openldap-bugs

openldap-bugs@openldap.org

1 participants
20961 discussions

Re: (ITS#8444) Out-of-sync issue with memberOf overlay, Delta-syncrepl MMR and >2 nodes
by okuznik＠symas.com 23 Aug '17

23 Aug '17

It is caused by the cookie not containing CSN and a race between the syncCookie check in do_syncrep2 and syncrepl_message_to_op. This race is probably fine with plain syncrepl which is idempotent, but deltasync changes get their own dn in each accesslog instance and some can be applied twice unless we know how to find out we've already seen them - they need to mention the CSN. The CSN itself gets lost on at least one occasion - when there's a checkpoint triggered. Not 100 % sure why the cookie gets eaten because of it, the op pointer is different between the syncprov_op_response that calls syncprov_checkpoint and the one that decides CSN hasn't changed. --=20 Ond=C5=99ej Kuzn=C3=ADk Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP

1 0

Re: (ITS#8716) Install error
by quanah＠symas.com 21 Aug '17

21 Aug '17

--On Monday, August 21, 2017 4:45 PM +0000 germinouz(a)gmail.com wrote: Hello, The ITS system is for reporting bugs in the software, not for asking question on how to do things such as build software. Please redirect your question to openldap-technical(a)openldap.org if you need help with how to set up a proper environment for building software. I would note the error is rather obvious from the config.log you supplied: > configure:5786: cc -I /usr/local/BerkeleyDB/6.2.32/include > -L/usr/local/lib -L/usr/local/BerkeleyDB/6.2.32/lib > -R/data/BerkeleyDB/6.2.32/lib conftest.c >> &5 > cc: error: unrecognized command line option '-R' Hope that helps! This ITS will be closed. Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

(ITS#8716) Install error
by germinouz＠gmail.com 21 Aug '17

21 Aug '17

Full_Name: Frank Vincent Version: 2.4.45 OS: RedHat7 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.93.27.65) When I install on RH7, I get an error. [root@localhost openldap-2.4.45]# ./configure --prefix=/data/openldap Configuring OpenLDAP 2.4.45-Release ... checking build system type... x86_64-unknown-linux-gnu checking host system type... x86_64-unknown-linux-gnu checking target system type... x86_64-unknown-linux-gnu checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for gawk... gawk checking whether make sets $(MAKE)... yes checking configure arguments... done checking for cc... cc checking for ar... ar checking for style of include used by make... GNU checking whether the C compiler works... no configure: error: in `/root/data/openldap-2.4.45': configure: error: C compiler cannot create executables See `config.log' for more details. [root@localhost openldap-2.4.45]# cat config.log This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by configure, which was generated by GNU Autoconf 2.65. Invocation command line was $ ./configure --prefix=/data/openldap ## --------- ## ## Platform. ## ## --------- ## hostname = localhost.localdomain uname -m = x86_64 uname -r = 3.10.0-514.el7.x86_64 uname -s = Linux uname -v = #1 SMP Wed Oct 19 11:24:13 EDT 2016 /usr/bin/uname -p = x86_64 /bin/uname -X = unknown /bin/arch = x86_64 /usr/bin/arch -k = unknown /usr/convex/getsysinfo = unknown /usr/bin/hostinfo = unknown /bin/machine = unknown /usr/bin/oslevel = unknown /bin/universe = unknown PATH: /usr/local/sbin PATH: /usr/local/bin PATH: /usr/sbin PATH: /usr/bin PATH: /root/bin PATH: /usr/java/jdk1.8.0_131/bin PATH: /opt/apache-tomcat-8.0.36/bin ## ----------- ## ## Core tests. ## ## ----------- ## configure:2890: checking build system type configure:2904: result: x86_64-unknown-linux-gnu configure:2924: checking host system type configure:2937: result: x86_64-unknown-linux-gnu configure:2957: checking target system type configure:2970: result: x86_64-unknown-linux-gnu configure:3012: checking for a BSD-compatible install configure:3080: result: /usr/bin/install -c configure:3091: checking whether build environment is sane configure:3128: result: yes configure:3190: checking for gawk configure:3206: found /usr/bin/gawk configure:3217: result: gawk configure:3228: checking whether make sets $(MAKE) configure:3250: result: yes configure:3467: checking configure arguments configure:5060: result: done configure:5232: checking for cc configure:5248: found /usr/bin/cc configure:5259: result: cc configure:5282: checking for ar configure:5298: found /usr/bin/ar configure:5309: result: ar configure:5367: checking for style of include used by make configure:5395: result: GNU configure:5724: checking for C compiler version configure:5733: cc --version >&5 cc (GCC) 4.8.5 20150623 (Red Hat 4.8.5-11) Copyright (C) 2015 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. configure:5744: $? = 0 configure:5733: cc -v >&5 Using built-in specs. COLLECT_GCC=cc COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-redhat-linux/4.8.5/lto-wrapper Target: x86_64-redhat-linux Configured with: ../configure --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/info --with-bugurl=http://bugzilla.redhat.com/bugzilla --enable-bootstrap --enable-shared --enable-threads=posix --enable-checking=release --with-system-zlib --enable-__cxa_atexit --disable-libunwind-exceptions --enable-gnu-unique-object --enable-linker-build-id --with-linker-hash-style=gnu --enable-languages=c,c++,objc,obj-c++,java,fortran,ada,go,lto --enable-plugin --enable-initfini-array --disable-libgcj --with-isl=/builddir/build/BUILD/gcc-4.8.5-20150702/obj-x86_64-redhat-linux/isl-install --with-cloog=/builddir/build/BUILD/gcc-4.8.5-20150702/obj-x86_64-redhat-linux/cloog-install --enable-gnu-indirect-function --with-tune=generic --with-arch_32=x86-64 --build=x86_64-redhat-linux Thread model: posix gcc version 4.8.5 20150623 (Red Hat 4.8.5-11) (GCC) configure:5744: $? = 0 configure:5733: cc -V >&5 cc: error: unrecognized command line option '-V' cc: fatal error: no input files compilation terminated. configure:5744: $? = 4 configure:5733: cc -qversion >&5 cc: error: unrecognized command line option '-qversion' cc: fatal error: no input files compilation terminated. configure:5744: $? = 4 configure:5764: checking whether the C compiler works configure:5786: cc -I /usr/local/BerkeleyDB/6.2.32/include -L/usr/local/lib -L/usr/local/BerkeleyDB/6.2.32/lib -R/data/BerkeleyDB/6.2.32/lib conftest.c >&5 cc: error: unrecognized command line option '-R' configure:5790: $? = 1 configure:5828: result: no configure: failed program was: | /* confdefs.h */ | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #define PACKAGE_URL "" | #define OPENLDAP_PACKAGE "OpenLDAP" | #define OPENLDAP_VERSION "2.4.45" | #define LDAP_VENDOR_VERSION 20445 | #define LDAP_VENDOR_VERSION_MAJOR 2 | #define LDAP_VENDOR_VERSION_MINOR 4 | #define LDAP_VENDOR_VERSION_PATCH 45 | #define HAVE_MKVERSION 1 | /* end confdefs.h. */ | | int | main () | { | | ; | return 0; | } configure:5833: error: in `/root/data/openldap-2.4.45': configure:5837: error: C compiler cannot create executables See `config.log' for more details. ## ---------------- ## ## Cache variables. ## ## ---------------- ## ac_cv_build=x86_64-unknown-linux-gnu ac_cv_env_CC_set= ac_cv_env_CC_value= ac_cv_env_CFLAGS_set= ac_cv_env_CFLAGS_value= ac_cv_env_CPPFLAGS_set=set ac_cv_env_CPPFLAGS_value='-I /usr/local/BerkeleyDB/6.2.32/include' ac_cv_env_CPP_set= ac_cv_env_CPP_value= ac_cv_env_LDFLAGS_set=set ac_cv_env_LDFLAGS_value='-L/usr/local/lib -L/usr/local/BerkeleyDB/6.2.32/lib -R/data/BerkeleyDB/6.2.32/lib' ac_cv_env_LIBS_set= ac_cv_env_LIBS_value= ac_cv_env_build_alias_set= ac_cv_env_build_alias_value= ac_cv_env_host_alias_set= ac_cv_env_host_alias_value= ac_cv_env_target_alias_set= ac_cv_env_target_alias_value= ac_cv_host=x86_64-unknown-linux-gnu ac_cv_path_install='/usr/bin/install -c' ac_cv_prog_AR=ar ac_cv_prog_AWK=gawk ac_cv_prog_CC=cc ac_cv_prog_make_make_set=yes ac_cv_shtool=build/shtool ac_cv_target=x86_64-unknown-linux-gnu ## ----------------- ## ## Output variables. ## ## ----------------- ## ACLOCAL='${SHELL} /root/data/openldap-2.4.45/build/missing --run aclocal-1.9' AMDEPBACKSLASH='\' AMDEP_FALSE='#' AMDEP_TRUE='' AMTAR='${SHELL} /root/data/openldap-2.4.45/build/missing --run tar' AR='ar' AS='' AUTH_LIBS='' AUTOCONF='${SHELL} /root/data/openldap-2.4.45/build/missing --run autoconf' AUTOHEADER='${SHELL} /root/data/openldap-2.4.45/build/missing --run autoheader' AUTOMAKE='${SHELL} /root/data/openldap-2.4.45/build/missing --run automake-1.9' AWK='gawk' BDB_LIBS='' BUILD_ACCESSLOG='no' BUILD_AUDITLOG='no' BUILD_BDB='no' BUILD_COLLECT='' BUILD_CONSTRAINT='no' BUILD_DDS='no' BUILD_DENYOP='no' BUILD_DEREF='no' BUILD_DNSSRV='no' BUILD_DYNGROUP='no' BUILD_DYNLIST='no' BUILD_HDB='no' BUILD_LASTMOD='no' BUILD_LDAP='no' BUILD_LIBS_DYNAMIC='' BUILD_MDB='no' BUILD_MEMBEROF='no' BUILD_META='no' BUILD_MONITOR='no' BUILD_NDB='no' BUILD_NULL='no' BUILD_PASSWD='no' BUILD_PERL='no' BUILD_PPOLICY='no' BUILD_PROXYCACHE='no' BUILD_REFINT='no' BUILD_RELAY='no' BUILD_RETCODE='no' BUILD_RWM='no' BUILD_SEQMOD='no' BUILD_SHELL='no' BUILD_SLAPD='no' BUILD_SLAPI='no' BUILD_SOCK='no' BUILD_SQL='no' BUILD_SSSVLV='no' BUILD_SYNCPROV='no' BUILD_THREAD='no' BUILD_TRANSLUCENT='no' BUILD_UNIQUE='no' BUILD_VALSORT='no' CC='cc' CCDEPMODE='' CFLAGS='' CPP='' CPPFLAGS='-I /usr/local/BerkeleyDB/6.2.32/include' CYGPATH_W='echo' DEFS='' DEPDIR='.deps' DLLTOOL='' ECHO='echo' ECHO_C='' ECHO_N='-n' ECHO_T='' EGREP='' EXEEXT='' GREP='' ICU_LIBS='' INSTALL_DATA='${INSTALL} -m 644' INSTALL_PROGRAM='${INSTALL}' INSTALL_SCRIPT='${INSTALL}' INSTALL_STRIP_PROGRAM='${SHELL} $(install_sh) -c -s' KRB4_LIBS='' KRB5_LIBS='' LDAP_LIBS='' LDFLAGS='-L/usr/local/lib -L/usr/local/BerkeleyDB/6.2.32/lib -R/data/BerkeleyDB/6.2.32/lib' LIBOBJS='' LIBS='' LIBSLAPI='' LIBSRCS='' LIBTOOL='' LN_S='' LTHREAD_LIBS='' LTLIBOBJS='' LTSTATIC='' LUTIL_LIBS='' MAKEINFO='${SHELL} /root/data/openldap-2.4.45/build/missing --run makeinfo' MODULES_LIBS='' MOD_PERL_LDFLAGS='' MYSQL='' OBJDUMP='' OBJEXT='' OL_MKDEP='' OL_MKDEP_FLAGS='' OPENLDAP_LIBRELEASE='2.4' OPENLDAP_LIBVERSION='12:8:10' OPENLDAP_RELEASE_DATE='2017/06/01' PACKAGE='OpenLDAP' PACKAGE_BUGREPORT='' PACKAGE_NAME='' PACKAGE_STRING='' PACKAGE_TARNAME='' PACKAGE_URL='' PACKAGE_VERSION='' PATH_SEPARATOR=':' PERLBIN='' PERL_CPPFLAGS='' PLAT='' RANLIB='' SASL_LIBS='' SET_MAKE='' SHELL='/bin/sh' SLAPD_DYNAMIC_BACKENDS='' SLAPD_DYNAMIC_OVERLAYS='' SLAPD_GMP_LIBS='' SLAPD_LIBS='' SLAPD_MODULES_CPPFLAGS='' SLAPD_MODULES_LDFLAGS='' SLAPD_NDB_INCS='' SLAPD_NDB_LIBS='' SLAPD_NO_STATIC='' SLAPD_PERL_LDFLAGS='' SLAPD_SLAPI_DEPEND='' SLAPD_SLP_LIBS='' SLAPD_SQL_INCLUDES='' SLAPD_SQL_LDFLAGS='' SLAPD_SQL_LIBS='' SLAPD_STATIC_BACKENDS='back-ldif' SLAPD_STATIC_OVERLAYS='' SLAPI_LIBS='' STRIP='' TLS_LIBS='' VERSION='2.4.45' WITH_ACI_ENABLED='' WITH_MODULES_ENABLED='' WITH_SASL='' WITH_TLS='' WRAP_LIBS='' ac_ct_CC='' am__fastdepCC_FALSE='' am__fastdepCC_TRUE='' am__include='include' am__leading_dot='.' am__quote='' am__tar='${AMTAR} chof - "$$tardir"' am__untar='${AMTAR} xf -' bindir='${exec_prefix}/bin' build='x86_64-unknown-linux-gnu' build_alias='' build_cpu='x86_64' build_os='linux-gnu' build_vendor='unknown' datadir='${datarootdir}' datarootdir='${prefix}/share' docdir='${datarootdir}/doc/${PACKAGE}' dvidir='${docdir}' exec_prefix='NONE' host='x86_64-unknown-linux-gnu' host_alias='' host_cpu='x86_64' host_os='linux-gnu' host_vendor='unknown' htmldir='${docdir}' includedir='${prefix}/include' infodir='${datarootdir}/info' install_sh='/root/data/openldap-2.4.45/build/install-sh' ldap_subdir='/openldap' libdir='${exec_prefix}/lib' libexecdir='${exec_prefix}/libexec' localedir='${datarootdir}/locale' localstatedir='${prefix}/var' mandir='${datarootdir}/man' mkdir_p='mkdir -p --' oldincludedir='/usr/include' pdfdir='${docdir}' prefix='/data/openldap' program_transform_name='s,x,x,' psdir='${docdir}' sbindir='${exec_prefix}/sbin' sharedstatedir='${prefix}/com' sysconfdir='${prefix}/etc' target='x86_64-unknown-linux-gnu' target_alias='' target_cpu='x86_64' target_os='linux-gnu' target_vendor='unknown' top_builddir='/root/data/openldap-2.4.45' ## ----------- ## ## confdefs.h. ## ## ----------- ## /* confdefs.h */ #define PACKAGE_NAME "" #define PACKAGE_TARNAME "" #define PACKAGE_VERSION "" #define PACKAGE_STRING "" #define PACKAGE_BUGREPORT "" #define PACKAGE_URL "" #define OPENLDAP_PACKAGE "OpenLDAP" #define OPENLDAP_VERSION "2.4.45" #define LDAP_VENDOR_VERSION 20445 #define LDAP_VENDOR_VERSION_MAJOR 2 #define LDAP_VENDOR_VERSION_MINOR 4 #define LDAP_VENDOR_VERSION_PATCH 45 #define HAVE_MKVERSION 1 configure: exit 77

1 0

(ITS#8715) Typo in man page description of olcTLSCipherSuite?
by james＠turnersoft.co.uk 19 Aug '17

19 Aug '17

Full_Name: James Turner Version: 2.4 OS: Ubuntu 16.04 LTS URL: Submission from: (NULL) (81.86.27.193) File: /doc/man/man5/slapd-config.5 The following example is given at line 832 (correct for Git master branch at time of writing): TLSCiphersuite SECURE256:!AES-128-CBC Shouldn't this read: olcTLSCiphersuite: SECURE256:!AES-128-CBC

1 0

Re: (ITS#8714) RFE: Sendout EXTENDED operation message in back-sock
by michael＠stroeder.com 18 Aug '17

18 Aug '17

This is a multi-part message in MIME format. --------------4BA376E6A3936AB8C247B47A Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The attached patch file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Michael Ströder <michael(a)stroeder.com>. I have not assigned rights and/or interest in this work to any party. I, Michael Ströder, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. This patch can also be found here: ftp://ftp.openldap.org/incoming/0001-ITS-8714-Send-out-EXTENDED-operation-m… --------------4BA376E6A3936AB8C247B47A Content-Type: text/x-patch; name="0001-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename*0="0001-ITS-8714-Send-out-EXTENDED-operation-message-from-back-"; filename*1="sock.patch" =46rom 732c5646e0a03be8b58e52527b25742f0495807e Mon Sep 17 00:00:00 2001 From: =3D?UTF-8?q?Michael=3D20Str=3DC3=3DB6der?=3D <michael(a)stroeder.com>= Date: Fri, 18 Aug 2017 18:47:41 +0200 Subject: [PATCH] ITS#8714 Send out EXTENDED operation message from back-s= ock to external program --- doc/man/man5/slapd-sock.5 | 19 +++++++++++- servers/slapd/back-sock/Makefile.in | 4 +-- servers/slapd/back-sock/config.c | 12 ++++++-- servers/slapd/back-sock/extended.c | 58 ++++++++++++++++++++++++++++++= ++++++ servers/slapd/back-sock/init.c | 2 +- servers/slapd/back-sock/proto-sock.h | 2 ++ 6 files changed, 91 insertions(+), 6 deletions(-) create mode 100644 servers/slapd/back-sock/extended.c diff --git a/doc/man/man5/slapd-sock.5 b/doc/man/man5/slapd-sock.5 index 1ac4f7fdd..0c4fc3fdd 100644 --- a/doc/man/man5/slapd-sock.5 +++ b/doc/man/man5/slapd-sock.5 @@ -49,7 +49,7 @@ be sent and from which replies are received. =20 When used as an overlay, these additional directives are defined: .TP -.B sockops [ bind | unbind | search | compare | modify | modrdn | add | = delete ]* +.B sockops [ bind | unbind | search | compare | modify | modrdn | add | = delete | extended ]* Specify which request types to send to the external program. The default= is empty (no requests are sent). .TP @@ -115,6 +115,18 @@ dn: <DN> .PP .RS .nf +EXTENDED +msgid: <message id> +<repeat { "suffix:" <database suffix DN> }> +oid: <OID> +valuelen: <length of <value>> +value: <credentials> +<blank line> +.fi +.RE +.PP +.RS +.nf MODIFY msgid: <message id> <repeat { "suffix:" <database suffix DN> }> @@ -292,6 +304,11 @@ access to the pseudo_attribute of the searchBase; .B search (=3Ds) access to the attributes and values used in the filter is not checked. +.LP +The +.B extended +operation does not require any access special rights. +The external program has to implement any sort of access control. =20 .SH EXAMPLE There is an example script in the slapd/back\-sock/ directory diff --git a/servers/slapd/back-sock/Makefile.in b/servers/slapd/back-soc= k/Makefile.in index 3e527e545..efb916246 100644 --- a/servers/slapd/back-sock/Makefile.in +++ b/servers/slapd/back-sock/Makefile.in @@ -18,9 +18,9 @@ ## in OpenLDAP Software. =20 SRCS =3D init.c config.c opensock.c search.c bind.c unbind.c add.c \ - delete.c modify.c modrdn.c compare.c result.c + delete.c modify.c modrdn.c compare.c result.c extended.c OBJS =3D init.lo config.lo opensock.lo search.lo bind.lo unbind.lo add.l= o \ - delete.lo modify.lo modrdn.lo compare.lo result.lo + delete.lo modify.lo modrdn.lo compare.lo result.lo extended.lo =20 LDAP_INCDIR=3D ../../../include =20 LDAP_LIBDIR=3D ../../../libraries diff --git a/servers/slapd/back-sock/config.c b/servers/slapd/back-sock/c= onfig.c index dc3f1365c..2dcf68bf6 100644 --- a/servers/slapd/back-sock/config.c +++ b/servers/slapd/back-sock/config.c @@ -106,6 +106,7 @@ static ConfigOCs osocs[] =3D { #define SOCK_OP_MODRDN 0x020 #define SOCK_OP_ADD 0x040 #define SOCK_OP_DELETE 0x080 +#define SOCK_OP_EXTENDED 0x100 =20 #define SOCK_REP_RESULT 0x001 #define SOCK_REP_SEARCH 0x002 @@ -127,6 +128,7 @@ static slap_verbmasks ov_ops[] =3D { { BER_BVC("modrdn"), SOCK_OP_MODRDN }, { BER_BVC("add"), SOCK_OP_ADD }, { BER_BVC("delete"), SOCK_OP_DELETE }, + { BER_BVC("extended"), SOCK_OP_EXTENDED }, { BER_BVNULL, 0 } }; =20 @@ -249,7 +251,9 @@ static BI_op_bind *sockfuncs[] =3D { sock_back_modify, sock_back_modrdn, sock_back_add, - sock_back_delete + sock_back_delete, + 0, /* abandon not supported */ + sock_back_extended }; =20 static const int sockopflags[] =3D { @@ -260,7 +264,9 @@ static const int sockopflags[] =3D { SOCK_OP_MODIFY, SOCK_OP_MODRDN, SOCK_OP_ADD, - SOCK_OP_DELETE + SOCK_OP_DELETE, + 0, /* abandon not supported */ + SOCK_OP_EXTENDED }; =20 static int sock_over_op( @@ -283,6 +289,7 @@ static int sock_over_op( case LDAP_REQ_MODRDN: which =3D op_modrdn; break; case LDAP_REQ_ADD: which =3D op_add; break; case LDAP_REQ_DELETE: which =3D op_delete; break; + case LDAP_REQ_EXTENDED: which =3D op_extended; break; default: return SLAP_CB_CONTINUE; } @@ -365,6 +372,7 @@ sock_over_setup() sockover.on_bi.bi_op_modrdn =3D sock_over_op; sockover.on_bi.bi_op_add =3D sock_over_op; sockover.on_bi.bi_op_delete =3D sock_over_op; + sockover.on_bi.bi_extended =3D sock_over_op; sockover.on_response =3D sock_over_response; =20 sockover.on_bi.bi_cf_ocs =3D osocs; diff --git a/servers/slapd/back-sock/extended.c b/servers/slapd/back-sock= /extended.c new file mode 100644 index 000000000..15493ea98 --- /dev/null +++ b/servers/slapd/back-sock/extended.c @@ -0,0 +1,58 @@ +/* extended.c - sock backend extended routines */ +/* $OpenLDAP$ */ +/* This work is part of OpenLDAP Software <http://www.openldap.org/>. + * + * Copyright 2000-2017 The OpenLDAP Foundation. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted only as authorized by the OpenLDAP + * Public License. + * + * A copy of this license is available in the file LICENSE in the + * top-level directory of the distribution or, alternatively, at + * <http://www.OpenLDAP.org/license.html>. + */ + +#include "portable.h" + +#include <stdio.h> +#include <ac/string.h> + +#include "slap.h" +#include "back-sock.h" + +int +sock_back_extended( Operation *op, SlapReply *rs ) +{ + int rc; + struct sockinfo *si =3D (struct sockinfo *) op->o_bd->be_private; + FILE *fp; + + Debug( LDAP_DEBUG_ARGS, "=3D=3D> sock_back_extended(%s)\n", + op->ore_reqoid.bv_val, op->o_req_dn.bv_val, 0 ); + + if ( (fp =3D opensock( si->si_sockpath )) =3D=3D NULL ) { + send_ldap_error( op, rs, LDAP_OTHER, + "could not open socket" ); + return( -1 ); + } + + /* write out the request to the extended process */ + fprintf( fp, "EXTENDED\n" ); + fprintf( fp, "msgid: %ld\n", (long) op->o_msgid ); + sock_print_conn( fp, op->o_conn, si ); + sock_print_suffixes( fp, op->o_bd ); + fprintf( fp, "oid: %s\n", op->ore_reqoid.bv_val ); + if (op->ore_reqdata) { + fprintf( fp, "valuelen: %lu\n", op->ore_reqdata->bv_len ); + fprintf( fp, "value: %s\n", op->ore_reqdata->bv_val ); + } + fprintf( fp, "\n" ); + + /* read in the results and send them along */ + rc =3D sock_read_and_send_results( op, rs, fp ); + fclose( fp ); + + return( rc ); +} diff --git a/servers/slapd/back-sock/init.c b/servers/slapd/back-sock/ini= t.c index dcfe61a44..92e68782f 100644 --- a/servers/slapd/back-sock/init.c +++ b/servers/slapd/back-sock/init.c @@ -53,7 +53,7 @@ sock_back_initialize( bi->bi_op_delete =3D sock_back_delete; bi->bi_op_abandon =3D 0; =20 - bi->bi_extended =3D 0; + bi->bi_extended =3D sock_back_extended; =20 bi->bi_chk_referrals =3D 0; =20 diff --git a/servers/slapd/back-sock/proto-sock.h b/servers/slapd/back-so= ck/proto-sock.h index fa02ab896..8b3b5f3ef 100644 --- a/servers/slapd/back-sock/proto-sock.h +++ b/servers/slapd/back-sock/proto-sock.h @@ -40,6 +40,8 @@ extern BI_op_modrdn sock_back_modrdn; extern BI_op_add sock_back_add; extern BI_op_delete sock_back_delete; =20 +extern BI_op_extended sock_back_extended; + extern int sock_back_init_cf( BackendInfo *bi ); =20 LDAP_END_DECL --=20 2.14.0 --------------4BA376E6A3936AB8C247B47A--

1 0

(ITS#8714) RFE: Sendout EXTENDED operation message in back-sock
by michael＠stroeder.com 18 Aug '17

18 Aug '17

Full_Name: Michael Str.der Version: master / RE24 OS: irrelevant URL: Submission from: (NULL) (213.240.182.101) back-sock should also send extended operations to external listener. Patch will follow.

1 0

(ITS#8713) Delete slapd-ldbm.5 man page
by quanah＠openldap.org 16 Aug '17

16 Aug '17

Full_Name: Quanah Gibson-Mount Version: HEAD OS: N/A URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (47.208.148.239) We should delete the stub man page for slapd-ldbm(5) from our repository, as it died with OpenLDAP 2.3.

1 0

Re: (ITS#8712) haproxy
by michael＠stroeder.com 16 Aug '17

16 Aug '17

dup of ITS#8711

1 0

Re: (ITS#8711) haproxy
by michael＠stroeder.com 16 Aug '17

16 Aug '17

This is a cryptographically signed message in MIME format. --------------ms000008090101090902090203 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable marceloandril(a)yahoo.com.br wrote: > Full_Name: marcelo > Version: 2.4.44 > OS: centos 7.2 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (177.69.83.5) >=20 >=20 > Good morning, I'm having a problem using syncrepl by haproxy. The serve= r can not > re-create the database. I am using mdb. 1. The ITS is for reporting bugs to the OpenLDAP team, not for asking usa= ge questions. Please post those to openldap-technical mailing list: https://www.openldap.org/lists/mm/listinfo/openldap-technical 2. I'd recommend against pointing to a HA address in syncrepl config stat= ements. You can have more than one syncrepl statement within a database configuration and= let slapd do the fail-over to another available provider internally. Ciao, Michael. --------------ms000008090101090902090203 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CucwggT9MIID5aADAgECAhBFRleVrRF8X5GwbV0tcLCgMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwOTE2MDcxNjUxWhcNMTkxMjE2MDcxNjUxWjBEMR0wGwYDVQQDDBRtaWNo YWVsQHN0cm9lZGVyLmNvbTEjMCEGCSqGSIb3DQEJARYUbWljaGFlbEBzdHJvZWRlci5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMBt5jtuLXsNQ5U7rBbZit8sknIwz hfaousT3d/fssQ6qZwe9l1yklILSXVMqI7/bxbiqcd3zrz+imdSlZPrFBHGfh04DZHCfss2F RwSswGejqP1qE3hPvZi96wFfOMqenpN+pSXqNJ1OPBCJ8a+8ZEioFKoEj3HkCCXjbmezAgms FuA7aFE9BfjJ2eQKw8B9G8X1FjvOTinYSZ2F+qHpKgywl4HTx0dMnYy+Pwu4DDIHkEaVH+uj K1/ed76WUEH51mX9m2Xu0onfQlSM3me6EvAAZiIDsCEbF9WttRuJbpfCFo0m2uW7BBugS7EG Jro1nRSQVnpJyTFgHb5EGMVVAgMBAAGjggG4MIIBtDAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0l BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFFh1801TSuxT Nltnv9rOjrZzUUgNMB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUF BwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUF BzAChi1odHRwOi8vYWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYD VR0fBDEwLzAtoCugKYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3Js MB8GA1UdEQQYMBaBFG1pY2hhZWxAc3Ryb2VkZXIuY29tMCMGA1UdEgQcMBqGGGh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tLzBHBgNVHSAEQDA+MDwGCysGAQQBgbU3AQIFMC0wKwYIKwYBBQUH AgEWH2h0dHBzOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kwDQYJKoZIhvcNAQELBQADggEB AKiJ9wpjJeHdEzHDZyqmhn4cHcRj9Ag7ZQK0meq1N3oQ9M1YeVge6vZe20LXojgXsNUQGLSt 1lW2s7fABkL9CF+/RtWznHxlp4YpWX/RgbHBo3uXKNA5JUOjbxQ2+1b1jaTp/FUrSIISAxgd RpeYAODJ0db1x8Q+l66DtIVjj7ktWISdJWE2Opn4QnaRwdj6n35Rul4S2ikUsmxtGrHLpjRR XJqbsGa0RZdJyUKlZ2ZRAoRz4jKHOogQcig937sR5Ut2pGOhrScEhgARY2c8Gs2olRTL3pue mE4vjY0g1Nwr9RzeFwMuasiFh4yD34i6jIRfoNzuLPgydjsJ0grw0akwggXiMIIDyqADAgEC AhBrp4p9CteI1lEK+Vnk57ThMA0GCSqGSIb3DQEBCwUAMH0xCzAJBgNVBAYTAklMMRYwFAYD VQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0 ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe Fw0xNTEyMTYwMTAwMDVaFw0zMDEyMTYwMTAwMDVaMHUxCzAJBgNVBAYTAklMMRYwFAYDVQQK Ew1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGllbnQgQ0EwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC9fdr3w6J9g/Zbgv3bW1+uHht1wLUZr5gkrLtXedg17Ake fMyUGwrQdvwObhajcVmnKVxhrUwkZPXRAwZZosRHfEIi5FH7x6SV/8Sp5lZEuiMnvMFG2MzL A84J6Ws5T4NfXZ0qn4TPgnr3X2vPVS51M7Ua9nIJgn8jvTra4eyyQzxvuA/GZwKg7VQfDCmC S+kICslYYWgXOMt2xlsSslxLce0CGWRsT8EpMyt1iDflSjXZIsE7m1uTyHaKZspMLyIyz6my Su8j8BWWHpChNNeTrFuhVfrOAyDPFJVUvKZCLKBhibTLloyy+LatoWELrjdI4a8StZY8+dIR 9t4APXGzAgMBAAGjggFkMIIBYDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0lBBYwFAYIKwYBBQUH AwIGCCsGAQUFBwMEMBIGA1UdEwEB/wQIMAYBAf8CAQAwMgYDVR0fBCswKTAnoCWgI4YhaHR0 cDovL2NybC5zdGFydHNzbC5jb20vc2ZzY2EuY3JsMGYGCCsGAQUFBwEBBFowWDAkBggrBgEF BQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDAGCCsGAQUFBzAChiRodHRwOi8vYWlh LnN0YXJ0c3NsLmNvbS9jZXJ0cy9jYS5jcnQwHQYDVR0OBBYEFCSBbDlhvkkPj7cbRivJKLUn SG1oMB8GA1UdIwQYMBaAFE4L7xqkQFulF2mHMMo0aEPQQa7yMD8GA1UdIAQ4MDYwNAYEVR0g ADAsMCoGCCsGAQUFBwIBFh5odHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kwDQYJKoZI hvcNAQELBQADggIBAIvj94fsAYuErQ8BAluc4SMnIwS9NPBwAm5SH9uh2NCXTq7im61g7F1L IiNI/+wq37fUuaMbz4g7VarKQTgf8ubs0p7NZWcIe7Bvem2AWaXBsxsaRTYw5kG3DN8pd1hS EUuFoTa7DmNeFe8tiK1BrL3rbA/m48jp4AiFXgvxprJrW7izsyetOrRHPbkW4Y07v29MdhaP v3u1JELyszXqOzjIYo4sWlC8iDQXwgSW/ntvWy2n4LuiaozlCfXl149tKeqvwlvrla2Yklue /quWp9j9ou4T/OY0CXMuY+B8wNK0ohd2D4ShgFlMSjzAFRoHGKF81snTr2d1A7Ew02oF6UQy CkC2aNNsK5cWOojBar5c7HplX9aHYUCZouxIeU28SONJAxnATgR4cJ2jrpmYSz/kliUJ46S6 UpVDo/ebn9c6PaM/XtDYCCaM/7XX6wc3s++sbQ7CtCn1Ax7df6ufQbwyO0V+oFa9H0KAsjHM zcwk3EV2B2NLatidKE/m7G+rB9m+FlVgIiSp0mGlg43QO9Kh1+JqvTCIzv2bJJkmPMLQJNuK KwHNL8F4GGp6jbAV+WL+LDeGfVcq8DHS3LrD+xyYEXQBiqZEdiPVOMxLDSUCXsDO0uCWpaNQ 8j6y6S9p0xE/Ga0peVLadVHhqf9nXqKaxnr358VgfrxzUIrvOaOjMYIDzDCCA8gCAQEwgYkw dTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0 Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAx IENsaWVudCBDQQIQRUZXla0RfF+RsG1dLXCwoDANBglghkgBZQMEAgEFAKCCAhMwGAYJKoZI hvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTcwODE2MTQ1NjE2WjAvBgkq hkiG9w0BCQQxIgQgjUYirXwB1vZ8ZgRUkmA7Vma22C9NdA0dwIExgTvCSPAwbAYJKoZIhvcN AQkPMV8wXTALBglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3 DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBmgYJKwYB BAGCNxAEMYGMMIGJMHUxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkw JwYDVQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3Rh cnRDb20gQ2xhc3MgMSBDbGllbnQgQ0ECEEVGV5WtEXxfkbBtXS1wsKAwgZwGCyqGSIb3DQEJ EAILMYGMoIGJMHUxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYD VQQLEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRD b20gQ2xhc3MgMSBDbGllbnQgQ0ECEEVGV5WtEXxfkbBtXS1wsKAwDQYJKoZIhvcNAQEBBQAE ggEACOKnuhh5CM7f4xCZlgoANk4aov5w0qSDFFj5t8MkTa0lD17Ik2/yuVPP1Q3SqYg3pfDX 1RyhQ7cAQpcHjU3p+cjcTh9zHGkNekVzzrHpZn73NpAxJtvnawXQpW4uUQiywp1iBbaFRBPV VePCPXnkLq6uWdh4Ihx/FSBBa1cb0Mt8r+I6xIO/nTrHDDrPvv7KtgKac9KhFanhNDC6xk5t vjGhyXnHuc4vvWUCh7qshPTDWO2rabVGCLaJ0zZA2Q/5Me8WJ5GVEHHCqZqLt0PbP+pQa11B Lxpbrpnjw4alcSVvZ1JCvVbQKeBXYGKvQNYN+J6zzSujIs7I/C4QhPn6rgAAAAAAAA== --------------ms000008090101090902090203--

1 0

(ITS#8712) haproxy
by marceloandril＠yahoo.com.br 16 Aug '17

16 Aug '17

Full_Name: marcelo Version: 2.4.44 OS: centos 7.2 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (177.69.83.5) Good morning, I'm having a problem using syncrepl by haproxy. The server can not re-create the database. I am using mdb. Log: slapd[22501]: dn_callback : entries have identical CSN slapd[22501]: syncrepl_entry: rid=001 entry unchanged, ignored slapd[22501]: do_syncrep2: rid=001 (-1) Can't contact LDAP server slapd[22501]: do_syncrepl: rid=001 rc -1 retrying

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs