Re: (ITS#6828) TLS fails to start when LDAP_OPT_CONNECT_ASYNC is used
by ipuleston＠SonicWALL.com
I have tested a fix and uploaded the patch to ftp.openldap.org/incoming as =
"ian-puleston-110214.patch". It includes small updates to 4 files in the op=
enldap directory - ldap-int.h, open.c, request.c and cyrus.c.
Note that I have not tested the change to cyrus.c since that file is not in=
cluded in the build that I use, but it is pretty much the same as that to r=
equest.c.
12 years, 3 months
(ITS#6829) Auditlog Mod Patch
by ksmith8＠ycp.edu
Full_Name: Kyle Smith
Version: 2.4.24
OS: Ubuntu 10.04
URL: http://faculty.ycp.edu/~ksmith8/patches/servers-slapd-overlays-auditlog.c...
Submission from: (NULL) (192.245.87.12)
This is an enhancement of the auditlog overlay. By using a new directive,
auditlog_single_line, the auditlog is outputted on a single line, instead of the
normal ldif style. I needed to make this change so that our log indexer doesn't
have to parse lots of ldif data, instead it will just index the fields as
written. This will also give the benefit of reduced filesize of the audit logs,
as it shortens the record by a fair number of characters.
How To configure:
Add "auditlog_single_line" to the "overlay auditlog" configuration in
slapd.conf.
12 years, 3 months
(ITS#6828) TLS fails to start when LDAP_OPT_CONNECT_ASYNC is used
by ipuleston＠sonicwall.com
Full_Name: Ian Puleston
Version: 2.4.23
OS: VxWorks
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (67.115.118.5)
When using TLS with OpenLDAP client the connection to the server sometimes fails
if LDAP_OPT_CONNECT_ASYNC is being used. It appears to be a timing issue so it
may work fine in some implementations, and in fact it works fine for me every
time if I have any debug output turned on that prints before starting TLS.
The problem is that ldap_int_tls_connect fails, and I'm pretty sure that it
fails because it tries to start the TLS handshake before the connect has
completed. Adding just one printf at the start of ldap_int_tls_connect delays it
enough that it then works OK every time for me, presumably because the connect
then completes first.
If I set just the LDAP_DEBUG_PACKETS, LDAP_DEBUG_ARGS and LDAP_DEBUG_CONNS debug
flags (0x0e) then it fails and I get just this one message printed:
"TLS: can't connect: .".
What appears to be missing is that before calling ldap_int_tls_start from
ldap_int_open_connection a call to ldap_int_poll should be made to check if the
connect has completed.
Also, something similar may be required before calling ldap_start_tls_s from
ldap_new_connection. It ends up calling back to ldap_send_initial_request, so
will that work OK when the connection is in state LDAP_CONNST_CONNECTING? Will
it result in LDAP_X_CONNECTING being returned?
12 years, 3 months
Re: (ITS#6810) valgrind output
by masarati＠aero.polimi.it
Bruno HALEBLIAN wrote:
> Hi,
>
> Attached here is valgrind output (some kind of crash I guess)
> Hope it helps, I willl take a look and try to figure out what it says.
There's clearly some invalid memory access, but the trace was probably
obtained using a stripped binary; an unstripped binary would have
probably given line numbers. Can you retry?
p.
12 years, 3 months
(ITS#6810) valgrind output
by bruno.haleblian＠gmail.com
--001636ed6965c05dfc049bfe938f
Content-Type: text/plain; charset=ISO-8859-1
Hi,
Attached here is valgrind output (some kind of crash I guess)
Hope it helps, I willl take a look and try to figure out what it says.
Regards,
Bruno.
--001636ed6965c05dfc049bfe938f
Content-Type: application/octet-stream; name="vlvdir02.valgrind.out"
Content-Disposition: attachment; filename="vlvdir02.valgrind.out"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_gk0wu7wk0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--001636ed6965c05dfc049bfe938f--
12 years, 3 months
Re: (ITS#6810) testing a fix.
by bruno.haleblian＠gmail.com
2011/2/9 =A0<masarati(a)aero.polimi.it>:
>
> That *should* never be NULL, AFAIK. =A0Is the issue reproducible? =A0If i=
t is,
> could you run the failing machine under valgrind --tool=3Dmemcheck
> --leak-check=3Dfull?
>
> p.
Thanks for your reply.
As it's my first look in slapd code, I'm just trying to understand
what's going wrong.
You suspect memory (overwrite or something) corruption I guess.
Unfortunately, crash is not easily reproducible.
To make brief, crashes happen under "heavy" updates coming from
scripts or EAI clients, after one ore more hours of load.
For now, both machines are running under memcheck as you suggested.
No crash so far, but some warnings at startup.
Here's what :
# valgrind --tool=3Dmemcheck --leak-check=3Dfull
/var/ldap/server/libexec/slapd -d0 -h ldap://*:389 ldaps://*:636 -f
/var/ldap/server/etc/openldap/slapd.conf -u ldap -g ldap | tee >
/tmp/valgrind.out
=3D=3D19951=3D=3D Memcheck, a memory error detector
=3D=3D19951=3D=3D Copyright (C) 2002-2009, and GNU GPL'd, by Julian Seward =
et al.
=3D=3D19951=3D=3D Using Valgrind-3.5.0 and LibVEX; rerun with -h for copyri=
ght info
=3D=3D19951=3D=3D Command: /var/ldap/server/libexec/slapd -d0 -h ldap://*:3=
89
ldaps://*:636 -f /var/ldap/server/etc/openldap/slapd.conf -u ldap -g
ldap
=3D=3D19951=3D=3D
=3D=3D19951=3D=3D Warning: set address range perms: large range [0x3901d000=
,
0x7901d000) (defined)
=3D=3D19951=3D=3D Warning: set address range perms: large range [0xc9c4040,
0x2473c448) (defined)
=3D=3D19951=3D=3D Conditional jump or move depends on uninitialised value(s=
)
=3D=3D19951=3D=3D at 0x4F18132: __dbt_usercopy (in
/var/ldap/berkeleydb/lib/libdb-4.8.so)
=3D=3D19951=3D=3D by 0x4ED17BF: __lock_get_pp (in
/var/ldap/berkeleydb/lib/libdb-4.8.so)
=3D=3D19951=3D=3D by 0x4CD8B5: bdb_dn2id_lock (in /var/ldap/server/libex=
ec/slapd)
=3D=3D19951=3D=3D by 0x4CDDC3: bdb_dn2id (in /var/ldap/server/libexec/sl=
apd)
=3D=3D19951=3D=3D by 0x4C987F: bdb_cache_find_ndn (in /var/ldap/server/l=
ibexec/slapd)
=3D=3D19951=3D=3D by 0x4CD6B8: bdb_dn2entry (in /var/ldap/server/libexec=
/slapd)
=3D=3D19951=3D=3D by 0x4D160D: bdb_entry_get (in /var/ldap/server/libexe=
c/slapd)
=3D=3D19951=3D=3D by 0x497449: overlay_entry_get_ov (in
/var/ldap/server/libexec/slapd)
=3D=3D19951=3D=3D by 0x52B65E: syncprov_db_open (in /var/ldap/server/lib=
exec/slapd)
=3D=3D19951=3D=3D by 0x4971C6: over_db_open (in /var/ldap/server/libexec=
/slapd)
=3D=3D19951=3D=3D by 0x443998: backend_startup_one (in
/var/ldap/server/libexec/slapd)
=3D=3D19951=3D=3D by 0x443C52: backend_startup (in /var/ldap/server/libe=
xec/slapd)
=3D=3D19951=3D=3D
Regards
Bruno.
12 years, 3 months
Re: (ITS#6753) Compare operation broken with attribute inheritance
by hyc＠symas.com
h.b.furuseth(a)usit.uio.no wrote:
> Full_Name: Hallvard B Furuseth
> Version: HEAD
> OS: Linux
> URL:
> Submission from: (NULL) (193.157.200.213)
> Submitted by: hallvard
>
>
> back-bdb, back-monitor: If attr A is ACL-protected and inherits from B,
> one can still check its value with ldapcompare ... 'B:value'.
>
> back-config: Compare doesn't seem to support attribute inheritance.
>
> root DSE, cn=subschema: Inheritance works correctly.
All Compare processing has been centralized in the frontend so all backends
implement it uniformly now.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
12 years, 3 months
ITS#6017
by masarati＠aero.polimi.it
I notice that the contrib contrib/slapd-modules/samba4/pguid.c related
to this ITS defines a "parentUUID" attribute
1.3.6.1.4.1.4203.666.1.59
NAME 'parentUUID'
DESC 'the value of the entryUUID of the parent'
EQUALITY UUIDMatch
ORDERING UUIDOrderingMatch
SYNTAX 1.3.6.1.1.16.1
USAGE dSAOperation
SINGLE-VALUE
NO-USER-MODIFICATION
which is very similar to the "superiorUUID" attribute
1.3.6.1.4.1.4203.666.1.11
NAME 'superiorUUID'
DESC 'UUID of the superior entry'
EQUALITY UUIDMatch
ORDERING UUIDOrderingMatch
SYNTAX 1.3.6.1.1.16.1
SINGLE-VALUE NO-USER-MODIFICATION
USAGE directoryOperation
defined in servers/slapd/schema_prep.c; although this contrib is not
currently used in samba4, I suggest "parentUUID" be defined as an alias
of "superiorUUID", or vice-versa, so that "parentUUID" becomes the
preferred form.
p.
12 years, 3 months
Re: (ITS#6827) SSL Unbind Hangs
by michael＠stroeder.com
masarati(a)aero.polimi.it wrote:
>> Also a simple SSL bind and unbind without any modifications to the AD
>> yields the
>> same hanging problem.
>
> So far I don't see OpenLDAP specific issues here (assuming python-ldap is
> linked to OpenLDAP's client library).
Another user of the Debian package of python-ldap reported such a behaviour on
the python-ldap-dev mailing list. The problem was solved by re-compiling
OpenLDAP libs and python-ldap and link against OpenSSL instead of GnuTLS. (Sigh!)
Ciao, Michael.
12 years, 3 months
