openldap-bugs July 2018

openldap-bugs@openldap.org

15 participants
34 discussions

(ITS#8874) --with-fetch incorrectly links libcom_err
by quanah＠openldap.org 06 Jul '18

06 Jul '18

Full_Name: Quanah Gibson-Mount Version: 2.4.46 OS: FreeBSD 11 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (47.208.148.239) When building OpenLDAP on FreeBSD where the fetch library is available, slapd picks up a dependency on libcom_err which shouldn't exist. This comes in from lines 934 and 944 of build/openldap.m4: 934 LIBS="-lfetch -lcom_err $LIBS" 944 ol_link_fetch="-lfetch -lcom_err" These should be updated appropriately and configure regenerated

1 0

Re: (ITS#8759) mixed overlay nops & memberof cause segfault
by hyc＠symas.com 06 Jul '18

06 Jul '18

zhixu.liu(a)gmail.com wrote: > Full_Name: Z. Liu > Version: 2.4.44 > OS: Gentoo > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (221.218.169.84) > > > if we enable overlay nops & memberof together, then doing a member MODDN > operation, slapd will segfault and exit immediately. > > Example operation: > > dn: uid=test,ou=People,dc=example,dc=dc=com > changetype: moddn > newrdn: uid=chenln > deleteoldrdn: 1 > newsuperior: ou=Leave,dc=example,dc=com > > The reason is: in servers/slapd/overlays/memberof.c, function > memberof_value_modify define mod/values/nvalues in the stack, which will be > passed to other overlays, nops will try to free them if no attribute is changed. Note that code in contrib is unsupported and is not actually part of OpenLDAP Software. You can either contact the nops author and ask them for a fix, or you're welcome to submit a fix yourself. Nobody in the OpenLDAP Project is going to investigate this issue. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#8873) slapd-meta/ldap - Remove deprecated options
by quanah＠openldap.org 05 Jul '18

05 Jul '18

Full_Name: Quanah Gibson-Mount Version: HEAD OS: N/A URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (47.208.148.239) For OpenLDAP 2.5, we should remove the deprecated configuration options for back-ldap/meta/asyncmeta that have been marked as deprecated for multiple release series. Man pages should be updated accordingly as well. acl-authcDN acl-passwd idassert-authcDN idassert-passwd idassert-mode idassert-method port server suffixmassage map rewrite*

1 0

Re: (ITS#8866) RFE: slapo-constraint to return filter used in diagnostic message
by michael＠stroeder.com 04 Jul '18

04 Jul '18

On 06/20/2018 01:25 PM, Michael Ströder wrote: > This patch is meant to enhance user experience in case a client software > is used to maintain data directly via LDAP. This is a real-world issue. > > Find the patch against master here: > https://www.stroeder.com/temp/0001-ITS-8866-slapo-unique-to-return-filter-u… > > Also cleanly applies to RE24 and therefore > could be easily added to upcoming release 2.4.47. ;-) Any chance to see this in 2.4.47? It simply works and the patch was also reviewed by another C programmer. Ciao, Michael.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs July 2018