openldap-bugs November 2008

openldap-bugs@openldap.org

44 participants
242 discussions

Re: (ITS#5816) back-ldap stops searching if send_search_entry() returns harmless errors (like insufficientAccess)
by ando＠sys-net.it 18 Nov '08

18 Nov '08

ando(a)sys-net.it wrote: > Full_Name: Pierangelo Masarati > Version: HEAD/re24 > OS: irrelevant > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (81.72.89.40) > Submitted by: ando > > > To trigger: define acls that block one entry, and the search will stop at that > entry. A fix is coming... Fixed in HEAD (and in re24, apparently). I confirm back-meta does not appear to suffer from this issue. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5805) Problem when modifying access control
by rein＠OpenLDAP.org 18 Nov '08

18 Nov '08

emmanuel.duru(a)atosorigin.com skrev: > OK, my mistake, here follows a completely detailed description. > * I perform the ldap modifications with this LDIF file: [cut] > * I try to bind : > ldapsearch.exe -x -D cn=manager,c=fr -w secret -s base -b "" objectclass=* + > I get: > ldap_bind: Invalid credentials (49) > * I stop slapd [cut] > * I restart slapd > * I try to bind : > ldapsearch.exe -x -D cn=manager,c=fr -w secret -s base -b "" objectclass=* + > It works fine. Dynamic updates to the frontend ACL doesn't take place until slapd is restarted, ref ITS#5572. A fix is included in CVS HEAD and RE24, and will be included in the upcoming 2.4.13 release. Rein

1 0

Re: (ITS#5805) Problem when modifying access control
by ando＠sys-net.it 18 Nov '08

18 Nov '08

Emmanuel Duru wrote: > OK, my mistake, here follows a completely detailed description. I confirm HEAD and re24 behave as expected. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5640) slapd scans too many objects at startup
by hyc＠symas.com 18 Nov '08

18 Nov '08

ali.pouya(a)free.fr wrote: > So I checked out the HEAD last night. > The good news is that the problem is fixed now and every thing seems OK (six new > modifications have been made to syncprov.c since Nov 2, one of which being made > by Quanah and related to this issue). Not sure what you're looking at, but the CVS log clearly shows that this bug was fixed in revision 1.251 on November 2. http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/overlays/syncprov.c?… The updates after 1.252 are merely copying from HEAD to the RE24 branch. You said you pulled from HEAD on November 3, and still saw the problem. Either your checkout was wrong, or your configuration was wrong, because the fix was definitely present in HEAD by then. > So the issue can be closed :-) > Thanks again > Best Regards > Ali -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5640) slapd scans too many objects at startup
by hyc＠symas.com 18 Nov '08

18 Nov '08

Ali Pouya wrote: > Hi Howard, > Sorry for being back again but I think that a residue of the problem of > whole tree scanning persists : > The improvement is that it only happens once if the mirrors are not > synchronized (the later statups are OK). That's the normal behavior for the syncrepl protocol. Read the Admin Guide or RFC4533 for details. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5818) Limits chapter for Admin Guide
by ghenry＠OpenLDAP.org 18 Nov '08

18 Nov '08

----- "andrew findlay" <andrew.findlay(a)skills-1st.co.uk> wrote: > Full_Name: Andrew Findlay > Version: HEAD > OS: Linux > URL: > ftp://ftp.openldap.org/incoming/andrew-findlay-limits.sdf-20081118 > Submission from: (NULL) (88.97.25.132) > > > The Admin Guide says very little about size limits and time limits. > I have supplied a chapter to remedy the lack: I suggest putting it in > after the > Access Control chapter: > > ftp://ftp.openldap.org/incoming/andrew-findlay-limits.sdf-20081118 > > Please check the section on limits for paged results extra carefully. > I found the definition in slapd.conf(5) a little ambiguous. > > I have also provided patches to the master sdf file and to the two > config > directive > chapters: > > ftp://ftp.openldap.org/incoming/andrew-findlay-limits-patch-20081118 > > Andrew Thanks Andrew, I'll review and get back to when possible. Gavin. -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghenry(a)OpenLDAP.org Community developed LDAP software. http://www.openldap.org/project/

1 0

(ITS#5818) Limits chapter for Admin Guide
by andrew.findlay＠skills-1st.co.uk 18 Nov '08

18 Nov '08

Full_Name: Andrew Findlay Version: HEAD OS: Linux URL: ftp://ftp.openldap.org/incoming/andrew-findlay-limits.sdf-20081118 Submission from: (NULL) (88.97.25.132) The Admin Guide says very little about size limits and time limits. I have supplied a chapter to remedy the lack: I suggest putting it in after the Access Control chapter: ftp://ftp.openldap.org/incoming/andrew-findlay-limits.sdf-20081118 Please check the section on limits for paged results extra carefully. I found the definition in slapd.conf(5) a little ambiguous. I have also provided patches to the master sdf file and to the two config directive chapters: ftp://ftp.openldap.org/incoming/andrew-findlay-limits-patch-20081118 Andrew

1 0

Re: (ITS#5817) ldapadd crashes with '-' in input
by ando＠sys-net.it 18 Nov '08

18 Nov '08

jsafrane(a)redhat.com wrote: > Full_Name: Jan Safranek > Version: 2.4.12 > OS: Linux (Fedora 9) > URL: > Submission from: (NULL) (89.102.11.105) > > > ldapadd crashes with assertion 'ldapadd: encode.c:392: ber_put_string: Assertion > `str != ((void *)0)' failed.' on following input: > > dn: nisMapName=netgroup.byhost,dc=my-domain,dc=com > nismapname: netgroup.byhost > objectClass: top > objectClass: nisMap > - > > The reason is probably at ldapmodify.c:445, where the lines containing dash are > skipped, apparently for modify operations: > > if ( line[0] == '-' && !line[1] ) { > BER_BVZERO( btype+i ); > freeval[i] = 0; > continue; > } > > ldap_add_ext() seems not to like these empty spaces. I think the fix belongs to ldap_add_ext(), as other applications may well call it with invalid parameters. I've applied a fix to HEAD code, please test. The fix is Checking in libraries/libldap/add.c; /repo/OpenLDAP/pkg/ldap/libraries/libldap/add.c,v <-- add.c new revision: 1.32; previous revision: 1.31 It hould apply straightforwardly to the release you're using. Thanks, p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5817) ldapadd crashes with '-' in input
by jsafrane＠redhat.com 18 Nov '08

18 Nov '08

Full_Name: Jan Safranek Version: 2.4.12 OS: Linux (Fedora 9) URL: Submission from: (NULL) (89.102.11.105) ldapadd crashes with assertion 'ldapadd: encode.c:392: ber_put_string: Assertion `str != ((void *)0)' failed.' on following input: dn: nisMapName=netgroup.byhost,dc=my-domain,dc=com nismapname: netgroup.byhost objectClass: top objectClass: nisMap - The reason is probably at ldapmodify.c:445, where the lines containing dash are skipped, apparently for modify operations: if ( line[0] == '-' && !line[1] ) { BER_BVZERO( btype+i ); freeval[i] = 0; continue; } ldap_add_ext() seems not to like these empty spaces. Full backtrace: (gdb) bt full #0 0x0000003ea4832215 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x0000003ea4833d83 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x0000003ea482b039 in __assert_fail () from /lib64/libc.so.6 No symbol table info available. #3 0x0000000000440e0e in ber_put_string (ber=0x1573390, str=0x0, tag=18446744073709551615) at encode.c:392 __PRETTY_FUNCTION__ = "ber_put_string" #4 0x0000000000441f5e in ber_printf (ber=0x1573390, fmt=0x44b34e "s[V]N}") at encode.c:809 ap = {{gp_offset = 24, fp_offset = 48, overflow_arg_area = 0x7fffeaf5ed80, reg_save_area = 0x7fffeaf5ecc0}} s = 0x0 ss = (char **) 0x0 bv = (struct berval *) 0x7fffeaf5ecf0 bvp = (struct berval **) 0x157b718 rc = 0 i = 2 len = 0 __PRETTY_FUNCTION__ = "ber_printf" #5 0x0000000000414edd in ldap_add_ext (ld=0x15731d0, dn=0x157c714 "nisMapName=netgroup.byhost,dc=my-domain,dc=com", attrs=0x157b6e8, sctrls=0x0, cctrls=0x0, msgidp=0x7fffeaf5ee6c) at add.c:154 ber = (BerElement *) 0x1573390 i = 2 rc = 30 id = 2 __PRETTY_FUNCTION__ = "ldap_add_ext" #6 0x0000000000406c07 in domodify (dn=0x157c714 "nisMapName=netgroup.byhost,dc=my-domain,dc=com", pmods=0x157b6e8, pctrls=0x0, newentry=1) at ldapmodify.c:1094 msgid = 0 rc = -352981360 i = 3 j = 4474435 k = 0 notascii = 976894522 op = 0 bvp = (struct berval *) 0xa0 #7 0x00000000004063e9 in process_ldif_rec (rbuf=0x157c786 "", linenum=1) at ldapmodify.c:866 line = 0x0 dn = 0x157c714 "nisMapName=netgroup.byhost,dc=my-domain,dc=com" newrdn = 0x0 newsup = 0x0 rc = 0 modop = 0 expect_modop = 0 expect_sep = 0 deleteoldrdn = 1 new_entry = 1 delete_entry = 0 got_all = 0 pmods = (LDAPMod **) 0x157b6e8 lm = (LDAPMod *) 0x157b6a0 version = 0 pctrls = (LDAPControl **) 0x0 i = 5 j = 3 k = 6 lines = 5 idn = 1 nmods = 3 btype = (struct berval *) 0x157b5d0 vals = (struct berval *) 0x157b630 bvl = (struct berval **) 0x157b708 bv = {bv_len = 0, bv_val = 0x0} freeval = 0x157b690 "" mops = (unsigned char *) 0x0 #8 0x000000000040458b in main (argc=11, argv=0x7fffeaf5f178) at ldapmodify.c:341 rbuf = 0x157c710 "dn" rejbuf = 0x0 rejfp = (FILE *) 0x0 ldiffp = (struct LDIFFP *) 0x1572e50 ldifdummy = {fp = 0x0, prev = 0x0} matched_msg = 0x4473c0 "H\211l$�L\211|$�H\215-/\034!" error_msg = 0x0 rc = 0 retval = 0 len = 32767 i = 0 lineno = 1 nextline = 6 lmax = 4147 c = {{ldctl_oid = 0x7fffeaf5f020 "\214�|�����3\020", ldctl_value = {bv_len = 226974810936, bv_val = 0x3ea480ae20 "\016\001"}, ldctl_iscritical = 0 '\0'}}

1 0

RE: (ITS#5805) Problem when modifying access control
by emmanuel.duru＠atosorigin.com 18 Nov '08

18 Nov '08

Sorry the command to create the initial database is not slapadd -f configdb -l initialdatabase.ldif but slapadd -F configdb -l initialdatabase.ldif

1 0

← Newer
1
...
7
8
9
10
11
12
13
...
25
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs November 2008