openldap-bugs April 2017

openldap-bugs@openldap.org

25 participants
116 discussions

Start a nNew thread

ITS#8647 published: SECURITY: support of weak ciphers according to rfc4513
by openldap-its＠OpenLDAP.org 27 Apr '17

27 Apr '17

Private ITS#8647 is now publicly readable URL: http://www.OpenLDAP.org/its/?findid=8647

1 0

Re: (ITS#8646) openldap aborts with ldap_first_entry (ld=0x5564, chain=0x6) at getentry.c:36
by michael＠stroeder.com 27 Apr '17

27 Apr '17

kavyauk(a)gmail.com wrote: > Version: 2.4.33 Note that release 2.4.33 is 4,5 years old. Many fixes have been applied since then. Do you still experience the same problem with recent release 2.4.44? Ciao, Michael.

1 0

(ITS#8646) openldap aborts with ldap_first_entry (ld=0x5564, chain=0x6) at getentry.c:36
by kavyauk＠gmail.com 27 Apr '17

27 Apr '17

Full_Name: Kavya U K Version: 2.4.33 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (72.163.220.19) Our application uses openladp library to LDAP authentication . Intermittently application crashes with below back trace . backtrace =================================== #0 0x008b1266 in raise () from /lib/libc.so.6 #1 0x008b2c31 in abort () from /lib/libc.so.6 #2 0x008aa49d in __assert_fail () from /lib/libc.so.6 #3 0x00a3e056 in ldap_first_entry (ld=0x5564, chain=0x6) at getentry.c:36 Please let us know how to resolve it

1 0

(ITS#8645) syncrepl configuration error handling
by elecharny＠apache.org 27 Apr '17

27 Apr '17

Full_Name: Emmanuel L.charny Version: OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (176.154.3.51) The parse_syncrepl_line function (syncrepl.c) returns either 0, -1 or 1. 0 is for success, -1 is for a error, 1 seems to be for a warning (ie a parameter is wrongly configured, but then it's ignored). That's ok, except that in the loop where the parameters are parsed, if one of the parameters in {'retry', 'manageDSAit', 'sizelimit', 'timelimit'} is incorect, the following parameters aren't parsed at all, the fuction return 1. At this point, in the caller function add_syncrepl, we have : rc = parse_syncrepl_line( c, si ); if ( rc == 0 ) { ... } if ( rc < 0 ) { Debug( LDAP_DEBUG_ANY, "failed to add syncinfo\n", 0, 0, 0 ); syncinfo_free( si, 0 ); return 1; } else { Debug( LDAP_DEBUG_CONFIG, "Config: ** successfully added syncrepl %s \"%s\"\n", si->si_ridtxt, BER_BVISNULL( &si->si_bindconf.sb_uri ) ? "(null)" : si->si_bindconf.sb_uri.bv_val, 0 ); ... So here, we will have a message indicating syncrepl has properly be initialized, when many parameters might have been ignored. It seems the proper handling of those wrongly initialized parameters should be to do a 'continue' instead of returning 1, and add a warning in logs. Like : ... else if ( !strncasecmp( c->argv[ i ], RETRYSTR "=", STRLENOF( RETRYSTR "=" ) ) ) { if ( parse_syncrepl_retry( c, c->argv[ i ], si ) ) { continue; /* was return 1; } } Or maybe we just want to return -1 in all cases ?

1 0

(ITS#8644) test064-constraint should wait for slapd to start
by ryan＠openldap.org 24 Apr '17

24 Apr '17

Full_Name: Ryan Tandy Version: 2.4.44 OS: Debian URL: Submission from: (NULL) (24.68.41.160) Submitted by: ryan test064-constraint can occasionally fail if ldapadd runs while slapd is still starting up. https://bugs.debian.org/770890 has links to examples. >>>>> Starting test064-constraint for hdb... running defines.sh Starting slapd on TCP/IP port 9011... Adding basic structure... ldapadd failed (255)! >>>>> test064-constraint failed for hdb (exit 255) Other scripts have an ldapsearch loop that waits for slapd to start, and the same should suffice here.

1 0

Re: (ITS#8592) Double free in sssvlv.c
by kevinanties＠gmail.com 23 Apr '17

23 Apr '17

--f403043eddf896760a054de0b265 Content-Type: text/plain; charset=UTF-8 Why this bug is still not fixed? This is a critical bug for those who enable this overlay. On Wed, Feb 22, 2017 at 12:09 AM, Quanah Gibson-Mount <quanah(a)symas.com> wrote: > --On Tuesday, February 21, 2017 4:20 AM +0000 kevinanties(a)gmail.com wrote: > > --f403045e3462d25e8f054902b3a3 >> Content-Type: text/plain; charset=UTF-8 >> >> I have submitted to ftp/incoming. The filename is >> kevin-170221-sssvlv.patch. >> > > Please carefully read the contribution web page. Your submission is > clearly missing the IPR notice: > > <http://www.openldap.org/devel/contributing.html#notice> > > > Regards, > Quanah > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> > > --f403043eddf896760a054de0b265 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Why this bug is still not fixed? This is a critical bug fo= r those who enable this overlay.<br></div><div class=3D"gmail_extra"><br><d= iv class=3D"gmail_quote">On Wed, Feb 22, 2017 at 12:09 AM, Quanah Gibson-Mo= unt <span dir=3D"ltr"><<a href=3D"mailto:quanah@symas.com" target=3D"_bl= ank">quanah(a)symas.com</a>></span> wrote:<br><blockquote class=3D"gmail_q= uote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1e= x">--On Tuesday, February 21, 2017 4:20 AM +0000 <a href=3D"mailto:kevinant= ies(a)gmail.com" target=3D"_blank">kevinanties(a)gmail.com</a> wrote:<br> <br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"> --f403045e3462d25e8f054902b3a3<br> Content-Type: text/plain; charset=3DUTF-8<span class=3D""><br> <br> I have submitted to ftp/incoming. The filename is<br> kevin-170221-sssvlv.patch.<br> </span></blockquote> <br> Please carefully read the contribution web page.=C2=A0 Your submission is c= learly missing the IPR notice:<br> <br> <<a href=3D"http://www.openldap.org/devel/contributing.html#notice" rel= =3D"noreferrer" target=3D"_blank">http://www.openldap.org/devel<wbr>/contri= buting.html#notice</a>><div class=3D"HOEnZb"><div class=3D"h5"><br> <br> Regards,<br> Quanah<br> <br> --<br> <br> Quanah Gibson-Mount<br> Product Architect<br> Symas Corporation<br> Packaged, certified, and supported LDAP solutions powered by OpenLDAP:<br> <<a href=3D"http://www.symas.com" rel=3D"noreferrer" target=3D"_blank">h= ttp://www.symas.com</a>><br> <br> </div></div></blockquote></div><br></div> --f403043eddf896760a054de0b265--

1 0

Re: (ITS#8605) spelling
by quanah＠symas.com 23 Apr '17

23 Apr '17

Hi Josh, Thanks very much! In the future, please remember to CC openldap-its(a)openldap.org, or there will not be a record in the ITS of the submission. ;) --Quanah --On Sunday, April 23, 2017 8:37 PM -0400 Josh Soref <jsoref(a)gmail.com> wrote: > I've uploaded it again: >> ftp ftp.openldap.org > Connected to www.openldap.org. > 220 ProFTPD 1.3.4a Server (gauss) [::ffff:23.92.27.230] > 200 UTF8 set to on > User (www.openldap.org:(none)): ftp > 331 Anonymous login ok, send your complete email address as your password > Password: > 230 Anonymous access granted, restrictions apply > ftp> cd incoming > 250 CWD command successful > ftp> dir > 200 PORT command successful > 150 Opening ASCII mode data connection for file list > 226 Transfer complete > ftp> ascii > 200 Type set to A > ftp> put > Local file 0001-spelling-fixes.patch > Remote file josh-soref-170423.patch > 200 PORT command successful > 150 Opening ASCII mode data connection for josh-soref-170423.patch > 226 Transfer complete > ftp: 133503 bytes sent in 1.13Seconds 117.73Kbytes/sec. > ftp> quit > 221 Goodbye -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#8205)
by quanah＠symas.com 23 Apr '17

23 Apr '17

--On Sunday, October 25, 2015 10:28 AM +0000 hyc(a)symas.com wrote: > peter(a)adpm.de wrote: >> Hi, >> >> I extended the patch series with a manual page for pbkdf2 >> * >> https://github.com/marschap/openldap/commit/f63202e8aa68e3391f52d2481f64 >> 9ca22aeb5ae4 contrib/passwd/pbkdf2: add man page, install it too > > Please use format-patch to submit patches, thanks. If you add .patch to the end of the URL, you can trivially get patches already formatted for use with git. A rather useful trick. ;) --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#8605) spelling
by quanah＠symas.com 23 Apr '17

23 Apr '17

Hi Josh, Still waiting on a git format patch, as per the contribution guidelines: <http://www.openldap.org/devel/contributing.html#formats> Thanks, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#8609) segfault in mods.c - modify_add_values
by quanah＠symas.com 21 Apr '17

21 Apr '17

--On Friday, April 21, 2017 2:26 AM +0100 Howard Chu <hyc(a)symas.com> wrote: >> It's fine for there to be legacy entryCSNs and a contextCSN for serverID >> of 0. However, it is not fine for any master in an MMR setup to have a >> specific serverID of 0. If you're running with serverID's 0-3, I'd >> simply try an ldapmodify on the server with 0 to set its serverID to 4, >> and then do a modification against it, so it generates a new contextCSN >> that gets pushed out to all nodes. > > Performance-wise, it would be better to delete the SID 0 contextCSN value > too. Yeah, definitely not optimal, but less of a worry at the moment. ;) --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs April 2017