openldap-bugs

openldap-bugs@openldap.org

1 participants
21001 discussions

Re: (ITS#5044) slapd: rdwr.c:256: ldap_pvt_thread_rdwr_runlock: Assertion `rw->ltrw_r_active >= 0' failed
by h.b.furuseth＠usit.uio.no 13 Jul '07

13 Jul '07

Do you use "database ldbm" in slapd.conf? The LDAP Compare operation can make it crash that way. (Since OpenLDAP 2.3.16; back-ldbm/compare.c rev 1.53.) I've committed a fix: http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldbm/Attic/comp… BDB more reliable. LDBM has been removed in OpenLDAP 2.4. -- Regards, Hallvard

1 0

Re: (ITS#5044) slapd: rdwr.c:256: ldap_pvt_thread_rdwr_runlock: Assertion `rw->ltrw_r_active >= 0' failed
by hyc＠symas.com 13 Jul '07

13 Jul '07

alexander.kasper(a)ruhr-uni-bochum.de wrote: > Full_Name: Alexander Kasper > Version: @(#) $OpenLDAP: slapd 2.3.36 (Jul 6 2007 14:15:37) $ > OS: Linux version 2.6.18-xendomU (root@localhost) (gcc version 4.1.1 (Gentoo 4.1.1-r3)) #3 SMP > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (134.147.48.236) > > > I cannot clearly reproduce the error/assert > > slapd: rdwr.c:256: ldap_pvt_thread_rdwr_runlock: Assertion `rw->ltrw_r_active >= > 0' failed > > since the slapd dies randomly. I'm runnig it on a virtual xen userDomain in > 64Bit mode. > > plz tell me, which debug-level would be fine, since -d 65535 produce 10MB output > for one search, and as i said slapd dies randomly. There are reports that Xen does not properly support mutexes. As such, it cannot be used to run slapd. http://www.openldap.org/lists/openldap-software/200603/msg00207.html -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5044) slapd: rdwr.c:256: ldap_pvt_thread_rdwr_runlock: Assertion `rw->ltrw_r_active >= 0' failed
by alexander.kasper＠ruhr-uni-bochum.de 13 Jul '07

13 Jul '07

Full_Name: Alexander Kasper Version: @(#) $OpenLDAP: slapd 2.3.36 (Jul 6 2007 14:15:37) $ OS: Linux version 2.6.18-xendomU (root@localhost) (gcc version 4.1.1 (Gentoo 4.1.1-r3)) #3 SMP URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (134.147.48.236) I cannot clearly reproduce the error/assert slapd: rdwr.c:256: ldap_pvt_thread_rdwr_runlock: Assertion `rw->ltrw_r_active >= 0' failed since the slapd dies randomly. I'm runnig it on a virtual xen userDomain in 64Bit mode. plz tell me, which debug-level would be fine, since -d 65535 produce 10MB output for one search, and as i said slapd dies randomly. greets Alex

1 0

Re: (ITS#5028) incomplete slapcat docs
by ghenry＠suretecsystems.com 13 Jul '07

13 Jul '07

<quote who="ghenry(a)suretecsystems.com"> > <quote who="h.b.furuseth(a)usit.uio.no"> >> hyc(a)symas.com writes: >>> steve(a)stevenwills.com wrote: >>>> The slapcat man page says in the Limitations section: >>>> >>>> In general, your slapd(8) should not be running (at least, not >>>> in >>>> read-write mode) when you do this to ensure consistency of the >>>> database. >>>> (...) >>> Given that back-ldbm has been deleted for 2.4, I guess we can just >>> delete this sentence. >> >> It could produce garbage data with back-ldif, and with some foreign >> database module. I think it should say it's safe with bdb (and null). >> Could copy it to the slapd-bdb(5) too. (I don't suggest to make >> slapcat(8) refer the user to that, since there is only one example >> anyway.) > > Obviously hdb too. Would it produce garbage on 2.4? Do we want to do anything with this for .37? > >> >> -- >> Regards, >> Hallvard >> >> >> > > >

1 0

Re: (ITS#5043) double free in slapo-rwm when rewriting search filters
by ando＠sys-net.it 12 Jul '07

12 Jul '07

Fixed in HEAD/re23 Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

1 0

(ITS#5043) double free in slapo-rwm when rewriting search filters
by ando＠sys-net.it 12 Jul '07

12 Jul '07

Full_Name: Pierangelo Masarati Version: HEAD/re23 OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.72.89.40) Submitted by: ando See subject; a fix is coming.

1 0

(ITS#5042) Contribution: Active Directory Password Cache
by s.hetze＠linux-ag.de 12 Jul '07

12 Jul '07

Full_Name: Sebastian Hetze Version: 2.3.30 OS: Linux URL: ftp://ftp.openldap.org/incoming/Sebastian-Hetze-pgk-070712.tgz Submission from: (NULL) (212.21.78.130) Hi *, in your FTP incoming you find a piece of software that we would like to contribute to the slapd-modules collection. We hope you find it useful and we would very much like to receive feedback about useability, ideas for improvements and (in the very unlikely case of occurance ;-) bugreports and fixes. Best regards Sebastian Hetze ------------------------------------------------------------------------------------ Active Directory Password Cache =============================== Active Directory does not provide any means to read user credentials on any public API. It is possible, to install additional libraries as password sniffer to catch and forward cleartext passwords on changes. In case you cannot or simply dont want to install such libraries, the Active Directory Password Cache overlay is your option. The Active Directory Password Cache overlay allows to mirror user account credentials without any modification on the AD server. It only takes one occasional simple bind authentication against the OpenLDAP server. If the credential has not been mirrored yet, the overlay uses the krbPrincipalName and the password provided by the user to perform a Kerberos init against the Active Directory. A successful Kerberos init guarantees a correct password for this principal, and therefor the bind finally succeeds. Within this overlay operation, the password gets encrypted with the default OpenLDAP hash alorithm and stored as userPassword attribute. There is an option to update the sambaNTPassword also (using code borrowed from Howard Chu's smbk5pwd overlay). All following simple bind authentications will first try these cached credentials, making the OpenLDAP server independent from AD. In case the user changes its password on the Active Directory server, the old password stays valid in OpenLDAP until the user first presents the new password for an simple bind. Within this bind operation, the overlay performs another Kerberos init and updates the cached credentials in OpenLDAP.

1 0

Can't delete user using DN (Error 32) or add user using DN (Error 68)
by Chase Putans 12 Jul '07

12 Jul '07

I am not sure this is actually a bug, but I figure I will submit this anyways. We had a power outage some time ago, and the bdb files got corrupted. I ran a slapindex after shutting down and it seems one entry is now missing. I have tried re-adding it, but when I do that, I get an error that this entry already exists. When I try and delete with that particular DN, it says that it does not exist. This is openldap 2.2.29-1 installed via Yum on FC4. [root@PDC]# ldapadd -D "<ROOT DN>" -x -W -f entrymods Enter LDAP Password: adding new entry "uid=<username>,ou=People,dc=3sixtygroup,dc=com" ldap_add: Already exists (68) [root@PDC]# ldapdelete -D "<ROOT DN>" -x -W -f entrymods2 Enter LDAP Password: Delete Result: No such object (32) Matched DN: ou=People,dc=3sixtygroup,dc=com Contents of entrymods is as follows: dn: uid=<username>,ou=People,dc=3sixtygroup,dc=com uid: <username> objectClass: top objectClass: person objectClass: organizationalPerson objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: sambaSamAccount cn: <username> sn: <username> givenName: <username> uidNumber: <uidnumber> gidNumber: <gidnumber> homeDirectory: /home/<username> loginShell: /bin/bash gecos: System User sambaLogonTime: 0 sambaLogoffTime: 2147483647 displayName: <username> sambaSID: <> sambaPrimaryGroupSID: <> sambaLogonScript: scripts\logon.bat sambaHomePath: \\PDC\<username> sambaHomeDrive: H: sambaAcctFlags: [U] Contents of entrymods2: uid=<username>,ou=People,dc=3sixtygroup,dc=com changetype: delete Any help would be much appreciated. Thanks. -- Chase Putans Systems Administrator / Programmer / Web Developer / Support The 3Sixty Group http://3sixtygroup.com Ph: 800-440-3967 Fax: 800-453-9683

2 4

Re: (ITS#4986) manageDSAit might control cause problems in database selection
by hyc＠symas.com 11 Jul '07

11 Jul '07

hyc(a)symas.com wrote: > Thinking back, I think the idea here is that you might have a set of nested > databases connected by referral entries. E.g., > > database ldbm > suffix dc=sub,dc=example,dc=com > > database ldbm > suffix dc=example,dc=com > > If you had an referral entry in the superior DB that pointed to the sub > database, you would need the manageDSAit control to be able to operate on the > referral entry. > > None of this really makes sense post 2.1 since subordinate/glue makes it > superfluous. > I'm going to rip all of that out. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#4981) Try -lpthread before -pthread
by rra＠stanford.edu 11 Jul '07

11 Jul '07

Quanah Gibson-Mount <quanah(a)zimbra.com> writes: > I believe the circumstances that caused this ITS to be opened have > changed, is that correct? Yes, the underlying toolchain bug is now fixed and the ITS can be closed. Thanks for the check! -- Russ Allbery (rra(a)stanford.edu) <http://www.eyrie.org/~eagle/>

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs