December 2010 - openldap-bugs

Re: (ITS#6620) ppolicy: pwdChangedTime/userPassword delete issue.

by m.d.t.evans＠qmul.ac.uk

On Thu, 2010-12-02 at 10:04 +0100, Hallvard B Furuseth wrote: > Thank you. Please also send an IPR notice for the patch, according to > > http://www.openldap.org/devel/contributing.html#n-openldap > Thanks. Done (I think). Kind regards, Martin. -- Dr Martin DT Evans, Computing Services/Central Servers.

12 years, 6 months

1
0
0 / 0

Re: (ITS#6620) ppolicy: pwdChangedTime/userPassword delete issue.

by m.d.t.evans＠qmul.ac.uk

This patch file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by MDT Evans <m.d.t.evans(a)qmul.ac.uk>. I have not assigned rights and/or interest in this work to any party. I, MDT Evans, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. -- Dr Martin DT Evans, Computing Services/Central Servers.

12 years, 6 months

1
0
0 / 0

Re: (ITS#6641) Syncrepl failure with 'overlay unique'

by ondrej.kuznik＠acision.com

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 11/09/2010 03:50 PM, ondrej.kuznik(a)acision.com wrote: > I have put a preliminary version of patches that modify the unique > overlay here > ftp://ftp.openldap.org/incoming/ondrej-kuznik-20101109-unique_bypass_v1.tgz > > They add a new configuration attribute olcUniqueAllowManageBypass (it is > prohibitively long for a name, though) that, if set to TRUE, triggers > the uniqueness checks not to be performed if the operation has manage > privilegies on the entry. There are three separate patches, > configuration code regarding the new attribute, the checks in > unique_{add,modify,modrdn} and manpage modifications. > After a conversation with Howard, I have modified the patches so that the overlay check for the ManageDsaIt control instead. That control should be set for each operation coming from replication. The patches are here: ftp://ftp.openldap.org/incoming/ondrej-kuznik-20101202-unique_bypass_v2.tgz Is there anything else that comes to mind? Again the IPR notice: The attached modifications to OpenLDAP Software are subject to the following notice: Copyright 2010 Acision Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkz3cLcACgkQ9GWxeeH+cXuKBACfSvRQJvNWpVm16pWhJ3wfAxH2 JBwAn3CDasTgcMONMSFyIaqH0CZpv1MN =YaoF -----END PGP SIGNATURE----- This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

12 years, 6 months

1
0
0 / 0

(ITS#6731) Scrambled error strings from back-ldif

by h.b.furuseth＠usit.uio.no

Full_Name: Hallvard B Furuseth Version: 2.4.23 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (193.157.203.245) Submitted by: hallvard apply_modify_to_entry() and ldif_back_add() can return with rs->sr_text pointing into the stack, at textbuf[]. Fixing.

12 years, 6 months

1
0
0 / 0

RE : RE : (ITS#6720) back-ldap core dump

by olivier.chirossel＠sfr.com

Thank's a lot, It's work fine with the new rwm.c Regards, Olivier=

12 years, 6 months

1
0
0 / 0

Re: (ITS#6364) refint needs to have rootdn set

by h.b.furuseth＠usit.uio.no

Quanah Gibson-Mount wrote: > The refint overlay doesn't necessarily work correctly without a rootd= n > being set on the database it is applying to. This requirement should= > be documented in the man page. Fixed in the manpage, but not in the admin guide. Michael=5FStr=F6der wrote: > I'd argue that slapd should not even start if such a strong > requirement of an overlay is not met by configuration. Leaving that for Howard, but I don't think we can do that now. cn=3Dconfig should then also refuse to delete rootdn, otherwise we'd ha= ve the worse behavior that slapd won't start after a cn=3Dconfig update. Peter Mogensen wrote: > I've veryfied that my refint overlay is not working. > However I have a rootdn defined for the database, but it is set to=20= > cn=3Dconfig. > Could it be that the rootdn has to be in the scope of the database fo= r=20 > refint to work=3F I don't think so. Hopefully it was ITS#6663 or ITS#6730, now fixed. --=20 Hallvard

12 years, 6 months

1
0
0 / 0

Re: (ITS#6663) refint not altering last attribute on delete

by h.b.furuseth＠usit.uio.no

knewell(a)math.arizona.edu writes: > refint does not alter the value of an attribute to refint_nothing when > the last "member" of a group is deleted. Fixed in CVS HEAD. -- Hallvard

12 years, 6 months

1
0
0 / 0

(ITS#6730) refint with subtrees/subordinates broken

by h.b.furuseth＠usit.uio.no

Full_Name: Hallvard B Furuseth Version: 2.4.23 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (129.240.6.233) Submitted by: hallvard Subtree rename breaks if an attribute contains both the base DN and a subordinate DN: It only handles the base DN if it is in the first attribute value, and (attempts to) produce the wrong new base. Subtree delete is coded but ignored: Refint searches for deleted subordinate DNs, but the test for deleting them is inverted. Also a modification can update modifiersName several times per entry. Fixing.

12 years, 6 months

1
0
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs December 2010