(ITS#8874) --with-fetch incorrectly links libcom_err
by quanah＠openldap.org
Full_Name: Quanah Gibson-Mount
Version: 2.4.46
OS: FreeBSD 11
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (47.208.148.239)
When building OpenLDAP on FreeBSD where the fetch library is available, slapd
picks up a dependency on libcom_err which shouldn't exist.
This comes in from lines 934 and 944 of build/openldap.m4:
934 LIBS="-lfetch -lcom_err $LIBS"
944 ol_link_fetch="-lfetch -lcom_err"
These should be updated appropriately and configure regenerated
5 years, 5 months
Re: (ITS#8759) mixed overlay nops & memberof cause segfault
by hyc＠symas.com
zhixu.liu(a)gmail.com wrote:
> Full_Name: Z. Liu
> Version: 2.4.44
> OS: Gentoo
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (221.218.169.84)
>
>
> if we enable overlay nops & memberof together, then doing a member MODDN
> operation, slapd will segfault and exit immediately.
>
> Example operation:
>
> dn: uid=test,ou=People,dc=example,dc=dc=com
> changetype: moddn
> newrdn: uid=chenln
> deleteoldrdn: 1
> newsuperior: ou=Leave,dc=example,dc=com
>
> The reason is: in servers/slapd/overlays/memberof.c, function
> memberof_value_modify define mod/values/nvalues in the stack, which will be
> passed to other overlays, nops will try to free them if no attribute is changed.
Note that code in contrib is unsupported and is not actually part of OpenLDAP
Software. You can either contact the nops author and ask them for a fix, or
you're welcome to submit a fix yourself. Nobody in the OpenLDAP Project is
going to investigate this issue.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
5 years, 5 months
(ITS#8873) slapd-meta/ldap - Remove deprecated options
by quanah＠openldap.org
Full_Name: Quanah Gibson-Mount
Version: HEAD
OS: N/A
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (47.208.148.239)
For OpenLDAP 2.5, we should remove the deprecated configuration options for
back-ldap/meta/asyncmeta that have been marked as deprecated for multiple
release series. Man pages should be updated accordingly as well.
acl-authcDN
acl-passwd
idassert-authcDN
idassert-passwd
idassert-mode
idassert-method
port
server
suffixmassage
map
rewrite*
5 years, 5 months
