openldap-bugs October 2016

openldap-bugs@openldap.org

22 participants
39 discussions

(ITS#8521) Cannot have replication working after setting up the replication config in slapd.d
by elecharny＠apache.org 21 Oct '16

21 Oct '16

Full_Name: Emmanuel L.charny Version: 2.4.45 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (90.92.161.247) Replication won't start if we set it up on running servers configured with slapd.d. The scenario is the following : o We have 2 servers, one will become the provider, the other the consumer o They are initially empty%2ususing MDB (see the attached configurations, converted from slapd.conf to slapd.d) o We start the 2 servers o Step 1 : On the provider, we inject the following entry : dn: cn=config changetype: modify add: olcServerId olcServerId: 1 -

1 0

Re: (ITS#8504) LDMB: Return EPIPE from mdb_env_copyfd2 instead abort on SIGPIPE
by lmb＠cloudflare.com 20 Oct '16

20 Oct '16

--001a114741aec1bad3053f481b06 Content-Type: text/plain; charset=UTF-8 On 20 October 2016 at 09:35, Hallvard Breien Furuseth < h.b.furuseth(a)usit.uio.no> wrote: > > Hmm. Nevermind, it's probably better to leave that to the user. > It gets ugly for a library to meddle with the current thread's > signals. I.e. it must check if SIGPIPE was already pending > before the call, and don't collect it on EPIPE in that case. > Yeah, I agree. Your changes LGTM. Interesting point re atomic int write, I wasn't entirely sure how mc_error could be accesses, so I decided to play it safe. -- Lorenz Bauer | Systems Engineer 25 Lavington St., London SE1 0NZ www.cloudflare.com --001a114741aec1bad3053f481b06 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">= On 20 October 2016 at 09:35, Hallvard Breien Furuseth <span dir=3D"ltr">&lt= ;<a href=3D"mailto:h.b.furuseth@usit.uio.no" target=3D"_blank">h.b.furuseth= @usit.uio.no</a>></span> wrote:<blockquote class=3D"gmail_quote" style= =3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hmm.=C2=A0 Nevermind, it's probably better to leave that to the user.<b= r> It gets ugly for a library to meddle with the current thread's<br> signals.=C2=A0 I.e. it must check if SIGPIPE was already pending<br> before the call, and don't collect it on EPIPE in that case.<span class= =3D"HOEnZb"><font color=3D"#888888"><br></font></span></blockquote></div><d= iv><br></div><div>Yeah, I agree. Your changes LGTM.</div><div><br></div><di= v>Interesting point re atomic int write, I wasn't entirely sure how mc_= error could be accesses, so I decided to play it safe.</div><div><br></div>= -- <br><div class=3D"gmail_signature" data-smartmail=3D"gmail_signature">Lo= renz Bauer =C2=A0| =C2=A0Systems Engineer<br>25 Lavington St., London SE1 0= NZ<br><br><a href=3D"http://www.cloudflare.com" target=3D"_blank">www.cloud= flare.com</a></div> </div></div> --001a114741aec1bad3053f481b06--

1 0

Re: (ITS#8504) LDMB: Return EPIPE from mdb_env_copyfd2 instead abort on SIGPIPE
by h.b.furuseth＠usit.uio.no 20 Oct '16

20 Oct '16

I wrote: > And.. duh, we've forgotten mdb_copy without MDB_CP_COMPACT. > I'll do it later if nobody beats me to it. Hmm. Nevermind, it's probably better to leave that to the user. It gets ugly for a library to meddle with the current thread's signals. I.e. it must check if SIGPIPE was already pending before the call, and don't collect it on EPIPE in that case. -- Hallvard

1 0

Re: (ITS#8504) LDMB: Return EPIPE from mdb_env_copyfd2 instead abort on SIGPIPE
by h.b.furuseth＠usit.uio.no 20 Oct '16

20 Oct '16

On 27/09/16 22:14, lmb(a)cloudflare.com wrote: >On 26 September 2016 at 20:48, Hallvard Breien Furuseth <h.b.furuseth(a)usit.uio.no> wrote: >> I think we can skip sigwait() too since the thread will exit when done. >> (...) > > That's what my initial patch did. At least on OS X this leads to the > process receiving SIGPIPE and dying. OK. I've put a fixed version including that comment in branch "mdb/its8504-sigpipe" @ <git://git.uio.no/u/hbf/openldap.git>. We can squash the commits later: Never clear mc_error, we'd lose failure in the other thread. It's not mutex-protected, which is OK: If both threads set it, we'll get one of the errors. LMDB already expects atomic int. And.. duh, we've forgotten mdb_copy without MDB_CP_COMPACT. I'll do it later if nobody beats me to it. Test: Comment out SIGPIPE in mdb_copy.c, then run bash$ (sleep 1; ./mdb_copy testdb; echo exit $? >&2) | true exit 141 Exit values >= 128 are aborts from signals.

1 0

Re: (ITS#8520) Maximum number os entries
by quanah＠symas.com 18 Oct '16

18 Oct '16

--On Tuesday, October 18, 2016 6:41 PM +0000 teresarosado.net(a)gmail.com wrote: > Full_Name: Teresa Rosado > Version: 2015-11-15 > OS: Win Xp > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (194.65.44.71) Hello, The ITS system is for reporting software bugs. Questions about the software and how it functions should be directed to the openldap technical list. Please see: <http://www.openldap.org/lists/mm/listinfo/openldap-technical> This ITS will be closed. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

(ITS#8520) Maximum number os entries
by teresarosado.net＠gmail.com 18 Oct '16

18 Oct '16

Full_Name: Teresa Rosado Version: 2015-11-15 OS: Win Xp URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (194.65.44.71) Dear Sirs, What is the maximum number of entries your OpenLDAP server can have on DB? What is the maximum number of entries your OpenLDAP server can return on ldapsearch command? BR Teresa

1 0

Re: (ITS#8406) LMDB: Assertion 'mc->mc_flags & C_INITIALIZED' with MDB_NEXT after mdb_cursor_del
by h.b.furuseth＠usit.uio.no 17 Oct '16

17 Oct '16

[Copied from IRC chat] The fix is wrong - this commit broke cursor tracking: 37081325f7356587c5e6 "ITS#8406 fix xcursors after cursor_del" Demo: mtest_rand -v -f700 -i3 -p0x1000 -r1276664687.3 It sets C_DEL on the wrong xcursor, one which is at a different key than the deleted key. Like this: put key1, data1 put[cursor] key2, data2 del key1, data1 Now [cursor].mx_cursor has C_DEL. This also breaks - probably the same bug: mtest_rand -v -c7 -f326 -p0x800 -r2712746413 -- Hallvard

1 0

Re: (ITS#8519) Mahesh
by quanah＠symas.com 17 Oct '16

17 Oct '16

--On Monday, October 17, 2016 2:17 PM +0000 maheshwar.reddy(a)secure-24.com wrote: > Full_Name: Maheshwar Reddy > Version: 2.4.4 > OS: CentOS 6.5 > URL: ftp://ftp.openldap.org/incoming/Mahesh The ITS system is for reporting bugs. Usage/help requests should be directed to the openldap-techincal(a)openldap.org mailing list. Please see <http://www.openldap.org/lists/> for more information. This ITS will be closed. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

(ITS#8519) Mahesh
by maheshwar.reddy＠secure-24.com 17 Oct '16

17 Oct '16

Full_Name: Maheshwar Reddy Version: 2.4.4 OS: CentOS 6.5 URL: ftp://ftp.openldap.org/incoming/Mahesh Submission from: (NULL) (175.101.6.130) Dear Openldap Support, First of all thank for the open community, We have been using openldap since last 5 years. Right now we are trying to decommission older version of openldap and trying to build newversion. Prior to that we are testing the openldap functionality and we observed some issue while configuring. We have a Linux team, and they all are need ldap write access. I've created a group and provided a ldap write access to that group. But the people who belongs to that group they were unable to write the ldiff files. Attached information, kindly take look into it. you help would highly appreciated. # ldap_writers, access_control, redhot, redhot.com dn: cn=ldap_writers,ou=access_control,o=redhot,dc=redhot,dc=com cn: ldap_writers objectClass: organizationalRole description: Grants full LDAP write access roleOccupant: uid=maheshwar.reddy,ou=users,o=redhot,dc=redhot,dc=com [root@sal-lnx01 ~]# cat grantaccess.ldif dn: olcDatabase={2}bdb,cn=nonfig changetype: modify add: olcAccess olcAccess: to * by group/organizationalRole/roleOccupant="cn=ldap_writers,ou=access_control,o=redhot,dc=redhot,dc=com" write [root@sal-lnx01 ~]# ldapadd -Y EXTERNAL -H ldapi:/// -f grantaccess.ldif SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 modifying entry "olcDatabase={2}bdb,cn=config" [root@sal-lnx01 ~]# slapcat -n0 | tail -n10 olcAccess: {1}to dn.base="" by * read olcAccess: {2}to * by dn="cn=Manager,dc=redhot,dc=com" write by * read olcAccess: {3}to * by group/organizationalRole/roleOccupant="cn=ldap_writers ,ou=access_control,o=redhot,dc=redhot,dc=com" write olcSuffix: dc=redhot,dc=com olcRootDN: cn=Manager,dc=redhot,dc=com entryCSN: 20161017124350.966527Z#000000#000#000000 modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth modifyTimestamp: 20161017124350Z [root@sal-lnx01 ~]# ldapadd -x -W -D uid=maheshwar.reddy,ou=users,o=redhot,dc=redhot,dc=com -f test.ldif Enter LDAP Password: adding new entry "uid=srikanth.reddy,ou=users,o=redhot,dc=redhot,dc=com" ldap_add: Insufficient access (50) additional info: no write access to parent [root@sal-lnx01 ~]# cat test.ldif # srikanth.reddy, users, redhot.com dn: uid=srikanth.reddy,ou=users,o=redhot,dc=redhot,dc=com cn: Maheshwar objectClass: organizationalPerson objectClass: person objectClass: inetOrgPerson objectClass: posixAccount objectClass: top givenName: Maheshwar Reddy homeDirectory:2F2Fhome/srikanth.reddy loginShell: /bin/bash mail: srikanth.reddy(a)redhot.com sn: Reddy uid: srikanth.reddy uidNumber: 10001 gidNumber: 1000 userPassword: {SSHA}UQU2j5vBuGqjfTE3x+UlA2Ez1ENHAZ/Q

1 0

Re: (ITS#8505) LMDB vs. fork()
by lmb＠cloudflare.com 13 Oct '16

13 Oct '16

--001a1143758a2a3d2c053ec0c5a5 Content-Type: text/plain; charset=UTF-8 I obviously agree that fixing the problems you mention is worthwhile, it just so far doesn't really get me what I need: safe fork() + exec(). Well, or mdb_env_open() could take an > MDB_CLOEXEC flag which says to set FD_CLOEXEC on that FD too. > If I could get that I'd move off my soapbox immediately. I can contribute a patch if that sounds reasonable? -- Lorenz Bauer | Systems Engineer 25 Lavington St., London SE1 0NZ www.cloudflare.com --001a1143758a2a3d2c053ec0c5a5 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>I obviously agree that fixing the problems you mentio= n is worthwhile, it just so far doesn't really get me what I need: safe= fork() + exec().<br></div><br><div class=3D"gmail_extra"><div class=3D"gma= il_quote"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8= ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Well, or mdb_en= v_open() could take an<br> MDB_CLOEXEC flag which says to set FD_CLOEXEC on that FD too.<br></blockquo= te><div><br></div><div>If I could get that I'd move off my soapbox imme= diately. I can contribute a patch if that sounds reasonable?</div></div><di= v><br></div>-- <br><div class=3D"gmail_signature">Lorenz Bauer =C2=A0| =C2= =A0Systems Engineer<br>25 Lavington St., London SE1 0NZ<br><br><a href=3D"h= ttp://www.cloudflare.com" target=3D"_blank">www.cloudflare.com</a></div> </div></div> --001a1143758a2a3d2c053ec0c5a5--

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs October 2016