openldap-bugs

openldap-bugs@openldap.org

1 participants
20967 discussions

Re: (ITS#7566) ldapadd slower on Linux than BSD
by quanah＠zimbra.com 05 Apr '13

05 Apr '13

--On Friday, April 05, 2013 11:46 PM +0000 quanah(a)zimbra.com wrote: > --On Friday, April 05, 2013 11:36 PM +0000 lm5(a)ualberta.ca wrote: > >> Full_Name: Leo Mocofan >> Version: 2.4.31 >> OS: Debian Testing >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (129.128.11.107) > > If you are going to test back-mdb, then you need to use a current > OpenLDAP release (2.4.35). > > In any case, I don't see a bug report here? It sounds more like you're > asking for tuning advice? I would ask what filesystem you are using > (ext2? ext4?) etc. For ext4, I had to modify dirty_bytes to keep the > Debian/Ubuntu flush process from killing load performance. Oh, one other note -- I advise avoiding the debian/ubuntu build versions of BDB, if that is what you are using. They do not build BDB with the correct configure options, seriously impacting performance. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7566) ldapadd slower on Linux than BSD
by quanah＠zimbra.com 05 Apr '13

05 Apr '13

--On Friday, April 05, 2013 11:36 PM +0000 lm5(a)ualberta.ca wrote: > Full_Name: Leo Mocofan > Version: 2.4.31 > OS: Debian Testing > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (129.128.11.107) If you are going to test back-mdb, then you need to use a current OpenLDAP release (2.4.35). In any case, I don't see a bug report here? It sounds more like you're asking for tuning advice? I would ask what filesystem you are using (ext2? ext4?) etc. For ext4, I had to modify dirty_bytes to keep the Debian/Ubuntu flush process from killing load performance. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7566) ldapadd slower on Linux than BSD
by lm5＠ualberta.ca 05 Apr '13

05 Apr '13

Full_Name: Leo Mocofan Version: 2.4.31 OS: Debian Testing URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (129.128.11.107) We are currently testing Linux, OpenBSD and FreeBSD to run our LDAP service. Our tests showed that Linux has great performance numbers in most of the areas but we found one test that is very slow. The database has 1 million entries and is 4.5 GB in size. Importing the whole dababase using slapadd takes minutes on all platforms. When we tried to import the database using ldapadd we noticed a huge difference: FreeBSD - 42 min, OpenBSD - 59 min, Linux - 863 min. Changing file systems for backend in Linux had no effect. Using memory based file system for the backend in Linux the time for ldapadd dropped to 3 min. Strace for ldapadd shows: write(1, "adding new entry \"uid=noname,o"..., 60) = 60 time(NULL) = 1365202241 getrusage(RUSAGE_SELF, {ru_utime={1, 684105}, ru_stime={0, 212013}, ...}) = 0 time(NULL) = 1365202241 times({tms_utime=168, tms_stime=21, tms_cutime=0, tms_cstime=0}) = 1719044914 getrusage(RUSAGE_SELF, {ru_utime={1, 684105}, ru_stime={0, 212013}, ...}) = 0 time(NULL) = 1365202241 times({tms_utime=168, tms_stime=21, tms_cutime=0, tms_cstime=0}) = 1719044914 write(4, "\27\27\27\27\17uJ,\324\324\324\324"..., 1237) = 1237 poll([{fd=4, events=POLLIN|POLLPRI}], 1, 100) = 0 (Timeout) poll([{fd=4, events=POLLIN|POLLPRI}], 1, 100) = 0 (Timeout) poll([{fd=4, events=POLLIN|POLLPRI}], 1, 100) = 0 (Timeout) poll([{fd=4, events=POLLIN|POLLPRI}], 1, 100) = 1 ([{fd=4, revents=POLLIN}]) Strace for one thread of slapd: write(12, "\27\27\27\27\17uJ,\324\324\324\324"..., 117) = 117 time([1365202241]) = 1365202241 sendto(4, "<167>Apr 5 16:50:41 slapd[4513]"..., 79, MSG_NOSIGNAL, NULL, 0) = 79 futex(0x7f36f8fd6724, FUTEX_WAIT_PRIVATE, 9166, NULL) = 0 futex(0x7f36f8fd66f8, FUTEX_WAKE_PRIVATE, 1) = 0 time(NULL) = 1365202242 read(12, "", 5) = 0 write(6, "0", 1) = 1 futex(0x7f36f8fd6724, FUTEX_WAIT_PRIVATE, 9169, NULL Strace for another thread of slapd: futex(0x7f36f8fd66f8, FUTEX_WAKE_PRIVATE, 1) = 1 time(NULL) = 1365202241 epoll_wait(7, {{EPOLLIN, {u32=4177193844, u64=139874082155380}}}, 1024, 150000) = 1 read(5, "0", 8192) = 1 time(NULL) = 1365202241 epoll_wait(7, {{EPOLLIN, {u32=4177193872, u64=139874082155408}}}, 1024, 150000) = 1 epoll_ctl(7, EPOLL_CTL_MOD, 12, {0, {u32=4177193872, u64=139874082155408}}) = 0 futex(0x7f36f8fd6724, FUTEX_WAKE_OP_PRIVATE, 1, 1, 0x7f36f8fd6720, {FUTEX_OP_SET, 0, FUTEX_OP_CMP_GT, 1}) = 1 time(NULL) = 1365202242 epoll_wait(7, {{EPOLLIN, {u32=4177193844, u64=139874082155380}}}, 1024, 150000) = 1 read(5, "0", 8192) = 1 time(NULL) = 1365202242 epoll_wait(7, {}, 1024, 150000) = 0 time(NULL) = 1365202392 epoll_wait(7, Ldapadd is stuck in poll system call, while one thread of slapd is waiting on epoll_wait(7, After couple of seconds when apparently nothing happens, then everything starts working again. Changing the database backend from to bdb to hdb and mdb doesn't seem to have an effect. We then tried to force SLAP_EVENT_WAIT to use select instead of epoll_wait on Linux and ldapadd is still much slower on Linux. We are runnin Debian testing as of Apr 5, 2013, with glibc-2.13, linux-3.2.41, libdb-5.1.29, openldap-2.4.31.

1 0

Re: (ITS#7563) slapd modifies attribute value of pwdAttribute
by michael＠stroeder.com 05 Apr '13

05 Apr '13

Michael Ströder wrote: > Howard, please try yourself first before answering. > Dieter is right here. > > Example: > > dn: cn=Default Password Policy,ou=Policies,dc=stroeder,dc=de > changetype: modify > delete: pwdAttribute > pwdAttribute: userPassword > - > add: pwdAttribute > pwdAttribute: 2.5.4.35 > - > > Reading it: > > dn: cn=Default Password Policy,ou=Policies,dc=stroeder,dc=de > cn: Default Password Policy > [..] > pwdAttribute: userPassword > [..] > > I vaguely remember I had to implement a work-around in web2ldap to deal with > that when generating delta modification data when the user edits such an entry. BTW: This has nothing to do with replication. Howard Chu wrote before: "Also as a general rule the X.500 data model requires that a server store and return exactly what the user provided." see http://www.openldap.org/lists/openldap-technical/201303/msg00189.html Ciao, Michael.

1 0

(ITS#7565) unacceptable growth on delete with back-mdb
by quanah＠OpenLDAP.org 05 Apr '13

05 Apr '13

Full_Name: Quanah Gibson-Mount Version: 2.4.35 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.39.181) With back-mdb, if you add a large number of users to the database (via ldapadd), and then delete them (via ldapmodify), the DB explodes in size. After the initial ldapadd of 30 million users, the DB is 17GB in size. After deleting the 30 million users, the DB is 52GB in size. This is a 3.05 times larger than the DBs initial size. With back-hdb, there is no change in size of the DB (it is static). Clearly this is not a desirable state of affairs. This appears to be a bug with the freelist. After the add is complete, we have: zimbra@zre-ldap001:~/data/ldap/mdb/db$ mdb_stat -f . Freelist Status Tree depth: 3 Branch pages: 19 Leaf pages: 2007 Overflow pages: 5155 Entries: 15879 Free pages: 2612121 My delete run is not yet complete, but it is now: zimbra@zre-ldap001:~/data/ldap/mdb/db$ mdb_stat -f . Freelist Status Tree depth: 3 Branch pages: 99 Leaf pages: 11096 Overflow pages: 20891 Entries: 82932 Free pages: 9381096 (and growing) --Quanah

1 0

Re: (ITS#7563) slapd modifies attribute value of pwdAttribute
by michael＠stroeder.com 05 Apr '13

05 Apr '13

This is a cryptographically signed message in MIME format. --------------ms070208010706030608090702 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Howard, please try yourself first before answering. Dieter is right here. Example: dn: cn=3DDefault Password Policy,ou=3DPolicies,dc=3Dstroeder,dc=3Dde changetype: modify delete: pwdAttribute pwdAttribute: userPassword - add: pwdAttribute pwdAttribute: 2.5.4.35 - Reading it: dn: cn=3DDefault Password Policy,ou=3DPolicies,dc=3Dstroeder,dc=3Dde cn: Default Password Policy [..] pwdAttribute: userPassword [..] I vaguely remember I had to implement a work-around in web2ldap to deal w= ith that when generating delta modification data when the user edits such an = entry. Ciao, Michael. --------------ms070208010706030608090702 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILHzCC BT8wggQnoAMCAQICDwCmSwABAAIAivjZQ8SBvzANBgkqhkiG9w0BAQUFADB8MQswCQYDVQQG EwJERTEcMBoGA1UEChMTVEMgVHJ1c3RDZW50ZXIgR21iSDElMCMGA1UECxMcVEMgVHJ1c3RD ZW50ZXIgQ2xhc3MgMSBMMSBDQTEoMCYGA1UEAxMfVEMgVHJ1c3RDZW50ZXIgQ2xhc3MgMSBM MSBDQSBJWDAeFw0xMjA2MDYxOTAyMTZaFw0xMzA2MDcxOTAyMTZaMCgxCzAJBgNVBAYTAkRF MRkwFwYDVQQDDBBNaWNoYWVsIFN0csO2ZGVyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxXZGav40rnGNLxEggBW94MILWHlfC8a23Jew5U1gPlfRTXOjjzmoaZ1uCyGdgF6M VvuO9T1aTQNGH+OdeGe3P7Tfc/NsLJFJ2wtd8blvhmodUgse2eypiWjNOd4gZuhalBhgsQ0K b5D6/1foghII4E264iZlJ7AJ+UYcO+GxvFWT0YMTbLckgDkZk7c3qwTozdhYvXarvqx+8Ou/ kuxpQQhac/ebzxpu0N+RHSf2KIUS0g0tEGnPtGv6iL+9QNHc4JKo9Y9KKVw3tQy+Re+FQLxB 1fPE5F+qxuD3AUENpOwkMsqWLM94ohtx3CFqLpxfUPrnKFLAHOhHEbByYGvFPwIDAQABo4IC EDCCAgwwgaUGCCsGAQUFBwEBBIGYMIGVMFEGCCsGAQUFBzAChkVodHRwOi8vd3d3LnRydXN0 Y2VudGVyLmRlL2NlcnRzZXJ2aWNlcy9jYWNlcnRzL3RjX2NsYXNzMV9MMV9DQV9JWC5jcnQw QAYIKwYBBQUHMAGGNGh0dHA6Ly9vY3NwLml4LnRjY2xhc3MxLnRjdW5pdmVyc2FsLWkudHJ1 c3RjZW50ZXIuZGUwHwYDVR0jBBgwFoAU6bgoHUbP/M34TpvF7ktg69g7P9EwDAYDVR0TAQH/ BAIwADBKBgNVHSAEQzBBMD8GCSqCFAAsAQEBATAyMDAGCCsGAQUFBwIBFiRodHRwOi8vd3d3 LnRydXN0Y2VudGVyLmRlL2d1aWRlbGluZXMwDgYDVR0PAQH/BAQDAgTwMB0GA1UdDgQWBBS2 KAWfTfgJ/JQ63qLGwTXYLnI+LzBiBgNVHR8EWzBZMFegVaBThlFodHRwOi8vY3JsLml4LnRj Y2xhc3MxLnRjdW5pdmVyc2FsLWkudHJ1c3RjZW50ZXIuZGUvY3JsL3YyL3RjX0NsYXNzMV9M MV9DQV9JWC5jcmwwMwYDVR0lBCwwKgYIKwYBBQUHAwIGCCsGAQUFBwMEBggrBgEFBQcDBwYK KwYBBAGCNxQCAjAfBgNVHREEGDAWgRRtaWNoYWVsQHN0cm9lZGVyLmNvbTANBgkqhkiG9w0B AQUFAAOCAQEAQ3bvVUpEq+cQrLpcogyt5BJNk/WvUvOHqhzyj28M9pg9hcDl1+MYl5qqj6tR GSTLPQZyf287pcmbMwbcTGZO/gbW9v7RYcut6RauWdwKMCUmKC3J4fVfDq9ZETA2WOV68ef4 B3Gzdhghsbp3Rhp5dDmrCVKAHlafm6ZwJrEQ9P76fxnQZzRLgeKpZep5ePH5YHUB3+YaOQvJ FG0bOXvfHhRiRG7/HW2G+yDgjHSxDz8AFzMWL/RFePqZ4pn6T/SM/qU6WEpW39MWyJNoH/Kx QDYK8gGYuesn1ciMCTnjrvZQj0fonGTO4SfWekJRkuGrJ7dYSZRjYbDcWBBkdFLWzzCCBdgw ggTAoAMCAQICDgboAAEAAkqWLSQM/sXJMA0GCSqGSIb3DQEBBQUAMHkxCzAJBgNVBAYTAkRF MRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSQwIgYDVQQLExtUQyBUcnVzdENlbnRl ciBVbml2ZXJzYWwgQ0ExJjAkBgNVBAMTHVRDIFRydXN0Q2VudGVyIFVuaXZlcnNhbCBDQSBJ MB4XDTA5MTEwMzE0MDgxOVoXDTI1MTIzMTIxNTk1OVowfDELMAkGA1UEBhMCREUxHDAaBgNV BAoTE1RDIFRydXN0Q2VudGVyIEdtYkgxJTAjBgNVBAsTHFRDIFRydXN0Q2VudGVyIENsYXNz IDEgTDEgQ0ExKDAmBgNVBAMTH1RDIFRydXN0Q2VudGVyIENsYXNzIDEgTDEgQ0EgSVgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75pBuz2Lp6QuqthDVR+V8XSsncZpozVVt 5KLv5P7yemMRwleKyH3PjmYfZUVL64Biab1GjovFblqVGCrep/EfdRonq20yU+P7TVhiLP8Z 5cegDZotIYhZhM0d8cPIij6w5d4IJM/8QCy6QSOUu4ASiTVItoYE4AFPjLqpmPwcie0fiqHH hpgmHnJla/7PZdkMZEsaCfVDEWBmJuMzVprJPT40anjG5VBLyM2I5DlsUCaeQCy2O3w3sqf1 3dyzUcv03IICuNc63towXA31Qt0TaVNU6YAmQjMepdfMbspmCZ+G8D2+xophEPPR/1vkstst smUMqX0XrLonTUJczglPAgMBAAGjggJZMIICVTCBmgYIKwYBBQUHAQEEgY0wgYowUgYIKwYB BQUHMAKGRmh0dHA6Ly93d3cudHJ1c3RjZW50ZXIuZGUvY2VydHNlcnZpY2VzL2NhY2VydHMv dGNfdW5pdmVyc2FsX3Jvb3RfSS5jcnQwNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3NwLnRjdW5p dmVyc2FsLUkudHJ1c3RjZW50ZXIuZGUwHwYDVR0jBBgwFoAUkqR1LKSevoFE63n8isWVpesQ dXMwEgYDVR0TAQH/BAgwBgEB/wIBADBSBgNVHSAESzBJMAYGBFUdIAAwPwYJKoIUACwBAQEB MDIwMAYIKwYBBQUHAgEWJGh0dHA6Ly93d3cudHJ1c3RjZW50ZXIuZGUvZ3VpZGVsaW5lczAO BgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFOm4KB1Gz/zN+E6bxe5LYOvYOz/RMIH9BgNVHR8E gfUwgfIwge+ggeyggemGRmh0dHA6Ly9jcmwudGN1bml2ZXJzYWwtSS50cnVzdGNlbnRlci5k ZS9jcmwvdjIvdGNfdW5pdmVyc2FsX3Jvb3RfSS5jcmyGgZ5sZGFwOi8vd3d3LnRydXN0Y2Vu dGVyLmRlL0NOPVRDJTIwVHJ1c3RDZW50ZXIlMjBVbml2ZXJzYWwlMjBDQSUyMEksTz1UQyUy MFRydXN0Q2VudGVyJTIwR21iSCxPVT1yb290Y2VydHMsREM9dHJ1c3RjZW50ZXIsREM9ZGU/ Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlzdD9iYXNlPzANBgkqhkiG9w0BAQUFAAOCAQEAOcjE m+6+mO5Icm+N53G2DpCM07LBFSGoRpBoX0oE8TrJaIQh2KXmBHVdn9LU8kt3QzLclctgvwJV 0KwcsMUUl5tlCsMPpR3s2Ek5lbWpvvr0HqtW56blAQiINV9nBd1EJFASIkRjefGbV2nOq9Yz UU+N8HA7jq1ROhd/NZZraGhjthwKyfjfHV7PKxGlY+3M0MbTIG+q/GhIfm0euDpFqhKG88e9 ALXr/uoSn3MzeOcoOWjTpW3adtFO4VWVgKbgG7jNrFbvRVlHmFLbOm4msjE5aXWxLiTwpJ2X iF4zKca1vAdAOgw9us90jEtOeiH6GzjNxEMvb7TfeO6Zkuc6HDGCA84wggPKAgEBMIGPMHwx CzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYDVQQLExxU QyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENlbnRlciBD bGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wCQYFKw4DAhoFAKCCAhMwGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTMwNDA1MTYzODUwWjAjBgkq hkiG9w0BCQQxFgQUHxv/K+bf1DIc3hHVPnUWsdJ/pvEwbAYJKoZIhvcNAQkPMV8wXTALBglg hkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggq hkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBoAYJKwYBBAGCNxAEMYGSMIGP MHwxCzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYDVQQL ExxUQyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENlbnRl ciBDbGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wgaIGCyqGSIb3DQEJEAILMYGS oIGPMHwxCzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYD VQQLExxUQyBUcnVzdENlbnRlciBDbGFzcyAxIEwxIENBMSgwJgYDVQQDEx9UQyBUcnVzdENl bnRlciBDbGFzcyAxIEwxIENBIElYAg8ApksAAQACAIr42UPEgb8wDQYJKoZIhvcNAQEBBQAE ggEAFn6FSF038qyMGUYl1VtsoCpXsoQU8AP1E9C6x5iOg3kEK/0hXv0OZq7XuAdDZCryRBxj CzUs25YPHdGANcXOJkNpq8EvYFiIgUFZj3jrc8bl2qFs0bm9YN955CsQIXkG32wVs8QcpTup EnuTssA2/zNePYZLpUKiOjyuEiD0EzfiThJA2UlrFzXGWxSIN+wTfv7hJuIpNttYiKo19PQf ITI6C2+LtiGMnnZ2AREgTgRhkJyrYPGwOFoEKmuwo7f6GKnA1WMa8+LEuceQXvGL9YObolq0 PVd6W+GRxWhXixQMkEk5Jwi7XV3tyRkV45c5ZA79ZiD/ldjV/k+2HcSF7gAAAAAAAA== --------------ms070208010706030608090702--

1 0

(ITS#7564) LMDB library bug: reopening LMDB may fail, fixed-address mmap
by tamas.kenez＠kishonti.net 05 Apr '13

05 Apr '13

Full_Name: Tamás Kenéz Version: LMDB 8eef7a42 OS: windows 7 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (82.141.191.242) Using the LMDB library (commit 8eef7a4275eda) on windows 7: To reproduce: Run mtest multiple times. The test sometimes fails with the with the windows error code 487 (ERROR_INVALID_ADDRESS) in mdb_env_open -> mdb_env_open2 at this line env->me_map = MapViewOfFileEx(mh, flags & MDB_WRITEMAP ? FILE_MAP_WRITE : FILE_MAP_READ, 0, 0, env->me_mapsize, meta.mm_address); The reason is that when windows fails to map at the specified address (meta.mm_address) it returns 0. I tried this quick workaround: if ( !env->me_map ) env->me_map = MapViewOfFileEx(mh, flags & MDB_WRITEMAP ? FILE_MAP_WRITE : FILE_MAP_READ, 0, 0, env->me_mapsize, NULL); which does return valid address, but then it fails later here: else if (meta.mm_address && env->me_map != meta.mm_address) { /* Can happen because the address argument to mmap() is just a * hint. mmap() can pick another, e.g. if the range is in use. * The MAP_FIXED flag would prevent that, but then mmap could * instead unmap existing pages to make room for the new map. */ return EBUSY; /* TODO: Make a new MDB_* error code? */

1 0

Re: (ITS#7515) Nested liblmdb transaction bugs
by hyc＠symas.com 05 Apr '13

05 Apr '13

h.b.furuseth(a)usit.uio.no wrote: > I wrote: >>> Can't use a DBI from an aborted child txn, unlike aborted main txn: >> (...) >> Well, closing the DBI in mdb_txn_abort() caused problems. A fix >> in the opposite direction is easy, if we want DBIs to work that >> way: mdb_env_open() can open the DBI in any parent txns too. > > To get more consistent behavior, if that wasn't clear: Any parent > txn will receive the DBI independently of commit/abort, just like > the MDB_env. Future children of a preexisting txn still differ, > which is probably for the best. Changing that would take locking. > After much discussion, this part has been reverted. The rationale is simple: nothing created inside a TXN may be visible outside the TXN until the TXN successfully commits. On an abort or failed commit, all DBIs opened in the TXN are automatically closed, because technically they never existed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7563) slapd modifies attribute value of pwdAttribute
by hyc＠symas.com 05 Apr '13

05 Apr '13

dieter(a)dkluenter.de wrote: > Full_Name: > Version: 2.4.33 > OS: openSuSE-12.3-x86_64 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (91.65.235.202) > > > the pwdAttribute type requires a syntax of 1.3.6.1.4.1.1466.115.121.1.38, > according to man slapo-ppolicy and ppolicy.schema. > when adding a policy, the value of pwdAttribute gets changend from OID 2.5.4.35 > to userPassword. You are mistaken. slapd never changes this attribute from what the user stored. > In a replicated system syncrepl complaints about > syncrepl_message_to_entry: rid=001 mods check (pwdAttribute: value #0 invalid > per syntax) do_syncrepl: rid=001 rc 21 retrying. This error will go away if you configure the ppolicy overlay on the consumer. Closing this ITS. > > -Dieter > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7563) slapd modifies attribute value of pwdAttribute
by dieter＠dkluenter.de 05 Apr '13

05 Apr '13

Full_Name: Version: 2.4.33 OS: openSuSE-12.3-x86_64 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (91.65.235.202) the pwdAttribute type requires a syntax of 1.3.6.1.4.1.1466.115.121.1.38, according to man slapo-ppolicy and ppolicy.schema. when adding a policy, the value of pwdAttribute gets changend from OID 2.5.4.35 to userPassword. In a replicated system syncrepl complaints about syncrepl_message_to_entry: rid=001 mods check (pwdAttribute: value #0 invalid per syntax) do_syncrepl: rid=001 rc 21 retrying. -Dieter

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs