openldap-bugs January 2023

openldap-bugs@openldap.org

1 participants
184 discussions

[Issue 7933] [PATCH] fix frontend config
by openldap-its＠openldap.org 31 Jan '23

31 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=7933 --- Comment #8 from Ondřej Kuzník <ondra(a)mistotebe.net> --- On Thu, Jan 26, 2023 at 01:53:22PM +0000, openldap-its(a)openldap.org wrote: > Could this be the reason why I get `attribute 'olcPasswordHash' not allowed` > when trying to apply an .ldif file such as: > > dn: olcDatabase={-1}frontend,cn=config > changetype: modify > add: olcPasswordHash > olcPasswordHash: {CRYPT} > > This has popped up in Fedora > (https://bugzilla.redhat.com/show_bug.cgi?id=2061966) which seem to have copied > the respective default frontend config file before this patch (see > https://src.fedoraproject.org/rpms/openldap/blob/f37/f/slapd.ldif#_105). As you suggest, this seems to be a Fedora packaging issue: them shipping an out of date ldif file where they might have been able to copy it from upstream source. Pretty sure in that case there's nothing that can be done on the OpenLDAP project side. Someone might need to step up and help Fedora package maintainers deal with it if they say the existing team don't have the capacity. Regards, -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9718] New: test022 can fail on expiry
by openldap-its＠openldap.org 30 Jan '23

30 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9718 Issue ID: 9718 Summary: test022 can fail on expiry Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- >>>>> Starting test022-ppolicy for mdb... running defines.sh Starting slapd on TCP/IP port 9011... Using ldapsearch to check that slapd is running... Testing redundant ppolicy instance... Using ldapadd to populate the database... Testing account lockout... Waiting 13 seconds for lockout to reset... Testing password expiration Waiting seconds for password to expire... sleep: missing operand Try 'sleep --help' for more information. Password expiration test failed >>>>> test022-ppolicy failed for mdb after 43 seconds (exit 1) The issue here is apparently that line 122-123 failed to populate the DELAY variable. 121 122 DELAY=`$LDAPSEARCH -D "$MANAGERDN" -H $URI1 -w $PASSWD \ 123 -b "$USER" -E accountUsability 1.1 | sed -n -e 's/.*expire=$\d*$/\1/p'` 124 125 echo "Testing password expiration" 126 echo "Waiting $DELAY seconds for password to expire..." 127 sleep $DELAY 128 sleep 1 -- You are receiving this mail because: You are on the CC list for the issue.

1 10

[Issue 8102] syncrepl_entry: be_modify failed (16)
by openldap-its＠openldap.org 30 Jan '23

30 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=8102 --- Comment #10 from Quanah Gibson-Mount <quanah(a)openldap.org> --- head: • 868309c9 by Ondřej Kuzník at 2023-01-30T12:06:24+00:00 ITS#8102 Do not continue if deconfigured during pause RE26: • 0b2f5ad7 by Ondřej Kuzník at 2023-01-30T19:01:00+00:00 ITS#8102 Do not continue if deconfigured during pause RE25: • 6733fe4d by Ondřej Kuzník at 2023-01-30T19:02:48+00:00 ITS#8102 Do not continue if deconfigured during pause -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9045] Crashes in cn=config (test050)
by openldap-its＠openldap.org 30 Jan '23

30 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9045 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.6.4 |2.5.14 Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #10 from Quanah Gibson-Mount <quanah(a)openldap.org> --- head: • 12bf5a95 by Ondřej Kuzník at 2023-01-23T11:53:36+00:00 ITS#9045 rlock only if there may be other threads RE26: • 66c2b5ad by Ondřej Kuzník at 2023-01-30T18:57:18+00:00 ITS#9045 rlock only if there may be other threads RE25: • 2f3b77d4 by Quanah Gibson-Mount at 2023-01-30T18:58:16+00:00 Revert "Revert "ITS#9045 Do not share cn=config entries with outside code"" This reverts commit 393308ac1c3eb9d65b682c06826d60a0bf856070. • 5936d721 by Ondřej Kuzník at 2023-01-30T18:59:26+00:00 ITS#9045 rlock only if there may be other threads -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 26 Jan '23

26 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=8698 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=9990 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 26 Jan '23

26 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=8698 --- Comment #3 from subbarao(a)computer.org <subbarao(a)computer.org> --- Part of the fix for this change breaks exop overlay callbacks. Fortunately the fix is simple, just revert the change to passwd.c. The rest works fine. Please see ITS#9990 for more details: https://bugs.openldap.org/show_bug.cgi?id=9990 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7933] [PATCH] fix frontend config
by openldap-its＠openldap.org 26 Jan '23

26 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=7933 --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- (In reply to nilskemail+github from comment #6) > Could this be the reason why I get `attribute 'olcPasswordHash' not allowed` > when trying to apply an .ldif file such as: > > dn: olcDatabase={-1}frontend,cn=config > changetype: modify > add: olcPasswordHash > olcPasswordHash: {CRYPT} > > This has popped up in Fedora > (https://bugzilla.redhat.com/show_bug.cgi?id=2061966) which seem to have > copied the respective default frontend config file before this patch (see > https://src.fedoraproject.org/rpms/openldap/blob/f37/f/slapd.ldif#_105). I'd open a bug with redhat as to why they're doing this at all. {CRYPT} hashes are not portable. If they want to support secure hashes, they should use the ARGON2 module. You also fail to state what version of OpenLDAP you're reporting against. This bug was fixed in 2014, so unless RH is using an absolutely ancient version of OpenLDAP, this would not be related. You probably should describe the issue(s) you are encountering in a post to the openldap-technical email list (https://lists.openldap.org) -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7933] [PATCH] fix frontend config
by openldap-its＠openldap.org 26 Jan '23

26 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=7933 --- Comment #6 from nilskemail+github(a)gmail.com --- Could this be the reason why I get `attribute 'olcPasswordHash' not allowed` when trying to apply an .ldif file such as: dn: olcDatabase={-1}frontend,cn=config changetype: modify add: olcPasswordHash olcPasswordHash: {CRYPT} This has popped up in Fedora (https://bugzilla.redhat.com/show_bug.cgi?id=2061966) which seem to have copied the respective default frontend config file before this patch (see https://src.fedoraproject.org/rpms/openldap/blob/f37/f/slapd.ldif#_105). -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9987] New: OpenLdap does not set large-file-support flags
by openldap-its＠openldap.org 23 Jan '23

23 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9987 Issue ID: 9987 Summary: OpenLdap does not set large-file-support flags Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: allenwebb(a)google.com Target Milestone: --- I understand that 2.4 isn't supported, but 2.6 is blocked by other config related issues, so I wasn't able to test if it has the same problem. Ideally, the openldap configure/build scripts would be aware of large file support and would enable it when supported (arm/x86, etc). Here are the places where it would matter: openldap-2.4.58-r2: 18:33:38.552 * QA Notice: The following files were not built with LFS support: openldap-2.4.58-r2: 18:33:38.565 * Please see https://issuetracker.google.com/201531268 for details. openldap-2.4.58-r2: 18:33:38.581 * fopen,fstat /usr/bin/ldapdelete openldap-2.4.58-r2: 18:33:38.584 * fopen,fstat /usr/bin/ldapmodrdn openldap-2.4.58-r2: 18:33:38.588 * fopen,fstat /usr/bin/ldapwhoami openldap-2.4.58-r2: 18:33:38.591 * fopen,fstat /usr/bin/ldapmodify openldap-2.4.58-r2: 18:33:38.595 * fopen,mkstemp,fstat /usr/bin/ldapsearch openldap-2.4.58-r2: 18:33:38.599 * fopen,fstat /usr/bin/ldappasswd openldap-2.4.58-r2: 18:33:38.602 * fopen,fstat /usr/bin/ldapexop openldap-2.4.58-r2: 18:33:38.606 * fopen,fstat /usr/bin/ldapcompare openldap-2.4.58-r2: 18:33:38.609 * fopen /usr/lib/libldap-2.4.so.2.11.6 openldap-2.4.58-r2: 18:33:38.613 * fopen /usr/lib/libldap_r-2.4.so.2.11.6 openldap-2.4.58-r2: 18:33:38.627 * Full build files: openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/ldapdelete.o openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapdelete openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapmodrdn openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapwhoami openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapmodify openldap-2.4.58-r2: fopen,mkstemp,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapsearch openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldappasswd openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapexop openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/.libs/ldapcompare openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/ldapmodrdn.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/ldapmodify.o openldap-2.4.58-r2: fopen,mkstemp /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/clients/tools/ldapsearch.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/getpass.o openldap-2.4.58-r2: lockf /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/lockf.o openldap-2.4.58-r2: fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/passfile.o openldap-2.4.58-r2: __open_2 /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/detach.o openldap-2.4.58-r2: __open_2 /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/liblutil/sha1.o openldap-2.4.58-r2: open,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/ltest openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/ldif.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/fetch.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/libldap_r-2.4.so.2.11.6T openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/init.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/.libs/libldap_r-2.4.so.2.11.6 openldap-2.4.58-r2: open,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap_r/test.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/librewrite/rewrite.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/librewrite/.libs/rewrite openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/librewrite/xmap.o openldap-2.4.58-r2: open,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/ltest openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/ldif.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/libldap-2.4.so.2.11.6T openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/fetch.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/init.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/.libs/libldap-2.4.so.2.11.6 openldap-2.4.58-r2: open,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/libraries/libldap/test.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/tests/progs/.libs/slapd-addel openldap-2.4.58-r2: readdir,fopen,fstat /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/tests/progs/.libs/slapd-tester openldap-2.4.58-r2: readdir,fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/tests/progs/slapd-tester.o openldap-2.4.58-r2: fopen /build/arm-generic/tmp/portage/net-nds/openldap-2.4.58-r2/work/openldap-2.4.58-.arm/tests/progs/slapd-addel.o -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9045] Crashes in cn=config (test050)
by openldap-its＠openldap.org 23 Jan '23

23 Jan '23

https://bugs.openldap.org/show_bug.cgi?id=9045 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS --- Comment #9 from Ondřej Kuzník <ondra(a)mistotebe.net> --- https://git.openldap.org/openldap/openldap/-/merge_requests/595 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs January 2023