openldap-bugs

openldap-bugs@openldap.org

1 participants
20967 discussions

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by jstrunk＠math.utexas.edu 02 Jul '08

02 Jul '08

On Wednesday 02 July 2008 09:49:14 am Howard Chu wrote: > jstrunk(a)math.utexas.edu wrote: > > Full_Name: Jeff Strunk > > Version: 2.4.9-0ubuntu0.8.04 > > OS: Ubuntu 8.04 > > URL: > > Submission from: (NULL) (146.6.139.147) > > > > > > I am setting up a new LDAP server and trying to utilize the cn=config > > configuration style. While testing it out, I noticed that changes I make > > to cn=config are getting written to /etc/ldap/slapd.d/cn=config/ldif, but > > changes made to olcDatabase={1}hdb,cn=config are not getting written to > > /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif or anything > > else. > > > > What could be happening? > > Impossible to guess with the info you've provided. What are the changes you > tried to make that aren't being saved? One example is adding the olcSyncrepl attribute to olcDatabase={1}hdb,cn=config . Ldapmodify reported success. Ldapsearch shows the new attribute. syncrepl works. However, /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif does not have an olcSyncrepl attribute. When slapd is restarted, the olcSyncrepl attribute is missing. The same thing happened when adding the entry for the syncrepl overlay. Thank you, Jeff

1 0

Re: (ITS#5590) Method for storing last successful bind by a user
by hyc＠symas.com 02 Jul '08

02 Jul '08

prieheck(a)iwu.edu wrote: > Full_Name: Pat Riehecky > Version: 2.4.10 > OS: Ubuntu Linux 8.04, kernel 2.6.24 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (198.178.132.251) > > > Our internal auditing system is poor. Periodically I am asked about how often > certain classes of users use our system. As a University our account database > just grows and grows. It would be nice to have a metric for how often alumni > use their accounts. I envision something similar to the modifyTimestamp that > OpenLDAP already records. This will assist with various types of tracking in > environments where ppolicy cannot be implemented due to either politics or > limitations. I suggest you use slapo-accesslog(5) and log Bind requests there; that's what the overlay was designed for... -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by hyc＠symas.com 02 Jul '08

02 Jul '08

jstrunk(a)math.utexas.edu wrote: > Full_Name: Jeff Strunk > Version: 2.4.9-0ubuntu0.8.04 > OS: Ubuntu 8.04 > URL: > Submission from: (NULL) (146.6.139.147) > > > I am setting up a new LDAP server and trying to utilize the cn=config > configuration style. While testing it out, I noticed that changes I make to > cn=config are getting written to /etc/ldap/slapd.d/cn=config/ldif, but changes > made to olcDatabase={1}hdb,cn=config are not getting written to > /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif or anything else. > > What could be happening? Impossible to guess with the info you've provided. What are the changes you tried to make that aren't being saved? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5589) Segfault in syncrepl on provider
by hyc＠symas.com 02 Jul '08

02 Jul '08

michael(a)fladi.at wrote: > Full_Name: Michael Fladischer > Version: 2.4.10 > OS: Debian GNU/Linux Unstable > URL: http://storage.fladi.at/~fladischer.michael/slapd/ > Submission from: (NULL) (193.170.104.18) > > > I'm running two instances of slapd (2.4.10 from Debian/Unstable) on separate > machines. > One is the master/provider and the other the slave, pulling changes via syncrepl > from the provider. > Since 2.4.9 the provider slapd instance crashes with a segfault when the slave > attempts to search for the latest changes. If there are no changes the operation > completes successful. > If I change an attribute of an object on the master (add/delete/modify) the > slapd instance crashes with a segfault immediately the moment when the slave > starts his search. > I can reproduce this every time but only with a slave slapd doing the search. > The segfault does not occur when searching with ldapsearch. > > A backtrace can be found at the provided URL. Thanks for the report, a fix is now in CVS HEAD. Please test. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5590) Method for storing last successful bind by a user
by prieheck＠iwu.edu 02 Jul '08

02 Jul '08

Full_Name: Pat Riehecky Version: 2.4.10 OS: Ubuntu Linux 8.04, kernel 2.6.24 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (198.178.132.251) Our internal auditing system is poor. Periodically I am asked about how often certain classes of users use our system. As a University our account database just grows and grows. It would be nice to have a metric for how often alumni use their accounts. I envision something similar to the modifyTimestamp that OpenLDAP already records. This will assist with various types of tracking in environments where ppolicy cannot be implemented due to either politics or limitations.

