openldap-bugs

openldap-bugs@openldap.org

1 participants
21000 discussions

(ITS#6741)
by jgcardoso＠seguridata.com 29 Dec '10

29 Dec '10

This is a multi-part message in MIME format. ------_=_NextPart_001_01CBA7B8.A7EC1D62 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I created a function to support conversion from DER BitString encoded data to RFC4517 Bit String Format. I tested it alone and it seems to work fine with normal and abnormal situations. =20 I also wrote a proposal to the call that must be included at ldap_X509dn2bv() function. =20 First comes the conversion function and after comes the proposal. =20 =20 /*****************************************************/ =20 #define BITS_PER_BYTE 8 #define SQUOTE_LENGTH 1 #define B_CHAR_LENGTH 1 #define STR_OVERHEAD (2*SQUOTE_LENGTH + B_CHAR_LENGTH) =20 int ldap_der_to_rfc4517_BitString (struct berval *berValue, struct berval *rfc4517Value) { ber_len_t bitPadding=3D0; ber_len_t bits, maxBits; char *tmpStr; unsigned char byte; ber_len_t bitLength; ber_len_t valLen; unsigned char* valPtr; =20 rfc4517Value->bv_len=3D0; rfc4517Value->bv_val=3DNULL; =20 /* Gets padding and points to binary data */ valLen=3DberValue->bv_len; valPtr=3D(unsigned char*)berValue->bv_val; if (valLen) { bitPadding=3D(ber_len_t)(valPtr[0]); valLen--; valPtr++; } /* If Block is non DER encoding fixes to DER encoding */ if (bitPadding >=3D BITS_PER_BYTE) { if (valLen*BITS_PER_BYTE > bitPadding ) { valLen-=3D(bitPadding/BITS_PER_BYTE); bitPadding%=3DBITS_PER_BYTE; } else { valLen=3D0; bitPadding=3D0; } } /* Just in case bad encoding */ if (valLen*BITS_PER_BYTE < bitPadding ) { bitPadding=3D0; valLen=3D0; } =20 /* Gets buffer to hold RFC4517 Bit String format */ bitLength=3DvalLen*BITS_PER_BYTE-bitPadding; tmpStr=3DLDAP_MALLOC(bitLength + STR_OVERHEAD + 1); =20 if (!tmpStr) return LDAP_NO_MEMORY; =20 rfc4517Value->bv_val=3DtmpStr; rfc4517Value->bv_len=3DbitLength + STR_OVERHEAD; =20 /* Formatting in '*binary-digit'B format */ maxBits=3DBITS_PER_BYTE; *tmpStr=3D'\''; tmpStr++; while(valLen) { byte=3D*valPtr; if (valLen=3D=3D1) maxBits-=3DbitPadding; for (bits=3D0; bits<maxBits; bits++) { if (0x80 & byte) *tmpStr=3D'1'; else *tmpStr=3D'0'; tmpStr++; byte<<=3D1; } valPtr++; valLen--; } *tmpStr=3D'\''; tmpStr++; *tmpStr=3D'B'; tmpStr++; *tmpStr=3D0; =20 return LDAP_SUCCESS; } =20 =20 /*****************************************************/ /*****************************************************/ =20 =20 /* * Other tags found in AVAs (X.520) */ #define LBER_TAG_BITSTRING ((ber_tag_t) 0x03UL) =20 =20 ldap_X509dn2bv function updated: =20 switch(tag) { case LBER_TAG_UNIVERSAL: /* This uses 32-bit ISO 10646-1 */ csize =3D 4; goto to_utf8; case LBER_TAG_BMP: /* This uses 16-bit ISO 10646-1 */ csize =3D 2; goto to_utf8; case LBER_TAG_BITSTRING: /* X.690 bitString value converted to RFC4517 Bit String */ rc =3D ldap_der_to_rfc4517_BitString( &Val, &newAVA->la_value ); goto after_utf8; case LBER_TAG_TELETEX: /* This uses 8-bit, assume ISO 8859-1 */ csize =3D 1; to_utf8: rc =3D ldap_ucs_to_utf8s( &Val, csize, &newAVA->la_value ); after_utf8: newAVA->la_flags |=3D LDAP_AVA_FREE_VALUE; if (rc !=3D LDAP_SUCCESS) goto nomem; newAVA->la_flags =3D LDAP_AVA_NONPRINTABLE; break; case LBER_TAG_UTF8: newAVA->la_flags =3D LDAP_AVA_NONPRINTABLE; /* This is already in UTF-8 encoding */ case LBER_TAG_IA5: case LBER_TAG_PRINTABLE: /* These are always 7-bit strings */ newAVA->la_value =3D Val; default: ; } =20 ------_=_NextPart_001_01CBA7B8.A7EC1D62 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:x=3D"urn:schemas-microsoft-com:office:excel" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta = http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 12 = (filtered medium)"><style></style></head><body lang=3DES-MX link=3Dblue = vlink=3Dpurple><div class=3DWordSection1>I created a function to = support conversion from DER BitString encoded data to RFC4517 Bit String = Format.<o:p></o:p>I tested it alone and it seems to = work fine with normal and abnormal situations.<o:p></o:p><o:p> </o:p>I also wrote a proposal = to the call that must be included at ldap_X509dn2bv() = function.<o:p></o:p><o:p> </o:p>First comes the conversion function and after comes the = proposal.<o:p></o:p><o:p> </o:p><o:p> </o:p>/*****************************************************/<o:p></o:p><= /span><o:p> </o:p>#define BITS_PER_BYTE     = 8<o:p></o:p>#define = SQUOTE_LENGTH     1<o:p></o:p>#define B_CHAR_LENGTH     = 1<o:p></o:p>#define = STR_OVERHEAD    (2*SQUOTE_LENGTH + = B_CHAR_LENGTH)<o:p></o:p><o:p> </o:p>int = ldap_der_to_rfc4517_BitString (struct berval = *berValue,<o:p></o:p>         =             &= nbsp;           &n= bsp; struct berval *rfc4517Value) = {            =             &= nbsp;        <o:p></o:p>ber_len_t bitPadding=3D0;<o:p></o:p>ber_len_t bits, maxBits;<o:p></o:p>char *tmpStr;<o:p></o:p>unsigned char = byte;<o:p></o:p>ber_len_t = bitLength;<o:p></o:p>ber_len_t = valLen;<o:p></o:p>unsigned char* = valPtr;<o:p></o:p><o:p> </o:p>   rfc4517Value->bv_len=3D0;<o:p></o:p>   = rfc4517Value->bv_val=3DNULL;<o:p></o:p><o:p> </o:p>   /* Gets = padding and points to binary data */<o:p></o:p>   valLen=3DberValue->bv_len;<o:p></o:p>   valPtr=3D(unsigned = char*)berValue->bv_val;<o:p></o:p>   if (valLen) {<o:p></o:p>      = bitPadding=3D(ber_len_t)(valPtr[0]);<o:p></o:p>      valLen--;<o:p></o:p>      valPtr++;<o:p></o:p>   }<o:p></o:p>   /* If = Block is non DER encoding fixes to DER encoding = */<o:p></o:p>   if (bitPadding >=3D = BITS_PER_BYTE) {<o:p></o:p>      if (valLen*BITS_PER_BYTE > = bitPadding ) {<o:p></o:p>         = valLen-=3D(bitPadding/BITS_PER_BYTE);<o:p></o:p>         = bitPadding%=3DBITS_PER_BYTE;<o:p></o:p>      } else {<o:p></o:p>         = valLen=3D0;<o:p></o:p>         = bitPadding=3D0;<o:p></o:p>      }<o:p></o:p>   }<o:p></o:p>   /* Just in = case bad encoding */<o:p></o:p>   if = (valLen*BITS_PER_BYTE < bitPadding ) {<o:p></o:p>      = bitPadding=3D0;<o:p></o:p>      valLen=3D0;<o:p></o:p>   }<o:p></o:p><o:p> </o:p>   /* Gets = buffer to hold RFC4517 Bit String format */<o:p></o:p>   = bitLength=3DvalLen*BITS_PER_BYTE-bitPadding;<o:p></o:p>   tmpStr=3DLDAP_MALLOC(bitLength + STR_OVERHEAD + = 1);<o:p></o:p>   = <o:p></o:p>   if = (!tmpStr)<o:p></o:p>      = return LDAP_NO_MEMORY;<o:p></o:p><o:p> </o:p>   = rfc4517Value->bv_val=3DtmpStr;<o:p></o:p>   rfc4517Value->bv_len=3DbitLength + = STR_OVERHEAD;<o:p></o:p><o:p> </o:p>   /* = Formatting in '*binary-digit'B format */<o:p></o:p>   maxBits=3DBITS_PER_BYTE;<o:p></o:p>   *tmpStr=3D'\'';<o:p></o:p>   tmpStr++;<o:p></o:p>   while(valLen) {<o:p></o:p>      = byte=3D*valPtr;<o:p></o:p>      if = (valLen=3D=3D1)<o:p></o:p>         = maxBits-=3DbitPadding;<o:p></o:p>      for (bits=3D0; bits<maxBits; = bits++) {<o:p></o:p>         if (0x80 & = byte)<o:p></o:p>            = *tmpStr=3D'1';<o:p></o:p>         = else<o:p></o:p>            = *tmpStr=3D'0';<o:p></o:p>         = tmpStr++;<o:p></o:p>         = byte<<=3D1;<o:p></o:p>      }<o:p></o:p>      valPtr++;<o:p></o:p>      valLen--;<o:p></o:p>   }<o:p></o:p>   = *tmpStr=3D'\'';<o:p></o:p>   = tmpStr++;<o:p></o:p>   = *tmpStr=3D'B';<o:p></o:p>   = tmpStr++;<o:p></o:p>   = *tmpStr=3D0;<o:p></o:p><o:p> </o:p>   return = LDAP_SUCCESS;<o:p></o:p>}<o:p></o:p><o:p> </o:p><o:p> </o:p>/*****************************************************/<o:p></o:p><= /span>/*****************************************************/<o:p></o:p><= /span><o:p> </o:p><o:p> </o:p>/*<o:p></o:p> * Other tags = found in AVAs (X.520)<o:p></o:p> = */<o:p></o:p>#define = LBER_TAG_BITSTRING     ((ber_tag_t) = 0x03UL)<o:p></o:p><o:p> </o:p><o:p> </o:p>ldap_X509dn2bv function = updated:<o:p></o:p><o:p> </o:p>           &= nbsp;    switch(tag) {<o:p></o:p>           &= nbsp;    case LBER_TAG_UNIVERSAL:<o:p></o:p>           &= nbsp;         /* This uses = 32-bit ISO 10646-1 */<o:p></o:p>           &= nbsp;         csize =3D 4; goto = to_utf8;<o:p></o:p>           &= nbsp;    case LBER_TAG_BMP:<o:p></o:p>           &= nbsp;         /* This uses = 16-bit ISO 10646-1 */<o:p></o:p>           &= nbsp;         csize =3D 2; goto = to_utf8;<o:p></o:p>         &nb= sp;      case = LBER_TAG_BITSTRING:<o:p></o:p>         &nb= sp;           /* X.690 = bitString value converted to RFC4517 Bit String = */<o:p></o:p>         &nb= sp;           rc =3D = ldap_der_to_rfc4517_BitString( &Val, &newAVA->la_value = );<o:p></o:p>         &nb= sp;           goto = after_utf8;<o:p></o:p>           &= nbsp;    case LBER_TAG_TELETEX:<o:p></o:p>           &= nbsp;         /* This uses = 8-bit, assume ISO 8859-1 */<o:p></o:p>           &= nbsp;         csize =3D = 1;<o:p></o:p>to_utf8:         &nbsp= ;   rc =3D ldap_ucs_to_utf8s( &Val, csize, = &newAVA->la_value );<o:p></o:p>after_utf8:          = newAVA->la_flags |=3D LDAP_AVA_FREE_VALUE;<o:p></o:p>           &= nbsp;         if (rc !=3D = LDAP_SUCCESS) goto nomem;<o:p></o:p>           &= nbsp;         newAVA->la_flags =3D = LDAP_AVA_NONPRINTABLE;<o:p></o:p>           &= nbsp;         break;<o:p></o:p>           &= nbsp;    case LBER_TAG_UTF8:<o:p></o:p>           &= nbsp;         newAVA->la_flags =3D = LDAP_AVA_NONPRINTABLE;<o:p></o:p>           &= nbsp;         /* This is already in = UTF-8 encoding */<o:p></o:p>           &= nbsp;    case LBER_TAG_IA5:<o:p></o:p>           &= nbsp;    case LBER_TAG_PRINTABLE:<o:p></o:p>           &= nbsp;         /* These are = always 7-bit strings */<o:p></o:p>           &= nbsp;         newAVA->la_value =3D = Val;<o:p></o:p>           &= nbsp;    default:<o:p></o:p>           &= nbsp;         ;<o:p></o:p>           &= nbsp;    }<o:p></o:p><o:p> </o:p></div></body></html> ------_=_NextPart_001_01CBA7B8.A7EC1D62--

1 0

Re: (ITS#6745) HEAD emfile race condition -> slapd stopping listening?
by h.b.furuseth＠usit.uio.no 28 Dec '10

28 Dec '10

Howard Chu wrote: >>h.b.furuseth(a)usit.uio.no wrote: >>> Maybe to compensate, slapd_remove() has code which checks if emfile >>> is too big, but nothing checks if it is too small - which looks like >>> slapd might never start listening again. > > On 2nd thought - I don't see how the outcome you describe can occur. If emfile > is non-zero, the list of listeners will be checked for a listener with > non-zero mute status. If any are found, one is guaranteed to be unmuted. But if emfile becomes too small, it reaches zero with a listener still muted - and with emfile = zero, the nothing is unmuted. -- Hallvard

1 0

Re: (ITS#6745) HEAD emfile race condition -> slapd stopping listening?
by hyc＠symas.com 23 Dec '10

23 Dec '10

Howard Chu wrote: > h.b.furuseth(a)usit.uio.no wrote: >> Full_Name: Hallvard B Furuseth >> Version: HEAD >> OS: >> URL: >> Submission from: (NULL) (129.240.6.233) >> Submitted by: hallvard >> >> >> In HEAD slapd/daemon.c, thanks to HEAD's multiple listener support: >> >> slap_listener() protects emfile with slap_daemon[0 ].sd_mutex, >> but slapd_remove() protects it with slap_daemon[id].sd_mutex. >> >> Maybe to compensate, slapd_remove() has code which checks if emfile >> is too big, but nothing checks if it is too small - which looks like >> slapd might never start listening again. On 2nd thought - I don't see how the outcome you describe can occur. If emfile is non-zero, the list of listeners will be checked for a listener with non-zero mute status. If any are found, one is guaranteed to be unmuted. If none are found, emfile will be zeroed. In no case will slapd fail to unmute a listener. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6745) HEAD emfile race condition -> slapd stopping listening?
by hyc＠symas.com 23 Dec '10

23 Dec '10

h.b.furuseth(a)usit.uio.no wrote: > Full_Name: Hallvard B Furuseth > Version: HEAD > OS: > URL: > Submission from: (NULL) (129.240.6.233) > Submitted by: hallvard > > > In HEAD slapd/daemon.c, thanks to HEAD's multiple listener support: > > slap_listener() protects emfile with slap_daemon[0 ].sd_mutex, > but slapd_remove() protects it with slap_daemon[id].sd_mutex. > > Maybe to compensate, slapd_remove() has code which checks if emfile > is too big, but nothing checks if it is too small - which looks like > slapd might never start listening again. > > Simplest fix: add this to slapd_remove(): > > if (id) ldap_pvt_thread_mutex_<lock,unlock>(&slap_daemon[0].sd_mutex ); > > slap_daemon[0].sd_mutex looks quite contended that way, though. > Maybe a separate emfile_mutex is better. Alternatively, just skip the check entirely when id != 0. Which would mean that only closing a session on the first listener would ever trigger the other listeners to be unmuted. Doesn't seem so terrible; if slapd is actually out of descriptors one or two connections either way won't make a huge difference in service. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6449) roadmap update
by hyc＠symas.com 23 Dec '10

