax (ITS#7523)
-
-OpenLDAP 2.4.33 Release (2012/10/10)
-	Added slapd-meta cn=config support
-	Fixed libldap MozNSS slot picking (ITS#7359)
-	Fixed libldap MozNSS with tokenname:certnickname format (ITS#7360)
-	Fixed liblmdb POSIX semaphore cleanup on environment close (ITS#7364)
-	Fixed liblmdb mdb_page_split (ITS#7385, ITS#7229)
-	Fixed slapd alock handling on Windows (ITS#7361)
-	Fixed slapd acl handling with zero-length values (ITS#7350)
-	Fixed slapd syncprov to not reference ops inside a lock (ITS#7172)
-	Fixed slapd delta-syncrepl MPR with large attribute values (ITS#7354)
-	Fixed slapd slapd_rw_destroy function (ITS#7390)
-	Fixed slapd-ldap idassert bind handling (ITS#7403)
-	Fixed slapd-mdb slapadd -q -w double free (ITS#7356)
-	Fixed slapd-mdb to close read txn in reindex commit (ITS#7386)
-	Fixed slapo-constraint with multiple modifications (ITS#7168)
-	Build Environment
-		Fixed build with Visual Studio (ITS#7358)
-		Fixed liblmdb posix semaphore use on BSD system (ITS#7363)
-		Add slapo-constraint test suite (ITS#7344, ITS#7366)
-	Contrib
-		Updated radius passwd module for NAS-Identifier (ITS#7357)
-	Documentation
-		slapo-refint(5) Note that refint is not replicated (ITS#7405)
-
-OpenLDAP 2.4.32 Release (2012/07/31)
-	Added slappasswd loadable module support (ITS#7284)
-	Fixed tools to not clobber SASL_NOCANON (ITS#7271)
-	Fixed libldap function declarations (ITS#7293)
-	Fixed libldap double free (ITS#7270)
-	Fixed libldap debug level setting (ITS#7290)
-	Fixed libldap MozNSS PEM/certdb handling (ITS#7276)
-	Fixed libldap MozNSS cipher suite selection (ITS#7285)
-	Fixed libldap MozNSS error handling (ITS#7287)
-	Fixed libldap MozNSS cipher suite being ignored (ITS#7289)
-	Fixed libldap MozNSS infinite loop (ITS#7291)
-	Fixed libldap MozNSS context token for certdb (ITS#7312)
-	Fixed libldap MozNSS store certificate object (ITS#7313)
-	Fixed libldap MozNSS fix init and cleanup (ITS#7314)
-	Fixed libldap MozNSS slot and pin usage (ITS#7315)
-	Fixed libldap MozNSS to avoid infinite loop (ITS#7316)
-	Fixed libldap MozNSS untrusted issuer error (ITS#7331)
-	Fixed libldap gettime() regression (ITS#6262)
-	Fixed libldap sasl handling (ITS#7118, ITS#7133)
-	Fixed libldap to correctly free socket with TLS (ITS#7241)
-	Fixed liblmdb leaf node handling (ITS#7266)
-	Fixed liblmdb mutexes on Apple/Windows (ITS#7251)
-	Fixed slapd config index renumbering (ITS#6987)
-	Fixed slapd duplicate error response (ITS#7076)
-	Fixed slapd parsing of PermissiveModify control (ITS#7298)
-	Fixed slapd-bdb/hdb cache hang under high load (ITS#7222)
-	Fixed slapd-bdb/hdb alias checking (ITS#7303)
-	Fixed slapd-bdb/hdb olcDbConfig changes work immediately (ITS#7338)
-	Fixed slapd-ldap to encode user DN during password change (ITS#7319)
-	Fixed slapd-ldap assertion when proxying to MS AD (ITS#6851)
-	Fixed slapd-ldap monitoring (ITS#7182, ITS#7225)
-	Fixed slapd-mdb with tool mode (ITS#7255)
-	Fixed slapd-mdb with approx indexing (ITS#7279)
-	Fixed slapd-mdb dn2id delete (ITS#7302)
-	Fixed slapd-mdb memory leak in online indexer (ITS#7323)
-	Fixed slapd-mdb db corruption when hitting maxsize (ITS#7337)
-	Fixed slapd-mdb aborts with online indexing (ITS#7339)
-	Fixed slapd-perl panic (ITS#7325)
-	Fixed slapo-accesslog memory leaks with sync replication (ITS#7292)
-	Fixed slapo-syncprov memory leaks with sync replication (ITS#7292)
-	Fixed contrib/smbk5pwd to not compile with MozNSS (ITS#7327)
-	Fixed contrib/sha2 portability (ITS#7267)
-	Fixed contrib/sha2 thread safety (ITS#7269)
-	Added contrib/sha2 {SSHA256}, {SSHA384}, {SSHA512} support (ITS#7278)
-	Build Environment
-		Fixed test057 timing issues (ITS#7317)
-		Fixed compilation with MS Visual Studio (ITS#7332)
-	Contrib
-		Added slapi_[get|free]_client_ip() (ITS#7305)
-	Documentation
-		slapo-sssvlv Added note about criticality (ITS#7253)
-		admin24 Fix peername.regex typo (ITS#7282)
-		Fixed slapd-config file include example (ITS#7318)
-		slapd-ldap(5) Reference RFC4526 (ITS#7294)
-		slapd-meta(5) Reference RFC4526 (ITS#7294)
-
-OpenLDAP 2.4.31 Release (2012/04/21)
-	Added slapo-accesslog support for reqEntryUUID (ITS#6656)
-	Fixed libldap IPv6 URL detection (ITS#7194)
-	Fixed libldap rebinding on failed connection (ITS#7207)
-	Fixed liblmdb alignment of MDB_db members (ITS#7191)
-	Fixed liblmdb branch page merging on deletes (ITS#7190)
-	Fixed liblmdb page split with MDB_APPEND (ITS#7213)
-	Fixed liblmdb free page usage with entry deletion (ITS#7210)
-	Fixed liblmdb to use IOV_MAX if it is defined and small (ITS#7196)
-	Fixed liblmdb key alignment (ITS#7219)
-	Fixed liblmdb mdb_page_split (ITS#7229)
-	Fixed liblmdb with zero length IDLs (ITS#7230)
-	Fixed slapd listener initialization (ITS#7233)
-	Fixed slapd cn=config with olcTLSVerifyClient (ITS#7197)
-	Fixed slapd delta-syncrepl fallback on non-leaf error (ITS#7195)
-	Fixed slapd to reject MPR setups with bad serverID setting (ITS#7200)
-	Fixed slapd approxIndexer key generation (ITS#7203)
-	Fixed slapd modification of olcSuffix (ITS#7205)
-	Fixed slapd schema validation with missing definitions (ITS#7224)
-	Fixed slapd syncrepl -c with supplied CSN values (ITS#7245)
-	Fixed slapd-bdb/hdb idlcache with only one element (ITS#7231)
-	Fixed slapd-perl modify with binary values (ITS#7149)
-	Fixed slapd-shell cn=config support (ITS#7201)
-	Fixed slapd-shell modify with binary values (ITS#7149)
-	Fixed slapo-accesslog deadlock with non-logged write ops (ITS#7088)
-	Fixed slapo-syncprov sessionlog check (ITS#7218)
-	Fixed slapo-syncprov entry leak (ITS#7234)
-	Fixed slapo-syncprov startup initialization (ITS#7235)
-	Build Environment
-		Fixed test022 to check ldapsearch results (ITS#7228)
-		Fixed test044 when back-monitor is disabled (ITS#7204)
-	Documentation
-		Fixed slapschema(8) formatting (ITS#7188)
-		Fixed limdb functionality documentation (ITS#7238)
-		Fixed ldap_get_option(3) note inheritance behavior (ITS#7240)
-
-OpenLDAP 2.4.30 Release (2012/02/29)
-	Fixed libldap socket polling for writes (ITS#7167)
-	Fixed liblutil string modifications (ITS#7174)
-	Fixed slapd crash when attrsOnly is true (ITS#7143)
-	Fixed slapd syncrepl delete handling (ITS#7052,ITS#7162)
-	Fixed slapd-mdb slapadd with -q (ITS#7170)
-	Fixed slapd-mdb slapadd with -w (ITS#7180)
-	Fixed slapd-mdb slapindex with -q and -t (ITS#7176)
-	Fixed slapo-pcache time-to-refesh handling (ITS#7178)
-	Fixed slapo-syncprov loop detection (ITS#6024)
-	Build Environment
-		Fixed POSIX make support (ITS#7160)
-		Fixed slapd-mdb build on POSIX (ITS#7160)
-	Documentation
-		Added option "-o" to ldap*(1) pages  (ITS#7152)
-		Fixed ldap*(1) page cleanup (ITS#7177)
-		Fixed ldap_modify(3) prototypes (ITS#7173)
-
-OpenLDAP 2.4.29 Release (2012/02/12)
-	Fixed libldap MozNSS deferred initialization handling (ITS#7136)
-	Fixed libldap MozNSS with TLSCertificateKeyFile not set (ITS#7135)
-	Fixed slapd cn=config modification of first schema element (ITS#7098)
-	Fixed slapd operation reuse (ITS#7107)
-	Fixed slapd blocked writers to not interfere with pool pause (ITS#7115)
-	Fixed slapd connection loop connindex usage (ITS#7131)
-	Fixed slapd double mutex unlock via connection_done (ITS#7125)
-	Fixed slapd check order in connection_write (ITS#7113)
-	Fixed slapd slapadd to exit on failure (ITS#7142)
-	Fixed slapd syncrepl reference to freed memory (ITS#7127,ITS#7132)
-	Fixed slapd syncrepl to ignore some errors on delete (ITS#7052)
-	Fixed slapd syncrepl to handle missing oldRDN (ITS#7144)
-	Fixed slapd-mdb to handle overlays in tool mode (ITS#7099)
-	Fixed slapd-mdb segfaults with page splits (ITS#7121)
-	Fixed slapd-mdb cleanup on transaction abort (ITS#7140)
-	Fixed slapd-mdb with attribute descriptions (ITS#7146)
-	Fixed slapd-meta to correctly handle multiple targets (ITS#7050)
-	Fixed slapd-monitor compare op to update cached entry (ITS#7123)
-	Fixed slapd-perl initialization (ITS#7075)
-	Fixed slapd-sql to properly initialize be_cf_ocs (ITS#7158)
-	Fixed slapo-dds to properly exit when in tool mode (ITS#7099)
-	Fixed slapo-rwm not leave empty lots with normalized attrs (ITS#7143)
-	Fixed slapo-syncprov with already abandoned operation (ITS#7150)
-	Fixed contrib/smbk5pwd uninitialized keys in shadowLastChange (ITS#7138)
-	Build Environment
-		Fixed ldapsearch build on windows (ITS#7156)
-		Fixed test001 to skip back-ldif (ITS#7101)
-	Documentation
-		admin24 Fix typo (ITS#7117)
-
-OpenLDAP 2.4.28 Release (2011/11/26)
-	Fixed back-mdb out of order slapadd (ITS#7090)
-
-OpenLDAP 2.4.27 Release (2011/11/24)
-	Added libldap support for draft-wahl-ldap-session (ITS#6984)
-	Added slapd support for draft-wahl-ldap-session (ITS#6984)
-	Added slapadd pipelining capability (ITS#7078)
-	Added slapd Add-if-not-present (ITS#6561)
-	Added slapd delta-syncrepl MPR (ITS#6734,ITS#7029,ITS#7031)
-	Added slapd-mdb experimental backend (ITS#7079)
-	Added slapd-passwd dynamic config support
-	Added slapd-perl dynamic config support
-	Added slapd-shell dynamic config support
-	Added slapd-sock support as an overlay (ITS#6666)
-	Added slapd-sql dynamic config support
-	Added contrib/passwd APR1 support (ITS#6826)
-	Fixed slapi linking on AIX (ITS#3272)
-	Fixed ldapmodify crash with LDIF controls (ITS#7039)
-	Fixed ldapsearch to honor timeout and timelimit (ITS#7009)
-	Fixed libldap endless looping (ITS#7035)
-	Fixed libldap TLS to not check hostname when using 'allow' (ITS#7014)
-	Fixed libldap GnuTLS cert dn parse (ITS#7051)
-	Fixed libldap MozNSS correctly destroy SSL_PeerCertificate (ITS#6980)
-	Fixed libldap MozNSS with issuer expiration and verify never (ITS#6998)
-	Fixed libldap MozNSS memory leak (ITS#7001)
-	Fixed libldap MozNSS allow/try behavior (ITS#7002)
-	Fixed libldap MozNSS to be thread safe (ITS#7022)
-	Fixed libldap MozNSS SSL_ForceHandshake to use a mutex (ITS#7034)
-	Fixed libldap MozNSS with wildcard certs (ITS#7006)
-	Fixed liblutil MD5 initialization (ITS#6982)
-	Fixed slapadd common code into slapcommon (ITS#6737)
-	Fixed slapd backend connection initialization (ITS#6993)
-	Fixed slapd frontend DB parsing in cn=config (ITS#7016)
-	Fixed slapd hang with {numbered} overlay insertion (ITS#7030)
-	Fixed slapd inet_ntop usage (ITS#6925)
-	Fixed slapd cn=config deletion of bitmasks (ITS#7083)
-	Fixed slapd cn=config modify replace/delete crash (ITS#7065)
-	Fixed slapd schema UTF8StringNormalize with 0 length values (ITS#7059)
-	Fixed slapd with dynamic acls for cn=config (ITS#7066)
-	Fixed slapd response callbacks (ITS#6059,ITS#7062)
-	Fixed slapd no_connection warnings with ldapi (ITS#6548,ITS#7092)
-	Fixed slapd return code processing (ITS#7060)
-	Fixed slapd sl_malloc various issues (ITS#6437)
-	Fixed slapd startup behavior (ITS#6848)
-	Fixed slapd syncrepl crash with non-replicated ops (ITS#6892)
-	Fixed slapd syncrepl with modrdn (ITS#7000,ITS#6472)
-	Fixed slapd syncrepl timeout when using refreshAndPersist (ITS#6999)
-	Fixed slapd syncrepl deletes need a non-empty CSN (ITS#7052)
-	Fixed slapd syncrepl glue for empty suffix (ITS#7037)
-	Fixed slapd results cleanup (ITS#6763,ITS#7053)
-	Fixed slapd validation of args for TLSCertificateFile (ITS#7012)
-	Fixed slapd-bdb/hdb to build entry DN based on parent DN (ITS#5326)
-	Fixed slapd-hdb with zero-length entries (ITS#7073)
-	Fixed slapd-hdb duplicate entries in subtree IDL cache (ITS#6983)
-	Fixed slapo-constraint conversion to back-config (ITS#6986)
-	Fixed slapo-dds tag in refresh response (ITS#6886)
-	Fixed slapo-dds TTL tolerance (ITS#7017)
-	Fixed slapo-lastbind so authTimestamp is manageable (ITS#6873)
-	Fixed slapo-pcache response cleanup (ITS#6981)
-	Fixed slapo-ppolicy pwdAllowUserChange behavior (ITS#7021)
-	Fixed slapo-sssvlv issue with greaterThanorEqual (ITS#6985)
-	Fixed slapo-sssvlv to only return requested attrs (ITS#7061)
-	Fixed slapo-syncprov DSA attribute filtering for Persist mode (ITS#7019)
-	Fixed slapo-syncprov when consumer has newer state of our SID (ITS#7040)
-	Fixed slapo-syncprov crash (ITS#7025)
-	Fixed slapo-unique URI checking of "host" portion (ITS#7018)
-	Fixed contrib/autogroup double-free (ITS#6972)
-	Fixed contrib/smbk5pwd cn=config deletion of bitmasks (ITS#7083)
-	Fixed contrib/smbk5pwd on 64-bit systems (ITS#7082)
-	Build Environment
-		Added missing LDIF form of schema files (ITS#7063)
-		Fixed build for Solaris native compilers (ITS#6992)
-		Fixed creation and installation of slapd.ldif (ITS#7015)
-		Fixed libnet linking (ITS#7071)
-	Documentation
-		admin24 Fix table numbering (ITS#7003)
-		slapd.conf(5) Fixed TLSCACertificateFile information (ITS#7023)
-		ldapmodify(1) Fixed minor typo in -S option description (ITS#7086)
-		ldap_sync(3) Document ldap_sync_destroy (ITS#7028)
-		slapo-unique(5) Fix keyword quoting (ITS#7028)
-
-OpenLDAP 2.4.26 Release (2011/06/30)
-	Added libldap LDAP_OPT_X_TLS_PACKAGE (ITS#6969)
-	Fixed libldap MozNSS with CACertDir (ITS#6975)
-	Fixed libldap MozNSS with PR_SetEnv (ITS#6862)
-	Fixed libldap descriptor leak (ITS#6929)
-	Fixed libldap socket leak (ITS#6930)
-	Fixed libldap get option crash (ITS#6931)
-	Fixed libldap lockup (ITS#6898)
-	Fixed libldap ASYNC TLS setup (ITS#6828)
-	Fixed libldap with missing \n terminations (ITS#6947)
-	Fixed tools double free (ITS#6946)
-	Fixed tools verbose output (ITS#6977)
-	Fixed ldapmodify SEGV on invalid LDIF (ITS#6978)
-	Added slapd extra_attrs database option (ITS#6513)
-	Fixed slapd asserts (ITS#6932)
-	Fixed slapd configfile param on windows (ITS#6933)
-	Fixed slapd config with global chaining (ITS#6843)
-	Fixed slapd uninitialized variables (ITS#6935)
-	Fixed slapd config objectclass is readonly (ITS#6963)
-	Fixed slapd entry response with control (ITS#6899)
-	Fixed slapd with unknown attrs (ITS#6819)
-	Fixed slapd normalization of schema RDN (ITS#6967)
-	Fixed slapd operations cache to 10 op limit (ITS#6944)
-	Fixed slapd syncrepl crash with non-replicated ops (ITS#6892)
-	Fixed slapd-bdb/hdb with sparse index ranges (ITS#6961)
-	Fixed slapd-monitor stray code cleanup (ITS#6974)
-	Fixed back-ldap ppolicy updates (ITS#6711)
-	Fixed back-ldap with id-assert (ITS#6817)
-	Fixed slapd-meta reentry issues (ITS#6909)
-	Fixed slapd-sql length of data type (ITS#6657,ITS#6691)
-	Added slapo-accesslog filter matching (ITS#6815)
-	Fixed slapo-accesslog with invalid attrs (ITS#6819)
-	Added slapo-auditlog connID and peername logging (ITS#6936)
-	Fixed slapo-memberof with accesslog (ITS#6329,ITS#6766,ITS#6915)
-	Fixed slapo-pcache with unknown attrs (ITS#6823)
-	Fixed slapo-pcache with '1.1', '+', and '*' attrs (ITS#6950)
-	Fixed slapo-pcache buffersize issues (ITS#6951)
-	Fixed slapo-pcache refresh (ITS#6953)
-	Fixed slapo-pcache with pCacheBind (ITS#6954)
-	Fixed slapo-pcache database corruption (ITS#6831)
-	Fixed slapo-rwm with attributes with no equality rule (ITS#6943)
-	Fixed slapo-sssvlv limits check when global (ITS#6973)
-	Fixed slapo-syncprov with replicated subtrees (ITS#6872)
-	Fixed slapo-unique with managedsait (ITS#6641)
-	Fixed slapo-unique filter with zero-length values (ITS#6901)
-	Added contrib/acl GSS naming extensions ACL module
-	Fixed contrib/smbk5pwd with shadowLastChange (ITS#6955)
-	Build Environment
-		Fixed builds that do not have GETTIMEOFDAY (ITS#6885)
-		Fixed libldap libfetch dependancy (ITS#6889)
-	Documentation
-		ldap_get_dn(3) add man page (ITS#6959)
-		slapd-backends(5) update recommended database backend (ITS#6904)
-		slapd-bdb(5) update recommended database backend (ITS#6904)
-		slapd-hdb(5) update recommended database backend (ITS#6904)
-		slapo-nssov(5) Fixed typo (ITS#6934)
-		admin24 update that cn=config is preferred (ITS#6905)
-		admin24 update information about indexes (ITS#6906)
-		admin24 fix --enable-wrappers option (ITS#6971)
-
-OpenLDAP 2.4.25 Release (2011/03/26)
-	Fixed ldapsearch pagedresults loop (ITS#6755)
-	Fixed tools for incompatible args (ITS#6849)
-	Fixed libldap MozNSS crash (ITS#6863)
-	Fixed slapd add objectclasses in order (ITS#6837)
-	Added slapd ordering for uidNumber and gidNumber (ITS#6852)
-	Fixed slapd segfault when adding values out of order (ITS#6858)
-	Fixed slapd sortval handling (ITS#6845)
-	Fixed slapd-bdb with slapadd/index quick option (ITS#6853)
-	Fixed slapd-ldap chain cn=config support (ITS#6837)
-	Fixed slapd-ldap chain with slapd.conf (ITS#6857)
-	Fixed slapd-meta deadlock (ITS#6846)
-	Fixed slapo-sssvlv with multiple requests (ITS#6850)
-	Fixed contrib/lastbind install rules (ITS#6238)
-	Fixed contrib/cloak install rules (ITS#6877)
-	Build Environment
-		Fixed windows NT threads build (ITS#6859)
-		Fixed libldap/lberl/util if/else usage (ITS#6832)
-		Fixed Windows odbc32 detection (ITS#6125)
-		Fixed Windows msys build (ITS#6870)
-		Fixed test020 exit codes (ITS#6404)
-	Documentation
-		admin24 guide ldapi usage (ITS#6839)
-		admin24 guide conversion notes (ITS#6834)
-		admin24 guide fix drawback math for syncrepl (ITS#6866)
-		admin24 guide note manpages are definitive (ITS#6855)
-
-OpenLDAP 2.4.24 Release (2011/02/10)
-	Added LDIF line wrapping setting (ITS#6645)
-	Added MozNSS support (ITS#6714,ITS#6742,ITS#6790,ITS#6791)
-	Added MozNSS support (ITS#6802,ITS#6811,ITS#6816,ITS#5696)
-	Added libldap cert x500UniqueIdentifier handling (ITS#6741)
-	Added libldap_r,libldap formal concurrency API (ITS#6625,ITS#5421)
-	Added slapadd attribute value checking (ITS#6592)
-	Added slapcat continue mode for problematic DBs (ITS#6482)
-	Added slapd syncrepl suffixmassage support (ITS#6781)
-	Added slapd multiple listener threads (ITS#6780)
-	Added slapd extensible match for ordering rules (ITS#6532)
-	Added slapd-meta paged results control forwarding (ITS#6664)
-	Added slapd-meta subtree-include support (ITS#6801)
-	Added slapd-null back-config support (ITS#6624)
-	Added slapd-sql autocommit support (ITS#6612)
-	Added slapd-sql support for long long keys (ITS#6617)
-	Added slapo-sssvlv multiple sorts per connection (ITS#6686)
-	Added contrib/autogroup LDAP URI with attribute filter (ITS#6536)
-	Added contrib/dupent module (ITS#6630)
-	Added contrib/lastbind (ITS#6238)
-	Added contrib/kinit for kerberos tickets
-	Added contrib/noopsrch for entry counting (ITS#6598)
-	Fixed client tools control logging (ITS#6775)
-	Fixed client tools one time leak (ITS#6778)
-	Fixed liblber to not close invalid sockets (ITS#6585)
-	Fixed liblber unmatched brace handling (ITS#6764)
-	Fixed liblber error setting (ITS#6732)
-	Fixed liblber memory debugging (ITS#6733)
-	Fixed libldap connectionless warnings (ITS#6747)
-	Fixed libldap dnssrv port format specifier (ITS#6644)
-	Fixed libldap EOF handling (ITS#6723)
-	Fixed libldap GnuTLS hang on socket close (ITS#6673)
-	Fixed libldap sasl partial write handling (ITS#6639)
-	Fixed libldap search leak (ITS#6453)
-	Fixed libldap referral chasing (ITS#6602)
-	Fixed libldap leak when chasing referrals (ITS#6744)
-	Fixed libldap url parsing with NULL host (ITS#6653)
-	Fixed libldap ldap_open_internal_connection (ITS#6788)
-	Fixed libldap sync checking for BER errors (ITS#6738)	
-	Fixed libldap variable usage (ITS#6813)
-	Fixed liblutil getpass prompts (ITS#6702)
-	Fixed ldapsearch segfault with deref (ITS#6638)
-	Fixed ldapsearch multiple controls parsing (ITS#6651)
-	Fixed slapd SlapReply usage (ITS#6758)
-	Fixed slapd acl parsing overflow (ITS#6611)
-	Fixed slapd acl when resuming parsing (ITS#6804)
-	Fixed slapd Compare operation (ITS#6753)
-	Fixed slapd default config acls with overlays (ITS#6822)
-	Fixed slapd assert control (ITS#5862)
-	Fixed slapd assertions and debugging (ITS#6759)
-	Fixed slapd config leak with olcDbDirectory (ITS#6634)
-	Fixed slapd connectionless warnings (ITS#6747)
-	Fixed slapd listeners destruction (ITS#6736)
-	Fixed slapd to free controls if needed (ITS#6629)
-	Fixed slapd to stop if given unknown options (ITS#6754)
-	Fixed slapd filter leak (ITS#6635)
-	Fixed slapd matching rules for strict ordering (ITS#6722)
-	Fixed slapd when first acl is value dependent (ITS#6693)
-	Fixed slapd modify to return actual error (ITS#6581)
-	Fixed slapd modrdn with empty DN (ITS#6768)
-	Fixed slapd c_authz_backend setting (ITS#6824)
-	Fixed slapd sortvals of attributes with 1 value (ITS#6715)
-	Fixed slapd syncrepl reuse of presence list (ITS#6707)
-	Fixed slapd syncrepl uninitialized return code (ITS#6719)
-	Fixed slapd syncrepl variable initialization (ITS#6739)
-	Fixed slapd syncrepl refresh to use complete cookie (ITS#6807)
-	Fixed slapd-bdb hasSubordinates generation (ITS#6712)
-	Fixed slapd-bdb entry cache delete failure (ITS#6577)
-	Fixed slapd-bdb entry cache leak on multi-core systems (ITS#6660)
-	Fixed slapd-bdb error propagation to overlays (ITS#6633)
-	Fixed slapd-bdb slapadd -q with glued dbs (ITS#6794)
-	Fixed slapd-ldap debug output of timeout (ITS#6721)
-	Fixed slapd-ldap DNSSRV referral chaining (ITS#6565)
-	Fixed slapd-ldap chaining with bind failures (ITS#6607)
-	Fixed slapd-ldap chaining with onelevel scope (ITS#6699)
-	Fixed slapd-ldap chaining with ppolicy (ITS#6540)
-	Fixed slapd-ldap with SASL/EXTERNAL (ITS#6642)
-	Fixed slapd-ldap crasher on matchedDN (ITS#6793)
-	Fixed slapd-ldap with unknown objectClasses (ITS#6814)
-	Fixed slapd-ldif error strings (ITS#6731)
-	Fixed slapd-ndb to honor rootpw setting (ITS#6661)
-	Fixed slapd-ndb hasSubordinates generation (ITS#6712)
-	Fixed slapd-ndb variable initialization (ITS#6806)
-	Fixed slapd-ndb with out of order attributes (ITS#6821)
-	Fixed slapd-meta anon retry with failed auth method (ITS#6643)
-	Fixed slapd-meta rebind proc (ITS#6665)
-	Fixed slapd-meta to correctly rebind as user (ITS#6574)
-	Fixed slapd-meta with SASL/EXTERNAL (ITS#6642)
-	Fixed slapd-meta matchedDN return code (ITS#6774)
-	Fixed slapd-meta candidate selection (ITS#6799)
-	Fixed slapd-meta attribute normalization (ITS#6818)
-	Fixed slapd-monitor hasSubordinates generation (ITS#6712)
-	Fixed slapd-monitor abandon processing (ITS#6783)
-	Fixed slapd-monitor entry locks (ITS#6787)
-	Fixed slapd-sock missing newline in Compare operation (ITS#6809)
-	Fixed slapd-sql with null objectClass (ITS#6616)
-	Fixed slapd-sql hasSubordinates generation (ITS#6712)
-	Fixed slapo-accesslog with controls (ITS#6652)
-	Fixed slapo-dynlist Compare operation (ITS#6752)
-	Fixed slapo-dynlist entry handling (ITS#6752)
-	Fixed slapo-memberof CSN generation (ITS#6766)
-	Fixed slapo-memberof log messages (ITS#6748)
-	Fixed slapo-memberof with an empty groupOfNames (ITS#6670)
-	Fixed slapo-memberof with modrdn operations (ITS#6700)
-	Fixed slapo-pcache callback freeing (ITS#6640)
-	Fixed slapo-pcache to ignore undefined attrs (ITS#6600)
-	Fixed slapo-pcache pointer freeing (ITS#6797)
-	Fixed slapo-pcache with negative caching (ITS#6796)
-	Fixed slapo-pcache monitoring cleanup (ITS#6808)
-	Fixed slapo-ppolicy don't update opattrs on consumers (ITS#6608)
-	Fixed slapo-ppolicy to allow userPassword deletion (ITS#6620)
-	Fixed slapo-refint when last group member is deleted (ITS#6663)
-	Fixed slapo-refint with subtree rename (ITS#6730)
-	Fixed slapo-rwm double free (ITS#6720)
-	Fixed slapo-rwm crasher (ITS#6632,ITS#6727)
-	Fixed slapo-rwm entry handling (ITS#6760)
-	Fixed slapo-rwm response hang (ITS#6792)
-	Fixed slapo-sssvlv initialization (ITS#6649)
-	Fixed slapo-sssvlv to not advertise when unused (ITS#6647)
-	Fixed slapo-sssvlv result code (ITS#6685)
-	Fixed slapo-syncprov to send error if consumer is newer (ITS#6606)
-	Fixed slapo-syncprov filter race condition (ITS#6708)
-	Fixed slapo-syncprov active mod race (ITS#6709)
-	Fixed slapo-syncprov to refresh if context is dirty (ITS#6710)
-	Fixed slapo-syncprov CSN updates to all consumers (ITS#6718)
-	Fixed slapo-syncprov sessionlog ordering (ITS#6716)
-	Fixed slapo-syncprov sessionlog with adds (ITS#6503)
-	Fixed slapo-syncprov mutex (ITS#6438)
-	Fixed slapo-syncprov mincsn check with MPR (ITS#6717)
-	Fixed slapo-syncprov control leak (ITS#6795)
-	Fixed slapo-syncprov error codes (ITS#6812)
-	Fixed slapo-translucent entry leak (ITS#6746)
-	Fixed contrib/autogroup install location (ITS#6684)
-	Fixed contrib/autogroup crash with ppolicy (ITS#6684)
-	Fixed contrib/autogroup with non-DN URIs (ITS#6684)
-	Fixed contrib/autogroup with memberOf overlay (ITS#6684)
-	Fixed contrib/cloak when returning multiple entries (ITS#6762)
-	Fixed contrib/nssov to only close socket on shutdown (ITS#6676)
-	Fixed contrib/nssov multi platform support (ITS#6604)
-	Build Environment
-		Added support for [unsigned] long long (ITS#6622)
-		Added slapd support for BDB 5.0+ (ITS#6698)
-		Fixed config.guess/sub to pick up newer OSes (ITS#6547)
-		Fixed libldap mutex code - cleanup (ITS#6672)
-		Fixed libldap unnecessary ifdef's (ITS#6603)
-		Fixed slapd-tester EOF handling (ITS#6723)
-		Fixed slapd-tester filter initialization (ITS#6735)
-		Fixed test scripts with alternate testdir (ITS#6782)
-		Removed antiquated SunOS LWP support (ITS#6669)
-	Documentation
-		admin24 guide fix examples (ITS#6681)
-		admin24 guide typo fixes (ITS#6609)
-		admin24 guide refint rootdn requirement (ITS#6364)
-		admin24 add pcache overlay section (ITS#6521)
-		ldap_open(3) document ldap_set_urllist_proc (ITS#6601)
-		ldap.conf(5) GnuTLS cipher spec info (ITS#6525)
-		slapd.conf(5) GnlTLS cipher spec info (ITS#6525)
-		slapd.conf(5) multi-listener support (ITS#6780)
-		slapd-config(5) GnuTLS cipher spec info (ITS#6525)
-		slapd-config(5) multi-listener support (ITS#6780)
-		slapd-meta(5) note deprecated items (ITS#6800)
-		slapd-meta(5) document subtree-include (ITS#6801)
-		slapo-pcache(5) note rootdn requirement (ITS#6522)
-		slapo-refint(5) rootdn requirement (ITS#6364)
-
-OpenLDAP 2.4.23 Release (2010/06/30)
-	Fixed libldap to return server's error code (ITS#6569)
-	Fixed libldap memleaks (ITS#6568)
-	Fixed liblutil off-by-one with delta (ITS#6541)
-	Fixed slapd acls with glued databases (ITS#6468)
-	Fixed slapd syncrepl rid logging (ITS#6533)
-	Fixed slapd modrdn handling of invalid values (ITS#6570)
-	Fixed slapd-bdb hasSubordinates computation (ITS#6549)
-	Fixed slapd-bdb to use memcpy instead for strcpy (ITS#6474)
-	Fixed slapd-bdb entry cache delete failure (ITS#6577)
-	Fixed slapd-ldap to return control responses (ITS#6530)
-	Fixed slapo-ppolicy to use Debug (ITS#6566)
-	Fixed slapo-refint to zero out freed DN vals (ITS#6572)
-	Fixed slapo-rwm to use Debug (ITS#6566)
-	Fixed slapo-sssvlv to use Debug (ITS#6566)
-	Fixed slapo-syncprov lost deletes in refresh phase (ITS#6555)
-	Fixed slapo-valsort to use Debug (ITS#6566)
- 	Fixed contrib/nssov network.c missing patch (ITS#6562)
-	Build Environment
-		Fixed test043 attribute sorting (ITS#6553)
-	Documentation
-	        slapd-config(5) note default rootdn (ITS#6546)
-
-OpenLDAP 2.4.22 Release (2010/04/24)
-	Added slapd SLAP_SCHEMA_EXPOSE flag for hidden schema elements (ITS#6435)
-	Added slapd tools selective iterations (ITS#6442)
-	Added slapd syncrepl TCP keepalive (ITS#6389)
-	Added slapo-ldap idassert-passthru (ITS#6456)
-	Added slapo-pbind
-	Fixed libldap gmtime re-entrancy (ITS#6262)
-	Fixed libldap gssapi off by one error (ITS#6223)
-	Fixed libldap GnuTLS serial length (ITS#6460)
-	Fixed libldap MozNSS context and PEM support (ITS#6432)
-	Fixed libldap referral on bind behavior(ITS#6510)
-	Fixed slapd acl non-entry internal searches (ITS#6481)
-	Fixed slapd acl attrval style initialization (ITS#6520)
-	Fixed slapd certificateListValidate (ITS#6466)
-	Fixed slapd empty URI parsing (ITS#6465)
-	Fixed slapd glued misplaced entries (ITS#6506)
-	Fixed slapd glued paged cookies (ITS#6507)
-	Fixed slapd glued paged results (ITS#6504)
-	Fixed slapd gmtime re-entrancy (ITS#6262)
-	Fixed slapd to ignore controls with unrecognized flags (ITS#6480)
-	Fixed slapd entry ownership (ITS#5340)
-	Fixed slapd sasl auxprop_lookup (ITS#6441)
-	Fixed slapd sasl auxprop ssf (ITS#5195)
-	Fixed slapd syncrepl for attributes with no matching rule (ITS#6458)
-	Fixed slapd syncrepl for unknown attrs and delta-sync (ITS#6473)
-	Fixed slapd syncrepl loop with moddn (ITS#6472)
-	Fixed slapo-accesslog to not replicate internal purges (ITS#6519)
-	Fixed slapd-bdb contextCSN updates from updatedn (ITS#6469)
-	Fixed slapd-bdb lockobj zeroing (ITS#6501)
-	Fixed slapd-ldap/meta control criticality (ITS#6523)
-	Fixed slapd-ldap/meta with ordered values (ITS#6516)
-	Fixed slapo-collect entry ownership (ITS#5340,ITS#6423)
-	Fixed slapo-dds with NULL backend (ITS#6490)
-	Fixed slapo-dynlist entry ownership (ITS#5340,ITS#6423)
-	Fixed slapo-memberof attr count (ITS#6508)
-	Fixed slapo-pcache to release its own entries (ITS#6484)
-	Fixed slapo-pcache with NULL backend (ITS#6490)
-	Fixed slapo-rwm entry release handling (ITS#6484)
-	Fixed slapo-rwm memory handling with rewrites (ITS#6526)
-	Fixed slapo-rwm olcRwmMap handling (ITS#6436)
-	Fixed slapo-rwm entry ownership (ITS#5340,ITS#6423)
-	Fixed slapo-syncprov memory leak (ITS#6459)
-	Fixed slapo-translucent counter increment (ITS#6497)
-	Fixed slapo-valsort entry ownership (ITS#5340,ITS#6423)	
-	Fixed contrib/sha2 adds mechs for more hashes (ITS#6433)
-	Fixed contrib/nssov to use nss-pam-ldapd (ITS#6488)
-	Build Environment
-		Added back-ldif, back-null test support (ITS#5810)
-	Documentation
-		admin24 avoid explicit moduleload statements (ITS#6486)
-		admin24 broken link fixes (ITS#6493,ITS#6515)
-	        slapd.access(5) val.regex explanation (ITS#5804)
-
-OpenLDAP 2.4.21 Release (2009/12/20)
-	Fixed liblutil for negative microsecond offsets (ITS#6405)
-	Fixed slapd global settings to work without restart (ITS#6428)
-	Fixed slapd looping with SSL/TLS connections (ITS#6412)
-	Fixed slapd syncrepl freeing tasks from queue (ITS#6413)
-	Fixed slapd syncrepl parsing of tls defaults (ITS#6419)
-	Fixed slapd syncrepl uninitialized variables (ITS#6425)
-	Fixed slapd-config Adds with Abstract classes (ITS#6408)
-	Fixed slapo-dynlist behavior with simple filters (ITS#6421)
-	Fixed slapd-ldif access outside database directory (ITS#6414)
-	Fixed slapd-null extraneous assert (ITS#6403)
-	Fixed slapo-translucent with back-null (ITS#6403)
-	Fixed slapo-unique criteria checking (ITS#6270)
-	Build Environment
-		Deleted broken LBER_INVALID macro (ITS#6402)
-		Fixed test058 kill usage (ITS#6420)
-		Fixed meta regression test (ITS#6418)
-	Documentation
-		slapd-meta(5) Note deprecated functions (ITS#6424)
-		admin24 fix set example for group of groups (ITS#6382)
-		admin24 fix dynamic group documentation (ITS#6290)
-
-OpenLDAP 2.4.20 Release (2009/11/27)
-	Fixed client tools with LDAP options (ITS#6283)
-	Fixed liblber embedded NUL values in BerValues (ITS#6353)
-	Fixed liblber inverted LBER_USE_DER test (ITS#6348)
-	Fixed liblber to return failure on certain failures (ITS#6344)
-	Fixed libldap connection initialization (ITS#6386)
-	Fixed libldap sasl buffer sizing (ITS#6327,ITS#6334)
-	Fixed libldap uninitialized return value (ITS#6355)
-	Fixed libldap unlimited timeout (ITS#6388)
-	Added slapd handling of hex server IDs (ITS#6297)
-	Added slapd syncrepl contextCSN storing in subentry (ITS#6373)
-	Fixed slapd asserts in minimal environment (ITS#6361)
-	Fixed slapd authid-rewrite parsing (ITS#6392)
-	Fixed slapd checks of str2filter (ITS#6391)
-	Fixed slapd configArgs initialization (ITS#6363)
-	Fixed slapd debug handling of LDAP_DEBUG_ANY (ITS#6324)
-	Fixed slapd db_open with connection_fake_init (ITS#6381)
-	Fixed slapd with embedded \0 in bervals (ITS#6378,ITS#6379)
-	Fixed slapd inclusion of ac/unistd.h (ITS#6342)
-	Fixed slapd invalid dn log message (ITS#6309)
-	Fixed slapd lockup on shutdown (ITS#6372)
-	Fixed slapd onetime leak (ITS#6398)
-	Fixed slapd RID range to be decimal only (ITS#6394)
-	Fixed slapd sl_free to better reclaim memory (ITS#6380)
-	Fixed slapd syncrepl deletes in MirrorMode (ITS#6368)
-	Fixed slapd syncrepl to use correct SID (ITS#6367)
-	Fixed slapd termination for one level DNs (ITS#6338)
-	Fixed slapd tls_accept to retry in certain cases (ITS#6304)
-	Fixed slapd-bdb/hdb cache corruption (ITS#6341)
-	Fixed slapd-bdb/hdb entry cache (ITS#6360)
-	Fixed slapd-ldap leak (ITS#6326)
-	Fixed slapd-relay bind segfault (ITS#6337)
-	Fixed slapo-accesslog ensure CSNs are normalized (ITS#6400)
-	Fixed slapo-memberof operational attr updates (ITS#6329)
-	Fixed slapo-pcache entry dupe (ITS#6310)
-	Fixed slapo-syncprov checkpoint conversion (ITS#6370)
-	Fixed slapo-syncprov deadlock (ITS#6335)
-	Fixed slapo-syncprov memory leak (ITS#6376)
-	Fixed slapo-syncprov out of order changes (ITS#6346)
-	Fixed slapo-syncprov psearch with stale cookie (ITS#6397)
-	Build Environment
-		Added additional operations for ITS#6332
-		Fixed memrchr define (ITS#6351)
-		Fixed slapd MAXPATHLEN handling (ITS#6342)
-		Added test050 rapid add/mod/del sequence (ITS#6368)
-		Fixed test057 handling of memberof/refint (ITS#6343)
-		Fixed slapd test error ignoring (ITS#6345)
-		Fixed liblutil constant (ITS#5909)
-	Documentation
-		admin24 fix RFC4511 and other references (ITS#6399)
-		ldap_get_dn(3) typos (ITS#5366)
-		ldap.conf(5) clarify comment usage (ITS#6384)
-		slapd.conf(5) note hex server IDs (ITS#6297)
-		slapd-config(5) note hex server IDs (ITS#6297)
-
-OpenLDAP 2.4.19 Release (2009/10/06)
-	Fixed client tools with null timeouts (ITS#6282)
-	Fixed slapadd to warn about missing attrs for consumers (ITS#6281)
-	Fixed slapd acl cache (ITS#6287)
-	Fixed slapd tools to allow -n for conversion (ITS#6258)
-	Fixed slapd-ldap with null timeouts (ITS#6282)
-	Fixed slapd-ldap with strong binds with relay/translucent (ITS#6296)
-	Fixed slapd-ldif buffer overflow (ITS#6303)
-	Fixed slapo-auditlog comments when modifying (ITS#6286)
-	Fixed slapo-dynlist lock leak (ITS#6308)
-	Fixed slapo-pcache cache corruption (ITS#6242)
-	Fixed slapo-sssvlv sort control dereferencing (ITS#6288)
-	Fixed contrib/autogroup segfaults (ITS#6279)
-	Fixed contrib/nssov getgroupbymembers (ITS#6291)
-	Fixed contrib/smbk5pwd rpath linking (ITS#6323)
-	Build Environment
-		Fixed --enable-deref support (ITS#6311)
-		Fixed contrib/autogroup default libtool path (ITS#6284)
-		Deleted nadf.schema (ITS#6140)
-
-OpenLDAP 2.4.18 Release (2009/09/06)
-	Fixed client tools common options (ITS#6049)
-	Fixed liblber speed and other problems (ITS#6215)
-	Added libldap MozNSS PEM support (ITS#6278)
-	Added libldap option for SASL_USERNAME (ITS#6257)
-	Fixed libldap error parsing (ITS#6197)
-	Fixed libldap native getpass usage (ITS#4643)
-	Fixed libldap tls_check_hostname for OpenSSL and MozNSS (ITS#6239)
-	Added slapd tcp buffers support (ITS#6234)
-	Fixed slapd allow mirrormode to be set to FALSE (ITS#5946)
-	Fixed slapd certificate list parsing (ITS#6241)
-	Fixed slapd writers blocking (ITS#6276)
-	Fixed slapd dncachesize behavior to unlimited by default (ITS#6222)
-	Fixed slapd incorrectly applying writetimeout when not set (ITS#6220)
-	Fixed slapd with duplicate empty lines for olcDbConfig (ITS#6240)
-	Fixed slapd server URL matching (ITS#5942)
-	Fixed slapd subordinate needs a suffix (ITS#6216)
-	Fixed slapd syncrepl decrement on possible NULL value (ITS#6256)
-	Fixed slapd tools to properly close database (ITS#6214)
-	Fixed slapd uninitialized SlapReply components (ITS#6101)
-	Fixed slapd-meta starttls with targets (ITS#6190)
-	Fixed slapd-monitor stats with glued subordinates (ITS#6243)
-	Fixed slapd-ndb startup (ITS#6203)
-	Fixed slapd-relay various issues (ITS#6133)
-	Fixed slapd-relay response/cleanup callback mismatch (ITS#6154)
-	Fixed slapd-sql with baseObject query (ITS#6172)
-	Fixed slapd-sql with empty attribute (ITS#6163)
-	Fixed slapo-dynlist uninitialized var (ITS#6266)
-	Fixed slapo-pcache multiple enhancements (ITS#6152,ITS#5178)
-	Fixed slapo-ppolicy updating operational attributes (ITS#6265)
-	Fixed slapo-translucent attribute return (ITS#6254)
-	Fixed slapo-translucent filter matching (ITS#6255)
-	Fixed slapo-translucent to honor sizelimit (ITS#6253)
-	Fixed slapo-unique filter matching (ITS#6077)
-	Fixed tools off by one error (ITS#6233)
-	Fixed tools resource leaks (ITS#6145)
-	Added contrib/allowed (ITS#4730)
-	Fixed contrib/autogroup with RE24 (ITS#6227)
-	Fixed contrib/nss symbols (ITS#6273)
-	Build Environment
-		Tests note which backend is being tested (ITS#5810)
-		Fixed test056-monitor with custom ports (ITS#6213)
-	Documentation
-		admin24 fix broken link (ITS#6264)
-		ldap_open(3) document URI (ITS#6261)
-		ldap_set/get_option(3) SASL/TLS options added (ITS#6260)
-		man page format updates (ITS#6023)
-
-OpenLDAP 2.4.17 Release (2009/07/13)
-	Fixed liblber to use ber_strnlen (ITS#6080)
-	Fixed libldap GnuTLS private key init (ITS#6053)
-	Fixed libldap openssl digest initialization (ITS#6192)
-	Fixed libldap tls NULL error messages (ITS#6079)
-	Fixed libldap_r missing stub (ITS#6188)
-	Fixed liblutil opendir/closedir on windows (ITS#6041)
-	Fixed liblutil for _GNU_SOURCE (ITS#5464,ITS#5666)
-	Added slapd sasl auxprop support (ITS#6147)
-	Added slapd schema checking tool (ITS#6150)
-	Added slapd writetimeout keyword (ITS#5836)
-	Fixed slapd abandon/cancel handling for some ops (ITS#6157)
-	Fixed slapd access setstyle to expand (ITS#6179)
-	Fixed slapd assert with closing connections (ITS#6111)
-	Fixed slapd bind race condition (ITS#6189)
-	Fixed slapd cancel behavior (ITS#6137)
-	Fixed slapd cert validation (ITS#6098)
-	Fixed slapd connection_destroy assert (ITS#6089)
-	Fixed slapd csn normalization (ITS#6195)
-	Fixed slapd errno handling (ITS#6037)
-	Fixed slapd global alloc handling (ITS#6054)
-	Fixed slapd hung writers (ITS#5836)
-	Fixed slapd ldapi issues (ITS#6056)
-	Fixed slapd moduleload with static backends and modules (ITS#6016)
-	Fixed slapd normalization of updated schema attributes (ITS#5540)
-	Fixed slapd olcLimits handling (ITS#6159)
-	Fixed slapd olcLogLevel with hex levels (ITS#6162)
-	Fixed slapd pagedresults stacked control with overlays (ITS#6056)
-	Fixed slapd password-hash incorrect limit on arg length (ITS#6139)
-	Fixed slapd readonly restrictions (ITS#6109)
-	Fixed slapd sending cancelled operations results (ITS#6103)
-	Fixed slapd slapi_entry_has_children (ITS#6132)
-	Fixed slapd sockets usage on windows (ITS#6039)
-	Fixed slapd some abandon and cancel race conditions (ITS#6104)
-	Fixed slapd tls context after changes (ITS#6135)
-	Fixed slapd-bdb/hdb adjust dncachesize if too low (ITS#6176)
-	Fixed slapd-bdb/hdb crashes during delete (ITS#6177)
-	Fixed slapd-bdb/hdb multiple olcIndex for same attr (ITS#6196)
-	Fixed slapd-hdb freeing of already freed entries (ITS#6074)
-	Fixed slapd-hdb entryinfo cleanup (ITS#6088)
-	Fixed slapd-hdb dncache lockups (ITS#6095)
-	Fixed slapd-ldap deadlock with non-responsive TLS URIs (ITS#6167)
-	Fixed slapd-relay to return failure on failure (ITS#5328)
-	Fixed slapd-sql with BACKSQL_ARBITRARY_KEY defined (ITS#6100)
-	Fixed slapo-collect collectinfo ordering (ITS#6076)
-	Fixed slapo-collect missing equality match rule (ITS#6075)
-	Fixed slapo-dds entry expiration (ITS#6169)
-	Fixed slapo-perl symbols (ITS#5658)
-	Fixed slapo-ppolicy to honor pwdLockout (ITS#6168)
-	Fixed slapo-ppolicy to return check modules error message (ITS#6082)
-	Fixed slapo-refint refint_repair handling (ITS#6056)
-	Added slapo-rwm rwm-drop-unrequested-attrs config option (ITS#6057)
-	Fixed slapo-rwm dn passing (ITS#6070)
-	Fixed slapo-rwm entry free (ITS#6058)
-	Fixed slapo-rwm entry release (ITS#6081)
-	Fixed slapo-translucent entry gathering (ITS#6156)
-	Fixed tools returning ldif errors (ITS#5892)
-	Fixed contrib/smbk5pwd use of private functions (ITS#5535)
-	Build Environment
-		Added test056-monitor (ITS#5540)
-		Added test057-memberof-refint (ITS#5395)
-		Fixed winsock detection for windows (ITS#6102, ITS#6078)
-		Removed GSSAPI configure option (ITS#6091,ITS#6092,ITS#6093,ITS#5369)
-	Documentation
-		admin24 relocate configuration examples (ITS#6183)
-		admin24 fixed example regex (ITS#6052)
-		admin24 removed temporary back-monitor note (ITS#6130)
-		admin24 slapd.conf to cn=config conversion process (ITS#6060)
-		man page consistency fixes (ITS#6023)
-		ldapcompare(1) note -e option (ITS#6107)
-		ldapdelete(1) note -e option (ITS#6107)
-		ldapmodify(1) note -e option (ITS#6107)
-		ldapmodrdn(1) note -e option (ITS#6107)
-		ldapsearch(1) output format description (ITS#6146)
-		ldapurl(1) note -e option (ITS#6107)
-		ldapwhoami(1) note -e option (ITS#6107)
-		ldap_result(3) Add RETURN VALUE heading (ITS#6180)
-		ldap.conf(5) improve sizelimit/timelimit limits (ITS#6127)
-		slapd.access(5) Fix <setstyle> to use expand (ITS#6179)
-		slapd.conf(5) document default modulepath (ITS#5829)
-		slapd.conf(5) pidfile/argsfile description fix (ITS#5975)
-		slapd-config(5) document default modulepath (ITS#5829)
-		slapd-config(5) pidfile/argsfile description fix (ITS#5975)
-		slapo-constraint(5) clarify URI example (ITS#6118)
-		slapo-unique(5) explicitly note rootdn requirement (ITS#6108)
-		slapadd(8) note it does indexing (ITS#6160)
-
-OpenLDAP 2.4.16 Release (2009/04/05)
-	Fixed libldap GnuTLS with x509v1 CA certs (ITS#5992)
-	Fixed libldap GnuTLS with CA chains (ITS#5991)
-	Fixed libldap GnuTLS TLSVerifyClient try (ITS#5981)
-	Fixed libldap segfault in checking cert/DN (ITS#5976)
-	Fixed libldap peer cert double free (ITS#5849)
-	Fixed libldap referral chasing (ITS#5980)
-	Fixed slapd backglue with empty DBs (ITS#5986)
-	Fixed slapd ctxcsn race condition (ITS#6001)
-	Fixed slapd debug message (ITS#6027)
-	Fixed slapd redundant module loading (ITS#6030)
-	Fixed slapd schema_init freed value (ITS#6036)
-	Fixed slapd syncrepl newCookie sync messages (ITS#5972)
-	Fixed slapd syncrepl hang during shutdown (ITS#6011)
-	Fixed slapd syncrepl too many MPR messages (ITS#6020)
-	Fixed slapd syncrepl skipped entries with MPR (ITS#5988)
-	Fixed slapd-bdb/hdb cachesize handling (ITS#5860)
-	Fixed slapd-bdb/hdb with slapcat with empty dn (ITS#6006)
-	Fixed slapd-bdb/hdb with NULL transactions (ITS#6012)
-	Fixed slapd-ldap incorrect referral handling (ITS#6003,ITS#5916)
-	Fixed slapd-ldap/meta with broken AD results (ITS#5977)
-	Fixed slapd-ldap/meta with invalid attrs again (ITS#5959)
-	Fixed slapo-accesslog interaction with ppolicy (ITS#5979)
-	Fixed slapo-dynlist conversion to cn=config (ITS#6002)
-	Fixed slapo-syncprov newCookie sync messages (ITS#5972)
-	Fixed slapd-syncprov too many MPR messages (ITS#6020)
-	Fixed slapo-syncprov consumer lockout (ITS#5985)
-	Fixed slapo-syncprov modtarget tracking (ITS#5999)
-	Fixed slapo-syncprov multiple CSN propagation (ITS#5973)
-	Fixed slapo-syncprov race condition (ITS#6045)
-	Fixed slapo-syncprov sending cookies without CSN (ITS#6024)
-	Fixed slapo-syncprov skipped entries with MPR (ITS#5988)
-	Fixed tools passphrase free (ITS#6014)
-	Build Environment
-		Cleaned up alloc/free functions for Windows (ITS#6005)
-		Fixed running of autosave files in testsuite (ITS#6026)
-	Documentation
-		admin24 clarified MPR URI requirements (ITS#5942,ITS#5987)
-		Added ldapexop(1) manual page (ITS#5982)
-		slapd-ldap/meta(5) added missing TLS options (ITS#5989)
-
-OpenLDAP 2.4.15 Release (2009/02/24)
-	Fixed libldap alias dereferencing in C API again (ITS#5916)
-	Fixed libldap GnuTLS compilation (ITS#5955)
-	Fixed slapd bconfig conversion again (ITS#5346)
-	Fixed slapd behavior with superior objectClasses again (ITS#5517)
-	Fixed slapd RFC4512 behavior with same attr in RDN (ITS#5968)
-	Fixed slapd corrupt contextCSN (ITS#5947)
-	Fixed slapd syncrepl order to match on add/delete (ITS#5954)
-	Fixed slapd adding rdn with other values (ITS#5965)
-	Fixed slapd-bdb/hdb behavior with unallocatable shm (ITS#5956)
-	Fixed slapd-ldap/meta with entries with invalid attrs (ITS#5959)
-	Fixed slapd-relay control initialization (ITS#5724)
-	Fixed slapo-pcache caching invalid entries (ITS#5927)
-	Fixed slapo-syncprov csn updates (ITS#5969)
-	Fixed slapo-rwm objectClass preservation (ITS#5760)
-	Fixed slapo-rwm rwm_bva_rewrite handling (ITS#5960)
-	Build Environment
-		Fixed tester library linking for windows (ITS#5740)
-
-OpenLDAP 2.4.14 Release (2009/02/14)
-	Added libldap option to disable SASL host canonicalization (ITS#5812)
-	Added libldap TLS_PROTOCOL_MIN (ITS#5655)
-	Added libldap GnuTLS support for TLS_CIPHER_SUITE (ITS#5887)
-	Added libldap GnuTLS setting random file (ITS#5462)
-	Added libldap alias dereferencing in C API (ITS#5916)
-	Fixed libldap chasing multiple referrals (ITS#5853)
-	Fixed libldap deref handling (ITS#5768)
-	Fixed libldap NULL pointer deref (ITS#5934)
-	Fixed libldap peer cert memory leak (ITS#5849)
-	Fixed libldap interaction with GnuTLS CN IP-based matches (ITS#5789)
-	Fixed libldap intermediate response behavior (ITS#5896)
-	Fixed libldap IPv6 address handling (ITS#5937)
-	Fixed libldap_r deref building (ITS#5768)
-	Fixed libldap_r slapd lockup when paused during shutdown (ITS#5841)
-	Added slapd syncrepl default retry setting (ITS#5825)
-	Added slapd val.regex expansion (ITS#5804)
-	Added slapd TLS_PROTOCOL_MIN (ITS#5655)
-	Added slapd slapi_pw_find (ITS#2615,ITS#4359)
-	Added slapd compatibility with MSAD ranged values (ITS#5927)
-	Fixed slapd bconfig to return error codes (ITS#5867)
-	Fixed slapd bconfig encoding incorrectly (ITS#5897)
-	Fixed slapd bconfig dangling pointers (ITS#5924)
-	Fixed slapd behavior with superior objectClasses (ITS#5517)
-	Fixed slapd connection assert (ITS#5835)
-	Fixed slapd epoll handling (ITS#5886)
-	Fixed slapd frontend/backend options handling (ITS#5857)
-	Fixed slapd glue with MPR (ITS#5925)
-	Fixed slapd logging on Windows (ITS#5392)
-	Fixed slapd listener comparison (ITS#5613)
-	Fixed slapd manageDSAit with glue entries (ITS#5921)
-	Fixed slapd relax behavior with structuralObjectClass (ITS#5792)
-	Fixed slapd syncrepl rename handling (ITS#5809)
-	Fixed slapd syncrepl MPR when adding new server (ITS#5850)
-	Fixed slapd syncrepl MPR with deleted entries (ITS#5843)
-	Fixed slapd syncrepl replication with glued DB (ITS#5866)
-	Fixed slapd syncrepl replication with moddn (ITS#5901)
-	Fixed slapd syncrepl replication with referrals (ITS#5881)
-	Fixed slapd syncrepl replication with config tree (ITS#5935)
-	Fixed slapd wake_sds close on Windows (ITS#5855)
-	Fixed slapd-bdb/hdb dncachesize handling (ITS#5860)
-	Fixed slapd-bdb/hdb RFC4528 control support (ITS#5861)
-	Fixed slapd-bdb/hdb trickle task usage (ITS#5864)
-	Fixed slapd-hdb idlcache with empty suffix (ITS#5859)
-	Fixed slapd-ldap idassert-bind validity checking (ITS#5863)
-	Fixed slapd-ldap/meta RFC4525 increment support (ITS#5912)
-	Fixed slapd-ldap/meta search dereferencing (ITS#5916)
-	Fixed slapd-ldap/meta with intermediate response (ITS#5931)
-	Fixed slapd-ldif numerous bugs (ITS#5408)
-	Fixed slapd-ldif rename on same DN (ITS#5319)
-	Fixed slapd-ldif deadlock (ITS#5329)
-	Fixed slapd-meta double response sending (ITS#5854)
-	Fixed slapd-meta alias deref for retry (ITS#5889)
-	Fixed slapd-relay recursion detection (ITS#5943)
-	Fixed slapd-sock descriptor leak (ITS#5939)
-	Fixed slapo-accesslog on glued dbs (ITS#5907)
-	Fixed slapo-dynlist handling of flags (ITS#5898)
-	Fixed slapo-memberof multiple instantiation (ITS#5903)
-	Fixed slapo-pcache filter sorting (ITS#5756)
-	Fixed slapo-ppolicy to not be global (ITS#5858)
-	Fixed slapo-rwm double free (ITS#5923)
-	Fixed slapo-rwm with back-config (ITS#5906)
-	Fixed slapo-rwm olcRwmRewrite modification (ITS#5940)
-	Added slapo-rwm newRDN rewriting (ITS#5834)
-	Added slapadd progress meter (ITS#5922)
-	Updated contrib/addpartial module (ITS#5764)
-	Added contrib/cloak module (ITS#5872)
-	Added contrib/smbk5pwd gcrypt support (ITS#5410)
-	Added contrib/passwd sha2 support (ITS#5660)
-	Build Environment
-		Fixed test006 appending to log file (ITS#5910)
-		Fixed test036,test039 behavior on error (ITS#5893)
-		Fixed test048 sed pathname substitution (ITS#5910)
-		Fixed test049,test050 to work on windows (ITS#5842)
-		Updated test017,test018,test019 to cover more cases (ITS#5883)
-		Removed patch for BerkeleyDB 4.7.25 (Official patch available)
-		Fixed MSVC 9.0 build issues (ITS#5888)
-		Fixed gss detection on Solaris (ITS#5846)
-		Fixed uuid_create/uuid_unparse_lower detection (ITS#5905)
-		Fixed liblutil tavl_delete to macroize constants (ITS#5909)
-	Documentation
-		admin24 added limits chapter (ITS#5818)
-		admin24 access-control clarify global ACLS (ITS#5851,ITS#5852)
-		admin24 search on nested naming contexts (ITS#5788)
-		admin24 consistent loglevel documentation (ITS#5904)
-		slapd-bdb/hdb expansion on dncachesize behavior (ITS#5721)
-		slapo-constraint(5) example fix (ITS#5895)
-		slap*(8) man pages should mention slapd-config (ITS#5828)
-		slapacl(8c) fix wording (ITS#5918)
-		slapd(8) document sid (ITS#5873)
-		slapd.access(5) clarify global ACLS (ITS#5851,ITS#5852)
-		slapadd/cat/index(8) note -n 0 for slapd-config (ITS#5891)
-		Added SEE ALSO slapd-config(5) to relevant man pages (ITS#5914)
-
-OpenLDAP 2.4.13 Release (2008/11/24)
-	Added libldap dereference control support (ITS#5768)
-	Fixed libldap parameter checking (ITS#5817)
-	Fixed liblutil hex conversion (ITS#5699)
-	Fixed liblutil returning undefined data (ITS#5748)
-	Fixed libldap error code return (ITS#5762)
-	Fixed libldap interaction with GnuTLS CN IP-based matches (ITS#5789)
-	Fixed libldap MAXHOSTNAMELEN typo (ITS#5815)
-	Fixed libldap Ipv6 detection (ITS#5739)
-	Fixed libldap setuid usage with .ldaprc (ITS#4750)
-	Fixed slapacl crasher (ITS#5820)
-	Fixed slapd acl checks on ADD (ITS#4556,ITS#5723)
-	Fixed slapd acl application to newly created backends (ITS#5572)
-	Fixed slapd #if/#elif issues in thread includes (ITS#5824)
-	Added slapd keyword add_content_acl for add checks (ITS#4556,ITS#5723)
-	Fixed slapd concurrent access to connections (ITS#5814)
-	Fixed slapd config backend olcLogFile support (ITS#5765)
-	Fixed slapd contextCSN pending list (ITS#5709)
-	Fixed slapd control criticality (ITS#5785)
-	Added slapd dn.this search limits (ITS#5734)
-	Fixed slapd error status on shutdown (ITS#5745)
-	Fixed slapd filter substring handling (ITS#5803)
-	Fixed slapd nameUIDPretty bitstring parsing (ITS#5750)
-	Fixed slapd null termination of password (ITS#5794)
-	Fixed slapd overlay/database open with real structure (ITS#5724)
-	Fixed slapd parsing of read entry control (ITS#5741)
-	Added slapd PMI schema (ITS#5695)
-	Added slapd private databases in global overlays (ITS#5735,ITS#5736)
-	Fixed slapd rdn generation when it isn't specified (ITS#5819)
-	Fixed slapd slapd.conf validation to LDIF (ITS#5755)
-	Fixed slapd startup scan for CSN (ITS#5640)
-	Fixed slapd statslog printing of released entry (ITS#5775)
-	Added slapd support for certificateListExactMatch (ITS#5700)
-	Fixed slapd syncrepl event loss (ITS#5710)
-	Fixed slapd syncrepl MOD of attrs with no EQ rule (ITS#5781)
-	Fixed slapd syncrepl rename handling (ITS#5809)
-	Fixed slapd syncrepl schema checking (ITS#5798)
-	Fixed slapd syncrepl filter leak (ITS#5826)
-	Fixed slapd undef promote (ITS#5783,ITS#5795)
-	Added slapd What failed? control (ITS#5784)
-	Fixed slapd-bdb/hdb invalid db crash (ITS#5698)
-	Added slapd-bdb/hdb dbpagesize keyword
-	Added slapd-bdb/hdb checksum keyword
-	Fixed slapd-bdb/hdb indexing of entryDN (ITS#5790)
-	Fixed slapd-bdb/hdb lookup of entryDN with equality (ITS#5791)
-	Fixed slapd-bdb/hdb uninitialized bli_flag
-	Fixed slapd-ldap snprintf buffer overflow test (ITS#4467)
-	Fixed slapd-ldap search stop on minor failure (ITS#5816)
-	Fixed slapd-ldif file rename on windows (ITS#5774)
-	Fixed slapd-null read controls support (ITS#5757)
-	Fixed slapd-sql value length with right index (ITS#5779)
-	Fixed slapo-chain/translucent back-config support (ITS#5736)
-	Fixed slapo-chain SEGV with search references (ITS#5742)
-	Fixed slapo-collect compile with C89 (ITS#5747)
-	Added slapo-constraint support for LDAP URI constraints (ITS#5704)
-	Added slapo-constraint support for constraining rename (ITS#5703)
-	Added slapo-constraint support for relax control (ITS#5705)
-	Added slapo-constraint "set" type (ITS#5702)
-	Fixed slapo-constraint filter parsing error (ITS#5751)
-	Added slapo-dynlist URI restriction ability (ITS#5761)
-	Fixed slapo-ppolicy unaligned BerElement (ITS#5770)
-	Fixed slapo-rwm objectClass preservation (ITS#5760)
-	Fixed slapo-rwm rewriting undefined filter (ITS#5731)
-	Fixed slapo-rwm rewritten DN-valued attrs (ITS#5772)
-	Fixed slapo-rwm reusing freed filter (ITS#5732)
-	Fixed slapo-rwm entry get (ITS#5773)
-	Fixed slapo-syncprov runqueue removal (ITS#5776)
-	Fixed slapo-syncprov unreplicatable ops (ITS#5709)
-	Fixed slapo-syncprov psearch leak (ITS#5827)
-	Added slapo-translucent try local bind when remote fails (ITS#5656)
-	Added slapo-translucent support for PasswordModify exop (ITS#5656)
-	Fixed tools simple bind without SASL (ITS#5753)
-	Fixed tools unaligned BerElement (ITS#5770)
-	Fixed contrib nssov crash on empty groups (ITS#5800)
-	Fixed contrib nssov crash with nssov-map (ITS#5801)
-	Fixed contrib nssov filter and search limits (ITS#5802)
-	Added contrib smbk5pwd honor principal expiration (ITS#5766)
-	Build Environment
-		Added ldapurl command
-		Added slapd GSSAPI refactoring (ITS#5369)
-		Added slapo-deref overlay (ITS#5768)
-	Documentation
-		admin24 added olcLimits to example (ITS#5746)
-		admin24 consolidated on whitespace (ITS#5759)
-		slapd.conf,config(5) subordinate/olcSubordinate keyword (ITS#5788)
-		slapd.conf(5) fixed disable keyword for limits (ITS#5821)
-		slapo-dds(5) manageDIT to relax (ITS#5780)
-		slapo-dds(5) rootdn requirement added (ITS#5811)
-		slapo-syncprov(5) sessionlog clarification (ITS#5806)
-
-OpenLDAP 2.4.12 Release (2008/10/12)
-	Fixed libldap ldap_utf8_strchar arguments (ITS#5720)
-	Fixed libldap TLS_CRLFILE (ITS#5677)
-	Fixed liblutil executables on Windows (ITS#5604)
-	Fixed liblutil microsecond overflows on Windows (ITS#5668)
-	Fixed librewrite memory handling (ITS#5691)
-	Fixed slapd aci performance (ITS#5636)
-	Fixed slapd aci's with sets (ITS#5627)
-	Fixed slapd attribute leak (ITS#5683)
-	Fixed slapd config backend with index greater than sibs (ITS#5684)
-	Fixed slapd custom attribute inheritance (ITS#5642)
-	Fixed slapd dynacl mask handling (ITS#5637)
-	Fixed slapd firstComponentMatch normalization (ITS#5634)
-	Added slapd caseIgnoreListMatch (ITS#5608)
-	Fixed slapd connection events enabled twice (ITS#5725)
-	Fixed slapd memory handling (ITS#5691)
-	Fixed slapd objectClass canonicalization (ITS#5681)
-	Fixed slapd objectClass termination (ITS#5682)
-	Fixed slapd overlay control registration (ITS#5649)
-	Fixed slapd runqueue checking (ITS#5726)
-	Fixed slapd spurious text output (ITS#5688)
-	Fixed slapd socket closing on Windows (ITS#5606)
-	Fixed slapd sortvals comparison (ITS#5578)
-	Added slapd substitute syntax support (ITS#5663)
-	Fixed slapd syncrepl contextCSN detection (ITS#5675)
-	Fixed slapd syncrepl error logging (ITS#5618)
-	Fixed slapd syncrepl runqueue interval (ITS#5719)
-	Fixed slapd-bdb entry return if attr not present (ITS#5650)
-	Fixed slapd-bdb olcDbMode syntax (ITS#5713)
-	Fixed slapd-bdb/hdb release search entries earlier (ITS#5728,ITS#5730)
-	Fixed slapd-bdb/hdb subtree search with empty suffix (ITS#5729)
-	Fixed slapd-dnssrv memory handling (ITS#5691)
-	Fixed slapd-ldap,slapd-meta invalid filter behavior (ITS#5614)
-	Fixed slapd-meta memory handling (ITS#5691)
-	Fixed slapd-meta objectClass filtering (ITS#5647)
-	Fixed slapd-meta quarantine behavior (ITS#5592)
-	Added slapd-ndb experimental backend
-	Fixed slapd-relay initialization (ITS#5643)
-	Fixed slapd-sql freeing of connection (ITS#5607)
-	Fixed slapd-sql fault on NULL fields (ITS#5653)
-	Fixed slapo-accesslog entryCSN generation on purge (ITS#5694)
-	Fixed slapo-constraint string termination (ITS#5609)
-	Fixed slapo-dynlist expansion with mapped attributes (ITS#5717)
-	Fixed slapo-memberof internal operations DN (ITS#5622)
-	Fixed slapo-pcache attrset crash (ITS#5665)
-	Fixed slapo-pcache caching with invalid schema (ITS#5680)
-	Fixed slapo-ppolicy control return on password modify exop (ITS#5711)
-	Fixed slapo-rwm callback cleanup (ITS#5601,ITS#5687)
-	Fixed slapo-rwm attr mapping and merging (ITS#5624)
-	Fixed slapo-rwm objectClass filtering (ITS#5647)
-	Fixed slapo-translucent back-config support (ITS#5689)
-	Fixed slapo-translucent filter usage on merged entries (ITS#5679)
-	Fixed slapo-unique filter validation (ITS#5581)
-	Fixed slapo-unique suffix testing (ITS#5641)
-	Build Environment
-		Fixed ODBC library detection (ITS#5602)
-		Removed pre-BerkeleyDB 4.4 support
-		Added BerkeleyDB 4.7 support (ITS#5523)
-		Included patch for BerkeleyDB 4.7.25 (build/db.4.7.25.patch)
-		Added slapo-collect overlay with enhancements(ITS#5659)
-	Documentation
-		Added slapd-ldap(5), slapd-meta(5) noundeffilter (ITS#5614)
-		Fixed slapd-ldap(5), slapd-meta(5), slapo-pcache(5) schema requirements (ITS#5680)
-		Added slapo-collect(5) man page (ITS#5706)
-		Added slapo-pcache(5) proxycheckcacheability option (ITS#5680)
-		Added slapo-retcode(5) retcode.conf location (ITS#5633)
-		admin24 dontusecopy control update (ITS#5718)
-		admin24 guide updates (ITS#5616)
-		admin24 octetString fix (ITS#5670)
-
-OpenLDAP 2.4.11 Release (2008/07/16)
-	Fixed liblber ber_get_next length decoding (ITS#5580)
-	Added libldap assertion control (ITS#5560)
-	Fixed libldap GnuTLS CRL result handling (ITS#5577)
-	Fixed libldap GnuTLS SSF computation (ITS#5585)
-	Fixed liblutil missing return code (ITS#5615)
-	Fixed slapd cert serial number parsing (ITS#5588)
-	Fixed slapd check for structural_class failures (ITS#5540)
-	Fixed slapd config backend renumbering (ITS#5571)
-	Fixed slapd configContext OID (ITS#5383)
-	Fixed slapd crash with no listeners (ITS#5563)
-	Fixed slapd equality rules for olcRootDN/olcSchemaDN (ITS#5540)
-	Fixed slapd sets memory leak (ITS#5557)
-	Fixed slapd sortvals binary search (ITS#5578)
-	Fixed slapd syncrepl updates with multiple providers (ITS#5597)
-	Fixed slapd syncrepl superior objectClass delete/add (ITS#5600)
-	Fixed slapd syncrepl/slapo-syncprov contextCSN updates as internal ops (ITS#5596)
-	Added slapd-ldap/slapd-meta option to filter out search references (ITS#5593)
-	Fixed slapd-meta link to slapd-ldap (ITS#5355)
-	Fixed slapd-sock, back-shell buffer count (ITS#5558)
-	Fixed slapo-dynlist dg attrs lookup (ITS#5583)
-	Fixed slapo-dynlist entry release (ITS#5135)
-	Fixed slapo-memberof replace handling (ITS#5584)
-	Added slapo-nssov contrib module
-	Fixed slapo-pcache handling of negative search caches (ITS#5546)
-	Fixed slapo-ppolicy DNs with whitespaces (ITS#5552)
-	Fixed slapo-ppolicy modify with internal ops (ITS#5569)
-	Fixed slapo-syncprov ACL evaluation (ITS#5548)
-	Fixed slapo-syncprov crash with delcsn (ITS#5589)
-	Fixed slapo-syncprov full reload (ITS#5564)
-	Fixed slapo-syncprov missing olcSpReloadHint attr(ITS#5591)
-	Fixed slapo-unique filter normalization (ITS#5581)
-	Fixed contrib smbk5pwd terminator (ITS#5575)
-	Build Environment
-		Fixed test048 to skip if threads is not available (ITS#5529)
-	Documentation
-		Added slapo-pcache(5) sizelimit caching (ITS#5559)
-		Added slapd-access(5) add and delete privs (ITS#5566)
-		admin24 GnuTLS documentation (ITS#5554)
-
-OpenLDAP 2.4.10 Release (2008/06/08)
-	Fixed libldap file descriptor leak with SELinux (ITS#5507)
-	Fixed libldap ld_defconn cleanup if it was freed (ITS#5518, ITS#5525)
-	Fixed libldap msgid handling (ITS#5318)
-	Fixed libldap t61 infinite loop (ITS#5542)
-	Fixed libldap_r missing stubs (ITS#5519)
-	Fixed slapd initialization of sr_msgid, rs->sr_tag (ITS#5461)
-	Fixed slapd missing termination of integerFilter keys (ITS#5503)
-	Fixed slapd multiple attrs in URI (ITS#5516)
-	Fixed slapd sasl_ssf retrieval (ITS#5403)
-	Fixed slapd socket assert (ITS#5489)
-	Fixed slapd syncrepl cookie (ITS#5536)
-	Fixed slapd-bdb/hdb MAXPATHLEN (ITS#5531)
-	Fixed slapd-bdb indexing in single ADD/MOD (ITS#5521)
-	Fixed slapd-ldap entry_get() op-dependent behavior (ITS#5513)
-	Fixed slapd-meta quarantine crasher (ITS#5522)
-	Fixed slapo-refint to allow setting modifiers name (ITS#5505)
-	Fixed slapo-syncprov contextCSN passing on syncprov consumers (ITS#5488)
-	Fixed slapo-syncprov csn update with delta-syncrepl (ITS#5493)
-	Fixed slapo-syncprov op2.o_extra reset (ITS#5501, #5506)
-	Fixed slapo-syncprov searching wrong backend (ITS#5487)
-	Fixed slapo-syncprov sending ops without queued CSNs (ITS#5465)
-	Fixed slapo-syncprov max csn search on startup (ITS#5537)
-	Fixed slapo-unique config structs (ITS#5526)
-	Fixed slapo-unique filter terminator (ITS#5511)
-	Documentation
-		Add search privileges documentation (ITS#5512)
-		admin24 security document updates (ITS#5524)
-
-OpenLDAP 2.4.9 Release (2008/05/07)
-	Fixed libldap to use unsigned port (ITS#5436)
-	Fixed libldap error message for missing close paren (ITS#5458)
-	Fixed libldap_r tpool pause checks (ITS#5364, #5407)
-	Fixed slapcat error checking (ITS#5387)
-	Fixed slapd abstract objectClass inheritance check (ITS#5474)
-	Fixed slapd add operations requiring naming attrs (ITS#5412)
-	Fixed slapd connection handling (ITS#5469)
-	Fixed slapd delta-syncrepl resync (ITS#5378)
-	Fixed slapd frontendDB backend selection (ITS#5419)
-	Fixed slapd pagedresults stale state (ITS#5409)
-	Fixed slapd pointer dereference (ITS#5388)
-	Fixed slapd null argument dereference (ITS#5435)
-	Fixed slapd REP_ENTRY flags (ITS#5340)
-	Fixed slapd sets attribute description parsing (ITS#5402)
-	Fixed slapd syncrepl hang on back-config (ITS#5407)
-	Fixed slapd syncrepl compare_csns crash (ITS#5413)
-	Fixed slapd syncrepl contextCSN update clash (ITS#5426)
-	Fixed slapd syncrepl/glue failure (ITS#5430)
-	Fixed slapd syncrepl crash on empty CSN (ITS#5432)
-	Fixed slapd syncrepl refreshAndPersist (ITS#5454)
-	Fixed slapd syncrepl modrdn processing (ITS#5397)
-	Fixed slapd syncrepl MPR partial refresh (ITS#5470)
-	Fixed slapd value list termination (ITS#5450)
-	Fixed slapd/slapo-accesslog rq mutex usage (ITS#5442)
-	Fixed slapd-bdb ID_NOCACHE handling (ITS#5439)
-	Fixed slapd-bdb entryinfo state if db_lock fails (ITS#5455)
-	Fixed slapd-bdb referral rewrite (ITS#5339)
-	Fixed slapd-config overlay stacking (ITS#5346)
-	Fixed slapd-config attribute publishing (ITS#5383)
-	Fixed slapd-ldap connection handler (ITS#5404)
-	Fixed slapd-ldif file name handling & multi-suffix/dir catch (ITS#5408)
-	Fixed slapd-meta connections on error (ITS#5440)
-	Fixed slapd-meta crash on search (ITS#5481)
-	Fixed slapo-accesslog null callback stack crash (ITS#5490)
-	Fixed slapo-auditlog unnecessary syscall (ITS#5441)
-	Added slapo-dynlist mapping to dynamic attrs generation (ITS#5466)
-	Fixed slapo-refint dnSubtreeMatch (ITS#5427)
-	Fixed slapo-refint global referential integrity (ITS#5428)
-	Fixed slapo-syncprov psearch on closed connection (ITS#5401)
-	Fixed slapo-syncprov psearch task delay (ITS#5405)
-	Fixed slapo-syncprov psearch filter identity (ITS#5418, #5486)
-	Fixed slapo-syncprov/glue contextCSN update (ITS#5433)
-	Fixed slapo-syncprov/glue search ops (ITS#5434)
-	Fixed slapo-syncprov null cookie (ITS#5437,#5444)
-	Fixed slapo-syncprov double-free (ITS#5445)
-	Fixed slapo-syncprov free syncop correctly (ITS#5484)
-	Fixed slapo-syncprov glue deadlock (ITS#5451)
-	Build Environment
-		Fixed leave function naming for OSF1 (ITS#5411)
-	Documentation
-		Fixed slapd.access(5) authz-regexp documented behavior (ITS#5400)
-		Fixed slapd.meta(5) idassert-* documentation (ITS#5406)
-		admin24 delta-syncrepl documentation (ITS#5476)
-		admin24 set documentation (ITS#5278,ITS#5279,ITS#5281)
-		admin24 slapo-ppolicy documentation (ITS#5479)
-		admin24 syncrepl directives update (ITS#5425)
-
-OpenLDAP 2.4.8 Release (2008/02/19)
-	Fixed ldapmodify verbose logging (ITS#5247)
-	Fixed ldapdelete with sizelimit (ITS#5294)
-	Fixed ldapdelete with subentries control (ITS#5293)
-	Fixed ldapsearch exit code init (ITS#5317)
-	Fixed libldap extended decoding (ITS#5304)
-	Fixed libldap filter abort (ITS#5300)
-	Fixed libldap ldap_parse_sasl_bind_result (ITS#5263)
-	Fixed libldap result codes for open (ITS#5338)
-	Fixed libldap search timeout crash (ITS#5291)
-	Fixed libldap paged results crash (ITS#5315)
-	Fixed libldap cipher suite with GnuTLS (ITS#5341)
-	Fixed slapd support for 2.1 CSN (ITS#5348)
-	Fixed slapd include handling (ITS#5276)
-	Fixed slapd modrdn check for valid new DN (ITS#5344)
-	Fixed slapd multi-step SASL binds (ITS#5298)
-	Fixed slapd non-atomic signal variables (ITS#5248)
-	Fixed slapd overlay ordering when moving to slapd.d (ITS#5284)
-	Fixed slapd NULL printf (ITS#5264)	
-	Fixed slapd NULL set values (ITS#5286)
-	Fixed slapd SEGV with SASL/OTP (ITS#5259)
-	Fixed slapd timestamp race condition (ITS#5370)
-	Fixed slapd cn=config crash on delete (ITS#5343)
-	Fixed slapd cn=config global acls (ITS#5352)
-	Fixed slapd truncated cookie (ITS#5362)
-	Fixed slapd sasl with CLEARTEXT (ITS#5368)
-	Fixed slapd str2entry with no attrs (ITS#5308)
-	Fixed slapd TLSVerifyClient default (ITS#5360)
-	Fixed slapd HAVE_TLS dependency (ITS#5379)
-	Fixed slapd delta-syncrepl refresh mode (ITS#5376)
-	Fixed slapd ACL sets URI attrs (ITS#5384)
-	Fixed slapd invalid entryUUID filter (ITS#5386)
-	Fixed slapd-bdb idlcache on adds (ITS#5086)
-	Fixed slapd-bdb crash with modrdn (ITS#5358)
-	Fixed slapd-bdb SEGV with bdb4.6 (ITS#5322)
-	Fixed slapd-bdb modrdn to same dn (ITS#5319)
-	Fixed slapd-bdb MPR (ITS#5332)
-	Added slapd-bdb/slapd-hdb DB encryption (ITS#5359)
-	Fixed slapd-ldif delete (ITS#5265)
-	Fixed slapd-meta link to slapd-ldap (ITS#5355)
-	Fixed slapd-meta setting of sm_nvalues (ITS#5375)
-	Fixed slapd-monitor crash (ITS#5311)
-	Fixed slapd-relay compare (ITS#4937)
-	Added slapd-sock (ITS#4094)
-	Fixed slapo-accesslog cleanup on successful response (ITS#5374)
-	Added slapo-autogroup contrib module (ITS#5145)
-	Added slapo-constraint cross-attribute constraints (ITS#4987)
-	Fixed slapo-memberof objectClass inheritance (ITS#5299)
-	Added slapo-memberof global overlay support (ITS#5301)
-	Fixed slapo-memberof leak (ITS#5302)
-	Fixed slapo-ppolicy only password check with policy (ITS#5285)
-	Fixed slapo-ppolicy del/replace password without new one (ITS#5373)
-	Fixed slapo-syncprov hang on checkpoint (ITS#5261)
-	Added slapo-translucent local searching (ITS#5283)
-	Removed lint
-	Build Environment
-		Fixed libldap_r threaded library linking (ITS#4982)
-		Fixed libldap use of %n (ITS#5324)
-		Fixed test047 to skip if rwm is not available (ITS#5292)
-	Documentation
-		DB_CONFIG.example URL wrong in comments (ITS#5288)
-		Add cn=config example for auditlog (ITS#5245)
-		ldapmodify(1) clarification for RFC2849 (ITS#5312)
-
-OpenLDAP 2.4.7 Release (2007/12/14)
-	Added slapd ordered indexing of integer attributes (ITS#5239)
-	Fixed slapd paged results control handling (ITS#5191)
-	Fixed slapd sasl-host parsing (ITS#5209)
-	Fixed slapd filter normalization (ITS#5212)
-	Fixed slapd multiple suffix checking (ITS#5186)
-	Fixed slapd paged results handling when using rootdn (ITS#5230)
-	Fixed slapd syncrepl presentlist handling (ITS#5231)
-	Fixed slapd core schema 'c' definition for RFC4519 (ITS#5236)
-	Fixed slapd 3-way multi-provider replication (ITS#5238)
-	Fixed slapd hash collisions in index slots (ITS#5183)
-	Fixed slapd replication of dSAOperation attributes (ITS#5268)
-	Fixed slapadd contextCSN updating (ITS#5225)
-	Fixed slapd-bdb/hdb to report and fail on internal errors (ITS#5232)
-	Fixed slapd-bdb/hdb dn2entry lock bug (ITS#5257)
-	Fixed slapd-bdb/hdb dn2id lock bug (ITS#5262)
-	Fixed slapd-hdb caching on rename ops (ITS#5221)
-	Fixed slapo-accesslog abandoned op cleanup (ITS#5161)
-	Fixed slapo-dds deleting from nonexistent db (ITS#5267)
-	Fixed slapo-memberOf deleted values saving (ITS#5258)
-	Fixed slapo-pcache op->o_abandon handling (ITS#5187)
-	Fixed slapo-ppolicy single password check on modify (ITS#5146)
-	Fixed slapo-ppolicy internal search (ITS#5235)
-	Fixed slapo-syncprov refresh and persist cookie sending (ITS#5210)
-	Fixed slapo-syncprov ignore invalid cookies (ITS#5211)
-	Fixed slapo-translucent interaction with slapo-rwm (ITS#4889)
-	Updated contrib addpartial module (ITS#3593)
-	Build Environment
-		Fixed liblber socket library linking (ITS#5224)
-		Fixed Windows slapd.def rules (ITS#5215)
-	Documentation
-		Fixed grammar errors (ITS#5223)
-		Refint overlay doc contribution (ITS#5217)
-		Dynamic Lists doc contribution to the admin guide (ITS#5216)
-		Fixed ldappasswd(1) and ldapmodify(1) typos (ITS#5269)
-		Fixed domain factor typos (ITS#5237)
-		Fixed slapd.conf(5) maxderefdepth default value typo (ITS#5200)
-		Clarified slapd.conf(5) limits issues in syncrepl (ITS#5243)
-		Fixed slapd-config(5) maxderefdepth default value typo (ITS#5200)
-		Patches for minor typos in man pages (ITS#5228)
-		admin24/replication.sdf spelling (ITS#5270)
-
-
-OpenLDAP 2.4.6 Release (2007/10/31)
+OpenLDAP 2.5 Change Log
+
+OpenLDAP 2.5.5 Release (2021/06/03)
+	Added libldap LDAP_OPT_TCP_USER_TIMEOUT support (ITS#9502)
+	Added lloadd tcp-user-timeout support (ITS#9502)
+	Added slapd-asyncmeta tcp-user-timeout support (ITS#9502)
+	Added slapd-ldap tcp-user-timeout support (ITS#9502)
+	Added slapd-meta tcp-user-timeout support (ITS#9502)
+	Fixed incorrect control OIDs for AuthZ Identity (ITS#9542)
+	Fixed libldap typo in util-int.c (ITS#9541)
+	Fixed libldap double free of LDAP_OPT_DEFBASE (ITS#9530)
+	Fixed libldap better TLS1.3 cipher suite handling (ITS#9521, ITS#9546)
+	Fixed lloadd multiple issues (ITS#8747)
+	Fixed slapd slap_op_time to avoid duplicates across restarts (ITS#9537)
+	Fixed slapd typo in daemon.c (ITS#9541)
+	Fixed slapd slapi compilation (ITS#9544)
+	Fixed slapd to handle empty DN in extended filters (ITS#9551)
+	Fixed slapd syncrepl searches with empty base (ITS#6467)
+	Fixed slapd syncrepl refresh on startup (ITS#9324, ITS#9534)
+	Fixed slapd abort due to typo (ITS#9561)
+	Fixed slapd-asyncmeta quarantine handling (ITS#8721)
+	Fixed slapd-asyncmeta to have a default operations timeout (ITS#9555)
+	Fixed slapd-ldap quarantine handling (ITS#8721)
+	Fixed slapd-mdb deletion of context entry (ITS#9531)
+	Fixed slapd-mdb off-by-one affecting search scope (ITS#9557)
+	Fixed slapd-meta quarantine handling (ITS#8721)
+	Fixed slapo-accesslog to record reqNewDN for modRDN ops (ITS#9552)
+	Fixed slapo-pcache locking during expiration (ITS#9529)
+	Fixed slappw-argon2 module installation (ITS#9548)
+	Contrib
+		Update ldapc++/ldaptcl to use configure.ac (ITS#9554)
+	Documentation
+		ldap_first_attribute(3) - Document ldap_get_attribute_ber (ITS#8820)
+        ldap_modify(3) - Delete non-existent mod_next parameter (ITS#9559)
+
+OpenLDAP 2.5.4 Release (2021/04/29)
 	Initial release for "general use".
diff --git a/COPYRIGHT b/COPYRIGHT
index 2ef72fb..7ab27e0 100644
--- a/COPYRIGHT
+++ b/COPYRIGHT
@@ -25,7 +25,7 @@ Additional information about OpenLDAP can be obtained at
 
 ---
 
-Portions Copyright 1998-2012 Kurt D. Zeilenga.
+Portions Copyright 1998-2013 Kurt D. Zeilenga.
 Portions Copyright 1998-2006 Net Boolean Incorporated.
 Portions Copyright 2001-2006 IBM Corporation.
 All rights reserved.
diff --git a/INSTALL b/INSTALL
index bd672e7..9515ed2 100644
--- a/INSTALL
+++ b/INSTALL
@@ -9,12 +9,6 @@ and instructions can be found in The OpenLDAP Administrator's Guide
 It is recommended that you read, or at least skim through, ALL of the
 instructions in this file before attempting to build the software.
 
-It is also recommended you review the Frequently Asked Questions
-(http://www.openldap.org/faq/) pages, in particular the Installation
-section (http://www.openldap.org/faq/index.cgi?file=8) and Platform
-Hints (http://www.openldap.org/faq/index.cgi?file=9) should be
-examined.
-
 Making and Installing the OpenLDAP Distribution
 -----------------------------------------------
 
@@ -55,8 +49,7 @@ Making and Installing the OpenLDAP Distribution
      was trying to do and exactly what failed.  You may need to
      specify additional options and/or variables besides those listed
      above to obtain desired results, depending on your operating
-     system. The Platform Hints section of the FAQ provides help for
-     operating system related problems.
+     system.
 
 4.   Build dependencies:
 
@@ -67,21 +60,18 @@ Making and Installing the OpenLDAP Distribution
         % make
 
      If all goes well, the system will build as configured.  If not,
-     return to step 3 after reviewing the configuration settings.  You
-     may want to consult the Platform Hints subsection of the FAQ if
-     you have not done so already.
+     return to step 3 after reviewing the configuration settings.
 
 6.   Test the standalone system:
 
-     This step requires the standalone LDAP server, slapd(8), with HDB
-     and/or BDB support.
+     This step requires the standalone LDAP server, slapd(8), with MDB
+     support.
 
         % make test
 
      If all goes well, the system has been built as configured.  If
      not, return to step 2 after reviewing your configuration
-     settings.  You may want to consult the Installation section of
-     the FAQ if you have not done so already.
+     settings.
 
 7.   Install the software.  You may need to become the super-user
      (e.g. root) to do this (depending on where you are installing
@@ -99,12 +89,10 @@ configuration directory (normally /usr/local/etc/openldap).
 
         ldap.conf               client defaults
         slapd.conf              Standalone LDAP daemon
+        lload.conf              LDAP Load Balancer daemon
         schema/*.schema         Schema Definitions
 
 ---
-$OpenLDAP: pkg/openldap-guide/release/install.sdf,v 1.16 2002/02/18
-17:09:26 kurt Exp $
-
 This work is part of OpenLDAP Software <http://www.openldap.org/>.
 
 Copyright 1998-2021 The OpenLDAP Foundation.
diff --git a/Makefile.in b/Makefile.in
index 2a5e6c2..4d3ea27 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -35,4 +35,4 @@ distclean: veryclean FORCE
 
 check: test
 test: FORCE
-	cd tests; $(MAKE) test
+	cd tests && $(MAKE) test
diff --git a/README b/README
index 8934a8b..43e04e6 100644
--- a/README
+++ b/README
@@ -1,10 +1,10 @@
-OpenLDAP 2.4 README
+OpenLDAP 2.5 README
     For a description of what this distribution contains, see the
     ANNOUNCEMENT file in this directory.  For a description of
     changes from previous releases, see the CHANGES file in this
     directory.
 
-    This is 2.4 release, it includes significant changes from prior
+    This is 2.5 release, it includes significant changes from prior
     releases.
 
 REQUIRED SOFTWARE
@@ -14,14 +14,18 @@ REQUIRED SOFTWARE
 
     Base system (libraries and tools):
         Standard C compiler (required)
-        Cyrus SASL 2.1.21+ (recommended)
-        OpenSSL 0.9.7+ (recommended)
+        Cyrus SASL 2.1.27+ (recommended)
+        OpenSSL 1.1.1+ (recommended)
+        libevent 2.1.8+ (recommended)
+        libargon2 or libsodium (recommended)
         Reentrant POSIX REGEX software (required)
 
     SLAPD:
-        BDB and HDB backends require Oracle Berkeley DB 4.4 - 4.8,
-	or 5.0 - 5.1.  It is highly recommended to apply the
-        patches from Oracle for a given release.
+        The ARGON2 password hashing module requires either libargon2
+        or libsodium
+    LLOADD:
+        The LLOADD daemon or integrated slapd module requires
+        libevent 2.1.8 or later.
 
     CLIENTS/CONTRIB ware:
         Depends on package.  See per package README.
@@ -74,7 +78,6 @@ CONTRIBUTING
     <http://www.openldap.org/its/> to be considered.
 
 ---
-$OpenLDAP$
 
 This work is part of OpenLDAP Software <http://www.openldap.org/>.
 
diff --git a/aclocal.m4 b/aclocal.m4
index d5ecbec..daf32af 100644
--- a/aclocal.m4
+++ b/aclocal.m4
@@ -1,7 +1,7 @@
-# generated automatically by aclocal 1.9.6 -*- Autoconf -*-
+# generated automatically by aclocal 1.16.1 -*- Autoconf -*-
+
+# Copyright (C) 1996-2018 Free Software Foundation, Inc.
 
-# Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004,
-# 2005  Free Software Foundation, Inc.
 # This file is free software; the Free Software Foundation
 # gives unlimited permission to copy and/or distribute it,
 # with or without modifications, as long as this notice is preserved.
@@ -11,7004 +11,286 @@
 # even the implied warranty of MERCHANTABILITY or FITNESS FOR A
 # PARTICULAR PURPOSE.
 
-# Copyright (C) 2002, 2003, 2005  Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_AUTOMAKE_VERSION(VERSION)
-# ----------------------------
-# Automake X.Y traces this macro to ensure aclocal.m4 has been
-# generated from the m4 files accompanying Automake X.Y.
-AC_DEFUN([AM_AUTOMAKE_VERSION], [am__api_version="1.9"])
-
-# AM_SET_CURRENT_AUTOMAKE_VERSION
-# -------------------------------
-# Call AM_AUTOMAKE_VERSION so it can be traced.
-# This function is AC_REQUIREd by AC_INIT_AUTOMAKE.
-AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION],
-	 [AM_AUTOMAKE_VERSION([1.9.6])])
-
-# AM_AUX_DIR_EXPAND                                         -*- Autoconf -*-
-
-# Copyright (C) 2001, 2003, 2005  Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# For projects using AC_CONFIG_AUX_DIR([foo]), Autoconf sets
-# $ac_aux_dir to `$srcdir/foo'.  In other projects, it is set to
-# `$srcdir', `$srcdir/..', or `$srcdir/../..'.
-#
-# Of course, Automake must honor this variable whenever it calls a
-# tool from the auxiliary directory.  The problem is that $srcdir (and
-# therefore $ac_aux_dir as well) can be either absolute or relative,
-# depending on how configure is run.  This is pretty annoying, since
-# it makes $ac_aux_dir quite unusable in subdirectories: in the top
-# source directory, any form will work fine, but in subdirectories a
-# relative path needs to be adjusted first.
-#
-# $ac_aux_dir/missing
-#    fails when called from a subdirectory if $ac_aux_dir is relative
-# $top_srcdir/$ac_aux_dir/missing
-#    fails if $ac_aux_dir is absolute,
-#    fails when called from a subdirectory in a VPATH build with
-#          a relative $ac_aux_dir
-#
-# The reason of the latter failure is that $top_srcdir and $ac_aux_dir
-# are both prefixed by $srcdir.  In an in-source build this is usually
-# harmless because $srcdir is `.', but things will broke when you
-# start a VPATH build or use an absolute $srcdir.
-#
-# So we could use something similar to $top_srcdir/$ac_aux_dir/missing,
-# iff we strip the leading $srcdir from $ac_aux_dir.  That would be:
-#   am_aux_dir='\$(top_srcdir)/'`expr "$ac_aux_dir" : "$srcdir//*\(.*\)"`
-# and then we would define $MISSING as
-#   MISSING="\${SHELL} $am_aux_dir/missing"
-# This will work as long as MISSING is not called from configure, because
-# unfortunately $(top_srcdir) has no meaning in configure.
-# However there are other variables, like CC, which are often used in
-# configure, and could therefore not use this "fixed" $ac_aux_dir.
-#
-# Another solution, used here, is to always expand $ac_aux_dir to an
-# absolute PATH.  The drawback is that using absolute paths prevent a
-# configured tree to be moved without reconfiguration.
-
-AC_DEFUN([AM_AUX_DIR_EXPAND],
-[dnl Rely on autoconf to set up CDPATH properly.
-AC_PREREQ([2.50])dnl
-# expand $ac_aux_dir to an absolute path
-am_aux_dir=`cd $ac_aux_dir && pwd`
-])
-
-# AM_CONDITIONAL                                            -*- Autoconf -*-
-
-# Copyright (C) 1997, 2000, 2001, 2003, 2004, 2005
-# Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# serial 7
-
-# AM_CONDITIONAL(NAME, SHELL-CONDITION)
-# -------------------------------------
-# Define a conditional.
-AC_DEFUN([AM_CONDITIONAL],
-[AC_PREREQ(2.52)dnl
- ifelse([$1], [TRUE],  [AC_FATAL([$0: invalid condition: $1])],
-	[$1], [FALSE], [AC_FATAL([$0: invalid condition: $1])])dnl
-AC_SUBST([$1_TRUE])
-AC_SUBST([$1_FALSE])
-if $2; then
-  $1_TRUE=
-  $1_FALSE='#'
-else
-  $1_TRUE='#'
-  $1_FALSE=
-fi
-AC_CONFIG_COMMANDS_PRE(
-[if test -z "${$1_TRUE}" && test -z "${$1_FALSE}"; then
-  AC_MSG_ERROR([[conditional "$1" was never defined.
-Usually this means the macro was only invoked conditionally.]])
-fi])])
-
-
-# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005
-# Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# serial 8
-
-# There are a few dirty hacks below to avoid letting `AC_PROG_CC' be
-# written in clear, in which case automake, when reading aclocal.m4,
-# will think it sees a *use*, and therefore will trigger all it's
-# C support machinery.  Also note that it means that autoscan, seeing
-# CC etc. in the Makefile, will ask for an AC_PROG_CC use...
-
-
-# _AM_DEPENDENCIES(NAME)
-# ----------------------
-# See how the compiler implements dependency checking.
-# NAME is "CC", "CXX", "GCJ", or "OBJC".
-# We try a few techniques and use that to set a single cache variable.
-#
-# We don't AC_REQUIRE the corresponding AC_PROG_CC since the latter was
-# modified to invoke _AM_DEPENDENCIES(CC); we would have a circular
-# dependency, and given that the user is not expected to run this macro,
-# just rely on AC_PROG_CC.
-AC_DEFUN([_AM_DEPENDENCIES],
-[AC_REQUIRE([AM_SET_DEPDIR])dnl
-AC_REQUIRE([AM_OUTPUT_DEPENDENCY_COMMANDS])dnl
-AC_REQUIRE([AM_MAKE_INCLUDE])dnl
-AC_REQUIRE([AM_DEP_TRACK])dnl
-
-ifelse([$1], CC,   [depcc="$CC"   am_compiler_list=],
-       [$1], CXX,  [depcc="$CXX"  am_compiler_list=],
-       [$1], OBJC, [depcc="$OBJC" am_compiler_list='gcc3 gcc'],
-       [$1], GCJ,  [depcc="$GCJ"  am_compiler_list='gcc3 gcc'],
-                   [depcc="$$1"   am_compiler_list=])
-
-AC_CACHE_CHECK([dependency style of $depcc],
-               [am_cv_$1_dependencies_compiler_type],
-[if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named `D' -- because `-MD' means `put the output
-  # in D'.
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_$1_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp`
-  fi
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using `: > sub/conftst$i.h' creates only sub/conftst1.h with
-      # Solaris 8's {/usr,}/bin/sh.
-      touch sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    case $depmode in
-    nosideeffect)
-      # after this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    none) break ;;
-    esac
-    # We check with `-c' and `-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle `-M -o', and we need to detect this.
-    if depmode=$depmode \
-       source=sub/conftest.c object=sub/conftest.${OBJEXT-o} \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c -o sub/conftest.${OBJEXT-o} sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftest.${OBJEXT-o} sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thusly:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_$1_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_$1_dependencies_compiler_type=none
-fi
-])
-AC_SUBST([$1DEPMODE], [depmode=$am_cv_$1_dependencies_compiler_type])
-AM_CONDITIONAL([am__fastdep$1], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_$1_dependencies_compiler_type" = gcc3])
-])
-
-
-# AM_SET_DEPDIR
-# -------------
-# Choose a directory name for dependency files.
-# This macro is AC_REQUIREd in _AM_DEPENDENCIES
-AC_DEFUN([AM_SET_DEPDIR],
-[AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])dnl
-])
-
-
-# AM_DEP_TRACK
-# ------------
-AC_DEFUN([AM_DEP_TRACK],
-[AC_ARG_ENABLE(dependency-tracking,
-[  --disable-dependency-tracking  speeds up one-time build
-  --enable-dependency-tracking   do not reject slow dependency extractors])
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-fi
-AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-AC_SUBST([AMDEPBACKSLASH])
-])
-
-# Generate code to set up dependency tracking.              -*- Autoconf -*-
-
-# Copyright (C) 1999, 2000, 2001, 2002, 2003, 2004, 2005
-# Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-#serial 3
-
-# _AM_OUTPUT_DEPENDENCY_COMMANDS
-# ------------------------------
-AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS],
-[for mf in $CONFIG_FILES; do
-  # Strip MF so we end up with the name of the file.
-  mf=`echo "$mf" | sed -e 's/:.*$//'`
-  # Check whether this is an Automake generated Makefile or not.
-  # We used to match only the files named `Makefile.in', but
-  # some people rename them; so instead we look at the file content.
-  # Grep'ing the first line is not enough: some people post-process
-  # each Makefile.in and add a new line on top of each file to say so.
-  # So let's grep whole file.
-  if grep '^#.*generated by automake' $mf > /dev/null 2>&1; then
-    dirpart=`AS_DIRNAME("$mf")`
-  else
-    continue
-  fi
-  # Extract the definition of DEPDIR, am__include, and am__quote
-  # from the Makefile without running `make'.
-  DEPDIR=`sed -n 's/^DEPDIR = //p' < "$mf"`
-  test -z "$DEPDIR" && continue
-  am__include=`sed -n 's/^am__include = //p' < "$mf"`
-  test -z "am__include" && continue
-  am__quote=`sed -n 's/^am__quote = //p' < "$mf"`
-  # When using ansi2knr, U may be empty or an underscore; expand it
-  U=`sed -n 's/^U = //p' < "$mf"`
-  # Find all dependency output files, they are included files with
-  # $(DEPDIR) in their names.  We invoke sed twice because it is the
-  # simplest approach to changing $(DEPDIR) to its actual value in the
-  # expansion.
-  for file in `sed -n "
-    s/^$am__include $am__quote\(.*(DEPDIR).*\)$am__quote"'$/\1/p' <"$mf" | \
-       sed -e 's/\$(DEPDIR)/'"$DEPDIR"'/g' -e 's/\$U/'"$U"'/g'`; do
-    # Make sure the directory exists.
-    test -f "$dirpart/$file" && continue
-    fdir=`AS_DIRNAME(["$file"])`
-    AS_MKDIR_P([$dirpart/$fdir])
-    # echo "creating $dirpart/$file"
-    echo '# dummy' > "$dirpart/$file"
-  done
-done
-])# _AM_OUTPUT_DEPENDENCY_COMMANDS
-
-
-# AM_OUTPUT_DEPENDENCY_COMMANDS
-# -----------------------------
-# This macro should only be invoked once -- use via AC_REQUIRE.
-#
-# This code is only required when automatic dependency tracking
-# is enabled.  FIXME.  This creates each `.P' file that we will
-# need in order to bootstrap the dependency handling code.
-AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS],
-[AC_CONFIG_COMMANDS([depfiles],
-     [test x"$AMDEP_TRUE" != x"" || _AM_OUTPUT_DEPENDENCY_COMMANDS],
-     [AMDEP_TRUE="$AMDEP_TRUE" ac_aux_dir="$ac_aux_dir"])
-])
-
-# Do all the work for Automake.                             -*- Autoconf -*-
-
-# Copyright (C) 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005
-# Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# serial 12
-
-# This macro actually does too much.  Some checks are only needed if
-# your package does certain things.  But this isn't really a big deal.
-
-# AM_INIT_AUTOMAKE(PACKAGE, VERSION, [NO-DEFINE])
-# AM_INIT_AUTOMAKE([OPTIONS])
-# -----------------------------------------------
-# The call with PACKAGE and VERSION arguments is the old style
-# call (pre autoconf-2.50), which is being phased out.  PACKAGE
-# and VERSION should now be passed to AC_INIT and removed from
-# the call to AM_INIT_AUTOMAKE.
-# We support both call styles for the transition.  After
-# the next Automake release, Autoconf can make the AC_INIT
-# arguments mandatory, and then we can depend on a new Autoconf
-# release and drop the old call support.
-AC_DEFUN([AM_INIT_AUTOMAKE],
-[AC_PREREQ([2.58])dnl
-dnl Autoconf wants to disallow AM_ names.  We explicitly allow
-dnl the ones we care about.
-m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl
-AC_REQUIRE([AM_SET_CURRENT_AUTOMAKE_VERSION])dnl
-AC_REQUIRE([AC_PROG_INSTALL])dnl
-# test to see if srcdir already configured
-if test "`cd $srcdir && pwd`" != "`pwd`" &&
-   test -f $srcdir/config.status; then
-  AC_MSG_ERROR([source directory already configured; run "make distclean" there first])
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-AC_SUBST([CYGPATH_W])
-
-# Define the identity of the package.
-dnl Distinguish between old-style and new-style calls.
-m4_ifval([$2],
-[m4_ifval([$3], [_AM_SET_OPTION([no-define])])dnl
- AC_SUBST([PACKAGE], [$1])dnl
- AC_SUBST([VERSION], [$2])],
-[_AM_SET_OPTIONS([$1])dnl
- AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])dnl
- AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])])dnl
-
-_AM_IF_OPTION([no-define],,
-[AC_DEFINE_UNQUOTED(PACKAGE, "$PACKAGE", [Name of package])
- AC_DEFINE_UNQUOTED(VERSION, "$VERSION", [Version number of package])])dnl
-
-# Some tools Automake needs.
-AC_REQUIRE([AM_SANITY_CHECK])dnl
-AC_REQUIRE([AC_ARG_PROGRAM])dnl
-AM_MISSING_PROG(ACLOCAL, aclocal-${am__api_version})
-AM_MISSING_PROG(AUTOCONF, autoconf)
-AM_MISSING_PROG(AUTOMAKE, automake-${am__api_version})
-AM_MISSING_PROG(AUTOHEADER, autoheader)
-AM_MISSING_PROG(MAKEINFO, makeinfo)
-AM_PROG_INSTALL_SH
-AM_PROG_INSTALL_STRIP
-AC_REQUIRE([AM_PROG_MKDIR_P])dnl
-# We need awk for the "check" target.  The system "awk" is bad on
-# some platforms.
-AC_REQUIRE([AC_PROG_AWK])dnl
-AC_REQUIRE([AC_PROG_MAKE_SET])dnl
-AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-_AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])],
-              [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
-	      		     [_AM_PROG_TAR([v7])])])
-_AM_IF_OPTION([no-dependencies],,
-[AC_PROVIDE_IFELSE([AC_PROG_CC],
-                  [_AM_DEPENDENCIES(CC)],
-                  [define([AC_PROG_CC],
-                          defn([AC_PROG_CC])[_AM_DEPENDENCIES(CC)])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_CXX],
-                  [_AM_DEPENDENCIES(CXX)],
-                  [define([AC_PROG_CXX],
-                          defn([AC_PROG_CXX])[_AM_DEPENDENCIES(CXX)])])dnl
-])
-])
-
-
-# When config.status generates a header, we must update the stamp-h file.
-# This file resides in the same directory as the config header
-# that is generated.  The stamp files are numbered to have different names.
-
-# Autoconf calls _AC_AM_CONFIG_HEADER_HOOK (when defined) in the
-# loop where config.status creates the headers, so we can generate
-# our stamp files there.
-AC_DEFUN([_AC_AM_CONFIG_HEADER_HOOK],
-[# Compute $1's index in $config_headers.
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $1 | $1:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $1" >`AS_DIRNAME([$1])`/stamp-h[]$_am_stamp_count])
-
-# Copyright (C) 2001, 2003, 2005  Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_PROG_INSTALL_SH
-# ------------------
-# Define $install_sh.
-AC_DEFUN([AM_PROG_INSTALL_SH],
-[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-install_sh=${install_sh-"$am_aux_dir/install-sh"}
-AC_SUBST(install_sh)])
-
-# Copyright (C) 2003, 2005  Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# serial 2
-
-# Check whether the underlying file-system supports filenames
-# with a leading dot.  For instance MS-DOS doesn't.
-AC_DEFUN([AM_SET_LEADING_DOT],
-[rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-AC_SUBST([am__leading_dot])])
-
-# libtool.m4 - Configure libtool for the host system. -*-Autoconf-*-
-
-# serial 47 AC_PROG_LIBTOOL
-
-
-# AC_PROVIDE_IFELSE(MACRO-NAME, IF-PROVIDED, IF-NOT-PROVIDED)
-# -----------------------------------------------------------
-# If this macro is not defined by Autoconf, define it here.
-m4_ifdef([AC_PROVIDE_IFELSE],
-         [],
-         [m4_define([AC_PROVIDE_IFELSE],
-	         [m4_ifdef([AC_PROVIDE_$1],
-		           [$2], [$3])])])
-
-
-# AC_PROG_LIBTOOL
-# ---------------
-AC_DEFUN([AC_PROG_LIBTOOL],
-[AC_REQUIRE([_AC_PROG_LIBTOOL])dnl
-dnl If AC_PROG_CXX has already been expanded, run AC_LIBTOOL_CXX
-dnl immediately, otherwise, hook it in at the end of AC_PROG_CXX.
-  AC_PROVIDE_IFELSE([AC_PROG_CXX],
-    [AC_LIBTOOL_CXX],
-    [define([AC_PROG_CXX], defn([AC_PROG_CXX])[AC_LIBTOOL_CXX
-  ])])
-dnl And a similar setup for Fortran 77 support
-  AC_PROVIDE_IFELSE([AC_PROG_F77],
-    [AC_LIBTOOL_F77],
-    [define([AC_PROG_F77], defn([AC_PROG_F77])[AC_LIBTOOL_F77
-])])
-
-dnl Quote A][M_PROG_GCJ so that aclocal doesn't bring it in needlessly.
-dnl If either AC_PROG_GCJ or A][M_PROG_GCJ have already been expanded, run
-dnl AC_LIBTOOL_GCJ immediately, otherwise, hook it in at the end of both.
-  AC_PROVIDE_IFELSE([AC_PROG_GCJ],
-    [AC_LIBTOOL_GCJ],
-    [AC_PROVIDE_IFELSE([A][M_PROG_GCJ],
-      [AC_LIBTOOL_GCJ],
-      [AC_PROVIDE_IFELSE([LT_AC_PROG_GCJ],
-	[AC_LIBTOOL_GCJ],
-      [ifdef([AC_PROG_GCJ],
-	     [define([AC_PROG_GCJ], defn([AC_PROG_GCJ])[AC_LIBTOOL_GCJ])])
-       ifdef([A][M_PROG_GCJ],
-	     [define([A][M_PROG_GCJ], defn([A][M_PROG_GCJ])[AC_LIBTOOL_GCJ])])
-       ifdef([LT_AC_PROG_GCJ],
-	     [define([LT_AC_PROG_GCJ],
-		defn([LT_AC_PROG_GCJ])[AC_LIBTOOL_GCJ])])])])
-])])# AC_PROG_LIBTOOL
-
-
-# _AC_PROG_LIBTOOL
-# ----------------
-AC_DEFUN([_AC_PROG_LIBTOOL],
-[AC_REQUIRE([AC_LIBTOOL_SETUP])dnl
-AC_BEFORE([$0],[AC_LIBTOOL_CXX])dnl
-AC_BEFORE([$0],[AC_LIBTOOL_F77])dnl
-AC_BEFORE([$0],[AC_LIBTOOL_GCJ])dnl
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS="$ac_aux_dir/ltmain.sh"
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-AC_SUBST(LIBTOOL)dnl
-
-# Prevent multiple expansion
-define([AC_PROG_LIBTOOL], [])
-])# _AC_PROG_LIBTOOL
-
-
-# AC_LIBTOOL_SETUP
-# ----------------
-AC_DEFUN([AC_LIBTOOL_SETUP],
-[AC_PREREQ(2.50)dnl
-AC_REQUIRE([AC_ENABLE_SHARED])dnl
-AC_REQUIRE([AC_ENABLE_STATIC])dnl
-AC_REQUIRE([AC_ENABLE_FAST_INSTALL])dnl
-AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([AC_PROG_LD])dnl
-AC_REQUIRE([AC_PROG_LD_RELOAD_FLAG])dnl
-AC_REQUIRE([AC_PROG_NM])dnl
-
-AC_REQUIRE([AC_PROG_LN_S])dnl
-AC_REQUIRE([AC_DEPLIBS_CHECK_METHOD])dnl
-# Autoconf 2.13's AC_OBJEXT and AC_EXEEXT macros only works for C compilers!
-AC_REQUIRE([AC_OBJEXT])dnl
-AC_REQUIRE([AC_EXEEXT])dnl
+m4_ifndef([AC_CONFIG_MACRO_DIRS], [m4_defun([_AM_CONFIG_MACRO_DIRS], [])m4_defun([AC_CONFIG_MACRO_DIRS], [_AM_CONFIG_MACRO_DIRS($@)])])
+dnl pkg.m4 - Macros to locate and utilise pkg-config.   -*- Autoconf -*-
+dnl serial 11 (pkg-config-0.29.1)
 dnl
-
-AC_LIBTOOL_SYS_MAX_CMD_LEN
-AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE
-AC_LIBTOOL_OBJDIR
-
-AC_REQUIRE([_LT_AC_SYS_COMPILER])dnl
-_LT_AC_PROG_ECHO_BACKSLASH
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test "X${COLLECT_NAMES+set}" != Xset; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Sed substitution that helps us do robust quoting.  It backslashifies
-# metacharacters that are still active within double-quoted strings.
-Xsed='sed -e 1s/^X//'
-[sed_quote_subst='s/\([\\"\\`$\\\\]\)/\\\1/g']
-
-# Same as above, but do not quote variable references.
-[double_quote_subst='s/\([\\"\\`\\\\]\)/\\\1/g']
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-
-# Constants:
-rm="rm -f"
-
-# Global variables:
-default_ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a `.a' archive for static linking (except MSVC,
-# which needs '.lib').
-libext=a
-ltmain="$ac_aux_dir/ltmain.sh"
-ofile="$default_ofile"
-with_gnu_ld="$lt_cv_prog_gnu_ld"
-
-AC_CHECK_TOOL(AR, ar, false)
-AC_CHECK_TOOL(RANLIB, ranlib, :)
-AC_CHECK_TOOL(STRIP, strip, :)
-
-old_CC="$CC"
-old_CFLAGS="$CFLAGS"
-
-# Set sane defaults for various variables
-test -z "$AR" && AR=ar
-test -z "$AR_FLAGS" && AR_FLAGS=cru
-test -z "$AS" && AS=as
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-test -z "$LD" && LD=ld
-test -z "$LN_S" && LN_S="ln -s"
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-test -z "$NM" && NM=nm
-test -z "$SED" && SED=sed
-test -z "$OBJDUMP" && OBJDUMP=objdump
-test -z "$RANLIB" && RANLIB=:
-test -z "$STRIP" && STRIP=:
-test -z "$ac_objext" && ac_objext=o
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs$old_deplibs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  case $host_os in
-  openbsd*)
-    old_postinstall_cmds="\$RANLIB -t \$oldlib~$old_postinstall_cmds"
-    ;;
-  *)
-    old_postinstall_cmds="\$RANLIB \$oldlib~$old_postinstall_cmds"
-    ;;
-  esac
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$oldlib"
-fi
-
-_LT_CC_BASENAME([$compiler])
-
-# Only perform the check for file, if the check method requires it
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    AC_PATH_MAGIC
-  fi
-  ;;
-esac
-
-AC_PROVIDE_IFELSE([AC_LIBTOOL_DLOPEN], enable_dlopen=yes, enable_dlopen=no)
-AC_PROVIDE_IFELSE([AC_LIBTOOL_WIN32_DLL],
-enable_win32_dll=yes, enable_win32_dll=no)
-
-AC_ARG_ENABLE([libtool-lock],
-    [AC_HELP_STRING([--disable-libtool-lock],
-	[avoid locking (might break parallel builds)])])
-test "x$enable_libtool_lock" != xno && enable_libtool_lock=yes
-
-AC_ARG_WITH([pic],
-    [AC_HELP_STRING([--with-pic],
-	[try to use only PIC/non-PIC objects @<:@default=use both@:>@])],
-    [pic_mode="$withval"],
-    [pic_mode=default])
-test -z "$pic_mode" && pic_mode=default
-
-# Use C for the default configuration in the libtool script
-tagname=
-AC_LIBTOOL_LANG_C_CONFIG
-_LT_AC_TAGCONFIG
-])# AC_LIBTOOL_SETUP
-
-
-# _LT_AC_SYS_COMPILER
-# -------------------
-AC_DEFUN([_LT_AC_SYS_COMPILER],
-[AC_REQUIRE([AC_PROG_CC])dnl
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-])# _LT_AC_SYS_COMPILER
-
-
-# _LT_CC_BASENAME(CC)
-# -------------------
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-AC_DEFUN([_LT_CC_BASENAME],
-[for cc_temp in $1""; do
-  case $cc_temp in
-    compile | *[[\\/]]compile | ccache | *[[\\/]]ccache ) ;;
-    distcc | *[[\\/]]distcc | purify | *[[\\/]]purify ) ;;
-    \-*) ;;
-    *) break;;
-  esac
-done
-cc_basename=`$echo "X$cc_temp" | $Xsed -e 's%.*/%%' -e "s%^$host_alias-%%"`
-])
-
-
-# _LT_COMPILER_BOILERPLATE
-# ------------------------
-# Check for compiler boilerplate output or warnings with
-# the simple compiler test code.
-AC_DEFUN([_LT_COMPILER_BOILERPLATE],
-[ac_outfile=conftest.$ac_objext
-printf "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$rm conftest*
-])# _LT_COMPILER_BOILERPLATE
-
-
-# _LT_LINKER_BOILERPLATE
-# ----------------------
-# Check for linker boilerplate output or warnings with
-# the simple link test code.
-AC_DEFUN([_LT_LINKER_BOILERPLATE],
-[ac_outfile=conftest.$ac_objext
-printf "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$rm conftest*
-])# _LT_LINKER_BOILERPLATE
-
-
-# _LT_AC_SYS_LIBPATH_AIX
-# ----------------------
-# Links a minimal program and checks the executable
-# for the system default hardcoded library path. In most cases,
-# this is /usr/lib:/lib, but when the MPI compilers are used
-# the location of the communication and MPI libs are included too.
-# If we don't find anything, use the default library path according
-# to the aix ld manual.
-AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX],
-[AC_LINK_IFELSE(AC_LANG_PROGRAM,[
-aix_libpath=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e '/Import File Strings/,/^$/ { /^0/ { s/^0  *\(.*\)$/\1/; p; }
-}'`
-# Check for a 64-bit object if we didn't find anything.
-if test -z "$aix_libpath"; then aix_libpath=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e '/Import File Strings/,/^$/ { /^0/ { s/^0  *\(.*\)$/\1/; p; }
-}'`; fi],[])
-if test -z "$aix_libpath"; then aix_libpath="/usr/lib:/lib"; fi
-])# _LT_AC_SYS_LIBPATH_AIX
-
-
-# _LT_AC_SHELL_INIT(ARG)
-# ----------------------
-AC_DEFUN([_LT_AC_SHELL_INIT],
-[ifdef([AC_DIVERSION_NOTICE],
-	     [AC_DIVERT_PUSH(AC_DIVERSION_NOTICE)],
-	 [AC_DIVERT_PUSH(NOTICE)])
-$1
-AC_DIVERT_POP
-])# _LT_AC_SHELL_INIT
-
-
-# _LT_AC_PROG_ECHO_BACKSLASH
-# --------------------------
-# Add some code to the start of the generated configure script which
-# will find an echo command which doesn't interpret backslashes.
-AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH],
-[_LT_AC_SHELL_INIT([
-# Check that we are running under the correct shell.
-SHELL=${CONFIG_SHELL-/bin/sh}
-
-case X$ECHO in
-X*--fallback-echo)
-  # Remove one level of quotation (which was required for Make).
-  ECHO=`echo "$ECHO" | sed 's,\\\\\[$]\\[$]0,'[$]0','`
-  ;;
-esac
-
-echo=${ECHO-echo}
-if test "X[$]1" = X--no-reexec; then
-  # Discard the --no-reexec flag, and continue.
-  shift
-elif test "X[$]1" = X--fallback-echo; then
-  # Avoid inline document here, it may be left over
-  :
-elif test "X`($echo '\t') 2>/dev/null`" = 'X\t' ; then
-  # Yippee, $echo works!
-  :
-else
-  # Restart under the correct shell.
-  exec $SHELL "[$]0" --no-reexec ${1+"[$]@"}
-fi
-
-if test "X[$]1" = X--fallback-echo; then
-  # used as fallback echo
-  shift
-  cat <<EOF
-[$]*
-EOF
-  exit 0
-fi
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-if test -z "$ECHO"; then
-if test "X${echo_test_string+set}" != Xset; then
-# find a string as large as possible, as long as the shell can cope with it
-  for cmd in 'sed 50q "[$]0"' 'sed 20q "[$]0"' 'sed 10q "[$]0"' 'sed 2q "[$]0"' 'echo test'; do
-    # expected sizes: less than 2Kb, 1Kb, 512 bytes, 16 bytes, ...
-    if (echo_test_string=`eval $cmd`) 2>/dev/null &&
-       echo_test_string=`eval $cmd` &&
-       (test "X$echo_test_string" = "X$echo_test_string") 2>/dev/null
-    then
-      break
-    fi
-  done
-fi
-
-if test "X`($echo '\t') 2>/dev/null`" = 'X\t' &&
-   echo_testing_string=`($echo "$echo_test_string") 2>/dev/null` &&
-   test "X$echo_testing_string" = "X$echo_test_string"; then
-  :
-else
-  # The Solaris, AIX, and Digital Unix default echo programs unquote
-  # backslashes.  This makes it impossible to quote backslashes using
-  #   echo "$something" | sed 's/\\/\\\\/g'
-  #
-  # So, first we look for a working echo in the user's PATH.
-
-  lt_save_ifs="$IFS"; IFS=$PATH_SEPARATOR
-  for dir in $PATH /usr/ucb; do
-    IFS="$lt_save_ifs"
-    if (test -f $dir/echo || test -f $dir/echo$ac_exeext) &&
-       test "X`($dir/echo '\t') 2>/dev/null`" = 'X\t' &&
-       echo_testing_string=`($dir/echo "$echo_test_string") 2>/dev/null` &&
-       test "X$echo_testing_string" = "X$echo_test_string"; then
-      echo="$dir/echo"
-      break
-    fi
-  done
-  IFS="$lt_save_ifs"
-
-  if test "X$echo" = Xecho; then
-    # We didn't find a better echo, so look for alternatives.
-    if test "X`(print -r '\t') 2>/dev/null`" = 'X\t' &&
-       echo_testing_string=`(print -r "$echo_test_string") 2>/dev/null` &&
-       test "X$echo_testing_string" = "X$echo_test_string"; then
-      # This shell has a builtin print -r that does the trick.
-      echo='print -r'
-    elif (test -f /bin/ksh || test -f /bin/ksh$ac_exeext) &&
-	 test "X$CONFIG_SHELL" != X/bin/ksh; then
-      # If we have ksh, try running configure again with it.
-      ORIGINAL_CONFIG_SHELL=${CONFIG_SHELL-/bin/sh}
-      export ORIGINAL_CONFIG_SHELL
-      CONFIG_SHELL=/bin/ksh
-      export CONFIG_SHELL
-      exec $CONFIG_SHELL "[$]0" --no-reexec ${1+"[$]@"}
-    else
-      # Try using printf.
-      echo='printf %s\n'
-      if test "X`($echo '\t') 2>/dev/null`" = 'X\t' &&
-	 echo_testing_string=`($echo "$echo_test_string") 2>/dev/null` &&
-	 test "X$echo_testing_string" = "X$echo_test_string"; then
-	# Cool, printf works
-	:
-      elif echo_testing_string=`($ORIGINAL_CONFIG_SHELL "[$]0" --fallback-echo '\t') 2>/dev/null` &&
-	   test "X$echo_testing_string" = 'X\t' &&
-	   echo_testing_string=`($ORIGINAL_CONFIG_SHELL "[$]0" --fallback-echo "$echo_test_string") 2>/dev/null` &&
-	   test "X$echo_testing_string" = "X$echo_test_string"; then
-	CONFIG_SHELL=$ORIGINAL_CONFIG_SHELL
-	export CONFIG_SHELL
-	SHELL="$CONFIG_SHELL"
-	export SHELL
-	echo="$CONFIG_SHELL [$]0 --fallback-echo"
-      elif echo_testing_string=`($CONFIG_SHELL "[$]0" --fallback-echo '\t') 2>/dev/null` &&
-	   test "X$echo_testing_string" = 'X\t' &&
-	   echo_testing_string=`($CONFIG_SHELL "[$]0" --fallback-echo "$echo_test_string") 2>/dev/null` &&
-	   test "X$echo_testing_string" = "X$echo_test_string"; then
-	echo="$CONFIG_SHELL [$]0 --fallback-echo"
-      else
-	# maybe with a smaller string...
-	prev=:
-
-	for cmd in 'echo test' 'sed 2q "[$]0"' 'sed 10q "[$]0"' 'sed 20q "[$]0"' 'sed 50q "[$]0"'; do
-	  if (test "X$echo_test_string" = "X`eval $cmd`") 2>/dev/null
-	  then
-	    break
-	  fi
-	  prev="$cmd"
-	done
-
-	if test "$prev" != 'sed 50q "[$]0"'; then
-	  echo_test_string=`eval $prev`
-	  export echo_test_string
-	  exec ${ORIGINAL_CONFIG_SHELL-${CONFIG_SHELL-/bin/sh}} "[$]0" ${1+"[$]@"}
+dnl Copyright © 2004 Scott James Remnant <[e-mail]>.
+dnl Copyright © 2012-2015 Dan Nicholson <[e-mail]>
+dnl
+dnl This program is free software; you can redistribute it and/or modify
+dnl it under the terms of the GNU General Public License as published by
+dnl the Free Software Foundation; either version 2 of the License, or
+dnl (at your option) any later version.
+dnl
+dnl This program is distributed in the hope that it will be useful, but
+dnl WITHOUT ANY WARRANTY; without even the implied warranty of
+dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+dnl General Public License for more details.
+dnl
+dnl You should have received a copy of the GNU General Public License
+dnl along with this program; if not, write to the Free Software
+dnl Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
+dnl 02111-1307, USA.
+dnl
+dnl As a special exception to the GNU General Public License, if you
+dnl distribute this file as part of a program that contains a
+dnl configuration script generated by Autoconf, you may include it under
+dnl the same distribution terms that you use for the rest of that
+dnl program.
+
+dnl PKG_PREREQ(MIN-VERSION)
+dnl -----------------------
+dnl Since: 0.29
+dnl
+dnl Verify that the version of the pkg-config macros are at least
+dnl MIN-VERSION. Unlike PKG_PROG_PKG_CONFIG, which checks the user's
+dnl installed version of pkg-config, this checks the developer's version
+dnl of pkg.m4 when generating configure.
+dnl
+dnl To ensure that this macro is defined, also add:
+dnl m4_ifndef([PKG_PREREQ],
+dnl     [m4_fatal([must install pkg-config 0.29 or later before running autoconf/autogen])])
+dnl
+dnl See the "Since" comment for each macro you use to see what version
+dnl of the macros you require.
+m4_defun([PKG_PREREQ],
+[m4_define([PKG_MACROS_VERSION], [0.29.1])
+m4_if(m4_version_compare(PKG_MACROS_VERSION, [$1]), -1,
+    [m4_fatal([pkg.m4 version $1 or higher is required but ]PKG_MACROS_VERSION[ found])])
+])dnl PKG_PREREQ
+
+dnl PKG_PROG_PKG_CONFIG([MIN-VERSION])
+dnl ----------------------------------
+dnl Since: 0.16
+dnl
+dnl Search for the pkg-config tool and set the PKG_CONFIG variable to
+dnl first found in the path. Checks that the version of pkg-config found
+dnl is at least MIN-VERSION. If MIN-VERSION is not specified, 0.9.0 is
+dnl used since that's the first version where most current features of
+dnl pkg-config existed.
+AC_DEFUN([PKG_PROG_PKG_CONFIG],
+[m4_pattern_forbid([^_?PKG_[A-Z_]+$])
+m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
+m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
+AC_ARG_VAR([PKG_CONFIG], [path to pkg-config utility])
+AC_ARG_VAR([PKG_CONFIG_PATH], [directories to add to pkg-config's search path])
+AC_ARG_VAR([PKG_CONFIG_LIBDIR], [path overriding pkg-config's built-in search path])
+
+if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
+	AC_PATH_TOOL([PKG_CONFIG], [pkg-config])
+fi
+if test -n "$PKG_CONFIG"; then
+	_pkg_min_version=m4_default([$1], [0.9.0])
+	AC_MSG_CHECKING([pkg-config is at least version $_pkg_min_version])
+	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
+		AC_MSG_RESULT([yes])
 	else
-	  # Oops.  We lost completely, so just stick with echo.
-	  echo=echo
+		AC_MSG_RESULT([no])
+		PKG_CONFIG=""
 	fi
-      fi
-    fi
-  fi
-fi
-fi
-
-# Copy echo and quote the copy suitably for passing to libtool from
-# the Makefile, instead of quoting the original, which is used later.
-ECHO=$echo
-if test "X$ECHO" = "X$CONFIG_SHELL [$]0 --fallback-echo"; then
-   ECHO="$CONFIG_SHELL \\\$\[$]0 --fallback-echo"
-fi
-
-AC_SUBST(ECHO)
-])])# _LT_AC_PROG_ECHO_BACKSLASH
-
-
-# _LT_AC_LOCK
-# -----------
-AC_DEFUN([_LT_AC_LOCK],
-[AC_ARG_ENABLE([libtool-lock],
-    [AC_HELP_STRING([--disable-libtool-lock],
-	[avoid locking (might break parallel builds)])])
-test "x$enable_libtool_lock" != xno && enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out which ABI we are using.
-  echo 'int i;' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    case `/usr/bin/file conftest.$ac_objext` in
-    *ELF-32*)
-      HPUX_IA64_MODE="32"
-      ;;
-    *ELF-64*)
-      HPUX_IA64_MODE="64"
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out which ABI we are using.
-  echo '[#]line __oline__ "configure"' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-   if test "$lt_cv_prog_gnu_ld" = yes; then
-    case `/usr/bin/file conftest.$ac_objext` in
-    *32-bit*)
-      LD="${LD-ld} -melf32bsmip"
-      ;;
-    *N32*)
-      LD="${LD-ld} -melf32bmipn32"
-      ;;
-    *64-bit*)
-      LD="${LD-ld} -melf64bmip"
-      ;;
-    esac
-   else
-    case `/usr/bin/file conftest.$ac_objext` in
-    *32-bit*)
-      LD="${LD-ld} -32"
-      ;;
-    *N32*)
-      LD="${LD-ld} -n32"
-      ;;
-    *64-bit*)
-      LD="${LD-ld} -64"
-      ;;
-    esac
-   fi
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*linux*|ppc*-*linux*|powerpc*-*linux*|s390*-*linux*|sparc*-*linux*)
-  # Find out which ABI we are using.
-  echo 'int i;' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    case `/usr/bin/file conftest.o` in
-    *32-bit*)
-      case $host in
-        x86_64-*linux*)
-          LD="${LD-ld} -m elf_i386"
-          ;;
-        ppc64-*linux*|powerpc64-*linux*)
-          LD="${LD-ld} -m elf32ppclinux"
-          ;;
-        s390x-*linux*)
-          LD="${LD-ld} -m elf_s390"
-          ;;
-        sparc64-*linux*)
-          LD="${LD-ld} -m elf32_sparc"
-          ;;
-      esac
-      ;;
-    *64-bit*)
-      case $host in
-        x86_64-*linux*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        ppc*-*linux*|powerpc*-*linux*)
-          LD="${LD-ld} -m elf64ppc"
-          ;;
-        s390*-*linux*)
-          LD="${LD-ld} -m elf64_s390"
-          ;;
-        sparc*-*linux*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS="$CFLAGS"
-  CFLAGS="$CFLAGS -belf"
-  AC_CACHE_CHECK([whether the C compiler needs -belf], lt_cv_cc_needs_belf,
-    [AC_LANG_PUSH(C)
-     AC_TRY_LINK([],[],[lt_cv_cc_needs_belf=yes],[lt_cv_cc_needs_belf=no])
-     AC_LANG_POP])
-  if test x"$lt_cv_cc_needs_belf" != x"yes"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS="$SAVE_CFLAGS"
-  fi
-  ;;
-AC_PROVIDE_IFELSE([AC_LIBTOOL_WIN32_DLL],
-[*-*-cygwin* | *-*-mingw* | *-*-pw32*)
-  AC_CHECK_TOOL(DLLTOOL, dlltool, false)
-  AC_CHECK_TOOL(AS, as, false)
-  AC_CHECK_TOOL(OBJDUMP, objdump, false)
-  ;;
-  ])
-esac
-
-need_locks="$enable_libtool_lock"
-
-])# _LT_AC_LOCK
-
-
-# AC_LIBTOOL_COMPILER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS,
-#		[OUTPUT-FILE], [ACTION-SUCCESS], [ACTION-FAILURE])
-# ----------------------------------------------------------------
-# Check whether the given compiler option works
-AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION],
-[AC_REQUIRE([LT_AC_PROG_SED])
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-  ifelse([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4])
-   printf "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$3"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:__oline__: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&AS_MESSAGE_LOG_FD
-   echo "$as_me:__oline__: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $echo "X$_lt_compiler_boilerplate" | $Xsed >conftest.exp
-     $SED '/^$/d' conftest.err >conftest.er2
-     if test ! -s conftest.err || diff conftest.exp conftest.er2 >/dev/null; then
-       $2=yes
-     fi
-   fi
-   $rm conftest*
-])
-
-if test x"[$]$2" = xyes; then
-    ifelse([$5], , :, [$5])
-else
-    ifelse([$6], , :, [$6])
-fi
-])# AC_LIBTOOL_COMPILER_OPTION
-
-
-# AC_LIBTOOL_LINKER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS,
-#                          [ACTION-SUCCESS], [ACTION-FAILURE])
-# ------------------------------------------------------------
-# Check whether the given compiler option works
-AC_DEFUN([AC_LIBTOOL_LINKER_OPTION],
-[AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   save_LDFLAGS="$LDFLAGS"
-   LDFLAGS="$LDFLAGS $3"
-   printf "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&AS_MESSAGE_LOG_FD
-       $echo "X$_lt_linker_boilerplate" | $Xsed > conftest.exp
-       $SED '/^$/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         $2=yes
-       fi
-     else
-       $2=yes
-     fi
-   fi
-   $rm conftest*
-   LDFLAGS="$save_LDFLAGS"
-])
-
-if test x"[$]$2" = xyes; then
-    ifelse([$4], , :, [$4])
-else
-    ifelse([$5], , :, [$5])
-fi
-])# AC_LIBTOOL_LINKER_OPTION
-
-
-# AC_LIBTOOL_SYS_MAX_CMD_LEN
-# --------------------------
-AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN],
-[# find the maximum length of command line arguments
-AC_MSG_CHECKING([the maximum length of command line arguments])
-AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl
-  i=0
-  teststring="ABCD"
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu*)
-    # Under GNU Hurd, this test is not required because there is
-    # no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  netbsd* | freebsd* | openbsd* | darwin* | dragonfly*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  *)
-    # If test is not a shell built-in, we'll probably end up computing a
-    # maximum length that is only half of the actual maximum length, but
-    # we can't tell.
-    SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-    while (test "X"`$SHELL [$]0 --fallback-echo "X$teststring" 2>/dev/null` \
-	       = "XX$teststring") >/dev/null 2>&1 &&
-	    new_result=`expr "X$teststring" : ".*" 2>&1` &&
-	    lt_cv_sys_max_cmd_len=$new_result &&
-	    test $i != 17 # 1/2 MB should be enough
-    do
-      i=`expr $i + 1`
-      teststring=$teststring$teststring
-    done
-    teststring=
-    # Add a significant safety factor because C++ compilers can tack on massive
-    # amounts of additional arguments before passing them to the linker.
-    # It appears as though 1/2 is a usable value.
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    ;;
-  esac
-])
-if test -n $lt_cv_sys_max_cmd_len ; then
-  AC_MSG_RESULT($lt_cv_sys_max_cmd_len)
-else
-  AC_MSG_RESULT(none)
-fi
-])# AC_LIBTOOL_SYS_MAX_CMD_LEN
-
-
-# _LT_AC_CHECK_DLFCN
-# --------------------
-AC_DEFUN([_LT_AC_CHECK_DLFCN],
-[AC_CHECK_HEADERS(dlfcn.h)dnl
-])# _LT_AC_CHECK_DLFCN
-
-
-# _LT_AC_TRY_DLOPEN_SELF (ACTION-IF-TRUE, ACTION-IF-TRUE-W-USCORE,
-#                           ACTION-IF-FALSE, ACTION-IF-CROSS-COMPILING)
-# ------------------------------------------------------------------
-AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF],
-[AC_REQUIRE([_LT_AC_CHECK_DLFCN])dnl
-if test "$cross_compiling" = yes; then :
-  [$4]
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<EOF
-[#line __oline__ "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-#ifdef __cplusplus
-extern "C" void exit (int);
-#endif
-
-void fnord() { int i=42;}
-int main ()
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else if (dlsym( self,"_fnord")) status = $lt_dlneed_uscore;
-      /* dlclose (self); */
-    }
-
-    exit (status);
-}]
-EOF
-  if AC_TRY_EVAL(ac_link) && test -s conftest${ac_exeext} 2>/dev/null; then
-    (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) $1 ;;
-      x$lt_dlneed_uscore) $2 ;;
-      x$lt_unknown|x*) $3 ;;
-    esac
-  else :
-    # compilation failed
-    $3
-  fi
-fi
-rm -fr conftest*
-])# _LT_AC_TRY_DLOPEN_SELF
+fi[]dnl
+])dnl PKG_PROG_PKG_CONFIG
 
+dnl PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
+dnl -------------------------------------------------------------------
+dnl Since: 0.18
+dnl
+dnl Check to see whether a particular set of modules exists. Similar to
+dnl PKG_CHECK_MODULES(), but does not set variables or print errors.
+dnl
+dnl Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG])
+dnl only at the first occurence in configure.ac, so if the first place
+dnl it's called might be skipped (such as if it is within an "if", you
+dnl have to call PKG_CHECK_EXISTS manually
+AC_DEFUN([PKG_CHECK_EXISTS],
+[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
+if test -n "$PKG_CONFIG" && \
+    AC_RUN_LOG([$PKG_CONFIG --exists --print-errors "$1"]); then
+  m4_default([$2], [:])
+m4_ifvaln([$3], [else
+  $3])dnl
+fi])
 
-# AC_LIBTOOL_DLOPEN_SELF
-# -------------------
-AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF],
-[AC_REQUIRE([_LT_AC_CHECK_DLFCN])dnl
-if test "x$enable_dlopen" != xyes; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
+dnl _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES])
+dnl ---------------------------------------------
+dnl Internal wrapper calling pkg-config via PKG_CONFIG and setting
+dnl pkg_failed based on the result.
+m4_define([_PKG_CONFIG],
+[if test -n "$$1"; then
+    pkg_cv_[]$1="$$1"
+ elif test -n "$PKG_CONFIG"; then
+    PKG_CHECK_EXISTS([$3],
+                     [pkg_cv_[]$1=`$PKG_CONFIG --[]$2 "$3" 2>/dev/null`
+		      test "x$?" != "x0" && pkg_failed=yes ],
+		     [pkg_failed=yes])
+ else
+    pkg_failed=untried
+fi[]dnl
+])dnl _PKG_CONFIG
+
+dnl _PKG_SHORT_ERRORS_SUPPORTED
+dnl ---------------------------
+dnl Internal check to see if pkg-config supports short errors.
+AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED],
+[AC_REQUIRE([PKG_PROG_PKG_CONFIG])
+if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
+        _pkg_short_errors_supported=yes
 else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen="load_add_on"
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | pw32*)
-    lt_cv_dlopen="LoadLibrary"
-    lt_cv_dlopen_libs=
-   ;;
-
-  cygwin*)
-    lt_cv_dlopen="dlopen"
-    lt_cv_dlopen_libs=
-   ;;
-
-  darwin*)
-  # if libdl is installed we need to link against it
-    AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen="dlopen" lt_cv_dlopen_libs="-ldl"],[
-    lt_cv_dlopen="dyld"
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ])
-   ;;
-
-  *)
-    AC_CHECK_FUNC([shl_load],
-	  [lt_cv_dlopen="shl_load"],
-      [AC_CHECK_LIB([dld], [shl_load],
-	    [lt_cv_dlopen="shl_load" lt_cv_dlopen_libs="-dld"],
-	[AC_CHECK_FUNC([dlopen],
-	      [lt_cv_dlopen="dlopen"],
-	  [AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen="dlopen" lt_cv_dlopen_libs="-ldl"],
-	    [AC_CHECK_LIB([svld], [dlopen],
-		  [lt_cv_dlopen="dlopen" lt_cv_dlopen_libs="-lsvld"],
-	      [AC_CHECK_LIB([dld], [dld_link],
-		    [lt_cv_dlopen="dld_link" lt_cv_dlopen_libs="-dld"])
-	      ])
-	    ])
-	  ])
-	])
-      ])
-    ;;
-  esac
-
-  if test "x$lt_cv_dlopen" != xno; then
-    enable_dlopen=yes
-  else
-    enable_dlopen=no
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS="$CPPFLAGS"
-    test "x$ac_cv_header_dlfcn_h" = xyes && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS="$LDFLAGS"
-    eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS="$LIBS"
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    AC_CACHE_CHECK([whether a program can dlopen itself],
-	  lt_cv_dlopen_self, [dnl
-	  _LT_AC_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes,
-	    lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross)
-    ])
-
-    if test "x$lt_cv_dlopen_self" = xyes; then
-      LDFLAGS="$LDFLAGS $link_static_flag"
-      AC_CACHE_CHECK([whether a statically linked program can dlopen itself],
-    	  lt_cv_dlopen_self_static, [dnl
-	  _LT_AC_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes,
-	    lt_cv_dlopen_self_static=no,  lt_cv_dlopen_self_static=cross)
-      ])
-    fi
-
-    CPPFLAGS="$save_CPPFLAGS"
-    LDFLAGS="$save_LDFLAGS"
-    LIBS="$save_LIBS"
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-])# AC_LIBTOOL_DLOPEN_SELF
-
-
-# AC_LIBTOOL_PROG_CC_C_O([TAGNAME])
-# ---------------------------------
-# Check to see if options -c and -o are simultaneously supported by compiler
-AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O],
-[AC_REQUIRE([_LT_AC_SYS_COMPILER])dnl
-AC_CACHE_CHECK([if $compiler supports -c -o file.$ac_objext],
-  [_LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1)],
-  [_LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1)=no
-   $rm -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   printf "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:__oline__: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&AS_MESSAGE_LOG_FD
-   echo "$as_me:__oline__: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $echo "X$_lt_compiler_boilerplate" | $Xsed > out/conftest.exp
-     $SED '/^$/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.err || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       _LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes
-     fi
-   fi
-   chmod u+w . 2>&AS_MESSAGE_LOG_FD
-   $rm conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $rm out/ii_files/* && rmdir out/ii_files
-   $rm out/* && rmdir out
-   cd ..
-   rmdir conftest
-   $rm conftest*
-])
-])# AC_LIBTOOL_PROG_CC_C_O
+        _pkg_short_errors_supported=no
+fi[]dnl
+])dnl _PKG_SHORT_ERRORS_SUPPORTED
 
 
-# AC_LIBTOOL_SYS_HARD_LINK_LOCKS([TAGNAME])
-# -----------------------------------------
-# Check to see if we can do hard links to lock some files if needed
-AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS],
-[AC_REQUIRE([_LT_AC_LOCK])dnl
-
-hard_links="nottested"
-if test "$_LT_AC_TAGVAR(lt_cv_prog_compiler_c_o, $1)" = no && test "$need_locks" != no; then
-  # do not overwrite the value of need_locks provided by the user
-  AC_MSG_CHECKING([if we can lock with hard links])
-  hard_links=yes
-  $rm conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  AC_MSG_RESULT([$hard_links])
-  if test "$hard_links" = no; then
-    AC_MSG_WARN([`$CC' does not support `-c -o', so `make -j' may be unsafe])
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-])# AC_LIBTOOL_SYS_HARD_LINK_LOCKS
-
+dnl PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
+dnl   [ACTION-IF-NOT-FOUND])
+dnl --------------------------------------------------------------
+dnl Since: 0.4.0
+dnl
+dnl Note that if there is a possibility the first call to
+dnl PKG_CHECK_MODULES might not happen, you should be sure to include an
+dnl explicit call to PKG_PROG_PKG_CONFIG in your configure.ac
+AC_DEFUN([PKG_CHECK_MODULES],
+[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
+AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl
+AC_ARG_VAR([$1][_LIBS], [linker flags for $1, overriding pkg-config])dnl
+
+pkg_failed=no
+AC_MSG_CHECKING([for $1])
 
-# AC_LIBTOOL_OBJDIR
-# -----------------
-AC_DEFUN([AC_LIBTOOL_OBJDIR],
-[AC_CACHE_CHECK([for objdir], [lt_cv_objdir],
-[rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null])
-objdir=$lt_cv_objdir
-])# AC_LIBTOOL_OBJDIR
+_PKG_CONFIG([$1][_CFLAGS], [cflags], [$2])
+_PKG_CONFIG([$1][_LIBS], [libs], [$2])
 
+m4_define([_PKG_TEXT], [Alternatively, you may set the environment variables $1[]_CFLAGS
+and $1[]_LIBS to avoid the need to call pkg-config.
+See the pkg-config man page for more details.])
 
-# AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH([TAGNAME])
-# ----------------------------------------------
-# Check hardcoding attributes.
-AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH],
-[AC_MSG_CHECKING([how to hardcode library paths into programs])
-_LT_AC_TAGVAR(hardcode_action, $1)=
-if test -n "$_LT_AC_TAGVAR(hardcode_libdir_flag_spec, $1)" || \
-   test -n "$_LT_AC_TAGVAR(runpath_var, $1)" || \
-   test "X$_LT_AC_TAGVAR(hardcode_automatic, $1)" = "Xyes" ; then
+if test $pkg_failed = yes; then
+   	AC_MSG_RESULT([no])
+        _PKG_SHORT_ERRORS_SUPPORTED
+        if test $_pkg_short_errors_supported = yes; then
+	        $1[]_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "$2" 2>&1`
+        else 
+	        $1[]_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "$2" 2>&1`
+        fi
+	# Put the nasty error message in config.log where it belongs
+	echo "$$1[]_PKG_ERRORS" >&AS_MESSAGE_LOG_FD
 
-  # We can hardcode non-existant directories.
-  if test "$_LT_AC_TAGVAR(hardcode_direct, $1)" != no &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test "$_LT_AC_TAGVAR(hardcode_shlibpath_var, $1)" != no &&
-     test "$_LT_AC_TAGVAR(hardcode_minus_L, $1)" != no; then
-    # Linking always hardcodes the temporary library directory.
-    _LT_AC_TAGVAR(hardcode_action, $1)=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    _LT_AC_TAGVAR(hardcode_action, $1)=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  _LT_AC_TAGVAR(hardcode_action, $1)=unsupported
-fi
-AC_MSG_RESULT([$_LT_AC_TAGVAR(hardcode_action, $1)])
+	m4_default([$4], [AC_MSG_ERROR(
+[Package requirements ($2) were not met:
 
-if test "$_LT_AC_TAGVAR(hardcode_action, $1)" = relink; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test "$shlibpath_overrides_runpath" = yes ||
-     test "$enable_shared" = no; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-])# AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH
+$$1_PKG_ERRORS
 
+Consider adjusting the PKG_CONFIG_PATH environment variable if you
+installed software in a non-standard prefix.
 
-# AC_LIBTOOL_SYS_LIB_STRIP
-# ------------------------
-AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP],
-[striplib=
-old_striplib=
-AC_MSG_CHECKING([whether stripping libraries is possible])
-if test -n "$STRIP" && $STRIP -V 2>&1 | grep "GNU strip" >/dev/null; then
-  test -z "$old_striplib" && old_striplib="$STRIP --strip-debug"
-  test -z "$striplib" && striplib="$STRIP --strip-unneeded"
-  AC_MSG_RESULT([yes])
-else
-# FIXME - insert some real tests, host_os isn't really good enough
-  case $host_os in
-   darwin*)
-       if test -n "$STRIP" ; then
-         striplib="$STRIP -x"
-         AC_MSG_RESULT([yes])
-       else
-  AC_MSG_RESULT([no])
-fi
-       ;;
-   *)
-  AC_MSG_RESULT([no])
-    ;;
-  esac
-fi
-])# AC_LIBTOOL_SYS_LIB_STRIP
+_PKG_TEXT])[]dnl
+        ])
+elif test $pkg_failed = untried; then
+     	AC_MSG_RESULT([no])
+	m4_default([$4], [AC_MSG_FAILURE(
+[The pkg-config script could not be found or is too old.  Make sure it
+is in your PATH or set the PKG_CONFIG environment variable to the full
+path to pkg-config.
 
+_PKG_TEXT
 
-# AC_LIBTOOL_SYS_DYNAMIC_LINKER
-# -----------------------------
-# PORTME Fill in your ld.so characteristics
-AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER],
-[AC_MSG_CHECKING([dynamic linker characteristics])
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=".so"
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-if test "$GCC" = yes; then
-  sys_lib_search_path_spec=`$CC -print-search-dirs | grep "^libraries:" | $SED -e "s/^libraries://" -e "s,=/,/,g"`
-  if echo "$sys_lib_search_path_spec" | grep ';' >/dev/null ; then
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    sys_lib_search_path_spec=`echo "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-  else
-    sys_lib_search_path_spec=`echo "$sys_lib_search_path_spec" | $SED  -e "s/$PATH_SEPARATOR/ /g"`
-  fi
+To get pkg-config, see <http://pkg-config.freedesktop.org/>.])[]dnl
+        ])
 else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-case $host_os in
-aix3*)
-  version_type=linux
-  library_names_spec='${libname}${release}${shared_ext}$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='${libname}${release}${shared_ext}$major'
-  ;;
-
-aix4* | aix5*)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test "$host_cpu" = ia64; then
-    # AIX 5 supports IA64
-    library_names_spec='${libname}${release}${shared_ext}$major ${libname}${release}${shared_ext}$versuffix $libname${shared_ext}'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line `#! .'.  This would cause the generated library to
-    # depend on `.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[[01]] | aix4.[[01]].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | ${CC} -E - | grep yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # AIX (on Power*) has no versioning support, so currently we can not hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    if test "$aix_use_runtimelinking" = yes; then
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-    else
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='${libname}${release}.a $libname.a'
-      soname_spec='${libname}${release}${shared_ext}$major'
-    fi
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  library_names_spec='$libname.ixlibrary $libname.a'
-  # Create ${libname}_ixlibrary.a entries in /sys/libs.
-  finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`$echo "X$lib" | $Xsed -e '\''s%^.*/\([[^/]]*\)\.ixlibrary$%\1%'\''`; test $rm /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-  ;;
-
-beos*)
-  library_names_spec='${libname}${shared_ext}'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[[45]]*)
-  version_type=linux
-  need_version=no
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | pw32*)
-  version_type=windows
-  shrext_cmds=".dll"
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$host_os in
-  yes,cygwin* | yes,mingw* | yes,pw32*)
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \${file}`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\${base_file}'\''i;echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname~
-      chmod a+x \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $rm \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo ${libname} | sed -e 's/^lib/cyg/'``echo ${release} | $SED -e 's/[[.]]/-/g'`${versuffix}${shared_ext}'
-      sys_lib_search_path_spec="/usr/lib /lib/w32api /lib /usr/local/lib"
-      ;;
-    mingw*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='${libname}`echo ${release} | $SED -e 's/[[.]]/-/g'`${versuffix}${shared_ext}'
-      sys_lib_search_path_spec=`$CC -print-search-dirs | grep "^libraries:" | $SED -e "s/^libraries://" -e "s,=/,/,g"`
-      if echo "$sys_lib_search_path_spec" | [grep ';[c-zC-Z]:/' >/dev/null]; then
-        # It is most probably a Windows format PATH printed by
-        # mingw gcc, but we are running on Cygwin. Gcc prints its search
-        # path with ; separators, and with drive letters. We can handle the
-        # drive letters (cygwin fileutils understands them), so leave them,
-        # especially as we might pass files found there to a mingw objdump,
-        # which wouldn't understand a cygwinified path. Ahh.
-        sys_lib_search_path_spec=`echo "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`echo "$sys_lib_search_path_spec" | $SED  -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo ${libname} | sed -e 's/^lib/pw/'``echo ${release} | $SED -e 's/[[.]]/-/g'`${versuffix}${shared_ext}'
-      ;;
-    esac
-    ;;
-
-  *)
-    library_names_spec='${libname}`echo ${release} | $SED -e 's/[[.]]/-/g'`${versuffix}${shared_ext} $libname.lib'
-    ;;
-  esac
-  dynamic_linker='Win32 ld.exe'
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='${libname}${release}${versuffix}$shared_ext ${libname}${release}${major}$shared_ext ${libname}$shared_ext'
-  soname_spec='${libname}${release}${major}$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-  # Apple's gcc prints 'gcc -print-search-dirs' doesn't operate the same.
-  if test "$GCC" = yes; then
-    sys_lib_search_path_spec=`$CC -print-search-dirs | tr "\n" "$PATH_SEPARATOR" | sed -e 's/libraries:/@libraries:/' | tr "@" "\n" | grep "^libraries:" | sed -e "s/^libraries://" -e "s,=/,/,g" -e "s,$PATH_SEPARATOR, ,g" -e "s,.*,& /lib /usr/lib /usr/local/lib,g"`
-  else
-    sys_lib_search_path_spec='/lib /usr/lib /usr/local/lib'
-  fi
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname$shared_ext'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd1*)
-  dynamic_linker=no
-  ;;
-
-kfreebsd*-gnu)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='GNU ld.so'
-  ;;
-
-freebsd* | dragonfly*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[[123]]*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext} $libname${shared_ext}'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='${libname}${release}${shared_ext}$versuffix $libname${shared_ext}$versuffix'
-      need_version=yes
-      ;;
-  esac
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_os in
-  freebsd2*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[[01]]* | freebsdelf3.[[01]]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  *) # from 3.2 on
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-gnu*)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}${major} ${libname}${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  hardcode_into_libs=yes
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-    soname_spec='${libname}${release}${shared_ext}$major'
-    if test "X$HPUX_IA64_MODE" = X32; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-    fi
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-   hppa*64*)
-     shrext_cmds='.sl'
-     hardcode_into_libs=yes
-     dynamic_linker="$host_os dld.sl"
-     shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-     shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-     library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-     soname_spec='${libname}${release}${shared_ext}$major'
-     sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-     sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-     ;;
-   *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-    soname_spec='${libname}${release}${shared_ext}$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555.
-  postinstall_cmds='chmod 555 $lib'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test "$lt_cv_prog_gnu_ld" = yes; then
-		version_type=linux
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='${libname}${release}${shared_ext}$major'
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${release}${shared_ext} $libname${shared_ext}'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib${libsuff} /lib${libsuff} /usr/local/lib${libsuff}"
-  sys_lib_dlsearch_path_spec="/usr/lib${libsuff} /lib${libsuff}"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-# This must be Linux ELF.
-linux*)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Append ld.so.conf contents to the search path
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s", \[$]2)); skip = 1; } { if (!skip) print \[$]0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-knetbsd*-gnu)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='GNU ld.so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | grep __ELF__ >/dev/null; then
-    library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${shared_ext}$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major ${libname}${shared_ext}'
-    soname_spec='${libname}${release}${shared_ext}$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-nto-qnx*)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-openbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  # Some older versions of OpenBSD (3.3 at least) *do* need versioned libs.
-  case $host_os in
-    openbsd3.3 | openbsd3.3.*) need_version=yes ;;
-    *)                         need_version=no  ;;
-  esac
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${shared_ext}$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`" || test "$host_os-$host_cpu" = "openbsd2.8-powerpc"; then
-    case $host_os in
-      openbsd2.[[89]] | openbsd2.[[89]].*)
-	shlibpath_overrides_runpath=no
-	;;
-      *)
-	shlibpath_overrides_runpath=yes
-	;;
-      esac
-  else
-    shlibpath_overrides_runpath=yes
-  fi
-  ;;
-
-os2*)
-  libname_spec='$name'
-  shrext_cmds=".dll"
-  need_lib_prefix=no
-  library_names_spec='$libname${shared_ext} $libname.a'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=LIBPATH
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='${libname}${release}${shared_ext}$major'
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec="$sys_lib_search_path_spec"
-  ;;
-
-sco3.2v5*)
-  version_type=osf
-  soname_spec='${libname}${release}${shared_ext}$major'
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-solaris*)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${shared_ext}$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test "$with_gnu_ld" = yes; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-  version_type=linux
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      export_dynamic_flag_spec='${wl}-Blargedynsym'
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec ;then
-    version_type=linux
-    library_names_spec='$libname${shared_ext}.$versuffix $libname${shared_ext}.$major $libname${shared_ext}'
-    soname_spec='$libname${shared_ext}.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-uts4*)
-  version_type=linux
-  library_names_spec='${libname}${release}${shared_ext}$versuffix ${libname}${release}${shared_ext}$major $libname${shared_ext}'
-  soname_spec='${libname}${release}${shared_ext}$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-AC_MSG_RESULT([$dynamic_linker])
-test "$dynamic_linker" = no && can_build_shared=no
-])# AC_LIBTOOL_SYS_DYNAMIC_LINKER
-
-
-# _LT_AC_TAGCONFIG
-# ----------------
-AC_DEFUN([_LT_AC_TAGCONFIG],
-[AC_ARG_WITH([tags],
-    [AC_HELP_STRING([--with-tags@<:@=TAGS@:>@],
-        [include additional configurations @<:@automatic@:>@])],
-    [tagnames="$withval"])
-
-if test -f "$ltmain" && test -n "$tagnames"; then
-  if test ! -f "${ofile}"; then
-    AC_MSG_WARN([output file `$ofile' does not exist])
-  fi
-
-  if test -z "$LTCC"; then
-    eval "`$SHELL ${ofile} --config | grep '^LTCC='`"
-    if test -z "$LTCC"; then
-      AC_MSG_WARN([output file `$ofile' does not look like a libtool script])
-    else
-      AC_MSG_WARN([using `LTCC=$LTCC', extracted from `$ofile'])
-    fi
-  fi
-
-  # Extract list of available tagged configurations in $ofile.
-  # Note that this assumes the entire list is on one line.
-  available_tags=`grep "^available_tags=" "${ofile}" | $SED -e 's/available_tags=\(.*$\)/\1/' -e 's/\"//g'`
-
-  lt_save_ifs="$IFS"; IFS="${IFS}$PATH_SEPARATOR,"
-  for tagname in $tagnames; do
-    IFS="$lt_save_ifs"
-    # Check whether tagname contains only valid characters
-    case `$echo "X$tagname" | $Xsed -e 's:[[-_ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz1234567890,/]]::g'` in
-    "") ;;
-    *)  AC_MSG_ERROR([invalid tag name: $tagname])
-	;;
-    esac
-
-    if grep "^# ### BEGIN LIBTOOL TAG CONFIG: $tagname$" < "${ofile}" > /dev/null
-    then
-      AC_MSG_ERROR([tag name \"$tagname\" already exists])
-    fi
-
-    # Update the list of available tags.
-    if test -n "$tagname"; then
-      echo appending configuration tag \"$tagname\" to $ofile
-
-      case $tagname in
-      CXX)
-	if test -n "$CXX" && ( test "X$CXX" != "Xno" &&
-	    ( (test "X$CXX" = "Xg++" && `g++ -v >/dev/null 2>&1` ) ||
-	    (test "X$CXX" != "Xg++"))) ; then
-	  AC_LIBTOOL_LANG_CXX_CONFIG
-	else
-	  tagname=""
-	fi
-	;;
-
-      F77)
-	if test -n "$F77" && test "X$F77" != "Xno"; then
-	  AC_LIBTOOL_LANG_F77_CONFIG
-	else
-	  tagname=""
-	fi
-	;;
-
-      GCJ)
-	if test -n "$GCJ" && test "X$GCJ" != "Xno"; then
-	  AC_LIBTOOL_LANG_GCJ_CONFIG
-	else
-	  tagname=""
-	fi
-	;;
-
-      RC)
-	AC_LIBTOOL_LANG_RC_CONFIG
-	;;
-
-      *)
-	AC_MSG_ERROR([Unsupported tag name: $tagname])
-	;;
-      esac
-
-      # Append the new tag name to the list of available tags.
-      if test -n "$tagname" ; then
-      available_tags="$available_tags $tagname"
-    fi
-    fi
-  done
-  IFS="$lt_save_ifs"
-
-  # Now substitute the updated list of available tags.
-  if eval "sed -e 's/^available_tags=.*\$/available_tags=\"$available_tags\"/' \"$ofile\" > \"${ofile}T\""; then
-    mv "${ofile}T" "$ofile"
-    chmod +x "$ofile"
-  else
-    rm -f "${ofile}T"
-    AC_MSG_ERROR([unable to update list of available tagged configurations.])
-  fi
-fi
-])# _LT_AC_TAGCONFIG
-
-
-# AC_LIBTOOL_DLOPEN
-# -----------------
-# enable checks for dlopen support
-AC_DEFUN([AC_LIBTOOL_DLOPEN],
- [AC_BEFORE([$0],[AC_LIBTOOL_SETUP])
-])# AC_LIBTOOL_DLOPEN
-
-
-# AC_LIBTOOL_WIN32_DLL
-# --------------------
-# declare package support for building win32 DLLs
-AC_DEFUN([AC_LIBTOOL_WIN32_DLL],
-[AC_BEFORE([$0], [AC_LIBTOOL_SETUP])
-])# AC_LIBTOOL_WIN32_DLL
-
-
-# AC_ENABLE_SHARED([DEFAULT])
-# ---------------------------
-# implement the --enable-shared flag
-# DEFAULT is either `yes' or `no'.  If omitted, it defaults to `yes'.
-AC_DEFUN([AC_ENABLE_SHARED],
-[define([AC_ENABLE_SHARED_DEFAULT], ifelse($1, no, no, yes))dnl
-AC_ARG_ENABLE([shared],
-    [AC_HELP_STRING([--enable-shared@<:@=PKGS@:>@],
-	[build shared libraries @<:@default=]AC_ENABLE_SHARED_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs="$IFS"; IFS="${IFS}$PATH_SEPARATOR,"
-      for pkg in $enableval; do
-	IFS="$lt_save_ifs"
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS="$lt_save_ifs"
-      ;;
-    esac],
-    [enable_shared=]AC_ENABLE_SHARED_DEFAULT)
-])# AC_ENABLE_SHARED
-
-
-# AC_DISABLE_SHARED
-# -----------------
-#- set the default shared flag to --disable-shared
-AC_DEFUN([AC_DISABLE_SHARED],
-[AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl
-AC_ENABLE_SHARED(no)
-])# AC_DISABLE_SHARED
-
-
-# AC_ENABLE_STATIC([DEFAULT])
-# ---------------------------
-# implement the --enable-static flag
-# DEFAULT is either `yes' or `no'.  If omitted, it defaults to `yes'.
-AC_DEFUN([AC_ENABLE_STATIC],
-[define([AC_ENABLE_STATIC_DEFAULT], ifelse($1, no, no, yes))dnl
-AC_ARG_ENABLE([static],
-    [AC_HELP_STRING([--enable-static@<:@=PKGS@:>@],
-	[build static libraries @<:@default=]AC_ENABLE_STATIC_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs="$IFS"; IFS="${IFS}$PATH_SEPARATOR,"
-      for pkg in $enableval; do
-	IFS="$lt_save_ifs"
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS="$lt_save_ifs"
-      ;;
-    esac],
-    [enable_static=]AC_ENABLE_STATIC_DEFAULT)
-])# AC_ENABLE_STATIC
-
-
-# AC_DISABLE_STATIC
-# -----------------
-# set the default static flag to --disable-static
-AC_DEFUN([AC_DISABLE_STATIC],
-[AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl
-AC_ENABLE_STATIC(no)
-])# AC_DISABLE_STATIC
-
-
-# AC_ENABLE_FAST_INSTALL([DEFAULT])
-# ---------------------------------
-# implement the --enable-fast-install flag
-# DEFAULT is either `yes' or `no'.  If omitted, it defaults to `yes'.
-AC_DEFUN([AC_ENABLE_FAST_INSTALL],
-[define([AC_ENABLE_FAST_INSTALL_DEFAULT], ifelse($1, no, no, yes))dnl
-AC_ARG_ENABLE([fast-install],
-    [AC_HELP_STRING([--enable-fast-install@<:@=PKGS@:>@],
-    [optimize for fast installation @<:@default=]AC_ENABLE_FAST_INSTALL_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs="$IFS"; IFS="${IFS}$PATH_SEPARATOR,"
-      for pkg in $enableval; do
-	IFS="$lt_save_ifs"
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS="$lt_save_ifs"
-      ;;
-    esac],
-    [enable_fast_install=]AC_ENABLE_FAST_INSTALL_DEFAULT)
-])# AC_ENABLE_FAST_INSTALL
-
-
-# AC_DISABLE_FAST_INSTALL
-# -----------------------
-# set the default to --disable-fast-install
-AC_DEFUN([AC_DISABLE_FAST_INSTALL],
-[AC_BEFORE([$0],[AC_LIBTOOL_SETUP])dnl