openldap-bugs November 2019

openldap-bugs@openldap.org

11 participants
35 discussions

(ITS#9117) LMDB incorrect value for mapsize [Docs]
by progr-d＠yandex.ru 13 Nov '19

13 Nov '19

Full_Name: Denis Version: lmdb 0.9.24 OS: macOS URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (80.211.15.98) Incorrect value in documentation or code for DEFAULT_MAPSIZE: in code is 1048576, but in doc: 10485760. Code: http://www.lmdb.tech/doc/group__internal.html#ga506f893519db205966f7988c03c… Doc (see method description): http://www.lmdb.tech/doc/group__mdb.html#gaa2506ec8dab3d969b0e609cd82e619e5

1 0

Re: (ITS#8575) Argon2 Password hashing contrib module
by ondra＠mistotebe.net 12 Nov '19

12 Nov '19

On Mon, Nov 11, 2019 at 05:48:05PM +0000, ondra(a)mistotebe.net wrote: > An implementation using libsodium is now available at > https://github.com/mistotebe/openldap/tree/its8575-argon > > Not configurable yet as to what parameters are chosen when a plaintext > password is being hashed, however. That branch now supports parameters being passed in at module load time. It won't help slappasswd as that one doesn't know how to pass parameters to modules but that is a different issue. -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP

1 0

Re: (ITS#8575) Argon2 Password hashing contrib module
by ondra＠mistotebe.net 11 Nov '19

11 Nov '19

On Thu, Jan 31, 2019 at 03:20:22PM +0000, simon(a)slevermann.de wrote: > Hi, > > I have essentially given up on doing this, because I no longer work for > the employer that had me work on this, and at the time I did, I never > got the thing done. The code itself worked when I tried it, but it has > the caveat of not being configurable. I never quite found out how to > properly implement configuration of a module that isn't an overlay, so I > never got that done. Feel free to adjust the existing code, it should be > adaptable to libsodium relatively easily. An implementation using libsodium is now available at https://github.com/mistotebe/openldap/tree/its8575-argon Not configurable yet as to what parameters are chosen when a plaintext password is being hashed, however. Regards, -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP

1 0

Re: (ITS#9116) LMDB: Bogus BAD_DBI result on read-only txn
by hyc＠symas.com 09 Nov '19

09 Nov '19

hyc(a)openldap.org wrote: > Full_Name: Howard Chu > Version: 0.9.24 > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (84.203.24.208) > Submitted by: hyc > > > There are some cases when renewing a cursor in a read-only txn that may return > MDB_BAD_DBI if the DBI has gone stale. This error is spurious, the check is only > supposed to be done in writable txns (see ITS#7825). A patch was pushed to mdb.master, but it is apparently not actually needed. The actual problem was caused by reusing a readtxn that had been left open after its original env had been closed and re-opened. This is a misuse of the API, all txns must be closed before closing the env. Ignore this issue. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#9116) LMDB: Bogus BAD_DBI result on read-only txn
by hyc＠openldap.org 09 Nov '19

09 Nov '19

Full_Name: Howard Chu Version: 0.9.24 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (84.203.24.208) Submitted by: hyc There are some cases when renewing a cursor in a read-only txn that may return MDB_BAD_DBI if the DBI has gone stale. This error is spurious, the check is only supposed to be done in writable txns (see ITS#7825).

1 0

Re: (ITS#9115) It seems like the parameters about tlsCipherSuite not work
by quanah＠symas.com 07 Nov '19

07 Nov '19

--On Wednesday, November 6, 2019 8:14 AM +0000 bjmoya(a)cn.ibm.com wrote: > Full_Name: nancy.mo > Version: 2.4.46 > OS: redhat7 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (129.42.208.182) Hello, The ITS system is for bug reports, not help requests. Please redirect your question to the openldap-technical list for further assistance. <https://www.openldap.org/lists/mm/listinfo/openldap-technical> Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#9114) pagedResultsControl not available in openldap search response
by quanah＠symas.com 07 Nov '19

07 Nov '19

--On Monday, November 4, 2019 11:52 AM +0000 prashanthmadduri(a)gmail.com wrote: > Full_Name: Prashanth Madduri > Version: 2.4.40 > OS: Windows > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (103.6.33.5) > > > Hi Team, > > I have huge data in OpenLDAP server and retrieve data using pagination. I > am using LDAPJS client library search functionality with paging to > retrieve the data. However as per my observation the response is not > returning pagedResultsControl in response. Hello, The ITS system is for bug reports, not help requests. Please redirect your question to the openldap-technical list for further assistance. <https://www.openldap.org/lists/mm/listinfo/openldap-technical> Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#9113) i can not find memberOf.la file
by quanah＠symas.com 07 Nov '19

07 Nov '19

--On Tuesday, October 29, 2019 2:47 AM +0000 machao0605(a)qq.com wrote: > Full_Name: ma > Version: 2.4.44 > OS: centos 7.5 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (119.253.39.18) Hello, The ITS system is for bug reports, not help requests. Please redirect your question to the openldap-technical list for further assistance. <https://www.openldap.org/lists/mm/listinfo/openldap-technical> Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

(ITS#9115) It seems like the parameters about tlsCipherSuite not work
by bjmoya＠cn.ibm.com 06 Nov '19

06 Nov '19

Full_Name: nancy.mo Version: 2.4.46 OS: redhat7 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (129.42.208.182) Hi, I set the parameter about cipher suite in client(ldap.conf) and server (slapd.conf) and restart the service, the tcp/ip log, find the cipher not changed. In ldap.conf: TLS_CIPHER_SUITE ALL:!TLSv1.3 In slapd.conf: TLSCipherSuite !TLSv1.3 openssl provide those cipher suites: [root@ ~]# openssl ciphers -v 'TLSv1.3' TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any Au=any Enc=CHACHA20/POLY1305(256) Mac=AEAD TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD when openldap worked as a client, it send 4 cipher suites to server in TLS1.3 client hello. Cipher Suite: TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff) Cipher Suite: TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff) Cipher Suite: TLS_CHACHA20_POLY1305_SHA256 (0x1303) Cipher Suite: TLS_AES_256_GCM_SHA384 (0x1302) When openldap worked as a server, it used TLS_AES_256_GCM_SHA384 to connect in TLS server hello. And when i set one specific cipher in client, TLS_CIPHER_SUITE TLS_CHACHA20_POLY1305_SHA256 It also send same four suites in client hello. Could you help me to have a look? thanks.

1 0

(ITS#9114) pagedResultsControl not available in openldap search response
by prashanthmadduri＠gmail.com 04 Nov '19

04 Nov '19

Full_Name: Prashanth Madduri Version: 2.4.40 OS: Windows URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (103.6.33.5) Hi Team, I have huge data in OpenLDAP server and retrieve data using pagination. I am using LDAPJS client library search functionality with paging to retrieve the data. However as per my observation the response is not returning pagedResultsControl in response. Please assist. Thanks in advance. Regards, Prashanth

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs November 2019