- openldap-bugs - openldap.org

[Issue 6462] DNS SRV records: ldaps ???
by openldap-its＠openldap.org 09 Apr '26

09 Apr '26

https://bugs.openldap.org/show_bug.cgi?id=6462 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=10490 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6462] DNS SRV records: ldaps ???
by openldap-its＠openldap.org 09 Apr '26

09 Apr '26

https://bugs.openldap.org/show_bug.cgi?id=6462 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Assignee|bugs(a)openldap.org |ondra(a)mistotebe.net Status|UNCONFIRMED |IN_PROGRESS --- Comment #5 from Ondřej Kuzník <ondra(a)mistotebe.net> --- https://git.openldap.org/openldap/openldap/-/merge_requests/855 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10475] slapo-constraint URI mode fails to escape assertion values in internal catalog filters, enabling wildcard/filter-metachar allowlist bypass
by openldap-its＠openldap.org 08 Apr '26

08 Apr '26

https://bugs.openldap.org/show_bug.cgi?id=10475 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |TEST --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- head: by Ondřej Kuzník at 2026-04-08T15:54:44+00:00 ITS#10475 Escape asserted value before pasting into filter • 0347718d by Ondřej Kuzník at 2026-04-08T15:54:44+00:00 ITS#10476 Escape asserted value before pasting into filter RE26: • 2028cb47 by Ondřej Kuzník at 2026-04-08T23:19:21+00:00 ITS#10476 Escape asserted value before pasting into filter • 2028cb47 by Ondřej Kuzník at 2026-04-08T23:19:21+00:00 ITS#10476 Escape asserted value before pasting into filter -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10474] New: Update contributing page to note no AI generated code
by openldap-its＠openldap.org 07 Apr '26

07 Apr '26

https://bugs.openldap.org/show_bug.cgi?id=10474 Issue ID: 10474 Summary: Update contributing page to note no AI generated code Product: website Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: website Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Need to update the contributing page to note that we do not accept AI generated code in the project. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 10464] slapd crashes in ppolicy when PasswordPolicyRequest control is sent with rejected operations
by openldap-its＠openldap.org 07 Apr '26

07 Apr '26

https://bugs.openldap.org/show_bug.cgi?id=10464 --- Comment #11 from Quanah Gibson-Mount <quanah(a)openldap.org> --- • 6052b633 by Tero Saarni at 2026-04-07T15:48:49+01:00 ITS#10464 Add tests for ppolicy reject cases -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9009] 2.7: Switch to LMDB v1.0
by openldap-its＠openldap.org 07 Apr '26

07 Apr '26

https://bugs.openldap.org/show_bug.cgi?id=9009 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |10274 Referenced Issues: https://bugs.openldap.org/show_bug.cgi?id=10274 [Issue 10274] Replication issue on MMR configuration -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8890] adapt to 64-bit time_t on systems with 32-bit long
by openldap-its＠openldap.org 07 Apr '26

07 Apr '26

https://bugs.openldap.org/show_bug.cgi?id=8890 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST --- Comment #20 from Quanah Gibson-Mount <quanah(a)openldap.org> --- • 8584c582 by Steve Langasek at 2026-04-05T19:30:39+00:00 ITS#8890 Handle sizeof(time_t) > sizeof(long) in format strings 64-bit time_t means that on some architectures, time_t is now larger than a long, and making some references in format strings incorrect. To avoid truncation or other size mismatch issues, always cast to a long long and read using %lld. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10475] slapo-constraint URI mode fails to escape assertion values in internal catalog filters, enabling wildcard/filter-metachar allowlist bypass
by openldap-its＠openldap.org 31 Mar '26

31 Mar '26

1 0

[Issue 10476] slapo-pcache crashes on cached bind attributes containing LDAP filter metachars
by openldap-its＠openldap.org 31 Mar '26

31 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10476 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs(a)openldap.org |ondra(a)mistotebe.net -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10476] slapo-pcache crashes on cached bind attributes containing LDAP filter metachars
by openldap-its＠openldap.org 31 Mar '26

