openldap-bugs November 2008

openldap-bugs@openldap.org

44 participants
242 discussions

Re: (ITS#5793) RFE for flexible logging at 256/stats level
by ando＠sys-net.it 20 Nov '08

20 Nov '08

michael(a)stroeder.com wrote: > ando(a)sys-net.it wrote: >> Wouldn't it make sense to entirely give up syslog'ging and use >> slapo-accesslog instead? > > Hmm, I think this change would be too radical. I still see some value in > text messages going to syslog. Configuration issues are sometimes more > obvious if you see the syslog messages of LDAP-enabled components and > the LDAP server one after the other in the same log. I meant "give up" by not looking at logs for Gavin's purposes, not to eradicate them from the code. Modifying "stats" logging would not probably be a big issue, if we define a specific mask: one bit for each operation, and one bit for success/failure. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5793) RFE for flexible logging at 256/stats level
by michael＠stroeder.com 20 Nov '08

20 Nov '08

ando(a)sys-net.it wrote: > Wouldn't it make sense to entirely give up syslog'ging and use > slapo-accesslog instead? Hmm, I think this change would be too radical. I still see some value in text messages going to syslog. Configuration issues are sometimes more obvious if you see the syslog messages of LDAP-enabled components and the LDAP server one after the other in the same log. Ciao, Michael.

1 0

(ITS#5820) segfault with slapacl
by ghenry＠OpenLDAP.org 20 Nov '08

20 Nov '08

Full_Name: Gavin Henry Version: 2.4.12 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (212.159.59.85) Submitted by: ghenry Hi All, I've just hit this: /usr/local/sbin/slapacl -f /usr/local/etc/openldap/slapd.conf -b "dc=suretecsystems,dc=com" -U ghenry "userPassword/read:" authcDN: "uid=ghenry,cn=auth" read access to userPassword=: DENIED Segmentation fault gdb: Starting program: /usr/local/sbin/slapacl -f /usr/local/etc/openldap/slapd.conf -b "dc=suretecsystems,dc=com" -U ghenry "userPassword/read:" (no debugging symbols found) (no debugging symbols found) [Thread debugging using libthread_db enabled] [New Thread -1208350960 (LWP 10744)] authcDN: "uid=ghenry,cn=auth" read access to userPassword=: DENIED Program received signal SIGSEGV, Segmentation fault. [Switching to Thread -1208350960 (LWP 10744)] 0x005f70c7 in free () from /lib/libc.so.6 (gdb) bt #0 0x005f70c7 in free () from /lib/libc.so.6 #1 0x00158c0a in ber_memfree_x (p=0x0, ctx=0x0) at memory.c:152 #2 0x08089ee8 in ch_free () #3 0x080d4d3c in slap_tool_destroy () #4 0x080d71a1 in slapacl () #5 0x080564d2 in main () (gdb) q I'm just compiling up HEAD now to test with the latest code and will get back to you. Gavin.

1 0

Re: (ITS#5819) On add, slapd does not add distinguished values if naming attribute already present
by ando＠sys-net.it 19 Nov '08

19 Nov '08

Fixed in HEAD; please test. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5819) On add, slapd does not add distinguished values if naming attribute already present
by ando＠sys-net.it 19 Nov '08

19 Nov '08

Full_Name: Pierangelo Masarati Version: HEAD/re24 OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (131.175.154.146) Submitted by: ando To trigger, try # works fine dn: cn=Foo,dc=example,dc=com objectClass: device # error dn: cn=Bar,dc=example,dc=com objectClass: device cn: Foo I'd expect both to succeed, and a "cn" of "Foo" or "Bar" to be automatically added by slapd according to RFC4511 (since "cn" is multi-valued). p.

1 0

Re: (ITS#5793) RFE for flexible logging at 256/stats level
by ghenry＠OpenLDAP.org 19 Nov '08

19 Nov '08

----- "Pierangelo Masarati" <ando(a)sys-net.it> wrote: > ghenry(a)OpenLDAP.org wrote: > > > Just a quick note to say it would be nice to be able to break out > loglevel 256 > > i.e. Log just writes. The same as accesslog config. > > Are you thinking of something like a read/write/auth flag, plus > possibly > a success/failure flag, or a per-operation granularity? Probably the later. It's more to not lot searches, but writes, as 256 can really fill up your logfile. > Wouldn't it make sense to entirely give up syslog'ging and use > slapo-accesslog instead? For some users, yes. But having the phyiscal log is appealing too. Thanks. -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghenry(a)OpenLDAP.org Community developed LDAP software. http://www.openldap.org/project/

1 0

Re: (ITS#5817) ldapadd crashes with '-' in input
by ando＠sys-net.it 19 Nov '08

19 Nov '08

Jan Safranek wrote: > Pierangelo Masarati wrote: >> I've applied a fix to HEAD code, please test. > > Thanks for a quick fix! Now it prints "ldap_add: Bad parameter to an > ldap routine (-9)", which is a bit better than the assert before. Yes. I modified ldap_add_ext(3) to further validate input parameters instead of crashing. ldapadd(1) needs work in order to intercept the issue earlier and complain as appropriate. I was more concerned by libldap because it might be used in more critical applications than ldapadd(1) itself. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5817) ldapadd crashes with '-' in input
by jsafrane＠redhat.com 19 Nov '08

19 Nov '08

Pierangelo Masarati wrote: > I've applied a fix to HEAD code, please test. Thanks for a quick fix! Now it prints "ldap_add: Bad parameter to an ldap routine (-9)", which is a bit better than the assert before. Jan

1 0

Re: (ITS#5764) addpartial patch
by ando＠sys-net.it 19 Nov '08

19 Nov '08

hyc(a)symas.com wrote: > dhawes(a)vt.edu wrote: >> The patch referenced previously can be discarded. This patch contains >> all changes against 2.4.12. > > I suspect HEAD and 2.4.12 are identical here so it's no big deal this time, > but remember for future reference, > > http://www.openldap.org/devel/contributing.html > > all contributions must be relative to HEAD. I also note that you should not diff generated files, like Makefile. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5793) RFE for flexible logging at 256/stats level
by ando＠sys-net.it 19 Nov '08

19 Nov '08

ghenry(a)OpenLDAP.org wrote: > Just a quick note to say it would be nice to be able to break out loglevel 256 > i.e. Log just writes. The same as accesslog config. Are you thinking of something like a read/write/auth flag, plus possibly a success/failure flag, or a per-operation granularity? Wouldn't it make sense to entirely give up syslog'ging and use slapo-accesslog instead? p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

← Newer
1
...
6
7
8
9
10
11
12
...
25
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs November 2008