23 Dec '10

quanah(a)OpenLDAP.org wrote: > Full_Name: Quanah Gibson-Mount > Version: NA > OS: NA > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (75.111.29.239) > > > http://www.openldap.org/software/roadmap.html needs to be updated to note that > OpenLDAP 2.3 is no longer maintained, same as 2.2 and prior. > Fixed in CVS. Kurt, can you refresh the web site? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6453) OpenLDAP memory leak on LDAP_TIMEOUT
by hyc＠symas.com 23 Dec '10

23 Dec '10

alinachegalati(a)yahoo.com wrote: > Full_Name: Alin Vasile > Version: 2.4.19 > OS: Solaris 10 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (194.237.142.7) > A patch for this is now in CVS HEAD. > > Hi, > > We have a memory leak LDAP_TIMEOUT is encountered on > ldap_search_ext_invocation and we are unable to determine if it is related to > OpenLdap or not. The following summarizes our code in case the LDAP_TIMEOUT > response is returned : > > LDAPMessage *res ; > > // acquire connection > > // perform search > > if(rc == LDAP_TIMEOUT) > { > ldap_msgfree(res); > // return connection > } > > Is ldap_msgfree(res) enough in this case ? > > We tested our program by enabling a low timeout and hence all ldap calls > resulting in timeout. The memory leak is about 9 Megs in several minutes, at a > load of 5 req/ sec. > > dmalloc sees the following not allocated pointers > > 6642692 bytes : Line 640 of "io.c" starts at address 0xff2659c4 > <ber_get_next+468> and ends at 0xff2659cc<ber_get_next+476>. > > 2019876 bytes : Line 277 of "memory.c" starts at address 0xff26676c > <ber_memcalloc_x+132> and ends at 0xff266774<ber_memcalloc_x+140>. > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6680) slapd why sasl error message?
by Howard Chu 23 Dec '10

23 Dec '10

>From your log info, your client is obviously using SASL DIGEST-MD5. There is nothing relevant to slapd or the OpenLDAP code here, fix your client if you want these errors to stop. Closing this ITS.

1 0

Fwd: (ITS#6750) About 3rd Party Technical Support Services
by kurt＠OpenLDAP.org 23 Dec '10

23 Dec '10

--Apple-Mail-80--876671303 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Begin forwarded message: > From: "harrybetter" <harrybetter(a)qq.com> > Date: December 22, 2010 10:32:22 PM PST > To: "Kurt Zeilenga" <kurt(a)openldap.org> > Subject: Re: (ITS#6750) About 3rd Party Technical Support Services > x-spam-status: No, score=3D-0.5 required=3D5.0 = tests=3DBAYES_00,DKIM_SIGNED, = FILL_THIS_FORM_FRAUD_PHISH,FREEMAIL_FROM,FROM_EXCESS_BASE64,HTML_MESSAGE, = RCVD_IN_DNSWL_NONE,T_DKIM_INVALID,T_FILL_THIS_FORM_SHORT,T_RP_MATCHES_RCVD= autolearn=3Dno version=3D3.3.1 >=20 > =20 > anwser is below. >=20 > Please provide the URL for your website/webpage to which your listing = should be linked to? > answer : www.seojindsa.kr >=20 > Please provide a URL to a webpage at your website which details = technical support services=20 > which are specifically tailored to users of OpenLDAP Software? (may be = same as the above URL) > answer : www.seojindsa.kr >=20 > Please provide a summary of your current participation in the OpenLDAP = community? > anwser : Provides consultancy, development, training and user support = for OpenLDAP Software in korea, china. > we will convert openldap document by korean, chinese. >=20 > Please provide an email address (possibly yours) at a domain = registered to SeojinDSA we can use to confirm your association with = SeojinDSA?=20 > answer : sjsong(a)seojindsa.kr=20 >=20 > =20 > =20 > ------------------ Original ------------------ > From: "Kurt Zeilenga"<kurt(a)OpenLDAP.org>; > Date: Thu, Dec 16, 2010 11:36 AM > To: "harrybetter"<harrybetter(a)qq.com>; > Cc: "openldap-its"<openldap-its(a)openldap.org>; > Subject: Re: (ITS#6750) About 3rd Party Technical Support Services > =20 >=20 > On Dec 15, 2010, at 5:27 PM, harrybetter(a)qq.com wrote: >=20 > > Full_Name: Jerry Liu > > Version: openldap-2.4.23 > > OS: RedHatLinux EL5 > > URL: ftp://ftp.openldap.org/incoming/ > > Submission from: (NULL) (221.0.151.187) > >=20 > >=20 > > We are SeojinDSA CO,LTD. We sincerely hope to show our company = name and link > > on list of "Technical Support" page. But we do not know how to = apply, I hope > > this reply. >=20 > By filing an ITS with your request, you have applied. >=20 > > SeojinDSA is an emerging leader in the Korean field of = next-generation > > Directory Service(LDAP) and Identity Managerment(IAM:Identity Access > > Management????The company's headquarter is in Seoul.Our Company is = made up of > > experts and thought leaders who are recognized for building = world-class > > Directory Service. >=20 > A couple of questions. >=20 > Please provide the URL for your website/webpage to which your listing = should be linked to? > Please provide a URL to a webpage at your website which details = technical support services which are specifically tailored to users of = OpenLDAP Software? (may be same as the above URL) > Please provide a summary of your current participation in the OpenLDAP = community? > Please provide an email address (possibly yours) at a domain = registered to SeojinDSA we can use to confirm your association with = SeojinDSA? If you do not wish this email to be made public (all = openldap-its(a)openldap.org is public), you may send this email address = directly to me at <kurt(a)openldap.org>. >=20 > (It's okay for the above requested URLs to refer to non-English web = pages.) >=20 > Regards, Kurt --Apple-Mail-80--876671303 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html><head></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; = "> <div> <div>Begin forwarded message:</div> <blockquote type=3D"cite"><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px;">From: "harrybetter" = <<a = href=3D"mailto:harrybetter@qq.com">harrybetter(a)qq.com</a>> </= div><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: = 0px; margin-left: 0px;">Date: December 22, 2010 = 10:32:22 PM PST </div><div style=3D"margin-top: 0px; = margin-right: 0px; margin-bottom: 0px; margin-left: 0px;">To: "Kurt Zeilenga" <<a = href=3D"mailto:kurt@openldap.org">kurt(a)openldap.org</a>> </di= v><div style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px;">Subject: Re: (ITS#6750) = About 3rd Party Technical Support Services </div><div = style=3D"margin-top: 0px; margin-right: 0px; margin-bottom: 0px; = margin-left: 0px;">x-spam-status: = No, score=3D-0.5 required=3D5.0 = tests=3DBAYES_00,DKIM_SIGNED, = FILL_THIS_FORM_FRAUD_PHISH,FREEMAIL_FROM,FROM_EXCESS_BASE64,HTML_MESSAGE, = RCVD_IN_DNSWL_NONE,T_DKIM_INVALID,T_FILL_THIS_FORM_SHORT,T_RP_MATCHES_RCVD= autolearn=3Dno = version=3D3.3.1 </div> <div><includetail> </includetail>= </div> <div> <div style=3D"COLOR: #000"> <div>anwser is = below.Please = provide the URL for your website/webpage to which your listing should be = linked to? answer : <a href=3D"http://www.seojindsa.kr/" = target=3D"_blank">www.seojindsa.kr</a>Please provide a URL to a webpage at your = website which details technical support services which are = specifically tailored to users of OpenLDAP Software? (may be same as the = above URL) answer : <a href=3D"http://www.seojindsa.kr/" = target=3D"_blank">www.seojindsa.kr</a>Please provide a summary of your current = participation in the OpenLDAP community? anwser : Provides = consultancy, development, training and user support for OpenLDAP = Software in korea, china.          = we will convert openldap document by korean, chinese.Please provide an email = address (possibly yours) at a domain registered to SeojinDSA we can use = to confirm your association with SeojinDSA? answer : <a = href=3D"mailto:sjsong@seojindsa.kr" target=3D"_blank">sjsong(a)seojindsa.kr</a> </div> <div> <div> </div> <div> </div> <div style=3D"COLOR: #000"> <div style=3D"PADDING-BOTTOM: 2px; PADDING-LEFT: 0px; PADDING-RIGHT: = 0px; FONT-FAMILY: Arial Narrow; FONT-SIZE: 12px; PADDING-TOP: = 2px">------------------ Original ------------------</div> <div style=3D"PADDING-BOTTOM: 8px; PADDING-LEFT: 8px; PADDING-RIGHT: = 8px; BACKGROUND: #efefef; FONT-SIZE: 12px; PADDING-TOP: 8px"> <div id=3D"menu_sender">From:  "Kurt Zeilenga"<<a = href=3D"mailto:kurt@OpenLDAP.org">kurt(a)OpenLDAP.org</a>>;</div> <div>Date:  Thu, Dec 16, 2010 11:36 AM</div> <div>To:  "harrybetter"<<a = href=3D"mailto:harrybetter@qq.com">harrybetter(a)qq.com</a>>; = </div> <div>Cc:  "openldap-its"<<a = href=3D"mailto:openldap-its@openldap.org">openldap-its(a)openldap.org</a>&gt= ;; </div> <div>Subject:  Re: (ITS#6750) About 3rd Party Technical = Support Services</div></div> <div> </div> On Dec 15, 2010, at 5:27 PM, <a = href=3D"mailto:harrybetter@qq.com">harrybetter(a)qq.com</a> = wrote: > Full_Name: Jerry Liu > Version: = openldap-2.4.23 > OS: RedHatLinux EL5 > URL: <a = href=3D"ftp://ftp.openldap.org/incoming/">ftp://ftp.openldap.org/incoming/= </a> > Submission from: (NULL) (221.0.151.187) > > = >    We are SeojinDSA CO,LTD. We sincerely hope to show = our company name and link > on list of "Technical Support" page. = But we do not know how to apply, I hope > this reply. By = filing an ITS with your request, you have applied. >  =   SeojinDSA is an emerging leader in the Korean field of = next-generation > Directory Service(LDAP) and Identity = Managerment(IAM:Identity Access > Management????The company's = headquarter is in Seoul.Our Company is made up of > experts and = thought leaders who are recognized for building world-class > = Directory Service. A couple of questions. Please provide = the URL for your website/webpage to which your listing should be linked = to? Please provide a URL to a webpage at your website which details = technical support services which are specifically tailored to users of = OpenLDAP Software? (may be same as the above URL) Please provide a = summary of your current participation in the OpenLDAP = community? Please provide an email address (possibly yours) at a = domain registered to SeojinDSA we can use to confirm your association = with SeojinDSA?  If you do not wish this email to be made public = (all <a = href=3D"mailto:openldap-its@openldap.org">openldap-its(a)openldap.org</a> = is public), you may send this email address directly to me at <<a = href=3D"mailto:kurt@openldap.org">kurt(a)openldap.org</a>>. (It's = okay for the above requested URLs to refer to non-English web = pages.) Regards, = Kurt</div></div></div></div></blockquote></div> </body></html>= --Apple-Mail-80--876671303--

1 0

Re: (ITS#6478) slapd crashes with segfault
by hyc＠symas.com 20 Dec '10

20 Dec '10

wolfgang.hummel(a)hp.com wrote: > We had some of this crashes on LDAP slaves in the past: This appears to be due to your custom template overlay. You probably need to check its correctness using a tool like valgrind or Purify. > In /var/log/messages > 2010-12-05T11:22:57.643777+01:00 ts2mstsv001 kernel: 6>slapd[18900000000000= > 0025 rip 0000003be707p 000000 > > Stack trace when crash occurred (search for entry 0xe932208 in back db (BD= > B) response is contained a corrupted address) > #0 0x0000003be7075b50 in strcpy () from /lib64/libc.so.6 > #1 0x00002b5ffe3debeb in template_response (op=3D0xfa01aa0, rs=3D0x4813bc6= > 0) at /usr/include/bits/string3.h:118 > #2 0x00000000004a34eb in over_back_response (op=3D0xfa01aa0, rs=3D0x4813bc= > 60) at ../servers/slapd/backover.c:237 > #3 0x0000000000449865 in slap_response_play (op=3D0xfa01aa0, rs=3D0x4813bc= > 60) at ../servers/slapd/result.c:402 > #4 0x000000000044bfcc in slap_send_search_entry (op=3D0xfa01aa0, rs=3D0x48= > 13bc60) at ../servers/slapd/result.c:887 > #5 0x00000000004b695f in bdb_search (op=3D0xfa01aa0, rs=3D0x4813bc60) at s= > ervers/slapd/back-bdb/search.c:961 > #6 0x00000000004a37c2 in overlay_op_walk (op=3D0xfa01aa0, rs=3D0x4813bc60,= > which=3Dop_search, oi=3D0xe5df160, on=3D0x0) at ../servers/slapd/backover.= > c:669 > #7 0x00000000004a3d58 in over_op_func (op=3D0xfa01aa0, rs=3D0x4813bc60, wh= > ich=3Dop_search) at ../servers/slapd/backover.c:721 > #8 0x000000000043c4e6 in fe_op_search (op=3D0xfa01aa0, rs=3D0x4813bc60) at= > ../servers/slapd/search.c:376 > #9 0x00000000004a37c2 in overlay_op_walk (op=3D0xfa01aa0, rs=3D0x4813bc60,= > which=3Dop_search, oi=3D0xe577ec0, on=3D0x0) at ../servers/slapd/backover.= > c:669 > #10 0x00000000004a3d58 in over_op_func (op=3D0xfa01aa0, rs=3D0x4813bc60, wh= > ich=3Dop_search) at ../servers/slapd/backover.c:721 > #11 0x000000000043cc95 in do_search (op=3D0xfa01aa0, rs=3D0x4813bc60) at ..= > /servers/slapd/search.c:227 > #12 0x0000000000439ff4 in connection_operation (ctx=3D0x4813bdb0, arg_v=3D<= > value optimized out>) at ../servers/slapd/connection.c:1109 > #13 0x000000000043a651 in connection_read_thread (ctx=3D0x4813bdb0, argv=3D= > <value optimized out>) at ../servers/slapd/connection.c:1245 > #14 0x00000000005330a8 in ldap_int_thread_pool_wrapper (xpool=3D0xe546600) = > at ../libraries/libldap_r/tpool.c:685 > #15 0x0000003be7c062e7 in start_thread () from /lib64/libpthread.so.0 > #16 0x0000003be70ce3bd in clone () from /lib64/libc.so.6 > > (gdb) fr 11 > #11 0x000000000043cc95 in do_search (op=3D0xfa01aa0, rs=3D0x4813bc60) at ..= > /servers/slapd/search.c:227 > 227 ../servers/slapd/search.c: No such file or directory. > in ../servers/slapd/search.c > (gdb) p * op > $55 =3D {o_hdr =3D 0xfa01c10, o_tag =3D 99, o_time =3D 1291544577, o_tincr = > =3D 140, o_bd =3D 0x47fb9ea0, o_req_dn =3D {bv_len =3D 41, bv_val =3D 0x102= > 51e00 "ou=3Dcms,ou=3Dprofiles,ou=3Dmmo,c=3Dde,o=3Dvodafone"}, > o_req_ndn =3D {bv_len =3D 41, bv_val =3D 0x10251ee0 "ou=3Dcms,ou=3Dprofil= > es,ou=3Dmmo,c=3Dde,o=3Dvodafone"}, o_request =3D {oq_add =3D {rs_modlist = > =3D 0x2, rs_e =3D 0x500000064}, oq_bind =3D {rb_method =3D 2, > rb_cred =3D {bv_len =3D 21474836580, bv_val =3D 0x0}, rb_edn =3D {bv_= > len =3D 0, bv_val =3D 0x10251fc0 "\020"}, rb_ssf =3D 270868336, rb_mech =3D= > {bv_len =3D 18, > bv_val =3D 0x10251f98 "(uid=3D491710471677)"}}, oq_compare =3D {rs_= > ava =3D 0x2}, oq_modify =3D {rs_mods =3D {rs_modlist =3D 0x2, rs_no_opattrs= > =3D 100 'd'}, rs_increment =3D 0}, oq_modrdn =3D { > rs_mods =3D {rs_modlist =3D 0x2, rs_no_opattrs =3D 100 'd'}, rs_delet= > eoldrdn =3D 0, rs_newrdn =3D {bv_len =3D 0, bv_val =3D 0x10251fc0 "\020"}, = > rs_nnewrdn =3D {bv_len =3D 270868336, > bv_val =3D 0x12<Address 0x12 out of bounds>}, rs_newSup =3D 0x1025= > 1f98, rs_nnewSup =3D 0x0}, oq_search =3D {rs_scope =3D 2, rs_deref =3D 0, r= > s_slimit =3D 100, rs_tlimit =3D 5, > rs_limit =3D 0x0, rs_attrsonly =3D 0, rs_attrs =3D 0x10251fc0, rs_fil= > ter =3D 0x10251f70, rs_filterstr =3D {bv_len =3D 18, bv_val =3D 0x10251f98 = > "(uid=3D491710471677)"}}, oq_abandon =3D { > rs_msgid =3D 2}, oq_cancel =3D {rs_msgid =3D 2}, oq_extended =3D {rs_= > reqoid =3D {bv_len =3D 2, bv_val =3D 0x500000064<Address 0x500000064 out o= > f bounds>}, rs_flags =3D 0, rs_reqdata =3D 0x0}, > oq_pwdexop =3D {rs_extended =3D {rs_reqoid =3D {bv_len =3D 2, bv_val = > =3D 0x500000064<Address 0x500000064 out of bounds>}, rs_flags =3D 0, rs_re= > qdata =3D 0x0}, rs_old =3D {bv_len =3D 270868416, > bv_val =3D 0x10251f70 "=A3"}, rs_new =3D {bv_len =3D 18, bv_val =3D= > 0x10251f98 "(uid=3D491710471677)"}, rs_mods =3D 0x0, rs_modtail =3D 0x0}},= > o_abandon =3D 0, o_cancel =3D 0, o_groups =3D 0x0, > o_do_not_cache =3D 0 '\0', o_is_auth_check =3D 0 '\0', o_dont_replicate = > =3D 0 '\0', o_acl_priv =3D ACL_NONE, o_nocaching =3D 0 '\0', o_delete_glue_= > parent =3D 0 '\0', o_no_schema_check =3D 0 '\0', > o_no_subordinate_glue =3D 0 '\0', o_ctrlflag =3D '\0'<repeats 31 times>,= > o_controls =3D 0xfa01d58, o_authz =3D {sai_method =3D 128, sai_mech =3D {b= > v_len =3D 0, bv_val =3D 0x0}, sai_dn =3D { > bv_len =3D 51, bv_val =3D 0x2aaab89f0a50 "uid=3Dadmin,ou=3Dcms,ou=3Dp= > rofiles,ou=3Dmmo,c=3Dde,o=3Dvodafone"}, sai_ndn =3D {bv_len =3D 51, > bv_val =3D 0x2aaab8a04e20 "uid=3Dadmin,ou=3Dcms,ou=3Dprofiles,ou=3Dmm= > o,c=3Dde,o=3Dvodafone"}, sai_ssf =3D 0, sai_transport_ssf =3D 0, sai_tls_ss= > f =3D 0, sai_sasl_ssf =3D 0}, o_ber =3D 0x2aaac8098630, > o_res_ber =3D 0x0, o_callback =3D 0x4813a740, o_ctrls =3D 0x0, o_csn =3D = > {bv_len =3D 0, bv_val =3D 0x0}, o_private =3D 0x0, o_extra =3D {slh_first = > =3D 0x4813a480}, o_next =3D {stqe_next =3D 0x0}} > (gdb) p * rs > $56 =3D {sr_type =3D REP_SEARCH, sr_tag =3D 0, sr_msgid =3D 0, sr_err =3D 0= > , sr_matched =3D 0x0, sr_text =3D 0x0, sr_ref =3D 0x0, sr_ctrls =3D 0x0, sr= > _un =3D {sru_search =3D {r_entry =3D 0xe932208, > r_attr_flags =3D 17, r_operational_attrs =3D 0x0, r_attrs =3D 0x10251= > fc0, r_nentries =3D 0, r_v2ref =3D 0x0}, sru_sasl =3D {r_sasldata =3D 0xe93= > 2208}, sru_extended =3D { > r_rspoid =3D 0xe932208 "\2002\a", r_rspdata =3D 0x11}}, sr_flags =3D = > 4} > > Frame analysis (function called) > (gdb) fr 0 > #0 0x0000003be7075b50 in strcpy () from /lib64/libc.so.6 > (gdb) info registers > rax 0x1 1 > rbx 0x1 1 > rcx 0x3 3 > rdx 0x47f37648 1207137864 > rsi 0x25 37 > rdi 0x47f37648 1207137864 > rbp 0x47f265e4 0x47f265e4 > rsp 0x47a25518 0x47a25518 > r8 0xfefefefefefefeff -72340172838076673 > r9 0x4813bdd0 1209253328 > r10 0x2aaab8000020 46912719814688 > r11 0x206 518 > r12 0xe5e2ae0 241052384 > r13 0x0 0 > r14 0xfa01aa0 262150816 > r15 0x6 6 > rip 0x3be7075b50 0x3be7075b50<strcpy+16> > eflags 0x10217 [ CF PF AF IF RF ] > cs 0x33 51 > ss 0x2b 43 > ds 0x0 0 > es 0x0 0 > fs 0x63 99 > gs 0x0 0 > (gdb) disas=20 > Dump of assembler code for function strcpy: > 0x0000003be7075b40<strcpy+0>: mov %rsi,%rcx > 0x0000003be7075b43<strcpy+3>: and $0x7,%ecx > 0x0000003be7075b46<strcpy+6>: mov %rdi,%rdx > 0x0000003be7075b49<strcpy+9>: je 0x3be7075b66<strcpy+38> > 0x0000003be7075b4b<strcpy+11>: neg %ecx > 0x0000003be7075b4d<strcpy+13>: add $0x8,%ecx > 0x0000003be7075b50<strcpy+16>: mov (%rsi),%al > > rsi is a parameter of strcpy.