openldap-bugs

openldap-bugs@openldap.org

1 participants
20963 discussions

(ITS#6427) ldapsearch with delay (on the same machine over TLS/SSL only)
by pali＠tmapy.cz 09 Dec '09

09 Dec '09

Full_Name: Pavel Lisy Version: 2.4.19 or 2.4.20 OS: linux - CentOS4/5 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (85.132.159.239) I have my rpm built on source from Fedora 12. ldapsearch have delay on start, slapd is heavy loaded (up to 90% proc) on the same machine over TLS/SSL only (numbers below) [root@ldap1 ~]# time ldapsearch24 -ZZ -h ldap1.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w heslo -d 1 > search-zz.log 2>&1 real 0m2.610s user 0m0.029s sys 0m0.014s [root@ldap1 ~]# time ldapsearch24 -Z -h ldap1.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w heslo -d 1 > search-z.log 2>&1 real 0m2.700s user 0m0.026s sys 0m0.013s [root@ldap1 ~]# time ldapsearch24 -h ldap1.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w heslo -d 1 > search.log 2>&1 real 0m0.021s user 0m0.010s sys 0m0.008s [root@ldap1 ~]# time ldapsearch24 -h ldap2.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w heslo -d 1 > search-l2.log 2>&1 real 0m0.027s user 0m0.009s sys 0m0.014s [root@ldap1 ~]# time ldapsearch24 -Z -h ldap2.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w heslo -d 1 > search-l2-z.log 2>&1 real 0m0.070s user 0m0.028s sys 0m0.020s [root@ldap1 ~]# time ldapsearch24 -ZZ -h ldap2.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w heslo -d 1 > search-l2-zz.log 2>&1 real 0m0.048s user 0m0.026s sys 0m0.017s This means: delay is there when I query from the same machine over TLS/SSL, not across machines. I suppose it is bug but I cannot find where it is. When I've changed in slapd.conf "loglevel 0" to "loglevel 1" delay is gone [root@ldap1 ~]# time ldapsearch24 -ZZ -h ldap1.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w heslo -d 1 > search-zz.log 2>&1 real 0m0.315s user 0m0.030s sys 0m0.025s When I start ldapsearch24 through strace delay was in part with stars: ------------ cut --------------- munmap(0x2b2edf8b1000, 4096) = 0 brk(0x15747000) = 0x15747000 write(2, "TLS trace: SSL_connect:before/co"..., 53TLS trace: SSL_connect:before/connect initialization ) = 53 open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 4 fstat(4, {st_mode=S_IFCHR|0444, st_rdev=makedev(1, 9), ...}) = 0 poll([{fd=4, events=POLLIN}], 1, 10) = 1 ([{fd=4, revents=POLLIN}]) read(4, "D~j?,\274k\310mx\336\t\17k\207Q\322\0369SDB\260\241bd6[R}6\201"..., 48) = 48 close(4) = 0 getuid() = 0 write(3, "\200t\1\3\1\0K\0\0\0 \0\0009\0\0008\0\0005\0\0\26\0\0\23\0\0\n\7\0\300"..., 118 *********************************************** DELAY 2s HERE *********************************************** ) = 118 write(2, "TLS trace: SSL_connect:SSLv2/v3 "..., 53TLS trace: SSL_connect:SSLv2/v3 write client hello A ) = 53 read(3, "\26\3\1\0J\2\0", 7) = 7 read(3, "\0F\3\1K \10\5\232\0\3\2\354\235\351\233\276\31\242\302\217\214\35\32\370cGH\342\277\7;"..., 72) = 7 write(2, "TLS trace: SSL_connect:SSLv3 rea"..., 49TLS trace: SSL_connect:SSLv3 read server hello A ) = 49 read(3, "\26\3\1\6\303", 5) = 5 read(3, "\v\0\6\277\0\6\274\0\2\2500\202\2\2440\202\2\r\2\3\20\0\0010\r\6\t*\206H\206\367"..., 1731) = 1731 write(2, "TLS certificate verification: de"..., 191TLS certificate verification: depth: 1, err: 0, subject: / write(2, " issuer: /O=T-MAPY spol. s r.o./"..., 143 issuer: /O=T-MAPY spol. s r.o./OU=ldapnet/emailAddress=pa ) = 143 write(2, "TLS certificate verification: de"..., 146TLS certificate verification: depth: 0, err: 0, subject: / write(2, " issuer: /O=T-MAPY spol. s r.o./"..., 143 issuer: /O=T-MAPY spol. s r.o./OU=ldapnet/emailAddress=pa ) = 143 write(2, "TLS trace: SSL_connect:SSLv3 rea"..., 55TLS trace: SSL_connect:SSLv3 read server certificate A ) = 55 read(3, "\26\3\1\0\4", 5) = 5 read(3, "\16\0\0\0", 4) = 4 write(2, "TLS trace: SSL_connect:SSLv3 rea"..., 48TLS trace: SSL_connect:SSLv3 read server done A ) = 48 write(2, "TLS trace: SSL_connect:SSLv3 wri"..., 57TLS trace: SSL_connect:SSLv3 write client key exchange A ) = 57 write(2, "TLS trace: SSL_connect:SSLv3 wri"..., 56TLS trace: SSL_connect:SSLv3 write change cipher spec A ) = 56 write(2, "TLS trace: SSL_connect:SSLv3 wri"..., 46TLS trace: SSL_connect:SSLv3 write finished A ) = 46 write(3, "\26\3\1\0\206\20\0\0\202\0\200\202\365\233\356\r\26\27\330\251\17\330\331\3362\23\231\211`\\\262\32 write(2, "TLS trace: SSL_connect:SSLv3 flu"..., 40TLS trace: SSL_connect:SSLv3 flush data ) = 40 read(3, "\24\3\1\0\1", 5) = 5 read(3, "\1", 1) = 1 read(3, "\26\3\1\0000", 5) = 5 read(3, "\353;\20\337y\307&\331\207@#\265\314\267\240\244\177P\223\216\221\216!\"G \27\265R\3078l"..., 48) = write(2, "TLS trace: SSL_connect:SSLv3 rea"..., 45TLS trace: SSL_connect:SSLv3 read finished A ) = 45 write(2, "ldap_sasl_bind\n", 15ldap_sasl_bind ) = 15 write(2, "ldap_send_initial_request\n", 26ldap_send_initial_request ) = 26 write(2, "ldap_send_server_request\n", 25ldap_send_server_request ) = 25 write(2, "ber_scanf fmt ({it) ber:\n", 25ber_scanf fmt ({it) ber: ) = 25 write(2, "ber_scanf fmt ({i) ber:\n", 24ber_scanf fmt ({i) ber: ) = 24 write(2, "ber_flush2: 44 bytes to sd 3\n", 29ber_flush2: 44 bytes to sd 3 ) = 29 write(3, "\27\3\1\0 \217\244v\31\275A\232=\300\357\330\312*\316)\311\23\242\260\350n\353\373\221\204B\v"..., write(2, "ldap_result ld 0x156816c0 msgid "..., 34ldap_result ld 0x156816c0 msgid 2 ) = 34 write(2, "wait4msg ld 0x156816c0 msgid 2 ("..., 50wait4msg ld 0x156816c0 msgid 2 (infinite timeout) ) = 50 write(2, "wait4msg continue ld 0x156816c0 "..., 46wait4msg continue ld 0x156816c0 msgid 2 all 1 ) = 46 write(2, "** ld 0x156816c0 Connections:\n", 30** ld 0x156816c0 Connections: ) = 30 write(2, "* host: ldap1.ldapnet.tmapy.cz "..., 53* host: ldap1.ldapnet.tmapy.cz port: 389 (default) ) = 53 write(2, " refcnt: 2 status: Connected\n", 31 refcnt: 2 status: Connected ) = 31 write(2, " last used: Wed Dec 9 21:26:51"..., 39 last used: Wed Dec 9 21:26:51 2009 ------------ cut --------------- How can I debug it more? I will send more details if you want.

1 0

Re: (ITS#6426) slapd crash with 'Bus error'
by quanah＠zimbra.com 09 Dec '09

09 Dec '09

--On Wednesday, December 09, 2009 12:56 PM +0000 a.afzali2003(a)gmail.com wrote: > Full_Name: afshin afzali > Version: 2.4.19 > OS: CentOS 5 - 64Bit > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (94.182.20.153) > Bus error > [root@dc1 openldap]# Please provide a GDB backtrace of the crash with full debugging symbols. Thanks --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: ITS#6423 slapo-rwm and dynlist overlay
by h.b.furuseth＠usit.uio.no 09 Dec '09

09 Dec '09

hyc(a)symas.com writes: > We already have ITS#5340 for issues with these flags... I'll follow up there. Looking again, I think it can be simplified. -- Hallvard

1 0

Re: ITS#6423 slapo-rwm and dynlist overlay
by leo＠strike.wu.ac.at 09 Dec '09

09 Dec '09

On 12/08/2009 07:31 PM, masarati(a)aero.polimi.it wrote: > Fixed in HEAD; the fix is in overlays/dynlist.c 1.68->1.69 > > Please test and report. Thanks, p. Thanks! At least the dynlist overlay works fine now. (Couldn't test slapo-collect and slapo-overlay.) Cheers, --leo -- e-mail ::: Leo.Bergolth (at) wu.ac.at fax ::: +43-1-31336-906050 location ::: IT-Services | Vienna University of Economics | Austria

1 0

(ITS#6426) slapd crash with 'Bus error'
by a.afzali2003＠gmail.com 09 Dec '09

09 Dec '09

Full_Name: afshin afzali Version: 2.4.19 OS: CentOS 5 - 64Bit URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (94.182.20.153) I use "Apache Directory Studio" to manage my directory service. Randomly I used an invalid attribute ( cn ) to create an country object. Regards, -- afshin >>> slap_listener(ldap:///) connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 42 contents: op tag 0x60, time 1260363040 ber_get_next conn=0 op=0 do_bind ber_scanf fmt ({imt) ber: ber_scanf fmt (m}) ber: >>> dnPrettyNormal: <cn=root,dc=callee,dc=ir> => ldap_bv2dn(cn=root,dc=callee,dc=ir,0) <= ldap_bv2dn(cn=root,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=root,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=root,dc=callee,dc=ir)=0 <<< dnPrettyNormal: <cn=root,dc=callee,dc=ir>, <cn=root,dc=callee,dc=ir> do_bind: version=3 dn="cn=root,dc=callee,dc=ir" method=128 ==> ndb_back_bind: dn: cn=root,dc=callee,dc=ir do_bind: v3 bind: "cn=root,dc=callee,dc=ir" to "cn=root,dc=callee,dc=ir" send_ldap_result: conn=0 op=0 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=1 tag=97 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 56 contents: op tag 0x63, time 1260363040 ber_get_next conn=0 op=1 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <> <<< dnPrettyNormal: <>, <> SRCH "" 0 3 0 0 0 ber_scanf fmt (m) ber: filter: (objectClass=*) ber_scanf fmt ({M}}) ber: attrs: subschemaSubentry => send_search_entry: conn 0 dn="" ber_flush2: 68 bytes to sd 13 <= send_search_entry: conn 0 exit. send_ldap_result: conn=0 op=1 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=2 tag=101 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 96 contents: op tag 0x63, time 1260363040 ber_get_next conn=0 op=2 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <cn=Subschema> => ldap_bv2dn(cn=Subschema,0) <= ldap_bv2dn(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=subschema)=0 <<< dnPrettyNormal: <cn=Subschema>, <cn=subschema> SRCH "cn=Subschema" 0 3 0 0 0 ber_scanf fmt ({mm}) ber: filter: (objectClass=subschema) ber_scanf fmt ({M}}) ber: attrs: createTimestamp modifyTimestamp => send_search_entry: conn 0 dn="cn=Subschema" ber_flush2: 127 bytes to sd 13 <= send_search_entry: conn 0 exit. send_ldap_result: conn=0 op=2 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=3 tag=101 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 174 contents: op tag 0x63, time 1260363040 ber_get_next conn=0 op=3 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <cn=Subschema> => ldap_bv2dn(cn=Subschema,0) <= ldap_bv2dn(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=subschema)=0 <<< dnPrettyNormal: <cn=Subschema>, <cn=subschema> SRCH "cn=Subschema" 0 3 0 0 0 ber_scanf fmt ({mm}) ber: filter: (objectClass=subschema) ber_scanf fmt ({M}}) ber: attrs: objectClasses attributeTypes ldapSyntaxes matchingRules matchingRuleUse createTimestamp modifyTimestamp => send_search_entry: conn 0 dn="cn=Subschema" ber_flush2: 71646 bytes to sd 13 <= send_search_entry: conn 0 exit. send_ldap_result: conn=0 op=3 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=4 tag=101 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 221 contents: op tag 0x63, time 1260363040 ber_get_next conn=0 op=4 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <> <<< dnPrettyNormal: <>, <> SRCH "" 0 0 0 0 0 ber_scanf fmt (m) ber: filter: (objectClass=*) ber_scanf fmt ({M}}) ber: attrs: namingContexts subschemaSubentry supportedLDAPVersion supportedSASLMechanisms supportedExtension supportedControl supportedFeatures vendorName vendorVersion + objectClass => send_search_entry: conn 0 dn="" ber_flush2: 797 bytes to sd 13 <= send_search_entry: conn 0 exit. send_ldap_result: conn=0 op=4 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=5 tag=101 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 40 contents: op tag 0x63, time 1260363040 ber_get_next conn=0 op=5 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <> <<< dnPrettyNormal: <>, <> SRCH "" 0 0 0 0 0 ber_scanf fmt (m) ber: filter: (objectClass=*) ber_scanf fmt ({M}}) ber: attrs: * => send_search_entry: conn 0 dn="" ber_flush2: 70 bytes to sd 13 <= send_search_entry: conn 0 exit. send_ldap_result: conn=0 op=5 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=6 tag=101 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 79 contents: op tag 0x63, time 1260363040 ber_get_next conn=0 op=6 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <cn=Subschema> => ldap_bv2dn(cn=Subschema,0) <= ldap_bv2dn(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=Subschema)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=subschema)=0 <<< dnPrettyNormal: <cn=Subschema>, <cn=subschema> SRCH "cn=Subschema" 0 3 1 0 0 ber_scanf fmt (m) ber: filter: (objectClass=*) ber_scanf fmt ({M}}) ber: attrs: hasSubordinates objectClass => send_search_entry: conn 0 dn="cn=Subschema" ber_flush2: 104 bytes to sd 13 <= send_search_entry: conn 0 exit. send_ldap_result: conn=0 op=6 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=7 tag=101 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 76 contents: op tag 0x63, time 1260363040 ber_get_next conn=0 op=7 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <cn=config> => ldap_bv2dn(cn=config,0) <= ldap_bv2dn(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=config)=0 <<< dnPrettyNormal: <cn=config>, <cn=config> SRCH "cn=config" 0 3 1 0 0 ber_scanf fmt (m) ber: filter: (objectClass=*) ber_scanf fmt ({M}}) ber: attrs: hasSubordinates objectClass ==> limits_get: conn=0 op=7 self="cn=root,dc=callee,dc=ir" this="cn=config" send_ldap_result: conn=0 op=7 p=3 send_ldap_result: err=32 matched="" text="" send_ldap_response: msgid=8 tag=101 err=32 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 82 contents: op tag 0x63, time 1260363040 ber_get_next conn=0 op=8 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <dc=callee,dc=ir> => ldap_bv2dn(dc=callee,dc=ir,0) <= ldap_bv2dn(dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=callee,dc=ir)=0 <<< dnPrettyNormal: <dc=callee,dc=ir>, <dc=callee,dc=ir> SRCH "dc=callee,dc=ir" 0 3 1 0 0 ber_scanf fmt (m) ber: filter: (objectClass=*) ber_scanf fmt ({M}}) ber: attrs: hasSubordinates objectClass >>> dnNormalize: <cn=root,dc=callee,dc=ir> => ldap_bv2dn(cn=root,dc=callee,dc=ir,0) <= ldap_bv2dn(cn=root,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=root,dc=callee,dc=ir)=0 <<< dnNormalize: <cn=root,dc=callee,dc=ir> >>> dnNormalize: <cn=root,dc=callee,dc=ir> => ldap_bv2dn(cn=root,dc=callee,dc=ir,0) <= ldap_bv2dn(cn=root,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=root,dc=callee,dc=ir)=0 <<< dnNormalize: <cn=root,dc=callee,dc=ir> => send_search_entry: conn 0 dn="dc=callee,dc=ir" ber_flush2: 122 bytes to sd 13 <= send_search_entry: conn 0 exit. send_ldap_result: conn=0 op=8 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=9 tag=101 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 55 contents: op tag 0x63, time 1260363055 ber_get_next conn=0 op=9 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <dc=callee,dc=ir> => ldap_bv2dn(dc=callee,dc=ir,0) <= ldap_bv2dn(dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(dc=callee,dc=ir)=0 <<< dnPrettyNormal: <dc=callee,dc=ir>, <dc=callee,dc=ir> SRCH "dc=callee,dc=ir" 0 3 0 0 0 ber_scanf fmt (m) ber: filter: (objectClass=*) ber_scanf fmt ({M}}) ber: attrs: * >>> dnNormalize: <cn=root,dc=callee,dc=ir> => ldap_bv2dn(cn=root,dc=callee,dc=ir,0) <= ldap_bv2dn(cn=root,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=root,dc=callee,dc=ir)=0 <<< dnNormalize: <cn=root,dc=callee,dc=ir> >>> dnNormalize: <cn=root,dc=callee,dc=ir> => ldap_bv2dn(cn=root,dc=callee,dc=ir,0) <= ldap_bv2dn(cn=root,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=root,dc=callee,dc=ir)=0 <<< dnNormalize: <cn=root,dc=callee,dc=ir> => send_search_entry: conn 0 dn="dc=callee,dc=ir" ber_flush2: 138 bytes to sd 13 <= send_search_entry: conn 0 exit. send_ldap_result: conn=0 op=9 p=3 send_ldap_result: err=0 matched="" text="" send_ldap_response: msgid=10 tag=101 err=0 ber_flush2: 22 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 95 contents: op tag 0x63, time 1260363086 ber_get_next conn=0 op=10 do_search ber_scanf fmt ({miiiib) ber: >>> dnPrettyNormal: <cn=myCountry,dc=callee,dc=ir> => ldap_bv2dn(cn=myCountry,dc=callee,dc=ir,0) <= ldap_bv2dn(cn=myCountry,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=myCountry,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=mycountry,dc=callee,dc=ir)=0 <<< dnPrettyNormal: <cn=myCountry,dc=callee,dc=ir>, <cn=mycountry,dc=callee,dc=ir> SRCH "cn=myCountry,dc=callee,dc=ir" 0 0 1 0 0 ber_scanf fmt (m) ber: filter: (objectClass=*) ber_scanf fmt ({M}}) ber: attrs: hasSubordinates objectClass send_ldap_result: conn=0 op=10 p=3 send_ldap_result: err=32 matched="dc=callee,dc=ir" text="" send_ldap_response: msgid=11 tag=101 err=32 ber_flush2: 37 bytes to sd 13 connection_get(13) connection_get(13): got connid=0 connection_read(13): checking for input on id=0 ber_get_next ber_get_next: tag 0x30 len 87 contents: op tag 0x68, time 1260363100 ber_get_next conn=0 op=11 do_add ber_scanf fmt ({m) ber: conn=0 op=11 do_add: dn (cn=myCountry,dc=callee,dc=ir) ber_scanf fmt ({m{W}}) ber: ber_scanf fmt ({m{W}}) ber: ber_scanf fmt (}) ber: >>> dnPrettyNormal: <cn=myCountry,dc=callee,dc=ir> => ldap_bv2dn(cn=myCountry,dc=callee,dc=ir,0) <= ldap_bv2dn(cn=myCountry,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=myCountry,dc=callee,dc=ir)=0 => ldap_dn2bv(272) <= ldap_dn2bv(cn=mycountry,dc=callee,dc=ir)=0 <<< dnPrettyNormal: <cn=myCountry,dc=callee,dc=ir>, <cn=mycountry,dc=callee,dc=ir> ==> ndb_back_add: cn=myCountry,dc=callee,dc=ir oc_check_required entry (cn=myCountry,dc=callee,dc=ir), objectClass "country" Entry (cn=myCountry,dc=callee,dc=ir): object class 'country' requires attribute 'c' ndb_back_add: entry failed schema check: object class 'country' requires attribute 'c' (65) send_ldap_result: conn=0 op=11 p=3 send_ldap_result: err=65 matched="" text="object class 'country' requires attribute 'c'" send_ldap_response: msgid=12 tag=105 err=65 ber_flush2: 67 bytes to sd 13 Bus error [root@dc1 openldap]#

1 0

Re: (ITS#6389) Allow setting syncrepl keepalive
by masarati＠aero.polimi.it 09 Dec '09

09 Dec '09

quanah(a)zimbra.com wrote: > When configuring a replica using syncrepl, it should be possible to have an > option that sets the keepalive used for the tcp connection between the replica > and master. Support for this was added to libldap, but no corresponding support > was added to the syncrepl stanza. I'd suggest a keyword like "keepalive" for > configuring this, based in seconds. A fix is in HEAD (it's been there for a while); please test. Thanks, p.

1 0

Re: (ITS#6037) errno in signal handlers
by hyc＠symas.com 08 Dec '09

08 Dec '09

h.b.furuseth(a)usit.uio.no wrote: > Full_Name: Hallvard B Furuseth > Version: HEAD, RE24 > OS: > URL: > Submission from: (NULL) (129.240.6.233) > Submitted by: hallvard > > > Signal handlers slapd/daemon.c:slap_sig_shutdown()/slap_sig_wake() need > to save/restore errno, since they call functions that can modify errno. > > And/or possibly they need sock_errno() - sock_errset() from ac/socket.h, > since they use tcp_write()? I don't know if that's safe inside signal > handlers, or if Windows itself saves/restores this code around signal > handlers. Windows doesn't really have signals in the first place. SIGTERM/SIGINT are simulated by the C runtime library, none of the other signals are really supported... All of the "support" is synchronous only - can only be invoked by raise(). I don't think there's any issue here. (An exception - I wrote a patch for the MSYS 1.11 runtime to propagate SIGINT/SIGTERM to other processes. The patch only works on win32, not win64 because I never got a decent win64 build environment working... But if you're using MSYS, it is possible to send these signals to a running slapd and have it shutdown cleanly. Otherwise, signals don't really exist for native Windows apps...) > slapd/main.c:wait4child() can loop forever after EINTR, since it checks > for errno even when the waitpid returns 0. I don't know if there is > a good reason it does that. Some of the commits have my name on them > but I think I copied it from elsewhere. > > > Anyway, I'm doing the minimal changes now: save/restore errno, and > set errno=0 in each loop iteration instead of before the loop. > Anyone with better ideas can take it from there. Good enough. Closing this ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: ITS#6423 slapo-rwm and dynlist overlay
by hyc＠symas.com 08 Dec '09

08 Dec '09

masarati(a)aero.polimi.it wrote: > The problem is that back-relay presents slapo-rwm(3) an entry with both > REP_ENTRY_MODIFIABLE and REP_ENTRY_MUSTRELEASE flags set. As a > consequence, the entry is released (namely, freed) before it is returned > by the frontend. As far as I understand, the two flags should be mutually > exclusive. As soon as one entry is marked as REP_ENTRY_MODIFIABLE, it is > supposed to be a copy of an entry that may need to be released, or an > entry created from scratch and thus not stored anywhere. I have a quick > fix to your problem, that consists in ignoring REP_ENTRY_MUSTRELEASE when > REP_ENTRY_MODIFIABLE is also set. However, a better fix would consist in > tracking where the issue occurs. Unless I track it, I'll commit the quick > fix. We already have ITS#5340 for issues with these flags... -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

ldapsearch with delay (on the same machine over TLS/SSL only)
by Pavel Lisy 08 Dec '09

08 Dec '09

Hello I've found one problem I have latest openldap release 2.4.3 (but it is similar on former versions too). There is small delay (1-2s) on beginning when I query ldap server from the same machine over TLS or SSL. Without SSL is no delay. Is it bug or is it normal? How can I debug it more? QUERY with delay: from ldap1 to ldap1 (the same machine) [root@ldap1 ~]# ldapsearch24 -Z -h ldap1.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w p*****d QUERY without delay: from ldap1 to ldap1 (the same machine without TLS) [root@ldap1 ~]# ldapsearch24 -h ldap1.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w p*****d from ldap1 to ldap2 [root@ldap1 ~]# ldapsearch24 -Z -h ldap2.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w p*****d from ldap2 to ldap1 [root@ldap2 ~]# ldapsearch24 -Z -h ldap1.ldapnet.tmapy.cz -x -s sub -D "cn=Manager,dc=tmapy,dc=cz" -b 'dc=tmapy,dc=cz' -w p*****d I think my DNS/hosts settings are correct My testing environment: servers: ldap1.ldapnet.tmapy.cz ldap2.ldapnet.tmapy.cz ldap3.ldapnet.tmapy.cz from ldap1 config: slapd.conf TLSCACertificateFile /etc/pki/tls/cacert.pem TLSCertificateFile /etc/pki/tls/certs/ldap1.ldapnet.tmapy.cz-cert.pem TLSCertificateKeyFile /etc/pki/tls/private/ldap1.ldapnet.tmapy.cz-key.pem [root@ldap1 ~]# hostname ldap1.ldapnet.tmapy.cz [root@ldap1 ~]# grep ldap1 /etc/hosts 192.168.241.10 ldap1.ldapnet.tmapy.cz [root@ldap1 ~]# ifconfig eth0 eth0 inet adr:192.168.241.10 Všesměr:192.168.241.255 Maska:255.255.255.0 [root@ldap1 ~]# grep ldap1 /etc/pki/tls/certs/ldap1.ldapnet.tmapy.cz-cert.pem Subject: C=CS, ST=Kraj kralovehradecky, O=T-MAPY spol. s r.o.,OU=ldapnet, CN=ldap1.ldapnet.tmapy.cz Pavel Lisy -- Pavel Lisy <pali(a)tmapy.cz>

3 4

Re: (ITS#6425) Uninitialized var in syncrepl
by h.b.furuseth＠usit.uio.no 08 Dec '09

08 Dec '09

h.b.furuseth(a)usit.uio.no writes: > In syncrepl.c lines 1001-1010: Also in equivalent code around line 820. -- Hallvard

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs