Re: (ITS#6599) slapd not responding
by binoy＠cordys.com
--0016361e878249aeff048c7254d0
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
Hi,
1) I downloaded OpenLDAP 2.4.23
(20100719)<ftp://ftp.openldap.org/pub/OpenLDAP/openldap-stable/openldap-sta=
ble-20100719.tgz>
. I checked servers/slapd/back-bdb/cache.c. I see that the fix for ITS#6577
dated July 1 is not available in the release build. I checked out the lates=
t
sources and did a build and tested.
2) The issue still persists in Windows. Here are some useful logs.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D
This is a SUCCESSFUL scenario:
conn=3D1000 op=3D8703 DEL dn=3D"cn=3DTest220,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com"
bdb_dn2entry("cn=3Dtest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274=
,o=3D
vanenburg.com")
=3D=3D> hdb_delete: cn=3DTest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=
=3Dt274,o=3D
vanenburg.com
slap_queue_csn: queing 034EFC7C 20100728123751.496923Z#000000#000#000000
bdb_dn2entry("cn=3Dtest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274=
,o=3D
vanenburg.com")
=3D> access_allowed: delete access to "cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" "children" reques=
ted
<=3D root access granted
=3D> access_allowed: delete access granted by manage(=3Dmwrscxd)
=3D> access_allowed: delete access to "cn=3DTest220,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" "entry" requested
<=3D root access granted
=3D> access_allowed: delete access granted by manage(=3Dmwrscxd)
=3D> hdb_dn2id_delete 0xa96: "cn=3Dtest220,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com"
<=3D hdb_dn2id_delete 0xa96: 0
=3D> index_entry_del( 2710, "cn=3DTest220,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" )
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [a0795064]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [78d8fcbf]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [26382a68]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [b9195d83]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [64447e0e]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [815b06f7]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [403d84ed]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [600c0260]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [d66e2c29]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [547b3983]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [1610f370]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [0096defd]
<=3D key_change 0
=3D> key_change(DELETE,a96)
bdb_idl_delete_key: a96 [f612c92d]
<=3D key_change 0
<=3D index_entry_del( 2710, "cn=3DTest220,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" ) success
=3D=3D=3D=3D> bdb_cache_delete( 2710 )
hdb_delete: deleted id=3D00000a96 dn=3D"cn=3DTest220,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com"
send_ldap_result: conn=3D1000 op=3D8703 p=3D3
send_ldap_result: err=3D0 matched=3D"" text=3D""
send_ldap_response: msgid=3D43189 tag=3D107 err=3D0
ber_flush2: 16 bytes to sd 1832
0000: 30 0e 02 03 00 a8 b5 6b 07 0a 01 00 04 00 04 00 0......k.......=
.
tls_write: want=3D90, written=3D90
0000: 17 03 01 00 20 d3 72 46 5c 99 ae 97 cd 90 f5 64 .... .rF\......=
d
0010: 47 53 38 1d 26 6c c7 d4 21 45 28 e2 27 31 bd 5f GS8.&l..!E(.'1.=
_
0020: bc c4 92 eb 6e 17 03 01 00 30 e5 be 97 76 6c cc ....n....0...vl=
.
0030: 29 c0 21 05 d9 f6 55 d6 2a dc d5 68 0b f6 73 6a ).!...U.*..h..s=
j
0040: 7f ff 24 8b fa 9e 57 41 27 ee d3 9a e5 9a 17 11 ..$...WA'......=
.
0050: ee 87 0d 55 ae 98 81 53 2d 7d ...U...S-}
ldap_write: want=3D16, written=3D16
0000: 30 0e 02 03 00 a8 b5 6b 07 0a 01 00 04 00 04 00 0......k.......=
.
conn=3D1000 op=3D8703 RESULT tag=3D107 err=3D0 text=3D
slap_graduate_commit_csn: removing 015CFFC8
20100728123751.496923Z#000000#000#000000
daemon: activity on 6 descriptors
daemon: activity on: 5r
daemon: read activity on 5
daemon: WSselect: listen=3D2 active_threads=3D0 tvp=3DNULL
connection_get(5)
daemon: WSselect: listen=3D3 active_threads=3D0 tvp=3DNULL
connection_get(5): got connid=3D1000
daemon: WSselect: listen=3D4 active_threads=3D0 tvp=3DNULL
connection_read(5): checking for input on id=3D1000
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
This is where it FAILS
conn=3D1000 op=3D9270 DEL dn=3D"cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com"
bdb_dn2entry("cn=3Dtest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274=
,o=3D
vanenburg.com")
=3D=3D> hdb_delete: cn=3DTest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=
=3Dt274,o=3D
vanenburg.com
slap_queue_csn: queing 0420FC7C 20100728110306.101543Z#000000#000#000000
bdb_dn2entry("cn=3Dtest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274=
,o=3D
vanenburg.com")
daemon: activity on 6 descriptors
daemon: activity on: 5r
daemon: read activity on 5
daemon: WSselect: listen=3D2 active_threads=3D0 tvp=3DNULL
daemon: WSselect: listen=3D3 active_threads=3D0 tvp=3DNULL
daemon: WSselect: listen=3D4 active_threads=3D0 tvp=3DNULL
connection_get(5)
connection_get(5): got connid=3D1000
connection_read(5): checking for input on id=3D1000
ber_get_next
tls_read: want=3D5, got=3D5
.....
