openldap-bugs January 2008

openldap-bugs@openldap.org

36 participants
144 discussions

(ITS#5323) dyngroup.c:dgroup_cf() bug
by h.b.furuseth＠usit.uio.no 10 Jan '08

10 Jan '08

Full_Name: Hallvard B Furuseth Version: HEAD, RE24 OS: URL: Submission from: (NULL) (129.240.6.233) Submitted by: hallvard overlays/dyngroup.c:dgroup_cf() has some strange LDAP_MOD_DELETE code: app = (adpair **)&on->on_bi.bi_private; for (...; ...; ..., app = &ap->ap_next) { ap = *app; } *app = ap->ap_next; Last statement is a no-op, since *app == *(&ap->ap_next) == ap->ap_next. I'm not sure what it's intended to do. Also the first statement makes the void* object bi_private be accessed as an adpair* object. Breaks the 'strict aliasing' rules, so I guess it can miscompile. To avoid that, start the code with something like ap = on->on_bi.bi_private; app = ≈

1 0

Re: (ITS#5321) slapindex fails to create cn=config from configuration file
by hyc＠symas.com 10 Jan '08

10 Jan '08

joshua(a)itsecureadmin.com wrote: > Quanah Gibson-Mount wrote: >> --On Thursday, January 10, 2008 9:09 PM +0000 joshua(a)itsecureadmin.com >>> Full_Name: Joshua Miller >>> Version: 2.4.7 >>> OS: CentOS 5 >>> URL: ftp://ftp.openldap.org/incoming/ >>> Submission from: (NULL) (198.134.96.10) >> What makes you think you should be using slapindex to do this? > > > The admin guide suggests that any slap* command should do this: > > http://www.openldap.org/doc/admin24/slapdconf2.html#cn=config > > > Also, the slapd-config man page: > > Alternatively, an existing slapd.conf file can be converted to > the new format using slapd or any of the slap tools: > slaptest -f /etc/openldap/slapd.conf -F ETCDIR/slapd.d The docs are incomplete. slapd or slaptest will always work; the other tools (slapadd/slapcat/slapindex) don't actually invoke the config database's startup routine unless you're explicitly operating on the config backend therefore the conversion won't occur in general. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5322) slaptest exits on seg fault (SIGSEGV) if id2entry.bdb does not exist
by joshua＠itsecureadmin.com 10 Jan '08

10 Jan '08

Full_Name: Joshua Miller Version: 2.4.7 OS: CentOS 5 URL: http://ditree.com/work/gdb.ol2.4.7.out Submission from: (NULL) (198.134.96.10) When issuing slaptest prior to executing slapd to generate an id2entry.bdb file, slaptest/slapindex exits with a segmentation fault (SIGSEGV). Use case: user installs OpenLDAP, generates a configuration file, slapd.conf. User decides to generate cn=config prior to running slapd. User receives seg fault through running slaptest to perform this operation. Steps to reproduce: * install openldap 2.4.7, using berkley db 4.6 * create suitable slapd.conf * attempt to validate the configuration file using the following command: slaptest -f slapd.conf Expected results: Success Actual results: Segmentation Fault (SIGSEGV). Possibly useless gdb output located at: http://ditree.com/work/gdb.ol2.4.7.out

1 0

Re: (ITS#5321) slapindex fails to create cn=config from configuration file
by joshua＠itsecureadmin.com 10 Jan '08

10 Jan '08

Quanah Gibson-Mount wrote: > --On Thursday, January 10, 2008 9:09 PM +0000 joshua(a)itsecureadmin.com >> Full_Name: Joshua Miller >> Version: 2.4.7 >> OS: CentOS 5 >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (198.134.96.10) > > What makes you think you should be using slapindex to do this? The admin guide suggests that any slap* command should do this: http://www.openldap.org/doc/admin24/slapdconf2.html#cn=config Also, the slapd-config man page: Alternatively, an existing slapd.conf file can be converted to the new format using slapd or any of the slap tools: slaptest -f /etc/openldap/slapd.conf -F ETCDIR/slapd.d Thanks, -- Joshua M. Miller - RHCE,VCP

1 0

Re: (ITS#5321) slapindex fails to create cn=config from configuration file
by quanah＠zimbra.com 10 Jan '08

10 Jan '08

--On Thursday, January 10, 2008 9:09 PM +0000 joshua(a)itsecureadmin.com wrote: > Full_Name: Joshua Miller > Version: 2.4.7 > OS: CentOS 5 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (198.134.96.10) > > > OL Version 2.4.7 > Berkely DB 4.6 > OS CentOS 5 > > Command: slapindex What makes you think you should be using slapindex to do this? --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#5321) slapindex fails to create cn=config from configuration file
by joshua＠itsecureadmin.com 10 Jan '08

10 Jan '08

Full_Name: Joshua Miller Version: 2.4.7 OS: CentOS 5 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (198.134.96.10) OL Version 2.4.7 Berkely DB 4.6 OS CentOS 5 Command: slapindex ISSUE: When attempting to generate cn=config from a configuration file using slapindex, no cn=config is generated: # cd /etc/openldap # mkdir slapd.d # /usr/sbin/slapindex -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d # echo $? 0 Program exits without error. # ls /etc/openldap/slapd.d Subsequently, running this command immediately after generates the appropriate cn=config: # slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d config file testing succeeded # ll slapd.d total 8 drwxr-x--- 4 root root 4096 Jan 10 13:07 cn=config -rw------- 1 root root 1097 Jan 10 13:07 cn=config.ldif #

1 0

Re: (ITS#5320) bug on the filter functionnality =*
by quanah＠zimbra.com 10 Jan '08

10 Jan '08

--On Thursday, January 10, 2008 3:31 PM +0000 jpgressard(a)hotmail.com wrote: > I tested the same query on the version 2.4.6 and it was working. > Furthermore, if I amend the query to (&(sn=XXX*)(givenName=D*)), or > (sn=XXX*) I find the entry. As noted when 2.4.7 was released, you want to regenerate your indices. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#5320) bug on the filter functionnality =*
by h.b.furuseth＠usit.uio.no 10 Jan '08

10 Jan '08

jpgressard(a)hotmail.com writes: > The query (&(sn=XXXXXX*)(givenName=*))can not find the entry below. Does it help to stop slapd, run sbin/slapindex, and restart slapd? You need to do that if you edit slapd.conf's index statements, and possibly when you upgrade. -- Hallvard

1 0

(ITS#5320) bug on the filter functionnality =*
by jpgressard＠hotmail.com 10 Jan '08

10 Jan '08

Full_Name: Jean-Paul Gressard Version: 2.4.7 OS: Madrake distribution (v10) URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (158.232.2.8) The query (&(sn=XXXXXX*)(givenName=*))can not find the entry below. dn: uid=XXXXXXDDDDD14977,l=Geneva,c=CH,o=who,o=directoryroot sn: XXXXXX objectClass: inetOrgPerson uid: XXXXXXDDDDD14977 telephoneNumber: 14977 o: who givenName: DDDDD cn: XXXXXX, DDDDD I tested the same query on the version 2.4.6 and it was working. Furthermore, if I amend the query to (&(sn=XXX*)(givenName=D*)), or (sn=XXX*) I find the entry.

1 0

Re: (ITS#5316) authzTo unevaluated in 2.4.7
by hyc＠symas.com 10 Jan '08

10 Jan '08

m.erde(a)gmx.net wrote: > First, I actually meant of course "authzid" in ITS > > After some tests, I found out that the filter expression in authzTo- > Attribute of the authentication entity caused the Problems: While > > authzTo: ldap:///ou=users,ou=accounts,dc=dom??one?(uid=*) > > does not work (with uid as rdn), > > authzTo: ldap:///ou=users,ou=accounts,dc=dom??one?(objectClass=*) > > does. Regenerate your presence index on uid. http://www.openldap.org/lists/openldap-software/200712/msg00193.html This ITS will be closed. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

← Newer
1
...
6
7
8
9
10
11
12
...
15
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs January 2008