openldap-bugs

openldap-bugs@openldap.org

1 participants
20959 discussions

(ITS#6194) Patch - Enhancement - provide LDIF support as libldif
by rmeggins＠redhat.com 02 Jul '09

02 Jul '09

Full_Name: Rich Megginson Version: CVS HEAD (2.4.16+) OS: Fedora URL: ftp://ftp.openldap.org/incoming/openldap-2.4.16-libldif-20090702.patch Submission from: (NULL) (76.113.59.19) This patch allows liblutil to provide the LDIF reading and writing functions as public APIs in a libldif, and exposes ldif.h to the public API. This patch file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Red Hat, Inc.. Red Hat, Inc. has not assigned rights and/or interest in this work to any party. I, Richard Megginson am authorized by Red Hat, Inc., my employer, to release this work under the following terms. Red Hat, Inc. hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

1 0

Re: (ITS#5696) Patch - support Mozilla NSS for crypto operations
by rmeggins＠redhat.com 02 Jul '09

02 Jul '09

Full_Name: Rich Megginson Version: current CVS HEAD (as of July 2, 2009) OS: Fedora URL: ftp://ftp.openldap.org/incoming/openldap-2.4.16-moznss-20090702.patch This is a new patch - diffs from older patch 1) Implements tls_m.c MozNSS crypto - including parsing of openssl-style cipher suite configuration - things still missing 1a) support for multiple MozNSS initialize - work is being done upstream to support this 1b) support for reading PEM files - there is now a PEM PKCS11 module in Fedora which is being incorporated into NSS upstream 2) removes pkg-config stuff from configure.in - user must specify include path and lib path in environment This patch file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Red Hat, Inc.. Red Hat, Inc. has not assigned rights and/or interest in this work to any party. I, Richard Megginson am authorized by Red Hat, Inc., my employer, to release this work under the following terms. Red Hat, Inc. hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

1 0

(ITS#6193) OpenLDAP 2.4.16 does not compile on Windows
by frank.offermanns＠caseris.de 02 Jul '09

02 Jul '09

Hello, you are right, the Version 2.4.16 has this problem. I had the same=20 problem. You have to compile the version from CVS HEAD. There the=20 configure file has been fixed. Best regards, Frank Offermanns -- -- Frank Offermanns | Entwicklung | CASERIS GmbH=20 Fon: +49 2402 7654-566 Fax: +49 2402 7654-8566 | E-Mail: Frank.Offermanns(a)caseris.com=20 -- CASERIS GmbH | Am Birkenfeld 1-3 | D-52222 Stolberg Gesch=E4ftsf=FChrer Dipl.-Ing. Stefan Preu=DF | Registergericht: Amtsgerich= t=20 Aachen, HRB 14758 -- CAESAR und CASERIS - Ihr Team f=FCr die Zukunft --

1 0

RE: (ITS#6193) OpenLDAP 2.4.16 does not compile on Windows
by emmanuel.duru＠atosorigin.com 02 Jul '09

02 Jul '09

One just has to patch three makefiles to build this release, that's no problem for me... > -----Message d'origine----- > De=A0: Howard Chu [mailto:hyc@symas.com] > Envoy=E9=A0: jeudi 2 juillet 2009 10:56 > =C0=A0: emmanuel.duru(a)atosorigin.com > Cc=A0: openldap-its(a)openldap.org > Objet=A0: Re: (ITS#6193) OpenLDAP 2.4.16 does not compile on Windows >=20 > emmanuel.duru(a)atosorigin.com wrote: > > Full_Name: Emmanuel Duru > > Version: 2.4.16 > > OS: Windows > > URL: ftp://ftp.openldap.org/incoming/ > > Submission from: (NULL) (80.78.0.134) > > > > > > OpenLDAP 2.4.16 does not compile on Windows. > > When compiling liblber and libldap, there are undefined references = to > winsock > > functions. > > The last version I used was OpenLDAP 2.4.13 and it worked fine. > > Comparing both versions, I see that there misses -lws2_32 in liblber = and > libldap > > makefiles in 2.4.16 release. >=20 > That's interesting. At least one other person (ITS#6174) disagrees = with > you. > Seems there's something wrong with your build environment. Since other > folks > are building on Windows, I don't believe this is a bug in OpenLDAP. >=20 > -- > -- Howard Chu > CTO, Symas Corp. http://www.symas.com > Director, Highland Sun http://highlandsun.com/hyc/ > Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6193) OpenLDAP 2.4.16 does not compile on Windows
by hyc＠symas.com 02 Jul '09

02 Jul '09

emmanuel.duru(a)atosorigin.com wrote: > Full_Name: Emmanuel Duru > Version: 2.4.16 > OS: Windows > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (80.78.0.134) > > > OpenLDAP 2.4.16 does not compile on Windows. > When compiling liblber and libldap, there are undefined references to winsock > functions. > The last version I used was OpenLDAP 2.4.13 and it worked fine. > Comparing both versions, I see that there misses -lws2_32 in liblber and libldap > makefiles in 2.4.16 release. That's interesting. At least one other person (ITS#6174) disagrees with you. Seems there's something wrong with your build environment. Since other folks are building on Windows, I don't believe this is a bug in OpenLDAP. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#6193) OpenLDAP 2.4.16 does not compile on Windows
by emmanuel.duru＠atosorigin.com 02 Jul '09

02 Jul '09

Full_Name: Emmanuel Duru Version: 2.4.16 OS: Windows URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (80.78.0.134) OpenLDAP 2.4.16 does not compile on Windows. When compiling liblber and libldap, there are undefined references to winsock functions. The last version I used was OpenLDAP 2.4.13 and it worked fine. Comparing both versions, I see that there misses -lws2_32 in liblber and libldap makefiles in 2.4.16 release.

1 0

Re: (ITS#6174) Backtrace for a segfault
by hyc＠symas.com 02 Jul '09

02 Jul '09

Please do not send HTML or MIME emails, the contents are unintelligible. frank.offermanns(a)caseris.de wrote: > Dies ist eine mehrteilige Nachricht im MIME-Format. > --=_alternative 002BEC64C12575DF_= > Content-Type: text/plain; charset="ISO-8859-1" > Content-Transfer-Encoding: quoted-printable > > Hello, > > for this test setup i got an empty database and tried to add 20000 Users=20 > under o=3Dcaesar,ou=3DUsers,o=3Dtestcas at server1 (windos vista) while try= > ing=20 > to add 20000 Users under o=3Dcaesar,ou=3DUsers,o=3Dtestxp at server2 (Windo= > ws=20 > XP). The slapd.exe on the XP Server crashed. Compiled the version from=20 > HEAD with Mingw/MSYS for windows. > - > Frank Offermanns | Entwicklung | CASERIS GmbH=20 > Fon: +49 2402 7654-566 > Fax: +49 2402 7654-8566 | E-Mail: Frank.Offermanns(a)caseris.com=20 > -- > CASERIS GmbH | Am Birkenfeld 1-3 | D-52222 Stolberg > Gesch=E4ftsf=FChrer Dipl.-Ing. Stefan Preu=DF | Registergericht: Amtsgerich= > t=20 > Aachen, HRB 14758 > > --=_alternative 002BEC64C12575DF_= > Content-Type: text/html; charset="ISO-8859-1" > Content-Transfer-Encoding: quoted-printable -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6192) OpenLDAP doesn't support SHA-256 signed certificates
by hyc＠symas.com 01 Jul '09

01 Jul '09

sjv(a)genoscope.cns.fr wrote: > Full_Name: Simon Vallet > Version: 2.4.16 > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (195.83.221.39) > > > Hi, > > trying to use SHA-256 signed certificates for SSL connections to an OpenLDAP > server leads to the following OpenSSL error messages : > > TLS certificate verification: Error, certificate signature failure > tls_write: want=7, written=7 > 0000: 15 03 01 00 02 02 33 ......3 > TLS trace: SSL3 alert write:fatal:decrypt error > TLS trace: SSL_connect:error in SSLv3 read server certificate B > TLS trace: SSL_connect:error in SSLv3 read server certificate B > TLS: can't connect: error:0D0C50A1:asn1 encoding > routines:ASN1_item_verify:unknown message digest algorithm. > > This is due to OpenLDAP not explicitly enabling SHA-2 ciphers after calling > SSLeay_add_ssl_algorithms(), which only enables some digest algorithms. > > As SHA-256 is becoming more common and as it is, in fact, mandated by TLS 1.2, I > think OpenLDAP should support it. > > For a similar problem, you might want to take a look at > http://bugs.exim.org/show_bug.cgi?id=674 Thanks for the report. I've chosen to call OpenSSL_add_all_digests() in our init. Note that this has no impact on the actual TLS protocol handshake, since OpenSSL still only supports TLSv1.0. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5836) hung writers
by quanah＠zimbra.com 01 Jul '09

01 Jul '09

--On Monday, June 29, 2009 10:15 AM +0200 Jorge Perez Burgos <jorge.perez(a)adaptia.net> wrote: > Hello, > > I still reproduce this problem with 2.4.17-prerelease. I have a client > that request a lof of operations at the same time through a connection. > The slapd seems to overload and finally close the connection sending a > reset to the client and when this happens the connection hungs eating the > CPU, blocked in the pthread_cond_wait in send_ldap_ber function at the > same point of the first trace sent in this report. This should now really be fixed in HEAD and RE24. Please test. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#6192) OpenLDAP doesn't support SHA-256 signed certificates
by sjv＠genoscope.cns.fr 01 Jul '09

01 Jul '09

Full_Name: Simon Vallet Version: 2.4.16 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (195.83.221.39) Hi, trying to use SHA-256 signed certificates for SSL connections to an OpenLDAP server leads to the following OpenSSL error messages : TLS certificate verification: Error, certificate signature failure tls_write: want=7, written=7 0000: 15 03 01 00 02 02 33 ......3 TLS trace: SSL3 alert write:fatal:decrypt error TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS trace: SSL_connect:error in SSLv3 read server certificate B TLS: can't connect: error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm. This is due to OpenLDAP not explicitly enabling SHA-2 ciphers after calling SSLeay_add_ssl_algorithms(), which only enables some digest algorithms. As SHA-256 is becoming more common and as it is, in fact, mandated by TLS 1.2, I think OpenLDAP should support it. For a similar problem, you might want to take a look at http://bugs.exim.org/show_bug.cgi?id=674 Simon

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs