openldap-bugs

openldap-bugs@openldap.org

1 participants
20965 discussions

ITS#5717
by ando＠sys-net.it 29 Sep '08

29 Sep '08

Emmanuel, I have a fix, should I go and commit it? p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5717) slapo-dynlist expantion failed for mapped attributes
by menu＠netbsd.org 29 Sep '08

29 Sep '08

Full_Name: Emmanuel Dreyfus Version: OpenLDAP-2.4.11 OS: NetBSD-4.0 URL: Submission from: (NULL) (193.54.82.42) If slapo-dynlist is configured with attribute mapping, dynlist expantion will only work if the member attribute in included in the searched attriute set. Here is an example: Config: overlay dynlist dynlist-attrset ExMailAddress memberURL mailbox:revalias Searched entry: dn: mailAddress=foo-employee(a)example.net,o=ex objectClass: exMailAddress mailAddress: foo-employee(a)example.net memberURL: ldap:///o=ex,revalias?sub?(&(objectClass=exPerson)(employer=foo)) Expantion looks up objects like this: dn: uid=jdoe,o=ex objectClass: exPerson uid: jdoe revalias: john.doe(a)example.net employer: foo With the member attribute in the searched attribute set: $ ldapsearch mailAddress=foo-employee@example mailbox revalias dn: mailAddress=foo-employee(a)example.net,o=ex mailbox: john.doe(a)example.net mailbox: joe.luser(a)example.net mailbox: emmanuel.dreyfus(a)example.net Without it: $ ldapsearch mailAddress=foo-employee@example mailbox dn: mailAddress=foo-employee(a)example.net,o=ex Note that if no attribute set is provided, it works: $ ldapsearch mailAddress=foo-employee@example dn: mailAddress=foo-employee(a)example.net,o=ex objectClass: exMailAddress mailAddress: foo-employee(a)example.net mailbox: john.doe(a)example.net mailbox: joe.luser(a)example.net mailbox: emmanuel.dreyfus(a)example.net memberURL: ldap:///o=ex,revalias?sub?(&(objectClass=exPerson)(employer=foo)) I should provide a fix for that soon.

1 0

Re: (ITS#5716) test046-dds failed (exit 127): invalid ELF header
by h.b.furuseth＠usit.uio.no 29 Sep '08

29 Sep '08

michael(a)stroeder.com writes: > error while loading shared libraries: > /home/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/libraries/libldap_r/.libs/libldap_r-2.4-releng.so.2: > invalid ELF header Hopefully a PEBKAC. Loading libraries built for another architecture, or something like that. -- Hallvard

1 0

(ITS#5716) test046-dds failed (exit 127): invalid ELF header
by michael＠stroeder.com 29 Sep '08

29 Sep '08

Full_Name: Michael Ströder Version: RE24 OS: openSUSE Linux 11.0 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (84.163.103.245) I will examine why this fails. >>>>> Starting test046-dds ... running defines.sh Running slapadd to build slapd database... /home/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/servers/slapd/.libs/lt-slapd: error while loading shared libraries: /home/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/libraries/libldap_r/.libs/libldap_r-2.4-releng.so.2: invalid ELF header slapadd failed (127)! >>>>> ./scripts/test046-dds failed (exit 127) make[2]: *** [bdb-yes] Error 127 make[2]: Leaving directory `/home/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/tests' make[1]: *** [test] Error 2 make[1]: Leaving directory `/home/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/tests' make: *** [test] Error 2

1 0

(ITS#5715) segfault in libdb
by michael＠stroeder.com 29 Sep '08

29 Sep '08

Full_Name: Michael Ströder Version: RE24 OS: openSUSE Linux 11.0 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (84.163.103.245) HI! I'm experiencing seg faults when using SASL/EXTERNAL bind when connected over ldapi://. I will try to examine this further. segfault at 0 ip b7f21d4c sp b370fd10 error 6 in libdb-4.6.so[b7ef9000+14f000] Ciao, Michael.

1 0

Re: (ITS#5709) slapd sync provider skips some objects
by sylvain.thomas＠gmail.com 29 Sep '08

29 Sep '08

This is not a patch suggestion but may be it helps to better see the problem's origin : I applied the following patch to syncprov.c and I got good results. The concerned objects are sent with a NULL cookie but they are replicated well. The contextCSN is made up by the subsequent objects. Thanks and best regards Sylvain Thomas. ============================================ --- syncprov.c.orig 2008-09-29 11:08:36.000000000 +0200 +++ syncprov.c 2008-09-29 11:10:33.000000000 +0200 @@ -1642,8 +1642,6 @@ } } else { /* internal ops that aren't meant to be replicated */ - ldap_pvt_thread_rdwr_wunlock( &si->si_csn_rwlock ); - return SLAP_CB_CONTINUE; } /* Don't do any processing for consumer contextCSN updates */

1 0

(ITS#5714) [feature request] operational attrs defined via configuration
by ando＠sys-net.it 27 Sep '08

27 Sep '08

Full_Name: Pierangelo Masarati Version: HEAD OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (151.30.78.88) Currently, the attributeType statement does not allow to define operational attributes. The rationale was that operational attributes are somehow application-maintained, so configuration-defined attrs would be essentially unmaintainable. At the same time, modules that are able to maintain operational attributes can register them bypassing some of the checks attributes defined via configuration must pass. However, the availability of the "relax" control could make this restriction too strict. In fact, there are works in progress (e.g. draft-wahl-ldap-adminaddr) that define operational attrs which could easily be defined via configuration and maintained via the relax control. This is a feature request to suggest the possibility to define operational attrs via configuration. p.

1 0

Re: (ITS#5712) Could not set the connection timeout
by ando＠sys-net.it 27 Sep '08

27 Sep '08

essiambl(a)gmail.com wrote: > Full_Name: Luc-André Essiambre > Version: 2.4.11 > OS: Solaris 10 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (216.95.235.3) > > > I'm using openldap to authenticate users for our subversion repositories hosted > on apache httpd. Immediately after a server startup, I get these strange errors > saying "LDAP: Could not set the connection timeout" This message does not come from anything distributed with OpenLDAP software, so it does not help isolate your issue. > when I try to authenticate > myself. The weird thing is, after a couple of attempts at accessing the > subversion content (5 or 6 times), I'm eventually authenticated without error. > Then it will work for a while, then those same errors will come back. You don't specify in what sense you're using OpenLDAP: do you use the client libraries as part of a third-party clien to do a bind to a third-party server, or do you use OpenLDAP as the LDAP server, or both? If you use the client libraries with a third-party client, did you build it with -DLDAP_DEPRECATED=1 ? This is required to expose deprecated API to clients that make use of them. > openldap was compiled using the gcc compiler included in solaris (version 3.4.3) > without slapd, with cyrus-sasl-2.1.21. Solaris runs as a virtual server on sparc > hardware. In any case, I don't see (yet) an OpenLDAP bug, so you should direct further communications to openldap-technical(a)openldap.org, since your problem mainly addresses interoperation with other software. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

ITS#5713
by ando＠sys-net.it 27 Sep '08

27 Sep '08

Probably, the right fix consists in changing that attr's syntax to DirectoryString, and allow all syntaxes, from "--w-------" to passing the value to strtol(value, NULL, 0) etc. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5711) Password Modify Exop don't return ppolicy control in case of error
by ando＠sys-net.it 27 Sep '08

27 Sep '08

Guillaume.Rousse(a)inria.fr wrote: > When Password Modify ExOp fails, due to ppolicy restrictions, it doesn't return > any ppolicy control. Fixed in HEAD, please test. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs