openldap-bugs August 2014

openldap-bugs@openldap.org

16 participants
39 discussions

(ITS#7923) constraint_close / free problems on olcDbDirectory change
by ebackes＠symas.com 20 Aug '14

20 Aug '14

Full_Name: Emily Backes Version: RE24 OS: URL: Submission from: (NULL) (50.113.67.84) Changing olcDbDirectory on a live server with overlays makes a mess; much like the recent ITS#7906, constraint has a problem with open/close management. constraint_close calls constraint_free( ap, 1 ) which wipes everything out, but the state is not restored when things are restarted. In particular, a second olcDbDirectory mod results in constraint_free being called again with garbage.

1 0

(ITS#7922) modify.c:77: bad nested if
by dcb314＠hotmail.com 19 Aug '14

19 Aug '14

Full_Name: David Binderman Version: 2.4.39 OS: Fedora Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (79.64.240.58) [modify.c:77] -> [modify.c:78]: (warning) Opposite conditions in nested 'if' blocks lead to a dead code block. if ( ml->sml_values != NULL ) { if ( ml->sml_values == NULL ) { continue; }

1 0

Re: (ITS#7094) slapd ciphersuite TLS_RSA_3DES_EDE_CBC_SHA1 not usable with GnuTLS
by ryan＠nardis.ca 17 Aug '14

17 Aug '14

I would consider this a duplicate of ITS#6251. More confusion about the gnutls cipher suite parsing changes. Setting olcTLSCipherSuite: +RSA:+3DES-CBC:+SHA1 works for me, with the Debian 2.4.23 package this was reported against. thanks, Ryan

1 0

Re: (ITS#7921) test058 fails with back-mdb
by hyc＠symas.com 16 Aug '14

16 Aug '14

michael(a)stroeder.com wrote: > Full_Name: Michael Ströder > Version: RE24 9321ecc040deb025675888559cc43052ee563c6a > OS: opensuse 12.3 x86_64 > URL: > Submission from: (NULL) (212.227.35.93) > > > With recent RE24 test058 always fails with back-mdb. test058 always fails anyway. Ignoring... > > Content of testrun/ upon request. > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7921) test058 fails with back-mdb
by michael＠stroeder.com 15 Aug '14

15 Aug '14

Full_Name: Michael Ströder Version: RE24 9321ecc040deb025675888559cc43052ee563c6a OS: opensuse 12.3 x86_64 URL: Submission from: (NULL) (212.227.35.93) With recent RE24 test058 always fails with back-mdb. Content of testrun/ upon request.

1 0

Re: (ITS#7919) slapd would not start with back-ldap database
by quanah＠zimbra.com 14 Aug '14

14 Aug '14

--On Thursday, August 14, 2014 7:43 AM +0000 dieter(a)dkluenter.de wrote: > Answering b), Yes I confirm, that this can be reproduced with=20 > openldap-OPENLDAP_REL_ENG_2_4-b046124 As noted by Howard, your configuration is invalid. --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7919) slapd would not start with back-ldap database
by dieter＠dkluenter.de 13 Aug '14

13 Aug '14

Am Wed, 13 Aug 2014 11:28:30 -0700 schrieb Quanah Gibson-Mount <quanah(a)zimbra.com>: > --On Wednesday, August 13, 2014 8:27 AM +0000 dieter(a)dkluenter.de > wrote: >=20 > > Sorry, it is back-ldap with pcache and it seems to be a pcache > > problem. When disabling pcache, slapd runs fine. >=20 > a) Confirm you still see this issue with current RE24 if you want it > fixed in the 2.4 series, as in general we're planning on 2.4.40 to be > the final release for 2.4 >=20 > b) If you are able to reproduce this with current RE24, please > provide an example configuration that causes the issue. test020 > passes w/o issue. Answering b), Yes I confirm, that this can be reproduced with=20 openldap-OPENLDAP_REL_ENG_2_4-b046124 -Dieter --=20 Dieter Kl=C3=BCnter | Systemberatung http://sys4.de GPG Key ID: E9ED159B 53=C2=B037'09,95"N 10=C2=B008'02,42"E

1 0

(ITS#7920) MDB_BAD_RSLOT while executing slapacl
by hyc＠openldap.org 13 Aug '14

13 Aug '14

Full_Name: Howard Chu Version: 2.4.39 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (78.155.233.73) Submitted by: hyc As discussed in this thread http://www.openldap.org/lists/openldap-technical/201312/msg00069.html slapacl leaves an open reader txn as soon as it calls mdb_tool_dn2id_get. If the ACLs in effect need to read any other entries, they call be_entry_get. mdb_entry_get doesn't know about the reader txn opened by the tool code, which causes this error. For 2.5 we should probably unify the slapd and tool entry points, there's no good reason for many of these tool APIs to exist; they're just redundant work.

1 0

Re: (ITS#7919) slapd would not start with back-ldap database
by hyc＠symas.com 13 Aug '14

13 Aug '14

quanah(a)zimbra.com wrote: > --On Wednesday, August 13, 2014 8:27 AM +0000 dieter(a)dkluenter.de wrote: > >> Sorry, it is back-ldap with pcache and it seems to be a pcache >> problem. When disabling pcache, slapd runs fine. > > a) Confirm you still see this issue with current RE24 if you want it fixed > in the 2.4 series, as in general we're planning on 2.4.40 to be the final > release for 2.4 > > b) If you are able to reproduce this with current RE24, please provide an > example configuration that causes the issue. test020 passes w/o issue. The example config is invalid. ### include schema/core.schema include schema/cosine.schema include schema/inetorgperson.schema # modulepath ../servers/slapd/overlays moduleload pcache.la database ldap uri ldap://example.com suffix dc=example,dc=com rootdn dc=example,dc=com rootpw xxx overlay pcache directory /tmp/testr/db.1.a pcache mdb 50000 2 500 3600 pcacheAttrset 0 mail uid pcacheAttrset 1 cn telephoneNumber pcachePersist TRUE pcacheTemplate (mail=) 0 10800 7200 pcacheTemplate (uid=) 1 10800 7200 index objectclass pres index mail,uid,telephoneNumber pres,eq database monitor ### "directory" is not a valid config keyword for the pcache overlay. It is a valid keyword for back-mdb, but here it was given before the "pcache mdb..." line so slapd doesn't yet know that back-mdb will be used. The slapo-pcache(5) manpage clearly states what directives are valid. Personally I'd be fine with leaving this to SEGV as it does. Catching user errors doesn't help much in the long run; either way slapd will fail to start so there's no difference either way. But in this case, the SEGV is now prevented in git master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7919) slapd would not start with back-ldap database
by quanah＠zimbra.com 13 Aug '14

13 Aug '14

--On Wednesday, August 13, 2014 8:27 AM +0000 dieter(a)dkluenter.de wrote: > Sorry, it is back-ldap with pcache and it seems to be a pcache > problem. When disabling pcache, slapd runs fine. a) Confirm you still see this issue with current RE24 if you want it fixed in the 2.4 series, as in general we're planning on 2.4.40 to be the final release for 2.4 b) If you are able to reproduce this with current RE24, please provide an example configuration that causes the issue. test020 passes w/o issue. Thanks --Quanah -- Quanah Gibson-Mount Server Architect Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs August 2014