op tag 0x63, time 1280314986
ber_get_next
tls_read: want=3D5 error=3DUnknown error
ldap_read: want=3D8 error=3DUnknown error
daemon: activity on 1 descriptor
daemon: waked
daemon: WSselect: listen=3D2 active_threads=3D0 tvp=3DNULL
daemon: WSselect: listen=3D3 active_threads=3D0 tvp=3DNULL
daemon: WSselect: listen=3D4 active_threads=3D0 tvp=3DNULL
=3D> access_allowed: delete access to "cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" "children" reques=
ted
<=3D root access granted
=3D> access_allowed: delete access granted by manage(=3Dmwrscxd)
=3D> access_allowed: delete access to "cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" "entry" requested
<=3D root access granted
=3D> access_allowed: delete access granted by manage(=3Dmwrscxd)
=3D> hdb_dn2id_delete 0xc4b: "cn=3Dtest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com"
<=3D hdb_dn2id_delete 0xc4b: 0
=3D> index_entry_del( 3147, "cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" )
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [aec1526a]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [78d8fcbf]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [27382a68]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [ce175d82]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [2230817c]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [815b06f7]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [8b4384f1]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [600c0260]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [58802faf]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [547b3983]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [9821f6f6]
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [0096defd]
conn=3D1000 op=3D9271 do_search
ber_scanf fmt ({miiiib) ber:
ber_dump: buf=3D015AAF30 ptr=3D015AAF34 end=3D015AAFA5 len=3D113
0000: 63 6f 04 4e 63 6e 3d 54 65 73 74 33 36 37 2c 63 co.Ncn=3DTest36=
7,c
0010: 6e 3d 54 65 73 74 33 36 37 2c 63 6e 3d 73 6f 61 n=3DTest367,cn=
=3Dsoa
0020: 70 20 6e 6f 64 65 73 2c 6f 3d 73 79 73 74 65 6d p nodes,o=3Dsys=
tem
0030: 2c 63 6e 3d 63 6f 72 64 79 73 2c 63 6e 3d 74 32 ,cn=3Dcordys,cn=
=3Dt2
0040: 37 34 2c 6f 3d 76 61 6e 65 6e 62 75 72 67 2e 63 74,o=3Dvanenbur=
g.c
0050: 6f 6d 0a 01 00 0a 01 00 02 02 07 d0 02 01 00 01 om.............=
.
0060: 01 00 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 30 ....objectclass=
0
0070: 00 .
>>> dnPrettyNormal: <cn=3DTest367,cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com>
=3D> ldap_bv2dn(cn=3DTest367,cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com,0)
<=3D ldap_bv2dn(cn=3DTest367,cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com)=3D0
=3D> ldap_dn2bv(272)
<=3D ldap_dn2bv(cn=3DTest367,cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com)=3D0
=3D> ldap_dn2bv(272)
<=3D ldap_dn2bv(cn=3Dtest367,cn=3Dtest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com)=3D0
<<< dnPrettyNormal: <cn=3DTest367,cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com>,
<cn=3Dtest367,cn=3Dtest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274=
,o=3D
vanenburg.com>
SRCH "cn=3DTest367,cn=3DTest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=
=3Dt274,o=3D
vanenburg.com" 0 0 2000 0 0
begin get_filter
PRESENT
ber_scanf fmt (m) ber:
ber_dump: buf=3D015AAF30 ptr=3D015AAF96 end=3D015AAFA5 len=3D15
0000: 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 30 00 ..objectclass0.
end get_filter 0
filter: (objectClass=3D*)
ber_scanf fmt ({M}}) ber:
ber_dump: buf=3D015AAF30 ptr=3D015AAFA3 end=3D015AAFA5 len=3D2
0000: 00 00 ..
attrs:
conn=3D1000 op=3D9271 SRCH base=3D"cn=3DTest367,cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" scope=3D0 deref=
=3D0
filter=3D"(objectClass=3D*)"
=3D> hdb_search
bdb_dn2entry("cn=3Dtest367,cn=3Dtest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com")
=3D> hdb_dn2id("cn=3Dtest367,cn=3Dtest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com")
<=3D key_change 0
=3D> key_change(DELETE,c4b)
bdb_idl_delete_key: c4b [f612c92d]
<=3D key_change 0
<=3D index_entry_del( 3147, "cn=3DTest367,cn=3Dsoap
nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3Dvanenburg.com" ) success
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Please help.
Thanks and regards,
Binoy Joseph
Sr. Software Engineer
T +91 406656 1498 =95 M +91 9849176132
On Wed, Jul 28, 2010 at 12:49 AM, Quanah Gibson-Mount <quanah(a)zimbra.com>wr=
ote:
> --On Tuesday, July 27, 2010 7:04 PM +0530 Binoy Joseph <binoy(a)cordys.com>
> wrote:
>
>
>> Hi Quanah,
>>
>>
>> Thanks a lot for your reply.
>> Looks like the issue does not appear with OpenLDAP 2.4.23 and BDB in
>> Linux.
>> But somehow the issue still occurs in Windows.
>> Can you mention which file/issue you are talking about regarding the
>> locking behavior you mentioned?
>> Thanks and regards,
>> Binoy Joseph
>>
>
> ITS#6577
>
>
> --Quanah
>
> --
>
> Quanah Gibson-Mount
> Principal Software Engineer
> Zimbra, Inc
> --------------------
> Zimbra :: the leader in open source messaging and collaboration
>
--0016361e878249aeff048c7254d0
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable
<div>Hi,</div><div><br></div><div>1) I downloaded OpenLDAP=A0<span class=3D=
"Apple-style-span" style=3D"font-family: Arial, Verdana, Helvetica; font-si=
ze: medium; -webkit-border-horizontal-spacing: 2px; -webkit-border-vertical=
-spacing: 2px; "><a href=3D"ftp://ftp.openldap.org/pub/OpenLDAP/openldap-st=
able/openldap-stable-20100719.tgz">2.4.23 (20100719)</a>.=A0</span>I checke=
d servers/slapd/back-bdb/cache.c. I see that the fix for=A0ITS#6577 dated J=
uly 1 is not available in the release build. I checked out the latest sourc=
es and did a build and tested.</div>
<div><br></div><div>2) The issue still persists in Windows. Here are some u=
seful logs.</div><div><br></div><div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</div><div>This is a SUCCES=
SFUL scenario:</div>
<div><br></div><div><div>conn=3D1000 op=3D8703 DEL dn=3D"cn=3DTest220,=
cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vane=
nburg.com">vanenburg.com</a>"</div><div>bdb_dn2entry("cn=3Dtest22=
0,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://va=
nenburg.com">vanenburg.com</a>")</div>
<div>=3D=3D> hdb_delete: cn=3DTest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dco=
rdys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a></div>=
<div>slap_queue_csn: queing 034EFC7C 20100728123751.496923Z#000000#000#0000=
00</div><div>
bdb_dn2entry("cn=3Dtest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=
=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>")</div>
<div>=3D> access_allowed: delete access to "cn=3Dsoap nodes,o=3Dsys=
tem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.co=
m</a>" "children" requested</div><div><=3D root access gr=
anted</div>
<div>
=3D> access_allowed: delete access granted by manage(=3Dmwrscxd)</div><d=
iv>=3D> access_allowed: delete access to "cn=3DTest220,cn=3Dsoap no=
des,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">v=
anenburg.com</a>" "entry" requested</div>
<div><=3D root access granted</div><div>=3D> access_allowed: delete a=
ccess granted by manage(=3Dmwrscxd)</div><div>=3D> hdb_dn2id_delete 0xa9=
6: "cn=3Dtest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D=
<a href=3D"http://vanenburg.com">vanenburg.com</a>"</div>
<div><=3D hdb_dn2id_delete 0xa96: 0</div><div>=3D> index_entry_del( 2=
710, "cn=3DTest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=
=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>" )</div><div>=3D=
> key_change(DELETE,a96)</div>
<div>bdb_idl_delete_key: a96=A0</div><div><=3D key_change 0</div><div>=
=3D> key_change(DELETE,a96)</div><div>bdb_idl_delete_key: a96 [a0795064]=
</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,a96)</d=
iv><div>
bdb_idl_delete_key: a96 [78d8fcbf]</div><div><=3D key_change 0</div><div=
>=3D> key_change(DELETE,a96)</div><div>bdb_idl_delete_key: a96 [26382a68=
]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,a96)</=
div>
<div>bdb_idl_delete_key: a96 [b9195d83]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,a96)</div><div>bdb_idl_delete_key: a96 [644=
47e0e]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,a=
96)</div>
<div>bdb_idl_delete_key: a96 [815b06f7]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,a96)</div><div>bdb_idl_delete_key: a96 [403=
d84ed]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,a=
96)</div>
<div>bdb_idl_delete_key: a96 [600c0260]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,a96)</div><div>bdb_idl_delete_key: a96 [d66=
e2c29]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,a=
96)</div>
<div>bdb_idl_delete_key: a96 [547b3983]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,a96)</div><div>bdb_idl_delete_key: a96 [161=
0f370]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,a=
96)</div>
<div>bdb_idl_delete_key: a96 [0096defd]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,a96)</div><div>bdb_idl_delete_key: a96 [f61=
2c92d]</div><div><=3D key_change 0</div><div><=3D index_entry_del( 27=
10, "cn=3DTest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=
=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>" ) success</div>
<div>=3D=3D=3D=3D> bdb_cache_delete( 2710 )</div><div>hdb_delete: delete=
d id=3D00000a96 dn=3D"cn=3DTest220,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcor=
dys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>"<=
/div><div>send_ldap_result: conn=3D1000 op=3D8703 p=3D3</div>
<div>send_ldap_result: err=3D0 matched=3D"" text=3D""</=
div><div>send_ldap_response: msgid=3D43189 tag=3D107 err=3D0</div><div>ber_=
flush2: 16 bytes to sd 1832</div><div>=A0=A00000: =A030 0e 02 03 00 a8 b5 6=
b =A007 0a 01 00 04 00 04 00 =A0 0......k........ =A0</div>
<div>tls_write: want=3D90, written=3D90</div><div>=A0=A00000: =A017 03 01 0=
0 20 d3 72 46 =A05c 99 ae 97 cd 90 f5 64 =A0 .... .rF\......d =A0</div><div=
>=A0=A00010: =A047 53 38 1d 26 6c c7 d4 =A021 45 28 e2 27 31 bd 5f =A0 GS8.=
&l..!E(.'1._ =A0</div>
<div>=A0=A00020: =A0bc c4 92 eb 6e 17 03 01 =A000 30 e5 be 97 76 6c cc =A0 =
....n....0...vl. =A0</div><div>=A0=A00030: =A029 c0 21 05 d9 f6 55 d6 =A02a=
dc d5 68 0b f6 73 6a =A0 ).!...U.*..h..sj =A0</div><div>=A0=A00040: =A07f =
ff 24 8b fa 9e 57 41 =A027 ee d3 9a e5 9a 17 11 =A0 ..$...WA'....... =
=A0</div>
<div>=A0=A00050: =A0ee 87 0d 55 ae 98 81 53 =A02d 7d =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 ...U...S-} =A0 =A0 =A0 =A0</div><div>ldap_write: want=
=3D16, written=3D16</div><div>=A0=A00000: =A030 0e 02 03 00 a8 b5 6b =A007 =
0a 01 00 04 00 04 00 =A0 0......k........ =A0</div>
<div>
conn=3D1000 op=3D8703 RESULT tag=3D107 err=3D0 text=3D</div><div>slap_gradu=
ate_commit_csn: removing 015CFFC8 20100728123751.496923Z#000000#000#000000<=
/div><div>daemon: activity on 6 descriptors</div><div>daemon: activity on: =
5r</div>
<div>daemon: read activity on 5</div><div>daemon: WSselect: listen=3D2 acti=
ve_threads=3D0 tvp=3DNULL</div><div>connection_get(5)</div><div>daemon: WSs=
elect: listen=3D3 active_threads=3D0 tvp=3DNULL</div><div>connection_get(5)=
: got connid=3D1000</div>
<div>daemon: WSselect: listen=3D4 active_threads=3D0 tvp=3DNULL</div><div>c=
onnection_read(5): checking for input on id=3D1000</div></div><div>=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D</div>
<div><br></div><div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</div><div>This is wh=
ere it FAILS</div><div><br></div><div><div><br></div><div><div>conn=3D1000 =
op=3D9270 DEL dn=3D"cn=3DTest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordy=
s,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>"</d=
iv>
<div>bdb_dn2entry("cn=3Dtest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys=
,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>")</d=
iv><div>=3D=3D> hdb_delete: cn=3DTest367,cn=3Dsoap nodes,o=3Dsystem,cn=
=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a><=
/div>
<div>slap_queue_csn: queing 0420FC7C 20100728110306.101543Z#000000#000#0000=
00</div><div>bdb_dn2entry("cn=3Dtest367,cn=3Dsoap nodes,o=3Dsystem,cn=
=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>&=
quot;)</div>
<div>daemon: activity on 6 descriptors</div><div>daemon: activity on: 5r</d=
iv><div>daemon: read activity on 5</div><div>daemon: WSselect: listen=3D2 a=
ctive_threads=3D0 tvp=3DNULL</div><div>daemon: WSselect: listen=3D3 active_=
threads=3D0 tvp=3DNULL</div>
<div>daemon: WSselect: listen=3D4 active_threads=3D0 tvp=3DNULL</div><div>c=
onnection_get(5)</div><div>connection_get(5): got connid=3D1000</div><div>c=
onnection_read(5): checking for input on id=3D1000</div><div>ber_get_next</=
div><div>
tls_read: want=3D5, got=3D5</div><div>=A0.....=A0</div><div>op tag 0x63, ti=
me 1280314986</div><div>ber_get_next</div><div>tls_read: want=3D5 error=3DU=
nknown error</div><div>ldap_read: want=3D8 error=3DUnknown error</div><div>=
daemon: activity on 1 descriptor</div>
<div>daemon: waked</div><div>daemon: WSselect: listen=3D2 active_threads=3D=
0 tvp=3DNULL</div><div>daemon: WSselect: listen=3D3 active_threads=3D0 tvp=
=3DNULL</div><div>daemon: WSselect: listen=3D4 active_threads=3D0 tvp=3DNUL=
L</div><div>=3D> access_allowed: delete access to "cn=3Dsoap nodes,=
o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanen=
burg.com</a>" "children" requested</div>
<div><=3D root access granted</div><div>=3D> access_allowed: delete a=
ccess granted by manage(=3Dmwrscxd)</div><div>=3D> access_allowed: delet=
e access to "cn=3DTest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3D=
t274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>" "ent=
ry" requested</div>
<div><=3D root access granted</div><div>=3D> access_allowed: delete a=
ccess granted by manage(=3Dmwrscxd)</div><div>=3D> hdb_dn2id_delete 0xc4=
b: "cn=3Dtest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D=
<a href=3D"http://vanenburg.com">vanenburg.com</a>"</div>
<div><=3D hdb_dn2id_delete 0xc4b: 0</div><div>=3D> index_entry_del( 3=
147, "cn=3DTest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=
=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>" )</div><div>=3D=
> key_change(DELETE,c4b)</div>
<div>bdb_idl_delete_key: c4b=A0</div><div><=3D key_change 0</div><div>=
=3D> key_change(DELETE,c4b)</div><div>bdb_idl_delete_key: c4b [aec1526a]=
</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,c4b)</d=
iv><div>
bdb_idl_delete_key: c4b [78d8fcbf]</div><div><=3D key_change 0</div><div=
>=3D> key_change(DELETE,c4b)</div><div>bdb_idl_delete_key: c4b [27382a68=
]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,c4b)</=
div>
<div>bdb_idl_delete_key: c4b [ce175d82]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,c4b)</div><div>bdb_idl_delete_key: c4b [223=
0817c]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,c=
4b)</div>
<div>bdb_idl_delete_key: c4b [815b06f7]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,c4b)</div><div>bdb_idl_delete_key: c4b [8b4=
384f1]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,c=
4b)</div>
<div>bdb_idl_delete_key: c4b [600c0260]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,c4b)</div><div>bdb_idl_delete_key: c4b [588=
02faf]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,c=
4b)</div>
<div>bdb_idl_delete_key: c4b [547b3983]</div><div><=3D key_change 0</div=
><div>=3D> key_change(DELETE,c4b)</div><div>bdb_idl_delete_key: c4b [982=
1f6f6]</div><div><=3D key_change 0</div><div>=3D> key_change(DELETE,c=
4b)</div>
<div>bdb_idl_delete_key: c4b [0096defd]</div><div>conn=3D1000 op=3D9271 do_=
search</div><div>ber_scanf fmt ({miiiib) ber:</div><div>ber_dump: buf=3D015=
AAF30 ptr=3D015AAF34 end=3D015AAFA5 len=3D113</div><div>=A0=A00000: =A063 6=
f 04 4e 63 6e 3d 54 =A065 73 74 33 36 37 2c 63 =A0 co.Ncn=3DTest367,c =A0</=
div>
<div>=A0=A00010: =A06e 3d 54 65 73 74 33 36 =A037 2c 63 6e 3d 73 6f 61 =A0 =
n=3DTest367,cn=3Dsoa =A0</div><div>=A0=A00020: =A070 20 6e 6f 64 65 73 2c =
=A06f 3d 73 79 73 74 65 6d =A0 p nodes,o=3Dsystem =A0</div><div>=A0=A00030:=
=A02c 63 6e 3d 63 6f 72 64 =A079 73 2c 63 6e 3d 74 32 =A0 ,cn=3Dcordys,cn=
=3Dt2 =A0</div>
<div>=A0=A00040: =A037 34 2c 6f 3d 76 61 6e =A065 6e 62 75 72 67 2e 63 =A0 =
74,o=3Dvanenburg.c =A0</div><div>=A0=A00050: =A06f 6d 0a 01 00 0a 01 00 =A0=
02 02 07 d0 02 01 00 01 =A0 om.............. =A0</div><div>=A0=A00060: =A00=
1 00 87 0b 6f 62 6a 65 =A063 74 63 6c 61 73 73 30 =A0 ....objectclass0 =A0<=
/div>
<div>=A0=A00070: =A000 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 . =A0 =A0 =A0 =A0 =A0 =A0 =A0 =
=A0=A0</div><div>>>> dnPrettyNormal: <cn=3DTest367,cn=3DTest367=
,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://van=
enburg.com">vanenburg.com</a>></div>
<div>=3D> ldap_bv2dn(cn=3DTest367,cn=3DTest367,cn=3Dsoap nodes,o=3Dsyste=
m,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com<=
/a>,0)</div><div><=3D ldap_bv2dn(cn=3DTest367,cn=3DTest367,cn=3Dsoap nod=
es,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">va=
nenburg.com</a>)=3D0=A0</div>
<div>=3D> ldap_dn2bv(272)</div><div><=3D ldap_dn2bv(cn=3DTest367,cn=
=3DTest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"=
http://vanenburg.com">vanenburg.com</a>)=3D0=A0</div><div>=3D> ldap_dn2b=
v(272)</div><div><=3D ldap_dn2bv(cn=3Dtest367,cn=3Dtest367,cn=3Dsoap nod=
es,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">va=
nenburg.com</a>)=3D0=A0</div>
<div><<< dnPrettyNormal: <cn=3DTest367,cn=3DTest367,cn=3Dsoap n=
odes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">=
vanenburg.com</a>>, <cn=3Dtest367,cn=3Dtest367,cn=3Dsoap nodes,o=3Dsy=
stem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.c=
om</a>></div>
<div>SRCH "cn=3DTest367,cn=3DTest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dc=
ordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>"=
; 0 0 =A0 =A02000 0 0</div><div>begin get_filter</div><div>PRESENT</div><di=
v>ber_scanf fmt (m) ber:</div>
<div>ber_dump: buf=3D015AAF30 ptr=3D015AAF96 end=3D015AAFA5 len=3D15</div><=
div>=A0=A00000: =A087 0b 6f 62 6a 65 63 74 =A063 6c 61 73 73 30 00 =A0 =A0 =
=A0..objectclass0. =A0=A0</div><div>end get_filter 0</div><div>=A0=A0 =A0fi=
lter: (objectClass=3D*)</div>
<div>
ber_scanf fmt ({M}}) ber:</div><div>ber_dump: buf=3D015AAF30 ptr=3D015AAFA3=
end=3D015AAFA5 len=3D2</div><div>=A0=A00000: =A000 00 =A0 =A0 =A0 =A0 =A0 =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0.. =
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0</div><div>=A0=A0 =A0attrs:</div><div>conn=
=3D1000 op=3D9271 SRCH base=3D"cn=3DTest367,cn=3DTest367,cn=3Dsoap nod=
es,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">va=
nenburg.com</a>" scope=3D0 deref=3D0 filter=3D"(objectClass=3D*)&=
quot;</div>
<div>=3D> hdb_search</div><div>bdb_dn2entry("cn=3Dtest367,cn=3Dtest=
367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://=
vanenburg.com">vanenburg.com</a>")</div><div>=3D> hdb_dn2id("c=
n=3Dtest367,cn=3Dtest367,cn=3Dsoap nodes,o=3Dsystem,cn=3Dcordys,cn=3Dt274,o=
=3D<a href=3D"http://vanenburg.com">vanenburg.com</a>")</div>
<div><=3D key_change 0</div><div>=3D> key_change(DELETE,c4b)</div><di=
v>bdb_idl_delete_key: c4b [f612c92d]</div><div><=3D key_change 0</div><d=
iv><=3D index_entry_del( 3147, "cn=3DTest367,cn=3Dsoap nodes,o=3Dsy=
stem,cn=3Dcordys,cn=3Dt274,o=3D<a href=3D"http://vanenburg.com">vanenburg.c=
om</a>" ) success</div>
</div></div><div><br></div><div>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</div>=
<div><br></div><div>Please help.</div><br clear=3D"all">Thanks and regards,=
<br><br>Binoy Joseph<br>
Sr. Software Engineer<br>T +91 406656 1498 =95 M +91 9849176132<br>
<br><br><div class=3D"gmail_quote">On Wed, Jul 28, 2010 at 12:49 AM, Quanah=
Gibson-Mount <span dir=3D"ltr"><<a href=3D"mailto:quanah@zimbra.com">qu=
anah(a)zimbra.com</a>></span> wrote:<br><blockquote class=3D"gmail_quote" =
style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class=3D"im">--On Tuesday, July 27, 2010 7:04 PM +0530 Binoy Joseph &l=
t;<a href=3D"mailto:binoy@cordys.com" target=3D"_blank">binoy(a)cordys.com</a=
>> wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
<br>
Hi Quanah,<br>
<br>
<br>
Thanks a lot for your reply.<br>
Looks like the issue does not appear with OpenLDAP 2.4.23 and BDB in<br>
Linux.<br>
But somehow the issue still occurs in Windows.<br>
Can you mention which file/issue you are talking about regarding the<br>
locking behavior you mentioned?<br>
Thanks and regards,<br>
Binoy Joseph<br>
</blockquote>
<br></div>
ITS#6577<div><div></div><div class=3D"h5"><br>
<br>
--Quanah<br>
<br>
--<br>
<br>
Quanah Gibson-Mount<br>
Principal Software Engineer<br>
Zimbra, Inc<br>
--------------------<br>
Zimbra :: =A0the leader in open source messaging and collaboration<br>
</div></div></blockquote></div><br>
--0016361e878249aeff048c7254d0--
12 years, 8 months
Re: (ITS#6585) close is called from dap_unbind_s with fd = -1
by asifiqbal.desai＠gmail.com
Thanks a lot for looking into this issue.
On Thu, Jul 22, 2010 at 3:07 AM, Howard Chu <hyc(a)symas.com> wrote:
> asifiqbal.desai(a)gmail.com wrote:
>>
>> Full_Name: Asif Iqbal Desai
>> Version: 2.4.16
>> OS: Solaris 10
>> URL: ftp://ftp.openldap.org/incoming/
>> Submission from: (NULL) (130.214.64.6)
>>
>>
>> This is a consulation bug for clarification on close() being called from
>> ldap_unbind_s with fd =3D 1.
>>
>> The application uses ldap client apis for user authentication.
>> We recently upgraded to use OpenLDAP version 2.4.16 and are getting an
>> unexpected AIO error issue when ldap user authentication is enabled.
>>
>> Investigating further revealed that from ldap_unbind_s ( close(-1) is
>> getting
>> called. However the close function of solaris libaio does a special
>> handling
>> when fd< =A00 which causes AIO errors.
>>
>> The application needs solaris aio support and hence cannot link libc
>> before
>> libaio.
>>
>> Is there any specific reason for close being called with fd =3D -1 from
>> ldap_unbind_s.
>> This issue didnot exist with OpenLDAP 2.3.27.
>
> I've checked 2.3.43 and 2.4.23; in both cases ber_int_sb_close() is being
> called twice on the same sockbuf. I suppose that might be considered a bu=
g,
> but certainly the behavior has not changed between 2.3 and 2.4.
>
>> Following is the stacktrace:
>> =A0 [1] _libaio_close(0xffffffffffffffff, 0x2, 0x1, 0xffffffff7f300200, =
0x0,
>> 0x0),
>> at 0xffffffff7f406a64
>> =A0 [2] sb_stream_close(0x100151d80, 0x0, 0x0, 0xffffffff7f300200, 0x0,
>> 0x0), at
>> 0xffffffff7d21eafc
>> =A0 [3] ber_int_sb_close(0x100151d00, 0x0, 0x0, 0xffffffff7f300200, 0x0,
>> 0x0), at
>> 0xffffffff7d21e160
>> =A0 [4] ber_sockbuf_free(0x100151d00, 0x1001497d0, 0x1, 0x1,
>> 0xffffffff7dbad2ec,
>> 0xd), at 0xffffffff7d21cebc
>> =A0 [5] ldap_ld_free(0x100149520, 0x1, 0x0, 0x0, 0x100117020, 0xdc3), at
>> 0xffffffff7d26a4bc
>> =A0 [6] ldap_unbind_ext(0x100149520, 0x0, 0x0, 0x1001219e0, 0x1001219f8,
>> 0x100121a00), at 0xffffffff7d26a048
>> =A0 [7] ldap_unbind_s(0x100149520, 0x1001471d0, 0x100149520,
>> 0xfffffffffffffff2,
>> 0x0, 0x100117728), at 0xffffffff7d26a55c
>> ...
>> ...
>>
>> Thanks in Advance,
>> Asif Iqbal Desai
>>
>>
>
>
> --
> =A0-- Howard Chu
> =A0CTO, Symas Corp. =A0 =A0 =A0 =A0 =A0 http://www.symas.com
> =A0Director, Highland Sun =A0 =A0 http://highlandsun.com/hyc/
> =A0Chief Architect, OpenLDAP =A0http://www.openldap.org/project/
>
12 years, 8 months
(ITS#6608) ppolicy internal modifications break replication
by mbackes＠symas.com
Full_Name: Matthew Backes
Version: RE24
OS:
URL:
Submission from: (NULL) (76.88.107.46)
The current ppolicy draft standard does not address replication issues, and the
resulting implementation has trouble.
If frontend-chaining to the master and ppolicy_forward_updates is enabled,
invalid binds return success (ITS 6607). If they are disabled, the local
changes increase the CSNs in the local copy beyond the contextCSN of the
provider, which results in broken replication. (ITS 6606)
Possible fixes include:
* disallowing shadow contexts the use of ppolicy (probably unpopular)
* requiring frontend-chaining once that works
* not updating operational attributes at all for ppolicy changes. (allows
replicas to diverge on bind failure data but is probably safest)
12 years, 8 months
(ITS#6607) forwarded bind failure messages cause success
by mbackes＠symas.com
Full_Name: Matthew Backes
Version: RE24
OS:
URL:
Submission from: (NULL) (76.88.107.46)
As noted in
http://www.openldap.org/lists/openldap-technical/201004/msg00247.html
setting up a chain overlay on the frontend and then configuring ppolicy with
ppolicy_forward_updates causes BIND operations with invalid credentials to
return success, apparently from the result of the chain operation.
This is independent of the value of chain-return-error.
WHOAMI reports anonymous after these "successful" BINDs with invalid passwords,
so there is no security compromise within the directory itself, however this has
(as noted in the above email) catastrophic results for external apps trying to
authenticate with BIND.
12 years, 8 months
(ITS#6606) syncrepl search reply for post-dated cookie
by mbackes＠symas.com
Full_Name: Matthew Backes
Version: RE24
OS:
URL:
Submission from: (NULL) (76.88.107.46)
When replicas try to connect to their provider and supply a cookie generated
from a CSN beyond what the provider has, the provider returns success and does
nothing. It'd be better to return unwilling-to-perform and squirt out an error
indicating that the cookie is in the future.
This can happen when the replica is actively receiving changes from the current
ppolicy setup or other bug-like situations.
12 years, 8 months
Re: (ITS#6605) Webmin LDAP User Module Don't Work
by masarati＠aero.polimi.it
> Full_Name: Andrea Minardi
> Version: 2.3.27
> OS: RedHat 5
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (88.40.179.242)
>
>
> Webmin's LDAP Users and Groups module stopped working after upgrading from
> Webmin 1.400 to webmin 1.510
>
> I have been using Webmin's LDAP Users and Groups module on my company's
> server
> to administer users. It was working fine on Webmin 1.400, but after
> upgrading I
> get the error:
>
> "Webmin has connected to the LDAP server, but failed to fetch the schema.
> Make
> sure that access has not been denied in the LDAP Server module."
It is not clear what this issue has to do with OpenLDAP software, since
the problem appears after upgrading a third party software.
Software interoperation issues can be discussed on openldap-technical.
This ITS will be closed.
p.
12 years, 8 months
Re: (ITS#6600) pcache overlay should ignore invalid attributes in search requests
by masarati＠aero.polimi.it
> Indeed, looking at it with your comments, definitely overkill. I meant
> to ask about this approach in the bug description but forgot, sorry.
>
> Here is a simpler patch which works the same for my tests:
> ftp://ftp.openldap.org/incoming/jonathan-clarke-pcache-100727.patch
Hi. Your patch still looks a bit problematic to me. I'm not sure I
understood the issue, since it doesn't work for me without further
modifications to the code.
Suppose I'm searching with a filter that is related to the pcache attrset
"cn uid", and my search lists the attributes
cn uid undefined
what you're trying to accomplish is that this search behaves as if one
only requested
cn uid
right? Well, in this case (at least in HEAD code, I didn't check in re24
yet) it does not work, because all the tests you add work fine, but later
the expected attrset will not be matched because the attribute name
"undefined" will still be looked for inside the attribute set. You need
to add a check that does not look for attributes for which no an_desc was
found. However, this case also matches wildcards '*', '+', '1.1'.
Tentatively, the "right" patch would be like this
<ftp://ftp.openldap.org/incoming/pierangelo-masarati-its6600.1.patch>
Please test and report.
p.
12 years, 8 months
Re: (ITS#6599) slapd not responding
by quanah＠zimbra.com
--On Tuesday, July 27, 2010 7:04 PM +0530 Binoy Joseph <binoy(a)cordys.com>
wrote:
>
> Hi Quanah,
>
>
> Thanks a lot for your reply.
> Looks like the issue does not appear with OpenLDAP 2.4.23 and BDB in
> Linux.
> But somehow the issue still occurs in Windows.
> Can you mention which file/issue you are talking about regarding the
> locking behavior you mentioned?
> Thanks and regards,
> Binoy Joseph
ITS#6577
--Quanah
--
Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration
12 years, 8 months
Re: (ITS#6600) pcache overlay should ignore invalid attributes in search requests
by jonathan＠phillipoux.net
On 27/07/2010 01:08, masarati(a)aero.polimi.it wrote:
>> Full_Name: Jonathan CLARKE
>> Version: RE24
>> OS:
>> URL: ftp://ftp.openldap.org/incoming/jonathan-clarke-pcache-100723.patch
>> Submission from: (NULL) (80.13.86.63)
>>
>>
>> While checking it's configuration, the pcache overlay verifies each
>> configured
>> attribute set (pcacheAttrset), to ensure that all attributes in the set
>> are
>> defined, via slap_str2ad. Given an attribute set with a non-existant
>> attribute,
>> an error is logged and slapd refuses to start (as expected):
>>
>> line 117 (pcacheAttrset 0 nonexistantAttr)
>> /etc/ldap/slapd.conf: line 117: attribute type undefined.
>>
>> However, when a search request comes in, the requested attributes list is
>> not
>> checked by the pcache overlay to ensure that attributes are properly
>> defined. In
>> effect, slapd just ignores the non-existant attributes, and returns other
>> attributes (or behaves as if 1.1 was requested if all requested attributes
>> are
>> invalid).
>>
>> This causes pcache's attribute set matching to fail for some requests,
>> since it
>> counts invalid attributes. If it were to ignore them, configured attribute
>> sets
>> might match, and successfully cache the search. The patch above implements
>> this
>> behaviour. Would you consider it for inclusion in OpenLDAP?
>>
>> I realize this may be considered "repairing bad requests", but sometimes
>> one
>> can't (easily) control what clients are requesting. Furthermore, it seems
>> to
>> make sense to have matching behavior all over (since slapd ignores invalid
>> requested attributes, pcache should too, IMHO).
>
> Yours looks like a good catch; however, your patch looks a bit like an
> overkill, since the an_desc field of the attribute list that is passed to
> get_attr_set() should already be set if the attribute was recognized by
> slapd, so you don't need to go through slap_bv2ad() once more.
Thanks for your feedback.
Indeed, looking at it with your comments, definitely overkill. I meant
to ask about this approach in the bug description but forgot, sorry.
Here is a simpler patch which works the same for my tests:
ftp://ftp.openldap.org/incoming/jonathan-clarke-pcache-100727.patch
Jonathan
--
--------------------------------------------------------------
Jonathan Clarke - jonathan(a)phillipoux.net
--------------------------------------------------------------
Ldap Synchronization Connector (LSC) - http://lsc-project.org
--------------------------------------------------------------
12 years, 8 months
Re: (ITS#6599) slapd not responding
by binoy＠cordys.com
--00163628368141a7d5048c5e92b6
Content-Type: text/plain; charset=ISO-8859-1
Hi Quanah,
Thanks a lot for your reply.
Looks like the issue does not appear with OpenLDAP 2.4.23 and BDB in Linux.
But somehow the issue still occurs in Windows.
Can you mention which file/issue you are talking about regarding the locking
behavior you mentioned?
Thanks and regards,
Binoy Joseph
On Mon, Jul 26, 2010 at 9:18 PM, Quanah Gibson-Mount <quanah(a)zimbra.com>wrote:
> --On Friday, July 23, 2010 1:13 PM +0000 binoy(a)cordys.com wrote:
>
> Full_Name: Binoy Joseph
>> Version: 2.4.21
>> OS: Linux
>> URL: ftp://ftp.openldap.org/incoming/
>> Submission from: (NULL) (210.210.79.19)
>>
>
> Can you reproduce this with OpenLDAP 2.4.23? There was a change in locking
> behavior introduced in 2.4.21 that was backed out in 2.4.23.
>
> --Quanah
>
>
> --
>
> Quanah Gibson-Mount
> Principal Software Engineer
> Zimbra, Inc
> --------------------
> Zimbra :: the leader in open source messaging and collaboration
>
--00163628368141a7d5048c5e92b6
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<div>Hi Quanah,</div><div><br></div><div>Thanks a lot for your reply.</div>=
<div>Looks like the issue does not appear with OpenLDAP 2.4.23 and BDB in L=
inux.</div><div>But somehow the issue still occurs in Windows.</div><div>
Can you mention which file/issue you are talking about regarding the lockin=
g behavior you mentioned?</div><br clear=3D"all">Thanks and regards,<div>Bi=
noy Joseph<br>
<br><br><div class=3D"gmail_quote">On Mon, Jul 26, 2010 at 9:18 PM, Quanah =
Gibson-Mount <span dir=3D"ltr"><<a href=3D"mailto:quanah@zimbra.com">qua=
nah(a)zimbra.com</a>></span> wrote:<br><blockquote class=3D"gmail_quote" s=
tyle=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
--On Friday, July 23, 2010 1:13 PM +0000 <a href=3D"mailto:binoy@cordys.com=
" target=3D"_blank">binoy(a)cordys.com</a> wrote:<br>
<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">
Full_Name: Binoy Joseph<br>
Version: 2.4.21<br>
OS: Linux<br>
URL: <a href=3D"ftp://ftp.openldap.org/incoming/" target=3D"_blank">ftp://f=
tp.openldap.org/incoming/</a><br>
Submission from: (NULL) (210.210.79.19)<br>
</blockquote>
<br>
Can you reproduce this with OpenLDAP 2.4.23? =A0There was a change in locki=
ng behavior introduced in 2.4.21 that was backed out in 2.4.23.<br>
<br>
--Quanah<br><font color=3D"#888888">
<br>
<br>
--<br>
<br>
Quanah Gibson-Mount<br>
Principal Software Engineer<br>
Zimbra, Inc<br>
--------------------<br>
Zimbra :: =A0the leader in open source messaging and collaboration<br>
</font></blockquote></div><br></div>
--00163628368141a7d5048c5e92b6--
12 years, 8 months
