openldap-bugs August 2020

openldap-bugs@openldap.org

2 participants
189 discussions

[Issue 9318] New: RFC 6125 compliance (SANs-ID vs CN-ID)
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=9318 Issue ID: 9318 Summary: RFC 6125 compliance (SANs-ID vs CN-ID) Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: dar(a)xoe.solutions Target Milestone: --- > As noted, a client MUST NOT seek a match for a reference identifier > of CN-ID if the presented identifiers include a DNS-ID, SRV-ID, > URI-ID, or any application-specific identifier types supported by the > client. It goes on > Therefore, if and only if the presented identifiers do not include a > DNS-ID, SRV-ID, URI-ID, or any application-specific identifier types > supported by the client, then the client MAY as a last resort check > for a string whose form matches that of a fully qualified DNS domain > name in a Common Name field of the subject field (i.e., a CN-ID). If > the client chooses to compare a reference identifier of type CN-ID > against that string, it MUST follow the comparison rules for the DNS > domain name portion of an identifier of type DNS-ID, SRV-ID, or > URI-ID, as described under Section 6.4.1, Section 6.4.2, and > Section 6.4.3. Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS) (https://tools.ietf.org/html/rfc6125#section-6.4.4) > This is an Internet Standards Track document. Ldap still using CN-ID by default, in the presence of URI/DNS/SRV SANs is prohibited and not standards compliant. It _may_ only fall back to CN if non of those values is provided. -- You are receiving this mail because: You are on the CC list for the issue.

1 18

[Bug 9249] New: A dollar sign ($) at the end of the 2nd argument of olcAuthzRegexp crashes slapd
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=9249 Bug ID: 9249 Summary: A dollar sign ($) at the end of the 2nd argument of olcAuthzRegexp crashes slapd Product: OpenLDAP Version: 2.4.47 Hardware: All OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: kop(a)karlpinc.com Target Milestone: --- The following ldif, fed to ldapmodify, crashes slapd. dn: cn=config changetype: modify replace: olcAuthzRegexp olcAuthzRegexp: "^([^,]+),cn=PLAIN,cn=auth" "$1,ou=People,dc=example,dc=com$" Happens on Debian 10 with openldap 2.4.47 and RHEL 8 with openldap 2.4.46. Doing ldapmodify -d -1 seems to crash only 1 out of 3 times, but it always crashes without the -d -1. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Issue 3953] Enhancement - changelog module
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=3953 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 3953] Enhancement - changelog module
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=3953 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |WONTFIX --- Comment #10 from Quanah Gibson-Mount <quanah(a)openldap.org> --- The auditlog overlay generates something quite similar, and there's little value in supporting this at this point. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 4685] Updated changelog overlay by Neil Dunbar
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=4685 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 4685] Updated changelog overlay by Neil Dunbar
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=4685 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |WONTFIX --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- The auditlog overlay generates something quite similar, and there's little value in supporting this at this point. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 4656] Enhancement: again on Netscape style changelog
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=4656 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 4656] Enhancement: again on Netscape style changelog
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=4656 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |WONTFIX --- Comment #17 from Quanah Gibson-Mount <quanah(a)openldap.org> --- The auditlog overlay generates something quite similar, and there's little value in supporting this at this point. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9054] Add support for multiple EECDH curves
by openldap-its＠openldap.org 28 Aug '20

28 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=9054 --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- trunk: Commits: • d5ed7c50 by Howard Chu at 2020-08-28T11:09:25+01:00 ITS#9054, #9318 document new TLS options in slapd RE24: Commits: • cfc231a5 by Howard Chu at 2020-08-28T15:27:59+00:00 ITS#9054, #9318 document new TLS options in slapd -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9135] mdb index corruption during legitimate delete
by openldap-its＠openldap.org 27 Aug '20

27 Aug '20

https://bugs.openldap.org/show_bug.cgi?id=9135 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.4.52 Resolution|TEST |FIXED --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • ce6d302c by Howard Chu at 2020-08-28T01:30:53+00:00 ITS#9135 fix index error on collapsed range -- You are receiving this mail because: You are on the CC list for the issue.

1 0

← Newer
1
...
11
12
13
14
15
16
17
18
19
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs August 2020