openldap-bugs March 2012

openldap-bugs@openldap.org

28 participants
78 discussions

Re: (ITS#6987) cn=config renumbers indexes on startup without modrdn-ing them
by hyc＠symas.com 27 Mar '12

27 Mar '12

Ondrej Kuznik wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 01/12/2012 12:27 PM, hyc(a)symas.com wrote: >> This ITS still appears to me to be invalid. bconfig treats all siblings *of >> the same type* as a single ordering. Your demonstration code is claiming your >> entries are all of the same type, even though they aren't. I.e., all entries >> in cn=config of a given type have only one distinguished naming attribute. You >> have used olcTestAttrOne and olcTestAttrTwo for the same type, so cn=config >> doesn't distinguish them in its sort order. > > I tried implementing a check for Cft_Misc that considers only siblings > of the same distinguished naming attribute: > ftp://ftp.openldap.org/incoming/ondrej-kuznik-20120309-ITS-6987.patch I've committed a cleaned up version of this patch to git master. Thanks for the patch. > > During an IRC conversation in January you suggested not renumbering > Cft_Misc entries at all, like the patch below. Such a change might > however affect other overlays since captive backends seem to be regarded > as Cft_Misc entries too, based on my tests with it: > ftp://ftp.openldap.org/incoming/ondrej-kuznik-20120309-ITS-6987-no-renumber… Decided we don't know enough about how Cft_misc entries will be used in the future to take this approach. > > The attached file is derived from OpenLDAP Software. All of the > modifications to OpenLDAP Software represented in the following > patch(es) were developed by Acision. Acision has not assigned rights > and/or interest in this work to any party. I, Ondrej Kuznik am > authorized by Acision, my employer, to release this work under the > following terms. > > The attached modifications to OpenLDAP Software are subject to the > following notice: > Copyright 2012 Acision > Redistribution and use in source and binary forms, with or without > modification, are permitted only as authorized by the OpenLDAP Public > License. > > - -- > Ondrej Kuznik > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.11 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iEYEARECAAYFAk9aHu0ACgkQ9GWxeeH+cXvpGgCeN5iMhB6iyq3MjFJVx45AWmX+ > uykAnjidKeewlH1EhlBBr+BTFgxZNodM > =+FEP > -----END PGP SIGNATURE----- > > This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you for understanding. > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7215) Configuration Bug of index_substr_if_{max, min}len
by h.b.furuseth＠usit.uio.no 26 Mar '12

26 Mar '12

On Mon, 26 Mar 2012 19:16:11 GMT, tixu(a)cs.ucsd.edu wrote: > just set the following two lines in the beginning of the slapd.conf, > > index_substr_if_maxlen 100 > index_substr_if_minlen 5 > > slapd starts without a warning and can serve requests. That's not the example you gave in last message. The error message should be more helpful: If you want minlen that big, you have to set maxlen first. Except, this can still break cn=config replication: Either setting this configuration or reverting to the old one will not work. I don't know if cn=config supports delaying this check until the entire new entry is available, and reverting if the check fails? -- Hallvard

1 0

Re: (ITS#7215) Configuration Bug of index_substr_if_{max, min}len
by tixu＠cs.ucsd.edu 26 Mar '12

26 Mar '12

--000325575576f2e15a04bc2a31c8 Content-Type: text/plain; charset=ISO-8859-1 hmmm... I have to say I can replay it every time. just set the following two lines in the beginning of the slapd.conf, index_substr_if_maxlen 100 index_substr_if_minlen 5 slapd starts without a warning and can serve requests. T On Mon, Mar 26, 2012 at 2:43 AM, Howard Chu <hyc(a)symas.com> wrote: > tixu(a)cs.ucsd.edu wrote: > >> Full_Name: Tianyin Xu >> Version: 2.4.30 >> OS: Ubuntu Linux 10.04 >> URL: ftp://ftp.openldap.org/**incoming/<ftp://ftp.openldap.org/incoming/> >> Submission from: (NULL) (128.54.167.68) >> >> >> 1. Symptom: >> >> In the main configuration file of OpenLDAP (slapd.conf), set the following >> configuration: >> >> index_substr_if_minlen 100 >> index_substr_if_maxlen 5 >> >> Then, everything is fine. The system behaves as expectation. However, if >> reverse >> the order of the two configuration line as follows: >> >> index_substr_if_maxlen 5 >> index_substr_if_minlen 100 >> >> Then, the system refused to start, with the following misleading message: >> >> Mar 25 21:29:18 tianyin-desktop slapd[12700]: >> /home/tianyin/openldap-2.4.30/**etc/openldap/slapd.conf: line 1: >> <index_substr_if_minlen> invalid value (5) >> > > Unable to reproduce this symptom. In both cases I get > > testrun/slapd.1.conf: line 31: <index_substr_if_minlen> invalid value (100) > > Closing this ITS. > > >> ------------------------------**--------------------------- >> >> 2. Root cause in terms of code snippet >> >> (1) servers/slapd/slap.h >> >> #define SLAP_INDEX_SUBSTR_IF_MINLEN_**DEFAULT 2 >> #define SLAP_INDEX_SUBSTR_IF_MAXLEN_**DEFAULT 4 >> >> (2) servers/slapd/schema_init.c >> >> unsigned int index_substr_if_minlen = SLAP_INDEX_SUBSTR_IF_MINLEN_** >> DEFAULT; >> unsigned int index_substr_if_maxlen = SLAP_INDEX_SUBSTR_IF_MAXLEN_** >> DEFAULT; >> >> (3) servers/slapd/bconfig.c >> >> case CFG_SSTR_IF_MAX: >> if (c->value_uint< index_substr_if_minlen) { >> snprintf(c->cr_msg, sizeof(c->cr_msg), "<%s> invalid value", >> c->argv[0]); >> Debug(LDAP_DEBUG_ANY, "%s: %s (%d)\n", c->log, c->cr_msg, >> c->value_int); >> return(1); >> } >> index_substr_if_maxlen = c->value_uint; >> break; >> >> case CFG_SSTR_IF_MIN: >> if (c->value_uint> index_substr_if_maxlen) { >> snprintf(c->cr_msg, sizeof( c->cr_msg ), "<%s> invalid value", >> c->argv[0]); >> Debug(LDAP_DEBUG_ANY, "%s: %s (%d)\n", c->log, c->cr_msg, >> c->value_int >> ); >> return(1); >> } >> index_substr_if_minlen = c->value_uint; >> break; >> >> (4) backtrace >> >> #0 config_generic (c=0x915760) at bconfig.c:1996 >> #1 0x0000000000433a00 in config_set_vals (Conf=0x8146c0, c=0x915760) at >> config.c:345 >> #2 0x0000000000433f5f in config_add_vals (Conf=0x8146c0, c=0x915760) at >> config.c:418 >> #3 0x00000000004351b3 in read_config_file (fname=0x5a0a98 >> "/home/tianyin/openldap-2.4.**30/etc/openldap/slapd.conf", depth=0, >> cf=0x0, >> cft=0x8140c0) at config.c:783 >> #4 0x000000000042846b in read_config (fname=0x0, dir=0x0) at >> bconfig.c:4213 >> #5 0x000000000041c217 in main (argc=1, argv=0x7fffffffe2f8) at main.c:792 >> >> ------------------------------**--------------------------- >> >> It's quite clear that the order matters, and this should be a bug related >> to >> configuration. >> >> Thanks, >> Tianyin >> >> >> > > -- > -- Howard Chu > CTO, Symas Corp. http://www.symas.com > Director, Highland Sun http://highlandsun.com/hyc/ > Chief Architect, OpenLDAP http://www.openldap.org/**project/<http://www.openldap.org/project/> > -- Tianyin XU, http://cseweb.ucsd.edu/~tixu/ --000325575576f2e15a04bc2a31c8 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable hmmm... I have to say I can replay it every time.<div><br></div><div>just s= et the following two lines in the beginning of the slapd.conf,</div><div><b= r></div><div><div>index_substr_if_maxlen 100</div><div>index_substr_if_minl= en 5</div> <div><br></div><div>slapd starts without a warning and can serve requests.<= /div><div><br></div><div>T</div> <div><br></div><br><div class=3D"gmail_quote">On Mon, Mar 26, 2012 at 2:43 = AM, Howard Chu <span dir=3D"ltr"><<a href=3D"mailto:hyc@symas.com" targe= t=3D"_blank">hyc(a)symas.com</a>></span> wrote:<br><blockquote class=3D"gm= ail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-le= ft:1ex"> <div><a href=3D"mailto:tixu@cs.ucsd.edu" target=3D"_blank">tixu(a)cs.ucsd.edu= </a> wrote:<br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"> Full_Name: Tianyin Xu<br> Version: 2.4.30<br> OS: Ubuntu Linux 10.04<br> URL: <a href=3D"ftp://ftp.openldap.org/incoming/" target=3D"_blank">ftp://f= tp.openldap.org/<u></u>incoming/</a><br> Submission from: (NULL) (128.54.167.68)<br> <br> <br> 1. Symptom:<br> <br> In the main configuration file of OpenLDAP (slapd.conf), set the following<= br> configuration:<br> <br> index_substr_if_minlen 100<br> index_substr_if_maxlen 5<br> <br> Then, everything is fine. The system behaves as expectation. However, if re= verse<br> the order of the two configuration line as follows:<br> <br> index_substr_if_maxlen 5<br> index_substr_if_minlen 100<br> <br> Then, the system refused to start, with the following misleading message:<b= r> <br> Mar 25 21:29:18 tianyin-desktop slapd[12700]:<br> /home/tianyin/openldap-2.4.30/<u></u>etc/openldap/slapd.conf: line 1:<br> <index_substr_if_minlen> =A0invalid value (5)<br> </blockquote> <br></div> Unable to reproduce this symptom. In both cases I get<br> <br> testrun/slapd.1.conf: line 31: <index_substr_if_minlen> invalid value= (100)<br> <br> Closing this ITS.<div><div><br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"> <br> ------------------------------<u></u>---------------------------<br> <br> 2. Root cause in terms of code snippet<br> <br> (1) servers/slapd/slap.h<br> <br> #define SLAP_INDEX_SUBSTR_IF_MINLEN_<u></u>DEFAULT =A0 =A0 2<br> #define SLAP_INDEX_SUBSTR_IF_MAXLEN_<u></u>DEFAULT =A0 =A0 4<br> <br> (2) servers/slapd/schema_init.c<br> <br> unsigned int index_substr_if_minlen =3D SLAP_INDEX_SUBSTR_IF_MINLEN_<u></u>= DEFAULT;<br> unsigned int index_substr_if_maxlen =3D SLAP_INDEX_SUBSTR_IF_MAXLEN_<u></u>= DEFAULT;<br> <br> (3) servers/slapd/bconfig.c<br> <br> case CFG_SSTR_IF_MAX:<br> =A0 =A0 if (c->value_uint< =A0index_substr_if_minlen) {<br> =A0 =A0 =A0 =A0 snprintf(c->cr_msg, sizeof(c->cr_msg), "<%s&= gt; =A0invalid value",<br> c->argv[0]);<br> =A0 =A0 =A0 =A0 Debug(LDAP_DEBUG_ANY, "%s: %s (%d)\n", c->log= , c->cr_msg,<br> c->value_int);<br> =A0 =A0 =A0 =A0 return(1);<br> =A0 =A0 }<br> =A0 =A0 index_substr_if_maxlen =3D c->value_uint;<br> =A0 =A0 break;<br> <br> case CFG_SSTR_IF_MIN:<br> =A0 =A0 if (c->value_uint> =A0index_substr_if_maxlen) {<br> =A0 =A0 =A0 =A0 snprintf(c->cr_msg, sizeof( c->cr_msg ), "<%= s> =A0invalid value",<br> c->argv[0]);<br> =A0 =A0 =A0 =A0 Debug(LDAP_DEBUG_ANY, "%s: %s (%d)\n", c->log= , c->cr_msg, c->value_int<br> );<br> =A0 =A0 =A0 =A0 return(1);<br> =A0 =A0 }<br> =A0 =A0 index_substr_if_minlen =3D c->value_uint;<br> =A0 =A0 break;<br> <br> (4) backtrace<br> <br> #0 =A0config_generic (c=3D0x915760) at bconfig.c:1996<br> #1 =A00x0000000000433a00 in config_set_vals (Conf=3D0x8146c0, c=3D0x915760)= at<br> config.c:345<br> #2 =A00x0000000000433f5f in config_add_vals (Conf=3D0x8146c0, c=3D0x915760)= at<br> config.c:418<br> #3 =A00x00000000004351b3 in read_config_file (fname=3D0x5a0a98<br> "/home/tianyin/openldap-2.4.<u></u>30/etc/openldap/slapd.conf", d= epth=3D0, cf=3D0x0,<br> cft=3D0x8140c0) at config.c:783<br> #4 =A00x000000000042846b in read_config (fname=3D0x0, dir=3D0x0) at bconfig= .c:4213<br> #5 =A00x000000000041c217 in main (argc=3D1, argv=3D0x7fffffffe2f8) at main.= c:792<br> <br> ------------------------------<u></u>---------------------------<br> <br> It's quite clear that the order matters, and this should be a bug relat= ed to<br> configuration.<br> <br> Thanks,<br> Tianyin<br> <br> <br> </blockquote> <br> <br></div></div><span><font color=3D"#888888"> -- <br> =A0-- Howard Chu<br> =A0CTO, Symas Corp. =A0 =A0 =A0 =A0 =A0 <a href=3D"http://www.symas.com" t= arget=3D"_blank">http://www.symas.com</a><br> =A0Director, Highland Sun =A0 =A0 <a href=3D"http://highlandsun.com/hyc/" = target=3D"_blank">http://highlandsun.com/hyc/</a><br> =A0Chief Architect, OpenLDAP =A0<a href=3D"http://www.openldap.org/project= /" target=3D"_blank">http://www.openldap.org/<u></u>project/</a><br> </font></span></blockquote></div><br><br clear=3D"all"><div><br></div>-- <b= r><span style=3D"text-indent:0px;letter-spacing:normal;font-variant:normal;= text-align:-webkit-auto;font-style:normal;font-weight:normal;line-height:no= rmal;border-collapse:separate;text-transform:none;font-size:medium;white-sp= ace:normal;font-family:'Times New Roman';word-spacing:0px"><span st= yle=3D"color:rgb(102,102,102);font-family:arial;font-size:small">Tianyin XU= ,<br> <a href=3D"http://cseweb.ucsd.edu/%7Etixu/" target=3D"_blank">http://cseweb= .ucsd.edu/~tixu/</a></span></span><br> </div> --000325575576f2e15a04bc2a31c8--

1 0

Re: (ITS#7213) back-mdb corruption with quickmode
by hyc＠symas.com 26 Mar '12

26 Mar '12

quanah(a)zimbra.com wrote: > --On Wednesday, March 21, 2012 1:41 AM +0000 quanah(a)OpenLDAP.org wrote: > >> Full_Name: Quanah Gibson-Mount >> Version: 2.4.30 >> OS: Linux 2.6 >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (75.108.184.39) >> >> >> Using quickmode with slapadd can result in a corrupt database. Fixed in git master >> > > zimbra@zqa-067:~$ /opt/zimbra/openldap/sbin/slapadd -q -F > /opt/zimbra/data/ldap/config -b '' -l /opt/zimbra/data/ldap/ldap.80 > _#################### 100.00% eta none elapsed none fast! > Closing DB... > zimbra@zqa-067:~$ ldap start > Started slapd: pid 27998 > zimbra@zqa-067:~$ ./libexec/zmslapcat /tmp > # no data for entry id=00000024 > > No issue when you don't use -q: > > /opt/zimbra/openldap/sbin/slapadd -F /opt/zimbra/data/ldap/config -b '' -l > /opt/zimbra/data/ldap/ldap.80 > _#################### 100.00% eta none elapsed none fast! > Closing DB... > zimbra@zqa-067:~$ ldap start > Started slapd: pid 30573 > zimbra@zqa-067:~$ ./libexec/zmslapcat /tmp > zimbra@zqa-067:~$ > > > --Quanah > > -- > > Quanah Gibson-Mount > Sr. Member of Technical Staff > Zimbra, Inc > A Division of VMware, Inc. > -------------------- > Zimbra :: the leader in open source messaging and collaboration > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7217) libperl-dev check is missing in configure
by hyc＠symas.com 26 Mar '12

26 Mar '12

robert.eikermann(a)rwth-aachen.de wrote: > Full_Name: Robert Eikermann > Version: 2.4.30 > OS: Ubuntu 11.10 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (137.226.168.117) > > > Hi, > "configure" checked a lot libraries in my system, but not libperl-dev the error > (/usr/bin/ld: cannot find -lperl) appears first when I was compiling openldap. > > sudo apt-get install libperl-dev helped. Not an OpenLDAP bug. Closing this ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7217) libperl-dev check is missing in configure
by robert.eikermann＠rwth-aachen.de 26 Mar '12

26 Mar '12

Full_Name: Robert Eikermann Version: 2.4.30 OS: Ubuntu 11.10 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (137.226.168.117) Hi, "configure" checked a lot libraries in my system, but not libperl-dev the error (/usr/bin/ld: cannot find -lperl) appears first when I was compiling openldap. sudo apt-get install libperl-dev helped.

1 0

Re: (ITS#7207) Re-binding to a failed connection segfaults
by hyc＠symas.com 26 Mar '12

26 Mar '12

jsynacek(a)redhat.com wrote: > Full_Name: Jan Synacek > Version: 2.4.30 > OS: Fedora 16 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (209.132.186.34) > > > I've created a small reproducer, that calls ldap_sasl_interactive_bind_s after > it has been called once and failed, which causes a segfault. Fixed now in git master, thanks for the report. > > I've traced this bug with gdb: > $ gdb ./reproducer > > GNU gdb (GDB) Fedora (7.3.50.20110722-10.fc16) > Copyright (C) 2011 Free Software Foundation, Inc. > License GPLv3+: GNU GPL version 3 or later<http://gnu.org/licenses/gpl.html> > This is free software: you are free to change and redistribute it. > There is NO WARRANTY, to the extent permitted by law. Type "show copying" > and "show warranty" for details. > This GDB was configured as "x86_64-redhat-linux-gnu". > For bug reporting instructions, please see: > <http://www.gnu.org/software/gdb/bugs/>... > Reading symbols from > /home/jsynacek/work/bz784989-openldap-rebinding/reproducer...done. > (gdb) r > Starting program: /home/jsynacek/work/bz784989-openldap-rebinding/reproducer > [Thread debugging using libthread_db enabled] > Using host libthread_db library "/lib64/libthread_db.so.1". > ldap_sasl_interactive_bind: user selected: GSSAPI > ldap_int_sasl_bind: GSSAPI > ldap_new_connection 1 1 0 > ldap_int_open_connection > ldap_connect_to_host: TCP localhost:636 > ldap_new_socket: 7 > ldap_prepare_socket: 7 > ldap_connect_to_host: Trying ::1 636 > ldap_pvt_connect: fd: 7 tm: -1 async: 0 > TLS: error: tlsm_PR_Recv returned 0 - error 21:Is a directory > TLS: error: connect - force handshake failure: errno 21 - moznss error -5938 > TLS: can't connect: TLS error -5938:Encountered end of file. > ldap_msgfree > ldap_err2string > bind failed: Can't contact LDAP server, retrying for fun and profit! > ldap_sasl_interactive_bind: user selected: GSSAPI > ldap_int_sasl_bind: GSSAPI > > Program received signal SIGSEGV, Segmentation fault. > ldap_int_sasl_bind (ld=0x603130, dn=0x0, mechs=0x401a30 "GSSAPI", sctrls=0x0, > cctrls=0x0, flags=1, > interact=0x401660<lutil_sasl_interact>, defaults=0x60cae0, result=0x0, > rmech=0x7fffffffd878, > msgid=0x7fffffffd88c) at ../../../libraries/libldap/cyrus.c:444 > 444 oldctx = ld->ld_defconn->lconn_sasl_authctx; > (gdb) p ld->ldc->ldc_defconn > $1 = (LDAPConn *) 0x0 > > If you set slapd to use TLS certs (uncomment the 'TLS*' lines in the config), > there is no segfault. > > The reproducer and the config can be found here: > URL1: http://jsynacek.fedorapeople.org/openldap/rebind-segfault/reproducer.c > URL2: http://jsynacek.fedorapeople.org/openldap/rebind-segfault/cn=config.ldif > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7205) olcSuffix does not support modifications
by hyc＠symas.com 26 Mar '12

26 Mar '12

elecharny(a)apache.org wrote: > Full_Name: Emmanuel Lecharny > Version: 2.4.24 > OS: Ubuntu > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (78.226.4.211) > > > The olcSuffix AT, which is not declared as SINGLE-VALUED, does not support more > than one value. Per se, the definition of this AT should be explicit about it. No. The attribute is not single-valued, but individual backend implementations may only allow a single suffix. > However, this is not the main issue. > > Trying to modify its value using such a LDIF file : > > dn: olcDatabase={3}ldif,cn=config > changetype: modify > delete: olcSuffix > olcSuffix: cn=test2 > - > add: olcSuffix > olcSuffix: cn=test3 > - > > leads to an error : > #!ERROR [LDAP: error code 80 -<olcSuffix> Only one suffix is allowed on this > ldif backend] > > It seems that there is an internal check that is done to insure that the > olcSuffix does not contain more than one value, bypassing the AT definition, and > that this check is not correctly done when a modify operation is sent. Thanks for the report, now fixed in master. > > Deleting the olcSuffix AT and injcting a new one works. > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7214) Openldap contextCSN issue on seconday ldap server
by hyc＠symas.com 26 Mar '12

26 Mar '12

pawank.kamboj(a)gmail.com wrote: > Full_Name: Pawan Kumar > Version: openldap-2.3.32 > OS: CentOS release 4.5 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (14.140.116.135) > > That release is over 5 years old and the Project stopped supporting it years ago. If you require support on this release contact your distribution provider. Otherwise, upgrade to a current release (2.4.30 is latest). > Hi, > We are using openldap-2.3.32 on CentOS release 4.5(2.6.9-89.0.25.ELsmp). > We have master-slave setup and we have two secondary ldap servers on which we > are only replicating the one of our OU. We are not able see the contextCSN on > secondary ldap servers. we are using the syncreplca(delta sync replication using > accesslog. > Below are the secondary slapd.conf replication section. > > syncrepl rid=111 provider=ldap://masterldapserver type=refreshAndPersist > retry="60 10 300 +" searchbase="ou=people,dc=example,dc=co,dc=in" > schemachecking=off bindmethod=simple binddn="cn=Manager,dc=example,dc=co,dc=in" > credentials=password logbase="cn=accesslog" > logfilter="(&(objectClass=auditWriteObject)(reqResult=0))" syncdata=accesslog > > And how we can monitor ldap replication in that case where we are replicating > only one OU from master ldap server? > > any quick response will be appreciated. > > > > > > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7215) Configuration Bug of index_substr_if_{max, min}len
by hyc＠symas.com 26 Mar '12

26 Mar '12

tixu(a)cs.ucsd.edu wrote: > Full_Name: Tianyin Xu > Version: 2.4.30 > OS: Ubuntu Linux 10.04 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (128.54.167.68) > > > 1. Symptom: > > In the main configuration file of OpenLDAP (slapd.conf), set the following > configuration: > > index_substr_if_minlen 100 > index_substr_if_maxlen 5 > > Then, everything is fine. The system behaves as expectation. However, if reverse > the order of the two configuration line as follows: > > index_substr_if_maxlen 5 > index_substr_if_minlen 100 > > Then, the system refused to start, with the following misleading message: > > Mar 25 21:29:18 tianyin-desktop slapd[12700]: > /home/tianyin/openldap-2.4.30/etc/openldap/slapd.conf: line 1: > <index_substr_if_minlen> invalid value (5) Unable to reproduce this symptom. In both cases I get testrun/slapd.1.conf: line 31: <index_substr_if_minlen> invalid value (100) Closing this ITS. > > --------------------------------------------------------- > > 2. Root cause in terms of code snippet > > (1) servers/slapd/slap.h > > #define SLAP_INDEX_SUBSTR_IF_MINLEN_DEFAULT 2 > #define SLAP_INDEX_SUBSTR_IF_MAXLEN_DEFAULT 4 > > (2) servers/slapd/schema_init.c > > unsigned int index_substr_if_minlen = SLAP_INDEX_SUBSTR_IF_MINLEN_DEFAULT; > unsigned int index_substr_if_maxlen = SLAP_INDEX_SUBSTR_IF_MAXLEN_DEFAULT; > > (3) servers/slapd/bconfig.c > > case CFG_SSTR_IF_MAX: > if (c->value_uint< index_substr_if_minlen) { > snprintf(c->cr_msg, sizeof(c->cr_msg), "<%s> invalid value", > c->argv[0]); > Debug(LDAP_DEBUG_ANY, "%s: %s (%d)\n", c->log, c->cr_msg, > c->value_int); > return(1); > } > index_substr_if_maxlen = c->value_uint; > break; > > case CFG_SSTR_IF_MIN: > if (c->value_uint> index_substr_if_maxlen) { > snprintf(c->cr_msg, sizeof( c->cr_msg ), "<%s> invalid value", > c->argv[0]); > Debug(LDAP_DEBUG_ANY, "%s: %s (%d)\n", c->log, c->cr_msg, c->value_int > ); > return(1); > } > index_substr_if_minlen = c->value_uint; > break; > > (4) backtrace > > #0 config_generic (c=0x915760) at bconfig.c:1996 > #1 0x0000000000433a00 in config_set_vals (Conf=0x8146c0, c=0x915760) at > config.c:345 > #2 0x0000000000433f5f in config_add_vals (Conf=0x8146c0, c=0x915760) at > config.c:418 > #3 0x00000000004351b3 in read_config_file (fname=0x5a0a98 > "/home/tianyin/openldap-2.4.30/etc/openldap/slapd.conf", depth=0, cf=0x0, > cft=0x8140c0) at config.c:783 > #4 0x000000000042846b in read_config (fname=0x0, dir=0x0) at bconfig.c:4213 > #5 0x000000000041c217 in main (argc=1, argv=0x7fffffffe2f8) at main.c:792 > > --------------------------------------------------------- > > It's quite clear that the order matters, and this should be a bug related to > configuration. > > Thanks, > Tianyin > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs March 2012