- openldap-bugs - openldap.org

(ITS#8749) Proxy: LDAP-querry doesn't work for e.g (userAccountControl:1.2.840.113556.1.4.803:=2)
by steffen.krahl＠nexio.de 30 Sep '17

30 Sep '17

Full_Name: Steffen Krahl Version: 2.4-2 OS: Ubuntu 16.04.3 LTS URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (84.168.136.108) I'm using OpenLDAP with LDAP-backend as proxy for ActiveDirectory It's working well so far, only LDAP-queries which should exclude deactivated users don't work. It seems slapd does not accept queries like (attribute:OID:=value) in particular (&(sAMAccountType=805306368)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) fails due to the part ":1.2.840.113556.1.4.803:". The query itself works fine for ActiveDirectory itself. to make blind test: (userAccountControl:1.2.840.113556.1.4.803:=2) will not get any object back (but should) I'm quite new to OpenLDAP, but it seems an issue. performing upper query gets: Oct 1 00:45:33 nxld01 slapd[3002]: str2filter "(&(sAMAccountType= 805306368)(?=error))" Oct 1 00:45:33 nxld01 kernel: [49436.933735] slapd[3005]: segfault at 18 ip 00007ff4f783d512 sp 00007ff4f1afc810 error 4 in libc-2.23.so[7ff4f77b9000+1c0000] performing the following query (&(objectClass=*)(userAccountControl:1.2.840.113556.1.4.803:=2)) will get following log wntry: Oct 1 00:49:07 nxld01 slapd[3033]: str2filter "(&(objectClass=*)(!(objectClass=*)))" seems a little bit strange BR Steffen

1 0

Re: (ITS#8745) Need to join Windows server 2012 R2 to open lapd as a client
by ryan＠openldap.org 29 Sep '17

29 Sep '17

On Thu, Sep 28, 2017 at 07:11:35AM +0000, ramkumar(a)mgtechsoft.com wrote: >Request you to inform whether can we join windows 2012 server to Open Ldap as >client? > >and if it is possible please share the procedure with us. The ITS system is for reporting software bugs, not for support questions. If you have a question about OpenLDAP, please contact the openldap-technical(a)openldap.org mailing list. In your specific case, it sounds like your question is actually about Samba, not about OpenLDAP. As well, "opeldap.sdef.com" sounds like it might be a typo, so please check your spelling carefully. This ITS will be closed.

1 0

Re: (ITS#8748)
by quanah＠symas.com 29 Sep '17

29 Sep '17

--On Friday, September 29, 2017 9:19 PM +0000 rouzier(a)gmail.com wrote: > --94eb2c1913c4df2dad055a59bed1 > Content-Type: text/plain; charset="UTF-8" > > I, James Rouzier, hereby place the following modifications to OpenLDAP > Software (and only these modifications) into the public domain. Hence, > these modifications may be freely used and/or redistributed for any > purpose with or without attribution and/or other notice. Thanks! --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

(ITS#8748)
by rouzier＠gmail.com 29 Sep '17

29 Sep '17

--94eb2c1913c4df2dad055a59bed1 Content-Type: text/plain; charset="UTF-8" I, James Rouzier, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. --94eb2c1913c4df2dad055a59bed1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div><div>I, James Rouzier, hereby place the following mod= ifications to OpenLDAP Software (and only these modifications) into the pub= lic domain. Hence, these modifications may be freely used and/or redistribu= ted for any purpose with or without attribution and/or other notice.</div><= /div><div><br></div></div> --94eb2c1913c4df2dad055a59bed1--

1 0

Re: (ITS#8748) New feature for LMDB
by quanah＠symas.com 29 Sep '17

29 Sep '17

--On Friday, September 29, 2017 8:53 PM +0000 rouzier(a)gmail.com wrote: > Full_Name: James Rouzier > Version: N/A > OS: N/A > URL: ftp://ftp.openldap.org/incoming/rouzier-170929.patch > Submission from: (NULL) (192.222.197.109) > > > Add the ability to not block when opening a write transaction for LMDB Hi James, This submission is missing an IPR as per: <http://www.openldap.org/devel/contributing.html#notice> Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

(ITS#8748) New feature for LMDB
by rouzier＠gmail.com 29 Sep '17

29 Sep '17

Full_Name: James Rouzier Version: N/A OS: N/A URL: ftp://ftp.openldap.org/incoming/rouzier-170929.patch Submission from: (NULL) (192.222.197.109) Add the ability to not block when opening a write transaction for LMDB

1 0

(ITS#8747) LDAP load balancer daemon (lloadd)
by ondra＠openldap.org 28 Sep '17

28 Sep '17

Full_Name: Ondrej Kuznik Version: master OS: URL: https://github.com/mistotebe/openldap/tree/lloadd Submission from: (NULL) (82.10.24.68) The 'lloadd' branch linked above contains the load balancer code that is now ready for review. This adds a new server to the OpenLDAP project, a load balancing proxy (prototype). Also, the tls branch contains the work in progress toward StartTLS/ldaps support (which works apart from certificate checking) and can be merged once ITS#8746 has been closed. To test, make sure you have libevent >= 2.0 installed and regenerate the configure script which now accepts the --enable-balancer option. The code in question has only been compiled/tested on Linux so far.

1 0

(ITS#8746) Add ldap_pvt_tls_connect()
by ondra＠openldap.org 28 Sep '17

28 Sep '17

Full_Name: Ondrej Kuznik Version: master OS: URL: ftp://ftp.openldap.org/incoming/Ondrej-Kuznik-20170928-ldap_pvt_tls_connect… Submission from: (NULL) (82.10.24.68) There is no way to reuse the libldap implementation to set up a client TLS layer on a Sockbuf. This exposes ldap_int_tls_connect through ldap_pvt.h as ldap_pvt_tls_connect. Needless to say, skipping the full libldap infrastructure means it is up to the user to do certificate verification etc. when using this API.

1 0

(ITS#8745) Need to join Windows server 2012 R2 to open lapd as a client
by ramkumar＠mgtechsoft.com 28 Sep '17

28 Sep '17

Full_Name: Ramkumar Raman Version: 2.4.28 OS: Ubuntu 12.04 LTS URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (14.143.3.78) Hello Team, I configured open ldap 2.4.28 with samba version 3.6.25 on Ubuntu 12.04 LTS server. And now window 7 to Windows 2008 R2 server I could able to join with open ldap. But, When we try to join windows server 2012 R2 server it is not happening and error which I am facing is as follows, Error: /// The following error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "opeldap.sdef.com": The error was: "DNS name does not exist." (error code 0x0000232B RCODE_NAME_ERROR) The query was for the SRV record for _ldap._tcp.dc._msdcs.opeldap.sdef.com Common causes of this error include the following: - The DNS SRV records required to locate a AD DC for the domain are not registered in DNS. These records are registered with a DNS server automatically when a AD DC is added to a domain. They are updated by the AD DC at set intervals. This computer is configured to use DNS servers with the following IP addresses: XXX.XX.XX.X XXX.XX.XX.XXX - One or more of the following zones do not include delegation to its child zone: opeldap.sdef.com sdef.com com . (the root zone) // Request you to inform whether can we join windows 2012 server to Open Ldap as client? and if it is possible please share the procedure with us. Thanks for your reply in advance. Regards, Ramkumar R

1 0

Re: (ITS#8732) LDAP_CIRCLEQ improvements
by hyc＠symas.com 27 Sep '17

27 Sep '17

okuznik(a)symas.com wrote: > On Tue, Sep 26, 2017 at 02:00:40PM +0100, Howard Chu wrote: >> Nothing in this patch says "rotate" anywhere. Please add some more >> descriptive comments describing the purpose of each new macro. > > A version with the circular queue description extended to cover the > rotation macros is available here: > > ftp://ftp.openldap.org/incoming/Ondrej-Kuznik-20170926-LDAP_CIRCLEQ.patch OK. Go ahead and merge. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#8743) slaptest segfault with invalid back-meta configuration
by quanah＠openldap.org 27 Sep '17

27 Sep '17

Full_Name: Quanah Gibson-Mount Version: 2.4.45 OS: N/A URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (47.208.148.239) When converting a slapd.conf file to cn=config, where the back-meta backend has an invalid configuration for the "filter" directive, slaptest will segfault. It would be better to detect an error and exit accordingly. This is trivial to reproduce by using the following directive: filter "(objectClass=*)" as per slapd-meta(5), the "filter" directive takes a regex(5) rather than an LDAP filter. Still, it should not cause a segfault. ;)

1 0

(ITS#8742) slapd.conf/slapd-config divergence
by quanah＠openldap.org 26 Sep '17

26 Sep '17

Full_Name: Quanah Gibson-Mount Version: HEAD OS: N/A URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (47.208.148.239) The slapd.conf(5) and slapd-config(5) man pages have some significant divergence that need fixing. Examples: slapd.conf(5): Used by the authentication framework to convert simple user names, such as provided by SASL subsystem, or extracted from certificates in case of cert-based SASL EXTERNAL, or provided within the RFC 4370 "proxied authorization" control, to an LDAP DN used for authorization purposes. Note that the resulting DN need not refer to an existing entry to be considered valid. When an authorization request is received from the SASL subsystem, the SASL slapd-config(5): Used by the authentication framework to convert simple user names, such as provided by SASL subsystem, to an LDAP DN used for authorization purposes. Note that the resultant DN need not refer to an existing entry to be considered valid. When an authorization request is received from the SASL subsystem, the SASL slapd.conf(5): .B concurrency <integer> Specify a desired level of concurrency. Provided to the underlying thread system as a hint. The default is not to provide any hint. slapd-config(5): .B olcConcurrency: <integer> Specify a desired level of concurrency. Provided to the underlying thread system as a hint. The default is not to provide any hint. This setting is only meaningful on some platforms where there is not a one to one correspondence between user threads and kernel threads. slapd.conf(5) .B proxy_authz_non_critical disables acceptance of the proxied authorization control (RFC4370) when criticality is FALSE. .B dontusecopy_non_critical disables acceptance of the dontUseCopy control (a work in progress) when criticality is FALSE. slapd-config(5): These options are not listed slapd.conf(5) and slapd-config(5) have index_substr_if_minlen/index_substr_if_maxlen in opposite order in the man page slapd.conf(5): .B ldapsyntax "(\ <oid>\ [DESC\ <description>]\ [X\-SUBST <substitute-syntax>]\ )" .RS Specify an LDAP syntax using the LDAPv3 syntax defined in RFC 4512. The slapd parser extends the RFC 4512 definition by allowing string forms as well as numeric OIDs to be used for the syntax OID. (See the .B objectidentifier description.) The slapd parser also honors the .B X\-SUBST extension (an OpenLDAP-specific extension), which allows one to use the .B ldapsyntax statement to define a non-implemented syntax along with another syntax, the extension value .IR substitute-syntax , as its temporary replacement. The .I substitute-syntax must be defined. This allows one to define attribute types that make use of non-implemented syntaxes using the correct syntax OID. Unless .B X\-SUBST is used, this configuration statement would result in an error, since no handlers would be associated to the resulting syntax structure. .RE slapd-config(5): Section missing

1 0

Re: (ITS#8741) libldap ignoring timeout value
by Sean.Haugh＠vertivco.com 26 Sep '17

26 Sep '17

On Tue, Sep 26, 2017 at 06:06:23PM +0000, Hallvard Breien Furuseth wrote: > Try again without the "_" after "LDAP", like the ldap.conf manpage says. > That's unintuitive, but rather late to change at this point. This is using the LDAP C API. I have also used ldap_get_option calls to verify that the values are set correctly.=

1 0

Re: (ITS#8741) libldap ignoring timeout value
by h.b.furuseth＠usit.uio.no 26 Sep '17

26 Sep '17

On 26. sep. 2017 19:54, sean.haugh(a)vertivco.com wrote: > I have tried setting the LDAP_OPT_TIMEOUT, LDAP_OPT_NETWORK_TIMEOUT, > LDAP_OPT_TIMELIMIT values with ldap_simple_bind_s, and the call returns after > ~65 seconds rather than the 10-20 seconds I expect. Try again without the "_" after "LDAP", like the ldap.conf manpage says. That's unintuitive, but rather late to change at this point. -- Hallvard

1 0

(ITS#8741) libldap ignoring timeout value
by sean.haugh＠vertivco.com 26 Sep '17

26 Sep '17

Full_Name: Sean Haugh Version: 2.4.42 OS: Linux URL: Submission from: (NULL) (143.166.81.254) I have tried setting the LDAP_OPT_TIMEOUT, LDAP_OPT_NETWORK_TIMEOUT, LDAP_OPT_TIMELIMIT values with ldap_simple_bind_s, and the call returns after ~65 seconds rather than the 10-20 seconds I expect. The same is seen with ldap_result and ldap_simple_bind--regardless of the value of `timeout` that is set, whether explicit or NULL, the call blocks for ~65 seconds.

1 0

(ITS#8740) libldap ignoring timeout value
by sean.haugh＠vertivco.com 26 Sep '17

26 Sep '17

Full_Name: Sean Haugh Version: 2.4.42 OS: Linux URL: Submission from: (NULL) (143.166.81.254) I have tried setting the LDAP_OPT_TIMEOUT, LDAP_OPT_NETWORK_TIMEOUT, LDAP_OPT_TIMELIMIT values with ldap_simple_bind_s, and the call returns after ~65 seconds rather than the 10-20 seconds I expect. The same is seen with ldap_result and ldap_simple_bind--regardless of the value of `timeout` that is set, whether explicit or NULL, the call blocks for ~65 seconds.

1 0

Re: (ITS#8732) LDAP_CIRCLEQ improvements
by okuznik＠symas.com 26 Sep '17

26 Sep '17

On Tue, Sep 26, 2017 at 02:00:40PM +0100, Howard Chu wrote: > Nothing in this patch says "rotate" anywhere. Please add some more > descriptive comments describing the purpose of each new macro. A version with the circular queue description extended to cover the rotation macros is available here: ftp://ftp.openldap.org/incoming/Ondrej-Kuznik-20170926-LDAP_CIRCLEQ.patch --=20 Ond=C5=99ej Kuzn=C3=ADk Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP

1 0

Re: (ITS#8638) Recursive mutex in libldap_r
by hyc＠symas.com 26 Sep '17

26 Sep '17

hyc(a)symas.com wrote: > ondra(a)mistotebe.net wrote: >>> IMO using recursive mutexes means your code is broken. We introduced these for >>> accesslog.c but in fact we could avoid them at zero cost. Also I don't see the >>> relevance of libevent to this discussion. We use our own event mechanism and >>> it is more efficient than libevent. >> >> libevent is a dependency for the load balancer that I intend to propose >> for integration into the project after all the relevant dependencies >> have come in. >> >> There is a new version of this patch that provides an implementation on >> each platform or defers to the existing one (as per each platform's >> documentation). Untested except on POSIX and most of them seem pretty >> arcane anyway. >> >> ftp://ftp.openldap.org/incoming/Ondrej-Kuznik-20170918-ITS8638-libldap_r-re… >> > It looks like glibc still doesn't define PTHREAD_MUTEX_RECURSIVE by default, > it requires compiling with either -D_GNU_SOURCE or -D_XOPEN_SOURCE. The > feature itself appears to be part of UNIX98. It's likely that all pthread > implementations available today support it, but it still seems a bit iffy. > OK, I see that current glibc defaults to _POSIX_C_SOURCE=200809 which includes __XOPEN_2K8. All of this came later than our rmutex.c which was written in 2006, so that explains where the need arose from. We should be safe pushing this in, go ahead. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8732) LDAP_CIRCLEQ improvements
by hyc＠symas.com 26 Sep '17

26 Sep '17

ondra(a)openldap.org wrote: > Full_Name: Ondrej Kuznik > Version: master > OS: > URL: ftp://ftp.openldap.org/incoming/Ondrej-Kuznik-20170913-LDAP_CIRCLEQ.patch > Submission from: (NULL) (82.10.24.68) > > > The CIRCLEQ macros are incomplete and not very useful on their > own, but when providing a few more that allow rotating it, they > are. Patch to that effect is attached. > > They could probably be made a bit more efficient as well, though. Nothing in this patch says "rotate" anywhere. Please add some more descriptive comments describing the purpose of each new macro. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8661) Fix warnings issued by Autoconf 2.68+
by hyc＠symas.com 26 Sep '17

26 Sep '17

okuznik(a)symas.com wrote: > Full_Name: Ondrej Kuznik > Version: master > OS: Linux > URL: ftp://ftp.openldap.org/incoming/Ondrej-Kuznik-20170524-Fix-warnings-issued-… > Submission from: (NULL) (2a02:c7f:2247:ec00:a3e:8eff:fe52:dac5) > > > Running aclocal/autoconf is quite noisy. The attached patch against master > follows the recommendations by the autoconf project > https://autotools.io/forwardporting/autoconf.html > > Looks fine, go ahead and merge. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8638) Recursive mutex in libldap_r
by hyc＠symas.com 26 Sep '17

26 Sep '17

ondra(a)mistotebe.net wrote: >> IMO using recursive mutexes means your code is broken. We introduced these for >> accesslog.c but in fact we could avoid them at zero cost. Also I don't see the >> relevance of libevent to this discussion. We use our own event mechanism and >> it is more efficient than libevent. > > libevent is a dependency for the load balancer that I intend to propose > for integration into the project after all the relevant dependencies > have come in. > > There is a new version of this patch that provides an implementation on > each platform or defers to the existing one (as per each platform's > documentation). Untested except on POSIX and most of them seem pretty > arcane anyway. > > ftp://ftp.openldap.org/incoming/Ondrej-Kuznik-20170918-ITS8638-libldap_r-re… > It looks like glibc still doesn't define PTHREAD_MUTEX_RECURSIVE by default, it requires compiling with either -D_GNU_SOURCE or -D_XOPEN_SOURCE. The feature itself appears to be part of UNIX98. It's likely that all pthread implementations available today support it, but it still seems a bit iffy. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8612) lmdb build fails on illumos / solaris
by lorban＠bitronix.be 23 Sep '17

23 Sep '17

--001a113f4a9a1feda10559dd9d6c Content-Type: text/plain; charset="UTF-8" LGTM. Thanks for the fix! On Fri, Sep 22, 2017 at 10:56 PM, Quanah Gibson-Mount <quanah(a)symas.com> wrote: > --On Monday, March 06, 2017 6:21 PM +0000 lorban(a)bitronix.be wrote: > > Full_Name: Ludovic Orban >> Version: >> OS: OmniOS r151020 >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (2a02:a03f:1cdc:c300:384b:af79:f57c:b134) >> > > Thanks for the report! I was able to reproduce this issue under Solaris > as well. > > My proprosed fix is in: > > <https://github.com/quanah/openldap-scratch/tree/its8612> > > Regards, > Quanah > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> > > --001a113f4a9a1feda10559dd9d6c Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">LGTM. Thanks for the fix!</div><div class=3D"gmail_extra">= <br><div class=3D"gmail_quote">On Fri, Sep 22, 2017 at 10:56 PM, Quanah Gib= son-Mount <span dir=3D"ltr"><<a href=3D"mailto:quanah@symas.com" target= =3D"_blank">quanah(a)symas.com</a>></span> wrote:<br><blockquote class=3D"= gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-= left:1ex">--On Monday, March 06, 2017 6:21 PM +0000 <a href=3D"mailto:lorba= n(a)bitronix.be" target=3D"_blank">lorban(a)bitronix.be</a> wrote:<br> <br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"> Full_Name: Ludovic Orban<br> Version:<br> OS: OmniOS r151020<br> URL: <a href=3D"ftp://ftp.openldap.org/incoming/" rel=3D"noreferrer" target= =3D"_blank">ftp://ftp.openldap.org/incomin<wbr>g/</a><br> Submission from: (NULL) (2a02:a03f:1cdc:c300:384b:af79<wbr>:f57c:b134)<br> </blockquote> <br> Thanks for the report!=C2=A0 I was able to reproduce this issue under Solar= is as well.<br> <br> My proprosed fix is in:<br> <br> <<a href=3D"https://github.com/quanah/openldap-scratch/tree/its8612" rel= =3D"noreferrer" target=3D"_blank">https://github.com/quanah/ope<wbr>nldap-s= cratch/tree/its8612</a>><br> <br> Regards,<br> Quanah<br> <br> --<br> <br> Quanah Gibson-Mount<br> Product Architect<br> Symas Corporation<br> Packaged, certified, and supported LDAP solutions powered by OpenLDAP:<br> <<a href=3D"http://www.symas.com" rel=3D"noreferrer" target=3D"_blank">h= ttp://www.symas.com</a>><br> <br> </blockquote></div><br></div> --001a113f4a9a1feda10559dd9d6c--

1 0

Re: (ITS#8687) openldap fails to link w/ openssl 1.1 built w/ no-egd
by quanah＠symas.com 22 Sep '17

22 Sep '17

--On Friday, September 22, 2017 3:08 PM -0700 Daniel Kurtz=20 <djkurtz(a)google.com> wrote: > Yes, I'll try to find time to test it.=C2=A0 Thanks for looking into = this! > In fact, I think I already have one: > https://chromium-review.googlesource.com/#/c/563276/4/net-nds/openldap/fi > les/openldap-2.4.45-no-EGD.patch Ok, I'll take a look at your patch as well. Mine is at: <https://github.com/quanah/openldap-scratch/commit/e126bf7ea3c2c7046b0884269= 4fdbf750200894f> Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

Re: (ITS#8687) openldap fails to link w/ openssl 1.1 built w/ no-egd
by djkurtz＠google.com 22 Sep '17

22 Sep '17

--001a1141d7e85161e00559cd9fbe Content-Type: text/plain; charset="UTF-8" On Fri, Sep 22, 2017 at 8:05 AM, Quanah Gibson-Mount <quanah(a)symas.com> wrote: > --On Wednesday, September 20, 2017 4:06 AM +0000 djkurtz(a)google.com wrote: > > Out of curiosity, what OS were you compiling on that didn't have >>> /dev/urandom available? >>> >> >> This occurs when cross compiling. See: >> https://github.com/openldap/openldap/blob/master/configure.in#L2197 >> > > Perfect, tyvm! Patch seems like it should be fairly straight forward. If > I send you one, would you be able to test it? Yes, I'll try to find time to test it. Thanks for looking into this! In fact, I think I already have one: https://chromium-review.googlesource.com/#/c/563276/4/net-nds/openldap/file… > > > --Quanah > > > > > -- > > Quanah Gibson-Mount > Product Architect > Symas Corporation > Packaged, certified, and supported LDAP solutions powered by OpenLDAP: > <http://www.symas.com> > > -- Daniel Kurtz | Software Engineer | djkurtz(a)google.com | 650.204.0722 <(650)%20204-0722> --001a1141d7e85161e00559cd9fbe Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo= te">On Fri, Sep 22, 2017 at 8:05 AM, Quanah Gibson-Mount <span dir=3D"ltr">= <<a href=3D"mailto:quanah@symas.com" target=3D"_blank">quanah(a)symas.com<= /a>></span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:= 0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">= <span>--On Wednesday, September 20, 2017 4:06 AM +0000 <a href=3D"mailto:dj= kurtz(a)google.com" target=3D"_blank">djkurtz(a)google.com</a> wrote:<br> <br> </span><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;= border-left:1px solid rgb(204,204,204);padding-left:1ex"><span><blockquote = class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px sol= id rgb(204,204,204);padding-left:1ex"> Out of curiosity, what OS were you compiling on that didn't have<br> /dev/urandom available?<br> </blockquote> <br></span><span> This occurs when cross compiling.=C2=A0 See:<br> <a href=3D"https://github.com/openldap/openldap/blob/master/configure.in#L2= 197" rel=3D"noreferrer" target=3D"_blank">https://github.com/openldap/op<wb= r>enldap/blob/master/configure.i<wbr>n#L2197</a><br> </span></blockquote> <br> Perfect, tyvm!=C2=A0 Patch seems like it should be fairly straight forward.= =C2=A0 If I send you one, would you be able to test it?</blockquote><div><b= r></div><div>Yes, I'll try to find time to test it.=C2=A0 Thanks for lo= oking into this!</div><div>In fact, I think I already have one:</div><div><= a href=3D"https://chromium-review.googlesource.com/#/c/563276/4/net-nds/ope= nldap/files/openldap-2.4.45-no-EGD.patch">https://chromium-review.googlesou= rce.com/#/c/563276/4/net-nds/openldap/files/openldap-2.4.45-no-EGD.patch</a= ><br></div><div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"marg= in:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1e= x"><span class=3D"gmail-m_-7533148463480577044HOEnZb"><font color=3D"#88888= 8"><br> <br> --Quanah</font></span><div class=3D"gmail-m_-7533148463480577044HOEnZb"><di= v class=3D"gmail-m_-7533148463480577044h5"><br> <br> <br> <br> --<br> <br> Quanah Gibson-Mount<br> Product Architect<br> Symas Corporation<br> Packaged, certified, and supported LDAP solutions powered by OpenLDAP:<br> <<a href=3D"http://www.symas.com" rel=3D"noreferrer" target=3D"_blank">h= ttp://www.symas.com</a>><br> <br> </div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>= <div class=3D"gmail-m_-7533148463480577044gmail_signature"><span style=3D"f= ont-family:"Times New Roman";font-size:medium"><div style=3D"line= -height:1.5em;padding-top:10px;margin-top:10px;color:rgb(85,85,85);font-fam= ily:sans-serif;font-size:small"><span style=3D"border-width:2px 0px 0px;bor= der-style:solid;border-color:rgb(213,15,37);padding-top:2px;margin-top:2px"= >Daniel Kurtz=C2=A0|</span><span style=3D"border-width:2px 0px 0px;border-s= tyle:solid;border-color:rgb(51,105,232);padding-top:2px;margin-top:2px">=C2= =A0Software Engineer=C2=A0|</span><span style=3D"border-width:2px 0px 0px;b= order-style:solid;border-color:rgb(0,153,57);padding-top:2px;margin-top:2px= ">=C2=A0<a href=3D"mailto:djkurtz@google.com" target=3D"_blank">djkurtz@goo= gle.com</a>=C2=A0<wbr>|</span><span style=3D"border-width:2px 0px 0px;borde= r-style:solid;border-color:rgb(238,178,17);padding-top:2px;margin-top:2px">= =C2=A0<a href=3D"tel:(650)%20204-0722" value=3D"+16502040722" target=3D"_bl= ank">650.204.0722</a></span></div></span></div> </div></div> --001a1141d7e85161e00559cd9fbe--

1 0

Re: (ITS#8612) lmdb build fails on illumos / solaris
by quanah＠symas.com 22 Sep '17

22 Sep '17

--On Monday, March 06, 2017 6:21 PM +0000 lorban(a)bitronix.be wrote: > Full_Name: Ludovic Orban > Version: > OS: OmniOS r151020 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (2a02:a03f:1cdc:c300:384b:af79:f57c:b134) Thanks for the report! I was able to reproduce this issue under Solaris as well. My proprosed fix is in: <https://github.com/quanah/openldap-scratch/tree/its8612> Regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs