openldap-bugs April 2017

openldap-bugs@openldap.org

25 participants
116 discussions

(ITS#8636) Invalid DESC for deltaCRL schema definition
by james＠turnersoft.co.uk 13 Apr '17

13 Apr '17

Full_Name: James Turner Version: 2.4.42 OS: Ubuntu 16.04 LTS URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.86.27.193) The schema definition for 'deltaCRL' includes: DESC 'RFC2587: PKI user' This class does not represent a user - the text may have been copied/pasted from pkiUser (which appears a few definitions above it in the same files). A more appropriate definition would be something like: DESC 'RFC2587: delta CRL' Affected files: servers/slapd/schema/core.ldif servers/slapd/schema/core.schema

1 0

Re: (ITS#6928) slapd: daemon.c:942: slapd_clr_write: Assertion `((slap_daemon[id].sd_index[(s)]) != -1)' failed.
by quanah＠symas.com 12 Apr '17

12 Apr '17

Hi Michael, I'm going to assume this issue was fixed in 2.4.29 with the fix for ITS#7113. If that's not the case, please follow up. I will close this ITS in the meantime. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#6919) "Weekly" crashes of OpenLDAP 2.4.22 using syncrepl master/master
by quanah＠symas.com 12 Apr '17

12 Apr '17

Hi Jarl, Apologies for the delay in response. Do you still experience this issue in curent OpenLDAP releases? Numerous fixes have been made to MMR since your report was originally filed. I will close the ITS for now, but if you still are encountering this issue, feel free to follow up so it can be correcty triaged this time. Thanks, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#7347) Exclusive bit masks for: ACL_WADD, ACL_WDEL, and ACL_WRITE
by quanah＠symas.com 12 Apr '17

12 Apr '17

--On Monday, April 10, 2017 9:36 AM +0000 daniel(a)pluta.biz wrote: > Although I know that I'm highly probable not directly addressed by the > question "For 2.5?" (see this its's notes), my answer/comment would be > "Yes", even "Yes, of course.": Hi Daniel, It's just a note to myself to discuss with Howard for possible inclusion in 2.5. ;) I'm going through all the incoming ITSes and sorting them out and setting priority, etc, as that's been neglected for a while. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#7010) Deadlock in Producer/Consumer Nodes
by quanah＠symas.com 12 Apr '17

12 Apr '17

Hello, Sorry for the delay in response. I believe this issue has been resolved since the 2.4.25 release. If you can reproduce this issue with the current OpenLDAP release, please follow up. Thanks, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

(ITS#8635) serverID doc updates (0 is single master only)
by quanah＠openldap.org 11 Apr '17

11 Apr '17

Full_Name: Quanah Gibson-Mount Version: 2.4.44 OS: N/A URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (47.208.148.239) The man page for serverID says: serverID <integer> [<URL>] Specify an integer ID from 0 to 4095 for this server (limited to 3 hexadecimal digits). The ID may also be specified as a hexadecimal ID by prefixing the value with "0x". These IDs are required when using multimaster replication and each master must have a unique ID. Note that this requirement also applies to separate masters contributing to a glued set of databases. If the URL is provided, this directive may be specified multiple times, providing a complete list of participating servers and their IDs. The fully qualified hostname of each server should be used in the supplied URLs. The IDs are used in the "replica id" field of all CSNs generated by the specified server. The default value is zero. Example: serverID 1 However, it does not specifically note that serverID 0 is reserved for single master only, and that in MMR & Mirror mode configurations, serverIDs must be 1 and higher. The admin guide likely needs similar updating.

1 0

Re: (ITS#8553) LMDB Windows UWP Patch
by smlu＠siol.net 11 Apr '17

11 Apr '17

--Apple-Mail-8F7C74A8-5883-40EA-8779-CC1CBCA62884 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable The patch was uploaded to ftp.openldap.org/incoming. However it was also upl= oaded to github: https://github.com/ZeroPass/lmdb/blob/mdb.master/mdb_uwp_pa= tch.diff On 10. apr. 2017, at 15:40, Howard Chu <openldap-its(a)OpenLDAP.org> wrote: > I see no patch filename or URL in this ticket. >=20 >=20 --Apple-Mail-8F7C74A8-5883-40EA-8779-CC1CBCA62884 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>The patch was uploaded to <a href="http://ftp.openldap.org/incoming">ftp.openldap.org/incoming</a>. However it was also uploaded to github: <a href="https://github.com/ZeroPass/lmdb/blob/mdb.master/mdb_uwp_patch.diff">https://github.com/ZeroPass/lmdb/blob/mdb.master/mdb_uwp_patch.diff</a></div><div><br>On 10. apr. 2017, at 15:40, Howard Chu <<a href="mailto:openldap-its@OpenLDAP.org">openldap-its(a)OpenLDAP.org</a>> wrote:<br><br></div><blockquote type="cite"><div><span>I see no patch filename or URL in this ticket.</span><br><span></span><br><span></span><br></div></blockquote></body></html> --Apple-Mail-8F7C74A8-5883-40EA-8779-CC1CBCA62884--

1 0

Re: (ITS#8634) OpenLDAP fails to build against OpenSSL 1.1
by michael＠stroeder.com 10 Apr '17

10 Apr '17

quanah(a)symas.com wrote: > Perhaps we should use this ITS to track removal of this code entirely from OpenLDAP. +1 Ciao, Michael.

1 0

Re: (ITS#8634) OpenLDAP fails to build against OpenSSL 1.1
by quanah＠symas.com 10 Apr '17

10 Apr '17

Perhaps we should use this ITS to track removal of this code entirely from O= penLDAP.=20 > On Apr 10, 2017, at 12:54 PM, hyc(a)symas.com wrote: >=20 > hristo(a)venev.name wrote: >> Full_Name: Hristo Venev >> Version: Unreleased Release Candidate 2.4.45 >> OS: >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (95.111.59.55) >>=20 >>=20 >> Another user of the old DES API. Here's a patch (compiles, not tested): >=20 > Thanks. Looks like you're compiling the old NT/LANMAN password hash suppor= t.=20 > Nobody should still be using that code, LANMAN hashes are trivially cracka= ble=20 > on modern GPUs. >>=20 >> diff --git a/libraries/liblutil/passwd.c b/libraries/liblutil/passwd.c >> index 7aab344..c481326 100644 >> --- a/libraries/liblutil/passwd.c >> +++ b/libraries/liblutil/passwd.c >> @@ -38,9 +38,9 @@ >> # include <openssl/des.h> >>=20 >>=20 >> -typedef des_cblock des_key; >> -typedef des_cblock des_data_block; >> -typedef des_key_schedule des_context; >> +typedef DES_cblock des_key; >> +typedef DES_cblock des_data_block; >> +typedef DES_key_schedule des_context[1]; >> #define des_failed(encrypted) 0 >> #define des_finish(key, schedule) >>=20 >> @@ -667,7 +667,7 @@ static void >> des_set_key_and_parity( des_key *key, unsigned char *keyData) >> { >> memcpy(key, keyData, 8); >> - des_set_odd_parity( key ); >> + DES_set_odd_parity( key ); >> } >>=20 >>=20 >> @@ -699,7 +699,7 @@ des_set_key_and_parity( des_key *key, unsigned char >> *keyData) >> } >>=20 >> static void >> -des_set_key_unchecked( des_key *key, des_context ctxt ) >> +DES_set_key_unchecked( des_key *key, des_context ctxt ) >> { >> ctxt[0] =3D NULL; >>=20 >> @@ -712,7 +712,7 @@ des_set_key_unchecked( des_key *key, des_context ctxt= ) >> } >>=20 >> static void >> -des_ecb_encrypt( des_data_block *plain, des_data_block *encrypted, >> +DES_ecb_encrypt( des_data_block *plain, des_data_block *encrypted, >> des_context ctxt, int op) >> { >> SECStatus rv; >> @@ -864,16 +864,16 @@ static int chk_lanman( >> ldap_pvt_str2upper( UcasePassword ); >> =20 >> lmPasswd_to_key( UcasePassword, &key ); >> - des_set_key_unchecked( &key, schedule ); >> - des_ecb_encrypt( &StdText, &PasswordHash1, schedule , DES_ENCRYPT );= >> + DES_set_key_unchecked( &key, schedule ); >> + DES_ecb_encrypt( &StdText, &PasswordHash1, schedule , DES_ENCRYPT );= >>=20 >> if (des_failed(&PasswordHash1)) { >> return LUTIL_PASSWD_ERR; >> } >> =20 >> lmPasswd_to_key( &UcasePassword[7], &key ); >> - des_set_key_unchecked( &key, schedule ); >> - des_ecb_encrypt( &StdText, &PasswordHash2, schedule , DES_ENCRYPT );= >> + DES_set_key_unchecked( &key, schedule ); >> + DES_ecb_encrypt( &StdText, &PasswordHash2, schedule , DES_ENCRYPT );= >> if (des_failed(&PasswordHash2)) { >> return LUTIL_PASSWD_ERR; >> } >> @@ -1160,12 +1160,12 @@ static int hash_lanman( >> ldap_pvt_str2upper( UcasePassword ); >> =20 >> lmPasswd_to_key( UcasePassword, &key ); >> - des_set_key_unchecked( &key, schedule ); >> - des_ecb_encrypt( &StdText, &PasswordHash1, schedule , DES_ENCRYPT );= >> + DES_set_key_unchecked( &key, schedule ); >> + DES_ecb_encrypt( &StdText, &PasswordHash1, schedule , DES_ENCRYPT );= >> =20 >> lmPasswd_to_key( &UcasePassword[7], &key ); >> - des_set_key_unchecked( &key, schedule ); >> - des_ecb_encrypt( &StdText, &PasswordHash2, schedule , DES_ENCRYPT );= >> + DES_set_key_unchecked( &key, schedule ); >> + DES_ecb_encrypt( &StdText, &PasswordHash2, schedule , DES_ENCRYPT );= >> =20 >> sprintf( PasswordHash, >> "%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x%02x", >> PasswordHash1[0],PasswordHash1[1],PasswordHash1[2],PasswordHash1[3= ], >>=20 >>=20 >>=20 >=20 >=20 > --=20 > -- Howard Chu > CTO, Symas Corp. http://www.symas.com > Director, Highland Sun http://highlandsun.com/hyc/ > Chief Architect, OpenLDAP http://www.openldap.org/project/ >=20 >=20 >=20

1 0

(ITS#8634)
by hristo＠venev.name 10 Apr '17

10 Apr '17

--=-n5oNLAt610/+F66WtjjW Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Yes, I know. I'm trying to create a package for Fedora and there lmhash is enabled. --=-n5oNLAt610/+F66WtjjW Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEETdMrh1lhmLmNEKGzzwXo0E3DKboFAljr5DYACgkQzwXo0E3D KbpI2BAAjEu5s3DHLz++h2v2BJL5hpSdSJw32hyHbEgIVx6m/ZDmvJ5NFqF4sBSr /NiBmxWepEkjvHS4Reqywg5nnE6s0fpc6OhBkI9mFG2fQ+s9DEoyxhUEcGMJiFKw GOM0lupyZ39slu3mwnBwwq37gDEqV96iPtXFIJayWfIkOw1yzZ/AXYLIElwXfhV0 69D4nIwgRoA93Twe3NFfxPu5BhBDTWzgA36arXRG36AE1MN6DFgNSLsFAstz1DbQ 8OpaSn0vFSy4RAuKrQtmc8JO5EdzTZij2HJkT7h1IAvLoDVWIF+QmC4fAtGzP1Hx Nbx/4LvnNC2ZoIAK3C6DX5yYdAgdQXSlXtyjMy9EWws68AIfEZIbAMHCHODNu4FQ IIV5LZl9btfZXD9b6E/9kH6MR3YO8jvUsyGcQ6EKuoBUiEtbuEEq6uQ5WRDQjrci y4zT86+HyW6sIXqg5BytA+RPjQDIujMzeD94xoViNqH5Zt0/VG/9isg2vfQSYWcV ZXleLsZkXlp4GyNHLDiWzZZxxpnlimN26qaMyl+Sf5f8/cufZUDxSkQl8de6ERC9 oUGV4o9p56iCzr+oHbSfz3CfBP4dIi+ajE7mWLVC10YQfzw+bgsE8uuo2JBnhzTB NW/CBlLnDR0bV7Agnr+Qy8Arg+oMpT51JI4/wbUsmNThYJT2DM4= =ahmP -----END PGP SIGNATURE----- --=-n5oNLAt610/+F66WtjjW--

1 0

← Newer
1
2
3
4
5
6
7
8
9
...
12
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs April 2017