openldap-bugs

openldap-bugs@openldap.org

1 participants
21000 discussions

Re: (ITS#6620) ppolicy: pwdChangedTime/userPassword delete issue.
by hyc＠symas.com 02 Dec '10

02 Dec '10

h.b.furuseth(a)usit.uio.no wrote: > Thanks. Applied a similar patch to cvs HEAD, after fixing a memory leak. > > Reproducing the bug: > > userPassword can exist without pwdChangedTime if you bypass > ppolicy: Use slapadd to add an entry with userPassword, or add > it to a subtree with no policy and then configure a policy. > > Then set up ppolicy and use ldapmodify to delete userPassword. > In that case the correct fix is to skip the pwdChangedTime attribute completely. The ppolicy spec says that entries without pwdChangedTime are not subject to password expiration at all. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6731) Scrambled error strings from back-ldif
by hyc＠symas.com 02 Dec '10

02 Dec '10

h.b.furuseth(a)usit.uio.no wrote: > Full_Name: Hallvard B Furuseth > Version: 2.4.23 > OS: > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (193.157.203.245) > Submitted by: hallvard > > > apply_modify_to_entry() and ldif_back_add() can return with > rs->sr_text pointing into the stack, at textbuf[]. Fixing. > It is not an error in ldif_back_add() since rs->sr_text is only used by send_ldap_result(). Its value upon return from ldif_back_add is irrelevant. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6727) ./scripts/test047-ldap: line 599: 26709 Segmentation fault
by michael＠stroeder.com 02 Dec '10

02 Dec '10

I can still reproduce this pretty soon when running this test with several iterations. testrun/slapd.3.log ends with: connection_close: conn=1014 sd=9 =>ldap_back_conn_destroy: fetching conn 1014 =>ldap_back_conn_destroy: fetching conn 1014 =>ldap_back_conn_destroy: fetching conn 1014 conn=1014 fd=9 closed (connection lost) daemon: shutdown requested and initiated. slapd shutdown: waiting for 0 operations/tasks to finish lt-slapd shutdown: initiated lt-slapd destroy: freeing system resources. ldap_free_connection 1 1 ldap_send_unbind ber_flush2: 7 bytes to sd 13 ldap_free_connection: actually freed ldap_free_connection 1 1 ldap_send_unbind ber_flush2: 7 bytes to sd 11 ldap_free_connection: actually freed ldap_free_connection 1 1 ldap_send_unbind ber_flush2: 7 bytes to sd 12 ldap_free_connection: actually freed ldap_free_connection 1 1 ldap_send_unbind ber_flush2: 7 bytes to sd 10 ldap_free_connection: actually freed slapd stopped. lt-slapd: at.c:242: at_delete_names: Assertion `air != ((void *)0)' failed.

1 0

(ITS#6732) ber_errno issues in liblber/memory.c
by h.b.furuseth＠usit.uio.no 02 Dec '10

02 Dec '10

Full_Name: Hallvard B Furuseth Version: 4.2.23 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (129.240.6.233) Submitted by: hallvard With LDAP_MEMORY_DEBUG, ber_memalloc_x() and ber_memcalloc_x() do not set ber_errno = LBER_ERROR_MEMORY on failure. OTOH a number of memory.c functions set ber_errno = LBER_ERROR_MEMORY when they do not need to, after ber_memalloc & co already set it. Fixing.

1 0

Re: (ITS#6620) ppolicy: pwdChangedTime/userPassword delete issue.
by m.d.t.evans＠qmul.ac.uk 02 Dec '10

02 Dec '10

On Thu, 2010-12-02 at 12:24 +0100, Hallvard B Furuseth wrote: > Thanks. Applied a similar patch to cvs HEAD, after fixing a memory leak. > > Reproducing the bug: > > userPassword can exist without pwdChangedTime if you bypass > ppolicy: Use slapadd to add an entry with userPassword, or add > it to a subtree with no policy and then configure a policy. > > Then set up ppolicy and use ldapmodify to delete userPassword. > Yes. I agree with that. That's precisely how we discovered the problem. Thanks, Martin. -- Dr Martin DT Evans, Computing Services/Central Servers.

1 0

Re: (ITS#6620) ppolicy: pwdChangedTime/userPassword delete issue.
by h.b.furuseth＠usit.uio.no 02 Dec '10

02 Dec '10

Thanks. Applied a similar patch to cvs HEAD, after fixing a memory leak. Reproducing the bug: userPassword can exist without pwdChangedTime if you bypass ppolicy: Use slapadd to add an entry with userPassword, or add it to a subtree with no policy and then configure a policy. Then set up ppolicy and use ldapmodify to delete userPassword. -- Hallvard

1 0

Re: (ITS#6620) ppolicy: pwdChangedTime/userPassword delete issue.
by m.d.t.evans＠qmul.ac.uk 02 Dec '10

02 Dec '10

On Thu, 2010-12-02 at 10:04 +0100, Hallvard B Furuseth wrote: > Thank you. Please also send an IPR notice for the patch, according to > > http://www.openldap.org/devel/contributing.html#n-openldap > Thanks. Done (I think). Kind regards, Martin. -- Dr Martin DT Evans, Computing Services/Central Servers.

1 0

Re: (ITS#6620) ppolicy: pwdChangedTime/userPassword delete issue.
by m.d.t.evans＠qmul.ac.uk 02 Dec '10

02 Dec '10

This patch file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by MDT Evans <m.d.t.evans(a)qmul.ac.uk>. I have not assigned rights and/or interest in this work to any party. I, MDT Evans, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. -- Dr Martin DT Evans, Computing Services/Central Servers.

1 0

Re: (ITS#6641) Syncrepl failure with 'overlay unique'
by ondrej.kuznik＠acision.com 02 Dec '10

02 Dec '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 11/09/2010 03:50 PM, ondrej.kuznik(a)acision.com wrote: > I have put a preliminary version of patches that modify the unique > overlay here > ftp://ftp.openldap.org/incoming/ondrej-kuznik-20101109-unique_bypass_v1.tgz > > They add a new configuration attribute olcUniqueAllowManageBypass (it is > prohibitively long for a name, though) that, if set to TRUE, triggers > the uniqueness checks not to be performed if the operation has manage > privilegies on the entry. There are three separate patches, > configuration code regarding the new attribute, the checks in > unique_{add,modify,modrdn} and manpage modifications. > After a conversation with Howard, I have modified the patches so that the overlay check for the ManageDsaIt control instead. That control should be set for each operation coming from replication. The patches are here: ftp://ftp.openldap.org/incoming/ondrej-kuznik-20101202-unique_bypass_v2.tgz Is there anything else that comes to mind? Again the IPR notice: The attached modifications to OpenLDAP Software are subject to the following notice: Copyright 2010 Acision Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkz3cLcACgkQ9GWxeeH+cXuKBACfSvRQJvNWpVm16pWhJ3wfAxH2 JBwAn3CDasTgcMONMSFyIaqH0CZpv1MN =YaoF -----END PGP SIGNATURE----- This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

1 0

(ITS#6731) Scrambled error strings from back-ldif
by h.b.furuseth＠usit.uio.no 02 Dec '10

02 Dec '10

Full_Name: Hallvard B Furuseth Version: 2.4.23 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (193.157.203.245) Submitted by: hallvard apply_modify_to_entry() and ldif_back_add() can return with rs->sr_text pointing into the stack, at textbuf[]. Fixing.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs