https://bugs.openldap.org/show_bug.cgi?id=9200
Bug ID: 9200
Summary: 2.4 to 2.5 upgrade documentation
Product: OpenLDAP
Version: 2.5
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: blocker
Priority: ---
Component: documentation
Assignee: bugs(a)openldap.org
Reporter: quanah(a)openldap.org
Target Milestone: ---
For the 2.5 release, we need to document the upgrade procedures for moving from
OpenLDAP 2.4 to OpenLDAP 2.5.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=9627
Issue ID: 9627
Summary: Query regarding openldap ca cert buffer usage over
filepath
Product: OpenLDAP
Version: 2.5.6
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: ---
Component: slapd
Assignee: bugs(a)openldap.org
Reporter: naveen.kumartg(a)siemens.com
Target Milestone: ---
Hi,
We are unable to connect to openldap server via starttls using
LDAP_OPT_X_TLS_CACERT. The LDAP_OPT_X_TLS_CACERT option doesn't work and it is
not mentioned in any of the documents.
LDAP_OPT_X_TLS_CACERTFILE option does work but it takes file path.
Does openldap stack support ca certificate in buffer/array format otherthan
just the filepath.?, We would like to avoid filepath.
Best Regards,
Naveen
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=5344
--- Comment #15 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
Commits:
• 49ee5d9b
by Howard Chu at 2021-08-13T21:09:28+01:00
ITS#5344 slapo-rwm: fix prev commit
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=9122
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |TEST
Status|IN_PROGRESS |RESOLVED
--- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
Commits:
• 973a9303
by Howard Chu at 2021-08-13T02:09:48+00:00
ITS#9122 expose SLAP_TOOL_DRYRUN to backends
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=8958
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|IN_PROGRESS |RESOLVED
Resolution|--- |TEST
--- Comment #41 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
Commits:
• 5ad6ab35
by Howard Chu at 2021-08-12T18:59:06+00:00
ITS#8958 rename ldap_pvt_thread_pool_pausecheck()
• f6a61ab7
by Howard Chu at 2021-08-12T18:59:06+00:00
ITS#8958 back-mdb: checkpoint online indexer
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=9634
Issue ID: 9634
Summary: ACL processing of <what> clauses should evaluate regex
pattern after other variants
Product: OpenLDAP
Version: unspecified
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: ---
Component: slapd
Assignee: bugs(a)openldap.org
Reporter: michael(a)stroeder.com
Target Milestone: ---
Evaluating regex patterns cost performance.
Thus cheaper <what> parts (e.g. attrs=) should be evaluated before dn.regex=
and val.regex=. Likely evaluating simple dn.(sub|one|exact) should be split
from processing dn.regex.
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=9122
Howard Chu <hyc(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|ondra(a)mistotebe.net |hyc(a)openldap.org
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=9626
Issue ID: 9626
Summary: Segmentation fault on mdb_midl_append_list
Product: LMDB
Version: 0.9.29
Hardware: x86_64
OS: Linux
Status: UNCONFIRMED
Severity: normal
Priority: ---
Component: liblmdb
Assignee: bugs(a)openldap.org
Reporter: carlos.velasco(a)nimastelecom.com
Target Milestone: ---
Hello,
Using LMDB for modsecurity 3 I get segmentation fauls of httpd every few hours.
Core debugging shows it ocurrs in mdb_midl_append_list in LMDB lib.
# gdb /usr/sbin/httpd
core.httpd.25.127c0e0a8a1e468f8d5749d995f81381.204107.1628497829000000000000
GNU gdb (GDB) 9.2
Copyright (C) 2020 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-pc-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
<http://www.gnu.org/software/gdb/documentation/>.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/httpd...
(No debugging symbols found in /usr/sbin/httpd)
[New LWP 204177]
[New LWP 204154]
[New LWP 204152]
[New LWP 204151]
[New LWP 204107]
[New LWP 204169]
[New LWP 204147]
[New LWP 204149]
[New LWP 204170]
[New LWP 204173]
[New LWP 204186]
[New LWP 204185]
[New LWP 204181]
[New LWP 204189]
[New LWP 204184]
[New LWP 204171]
[New LWP 204172]
[New LWP 204178]
[New LWP 204175]
[New LWP 204187]
[New LWP 204174]
[New LWP 204176]
[New LWP 204179]
[New LWP 204180]
[New LWP 204182]
[New LWP 204183]
[New LWP 204188]
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
Core was generated by `/usr/sbin/httpd -k start'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x00007f2a32a4109f in mdb_midl_append_list (idp=0x7f29f8041b13,
app=0x25fa538) at midl.c:175
175 midl.c: No such file or directory.
[Current thread is 1 (Thread 0x7f2a09ffb640 (LWP 204177))]
(gdb) bt
#0 0x00007f2a32a4109f in mdb_midl_append_list (idp=0x7f29f8041b13,
app=0x25fa538) at midl.c:175
#1 0x00007f2a32a325bf in mdb_txn_commit (txn=0xf9bda0) at mdb.c:3485
#2 0x00007f2a32eb8904 in
modsecurity::collection::backend::LMDB::storeOrUpdateFirst (this=0x1fe28b0,
key=..., value=...) at collection/backend/lmdb.cc:245
#3 0x00007f2a32e97bb8 in
modsecurity::collection::Collection::storeOrUpdateFirst (value=...,
compartment2=..., compartment=..., key=..., this=0x1fe28b0) at
../headers/modsecurity/collection/collection.h:99
#4 modsecurity::variables::Ip_DynamicElement::storeOrUpdateFirst (value=...,
var=..., t=<optimized out>) at ../src/variables/ip.h:110
#5 modsecurity::actions::SetVar::evaluate (this=0x30acfc0, rule=<optimized
out>, t=<optimized out>) at actions/set_var.cc:144
#6 0x00007f2a32e641bc in
modsecurity::RuleWithActions::executeActionsIndependentOfChainedRuleResult
(this=this@entry=0x30c9f50, trans=trans@entry=0x7f29f8036e40,
containsBlock=containsBlock@entry=0x7f2a09ff94ef, ruleMessage=...) at
rule_with_actions.cc:199
#7 0x00007f2a32e6dc33 in modsecurity::RuleWithOperator::evaluate
(this=<optimized out>, trans=<optimized out>, ruleMessage=...) at
/usr/include/c++/11.2.0/ext/atomicity.h:109
#8 0x00007f2a32e66e59 in modsecurity::RuleWithActions::evaluate
(this=0x30c9f50, transaction=0x7f29f8036e40) at
/usr/include/c++/11.2.0/ext/atomicity.h:111
#9 0x00007f2a32e5cd3c in modsecurity::RulesSet::evaluate (this=<optimized
out>, phase=phase@entry=3, t=t@entry=0x7f29f8036e40) at rules_set.cc:210
#10 0x00007f2a32e41793 in modsecurity::Transaction::processRequestBody
(this=0x7f29f8036e40) at transaction.cc:942
#11 0x00007f2a32fa0a28 in hook_request_late () from
/usr/lib64/httpd/modules/mod_security3.so
#12 0x000000000045616b in ap_process_request_internal ()
#13 0x0000000000476ef3 in ap_process_async_request ()
#14 0x0000000000473150 in ap_process_http_connection ()
#15 0x00000000004695bf in ap_run_process_connection ()
#16 0x00007f2a33492831 in process_socket () from
/usr/lib64/httpd/modules/mod_mpm_event.so
#17 0x00007f2a33493307 in worker_thread () from
/usr/lib64/httpd/modules/mod_mpm_event.so
#18 0x00007f2a33703fd6 in start_thread () from /lib64/libpthread.so.0
#19 0x00007f2a336241df in clone () from /lib64/libc.so.6
(gdb)
Regards,
Carlos Velasco
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=8958
--- Comment #40 from Quanah Gibson-Mount <quanah(a)openldap.org> ---
RE25 commit: 2.5 slapcat compat with 2.4 dbs:
Commits:
• d00efea7
by Howard Chu at 2021-08-06T21:54:44+00:00
(From ITS#8958) allow 2.5 slapcat to read 2.4 DB
--
You are receiving this mail because:
You are on the CC list for the issue.