=20 > rsi should be an address but we have 0x25 which is an invalid address. So c= > rash 2010-12-05T11:22:57.643777+01:00 ts2mstsv001 kernel: 6>slapd[189000000= > 000000025 rip 0000003be707p 000000 > rsi is not modified in strcpy, then, check rsi calculation in template_resp= > onse > > (gdb) fr 1 > #1 0x00002b5ffe3debeb in template_response (op=3D0xfa01aa0, rs=3D0x4813bc6= > 0) at /usr/include/bits/string3.h:118 > 118 return __builtin___strcpy_chk (__dest, __src, __bos (__dest)); > (gdb) info registers > rax 0x1 1 > rbx 0x1 1 > rcx 0x3 3 > rdx 0x47f37648 1207137864 > rsi 0x25 37 > rdi 0x47f37648 1207137864 > rbp 0x47f265e4 0x47f265e4 > rsp 0x47a25520 0x47a25520 > r8 0xfefefefefefefeff -72340172838076673 > r9 0x4813bdd0 1209253328 > r10 0x2aaab8000020 46912719814688 > r11 0x206 518 > r12 0xe5e2ae0 241052384 > r13 0x0 0 > r14 0xfa01aa0 262150816 > r15 0x6 6 > rip 0x2b5ffe3debeb 0x2b5ffe3debeb<template_response+3787> > eflags 0x10217 [ CF PF AF IF RF ] > cs 0x33 51 > ss 0x2b 43 > ds 0x0 0 > es 0x0 0 > fs 0x63 99 > gs 0x0 0 > > (gdb) disass 0x00002b5ffe3debeb > Dump of assembler code for function template_response: > ... > 0x00002b5ffe3deb86<template_response+3686>: lea 0x5010c4(%rsp),%rbp > 0x00002b5ffe3deb8e<template_response+3694>: xor %r15d,%r15d > 0x00002b5ffe3deb91<template_response+3697>: xor %r13d,%r13d > 0x00002b5ffe3deb94<template_response+3700>: mov %rdx,0x30(%rsp) > 0x00002b5ffe3deb99<template_response+3705>: mov %rcx,0x28(%rsp) > 0x00002b5ffe3deb9e<template_response+3710>: jmp 0x2b5ffe3dec07<temp= > late_response+3815> > 0x00002b5ffe3deba0<template_response+3712>: mov 0x511900(%rsp),%rax > 0x00002b5ffe3deba8<template_response+3720>: test %rax,%rax > 0x00002b5ffe3debab<template_response+3723>: je 0x2b5ffe3debeb<temp= > late_response+3787> > 0x00002b5ffe3debad<template_response+3725>: mov 0x8(%rax),%rsi > 0x00002b5ffe3debb1<template_response+3729>: test %rsi,%rsi > 0x00002b5ffe3debb4<template_response+3732>: je 0x2b5ffe3debeb<temp= > late_response+3787> > 0x00002b5ffe3debb6<template_response+3734>: cmpq $0x7ff,(%rax) > 0x00002b5ffe3debbd<template_response+3741>: ja 0x2b5ffe3df966<temp= > late_response+7238> > 0x00002b5ffe3debc3<template_response+3747>: movslq 0x512124(%rsp),%rdi > 0x00002b5ffe3debcb<template_response+3755>: mov 0x28(%rsp),%rdx > 0x00002b5ffe3debd0<template_response+3760>: lea 0x1(%rdi),%eax > 0x00002b5ffe3debd3<template_response+3763>: shl $0xb,%rdi > 0x00002b5ffe3debd7<template_response+3767>: lea 0x808(%rdi,%rdx,1),%= > rdi > 0x00002b5ffe3debdf<template_response+3775>: mov %eax,0x512124(%rsp) > 0x00002b5ffe3debe6<template_response+3782>: callq 0x2b5ffe3dc688<strc= > py@plt> > 0x00002b5ffe3debeb<template_response+3787>: lea 0x1(%r13),%eax > (gdb) p *(long **)($rsp+0x511900) > $17 =3D (long *) 0x2aaab4859d00 > (gdb) x/20x 0x2aaab4859d00 > 0x2aaab4859d00: 0x00000000 0x00000000 0x00000025 0x00000000 > > rsi is broken, not a valid address. > > > Wolfgang Hummel > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6747) LDAP_CONNECTIONLESS nitpicks
by Kurt＠OpenLDAP.org 20 Dec '10

20 Dec '10

On Dec 20, 2010, at 2:51 AM, Hallvard B Furuseth wrote: > Kurt(a)OpenLDAP.org writes: >> My nitpick regarding this feature is that it still exists. :-) >=20 > Actually there still are complaints that OpenLDAP has lost cldap - = from > people trying to get Windows/Samba to cooperate with OpenLDAP. That's MSCLDAP not CLDAP. Just another nitpick. > Windows > apparently sends a cldap message as an "LDAP ping". > http://ubuntuforums.org/showthread.php?t=3D673292 > http://onemansjourneyintolinux.blogspot.com/2008/06/cldap.html >=20 > Personally I only compiled it since it exists - I randomize my config > options a bit now and then for testing. I suggest that those that care about MSCLDAP or CLDAP, submit patches to = correct any issues they with its implementation. Continuing bitrot, to = me, is an indication that the code should be removed. -- Kurt=

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs