Re: (ITS#5709) slapd sync provider skips some objects
by sylvain.thomas＠gmail.com
------=_Part_18730_5320025.1224681987183
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Hi,
Unfortunately the release 2.4.12 does not fix the replication problem
exposed in this ITS.
I send you two test files to reproduce the problem easily :
Copy the file test018-parallel-import in the directory tests/scripts/
of the release 2.4.12. This file is a modified version of the script
test018-syncreplication-persist importing two LDIF files in parallel.
It shows that, in the case of simultaneous writes, the sync provider
skips some events.
Copy the file test-parallel.ldif joined here in the directory tests/data/.
Change directory to tests/, then try the following :
./run test018-parallel-import
You will see that the test fails very often (it fails more often on a
rapid server !)
This is a real issue and is worth to be studied seriously.
Best Regards
Sylvain Thomas
------=_Part_18730_5320025.1224681987183
Content-Type: application/zip; name=test018-parallel-import.zip
Content-Transfer-Encoding: base64
X-Attachment-Id: file0
Content-Disposition: attachment; filename=test018-parallel-import.zip
UEsDBBQAAgAIAPRiVjmc9uFlHwoAALYmAAAXAAAAdGVzdDAxOC1wYXJhbGxlbC1pbXBvcnTtWtl3
2kYXf0Z/xQ3mxElrNhtah8TuJwNOSLHhAE5Oz+mLkAaYWGj0zUjG9K/vvaMFgbHjtc1D/WC0zNy5
y+9uM9p5BeUx98pqZuxAoeczr9sy+w3wL6dl17H8csBUoMrKltzHX7qrVA+LaunZkvkut62AC6/o
M6m4CvauoFo6OCztlw5gv1I5LFf2y9Uq7B809n9p1KtwGcoA2tc+FIydHRjNuIKFkJeAv76Fr8QE
EhZgKCbBwpIMPsyCwG+Uy4vFoiTwLbFVEnJaPi4hFSLUFP5S8uksgOq7d4dFWhmJsxWtUxF6juaU
poDpuqDHK5BMMXnFnITUgDkoh+TjkEaD5TkQKgbcAyVCaTP9BBVmySVMhJyrPVjwYAZC6l8RBkRl
Lhw+iXWzByQEKmjOg4A5IDx3CZYCK8Thkv+Fj8ZLCDLsEoV+OEblQpfbzFMs4c4EG0UlNQWkOzd6
S+qzrizuWmNXs0rEJhyvu51m+3zYjp8RhUD4RZddMRccLpkdCBmTY7AmuJDItxsw6aEQOHyJt1q0
rDUShrU1YmZKs2DuomUMjlQRLZAvnJjN39vnrTy8OoL82Bnn4fXrre9m9O49MeMZOWbPBORHNMwR
TIEnAlCh7wvESToNh13zACrGhBtGNEOGnse9KThswj2mSmqWN0pQGA6arc4gBfLq7YrTwvCP82Z/
0PsCR0AA96W48kTEDyQMDWPkA73lDpMgrph0raVmMDXDXkRSXXLfZ06WTzCM+SUqH4roBqP2cIRs
QaF1gj/V+LdmGGhu0LJnvKyBz4qgAvIUXN0JbSYzj2zhqXAeP/KFH7pWwDR3QC4TPWaSUItgnrMY
pahawrTDXIbw1KMsBOrcDxAs0ZgIngl9eCPZhElpuYR6e2Zx762eJhniB7EF6GrW2FKZxfUStpj7
5AvWFKegaOzaRwQi/tEJQzdQKHRswyEJREZMxATlWj75Doya/XKnDxEM+r3BqFoqlbSFm73z09NO
d9QepPiAwlnvvDPqDVon8IEwcGYO8T2NhONoRtUoDLtmvwXFSfwAijMoXAw6eOFAofuli2bqnHXO
P9KUbu8jxrPj11V4bfQ7raPCqxV8vpqdEeG4kmAY8E8LhCOR2U5LP5HMcjB2CMLs751uF58Pj/L0
Om8YymXMh2qiiAtFWiANKmZJe0YmsWfMvsQFrGBTPRgHYvRrnaClgZPvVwB5hgOoQf09OpORK5DX
DtvmoPkJigq0rYpjdMdYXXmtg26vaXY/9YYjDVWta/jTyOV2xfgbGs52LaWOftpFtaA7XZW9EMMq
qcbIDZpHhd+MXKqZQRMyasnlxqiDSyOHCoi96qvFtb3roBjizFEUXGOpUGQNcC1TLlJQ3XCExzKu
iytkNR+TzShugo6JUHuDI9++QjrRNNL/sD340h4Mab4nKDRdchSk+OmiH70n+8T+i5MzkWZlHMvR
bGJgIJeLnSVg12QhDDTXwLwAA20cmhOraYG0KcwW4q9F+jfPzY/tQev8dgsUF3hlDodfWwjpP7Ut
O6eI8Pag3Wr2bxojssU9FEVCvICWUl9O48ftvly7vy/3q8MBOu6XdtaZa5vOXEucuXaLM9cSZ9a0
7u/RyXAoJFd3+XZyuRr9YFff0N6Lu3rtP1e/y9XT/Jp16FVN9fyufd7b4tyAwH3aKiVd0lPC1hdF
TNCW6zK35GLe37Je7C0xdiv/enRJ0FTdgFNSpaGp0CQMS1iqVLwplnxkmpj/+ipICd8nOrE5dWW3
B3qYJl9JyVMlgwVLEtV4BNYVv3EmX1jEK8WFVFfRUgMs+czBKA/HcTnxkALkpSuQJwSo/2qRHyNA
JRV7WrvfEp10i9ES2VYgajN0Ha6tctbD+PMHFK8eE1uOdQSjBqd3MYoA++EDtHtIdGg4XgNs7+iz
Ncf2w4TPqEAF1T0Q4ZHphnOPg6mUsHncQePjPhM+tVWOfcSurTld4yW2FEbk18HSZ41YZAODTQMc
yb1LQ/9vQE/SIPgcYpdqFI2o22mA8gyFrOj18bGet/Ys4fTkm5AefKYON+Kn41EjpfnDRs2eecIV
0yW0+BVXj+KZwpVlsw2+OzYCZcSslJHOqAVYUk0me7jARylCX+3di34icujx/4dszuZjbBWzN1ss
sv8Mot5Y4plVGVvtbrFaQopgtkTNYX/qqccB7TvKeiR8E8PSptSTDOuwaHMDl0yJfmQvhVpUupGJ
vY1094q2ApEDGxnIrB65VHQZcrTX9Ft0E/DARXLNGWcT6HhXGAr51Apo/wmhbvgC462Li2HKxUUI
/QWoH9Thawm+Ymzk1hy1hs9MzwNTjmneWQdqh9XKgaEYs1wlNtQLK/1ukTH2u6aYTBgzZhgcN1g4
rNXgRIqFh+RKYPr4r7Z1/ZqRsUgDvjDaakOtTSxb8Tkno7nMnyF2vDCC1M9VOKgeQL1eh1/r9V+N
uwYcHtQOjDkmklSV/6O76aIUC1QiaTT/RGF9LsoQQQRVMWAB5gXnKaYXcmp5/C8NK8u98HhgiLAB
MeUUjAOhbKxESqhcN8B4zP4FSN7gQQMzvdHQlDRm3XinWOAES1tkXOulpUHvlo5neGwhb1sxdn3h
OnpIlQarEKXlQj7Attuz8f4zyxPxahhxBXD/ziEuY160aPIRL4toD0ezHFVF+qmQjlq1c3Fx84h6
CKuh3c3sdw8Fr/R7Q727RPMY1mqsH0Gtz92TpVsfODGI9sRt2llebnReq62YqPlKb2OCZ1piojgX
kuk9Odr9Frftyj2t/L1P/bs9hjw8Iie+9Y8VqzcL7DNsKVtiCvuV8n7FeG4Bvxfabwvi20N+GoPi
jnzVzSdQ0yDY3q8/aI/xn9xk3Gzf151x/zHOuF9ftbWvop1YfZ56FIUQT9w4rsMaJ/TpqDXeS1nf
toza5kc5V+1Gb/myzSV8D/yZanutVIhOtSUPsKsOUW8UYGHMbIvOkaMWnOlMY4GaWY5YJGcFe+t0
Qs/FejNSIp2xpeeMSB5nTPg0RB8CzF1S+BKFYe4S3r9dgXvbzsdaLvh+MnhwNlilA9pQMXI7WLEP
d2rvfqllEKKxcUumTaLxmiPmHp56axupN8q9lhxb0nrG7Hsj/f4ISn9SFs6laZho9frmaDTA6KIP
sC4uMMToQy4h1Tm6V3ziNeJzCqFzPzlSjt9GAqZv83ftJOqgZqF0ZP0kNU+kmN+SnJMdwyHk89F+
4Yk5bN+VnKkAe7O2Xfh2F3Z/2oVCLCUdCUUHxBvV1MO39rL7oS9Tsd5Xc2uO9CjN1e6nOZ15nkNx
q+8MnkVxD5wcK/qU08cva58gxF8pJEeUdDYTH1F+yOImBdFpd3SDWCrbncRSVSZqJVIxrab+iIJo
JZ9bOOtGT/mNPrnIWr951s8wt6Ktj0/P+rhixmK/bTOYfhWbqrh9qfTrD4XZbjJhMvn4pZrB8TH9
RR+4qNC2GXPoI5m7bEUlPc6OvqL5G1BLAQIUABQAAgAIAPRiVjmc9uFlHwoAALYmAAAXAAAAAAAA
AAEAIAAAAAAAAAB0ZXN0MDE4LXBhcmFsbGVsLWltcG9ydFBLBQYAAAAAAQABAEUAAABUCgAAAAA=
------=_Part_18730_5320025.1224681987183
Content-Type: application/zip; name=test-parallel.ldif.zip
Content-Transfer-Encoding: base64
X-Attachment-Id: file2
Content-Disposition: attachment; filename=test-parallel.ldif.zip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==
------=_Part_18730_5320025.1224681987183--
15 years, 1 month
(ITS#5767) ppolicy doesn't recognize the smbkrb5-specific {K5KEY} storage scheme
by Guillaume.Rousse＠inria.fr
Full_Name: Guillaume Rousse
Version: 2.4.11
OS: linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (193.55.250.67)
When using password policy, with pwdCheckQuality set to 1, ppolicy accept to
change the password of a user to special values such as {SASL} without
complaining.
However, trying to use {K5KEY} instead doesn't work, as it doesn't satisfy
quality checking:
ldap_modify: Constraint violation (19)
additional info: Password fails quality checking policy
15 years, 1 month
(ITS#5766) smbkrb5 overlay doesn't honour kerberos principal expiration
by Guillaume.Rousse＠inria.fr
Full_Name: Guillaume Rousse
Version: 2.4.11
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (193.55.250.67)
When using the smbkrb5 overlay, the {K5KEY} password can be used to make
autentication use kerberos credentials.
However, this redirection doesn't honour krb5ValidEnd or sambaKickoffTime
attribute, positionned by either heimdal or smbkrb5 overlay when setting an
expiration date to the kerberos principal. Whereas kdc refuses to provides a
ticket for the user, openldap still allows the user to authenticate.
15 years, 1 month
Re: (ITS#5765) Can not set log file with configdb
by ando＠sys-net.it
emmanuel.duru(a)atosorigin.com wrote:
Should be fixed in HEAD; please test. p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
15 years, 1 month
(ITS#5765) Can not set log file with configdb
by emmanuel.duru＠atosorigin.com
Full_Name: Emmanuel Duru
Version: 2.4.11
OS: Windows
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (80.78.0.137)
I have a slapd.conf with a logfile directive.
When converting the conf to LDIF (slapd -f slapd.conf -F /path/configdb), this
directive is lost.
When I try to add an olcLogFile attribute to cn=config, I get an "object class
violation" error.
I suppose the olcLogFile attribute is missing in the hard-coded schema for
olcGlobal object class.
15 years, 1 month
(ITS#5764) addpartial patch
by dhawes＠vt.edu
Full_Name: David Hawes
Version: 2.4.12
OS:
URL: ftp://ftp.openldap.org/incoming/david-hawes-081021.patch
Submission from: (NULL) (128.173.38.164)
This patch includes the following changes:
- -fPIC added to the Makefile for compilation on x86_64 systems.
- No longer use be_search() to retrieve the entry that is to be compared. Use
be_entry_get_rw() instead.
- No need to use strlen.
15 years, 1 month
Re: (ITS#5757) back-null returns an error when any critical extension is specified
by jclarke＠linagora.com
ando(a)sys-net.it a écrit :
> ando(a)sys-net.it wrote:
>> A different fix is in HEAD. Please test. p.
>
> A more thorough fix is now in HEAD. Please re-test.
Just tested, it works as expected:
- searches with a non-critical control propagate the control to
"glued-sub-backends" which use it if possible.
- searches with a critical control propagate the control to
"glued-sub-backends" and return error 12 if it is not supported.
This is indeed a much better approach that I originally proposed -
respecting control criticality as required, and reminded by Kurt.
Thanks ando!
Regards,
Jonathan
--
Jonathan Clarke
Open Source Identity Management
---------------------------------------------------------------
Linagora
27 rue de Berri, 75008 Paris
Tel: 01 58 18 68 28 / 06 99 60 03 10
---------------------------------------------------------------
Ldap Synchronization Connector (LSC) - http://lsc-project.org/
---------------------------------------------------------------
15 years, 1 month
(ITS#5763) libRSAglue bug in OpenLDAP configure script
by epj＠newpointtech.com
Full_Name: Eric Johanson
Version: 2.4.12
OS: Debian Linux 4.0
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (64.80.228.78)
The "configure" script has a bug when TLS is enabled, which causes it to fail
when using recent versions of OpenSSL. The bug is found on line 18759 of the
"configure" script in OpenLDAP 2.4.12. The line currently reads:
LIBS="-lssl -lcrypto -lRSAglue -lrsaref $LIBS"
But the -lRSAglue and -lrsaref are old OpenSSL libraries that are not in use any
more. I modified the above line to read:
LIBS="-lssl -lcrypto $LIBS"
This solves the problem. However, perhaps someone wants to add logic to detect
which version of OpenSSL is being used and then vary the LIBS variable
accordingly when the configure script tests for the linkability of the
ssl3_accept() function.
Note that many Linux systems, even those that have a recent OpenSSL, may still
have the -lRSAglue and -lrsaref libraries (just for compatibility reasons). To
reproduce this bug, you will have to search your system and remove all files
with the names libRSAglue.a and librsaref.a.
15 years, 1 month
