openldap-bugs

openldap-bugs@openldap.org

1 participants
20967 discussions

Re: (ITS#6915) memberof+accesslog duplicate reqStart
by michael＠stroeder.com 24 Apr '11

24 Apr '11

ebackes(a)symas.com wrote: > Full_Name: Emily Backes > Version: 2.4.25 > OS: any > URL: > Submission from: (NULL) (76.88.107.46) > > In recent OpenLDAPs (2.4.25 at least, but I haven't found exactly where > it started), memberof interacts badly with accesslog. See also: http://www.openldap.org/lists/openldap-technical/201104/msg00242.html > In a simple test case with a groupOfNames and two people, if you add a > person to the group, memberOf should set their memberOf opeational > attribute to point to the group. That works! But currently the > accesslog db will only show the change for the memberof update and not > the original group change. I can confirm that. > Digging deeper, I found: > [..] > The changes are reaching accesslog, but don't make it into the logdb > because their generated DNs based on reqStart match. Ah, that explains it. > reqStart is generated with a generalizedTime stamp where the > microseconds are an incrementing count based on o_tincr, but this does > not seem to be incremented, or incremented enough. > > It's not entirely clear why this is a problem now and not earlier. Maybe it was always a problem. Because I've started the thread above before installing 2.4.25: http://www.openldap.org/lists/openldap-technical/201103/msg00032.html I had 2.4.24 or 2.4.23 installed back then. > This may be related to ITS#6766. Seems similar and the group modification is the same like in cases where I observed the behaviour described in my postings. Ciao, Michael.

1 0

Re: (ITS#6914) Feature Request: slapd.conf "include" extension
by marco.pizzoli＠gmail.com 24 Apr '11

24 Apr '11

--0015175746fc400b2404a1a5d46f Content-Type: text/plain; charset=ISO-8859-1 On 23 Apr 2011 21:08, "Quanah Gibson-Mount" <quanah(a)zimbra.com> wrote: > > > > --On April 23, 2011 1:17:44 PM +0000 marco.pizzoli(a)gmail.com wrote: > >> Full_Name: Marco Pizzoli >> Version: 2.4.x >> OS: Linux >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (217.133.1.151) >> >> >> Hi, >> this is a feature request. >> > > slapd.conf is being phased out. I cannot imagine why anyone would work on extending what it does. > > --Quanah > > I know that. Btw I'm still hoping that slapd.conf will not be dismissed... --0015175746fc400b2404a1a5d46f Content-Type: text/html; charset=ISO-8859-1 On 23 Apr 2011 21:08, "Quanah Gibson-Mount" <<a href="mailto:quanah@zimbra.com">quanah(a)zimbra.com</a>> wrote: > > > > --On April 23, 2011 1:17:44 PM +0000 <a href="mailto:marco.pizzoli@gmail.com">marco.pizzoli(a)gmail.com</a> wrote: > >> Full_Name: Marco Pizzoli >> Version: 2.4.x >> OS: Linux >> URL: <a href="ftp://ftp.openldap.org/incoming/">ftp://ftp.openldap.org/incoming/</a> >> Submission from: (NULL) (217.133.1.151) >> >> >> Hi, >> this is a feature request. >> > > slapd.conf is being phased out. I cannot imagine why anyone would work on extending what it does. > > --Quanah > > I know that. Btw I'm still hoping that slapd.conf will not be dismissed... --0015175746fc400b2404a1a5d46f--

1 0

Re: (ITS#6909)
by hyc＠symas.com 23 Apr '11

23 Apr '11

diego.jesus.granados.lopez(a)ericsson.com wrote: > --_000_7A5601613D0AF042A5EDA8C8A7AA805D0E3E82C53DESESSCMS0356e_ > Content-Type: text/plain; charset="us-ascii" > Content-Transfer-Encoding: quoted-printable > > It was difficult to achieve, but I was able to include several errors (rega= > rding line numbers) in my two-line patch XD Thanks for the report and patch. I've committed a different solution in HEAD, please test. > > The correct one: > > --- ../../origtmp/openldap-2.4.21/servers/slapd/back-meta/search.c 200= > 9-08-14 22:54:14.000000000 +0200 > +++ ./servers/slapd/back-meta/search.c 2011-04-15 13:11:51.395261000 +0200 > @@ -309,6 +309,8 @@ > > if ( rc =3D=3D LDAP_SUCCESS ) { > candidates[ candidate ].sr_msgid =3D META_M= > SGID_IGNORE; > + binddn =3D msc->msc_bound_ndn; > + cred =3D msc->msc_cred; > goto retry; > } > } > > > Regards, > Diego -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#6915) memberof+accesslog duplicate reqStart
by ebackes＠symas.com 23 Apr '11

23 Apr '11

Full_Name: Emily Backes Version: 2.4.25 OS: any URL: Submission from: (NULL) (76.88.107.46) In recent OpenLDAPs (2.4.25 at least, but I haven't found exactly where it started), memberof interacts badly with accesslog. In a simple test case with a groupOfNames and two people, if you add a person to the group, memberOf should set their memberOf opeational attribute to point to the group. That works! But currently the accesslog db will only show the change for the memberof update and not the original group change. Digging deeper, I found: ==> hdb_add: reqStart=20110422103943.000001Z,cn=log oc_check_required entry (reqStart=20110422103943.000001Z,cn=log), objectClass "auditModify" oc_check_allowed type "objectClass" oc_check_allowed type "structuralObjectClass" oc_check_allowed type "reqStart" oc_check_allowed type "reqEnd" oc_check_allowed type "reqType" oc_check_allowed type "reqSession" oc_check_allowed type "reqAuthzID" oc_check_allowed type "reqDN" oc_check_allowed type "reqResult" oc_check_allowed type "reqMod" bdb_dn2entry("reqStart=20110422103943.000001Z,cn=log") send_ldap_result: conn=1000 op=1 p=3 send_ldap_result: err=68 matched="" text="" The changes are reaching accesslog, but don't make it into the logdb because their generated DNs based on reqStart match. reqStart is generated with a generalizedTime stamp where the microseconds are an incrementing count based on o_tincr, but this does not seem to be incremented, or incremented enough. It's not entirely clear why this is a problem now and not earlier. This may be related to ITS#6766.

1 0

Re: (ITS#6914) Feature Request: slapd.conf "include" extension
by quanah＠zimbra.com 23 Apr '11

23 Apr '11

--On April 23, 2011 1:17:44 PM +0000 marco.pizzoli(a)gmail.com wrote: > Full_Name: Marco Pizzoli > Version: 2.4.x > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (217.133.1.151) > > > Hi, > this is a feature request. > slapd.conf is being phased out. I cannot imagine why anyone would work on extending what it does. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#6914) Feature Request: slapd.conf "include" extension
by marco.pizzoli＠gmail.com 23 Apr '11

23 Apr '11

Full_Name: Marco Pizzoli Version: 2.4.x OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (217.133.1.151) Hi, this is a feature request. I would like to extend "include" directive of slapd.conf by having defined a default path in witch beginning to search for the filename specified by "include" directive(s). In short I would like to mimic the behaviour of "modulepath" and "moduleload" directives. "includepath" could be a suggestion of the name of this new directive. Thanks Marco

1 0

Re: (ITS#6900) dnattr acl statement: users can produce dangling entries
by daniel＠pluta.biz 21 Apr '11

21 Apr '11

Once again an update of this patch: One more step further dnattr's documented behaviour: Now the DN in dnattr is additionally allowed to remove the whole entry. The update can be found here: ftp://ftp.openldap.org/incoming/Daniel-Pluta-110422.patch I'm not quite satisfied with my code and its internal processing. It's more some kind of a prototype. Probably you guys do have the knowlege to "convert" it into a better and slapd-like design... Thanks a lot!

1 0

Re: (ITS#6873) Feature request slapo-lastbind: authTimestamp and relax rules control
by michael＠stroeder.com 21 Apr '11

21 Apr '11

I tried to find the magic flag where to put SLAP_AT_MANAGEABLE but failed. It must be something emotional with C code on my side... ;-) Ciao, Michael.

1 0

Re: (ITS#6911) Feature Request: accesslog filter on DN
by marco.pizzoli＠gmail.com 21 Apr '11

21 Apr '11

> > Patches welcome. > I would like to contribute but I'm not a developer and I have no overlay development documentation available Marco

1 0

Re: (ITS#6913) Feature Request: accesslog filter on DN
by marco.pizzoli＠gmail.com 21 Apr '11

21 Apr '11

I had a refresh on the submit page. This erroneous ITS can be closed, sorry. On Thu, Apr 21, 2011 at 1:33 PM, <openldap-its(a)openldap.org> wrote: > > *** THIS IS AN AUTOMATICALLY GENERATED REPLY *** > > Thanks for your report to the OpenLDAP Issue Tracking System. Your > report has been assigned the tracking number ITS#6913. > > One of our support engineers will look at your report in due course. > Note that this may take some time because our support engineers > are volunteers. They only work on OpenLDAP when they have spare > time. > > If you need to provide additional information in regards to your > issue report, you may do so by replying to this message. Note that > any mail sent to openldap-its(a)openldap.org with (ITS#6913) > in the subject will automatically be attached to the issue report. > > mailto:openldap-its@openldap.org?subject=(ITS#6913) > > You may follow the progress of this report by loading the following > URL in a web browser: > http://www.OpenLDAP.org/its/index.cgi?findid=6913 > > Please remember to retain your issue tracking number (ITS#6913) > on any further messages you send to us regarding this report. If > you don't then you'll just waste our time and yours because we > won't be able to properly track the report. > > Please note that the Issue Tracking System is not intended to > be used to seek help in the proper use of OpenLDAP Software. > Such requests will be closed. > > OpenLDAP Software is user supported. > http://www.OpenLDAP.org/support/ > > -------------- > Copyright 1998-2007 The OpenLDAP Foundation, All Rights Reserved. > > -- _________________________________________ Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi. Jim Morrison

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs