openldap-bugs July 2008

openldap-bugs@openldap.org

43 participants
131 discussions

(ITS#5594) assertion thrown in daemon.c
by richton＠nbcs.rutgers.edu 03 Jul '08

03 Jul '08

Full_Name: Aaron Richton Version: 2.3.41 OS: Solaris 9 URL: http://www.openldap.org/its/index.cgi/Software Bugs?id=5489 Submission from: (NULL) (128.6.31.135) 2.3.41 died on one of my slaves: Current function is slapd_clr_write 813 assert( SLAP_SOCK_IS_ACTIVE( s )); (dbx) where current thread: t@2 [1] __lwp_kill(0x0, 0x6, 0xffffffffffffffe6, 0x0, 0x0, 0x0), at 0xffffffff7f0a8d4c [2] raise(0x6, 0x0, 0xffffffff517fd810, 0x0, 0x0, 0x0), at 0xffffffff7f058dc0 [3] abort(0x44, 0x0, 0x44, 0x7efefeff, 0x81010100, 0xff0000), at 0xffffffff7f03e688 [4] __assert(0x1002394d8, 0x1002394f8, 0x32d, 0xffffffff517fca10, 0x1003afb60, 0x5), at 0xffffffff7f03e98c =>[5] slapd_clr_write(s = 180, wake = 0), line 813 in "daemon.c" [6] connection_write(s = 180), line 1905 in "connection.c" [7] slapd_daemon_task(ptr = (nil)), line 2329 in "daemon.c" The last log message related to this was: conn=65083139 fd=180 closed (connection lost on write) This of course has ITS#5489 written all over it. If there is another RE23, consider this a request to include the appropriate patch.

1 0

ldapsearch and buffered stdout
by Dale.Moore＠cs.cmu.edu 03 Jul '08

03 Jul '08

The client tool can read from stdin and produce output on stdout. For example ldapsearch -L -x -f - 'cn=%s' uid This will read cn values from stdin and produce search results on stdout. But doing this interactively does not produce the immediate feedback because stdout is often buffered. The search results are presented only after a sufficient amount have been buffered, or an EOF is encountered. It would be very nice if ldapsearch application would flush stdout after each search. Below is a diff of the ldapsearch client tool with my proposed change. *************** *** 1,5 **** /* ldapsearch -- a tool for searching LDAP directories */ ! /* $OpenLDAP: pkg/ldap/clients/tools/ldapsearch.c,v 1.234.2.9 2008/02/12 19:59:52 quanah Exp $ */ /* This work is part of OpenLDAP Software <http://www.openldap.org/>. * * Copyright 1998-2008 The OpenLDAP Foundation. --- 1,5 ---- /* ldapsearch -- a tool for searching LDAP directories */ ! /* $OpenLDAP: pkg/ldap/clients/tools/ldapsearch.c,v 1.234.2.9 2008/02/12 19:59:52 quanah Exp $ */ /* This work is part of OpenLDAP Software <http://www.openldap.org/>. * * Copyright 1998-2008 The OpenLDAP Foundation. *************** *** 998,1003 **** --- 998,1004 ---- if ( !contoper ) break; } + fflush(stdout); } if ( fp != stdin ) { fclose( fp );

3 2

(ITS#5593) Back-meta search references
by andrew.graham＠agustawestland.com 03 Jul '08

03 Jul '08

Full_Name: Andrew Graham Version: 2.4.10 OS: SLES 10 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (194.169.32.250) Please provide an option to stop search references being proxied from target to client in back-meta.

1 0

(ITS#5592) Quarantine in back-meta
by andrew.graham＠agustawestland.com 03 Jul '08

03 Jul '08

Full_Name: Andrew Graham Version: 2.4.10 OS: SLES 10 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (194.169.32.250) The quarantine function in back-meta will permanently disable a target if a query is received while the quarantine has been imposed. To reproduce, use the config file below. Send a query and the quarantine will be set. Send another query within 20 seconds and the quarantine will not lift without restarting slapd. ---- slapd.conf ---- include /usr/local/openldap/etc/openldap/schema/core.schema include /usr/local/openldap/etc/openldap/schema/cosine.schema include /usr/local/openldap/etc/openldap/schema/inetorgperson.schema pidfile /usr/local/openldap/var/run/slapd.pid argsfile /usr/local/openldap/var/run/slapd.args database meta suffix dc=example,dc=com uri ldap://afakeaddress/dc=target,dc=example,dc=com quarantine 20,+

1 0

Re: (ITS#5591) olcSpReloadHint attribute missing from olcSyncProvConfig objectClass
by ando＠sys-net.it 02 Jul '08

02 Jul '08

mark.horstman(a)att.com wrote: > servers/slapd/overlays/syncprov.c defines the olcSpReloadHint attribute but does > not include it in the olcSyncProvConfig definition. This seems to be why one > cannot add that attribute to a syncprov overlay configured in slapd.d/cn=config. Thanks, fixed in HEAD. Please test. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5591) olcSpReloadHint attribute missing from olcSyncProvConfig objectClass
by mark.horstman＠att.com 02 Jul '08

02 Jul '08

Full_Name: Mark Horstman Version: 2.4.10 OS: Linux 2.6.9-67.0.4.ELsmp 2.6.9-67.0.15.ELsmp i686 i686 i386 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (144.160.98.31) servers/slapd/overlays/syncprov.c defines the olcSpReloadHint attribute but does not include it in the olcSyncProvConfig definition. This seems to be why one cannot add that attribute to a syncprov overlay configured in slapd.d/cn=config.

1 0

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by jstrunk＠math.utexas.edu 02 Jul '08

02 Jul '08

On Wednesday 02 July 2008 10:05:02 am Howard Chu wrote: > Jeff Strunk wrote: > > One example is adding the olcSyncrepl attribute to > > olcDatabase={1}hdb,cn=config . Ldapmodify reported success. Ldapsearch > > shows the new attribute. syncrepl works. > > However, /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif > > does not have an olcSyncrepl attribute. When slapd is restarted, the > > olcSyncrepl attribute is missing. > > > > The same thing happened when adding the entry for the syncrepl overlay. > > Have you successfully run "make test"? Those exact operations are part of > test050... Have you got any slapd debug messages from these modification > attempts? This was an Ubuntu issue. They created an apparmor profile for /usr/sbin/slapd, but they didn't let it write to /etc/ldap/slapd.d . It the debug log, you'll find a permission denied error when trying to write a tempfile with this bug. It works with the following line in /etc/apparmor.d/usr.sbin.slapd : /etc/ldap/slapd.d/** rw, My strange symptom of only being able to write to cn=config.ldif was because I used the following line instead: /etc/ldap/slapd.d/* rw, Thanks, Jeff

1 0

Re: (ITS#5589) Segfault in syncrepl on provider
by michael＠fladi.at 02 Jul '08

02 Jul '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yes, I can confirm that the segfault is now gone in CVS. Syncrepl works as expected. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkhrmfoACgkQeJ3z1zFMUGbzjgCeLn+en9DepG5UvwVDyBTPcNav A1EAniRDgkQI8/MZF4o8yXSr552+NQZz =gvp/ -----END PGP SIGNATURE-----

1 0

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by hyc＠symas.com 02 Jul '08

02 Jul '08

Jeff Strunk wrote: > One example is adding the olcSyncrepl attribute to > olcDatabase={1}hdb,cn=config . Ldapmodify reported success. Ldapsearch shows > the new attribute. syncrepl works. > However, /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif does > not have an olcSyncrepl attribute. When slapd is restarted, the olcSyncrepl > attribute is missing. > > The same thing happened when adding the entry for the syncrepl overlay. Have you successfully run "make test"? Those exact operations are part of test050... Have you got any slapd debug messages from these modification attempts? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by jstrunk＠math.utexas.edu 02 Jul '08

02 Jul '08

On Wednesday 02 July 2008 09:49:14 am Howard Chu wrote: > jstrunk(a)math.utexas.edu wrote: > > Full_Name: Jeff Strunk > > Version: 2.4.9-0ubuntu0.8.04 > > OS: Ubuntu 8.04 > > URL: > > Submission from: (NULL) (146.6.139.147) > > > > > > I am setting up a new LDAP server and trying to utilize the cn=config > > configuration style. While testing it out, I noticed that changes I make > > to cn=config are getting written to /etc/ldap/slapd.d/cn=config/ldif, but > > changes made to olcDatabase={1}hdb,cn=config are not getting written to > > /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif or anything > > else. > > > > What could be happening? > > Impossible to guess with the info you've provided. What are the changes you > tried to make that aren't being saved? One example is adding the olcSyncrepl attribute to olcDatabase={1}hdb,cn=config . Ldapmodify reported success. Ldapsearch shows the new attribute. syncrepl works. However, /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif does not have an olcSyncrepl attribute. When slapd is restarted, the olcSyncrepl attribute is missing. The same thing happened when adding the entry for the syncrepl overlay. Thank you, Jeff

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs July 2008