https://bugs.openldap.org/show_bug.cgi?id=9189
Bug ID: 9189
Summary: Add GSSAPI channel-bindings support
Product: OpenLDAP
Version: unspecified
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: ---
Component: libraries
Assignee: bugs(a)openldap.org
Reporter: iboukris(a)gmail.com
Target Milestone: ---
Recently MS has announce they plan to enforce channel-bindings for LDAP over
TLS (ADV190023).
To support it on client side, we need to pass "tls-endpoint" bindings (RFC
5929) to the SASL plugin, and make use of that in GSSAPI.
See also:
https://github.com/cyrusimap/cyrus-sasl/pull/601
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugs.openldap.org/show_bug.cgi?id=8375
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Target Milestone|2.6.2 |2.7.0
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=8255
Quanah Gibson-Mount <quanah(a)openldap.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|bugs(a)openldap.org |ondra(a)mistotebe.net
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=9792
Issue ID: 9792
Summary: During replication, slapd tries to modify
hasSubordinates (and fails)
Product: OpenLDAP
Version: 2.5.9
Hardware: x86_64
OS: Linux
Status: UNCONFIRMED
Keywords: needs_review
Severity: normal
Priority: ---
Component: slapd
Assignee: bugs(a)openldap.org
Reporter: christophe(a)armaghast.eu
Target Milestone: ---
During relication, this strange error occurs:
Jan 25 14:46:42 annu slapd[471040]: conn=1001 op=2796 MOD attr=userPassword
pwdChangedTime pwdHistory entryCSN modifiersName modifyTimestamp
hasSubordinates
Jan 25 14:46:42 annu slapd[471040]: conn=1001 op=2796 RESULT tag=103 err=16
qtime=0.000030 etime=0.000462 text=modify/delete: hasSubordinates: no such
attribute
Why does slapd try to modify this (virtual) attribute ?
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=9350
Issue ID: 9350
Summary: Expand test suite for null base
Product: OpenLDAP
Version: 2.5
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: normal
Priority: ---
Component: build
Assignee: bugs(a)openldap.org
Reporter: quanah(a)openldap.org
Target Milestone: ---
Currently we have no tests that use the empty suffix (null base).
This is an entirely valid configuration setup, and there are unique challenges
and bugs that crop up with this usage.
We need to ensure we're covering this use case, particularly with syncrepl and
delta-syncrepl configurations.
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=8255
Ondřej Kuzník <ondra(a)mistotebe.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|UNCONFIRMED |IN_PROGRESS
Ever confirmed|0 |1
--- Comment #10 from Ondřej Kuzník <ondra(a)mistotebe.net> ---
https://git.openldap.org/openldap/openldap/-/merge_requests/487 for the
clarification.
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=8255
--- Comment #9 from Ondřej Kuzník <ondra(a)mistotebe.net> ---
(In reply to Ondřej Kuzník from comment #8)
> and probably need to stop referencing the slapd-shell manpage too.
Ah, we already did that, forgot I was reading the installed, not the local
manpage.
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=8255
Ondřej Kuzník <ondra(a)mistotebe.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Component|backends |documentation
--- Comment #8 from Ondřej Kuzník <ondra(a)mistotebe.net> ---
(In reply to Howard Chu from comment #7)
> (In reply to Ondřej Kuzník from comment #6)
>> str2result() doesn't expect "msgid:" to be passed in the response, even
>> though that's part of the protocol as documented.
>
> Incorrect. The docs clearly show msgid: is not part of the response message.
True, I misread the manpage because there is little structure in there to
support quick reference.
I think we should put the "sockresp result" string in the relevant paragraph
and probably need to stop referencing the slapd-shell manpage too.
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=8255
--- Comment #7 from Howard Chu <hyc(a)openldap.org> ---
(In reply to Ondřej Kuzník from comment #6)
> str2result() doesn't expect "msgid:" to be passed in the response, even
> though that's part of the protocol as documented.
Incorrect. The docs clearly show msgid: is not part of the response message.
>>>>
The commands - except unbind - should output:
RESULT
code: <integer>
matched: <matched DN>
info: <text>
where only RESULT is mandatory, and then close the socket.
<<<<
The msgid: is only included in messages from back-sock to the external program.
There is no bug in back-sock or in its documentation.
--
You are receiving this mail because:
You are on the CC list for the issue.
https://bugs.openldap.org/show_bug.cgi?id=8255
--- Comment #6 from Ondřej Kuzník <ondra(a)mistotebe.net> ---
str2result() doesn't expect "msgid:" to be passed in the response, even though
that's part of the protocol as documented. Now that back-sock is its only user,
it should just be added.
--
You are receiving this mail because:
You are on the CC list for the issue.