openldap-bugs September 2008

openldap-bugs@openldap.org

39 participants
206 discussions

Re: (ITS#5720) ldap_str2charray calls ldap_utf8_strchr incorrectly
by quanah＠zimbra.com 30 Sep '08

30 Sep '08

--On September 30, 2008 11:18:04 AM +0000 h.b.furuseth(a)usit.uio.no wrote: > quanah(a)OpenLDAP.org writes: >> utf-8.c:char * (ldap_utf8_strchr)( const char *str, const char *chr ) >> >> I.e., string, character, as normal libc functions. >> >> However, at line 125 in charray.c, it is called as: >> if ( ldap_utf8_strchr( brkstr, s ) != NULL ) { >> This order appears to be incorrect. > > No. That code counts the number of delimiters characters in the > string being split. Since brkstr can contain several characters, > the loop checks each "utf-8 character" in str against brkstr. Yes. The calling order was incorrect. It is supposed to be ldap_utf8_strchr(s, brkstr). Also the outside loop was incorrect. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#5720) ldap_str2charray calls ldap_utf8_strchr incorrectly
by h.b.furuseth＠usit.uio.no 30 Sep '08

30 Sep '08

quanah(a)OpenLDAP.org writes: > utf-8.c:char * (ldap_utf8_strchr)( const char *str, const char *chr ) > > I.e., string, character, as normal libc functions. > > However, at line 125 in charray.c, it is called as: > if ( ldap_utf8_strchr( brkstr, s ) != NULL ) { > This order appears to be incorrect. No. That code counts the number of delimiters characters in the string being split. Since brkstr can contain several characters, the loop checks each "utf-8 character" in str against brkstr. -- Hallvard

1 0

Re: (ITS#5720) ldap_str2charray calls ldap_utf8_strchr incorrectly
by quanah＠OpenLDAP.org 29 Sep '08

29 Sep '08

Err, line 195. --Quanah --On September 30, 2008 2:52:30 AM +0000 quanah(a)OpenLDAP.org wrote: > Full_Name: Quanah Gibson-Mount > Version: 2.3, 2.4, HEAD > OS: NA > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (98.207.132.222) > > > The definition for ldap_utf8_strchr is: > > utf-8.c:char * (ldap_utf8_strchr)( const char *str, const char *chr ) > > I.e., string, character, as normal libc functions. > > However, at line 125 in charray.c, it is called as: > > if ( ldap_utf8_strchr( brkstr, s ) != NULL ) { > > This order appears to be incorrect. > > --Quanah > >

1 0

(ITS#5720) ldap_str2charray calls ldap_utf8_strchr incorrectly
by quanah＠OpenLDAP.org 29 Sep '08

29 Sep '08

Full_Name: Quanah Gibson-Mount Version: 2.3, 2.4, HEAD OS: NA URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (98.207.132.222) The definition for ldap_utf8_strchr is: utf-8.c:char * (ldap_utf8_strchr)( const char *str, const char *chr ) I.e., string, character, as normal libc functions. However, at line 125 in charray.c, it is called as: if ( ldap_utf8_strchr( brkstr, s ) != NULL ) { This order appears to be incorrect. --Quanah

1 0

Re: ITS#5717
by ando＠sys-net.it 29 Sep '08

29 Sep '08

Fixed in HEAD; test044 updated as well. Please test. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Bug- Enforcing validation when validator is NULL
by Prashant kulkarni 29 Sep '08

29 Sep '08

Hi When I am trying to add/edit the value to the attribute "protocol information" which is required in our schema I am getting the error Invalid syntax :protocol information: no validator for syntax 1.3.6.1.4.1.1466.115.121.1.42 from the earlier mailing list I have found The problem seems to be lack of validations in the schema_init.c source code for attribure 'Protocol Information' this attribute protocolInformation is defined in core.schema {"( 1.3.6.1.4.1.1466.115.121.1.42 DESC 'Protocol Information' )", 0, NULL, NULL, NULL}, including values like dnPretty ,UTF8StringValidate..etc in the code instead of NULL values will resolve my problem, but then that require the custom build and I have to do for all the attributes where validation is defined as NULL. I personally feel that for those attributes where validation are NULL in schema_init.c and other schema files, the openLDAP should not force the validation and give this error message, as all these attributes in which validation are not defined becomes unusable . In Tivoli/Sun and Microsoft Active directory LDAP validation is not enforced where validation is defined as NULL hence I am not getting these kind of error in Tivoli/Sun and Microsoft Active directory for editing of this attribute . So any idea how to resolve this ? there is any way to modify any of the config file in openldap to disable this validation for protocol information ? do I have to raise bug request for the same and is this going to be fixed in next openLDAP release. ? Any help and suggestions in this direction is highly appreciated. thanks and regards Prashant

3 2

Re: (ITS#5715) segfault in libdb
by michael＠stroeder.com 29 Sep '08

29 Sep '08

Pierangelo Masarati wrote: > michael(a)stroeder.com wrote: > >> I'm experiencing seg faults when using SASL/EXTERNAL bind when >> connected over >> ldapi://. I will try to examine this further. >> >> segfault at 0 ip b7f21d4c sp b370fd10 error 6 in >> libdb-4.6.so[b7ef9000+14f000] > > This bug is typical of loading a libsasl2 module (libsasldb) built with > a Berkeley DB version different from the one slapd was built with, or > loading a libsasl2 module built with a different version of libsasl2 > than the one slapd was built with. Can you check? Now I've rebuilt with the pre-installed BDB 4.5 (openSUSE 11.0) packages and it works. Hmm... Ciao, Michael.

1 0

(ITS#5719) Reset syncrepl interval after resceduling paused task
by rein＠OpenLDAP.org 29 Sep '08

29 Sep '08

Full_Name: Rein Tollevik Version: RE_24 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.93.160.250) Submitted by: rein When a syncrepl task is paused after the thread pool is pauses (due to dynamic configuration updates) it is rescheduled to run immediately. But the interval is not put back again, which causes the slapd_daemon_task() to exercise the CPU rescheduling the syncrepl task until the next clock second ticks off. I'll commit a fix shortly. Rein Tollevik Basefarm AS

1 0

(ITS#5718) [documentation] Mention dontusecopy control in conjunction with slapo-chain(5)
by ando＠sys-net.it 29 Sep '08

29 Sep '08

Full_Name: Pierangelo Masarati Version: irrelevant OS: irrelevant URL: ftp://ftp.openldap.org/incoming/dontusecopy-chain-2008-09-29-pierangelo-mas… Submission from: (NULL) (81.72.89.40) Submitted by: ando I'm not too familiar with sdl; moreover, I'm not sure whether this is the right place to mention the dontusecopy control first. In any case, it seems worth mentioning here this good practice for clients that might write to shadow DSAs and immediately read back. See patch at URL. Cheers, p.

1 0

Re: (ITS#5715) segfault in libdb
by ando＠sys-net.it 29 Sep '08

29 Sep '08

michael(a)stroeder.com wrote: > I will check this right now. Anyway find below the tail of the server's > log when invoking > > ldapwhoami -H > ldapi://%2Fhome%2Fmichael%2Ftemp%2Fopenldap-testbed-RE24%2Fslapd1 -Y > EXTERNAL OK, at a first glance, I see two things: 1) your search finds nothing, probably because anonymous cannot read the "entry" pseudo-attribute of "ou=schulung,dc=stroeder,dc=local" (see [1]) 2) this causes a sigsegv, which Is Bad (TM). You should check whether the result of those ACLs is correct, and in the meanwhile provide a core dump, to fix the sigsegv issue. p. > --------------------------------- snip -------------------------------- > ==> sasl_bind: dn="" mech=EXTERNAL datalen=0 > SASL Canonicalize [conn=0]: > authcid="gidNumber=100+uidNumber=500,cn=peercred,cn=external,cn=auth" > slap_sasl_getdn: conn 0 > id=gidNumber=100+uidNumber=500,cn=peercred,cn=external,cn=auth [len=59] > ==>slap_sasl2dn: converting SASL name > gidNumber=100+uidNumber=500,cn=peercred,cn=external,cn=auth to a DN > ==> rewrite_context_apply [depth=1] > string='gidNumber=100+uidNumber=500,cn=peercred,cn=external,cn=auth' > ==> rewrite_rule_apply > rule='gidnumber=([0-9]+)\+uidnumber=([0-9]+),cn=peercred,cn=external,cn=auth' > string='gidNumber=100+uidNumber=500,cn=peercred,cn=external,cn=auth' [1 > pass(es)] > ==> rewrite_context_apply [depth=1] > res={0,'ldap:///ou=schulung,dc=stroeder,dc=local??sub?(&(objectClass=posixAccount)(uidNumber=500)(gidNumber=100))'} > [rw] authid: > "gidNumber=100+uidNumber=500,cn=peercred,cn=external,cn=auth" -> > "ldap:///ou=schulung,dc=stroeder,dc=local??sub?(&(objectClass=posixAccount)(uidNumber=500)(gidNumber=100))" > slap_parseURI: parsing > ldap:///ou=schulung,dc=stroeder,dc=local??sub?(&(objectClass=posixAccount)(uidNumber=500)(gidNumber=100)) > ldap_url_parse_ext(ldap:///ou=schulung,dc=stroeder,dc=local??sub?(&(objectClass=posixAccount)(uidNumber=500)(gidNumber=100))) > put_filter: "(&(objectClass=posixAccount)(uidNumber=500)(gidNumber=100))" > put_filter: AND > put_filter_list "(objectClass=posixAccount)(uidNumber=500)(gidNumber=100)" > put_filter: "(objectClass=posixAccount)" > put_filter: simple > put_simple_filter: "objectClass=posixAccount" > put_filter: "(uidNumber=500)" > put_filter: simple > put_simple_filter: "uidNumber=500" > put_filter: "(gidNumber=100)" > put_filter: simple > put_simple_filter: "gidNumber=100" > ber_scanf fmt ({mm}) ber: > ber_scanf fmt ({mm}) ber: > ber_scanf fmt ({mm}) ber: >>>> dnNormalize: <ou=schulung,dc=stroeder,dc=local> > => ldap_bv2dn(ou=schulung,dc=stroeder,dc=local,0) > <= ldap_bv2dn(ou=schulung,dc=stroeder,dc=local)=0 > => ldap_dn2bv(272) > <= ldap_dn2bv(ou=schulung,dc=stroeder,dc=local)=0 > <<< dnNormalize: <ou=schulung,dc=stroeder,dc=local> > slap_sasl2dn: performing internal search > (base=ou=schulung,dc=stroeder,dc=local, scope=2) > => hdb_search > bdb_dn2entry("ou=schulung,dc=stroeder,dc=local") > => access_allowed: auth access to "ou=schulung,dc=stroeder,dc=local" > "entry" requested > => dn: [4] ou=users,ou=schulung,dc=stroeder,dc=local > => dn: [5] ou=groups,ou=schulung,dc=stroeder,dc=local > => dn: [6] ou=schulung,dc=stroeder,dc=local > => acl_get: [6] matched > => acl_get: [6] attr entry > => acl_mask: access to entry "ou=schulung,dc=stroeder,dc=local", attr > "entry" requested > => acl_mask: to all values by "", (=0) > <= check a_dn_pat: * > <= acl_mask: [2] applying none(=0) (stop) > <= acl_mask: [2] mask: none(=0) > => slap_access_allowed: auth access denied by none(=0) [1] > => access_allowed: no more rules > send_ldap_result: conn=0 op=0 p=3 > send_ldap_result: err=32 matched="" text="" > <==slap_sasl2dn: Converted SASL name to <nothing> > SASL Canonicalize [conn=0]: > slapAuthcDN="gidNumber=100+uidNumber=500,cn=peercred,cn=external,cn=auth" > ./start-slapd1.sh: line 14: 20820 Segmentation fault > ${OPENLDAP_PREFIX}/libexec/slapd -d stats,acl,args,trace,sync -h > "ldap://0.0.0.0:2071 > ldapi://%2Fhome%2Fmichael%2Ftemp%2Fopenldap-testbed-RE24%2Fslapd1" -n > slapd-schulung-1 -u michael -f ${LOCALCONFIG}/slapd-1.conf -F > ${LOCALCONFIG}/slapd-1.conf.d > michael@nb2:~/temp/openldap-testbed-RE24> > > Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs September 2008