- openldap-bugs - openldap.org

[Issue 8862] typos manual slapd-mdb
by openldap-its＠openldap.org 26 Aug '21

26 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=8862 --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- (In reply to dpa-openldap(a)aegee.org from comment #3) > How about this sentence: > > > It is important to set this to as large a value as possible… What about it? It's a correct statement. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8862] typos manual slapd-mdb
by openldap-its＠openldap.org 26 Aug '21

26 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=8862 --- Comment #3 from dpa-openldap(a)aegee.org <dpa-openldap(a)aegee.org> --- How about this sentence: > It is important to set this to as large a value as possible… -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6949] OpenLDAP Logging
by openldap-its＠openldap.org 26 Aug '21

26 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=6949 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mhardin(a)symas.com --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- *** Issue 9492 has been marked as a duplicate of this issue. *** -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6097] MMR problems with deletes
by openldap-its＠openldap.org 24 Aug '21

24 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=6097 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=9647 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6097] MMR problems with deletes
by openldap-its＠openldap.org 19 Aug '21

19 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=6097 --- Comment #4 from Ondřej Kuzník <ondra(a)mistotebe.net> --- So testing confirms the systems converge right now, extremely noisily (the add or delete fails, we go into refresh, etc.) but things settle in the right way (the parent is removed (made into glue) and the child remains. There are situation where is fails but those are bugs (to be) filed separately. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9628] New: Incorrect handling of c_n_ops_executing counter when using an asynchronous backend (back-asyncmeta)
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9628 Issue ID: 9628 Summary: Incorrect handling of c_n_ops_executing counter when using an asynchronous backend (back-asyncmeta) Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: nivanova(a)symas.com Target Milestone: --- -- You are receiving this mail because: You are on the CC list for the issue.

1 7

[Issue 9611] New: no structural objectclass in configuration table
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9611 Issue ID: 9611 Summary: no structural objectclass in configuration table Product: OpenLDAP Version: 2.5.5 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: jb00356987(a)techmahindra.com Target Milestone: --- Dears, When I tried to start sldap 2.5.5 I get following error : 60eff599.06749e9d 0x7fb62750f740 <<< dnNormalize: <cn=manager,cn=config> 60eff599.0674bad5 0x7fb62750f740 <= str2entry(cn=module{0}) -> 0x1193828 60eff599.06752650 0x7fb62750f740 : config_add_internal: DN="cn=module{0},cn=config" no structural objectClass in configuration table 60eff599.06753c3c 0x7fb62750f740 config error processing cn=module{0},cn=config: 60eff599.0675a8bc 0x7fb62750f740 send_ldap_result: conn=-1 op=0 p=0 60eff599.067611e4 0x7fb62750f740 build-corp-M1 destroy: freeing system resources. 60eff599.06767673 0x7fb62750f740 slapd stopped. 60eff599.06770970 0x7fb62750f740 connections_destroy: nothing to destroy. I don't understand why I get it as I'm able to run slapd 2.4.59 with same config/DB. Can you advice ? Thx, J-L. -- You are receiving this mail because: You are on the CC list for the issue.

1 15

[Issue 9569] New: objectClass Violation with lastbind and delta-syncrepl
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9569 Issue ID: 9569 Summary: objectClass Violation with lastbind and delta-syncrepl Product: OpenLDAP Version: 2.4.58 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: gnoe(a)symas.com Target Milestone: --- If olcLastBind is set to true in a delta-syncrepl environment, slapd fails to add auditModify entries for lastbind to the accesslog due to an objectClass violation. The auditModify object lacks the required reqMod attributes. The lastbind module is not in use. The ppolicy overlay is also in use. It shows in the slapd log as: Jun 03 13:05:34 l-02992-d5a slapd[18715]: Entry(reqStart=20210603170529.000262Z,cn=accesslog): object class 'auditModify' requires attribute 'reqMod' Jun 03 13:05:34 l-02992-d5a slapd[18715]: accesslog_response: got result 0x41 adding log entry reqStart=20210603170529.000262Z,cn=accesslog -- You are receiving this mail because: You are on the CC list for the issue.

1 15

[Issue 9625] New: ppolicy: spamming log
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9625 Issue ID: 9625 Summary: ppolicy: spamming log Product: OpenLDAP Version: 2.5.6 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Noticed on a few recent deployments that ppolicy is spamming the logs with: ppolicy_bind: Setting warning for password expiry <DN> = 0 second on every bind. Haven't noticed this in the past but the code has been like this since 2004. -- You are receiving this mail because: You are on the CC list for the issue.

1 6

[Issue 9624] New: Issues in client state tracking
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9624 Issue ID: 9624 Summary: Issues in client state tracking Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: lloadd Assignee: bugs(a)openldap.org Reporter: ondra(a)mistotebe.net Target Milestone: --- There are two places that don't track client state (BINDING/OPEN) correctly: - handle_one_request() reads c_state/c_io_state without holding the appropriate mutex - operation_unlink_client() assumes that if state is BINDING, the operation we're just unlinking is a bind request. However the client could have sent another operation without waiting for the bind response, we shouldn't touch state when disposing of those -- You are receiving this mail because: You are on the CC list for the issue.

1 6

[Issue 9549] New: ldapvc needs a man page
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9549 Issue ID: 9549 Summary: ldapvc needs a man page Product: OpenLDAP Version: 2.5.4 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- The ldapvc tool was added in 2.5, but there is no man page for it yet. I've opened this as a separate ITS, rather than append to ITS#9284, because ldapvc is not in contrib and is always installed. -- You are receiving this mail because: You are on the CC list for the issue.

1 11

[Issue 9443] New: Admin guide: Need section on lloadd and load balancer as slapd module
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9443 Issue ID: 9443 Summary: Admin guide: Need section on lloadd and load balancer as slapd module Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: blocker Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- The admin guide currently has no documentation on the new lloadd daemon or the ability to set up the load balancer as a module inside of slapd. This is a release requirement. -- You are receiving this mail because: You are on the CC list for the issue.

1 14

[Issue 9637] New: back-mdb idlexp max is 30, not 31
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9637 Issue ID: 9637 Summary: back-mdb idlexp max is 30, not 31 Product: OpenLDAP Version: 2.5.6 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: hyc(a)openldap.org Target Milestone: --- Even so, it's ridiculous to use 2 billion slot IDLs (16GB each) unless you have hundreds of GB of RAM. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 9630] New: back-sql leaves db transaction open after a bind or search operation
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9630 Issue ID: 9630 Summary: back-sql leaves db transaction open after a bind or search operation Product: OpenLDAP Version: 2.4.58 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: aapo.romu(a)eficode.com Target Milestone: --- Created attachment 833 --> https://bugs.openldap.org/attachment.cgi?id=833&action=edit Close transactions after bind or search operation back-sql leaves db transaction open after a bind or search operation. This prevents ie. PostgreSQL to perform VACUUM operations and seems also contribute to decreased performance. -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Issue 9621] New: back-mdb multival NULL matchingrule crash
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9621 Issue ID: 9621 Summary: back-mdb multival NULL matchingrule crash Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: hyc(a)openldap.org Target Milestone: --- When configured for multival, back-mdb may crash if the attribute schema has no equality matching rule. -- You are receiving this mail because: You are on the CC list for the issue.

1 6

[Issue 9629] New: When configuring ppolicy with back-sql backend ppolicy rules are not obeyed
by openldap-its＠openldap.org 18 Aug '21

18 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9629 Issue ID: 9629 Summary: When configuring ppolicy with back-sql backend ppolicy rules are not obeyed Product: OpenLDAP Version: 2.5.4 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: aapo.romu(a)eficode.com Target Milestone: --- Created attachment 832 --> https://bugs.openldap.org/attachment.cgi?id=832&action=edit Patch for processing the needed op attributes to make ppolicy work When configuring ppolicy with back-sql backend ppolicy rules are not obeyed. The back-sql does not process op attributes at all so it misses the ppolicy configuration -- You are receiving this mail because: You are on the CC list for the issue.

1 7

[Bug 9200] New: 2.4 to 2.5 upgrade documentation
by openldap-its＠openldap.org 16 Aug '21

16 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9200 Bug ID: 9200 Summary: 2.4 to 2.5 upgrade documentation Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: blocker Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- For the 2.5 release, we need to document the upgrade procedures for moving from OpenLDAP 2.4 to OpenLDAP 2.5. -- You are receiving this mail because: You are on the CC list for the bug.

1 20

[Issue 9627] New: Query regarding openldap ca cert buffer usage over filepath
by openldap-its＠openldap.org 16 Aug '21

16 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9627 Issue ID: 9627 Summary: Query regarding openldap ca cert buffer usage over filepath Product: OpenLDAP Version: 2.5.6 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: naveen.kumartg(a)siemens.com Target Milestone: --- Hi, We are unable to connect to openldap server via starttls using LDAP_OPT_X_TLS_CACERT. The LDAP_OPT_X_TLS_CACERT option doesn't work and it is not mentioned in any of the documents. LDAP_OPT_X_TLS_CACERTFILE option does work but it takes file path. Does openldap stack support ca certificate in buffer/array format otherthan just the filepath.?, We would like to avoid filepath. Best Regards, Naveen -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 5344] Wrong check for bad Modify DN
by openldap-its＠openldap.org 16 Aug '21

16 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=5344 --- Comment #15 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 49ee5d9b by Howard Chu at 2021-08-13T21:09:28+01:00 ITS#5344 slapo-rwm: fix prev commit -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9122] slapadd with dry run fails with back-mdb
by openldap-its＠openldap.org 16 Aug '21

16 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9122 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|IN_PROGRESS |RESOLVED --- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 973a9303 by Howard Chu at 2021-08-13T02:09:48+00:00 ITS#9122 expose SLAP_TOOL_DRYRUN to backends -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8958] 2nd cn=config update blocks slapd while adding subordinate index
by openldap-its＠openldap.org 16 Aug '21

