- openldap-bugs - openldap.org

[Issue 9272] New: Invalid search results for subordinate/glued database
by openldap-its＠openldap.org 04 Dec '25

04 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=9272 Issue ID: 9272 Summary: Invalid search results for subordinate/glued database Product: OpenLDAP Version: 2.4.47 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: grapvar(a)gmail.com Target Milestone: --- Here is a trivial test case. Look at the following bunch of glued dit's/databases, declared in this order: | suffix ou=a,ou=1,ou=T # subordinate; contains only one (top-level) entry | suffix ou=2,ou=T # subordinate; contains only one (top-level) entry | suffix ou=b,ou=1,ou=T # subordinate; contains only one (top-level) entry | suffix ou=T # master database, has two entries, top-level | ` ou=1 # ... and this child entry let's query the united database: | $ ldapsearch -b ou=1,ou=T -s sub '' nx | dn: ou=1,ou=T | dn: ou=a,ou=1,ou=T | dn: ou=b,ou=1,ou=T Nice! But wait, what if ... | $ ldapsearch -b ou=1,ou=T -s sub -E\!pr=2/noprompt '' nx | dn: ou=1,ou=T | dn: ou=a,ou=1,ou=T | | # pagedresults: cookie=//////////8= ... BANG! ... | Server is unwilling to perform (53) The problem is the glue_op_search(), which has issues * different parts of code make different assumptions about data structures * different parts of code track state inconsistently * code that looks like a highly probably dead code I mean that likely possible to build another bug-triggering test cases, and glue_op_search() needs not just a fix of the bug above, but intense cleaning and structuring. -- You are receiving this mail because: You are on the CC list for the issue.

1 16

[Bug 9256] New: The ACLs required for SASL binding are not fully documented
by openldap-its＠openldap.org 04 Dec '25

04 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=9256 Bug ID: 9256 Summary: The ACLs required for SASL binding are not fully documented Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: kop(a)karlpinc.com Target Milestone: --- Created attachment 727 --> https://bugs.openldap.org/attachment.cgi?id=727&action=edit Patch massaging the SASL binding requirement docs While some ACL requirements for SASL binding are documented, some are not. E.g, that olcAuthzRegexp requires =x on objectClass when direct DN mapping is not documented. Other requirements can be reasoned out based on the existing documentation, but this can be very difficult when unfamiliar with all the moving parts and the places they are documented. E.g. knowing that (objectClass=*) is the default filter, and that there's _always_ _some_ filter, and connecting this with ACLs required to do search-based SASL mapping. The attached patch brings all the SASL binding requirements together in one place in the docs and makes everything explicit. The word "SASL" is included, for those searching for that keyword. I, Karl O. Pinc, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. -- You are receiving this mail because: You are on the CC list for the bug.

1 28

[Bug 9220] New: Rewrite Bind and Exop result handling
by openldap-its＠openldap.org 04 Dec '25

04 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=9220 Bug ID: 9220 Summary: Rewrite Bind and Exop result handling Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Bind and Exop result handling needs a rewrite so it is no longer a special case for overlays. -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Issue 9022] Force slapadd to rewrite all entryCSN values
by openldap-its＠openldap.org 04 Dec '25

04 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=9022 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10411] New: Seems like importing data with slapadd does not create the structuralObjectClass OpAttr when -s flag is used
by openldap-its＠openldap.org 04 Dec '25

04 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=10411 Issue ID: 10411 Summary: Seems like importing data with slapadd does not create the structuralObjectClass OpAttr when -s flag is used Product: OpenLDAP Version: 2.6.10 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: client tools Assignee: bugs(a)openldap.org Reporter: elecharny(a)apache.org Target Milestone: --- When exporting entries with a slapcat and removing all the opAttrs, keeping the bare entries with only user attributes, then importing them with slapadd creates entries without the structuralObjectClass attribute, when using the -s flag. Which leads to en error 80 'No structuralObjectClass Operation Attribute' when trying to modify an injected entry. (I'll check if this was the standard behaviour un 2.4/2/5=) Two remarks: - the structuralObjectClass should be added no matter what, assuming it's correct (ie the objectclass hierarchy is sane) - and even if it's not created, there is no reason to get a error 80 when modifying the entry: the structuralObjectClass should be added when a modify operation is applied (all in all, it's an OpAttr, up to the server to deal with it). Here is the added entry: version: 1 dn: o=service,o=worteks objectClass: organization o: service description: One entry #structuralObjectClass: organization When removing the -s flag, all works fine. Note: the reason I was using the -s flag is that I wanted to squeeze as much performance as possible when injecting 30M entries. The gain may be minimal (like 4 s when injecting 10M entries - 1m9 vs 1m13) , but still. -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Issue 9002] Document correct procedure for generating usable backups via slapcat
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=9002 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9002] Document correct procedure for generating usable backups via slapcat
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=9002 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Add option to slapcat to |Document correct procedure |honor rtxnsize setting |for generating usable | |backups via slapcat -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8905] Client side debug log should include timestamps
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8905 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|gnoe(a)symas.com |bugs(a)openldap.org Target Milestone|2.7.1 |2.7.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8905] Client side debug log should include timestamps
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8905 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8884] enabling overlay slapo-rwm makes 'entryDN' invisible
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8884 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8678] Slow deletes of large indexed attrributes
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8678 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.8.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8617] Seg-fault while using meta database and rwm overlay together
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8617 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|hyc(a)openldap.org |nivanova(a)symas.com -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8476] slapo-constraint: info per constraint_attribute
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8476 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8474] Securely Erase BerElement Buffer After Use
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8474 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8474] Securely Erase BerElement Buffer After Use
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8474 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |--- Status|UNCONFIRMED |RESOLVED Resolution|--- |SUSPENDED --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- patch welcome -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8375] paged results control results in full db search?
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8375 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8254] RFE: slapd-sock: more request and return parameters
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8254 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.8.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8178] back-sock: Timeout to avoid locking
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8178 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.7.1 Assignee|bugs(a)openldap.org |ondra(a)mistotebe.net -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8149] nssov loginStatus doesn't play well with replication
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8149 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8064] SIGSEGV in monitor-shutdown code
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=8064 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.8.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7649] Feature request: numSubordinates attribute
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=7649 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.8.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7649] Feature request: numSubordinates attribute
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=7649 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.7.0 |2.8.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7441] cn=config filters ignore {number}
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=7441 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0 |1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7392] ACL a_dn.a_self is skipped in case of "acl_mask: to all values ..."
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=7392 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|hyc(a)openldap.org |ondra(a)mistotebe.net -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7347] Exclusive bit masks for: ACL_WADD, ACL_WDEL, and ACL_WRITE
by openldap-its＠openldap.org 02 Dec '25

02 Dec '25

https://bugs.openldap.org/show_bug.cgi?id=7347 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|hyc(a)openldap.org |ondra(a)mistotebe.net -- You are receiving this mail because: You are on the CC list for the issue.

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs