openldap-bugs

openldap-bugs@openldap.org

1 participants
20959 discussions

Start a nNew thread

Re: (ITS#6191) test022-ppolicy failed (exit 21)
by michael＠stroeder.com 01 Jul '09

01 Jul '09

hyc(a)symas.com wrote: > Thanks, fixed in HEAD. Seems to work now. Ciao, Michael.

1 0

Re: (ITS#6084) ppolicy should allow scheduled password expiration
by Guillaume.Rousse＠inria.fr 01 Jul '09

01 Jul '09

Howard Chu a écrit : > Guillaume Rousse wrote: >> Howard Chu a écrit : >>> Since the ppolicy module's behavior is dictated by the Behera draft, any >>> suggestions for changes in this area should probably first be raised on >>> the ietf-ldapext mailing list. >> Right, but openldap implementation already have extension, such >> pwdCheckModule. Additional extension could be implemented, before >> getting standardized. >> >> Also, the ietf-ldapext seems to be an highly-technical list, and I don't >> feel confortable enough to post this kind of request directly there. >> Discussing various limitations of ppolicy among openldap users first >> would probably allow openldap core team to suggest a more polished >> extension request themselves. > > The draft doesn't say anything about setting pwdAccountLockedTime to a > value in the future; since it doesn't preclude it I've fixed up the code > to handle this case. However, it's not a good solution for your purpose, > since the pwdAccountLockedTime value is automatically replaced with the > current time if too many Bind failures occur, and it's automatically > deleted when a password is changed. We'll leave this in HEAD on an > experimental basis for now, until a real solution is spec'd out. Indeed. Moreover, a variable date field is not a practical field for sorting out valid accounts in search requests, for authorization purposes. Anyway, thanks for the change. -- BOFH excuse #320: You've been infected by the Telescoping Hubble virus.

1 0

Re: (ITS#6191) test022-ppolicy failed (exit 21)
by hyc＠symas.com 01 Jul '09

01 Jul '09

Michael Ströder wrote: > Howard Chu wrote: >> Michael Ströder wrote: >>> Howard Chu wrote: >>>> michael(a)stroeder.com wrote: >>>>> Full_Name: Michael Ströder >>>>> Version: HEAD synced now >>>>> OS: openSUSE Linux 11.1 >>>>> URL: ftp://ftp.openldap.org/incoming/ >>>>> Submission from: (NULL) (84.163.60.129) >>>> >>>>> Setting up policy state forwarding test... >>>>> Starting slapd consumer on TCP/IP port 9012... >>>>> Configuring syncprov on provider... >>>>> Using ldapsearch to check that slapd is running... >>>>> Waiting 5 seconds for slapd to start... >>>>> Configuring syncrepl on consumer... >>>>> ldapmodify failed (21)! >>>>>>>>>> ./scripts/test022-ppolicy failed (exit 21) >>>>> make[2]: *** [bdb-mod] Error 21 >>>>> make[2]: Leaving directory >>>>> `/usr/src/michael/openldap/HEAD/openldap/tests' >>>>> make[1]: *** [test] Error 2 >>>>> make[1]: Leaving directory >>>>> `/usr/src/michael/openldap/HEAD/openldap/tests' >>>>> make: *** [test] Error 2 >>>> >>>> Please provide a tarball of the testrun directory. >>> >>> Here it is: >>> http://www.stroeder.com/temp/openldap/its-6191-testrun-test022-ppolicy_fail… >>> >> >> Looks like you don't have back-ldap enabled in your slapd. What were >> your configure flags? > > See my build script below (lines wrapped herein). Thanks, fixed in HEAD. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6191) test022-ppolicy failed (exit 21)
by michael＠stroeder.com 01 Jul '09

01 Jul '09

Howard Chu wrote: > Michael Ströder wrote: >> Howard Chu wrote: >>> michael(a)stroeder.com wrote: >>>> Full_Name: Michael Ströder >>>> Version: HEAD synced now >>>> OS: openSUSE Linux 11.1 >>>> URL: ftp://ftp.openldap.org/incoming/ >>>> Submission from: (NULL) (84.163.60.129) >>> >>>> Setting up policy state forwarding test... >>>> Starting slapd consumer on TCP/IP port 9012... >>>> Configuring syncprov on provider... >>>> Using ldapsearch to check that slapd is running... >>>> Waiting 5 seconds for slapd to start... >>>> Configuring syncrepl on consumer... >>>> ldapmodify failed (21)! >>>>>>>>> ./scripts/test022-ppolicy failed (exit 21) >>>> make[2]: *** [bdb-mod] Error 21 >>>> make[2]: Leaving directory >>>> `/usr/src/michael/openldap/HEAD/openldap/tests' >>>> make[1]: *** [test] Error 2 >>>> make[1]: Leaving directory >>>> `/usr/src/michael/openldap/HEAD/openldap/tests' >>>> make: *** [test] Error 2 >>> >>> Please provide a tarball of the testrun directory. >> >> Here it is: >> http://www.stroeder.com/temp/openldap/its-6191-testrun-test022-ppolicy_fail… >> > > Looks like you don't have back-ldap enabled in your slapd. What were > your configure flags? See my build script below (lines wrapped herein). Note that this worked until your recent changes to ppolicy. Ciao, Michael. --------------------------- snip --------------------------- OPENLDAP_VERSION=$1 BDB_PREFIX="/dummy" SSL_PREFIX="/dummy" KRB5_PREFIX="/dummy" SASL_PREFIX="/dummy" OPENLDAP_PREFIX="/opt/openldap-${OPENLDAP_VERSION}" export CFLAGS="-g -O2 -DSLAP_LIGHTWEIGHT_DISPATCHER" export CPPFLAGS="-I${SSL_PREFIX}/include -I${BDB_PREFIX}/include -I${KRB5_PREFIX}/include -I${SASL_PREFIX}/include -DDEVEL" #export CPPFLAGS="-I${SSL_PREFIX}/include -I${BDB_PREFIX}/include" export LDFLAGS="-L${BDB_PREFIX}/lib -L${SSL_PREFIX}/lib -L${KRB5_PREFIX}/lib -L${SASL_PREFIX}/lib -Wl,-R${SSL_PREFIX}/lib -Wl,-R${BDB_PREFI X}/lib,-R${SASL_PREFIX}/lib,-R${KRB5_PREFIX}/lib" make distclean ./configure \ --prefix=${OPENLDAP_PREFIX} \ --enable-dynamic=yes \ --enable-ndb=no \ --enable-modules \ --enable-backends=mod \ --enable-overlays=mod \ --enable-perl=no \ --enable-shell=no \ --enable-local=yes \ --enable-slapi=yes \ --with-cyrus-sasl=yes \ --with-kerberos=yes \ --with-tls=yes \ --with-threads=yes \ --with-odbc=auto \ --enable-crypt=yes \ --enable-spasswd=yes \ --enable-lmpasswd=yes \ --enable-shared=yes make depend make ulimit -c unlimited export SLEEP1=7 export SLEEP2=15 export SLAPD_DEBUG=16389 rm ./tests/core.* make test

1 0

Re: (ITS#6191) test022-ppolicy failed (exit 21)
by hyc＠symas.com 01 Jul '09

01 Jul '09

Michael Ströder wrote: > Howard Chu wrote: >> michael(a)stroeder.com wrote: >>> Full_Name: Michael Ströder >>> Version: HEAD synced now >>> OS: openSUSE Linux 11.1 >>> URL: ftp://ftp.openldap.org/incoming/ >>> Submission from: (NULL) (84.163.60.129) >> >>> Setting up policy state forwarding test... >>> Starting slapd consumer on TCP/IP port 9012... >>> Configuring syncprov on provider... >>> Using ldapsearch to check that slapd is running... >>> Waiting 5 seconds for slapd to start... >>> Configuring syncrepl on consumer... >>> ldapmodify failed (21)! >>>>>>>> ./scripts/test022-ppolicy failed (exit 21) >>> make[2]: *** [bdb-mod] Error 21 >>> make[2]: Leaving directory >>> `/usr/src/michael/openldap/HEAD/openldap/tests' >>> make[1]: *** [test] Error 2 >>> make[1]: Leaving directory >>> `/usr/src/michael/openldap/HEAD/openldap/tests' >>> make: *** [test] Error 2 >> >> Please provide a tarball of the testrun directory. > > Here it is: > http://www.stroeder.com/temp/openldap/its-6191-testrun-test022-ppolicy_fail… Looks like you don't have back-ldap enabled in your slapd. What were your configure flags? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6191) test022-ppolicy failed (exit 21)
by michael＠stroeder.com 01 Jul '09

01 Jul '09

Howard Chu wrote: > michael(a)stroeder.com wrote: >> Full_Name: Michael Ströder >> Version: HEAD synced now >> OS: openSUSE Linux 11.1 >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (84.163.60.129) > >> Setting up policy state forwarding test... >> Starting slapd consumer on TCP/IP port 9012... >> Configuring syncprov on provider... >> Using ldapsearch to check that slapd is running... >> Waiting 5 seconds for slapd to start... >> Configuring syncrepl on consumer... >> ldapmodify failed (21)! >>>>>>> ./scripts/test022-ppolicy failed (exit 21) >> make[2]: *** [bdb-mod] Error 21 >> make[2]: Leaving directory >> `/usr/src/michael/openldap/HEAD/openldap/tests' >> make[1]: *** [test] Error 2 >> make[1]: Leaving directory >> `/usr/src/michael/openldap/HEAD/openldap/tests' >> make: *** [test] Error 2 > > Please provide a tarball of the testrun directory. Here it is: http://www.stroeder.com/temp/openldap/its-6191-testrun-test022-ppolicy_fail… Ciao, Michael.

1 0

Re: (ITS#6191) test022-ppolicy failed (exit 21)
by hyc＠symas.com 01 Jul '09

01 Jul '09

michael(a)stroeder.com wrote: > Full_Name: Michael Ströder > Version: HEAD synced now > OS: openSUSE Linux 11.1 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (84.163.60.129) > Setting up policy state forwarding test... > Starting slapd consumer on TCP/IP port 9012... > Configuring syncprov on provider... > Using ldapsearch to check that slapd is running... > Waiting 5 seconds for slapd to start... > Configuring syncrepl on consumer... > ldapmodify failed (21)! >>>>>> ./scripts/test022-ppolicy failed (exit 21) > make[2]: *** [bdb-mod] Error 21 > make[2]: Leaving directory `/usr/src/michael/openldap/HEAD/openldap/tests' > make[1]: *** [test] Error 2 > make[1]: Leaving directory `/usr/src/michael/openldap/HEAD/openldap/tests' > make: *** [test] Error 2 Please provide a tarball of the testrun directory. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#6191) test022-ppolicy failed (exit 21)
by michael＠stroeder.com 01 Jul '09

01 Jul '09

Full_Name: Michael Ströder Version: HEAD synced now OS: openSUSE Linux 11.1 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (84.163.60.129) >>>>> Starting test022-ppolicy ... running defines.sh Starting slapd on TCP/IP port 9011... Using ldapsearch to check that slapd is running... Using ldapadd to populate the database... Testing account lockout... Waiting 20 seconds for lockout to reset... Testing password expiration Waiting 20 seconds for password to expire... Resetting password to clear expired status Filling password history... Testing password history... Testing forced reset... Clearing forced reset... Testing Safe modify... Testing length requirement... Testing hashed length requirement... Testing multiple password add/modify checks... Setting up policy state forwarding test... Starting slapd consumer on TCP/IP port 9012... Configuring syncprov on provider... Using ldapsearch to check that slapd is running... Waiting 5 seconds for slapd to start... Configuring syncrepl on consumer... ldapmodify failed (21)! >>>>> ./scripts/test022-ppolicy failed (exit 21) make[2]: *** [bdb-mod] Error 21 make[2]: Leaving directory `/usr/src/michael/openldap/HEAD/openldap/tests' make[1]: *** [test] Error 2 make[1]: Leaving directory `/usr/src/michael/openldap/HEAD/openldap/tests' make: *** [test] Error 2

1 0

Re: (ITS#6089) connection_destroy() c->c_writers == 0 assertion failure
by jwm＠horde.net 01 Jul '09

01 Jul '09

On Tue, Jun 30, 2009 at 06:05:09PM -0700, Howard Chu wrote: > John Morrissey wrote: > > It's happened once or twice, but it hasn't had much time since this is > > the same machine I just got done chasing the i386 heap fragmentation on. > > Our backtrace/core/BDB harness is still on this slapd, so we should have > > information if it happens again. > > I was able to reproduce this today, a fix is now in HEAD. Please test, > thanks. Sorry Howard, we've retired our i386 machines and haven't seen this with RE24 as of 20090511 on amd64. john -- John Morrissey _o /\ ---- __o jwm(a)horde.net _-< \_ / \ ---- < \, www.horde.net/ __(_)/_(_)________/ \_______(_) /_(_)__

1 0

Re: (ITS#6089) connection_destroy() c->c_writers == 0 assertion failure
by hyc＠symas.com 01 Jul '09

01 Jul '09

John Morrissey wrote: > It's happened once or twice, but it hasn't had much time since this is the > same machine I just got done chasing the i386 heap fragmentation on. Our > backtrace/core/BDB harness is still on this slapd, so we should have > information if it happens again. I was able to reproduce this today, a fix is now in HEAD. Please test, thanks. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs