Re: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44
by ondra＠mistotebe.net
On Mon, Sep 23, 2019 at 09:22:45AM +0000, jrajalakshmi(a)juniper.net wrote:
> (1) What problem/issue/behavior are you having trouble with? What do you expect
> to see?
> Using OpenLDAP version 2.4.44 we are not seeing Concurrency whereas in OpenLDAP
> Version 2.4.23 we are seeing Concurrent LDAP Requests.
> In our product OpenLDAP 2.4.23 was previously used and the concurrent request
> for search using the API ' ldap_search_ext_s() ' was working as expected and our
> product scalability was better.
> We have recently upgraded LDAP to OpenLDAP 2.4.44. But with this version, the
> api 'ldap_search_ext_s()' does not seem to work as expected, i.e concurrent
> requests handling is not happening.
Hi,
if you want the project to investigate this, it would be useful if you
provide a sample program that exhibits this behaviour with a vanilla
build of 2.4.48 and doesn't exhibit that with an analogous build of
2.4.23.
I would like to point out that since 2.4.23 is a very old release, it is
also possible you have been relying on undocumented behaviour or a
libldap_r bug that has since been fixed. That is what a sample program
would also help to rule out.
Regards,
--
Ondřej Kuzník
Senior Software Engineer
Symas Corporation http://www.symas.com
Packaged, certified, and supported LDAP solutions powered by OpenLDAP
4 years
Re: (ITS#9090) memory leak: ldap_unbind_* functions don't free 'ld_sb' field of LDAP structure
by ondra＠mistotebe.net
On Mon, Sep 30, 2019 at 11:04:08AM +0000, santucco(a)mail.ru wrote:
> 3. Run the test, analyze AddressSanitizer output:
> =================================================================
> ==29038==ERROR: LeakSanitizer: detected memory leaks
>
> Direct leak of 40 byte(s) in 1 object(s) allocated from:
> #0 0x7f9d35ac23a8 in __interceptor_calloc
> ../../../../libsanitizer/asan/asan_malloc_linux.cc:70
> #1 0x55d793627512 in ber_memcalloc_x (/tmp/test+0x67512)
> #2 0x55d79362757b in ber_memcalloc (/tmp/test+0x6757b)
> #3 0x55d793628a2d in ber_sockbuf_alloc (/tmp/test+0x68a2d)
> #4 0x55d7935ee453 in ldap_create (/tmp/test+0x2e453)
> #5 0x55d7935ee628 in ldap_initialize (/tmp/test+0x2e628)
> #6 0x55d7935ede8e in main /tmp/test.c:14
> #7 0x7f9d3442c3d4 in __libc_start_main (/lib64/libc.so.6+0x223d4)
>
> 4. Possible patch:
>
> --- openldap/libraries/libldap/unbind.c.orig 2019-07-23 17:46:22.000000000
> +0300
> +++ openldap/libraries/libldap/unbind.c 2019-09-27 15:39:40.000000000 +0300
> @@ -134,6 +134,8 @@
> /* Should already be closed by ldap_free_connection which knows not to free
> * this one */
> ber_int_sb_destroy( ld->ld_sb );
> + /* free memory to avoid of leak */
> + ber_memfree( ld->ld_sb );
>
> LDAP_MUTEX_LOCK( &ld->ld_ldopts_mutex );
Dear Alexander,
this looks like a duplicate of ITS#9081, fixed with commit
639e5f15fdeaf46941ec6da5c5d5f7ef707a976c.
Regards,
--
Ondřej Kuzník
Senior Software Engineer
Symas Corporation http://www.symas.com
Packaged, certified, and supported LDAP solutions powered by OpenLDAP
4 years
(ITS#9090) memory leak: ldap_unbind_* functions don't free 'ld_sb' field of LDAP structure
by santucco＠mail.ru
Full_Name: Alexander Sychev
Version: 2.4.48
OS: linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (91.103.66.207)
Steps to reproduce:
1. Write a test:
#include <ldap.h>
int main()
{
LDAP* h = NULL;
LDAPURLDesc u;
memset(&u, 0, sizeof(LDAPURLDesc));
char* s = 0;
u.lud_scheme = "ldap";
u.lud_host = "locahost";
u.lud_port = 8080;
u.lud_scope = LDAP_SCOPE_DEFAULT ;
s = ldap_url_desc2str(&u);
ldap_initialize(&h, s);
ldap_memfree(s);
ldap_unbind_ext_s(h, NULL, NULL);
return 0;
}
2. Compile it with AddressSanitizer support:
gcc test.c -g -fsanitize=address
3. Run the test, analyze AddressSanitizer output:
=================================================================
==29038==ERROR: LeakSanitizer: detected memory leaks
Direct leak of 40 byte(s) in 1 object(s) allocated from:
#0 0x7f9d35ac23a8 in __interceptor_calloc
../../../../libsanitizer/asan/asan_malloc_linux.cc:70
#1 0x55d793627512 in ber_memcalloc_x (/tmp/test+0x67512)
#2 0x55d79362757b in ber_memcalloc (/tmp/test+0x6757b)
#3 0x55d793628a2d in ber_sockbuf_alloc (/tmp/test+0x68a2d)
#4 0x55d7935ee453 in ldap_create (/tmp/test+0x2e453)
#5 0x55d7935ee628 in ldap_initialize (/tmp/test+0x2e628)
#6 0x55d7935ede8e in main /tmp/test.c:14
#7 0x7f9d3442c3d4 in __libc_start_main (/lib64/libc.so.6+0x223d4)
SUMMARY: AddressSanitizer: 40 byte(s) leaked in 1 allocation(s).
=================================================================
4. Possible patch:
--- openldap/libraries/libldap/unbind.c.orig 2019-07-23 17:46:22.000000000
+0300
+++ openldap/libraries/libldap/unbind.c 2019-09-27 15:39:40.000000000 +0300
@@ -134,6 +134,8 @@
/* Should already be closed by ldap_free_connection which knows not to free
* this one */
ber_int_sb_destroy( ld->ld_sb );
+ /* free memory to avoid of leak */
+ ber_memfree( ld->ld_sb );
LDAP_MUTEX_LOCK( &ld->ld_ldopts_mutex );
4 years
Re: (ITS#8996) Please supply a pkg-config file for libldap
by hugh.mcmaster＠outlook.com
Dear OpenLDAP developers,
I've rebased the above patches on the current master branch (as of 29
September) and replaced them on the FTP server.
I'm hoping someone can review them as development begins on the 2.5 branch.
Thank you,
Hugh
4 years
RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44
by quanah＠symas.com
--On Friday, September 27, 2019 10:50 AM +0000 Rajalakshmi Jayaraman
<jrajalakshmi(a)juniper.net> wrote:
>
>
> Hi Quanah,
>
> Can we have a solution for the issue reported at the earliest. Since we
> have a release and the fix needs to be done.
Hello Raji,
If you need an immediate fix to an issue, you may wish to contact one of
the companies that offers such services via the support page:
<https://www.openldap.org/support/>
The project itself cannot commit to when it will or will not have a
specific issue resolved.
Regards,
Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
4 years
RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44
by jrajalakshmi＠juniper.net
--_000_CH2PR05MB6951111C41162851F03396AEDF810CH2PR05MB6951namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi Quanah,
Can we have a solution for the issue reported at the earliest. Since we hav=
e a release and the fix needs to be done.
Thanks,
Raji
-----Original Message-----
From: Quanah Gibson-Mount <quanah(a)symas.com>
Sent: Thursday, September 26, 2019 8:23 PM
To: Rajalakshmi Jayaraman <jrajalakshmi(a)juniper.net>; openldap-its@OpenLDAP=
.org
Cc: Muthaiyan Vel <mvel(a)juniper.net>
Subject: RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44
--On Thursday, September 26, 2019 3:11 PM +0000 Rajalakshmi Jayaraman <jraj=
alakshmi(a)juniper.net<mailto:jrajalakshmi@juniper.net>> wrote:
>
>
> Hi,
>
> The FTP
> "https://urldefense.com/v3/__ftp://ftp.openldap.org/incoming/__;!8WoA6
> RjC81c!WuKVskHw8TTh7xPBLQCayeOo0jLoA3scmo73fpEyBwOwyP2lAUVT_sk-67s4ryH
> U5-Z3$ " is not working. Hence pasted the pcap details, hope this
> helps
It's working just fine:
quanah@ub18:~$ ftp ftp.openldap.org<ftp://ftp.openldap.org>
Connected to www.openldap.org<http://www.openldap.org>.
220 ProFTPD 1.3.4a Server (gauss) [::ffff:23.92.27.230] Name (ftp.openldap.=
org:quanah<ftp://ftp.openldap.org:quanah>): ftp
331 Anonymous login ok, send your complete email address as your password
Password:
230 Anonymous access granted, restrictions apply Remote system type is UNIX=
.
Using binary mode to transfer files.
ftp> pass
Passive mode on.
ftp> cd incoming
250 CWD command successful
ftp> mkdir its9088
257 "/incoming/its9088" - Directory successfully created
ftp> cd its9088
250 CWD command successful
ftp> lcd /tmp
Local directory now /tmp
ftp> put blah
local: blah remote: blah
227 Entering Passive Mode (23,92,27,230,156,55).
150 Opening BINARY mode data connection for blah
226 Transfer complete
ftp>
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<https://urldefense.com/v3/__http://www.symas.com__;!8WoA6RjC81c!WuKVskHw8T=
Th7xPBLQCayeOo0jLoA3scmo73fpEyBwOwyP2lAUVT_sk-67s4r6bEJRvo$ <https://urldef=
ense.com/v3/__http:/www.symas.com__;!8WoA6RjC81c!WuKVskHw8TTh7xPBLQCayeOo0j=
LoA3scmo73fpEyBwOwyP2lAUVT_sk-67s4r6bEJRvo$%20> >
Juniper Business Use Only
--_000_CH2PR05MB6951111C41162851F03396AEDF810CH2PR05MB6951namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
p.msipfooter30b3d538, li.msipfooter30b3d538, div.msipfooter30b3d538
{mso-style-name:msipfooter30b3d538;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle21
{mso-style-type:personal-compose;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoPlainText">Hi Quanah,<o:p></o:p></p>
<p class=3D"MsoPlainText">Can we have a solution for the issue reported at =
the earliest. Since we have a release and the fix needs to be done.
<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">Thanks,<br>
Raji<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">-----Original Message-----<br>
From: Quanah Gibson-Mount <quanah(a)symas.com> <br>
Sent: Thursday, September 26, 2019 8:23 PM<br>
To: Rajalakshmi Jayaraman <jrajalakshmi(a)juniper.net>; openldap-its@Op=
enLDAP.org<br>
Cc: Muthaiyan Vel <mvel(a)juniper.net><br>
Subject: RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44<o:p></o:p><=
/p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">--On Thursday, September 26, 2019 3:11 PM +00=
00 Rajalakshmi Jayaraman <<a href=3D"mailto:jrajalakshmi@juniper.net"><s=
pan style=3D"color:windowtext;text-decoration:none">jrajalakshmi(a)juniper.ne=
t</span></a>> wrote:<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">><o:p> </o:p></p>
<p class=3D"MsoPlainText">><o:p> </o:p></p>
<p class=3D"MsoPlainText">> Hi,<o:p></o:p></p>
<p class=3D"MsoPlainText">><o:p> </o:p></p>
<p class=3D"MsoPlainText">> The FTP <o:p></o:p></p>
<p class=3D"MsoPlainText">> "https://urldefense.com/v3/__ftp://ftp.=
openldap.org/incoming/__;!8WoA6<o:p></o:p></p>
<p class=3D"MsoPlainText">> RjC81c!WuKVskHw8TTh7xPBLQCayeOo0jLoA3scmo73f=
pEyBwOwyP2lAUVT_sk-67s4ryH<o:p></o:p></p>
<p class=3D"MsoPlainText">> U5-Z3$ " is not working. Hence pasted t=
he pcap details, hope this
<o:p></o:p></p>
<p class=3D"MsoPlainText">> helps<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">It's working just fine:<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">quanah@ub18:~$ ftp <a href=3D"ftp://ftp.openldap.=
org"><span style=3D"color:windowtext;text-decoration:none">ftp.openldap.org=
</span></a><o:p></o:p></p>
<p class=3D"MsoPlainText">Connected to <a href=3D"http://www.openldap.org">=
<span style=3D"color:windowtext;text-decoration:none">www.openldap.org</spa=
n></a>.<o:p></o:p></p>
<p class=3D"MsoPlainText">220 ProFTPD 1.3.4a Server (gauss) [::ffff:23.92.2=
7.230] Name (<a href=3D"ftp://ftp.openldap.org:quanah"><span style=3D"color=
:windowtext;text-decoration:none">ftp.openldap.org:quanah</span></a>): ftp<=
o:p></o:p></p>
<p class=3D"MsoPlainText">331 Anonymous login ok, send your complete email =
address as your password<o:p></o:p></p>
<p class=3D"MsoPlainText">Password:<o:p></o:p></p>
<p class=3D"MsoPlainText">230 Anonymous access granted, restrictions apply =
Remote system type is UNIX.<o:p></o:p></p>
<p class=3D"MsoPlainText">Using binary mode to transfer files.<o:p></o:p></=
p>
<p class=3D"MsoPlainText">ftp> pass<o:p></o:p></p>
<p class=3D"MsoPlainText">Passive mode on.<o:p></o:p></p>
<p class=3D"MsoPlainText">ftp> cd incoming<o:p></o:p></p>
<p class=3D"MsoPlainText">250 CWD command successful<o:p></o:p></p>
<p class=3D"MsoPlainText">ftp> mkdir its9088<o:p></o:p></p>
<p class=3D"MsoPlainText">257 "/incoming/its9088" - Directory suc=
cessfully created<o:p></o:p></p>
<p class=3D"MsoPlainText">ftp> cd its9088<o:p></o:p></p>
<p class=3D"MsoPlainText">250 CWD command successful<o:p></o:p></p>
<p class=3D"MsoPlainText">ftp> lcd /tmp<o:p></o:p></p>
<p class=3D"MsoPlainText">Local directory now /tmp<o:p></o:p></p>
<p class=3D"MsoPlainText">ftp> put blah<o:p></o:p></p>
<p class=3D"MsoPlainText">local: blah remote: blah<o:p></o:p></p>
<p class=3D"MsoPlainText">227 Entering Passive Mode (23,92,27,230,156,55).<=
o:p></o:p></p>
<p class=3D"MsoPlainText">150 Opening BINARY mode data connection for blah<=
o:p></o:p></p>
<p class=3D"MsoPlainText">226 Transfer complete<o:p></o:p></p>
<p class=3D"MsoPlainText">ftp><o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">--<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">Quanah Gibson-Mount<o:p></o:p></p>
<p class=3D"MsoPlainText">Product Architect<o:p></o:p></p>
<p class=3D"MsoPlainText">Symas Corporation<o:p></o:p></p>
<p class=3D"MsoPlainText">Packaged, certified, and supported LDAP solutions=
powered by OpenLDAP:<o:p></o:p></p>
<p class=3D"MsoPlainText"><<a href=3D"https://urldefense.com/v3/__http:/=
www.symas.com__;!8WoA6RjC81c!WuKVskHw8TTh7xPBLQCayeOo0jLoA3scmo73fpEyBwOwyP=
2lAUVT_sk-67s4r6bEJRvo$%20"><span style=3D"color:windowtext;text-decoration=
:none">https://urldefense.com/v3/__http://www.symas.com__;!8WoA6RjC81c!WuKV=
skHw8TTh7xPBLQCayeOo0jLoA3scmo73fpEyBwOwyP2lAUVT_sk-67s4r6bEJRvo$
</span></a>><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"msipfooter30b3d538" align=3D"center" style=3D"margin:0in;margin=
-bottom:.0001pt;text-align:center">
<span style=3D"font-size:7.0pt;color:black">Juniper Business Use Only</span=
><o:p></o:p></p>
</div>
</body>
</html>
--_000_CH2PR05MB6951111C41162851F03396AEDF810CH2PR05MB6951namp_--
4 years
RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44
by quanah＠symas.com
--On Thursday, September 26, 2019 3:11 PM +0000 Rajalakshmi Jayaraman
<jrajalakshmi(a)juniper.net> wrote:
>
>
> Hi,
>
> The FTP "ftp://ftp.openldap.org/incoming/" is not working. Hence pasted
> the pcap details, hope this helps
It's working just fine:
quanah@ub18:~$ ftp ftp.openldap.org
Connected to www.openldap.org.
220 ProFTPD 1.3.4a Server (gauss) [::ffff:23.92.27.230]
Name (ftp.openldap.org:quanah): ftp
331 Anonymous login ok, send your complete email address as your password
Password:
230 Anonymous access granted, restrictions apply
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> pass
Passive mode on.
ftp> cd incoming
250 CWD command successful
ftp> mkdir its9088
257 "/incoming/its9088" - Directory successfully created
ftp> cd its9088
250 CWD command successful
ftp> lcd /tmp
Local directory now /tmp
ftp> put blah
local: blah remote: blah
227 Entering Passive Mode (23,92,27,230,156,55).
150 Opening BINARY mode data connection for blah
226 Transfer complete
ftp>
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
4 years
RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44
by jrajalakshmi＠juniper.net
--_000_CH2PR05MB69514726BCB360A68DA761D2DF860CH2PR05MB6951namp_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi,
The FTP "ftp://ftp.openldap.org/incoming/" is not working. Hence pasted the=
pcap details, hope this helps
As you can see, 9 requests from a single AAA server to LDAP server were ini=
tiated at the same time (concurrent request). But from the LDAP, our unders=
tanding is the 'searchRequest' is sequential..after every 'searchRequest' t=
here is "searchResDone" before handling the subsequent request "searchReque=
st'
No Time Source Destination Protocol Length =
Info
1 0.000000000 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D2, l=3D71)
2 0.000359909 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D7, l=3D71)
3 0.000512919 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D8, l=3D71)
4 0.001219680 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D9, l=3D71)
5 0.001228416 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D10, l=3D71)
6 0.001359636 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D11, l=3D71)
7 0.002419581 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D5, l=3D71)
8 0.002432108 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D6, l=3D71)
9 0.002435112 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D4, l=3D71)
10 0.002511929 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(52) "dc=3Dexample,dc=3Dcom" wholeSubtree
11 0.002637421 10.212.10.218 10.212.10.120 RADIUS 115 Access=
-Request(1) (id=3D3, l=3D71)
12 0.004109740 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(52) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
13 0.004146613 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(52) success [2 results]
14 0.004348866 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(55) "dc=3Dexample,dc=3Dcom" wholeSubtree
15 0.004781891 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D7, l=3D76)
16 0.004952000 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(55) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
17 0.004962643 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(55) success [0 results]
18 0.005087014 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(57) "dc=3Dexample,dc=3Dcom" wholeSubtree
19 0.005153658 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D8, l=3D76)
20 0.005698130 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(57) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
21 0.005723767 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(57) success [1 result]
22 0.005915500 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D5, l=3D76)
23 0.006033219 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(59) "dc=3Dexample,dc=3Dcom" wholeSubtree
24 0.006566138 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(59) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
25 0.006578873 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(59) success [1 result]
26 0.006740243 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D6, l=3D76)
27 0.006831740 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(61) "dc=3Dexample,dc=3Dcom" wholeSubtree
28 0.007507468 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(61) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
29 0.007519658 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(61) success [1 result]
30 0.007650375 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(53) "dc=3Dexample,dc=3Dcom" wholeSubtree
31 0.007733127 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D4, l=3D76)
32 0.008406756 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(53) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
33 0.008418925 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(53) success [1 result]
34 0.008554053 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(54) "dc=3Dexample,dc=3Dcom" wholeSubtree
35 0.008629869 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D10, l=3D76)
36 0.008978083 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(54) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
37 0.008988019 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(54) success [1 result]
38 0.009107220 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(60) "dc=3Dexample,dc=3Dcom" wholeSubtree
39 0.009172870 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D9, l=3D76)
40 0.009654133 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(60) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
41 0.009667685 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(60) success [1 result]
42 0.009783997 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(56) "dc=3Dexample,dc=3Dcom" wholeSubtree
43 0.009882004 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D3, l=3D76)
44 0.010270458 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(56) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
45 0.010280926 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(56) success [1 result]
46 0.010400940 10.212.10.120 10.212.10.220 LDAP 124 searchReq=
uest(58) "dc=3Dexample,dc=3Dcom" wholeSubtree
47 0.010474219 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D2, l=3D76)
48 0.010881808 10.212.10.220 10.212.10.120 LDAP 378 searchRes=
Entry(58) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
49 0.010891960 10.212.10.220 10.212.10.120 LDAP 82 searchResD=
one(58) success [1 result]
50 0.011050696 10.212.10.120 10.212.10.218 RADIUS 120 Access=
-Accept(2) (id=3D11, l=3D76)
Thanks,
Raji
-----Original Message-----
From: Quanah Gibson-Mount <quanah(a)symas.com>
Sent: Thursday, September 26, 2019 6:52 PM
To: Rajalakshmi Jayaraman <jrajalakshmi(a)juniper.net>; openldap-its@OpenLDAP=
.org
Cc: Muthaiyan Vel <mvel(a)juniper.net>
Subject: RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44
--On Thursday, September 26, 2019 2:19 PM +0000 Rajalakshmi Jayaraman <jraj=
alakshmi(a)juniper.net<mailto:jrajalakshmi@juniper.net>> wrote:
>
>
> Hi,
>
> Thanks for sharing the inputs. We have tried with the unmodified
> release of OpenLDAP that was suggested. From the pcap, we have noticed
> the LDAP search requests are sequential. (pl. find attached the pcap)
> for reference
Please put your pcap file on the FTP server rather than sending it via the =
ITS system. Then respond to the ITS with a link to the file.
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<https://urldefense.com/v3/__http://www.symas.com__;!8WoA6RjC81c!R398Hvv4fW=
btEY6cojq9Y7NDCOui0Wmtxg3ZIwwbs-vEdcC_Ir4Odx8wrsWJSPM5qmj9$ <https://urldef=
ense.com/v3/__http:/www.symas.com__;!8WoA6RjC81c!R398Hvv4fWbtEY6cojq9Y7NDCO=
ui0Wmtxg3ZIwwbs-vEdcC_Ir4Odx8wrsWJSPM5qmj9$%20> >
Juniper Business Use Only
--_000_CH2PR05MB69514726BCB360A68DA761D2DF860CH2PR05MB6951namp_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"=
>
<meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
p.msipfooter30b3d538, li.msipfooter30b3d538, div.msipfooter30b3d538
{mso-style-name:msipfooter30b3d538;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle21
{mso-style-type:personal-compose;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72">
<div class=3D"WordSection1">
<p class=3D"MsoPlainText">Hi,<o:p></o:p></p>
<p class=3D"MsoPlainText">The FTP "<a href=3D"ftp://ftp.openldap.org/i=
ncoming/">ftp://ftp.openldap.org/incoming/</a>" is not working. Hence =
pasted the pcap details, hope this helps
<o:p></o:p></p>
<p class=3D"MsoPlainText">As you can see, 9 requests from a single AAA serv=
er to LDAP server were initiated at the same time (concurrent request). But=
from the LDAP, our understanding is the ‘<span style=3D"font-family:=
"Courier New"">searchRequest’</span> is sequential..after
every ‘<span style=3D"font-family:"Courier New"">searchReq=
uest’</span> there is “<span style=3D"font-family:"Courier=
New"">searchResDone</span>” before handling the subsequent requ=
est “<span style=3D"font-family:"Courier New"">searchReques=
t’</span><o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><b><span style=3D"font-family:"Courier New&q=
uot;">No Time Source &=
nbsp; Destination &nbs=
p; Protocol Length &nb=
sp; Info<o:p></o:p></span></b></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">1 0.000000000 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D2, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">2 0.000359909 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D7, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">3 0.000512919 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D8, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">4 0.001219680 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D9, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">5 0.001228416 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D10, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">6 0.001359636 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D11, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">7 0.002419581 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D5, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">8 0.002432108 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D6, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">9 0.002435112 10.212.10.218&nb=
sp; 10.212.10.120 RADIUS 115 =
; Access-Request(1) (id=3D4, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">10 0.002511929 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(52) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">11 0.002637421 10.212.10.218 &n=
bsp; 10.212.10.120 RADIUS 115 Acc=
ess-Request(1) (id=3D3, l=3D71)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">12 0.004109740 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(52) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">13 0.004146613 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(52) success [2 results]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">14 0.004348866 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(55) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">15 0.004781891 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D7, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">16 0.004952000 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(55) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">17 0.004962643 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(55) success [0 results]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">18 0.005087014 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(57) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">19 0.005153658 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D8, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">20 0.005698130 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(57) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">21 0.005723767 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(57) success [1 result]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">22 0.005915500 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D5, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">23 0.006033219 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(59) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">24 0.006566138 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(59) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">25 0.006578873 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(59) success [1 result]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">26 0.006740243 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D6, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">27 0.006831740 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(61) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">28 0.007507468 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(61) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">29 0.007519658 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(61) success [1 result]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">30 0.007650375 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(53) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">31 0.007733127 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D4, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">32 0.008406756 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(53) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">33 0.008418925 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(53) success [1 result]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">34 0.008554053 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(54) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">35 0.008629869 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D10, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">36 0.008978083 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(54) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">37 0.008988019 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(54) success [1 result]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">38 0.009107220 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(60) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">39 0.009172870 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D9, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">40 0.009654133 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(60) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">41 0.009667685 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(60) success [1 result]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">42 0.009783997 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(56) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">43 0.009882004 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D3, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">44 0.010270458 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(56) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">45 0.010280926 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(56) success [1 result]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">46 0.010400940 10.212.10.120 &n=
bsp; 10.212.10.220 LDAP 124 searchReque=
st(58) "dc=3Dexample,dc=3Dcom" wholeSubtree
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">47 0.010474219 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D2, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">48 0.010881808 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 378 searchResEn=
try(58) "cn=3Dtest,dc=3Dexample,dc=3Dcom"
<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">49 0.010891960 10.212.10.220 &n=
bsp; 10.212.10.120 LDAP 82 searchResDon=
e(58) success [1 result]<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><span style=3D"font-family:"Courier New"=
;">50 0.011050696 10.212.10.120 &n=
bsp; 10.212.10.218 RADIUS 120 Acc=
ess-Accept(2) (id=3D11, l=3D76)<o:p></o:p></span></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">Thanks,<o:p></o:p></p>
<p class=3D"MsoPlainText">Raji<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">-----Original Message-----<br>
From: Quanah Gibson-Mount <quanah(a)symas.com> <br>
Sent: Thursday, September 26, 2019 6:52 PM<br>
To: Rajalakshmi Jayaraman <jrajalakshmi(a)juniper.net>; openldap-its@Op=
enLDAP.org<br>
Cc: Muthaiyan Vel <mvel(a)juniper.net><br>
Subject: RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44<o:p></o:p><=
/p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">--On Thursday, September 26, 2019 2:19 PM +00=
00 Rajalakshmi Jayaraman <<a href=3D"mailto:jrajalakshmi@juniper.net"><s=
pan style=3D"color:windowtext;text-decoration:none">jrajalakshmi(a)juniper.ne=
t</span></a>> wrote:<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">><o:p> </o:p></p>
<p class=3D"MsoPlainText">><o:p> </o:p></p>
<p class=3D"MsoPlainText">> Hi,<o:p></o:p></p>
<p class=3D"MsoPlainText">><o:p> </o:p></p>
<p class=3D"MsoPlainText">> Thanks for sharing the inputs. We have tried=
with the unmodified
<o:p></o:p></p>
<p class=3D"MsoPlainText">> release of OpenLDAP that was suggested. From=
the pcap, we have noticed
<o:p></o:p></p>
<p class=3D"MsoPlainText">> the LDAP search requests are sequential. (pl=
. find attached the pcap)
<o:p></o:p></p>
<p class=3D"MsoPlainText">> for reference<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">Please put your pcap file on the FTP server rathe=
r than sending it via the ITS system. Then respond to the ITS with a =
link to the file.<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">--Quanah<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">--<o:p></o:p></p>
<p class=3D"MsoPlainText"><o:p> </o:p></p>
<p class=3D"MsoPlainText">Quanah Gibson-Mount<o:p></o:p></p>
<p class=3D"MsoPlainText">Product Architect<o:p></o:p></p>
<p class=3D"MsoPlainText">Symas Corporation<o:p></o:p></p>
<p class=3D"MsoPlainText">Packaged, certified, and supported LDAP solutions=
powered by OpenLDAP:<o:p></o:p></p>
<p class=3D"MsoPlainText"><<a href=3D"https://urldefense.com/v3/__http:/=
www.symas.com__;!8WoA6RjC81c!R398Hvv4fWbtEY6cojq9Y7NDCOui0Wmtxg3ZIwwbs-vEdc=
C_Ir4Odx8wrsWJSPM5qmj9$%20"><span style=3D"color:windowtext;text-decoration=
:none">https://urldefense.com/v3/__http://www.symas.com__;!8WoA6RjC81c!R398=
Hvv4fWbtEY6cojq9Y7NDCOui0Wmtxg3ZIwwbs-vEdcC_Ir4Odx8wrsWJSPM5qmj9$
</span></a>><o:p></o:p></p>
<p class=3D"MsoNormal"><o:p> </o:p></p>
<p class=3D"msipfooter30b3d538" align=3D"center" style=3D"margin:0in;margin=
-bottom:.0001pt;text-align:center">
<span style=3D"font-size:7.0pt;color:black">Juniper Business Use Only</span=
><o:p></o:p></p>
</div>
</body>
</html>
--_000_CH2PR05MB69514726BCB360A68DA761D2DF860CH2PR05MB6951namp_--
4 years
RE: (ITS#9088) Concurrency not seen in OpenLDAP 2.4.44
by quanah＠symas.com
--On Thursday, September 26, 2019 2:19 PM +0000 Rajalakshmi Jayaraman
<jrajalakshmi(a)juniper.net> wrote:
>
>
> Hi,
>
> Thanks for sharing the inputs. We have tried with the unmodified release
> of OpenLDAP that was suggested. From the pcap, we have noticed the LDAP
> search requests are sequential. (pl. find attached the pcap) for
> reference
Please put your pcap file on the FTP server rather than sending it via the
ITS system. Then respond to the ITS with a link to the file.
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
4 years
Re: (ITS#9018) dynlist don't close connection
by I.Harbuz＠A1.by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4 years