31 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10476 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.6.14 Group|OpenLDAP-devs | Keywords|needs_review | --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Not a security issue, CVE unnecessary. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10475] slapo-constraint URI mode fails to escape assertion values in internal catalog filters, enabling wildcard/filter-metachar allowlist bypass
by openldap-its＠openldap.org 31 Mar '26

31 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10475 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|INVALID |--- Status|RESOLVED |UNCONFIRMED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10477] New: Reopening LMDB environment clears MDB_MAP_FULL error
by openldap-its＠openldap.org 31 Mar '26

31 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10477 Issue ID: 10477 Summary: Reopening LMDB environment clears MDB_MAP_FULL error Product: LMDB Version: 0.9.33 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: liblmdb Assignee: bugs(a)openldap.org Reporter: david.komarek(a)whalebone.io Target Milestone: --- Hello, We are using LMDB from multiple processes. One process performs writes, while several other processes (typically 4–12, depending on the number of CPUs) read from the same environment. The environment contains multiple (6) databases, and on average we write approximately 150 records per second. After some time, we begin encountering MDB_MAP_FULL errors on every write operation. Interestingly, after reopening the environment in the writer process, the error disappears and writing resumes successfully. Our configured map size is 4 GB, and we have not implemented any resizing strategy. Based on our observations, this does not seem strictly necessary, as there appears to be sufficient free space after reopening the environment. Reader processes do not keep read transactions open for long periods. We reset transactions using mdb_txn_reset after each read operation and reuse them via mdb_txn_renew. The environment is open with following flags for writing: MDB_WRITEMAP | MDB_NOTLS | MDB_NORDAHEAD | MDB_NOSYNC and for reading: MDB_RDONLY | MDB_NOTLS | MDB_NORDAHEAD. Could you please help us understand what might be causing this behavior and how we can prevent MDB_MAP_FULL errors without needing to reopen the environment? Thank you in advance. -- You are receiving this mail because: You are on the CC list for the issue.

1 2

[Issue 10475] slapo-constraint URI mode fails to escape assertion values in internal catalog filters, enabling wildcard/filter-metachar allowlist bypass
by openldap-its＠openldap.org 31 Mar '26

31 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10475 --- Comment #3 from Ondřej Kuzník <ondra(a)mistotebe.net> --- On Tue, Mar 31, 2026 at 02:15:26PM +0000, openldap-its(a)openldap.org wrote: > slapo-constraint is not a security control mechanism, it is a value control > mechanism. ACLs are used to control access. > > There is no issue here. If as they report, the overlay mistakenly allows one to store values not listed in the appropriate entry, it's still a valid issue. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10475] slapo-constraint URI mode fails to escape assertion values in internal catalog filters, enabling wildcard/filter-metachar allowlist bypass
by openldap-its＠openldap.org 31 Mar '26

31 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10475 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|OpenLDAP-devs | Status|UNCONFIRMED |RESOLVED Resolution|--- |INVALID --- Comment #2 from Howard Chu <hyc(a)openldap.org> --- slapo-constraint is not a security control mechanism, it is a value control mechanism. ACLs are used to control access. There is no issue here. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10394] New: remove stroeder.com from support page
by openldap-its＠openldap.org 26 Mar '26

26 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10394 Issue ID: 10394 Summary: remove stroeder.com from support page Product: website Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: website Assignee: bugs(a)openldap.org Reporter: michael(a)stroeder.com Target Milestone: --- HI! for health reasons I gave up my business and I have retired . So it does no longer make sense to be listed on the support page. Ciao, Michael. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9967] New: Please register my company on the support page, again (www.openldap.org)
by openldap-its＠openldap.org 26 Mar '26

26 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=9967 Issue ID: 9967 Summary: Please register my company on the support page, again (www.openldap.org) Product: website Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: website Assignee: bugs(a)openldap.org Reporter: sjsong(a)aboutdap.kr Target Milestone: --- Howard Chu <hyc(a)openldap.org> 송상준 <sjsong(a)aboutdap.kr> Hi, you can submit a ticket against "website" in the ITS for this. Thanks. 송상준 wrote: > > Hello. openldap page administrater. > My name is sang jun song. > > I want to register my company on the support page. > I registered before, but it seems to have disappeared. > Our company has been attending ldapcon since 2015. > > The sysmas employees who attended the LDAPCON in 2019 may remember me. > > Please register my company on the support page. Please contact me if you need additional information.. > > thank you. > > Song. > > Registration phrase > > Seojindsa Co., Ltd. (Aboutdap Co., Ltd.)- Korea > > Provides consultancy, development, training and user support for OpenLDAP software in Korea. > > URL : seojindsa : www.seojindsa.kr > > ------------------------------------------------------ > (주) 어바웃답 기술영업팀 송상준 부장 > TEL. 010-9780-6746 > email: sjsong(a)aboutdap.kr > homepage: www.aboutdap.kr > ------------------------------------------------------- > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/ -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9717] New: The RADIUSOV overlay can be incorporated into OpenLDAP
by openldap-its＠openldap.org 26 Mar '26

26 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=9717 Issue ID: 9717 Summary: The RADIUSOV overlay can be incorporated into OpenLDAP Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: contrib Assignee: bugs(a)openldap.org Reporter: rdubner(a)symas.com Target Milestone: --- -- You are receiving this mail because: You are on the CC list for the issue.

1 8

[Issue 8617] Seg-fault while using meta database and rwm overlay together
by openldap-its＠openldap.org 26 Mar '26

26 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=8617 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|nivanova(a)symas.com |bugs(a)openldap.org Target Milestone|2.7.0 |2.7.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9009] 2.7: Switch to LMDB v1.0
by openldap-its＠openldap.org 26 Mar '26

26 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=9009 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs(a)openldap.org |hyc(a)openldap.org -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10464] slapd crashes in ppolicy when PasswordPolicyRequest control is sent with rejected operations
by openldap-its＠openldap.org 25 Mar '26

25 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10464 --- Comment #10 from tero.saarni(a)est.tech --- Sure! Here is the IPR notice for the included patches: The attached patch files are derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patches were developed by Tero Saarni tero.saarni(a)est.tech. I have not assigned rights and/or interest in this work to any party. Ericsson Software Technology AB hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10464] slapd crashes in ppolicy when PasswordPolicyRequest control is sent with rejected operations
by openldap-its＠openldap.org 25 Mar '26

25 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10464 --- Comment #9 from Ondřej Kuzník <ondra(a)mistotebe.net> --- On Tue, Mar 24, 2026 at 04:43:41PM +0000, openldap-its(a)openldap.org wrote: > I apologize for the delay in submitting the test cases for test022. I have > attached them now in case they are still useful. All tests pass with the latest > commits mentioned in this ticket! No worries at all, could you post an IPR statement here as well as per our contribution guidelines[0]? I can make sure it gets applied afterwards. [0]. https://openldap.org/devel/contributing.html#n-openldap Thanks a lot! -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10464] slapd crashes in ppolicy when PasswordPolicyRequest control is sent with rejected operations
by openldap-its＠openldap.org 24 Mar '26

24 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10464 --- Comment #8 from tero.saarni(a)est.tech --- I apologize for the delay in submitting the test cases for test022. I have attached them now in case they are still useful. All tests pass with the latest commits mentioned in this ticket! -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10464] slapd crashes in ppolicy when PasswordPolicyRequest control is sent with rejected operations
by openldap-its＠openldap.org 24 Mar '26

24 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10464 --- Comment #7 from tero.saarni(a)est.tech --- Created attachment 1132 --> https://bugs.openldap.org/attachment.cgi?id=1132&action=edit test-cases-for-test022 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 10468] New: Certificate expiration
by openldap-its＠openldap.org 24 Mar '26

24 Mar '26

https://bugs.openldap.org/show_bug.cgi?id=10468 Issue ID: 10468 Summary: Certificate expiration Product: LMDB Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: liblmdb Assignee: bugs(a)openldap.org Reporter: david.komarek(a)whalebone.io Target Milestone: --- Hello, the certificate for the https://git.openldap.org/openldap/openldap has expired at Saturday, March 21, 2026 at 12:48:46 AM Could you please renew it? -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 10464] slapd crashes in ppolicy when PasswordPolicyRequest control is sent with rejected operations
by openldap-its＠openldap.org 24 Mar '26

24 Mar '26

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs