openldap-bugs April 2017

openldap-bugs@openldap.org

25 participants
116 discussions

Re: (ITS#7183) Open LDAP - Failed user id creation
by quanah＠symas.com 03 Apr '17

03 Apr '17

Hello, This report does not contain any useful or actionable items. The first step I would advise is to use a current release of OpenLDAP, and if you continue to have issues, please read the FAQ on how to report an issue: <http://www.openldap.org/faq/data/cache/59.html> This ITS will be closed Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#7498) Openldap syncrepl issue
by quanah＠symas.com 03 Apr '17

03 Apr '17

Hello, I would strongly advise retrying with a current OpenLDAP release. Numerous sync replication bugs have been fixed since 2.4.33. Also, to answer your earlier question, there's no such thing as "mirror mode". "mirror mode" is entirely a concept. A system either is or isn't multimaster, which delta-syncrepl works with. See also: <http://www.openldap.org/its/index.cgi/?findid=8511> Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#7474) memberOf and full syncreplication
by quanah＠symas.com 03 Apr '17

03 Apr '17

Hello, As noted in the slapo-memberof(5) man page, it is unsafe for use with replication. See also <http://www.openldap.org/its/index.cgi/?findid=8613> for ways in which to replicate memberOf functionality in a replication safe manner using slapo-dynlist. This ITS will be closed. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#7791) 3-Way delta MMR segfault
by quanah＠symas.com 03 Apr '17

03 Apr '17

Hello, I can say that I've not seen this issue in numerous current OpenLDAP deployments with OpenLDAP 2.4.44. However, be aware of ITS#8432 which does impact 2.4.44. I'd guess that whatever was causing the problem was fixed between 2.4.38 and 2.4.44. Unfortunately, a clear backtrace with full debugging symbols and no optimization of slapd was never provided, so work on this ITS can't really go forward. I will close it for now, given that I've not seen this issue impact large volume 3 & 4 way MMR setups with current releases. If you can reproduce with current OpenLDAP, please feel free to respond, at which time I will reopen the issue. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#8609) segfault in mods.c - modify_add_values
by hyc＠symas.com 03 Apr '17

03 Apr '17

henson(a)acm.org wrote: > So slapd crashed two days in a row, yesterday morning and this morning > :(. Same backtrace. You should probably switch to a non-optimized build. The backtrace you posted initially had most parameters optimized out, which also makes things harder to trace. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8609) segfault in mods.c - modify_add_values
by henson＠acm.org 02 Apr '17

02 Apr '17

So slapd crashed two days in a row, yesterday morning and this morning :(. Same backtrace. What's worse whereas unlike today and every time before it was relatively harmless, something *weird* happened yesterday. I did my usual of just restarting slapd on the master and letting the load balancer fail back over to it and having it catch back up on replication from the changes made to the secondary, which has always been fine before other than maybe having to tune up whatever change was in the middle of being committed when the primary actually died. But somehow yesterday things that happened like a week and a half ago just mysteriously disappeared 8-/. 10 groups that were created on 3/22 were just *gone* without a trace. I had to go dig up ldif backups from then and manually readd them back to the directory to clean stuff up. It looks like there's some group membership corruption too, I'm going to look at it in more detail tomorrow, it should be identical to our AD environment so I can compare and clean up against that. It doesn't look like any users fell into limbo, I diff'd the user DN's from the backup the day before against the one after and they're all still there modulo 5 that were deleted intentionally. I haven't been overly concerned about this issue, while it's been annoying, it hasn't had much of a production impact. But it just turned ugly :(, assuming this was caused by the crash, and I can't see how it wouldn't have been... <sigh>. Is there any logging or something I could turn on that would help for the next occurance but wouldn't be an excessive impact in terms of load or disk utilization on a production box? Thanks...

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs April 2017