openldap-bugs January 2023

openldap-bugs@openldap.org

1 participants
141 discussions

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 26 Jan '23

26 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=8698 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=9990 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 26 Jan '23

26 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=8698 --- Comment #3 from subbarao(a)computer.org <subbarao(a)computer.org> --- Part of the fix for this change breaks exop overlay callbacks. Fortunately the fix is simple, just revert the change to passwd.c. The rest works fine. Please see ITS#9990 for more details: https://bugs.openldap.org/show_bug.cgi?id=9990 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7933] [PATCH] fix frontend config
by openldap-its＠openldap.org 26 Jan '23

26 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=7933 --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- (In reply to nilskemail+github from comment #6) > Could this be the reason why I get `attribute 'olcPasswordHash' not allowed` > when trying to apply an .ldif file such as: > > dn: olcDatabase={-1}frontend,cn=config > changetype: modify > add: olcPasswordHash > olcPasswordHash: {CRYPT} > > This has popped up in Fedora > (https://bugzilla.redhat.com/show_bug.cgi?id=2061966) which seem to have > copied the respective default frontend config file before this patch (see > https://src.fedoraproject.org/rpms/openldap/blob/f37/f/slapd.ldif#_105). I'd open a bug with redhat as to why they're doing this at all. {CRYPT} hashes are not portable. If they want to support secure hashes, they should use the ARGON2 module. You also fail to state what version of OpenLDAP you're reporting against. This bug was fixed in 2014, so unless RH is using an absolutely ancient version of OpenLDAP, this would not be related. You probably should describe the issue(s) you are encountering in a post to the openldap-technical email list (https://lists.openldap.org) -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7933] [PATCH] fix frontend config
by openldap-its＠openldap.org 26 Jan '23

26 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=7933 --- Comment #6 from nilskemail+github(a)gmail.com --- Could this be the reason why I get `attribute 'olcPasswordHash' not allowed` when trying to apply an .ldif file such as: dn: olcDatabase={-1}frontend,cn=config changetype: modify add: olcPasswordHash olcPasswordHash: {CRYPT} This has popped up in Fedora (https://bugzilla.redhat.com/show_bug.cgi?id=2061966) which seem to have copied the respective default frontend config file before this patch (see https://src.fedoraproject.org/rpms/openldap/blob/f37/f/slapd.ldif#_105). -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9967] New: Please register my company on the support page, again (www.openldap.org)
by openldap-its＠openldap.org 23 Jan '23

23 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9967 Issue ID: 9967 Summary: Please register my company on the support page, again (www.openldap.org) Product: website Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: website Assignee: bugs(a)openldap.org Reporter: sjsong(a)aboutdap.kr Target Milestone: --- Howard Chu <hyc(a)openldap.org> 송상준 <sjsong(a)aboutdap.kr> Hi, you can submit a ticket against "website" in the ITS for this. Thanks. 송상준 wrote: > > Hello. openldap page administrater. > My name is sang jun song. > > I want to register my company on the support page. > I registered before, but it seems to have disappeared. > Our company has been attending ldapcon since 2015. > > The sysmas employees who attended the LDAPCON in 2019 may remember me. > > Please register my company on the support page. Please contact me if you need additional information.. > > thank you. > > Song. > > Registration phrase > > Seojindsa Co., Ltd. (Aboutdap Co., Ltd.)- Korea > > Provides consultancy, development, training and user support for OpenLDAP software in Korea. > > URL : seojindsa : www.seojindsa.kr > > ------------------------------------------------------ > (주) 어바웃답 기술영업팀 송상준 부장 > TEL. 010-9780-6746 > email: sjsong(a)aboutdap.kr > homepage: www.aboutdap.kr > ------------------------------------------------------- > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/ -- You are receiving this mail because: You are on the CC list for the issue.

1 1

[Issue 9987] New: OpenLdap does not set large-file-support flags
by openldap-its＠openldap.org 23 Jan '23

23 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9987 Issue ID: 9987 Summary: OpenLdap does not set large-file-support flags Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: allenwebb(a)google.com Target Milestone: --- I understand that 2.4 isn't supported, but 2.6 is blocked by other config related issues, so I wasn't able to test if it has the same problem. Ideally, the openldap configure/build scripts would be aware of large file support and would enable it when supported (arm/x86, etc). Here are the places where it would matter: openldap-2.4.58-r2: 18:33:38.552 * QA Notice: The following files were not built with LFS support: openldap-2.4.58-r2: 18:33:38.565 * Please see https://issuetracker.google.com/201531268 for details. openldap-2.4.58-r2: 18:33:38.581 * fopen,fstat /usr/bin/ldapdelete openldap-2.4.58-r2: 18:33:38.584 * fopen,fstat /usr/bin/ldapmodrdn openldap-2.4.58-r2: 18:33:38.588 * fopen,fstat /usr/bin/ldapwhoami openldap-2.4.58-r2: 18:33:38.591 * fopen,fstat /usr/bin/ldapmodify openldap-2.4.58-r2: 18:33:38.595 * fopen,mkstemp,fstat /usr/bin/ldapsearch openldap-2.4.58-r2: 18:33:38.599 * fopen,fstat /usr/bin/ldappasswd openldap-2.4.58-r2: 18:33:38.602 * fopen,fstat /usr/bin/ldapexop openldap-2.4.58-r2: 18:33:38.606 * fopen,fstat /usr/bin/ldapcompare openldap-2.4.58-r2: 18:33:38.609 * fopen /usr/lib/libldap-2.4.so.2.11.6 openldap-2.4.58-r2: 18:33:38.613 * fopen /usr/lib/libldap_r-2.4.so.2.11.6 openldap-2.4.58-r2: 18:33:38.627 * Full build files: openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/ldapdelete.o openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapdelete openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapmodrdn openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapwhoami openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapmodify openldap-2.4.58-r2: fopen,mkstemp,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapsearch openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldappasswd openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapexop openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapcompare openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/ldapmodrdn.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/ldapmodify.o openldap-2.4.58-r2: fopen,mkstemp /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/ldapsearch.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/getpass.o openldap-2.4.58-r2: lockf /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/lockf.o openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/passfile.o openldap-2.4.58-r2: __open_2 /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/detach.o openldap-2.4.58-r2: __open_2 /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/sha1.o openldap-2.4.58-r2: open,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/ltest openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/ldif.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/fetch.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/libldap_r-2.4.so.2.11.6T openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/init.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/libldap_r-2.4.so.2.11.6 openldap-2.4.58-r2: open,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/test.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/librewrite/rewrite.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/librewrite/.libs/rewrite openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/librewrite/xmap.o openldap-2.4.58-r2: open,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/ltest openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/ldif.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/libldap-2.4.so.2.11.6T openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/fetch.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/init.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/libldap-2.4.so.2.11.6 openldap-2.4.58-r2: open,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/test.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/tests/progs/.libs/slapd-addel openldap-2.4.58-r2: readdir,fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/tests/progs/.libs/slapd-tester openldap-2.4.58-r2: readdir,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/tests/progs/slapd-tester.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/tests/progs/slapd-addel.o -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9045] Crashes in cn=config (test050)
by openldap-its＠openldap.org 23 Jan '23

23 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9045 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS --- Comment #9 from Ondřej Kuzník <ondra(a)mistotebe.net> --- https://git.openldap.org/openldap/openldap/-/merge_requests/595 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9045] Crashes in cn=config (test050)
by openldap-its＠openldap.org 23 Jan '23

23 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9045 --- Comment #8 from Ondřej Kuzník <ondra(a)mistotebe.net> --- Oh yeah, config_back_entry_get actually wants to distinguish three situations coming from ldap_pvt_thread_pool_pausequery: - not paused - keep going, rlock cfb->cb_rwlock so the entry is safe to read - paused - keep going, we are the thread that wlocked cfb->cb_rwlock - WANT_PAUSE - a pause is starting, but we're *not* paused! We should either rlock anyway and make it the calling thread's responsibility to check for a pause if they care - should make ldap_pvt_thread_pool_pausequery return (pool->ltp_pause != PAUSED) Or we return LDAP_BUSY or something of the sort - would need ldap_pvt_thread_pool_pausequery to return pool->ltp_pause and expose the `enum { NOT_PAUSED = 0, WANT_PAUSE = 1, PAUSED = 2 };` in ldap_pvt.h -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9045] Crashes in cn=config (test050)
by openldap-its＠openldap.org 20 Jan '23

20 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9045 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|TEST |--- Status|RESOLVED |CONFIRMED --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Still hitting this crash even with this fix in place in openldap-head: (gdb) bt [2/19314] #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 #1 0x00007f623066b535 in __GI_abort () at abort.c:79 #2 0x00007f623066b40f in __assert_fail_base (fmt=0x7f62307ccef0 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=0x559bb9d494bf "a->a_nvals != NULL", file=0x559bb9d494b8 "attr.c", line=230, function=<optimized out>) at assert.c:92 #3 0x00007f62306791a2 in __GI___assert_fail (assertion=0x559bb9d494bf "a->a_nvals != NULL", file=0x559bb9d494b8 "attr.c", line=230, function=0x559bb9d495b0 <__PRETTY_FUNCTION__.12465> "attr_dup2") at assert.c:101 #4 0x0000559bb9c70227 in attr_dup2 (tmp=0x559bbb005068, a=0x559bbb005c08) at attr.c:230 #5 0x0000559bb9c70440 in attrs_dup (a=0x559bbb005c08) at attr.c:282 #6 0x0000559bb9c742bd in entry_dup2 (dest=0x559bbaff0658, source=0x559bbaff02e8) at entry.c:940 #7 0x0000559bb9c74301 in entry_dup (e=0x559bbaff02e8) at entry.c:949 #8 0x0000559bb9c4d635 in config_back_entry_get (op=0x7f622f541400, ndn=0x7f622f541448, oc=0x0, at=0x0, rw=0, ent=0x7f622f540998) at bconfig.c:6923 #9 0x0000559bb9d042ac in overlay_entry_get_ov (op=0x7f622f541400, dn=0x7f622f541448, oc=0x0, ad=0x0, rw=0, e=0x7f622f540998, on=0x0) at backover.c:378 #10 0x00007f622d52e577 in syncprov_matchops (op=0x7f622f541400, opc=0x7f6220002f98, saveit=1) at syncprov.c:1312 #11 0x00007f622d5343ff in syncprov_op_mod (op=0x7f622f541400, rs=0x7f622f540eb0) at syncprov.c:2810 #12 0x0000559bb9d04cbe in overlay_op_walk (op=0x7f622f541400, rs=0x7f622f540eb0, which=op_modify, oi=0x7f62201de3a0, on=0x7f62201dde50) at backover.c:691 #13 0x0000559bb9d04fe1 in over_op_func (op=0x7f622f541400, rs=0x7f622f540eb0, which=op_modify) at backover.c:766 #14 0x0000559bb9d0516e in over_op_modify (op=0x7f622f541400, rs=0x7f622f540eb0) at backover.c:808 #15 0x0000559bb9cf5fb7 in syncrepl_updateCookie (si=0x7f622410b130, op=0x7f622f541400, syncCookie=0x7f622f541190, save=1) at syncrepl.c:5366 #16 0x0000559bb9ce9ba2 in do_syncrep2 (op=0x7f622f541400, si=0x7f622410b130) at syncrepl.c:1953 #17 0x0000559bb9ceabcb in do_syncrepl (ctx=0x7f622f541b10, arg=0x7f622410c690) at syncrepl.c:2219 #18 0x0000559bb9c5d43a in slapd_rtask_trampoline (ctx=0x7f622f541b10, arg=0x7f622410c690) at daemon.c:2432 #19 0x00007f6230f5337f in ldap_int_thread_pool_wrapper (xpool=0x559bbafc69c0) at tpool.c:1053 #20 0x00007f6230810fa3 in start_thread (arg=<optimized out>) at pthread_create.c:486 #21 0x00007f623074206f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 (gdb) frame 8 #8 0x0000559bb9c4d635 in config_back_entry_get (op=0x7f622f541400, ndn=0x7f622f541448, oc=0x0, at=0x0, rw=0, ent=0x7f622f540998) at bconfig.c:6923 6923 *ent = entry_dup( e ); (gdb) print locked $1 = 0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9988] New: typo in documentation lmdb:open_db
by openldap-its＠openldap.org 20 Jan '23

20 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9988 Issue ID: 9988 Summary: typo in documentation lmdb:open_db Product: website Version: unspecified Hardware: All URL: https://lmdb.readthedocs.io/en/release/#lmdb.Environme nt.open_db OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: website Assignee: bugs(a)openldap.org Reporter: anthon(a)mnt.org Target Milestone: --- There is a minor typo in the description of the 'integerdup' argument to open_db https://lmdb.readthedocs.io/en/release/#lmdb.Environment.open_db integers encode din native byte should be: integers encoded in native byte Sorry could not find the source for the lmdb documentation online to make aproper diff. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs January 2023