1 0

(ITS#5589) Segfault in syncrepl on provider
by michael＠fladi.at 02 Jul '08

02 Jul '08

Full_Name: Michael Fladischer Version: 2.4.10 OS: Debian GNU/Linux Unstable URL: http://storage.fladi.at/~fladischer.michael/slapd/ Submission from: (NULL) (193.170.104.18) I'm running two instances of slapd (2.4.10 from Debian/Unstable) on separate machines. One is the master/provider and the other the slave, pulling changes via syncrepl from the provider. Since 2.4.9 the provider slapd instance crashes with a segfault when the slave attempts to search for the latest changes. If there are no changes the operation completes successful. If I change an attribute of an object on the master (add/delete/modify) the slapd instance crashes with a segfault immediately the moment when the slave starts his search. I can reproduce this every time but only with a slave slapd doing the search. The segfault does not occur when searching with ldapsearch. A backtrace can be found at the provided URL.

1 0

(ITS#5588) Parsing of serialNumber looks broken
by ando＠sys-net.it 01 Jul '08

01 Jul '08

Full_Name: Pierangelo Masarati Version: HEAD/re24 OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.72.89.40) Submitted by: ando Parsing of the "0xXXXX" and "'XX'H" form of hexadecimal serialNumber seems to be broken in serialNumberAndIssuerCheck(); also, escaping of double double dquotes in issuer is missing. A patch is coming. p.

1 0

Re: (ITS#5583) slapadd core dumps
by dieter＠dkluenter.de 01 Jul '08

01 Jul '08

Pierangelo Masarati <ando(a)sys-net.it> writes: > Dieter Kluenter wrote: >> Pierangelo Masarati <ando(a)sys-net.it> writes: >> >>> dieter(a)dkluenter.de wrote: >>> >>>> Sorry, forgot it, >>> Should be fixed in HEAD, please test. I infer you're using multiple >>> instances of slapo-dynlist(5) in your slapd.conf, aren't you? >> No, just one instance. > > Sounds odd, because the error was related to executing slapo-dynlist's > db_open() function while the static vars holding the dgIdentity (and > the dgAuthz) attrs being already initialized. Can you test the fix to > overlays/dynlist.c 1.51->1.52? It is for HEAD, but should apply > straightforwardly to 2.4. patch applied, compiled, succesfully installed. -Dieter -- Dieter Klünter | Systemberatung http://www.dkluenter.de GPG Key ID:8EF7B6C6

1 0

(ITS#5587) some changes in cn=config are not written to slapd.d
by jstrunk＠math.utexas.edu 01 Jul '08

01 Jul '08

Full_Name: Jeff Strunk Version: 2.4.9-0ubuntu0.8.04 OS: Ubuntu 8.04 URL: Submission from: (NULL) (146.6.139.147) I am setting up a new LDAP server and trying to utilize the cn=config configuration style. While testing it out, I noticed that changes I make to cn=config are getting written to /etc/ldap/slapd.d/cn=config/ldif, but changes made to olcDatabase={1}hdb,cn=config are not getting written to /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif or anything else. What could be happening? slapd is started with: slapd -g openldap -u openldap -F /etc/ldap/slapd.d I think my permissions are correct: /etc/ldap/slapd.d total 8 drwxr-xr-x 4 openldap openldap 4096 2008-07-01 10:43 cn=config -rw------- 1 openldap openldap 1325 2008-07-01 10:51 cn=config.ldif /etc/ldap/slapd.d/cn=config total 60 -rw------- 1 openldap openldap 395 2008-07-01 09:06 cn=module{0}.ldif drwxr-xr-x 2 openldap openldap 4096 2008-06-27 13:59 cn=schema -rw------- 1 openldap openldap 30183 2008-06-27 13:59 cn=schema.ldif -rw------- 1 openldap openldap 659 2008-07-01 10:43 olcDatabase={0}config.ldif -rw------- 1 openldap openldap 500 2008-06-27 13:59 olcDatabase={-1}frontend.ldif drwxr-xr-x 2 openldap openldap 4096 2008-07-01 10:43 olcDatabase={1}hdb -rw------- 1 openldap openldap 7805 2008-07-01 10:05 olcDatabase={1}hdb.ldif /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb total 4 -rw------- 1 openldap openldap 464 2008-07-01 10:43 olcOverlay={0}syncprov.ldif /etc/ldap/slapd.d/cn=config/cn=schema total 76 -rw------- 1 openldap openldap 15428 2008-06-27 13:59 cn={0}core.ldif -rw------- 1 openldap openldap 11290 2008-06-27 13:59 cn={1}cosine.ldif -rw------- 1 openldap openldap 2784 2008-06-27 13:59 cn={2}inetorgperson.ldif -rw------- 1 openldap openldap 6420 2008-06-27 13:59 cn={3}nis.ldif -rw------- 1 openldap openldap 842 2008-06-27 13:59 cn={4}autofs.ldif -rw------- 1 openldap openldap 11791 2008-06-27 13:59 cn={5}samba.ldif -rw------- 1 openldap openldap 1829 2008-06-27 13:59 cn={6}sudo.ldif -rw------- 1 openldap openldap 10677 2008-06-27 13:59 cn={7}pykota.ldif -rw------- 1 openldap openldap 1494 2008-06-27 13:59 cn={8}local.ldif

1 0

Re: (ITS#5581) slapd: search.c:970: oc_filter: Assertion `f != ((void *)0)' failed.
by amg1127＠cefetrs.tche.br 01 Jul '08

01 Jul '08

Strange... Apparently, your message did not reach my mail server... Anyway... When I did your proposed change, the server did the right thing: $ ./crash-server.sh adding new entry "cn=bugtestgroup_3301,ou=groups,dc=cefetrs,dc=tche,dc=br" ldap_add: Constraint violation (19) additional info: some attributes not unique -------------------------- Humm... Now, I know why... Your mail server does not have a 'PTR record'... Jul 1 08:59:20 cmi postfix/smtpd[26501]: NOQUEUE: reject: RCPT from unknown[194.244.21.122]: 450 4.7.1 Client host rejected: cannot find your hostname, [194.244.21.122]; from=<ando(a)sys-net.it> to=<amg1127(a)cefetrs.tche.br> proto=ESMTP helo=<mail2.sys-net.it> Jul 1 10:09:19 cmi postfix/smtpd[30576]: NOQUEUE: reject: RCPT from unknown[194.244.21.122]: 450 4.7.1 Client host rejected: cannot find your hostname, [194.244.21.122]; from=<ando(a)sys-net.it> to=<amg1127(a)cefetrs.tche.br> proto=ESMTP helo=<mail2.sys-net.it> Jul 1 11:19:22 cmi postfix/smtpd[3467]: NOQUEUE: reject: RCPT from unknown[194.244.21.122]: 450 4.7.1 Client host rejected: cannot find your hostname, [194.244.21.122]; from=<ando(a)sys-net.it> to=<amg1127(a)cefetrs.tche.br> proto=ESMTP helo=<mail2.sys-net.it> Jul 1 12:29:20 cmi postfix/smtpd[10287]: NOQUEUE: reject: RCPT from unknown[194.244.21.122]: 450 4.7.1 Client host rejected: cannot find your hostname, [194.244.21.122]; from=<ando(a)sys-net.it> to=<amg1127(a)cefetrs.tche.br> proto=ESMTP helo=<mail2.sys-net.it> # host 194.244.21.122 Host 122.21.244.194.in-addr.arpa not found: 3(NXDOMAIN) -- Anderson Medeiros Gomes amg1127(a)cefetrs.tche.br Coordenadoria de Manutenção e Redes Centro Federal de Educação Tecnológica de Pelotas http://www.cefetrs.tche.br/ > Your logs show something relatively odd: apparently, slapo-unique(5) > is trying to perform an internal search with a really malformed > filter: > > ==> unique_search , > str2filter "(&objectClass=posixGroup(|(gidNumber=1000)))" > put_filter: "(&objectClass=posixGroup(|(gidNumber=1000)))" > put_filter: AND > put_filter_list "objectClass=posixGroup(|(gidNumber=1000))" > > Can you please try using "(objectClass=posixGroup)" instead of > "objectClass=posixGroup" as the unique_uri filter in your test > slapd.conf? > > p. > > > Ing. Pierangelo Masarati > OpenLDAP Core Team > > SysNet s.r.l. > via Dossi, 8 - 27100 Pavia - ITALIA > http://www.sys-net.it > ----------------------------------- > Office: +39 02 23998309 > Mobile: +39 333 4963172 > Email: ando(a)sys-net.it > -----------------------------------

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs