openldap-bugs

openldap-bugs@openldap.org

1 participants
20967 discussions

(ITS#7398) Retrieve LDAP server cert
by michael＠stroeder.com 21 Sep '12

21 Sep '12

Full_Name: Michael Ströder Version: OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (2001:8d8:1fe:1:d6be:d9ff:fe06:a14f) Feature request: When using LDAPS or StartTLS it would be sometimes handy to retrieve the LDAP server certificate over the LDAP client API. Opinions?

1 0

Re: (ITS#7388) [PATCH] MozNSS: ignore certdb 'sql:' prefix when checking directory existence
by jvcelak＠redhat.com 20 Sep '12

20 Sep '12

Hello, > I do not think that any other backend except the legacy and this one > is supported. Otherwise, I would write the patch more generally. I will > check with MozNSS people and let you know. Not sure if more types are supported, but at least sql: and dbm: (default) types work. I have uploaded an updated patch. Please, drop the old one. Jan ftp://ftp.openldap.org/incoming/jvcelak-20120920-moznss-ignore-certdb-type- prefix.patch The attached file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Red Hat. Red Hat has not assigned rights and/or interest in this work to any party. I, Jan Vcelak am authorized by Red Hat, my employer, to release this work under the following terms. Red Hat hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

1 0

ITS#7396 published: SECURITY: ssl problem
by openldap-its＠OpenLDAP.org 20 Sep '12

20 Sep '12

Private ITS#7396 is now publicly readable URL: http://www.OpenLDAP.org/its/?findid=7396

1 0

ITS#7395 published: SECURITY: ssl problem
by openldap-its＠OpenLDAP.org 20 Sep '12

20 Sep '12

Private ITS#7395 is now publicly readable URL: http://www.OpenLDAP.org/its/?findid=7395

1 0

(ITS#7397) SSL　problem
by bjfanzh＠cn.ibm.com 20 Sep '12

20 Sep '12

Full_Name: zhang fan Version: 2.3.43 OS: RHEL5 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (202.108.130.138) Hi Jon I am an FVT member of CSTL system Z LDAP team . Now I　was configuring openldap with SSL support . But one problem came out and now I asked for your help .Thank you very much. My ldap server can work well before setting SSL . the ssl related option in slapd.conf is TLSCipherSuite ALL TLSCACertificateFile /etc/pki/tls/certs/slapd.pem TLSCertificateFile /etc/pki/tls/certs/slapd.pem TLSCertificateKeyFile /etc/pki/tls/certs/slapd.pem TLSVerifyClient never and I　use openssl to test connection . [root@zosmf07 ~]# openssl s_client -connect zosmf07.cn.ibm.com:636 -showcerts -s tate -CAfile /etc/pki/tls/certs/slapd.pem CONNECTED(00000003) SSL_connect:before/connect initialization SSL_connect:SSLv2/v3 write client hello A SSL3 alert read:fatal:handshake failure SSL_connect:error in SSLv2/v3 read server hello A 7587:error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake fa ilure:s23_clnt.c:583: the server debug log look like this TLS trace: SSL3 alert write:fatal:handshake failure TLS trace: SSL_accept:error in SSLv3 read client hello B TLS trace: SSL_accept:error in SSLv3 read client hello B TLS: can't accept. TLS: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher s3_srvr.c:1009 But when I　issue openssl s_server to start the 636 port ,the ssl handshake can get success. [root@zosmf07 ~]# openssl s_server -accept 636 -cert /etc/pki/tls/certs/slapd.pem -key /etc/pki/tls/certs/slapd.pem -state Using default temp DH parameters ACCEPT SSL_accept:before/accept initialization SSL_accept:SSLv3 read client hello A SSL_accept:SSLv3 write server hello A SSL_accept:SSLv3 write certificate A SSL_accept:SSLv3 write key exchange A SSL_accept:SSLv3 write server done A SSL_accept:SSLv3 flush data SSL_accept:SSLv3 read client key exchange A SSL_accept:SSLv3 read finished A SSL_accept:SSLv3 write change cipher spec A SSL_accept:SSLv3 write finished A SSL_accept:SSLv3 flush data -----BEGIN SSL SESSION PARAMETERS----- MHUCAQECAgMBBAIAOQQgwtPmka9K2vuA3Eg6Vu8ZBGOIGiq2RVQBAR7/U//dIf4E MDXZOmotMZFmCsIV+5448cYBMN5zTGe6FJeVHxdu9KuEe0BYnZ69LW/GbLmNyemk 4KEGAgRQWUytogQCAgEspAYEBAEAAAA= -----END SSL SESSION PARAMETERS----- Shared ciphers:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:RC4-SHA:RC4-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC4-MD5 CIPHER is DHE-RSA-AES256-SHA Secure Renegotiation IS supported Thank you very much for your help .This problem botherred me for two weeks .I tried many method but can't deal it .Thank you. ps: the above is a self-signed certificate . I tried CA , the same problem came out

1 0

Re: (ITS#7394) slapcat broken with back-mdb
by quanah＠zimbra.com 19 Sep '12

19 Sep '12

--On Wednesday, September 19, 2012 8:33 AM +0200 Michael Ströder <michael(a)stroeder.com> wrote: >> Doesn't matter if slapd is running or not -- It can't export the DB. > > Could this be a dup of ITS#7391? No. It was related to my patch to enable writemap in MDB, as per my follow up. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7394) slapcat broken with back-mdb
by michael＠stroeder.com 18 Sep '12

18 Sep '12

quanah(a)OpenLDAP.org wrote: > Full_Name: Quanah Gibson-Mount > Version: RE24 9/18/2012 > OS: Linux 2.6 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (74.196.25.250) > > > zimbra@zre-ldap002:~/libexec$ /opt/zimbra/openldap/sbin/slapcat -F > /opt/zimbra/data/ldap/config -b "" -l /tmp/test.ldif > 5058b57b mdb_db_open: database "" cannot be opened, err 13. Restore from > backup! > 5058b57b backend_startup_one (type=mdb, suffix=""): bi_db_open failed! (13) > slap_startup failed > > > Doesn't matter if slapd is running or not -- It can't export the DB. Could this be a dup of ITS#7391? Ciao, Michael.

1 0

Re: (ITS#7394) slapcat broken with back-mdb
by quanah＠zimbra.com 18 Sep '12

18 Sep '12

--On Tuesday, September 18, 2012 5:58 PM +0000 quanah(a)OpenLDAP.org wrote: Tracked down to the use of WRITEMAP Changing the code to not use WRITEMAP with slapcat fixed the issue: --- openldap-2.4.33.2z/servers/slapd/back-mdb/init.c.orig 2012-09-18 11:41:28.594792966 -0700 +++ openldap-2.4.33.2z/servers/slapd/back-mdb/init.c 2012-09-18 11:42:02.794791070 -0700 @@ -55,7 +55,11 @@ /* DBEnv parameters */ mdb->mi_dbenv_home = ch_strdup( SLAPD_DEFAULT_DB_DIR ); - mdb->mi_dbenv_flags = 0; + if ( slapMode & SLAP_TOOL_READONLY) { + mdb->mi_dbenv_flags = 0; + } else { + mdb->mi_dbenv_flags = MDB_WRITEMAP; + } mdb->mi_dbenv_mode = SLAPD_DEFAULT_DB_MODE; mdb->mi_search_stack_depth = DEFAULT_SEARCH_STACK_DEPTH; -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7394) slapcat broken with back-mdb
by quanah＠OpenLDAP.org 18 Sep '12

18 Sep '12

Full_Name: Quanah Gibson-Mount Version: RE24 9/18/2012 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (74.196.25.250) zimbra@zre-ldap002:~/libexec$ /opt/zimbra/openldap/sbin/slapcat -F /opt/zimbra/data/ldap/config -b "" -l /tmp/test.ldif 5058b57b mdb_db_open: database "" cannot be opened, err 13. Restore from backup! 5058b57b backend_startup_one (type=mdb, suffix=""): bi_db_open failed! (13) slap_startup failed Doesn't matter if slapd is running or not -- It can't export the DB. ldapsearch works fine

1 0

Re: (ITS#7385) back_mdb ENOSPC error returned from mdb_node_add incorrectly
by marco＠schirrmeister.net 18 Sep '12

18 Sep '12

On Sep 18, 2012, at 1:59 PM, hyc(a)symas.com wrote: > Marco Schirrmeister wrote: >> I pulled latest RE24 on Sep 15th and now I get this. >> >> ... >> indexing id=00010d0e >> indexing id=00010d0f >> 5056de89 => mdb_tool_entry_reindex: txn_commit failed: Unknown error 18446744073709520830 (-30786) > > That was fixed yesterday in commit 8bb10add2465eee34e79abeaa62011e3e234effb. > Please pull RE24 again today and try again, it should all be working fine. Just tested with latest RE24 indexing id=00010d0e indexing id=00010d0f 50587b72 => mdb_tool_entry_reindex: txn_commit failed: MDB_PAGE_FULL: Internal error - page has no more space (-30786) -- Marco

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs