June 2015 - openldap-bugs

(ITS#8163) Broken handling of deprecated attributes

by pierre＠reactos.org

Full_Name: Pierre Schweitzer Version: 2.4.40 OS: Ubuntu LTS 12.04.5 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (193.55.95.158) Hi, We are currently facing an issue with Jira 6.0.8 while interfacing it with OpenLDAP. When loging in, Jira attempts to query the following attributes: "uid mail sn givenName displayName objectClass javaSerializedData javaClassName javaFactory javaCodeBase javaReferenceAddress javaClassNames javaRemoteLocation" Unfortunately, javaRemoteLocation isn't in java.schema and appears to be deprecated. OpenLDAP replies with (ldapsearch result): # search result search: 2 result: 65 Object class viatation Seen from OpenLDAP logs: Apr 22 13:09:27 rose-java slapd[25272]: conn=1177 op=2 SEARCH RESULT tag=101 err=65 nentries=0 text= According to Jira support, this is an incorrect behavior from OpenLDAP, not matching the LDAP RFCs. Quoting them: "OpenLDAP should not be returning an error when querying for javaRemoteLocation, even if it is deprecated." If required for testing, we can provide more details such as Jira queries. Cheers,

8 years, 6 months

1
0
0 / 0

Re: (ITS#8158) cldap broken for aix and solaris

by goran.hammarback＠foxt.com

Hmm, my fingers thought it was still february. Now I have uploaded a file with the correct name, goran-hammarback-150603.ext. Regards, /Göran Hammarbäck On ons, 2015-06-03 at 00:18 +0200, Hallvard Breien Furuseth wrote: > On 29/05/15 14:42, goran.hammarback(a)foxt.com wrote: > > Here is a suggestion to a patch that has been tested on Solaris 11, AIX 7.1 and > > RedHat 6: > > > > *** libraries/liblber/sockbuf.c..org 2015-05-27 09:55:14.001639041 +0200 > > --- libraries/liblber/sockbuf.c > > That patch is empty. You can upload it to > ftp://ftp.openldap.org/incoming/your-name-YYMMDD.ext. > See the guidelines for contributing: > http://www.openldap.org/devel/contributing.html

8 years, 6 months

1
0
0 / 0

Re: (ITS#8158) cldap broken for aix and solaris

by goran.hammarback＠foxt.com

Not sure why the patch itself was not included. Anyway, I uploaded the patch (it is trivial) as goran-hammarback-150203.ext. Regards, /Göran Hammarbäck On ons, 2015-06-03 at 00:18 +0200, Hallvard Breien Furuseth wrote: > On 29/05/15 14:42, goran.hammarback(a)foxt.com wrote: > > Here is a suggestion to a patch that has been tested on Solaris 11, AIX 7.1 and > > RedHat 6: > > > > *** libraries/liblber/sockbuf.c..org 2015-05-27 09:55:14.001639041 +0200 > > --- libraries/liblber/sockbuf.c > > That patch is empty. You can upload it to > ftp://ftp.openldap.org/incoming/your-name-YYMMDD.ext. > See the guidelines for contributing: > http://www.openldap.org/devel/contributing.html

8 years, 6 months

1
0
0 / 0

Re: (ITS#8158) cldap broken for aix and solaris

by h.b.furuseth＠usit.uio.no

On 29/05/15 14:42, goran.hammarback(a)foxt.com wrote: > Here is a suggestion to a patch that has been tested on Solaris 11, AIX 7.1 and > RedHat 6: > > *** libraries/liblber/sockbuf.c..org 2015-05-27 09:55:14.001639041 +0200 > --- libraries/liblber/sockbuf.c That patch is empty. You can upload it to ftp://ftp.openldap.org/incoming/your-name-YYMMDD.ext. See the guidelines for contributing: http://www.openldap.org/devel/contributing.html

8 years, 6 months

1
0
0 / 0

Re: (ITS#8162) Problème parsing bad LDAP URI in slapo-unique uniqueURI parameter

by h.b.furuseth＠usit.uio.no

On 02/06/15 23:11, bdauvergne(a)entrouvert.com wrote: > I had configured an mdb backend with a unique overlay configured like this: > > add olcOverlay={4}unique,olcDatabase={2}mdb,cn=config > objectClass: olcOverlayConfig > objectClass: olcUniqueConfig > olcOverlay: {4}unique > olcUniqueURI: ldap://?supannAutreMail?sub > > When trying to add the first non root-entry of new DB openldap freeze and takes > 100% CPU. After activating loglevel 255 I saw that it was looping inside > mdb_search() logging 'scope not okay' with an increasing integer value in > front. Looks like a duplicate of ITS#8146, fixed in the OPENLDAP_REL_ENG_2_4 branch. Please test. Tarball: <http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs...> We might need a more general description of ITS#8146 in CHANGES.

8 years, 6 months

1
0
0 / 0

(ITS#8162) Probl�me parsing bad LDAP URI in slapo-unique uniqueURI parameter

by bdauvergne＠entrouvert.com

Full_Name: Benjamin Dauvergne Version: 2.4.40 OS: Debian URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (82.242.47.212) I had configured an mdb backend with a unique overlay configured like this: add olcOverlay={4}unique,olcDatabase={2}mdb,cn=config objectClass: olcOverlayConfig objectClass: olcUniqueConfig olcOverlay: {4}unique olcUniqueURI: ldap://?supannAutreMail?sub When trying to add the first non root-entry of new DB openldap freeze and takes 100% CPU. After activating loglevel 255 I saw that it was looping inside mdb_search() logging 'scope not okay' with an increasing integer value in front. The problem here is that le LDAP URI is missing a third 'slash' which should separate the missing hostname part from the base DN parameter. The RFC 2255 grammar seem to imply that the third slash is mandatory if there are other parameters after it. I think OpenLDAP should have complained about the malformed olcUniqueURI value, not accept it blindly and fail by entering an infinite loop. Overlay configuration that is working: add olcOverlay={4}unique,olcDatabase={2}mdb,cn=config objectClass: olcOverlayConfig objectClass: olcUniqueConfig olcOverlay: {4}unique olcUniqueURI: ldap:///?supannAutreMail?sub

8 years, 6 months

1
0
0 / 0

Re: (ITS#8161) index approx not working

by h.b.furuseth＠usit.uio.no

On 02/06/15 11:10, bernhard.pfeiffer(a)brz.gv.at wrote: > I configured this index: > > index cn eq,sub,approx > (...) > <= mdb_approx_candidates: (cn) not indexed Does it help to stop slapd, run sbin/slapindex, restart slapd? After inserting an index in slapd.conf, you must do that to index your existing values (if any). If you instead use cn=config and add an index over the LDAP protocol, slapd will index the values automatically.

8 years, 6 months

1
0
0 / 0

(ITS#8161) index approx not working

by bernhard.pfeiffer＠brz.gv.at

Full_Name: Bernhard Pfeiffer Version: 2.4.40 OS: SUSE Linux 11 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (85.158.227.32) Hey! I configured this index: index cn eq,sub,approx sn~=Bern But my search doesn't find anything: If i configure: index cn eq,sub and searching for: sn~=Bern I get some results. But in the logfile is written: <= mdb_approx_candidates: (cn) not indexed Is this a bug?

8 years, 6 months

1
0
0 / 0

Re: (ITS#8160) phonetic searches

by h.b.furuseth＠usit.uio.no

On 02/06/15 10:00, bernhard.pfeiffer(a)brz.gv.at wrote: > Is there any possibility to configure phontic search specially for Austria? ITS is for bug reports/enhancements. Use the openldap-technical mailinglist for help reqests. Anyway: No, soundex/metaphone is hardcoded in slapd approx match. See <openldap source>/servers/slapd/phonetic.c. Clients can do a little of this "by hand" by inserting many variants of a name (e.g. o instead of ö) as invisible attribute values in the directory, see the x-hidden examples in man slapd.conf. Closing this ITS. Hallvard

8 years, 6 months

1
0
0 / 0

(ITS#8160) phonetic searches

by bernhard.pfeiffer＠brz.gv.at

Full_Name: Bernhard Pfeiffer Version: 2.4.40 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (85.158.227.32) Hey! Is there any possibility to configure phontic search specially for Austria? fe.: cn=Jörg Mössmer How i have to configure that to openLDAP, is there anywhere a documentation about this? Greets, Bernhard

8 years, 6 months

1
0
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs June 2015