openldap-bugs January 2011

openldap-bugs@openldap.org

36 participants
177 discussions

Re: (ITS#6769) Slapd fails to start when olcDbURI attribute is used
by quanah＠zimbra.com 04 Jan '11

04 Jan '11

--On Monday, January 03, 2011 10:45 PM +0000 jwinius(a)umrk.nl wrote: > The solution is to apply this patch: > > > ftp://ftp.openldap.org/incoming/pierangelo-masarati-2010-04-29-chain.1.pa > tch This is a duplicate of ITS#6540, this ITS will be closed. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#6772) slapcommon.c:495:9: error: SLAPMODIFY undeclared
by quanah＠zimbra.com 04 Jan '11

04 Jan '11

--On Tuesday, January 04, 2011 10:19 AM +0000 michael(a)stroeder.com wrote: > Full_Name: Michael Str?der > Version: RE24 > OS: Linux > URL: > Submission from: (NULL) (84.128.246.210) Don't file bugs on RE24 at this time. This is why you were already asked to leave it alone. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#6773) Per-connection extra stuff
by masarati＠aero.polimi.it 04 Jan '11

04 Jan '11

> masarati(a)aero.polimi.it writes: >> Unless there are objections, I'd commit it. > > Well, it breaks binary compatibility, but perhaps that'll break anyway? > That is, will overlays/modules compiled with 2.4.23 break with slapd > 2.4.24 or vice versa? No it won't, since I do not expect this to be released with 2.4.24 (nor with 2.4). In general, yes, it will break binary compatibility, but it won't break source code compatibility; eventuallysource code might if I move paged results and so under the ConnExtra umbrella, which is not something I'm struggling for at the moment. p.

1 0

Re: (ITS#6773) Per-connection extra stuff
by h.b.furuseth＠usit.uio.no 04 Jan '11

04 Jan '11

masarati(a)aero.polimi.it writes: > Unless there are objections, I'd commit it. Well, it breaks binary compatibility, but perhaps that'll break anyway? That is, will overlays/modules compiled with 2.4.23 break with slapd 2.4.24 or vice versa? -- Hallvard

1 0

(ITS#6773) Per-connection extra stuff
by masarati＠aero.polimi.it 04 Jan '11

04 Jan '11

Full_Name: Pierangelo Masarati Version: HEAD OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (188.153.18.39) Submitted by: ando I need to add extra stuff to the Connection structure, to save persistent data across operations. Right now, I'm planning to use it to support RFC 3829 authzid control. <http://www.openldap.org/lists/openldap-devel/201101/msg00005.html> Probably, this can collect other specific stuff like Paged Results c_pagedresults_state, Netscape plugin c_extensions, transactions c_txn_* and more. The patch is straightforward (I'm reproducing it here only for illustrative purposes): -- diff -u -r1.899 slap.h --- servers/slapd/slap.h 31 Dec 2010 19:02:41 -0000 1.899 +++ servers/slapd/slap.h 4 Jan 2011 13:15:07 -0000 @@ -2811,6 +2811,16 @@ /* * represents a connection from an ldap client */ + +/* This is only a header. Actual users should define their own + * structs with the ce_next / ce_key fields at the top and + * whatever else they need following. + */ +typedef struct ConnExtra { + LDAP_SLIST_ENTRY(ConnExtra) ce_next; + void *ce_key; +} ConnExtra; + /* structure state (protected by connections_mutex) */ enum sc_struct_state { SLAP_C_UNINITIALIZED = 0, /* MUST BE ZERO (0) */ @@ -2927,6 +2937,8 @@ void *c_extensions; /* Netscape plugin */ + LDAP_SLIST_HEAD(c_e, ConnExtra) c_extra; /* anything the backend needs */ + /* * Client connection handling */ -- Unless there are objections, I'd commit it. p.

1 0

Re: (ITS#6762) cloak overlay only works on first search entry
by masarati＠aero.polimi.it 04 Jan '11

04 Jan '11

> Full_Name: Hallvard B Furuseth > Version: 2.4.23, HEAD > OS: > URL: > Submission from: (NULL) (129.240.6.233) > Submitted by: hallvard > > > The cloak overlay only works on the first entry returned from a search. > Then it removes the callback, and the remaining attributes are > uncloaked. > > I checked this by removing the call to slap_freeself_cb() and the > setting of sc_cleanup, then it worked. And probably got a leak > somewhere, but I don't have time to find the right fix now. Should be fixed in HEAD. Please test. Thanks, p.

1 0

a problem of authentication fail in Ubuntu 10.04,slapd 2.4.21
by cn_gd＠126.com 04 Jan '11

04 Jan '11

hi all, I 'm install slapd follow bellow steps in ubuntu 10.04 lucid strictly: 1. apt-get install slapd * slapd -V @(#) $OpenLDAP: slapd 2.4.21 (Aug 10 2010 17:08:36) $ buildd@yellow:/build/buildd/openldap-2.4.21/debian/build/servers/slapd* 2. dpkg-reconfigure slapd 3.edit /etc/ldap/slapd.d/cn\=config.ldif 4. cat /etc/ldap/slapd.d/cn\=config.ldif dn: cn=config objectClass: olcGlobal cn: config olcArgsFile: /var/run/slapd/slapd.args olcLogLevel: none olcPidFile: /var/run/slapd/slapd.pid structuralObjectClass: olcGlobal dn: olcDatabase=bdb,cn=config objectClass: olcDatabaseConfig objectClass: olcBdbConfig olcDatabase: bdb olcSuffix: "dc=cg,dc=scsio,dc=ac,dc=cn" olcDbDirectory: /home/az/openldap-data olcRootDN: "cn=Manager,dc=cg,dc=scsio,dc=ac,dc=cn" olcRootPW: secret 4. /etc/init.d/slapd restart All step're OK,then I run bellow to test it: 5. ldapsearch -x -D "cn=Manager,dc=cg,dc=scsio,dc=ac,dc=cn" -w "secret" -H ldap://cg.scsio.ac.cn and it show that error: *ldap_bind: Invalid credentials (49) **I try again and again,but it'still the same.( using slappasswd to change it also turn to same problem). I wonder what's go wrong.any help would be greatly appreciated.Thank you in advance! ** *

1 0

(ITS#6772) slapcommon.c:495:9: error: �SLAPMODIFY� undeclared
by michael＠stroeder.com 04 Jan '11

04 Jan '11

Full_Name: Michael Ströder Version: RE24 OS: Linux URL: Submission from: (NULL) (84.128.246.210) Currently there seems to be something missing (did cvs up several times): cc -g -O4 -I../../include -I. -I./slapi -I. -I../../include -I/usr/include -I/usr/include -I/usr/include -I/usr/include -DDEVEL -DSLAP_CONFIG_DELETE -c -o slapcommon.o slapcommon.c slapcommon.c: In function slap_tool_init: slapcommon.c:495:9: error: SLAPMODIFY undeclared (first use in this function) slapcommon.c:495:9: note: each undeclared identifier is reported only once for each function it appears in make[2]: *** [slapcommon.o] Error 1 make[2]: Leaving directory `/usr/src/michael/openldap/OPENLDAP_REL_ENG_2_4/openldap/servers/slapd' make[1]: *** [all-common] Error 1 make[1]: Leaving directory `/usr/src/michael/openldap/OPENLDAP_REL_ENG_2_4/openldap/servers' make: *** [all-common] Error 1

1 0

(ITS#6771) Feature request: support for RFC 3829 authzid control
by masarati＠aero.polimi.it 04 Jan '11

04 Jan '11

Full_Name: Pierangelo Masarati Version: irrelevant OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (188.153.18.39) Submitted by: ando A simple module that implements RFC 3829 server-side is committed in contrib/slapd-modules/authzid; it only works for single-step bind. Extension to multi-step bind may not be trivial. p.

1 0

(ITS#6770) Proxy authorization fails with SASL-GSSAPI
by jwinius＠umrk.nl 03 Jan '11

03 Jan '11

Full_Name: Jaap Winius Version: 2.4.23-7 OS: Debian squeeze URL: Submission from: (NULL) (2001:888:10:d5f::2) Proxy authorization works with SIMPLE binds, as well as with SASL binds using various other mechanisms, but not with SASL and GSSAPI. In that case it may only work initially, but eventually the problem is that, for no apparent reason, the consumer instead attempts to use a SIMPLE bind to authenticate itself to the provider. Naturally, this fails. For detailed background and debugging info, see this thread: http://www.openldap.org/lists/openldap-technical/201101/msg00002.html

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs January 2011