16 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=8958 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST --- Comment #41 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 5ad6ab35 by Howard Chu at 2021-08-12T18:59:06+00:00 ITS#8958 rename ldap_pvt_thread_pool_pausecheck() • f6a61ab7 by Howard Chu at 2021-08-12T18:59:06+00:00 ITS#8958 back-mdb: checkpoint online indexer -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9634] New: ACL processing of <what> clauses should evaluate regex pattern after other variants
by openldap-its＠openldap.org 16 Aug '21

16 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9634 Issue ID: 9634 Summary: ACL processing of <what> clauses should evaluate regex pattern after other variants Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: michael(a)stroeder.com Target Milestone: --- Evaluating regex patterns cost performance. Thus cheaper <what> parts (e.g. attrs=) should be evaluated before dn.regex= and val.regex=. Likely evaluating simple dn.(sub|one|exact) should be split from processing dn.regex. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9122] slapadd with dry run fails with back-mdb
by openldap-its＠openldap.org 11 Aug '21

11 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9122 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #4 from Howard Chu <hyc(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/375 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9122] slapadd with dry run fails with back-mdb
by openldap-its＠openldap.org 09 Aug '21

09 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9122 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|ondra(a)mistotebe.net |hyc(a)openldap.org -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9626] New: Segmentation fault on mdb_midl_append_list
by openldap-its＠openldap.org 09 Aug '21

09 Aug '21

https://bugs.openldap.org/show_bug.cgi?id=9626 Issue ID: 9626 Summary: Segmentation fault on mdb_midl_append_list Product: LMDB Version: 0.9.29 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: liblmdb Assignee: bugs(a)openldap.org Reporter: carlos.velasco(a)nimastelecom.com Target Milestone: --- Hello, Using LMDB for modsecurity 3 I get segmentation fauls of httpd every few hours. Core debugging shows it ocurrs in mdb_midl_append_list in LMDB lib. # gdb /usr/sbin/httpd core.httpd.25.127c0e0a8a1e468f8d5749d995f81381.204107.1628497829000000000000 GNU gdb (GDB) 9.2 Copyright (C) 2020 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-pc-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/sbin/httpd... (No debugging symbols found in /usr/sbin/httpd) [New LWP 204177] [New LWP 204154] [New LWP 204152] [New LWP 204151] [New LWP 204107] [New LWP 204169] [New LWP 204147] [New LWP 204149] [New LWP 204170] [New LWP 204173] [New LWP 204186] [New LWP 204185] [New LWP 204181] [New LWP 204189] [New LWP 204184] [New LWP 204171] [New LWP 204172] [New LWP 204178] [New LWP 204175] [New LWP 204187] [New LWP 204174] [New LWP 204176] [New LWP 204179] [New LWP 204180] [New LWP 204182] [New LWP 204183] [New LWP 204188] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `/usr/sbin/httpd -k start'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f2a32a4109f in mdb_midl_append_list (idp=0x7f29f8041b13, app=0x25fa538) at midl.c:175 175 midl.c: No such file or directory. [Current thread is 1 (Thread 0x7f2a09ffb640 (LWP 204177))] (gdb) bt #0 0x00007f2a32a4109f in mdb_midl_append_list (idp=0x7f29f8041b13, app=0x25fa538) at midl.c:175 #1 0x00007f2a32a325bf in mdb_txn_commit (txn=0xf9bda0) at mdb.c:3485 #2 0x00007f2a32eb8904 in modsecurity::collection::backend::LMDB::storeOrUpdateFirst (this=0x1fe28b0, key=..., value=...) at collection/backend/lmdb.cc:245 #3 0x00007f2a32e97bb8 in modsecurity::collection::Collection::storeOrUpdateFirst (value=..., compartment2=..., compartment=..., key=..., this=0x1fe28b0) at ../headers/modsecurity/collection/collection.h:99 #4 modsecurity::variables::Ip_DynamicElement::storeOrUpdateFirst (value=..., var=..., t=<optimized out>) at ../src/variables/ip.h:110 #5 modsecurity::actions::SetVar::evaluate (this=0x30acfc0, rule=<optimized out>, t=<optimized out>) at actions/set_var.cc:144 #6 0x00007f2a32e641bc in modsecurity::RuleWithActions::executeActionsIndependentOfChainedRuleResult (this=this@entry=0x30c9f50, trans=trans@entry=0x7f29f8036e40, containsBlock=containsBlock@entry=0x7f2a09ff94ef, ruleMessage=...) at rule_with_actions.cc:199 #7 0x00007f2a32e6dc33 in modsecurity::RuleWithOperator::evaluate (this=<optimized out>, trans=<optimized out>, ruleMessage=...) at /usr/include/c++/11.2.0/ext/atomicity.h:109 #8 0x00007f2a32e66e59 in modsecurity::RuleWithActions::evaluate (this=0x30c9f50, transaction=0x7f29f8036e40) at /usr/include/c++/11.2.0/ext/atomicity.h:111 #9 0x00007f2a32e5cd3c in modsecurity::RulesSet::evaluate (this=<optimized out>, phase=phase@entry=3, t=t@entry=0x7f29f8036e40) at rules_set.cc:210 #10 0x00007f2a32e41793 in modsecurity::Transaction::processRequestBody (this=0x7f29f8036e40) at transaction.cc:942 #11 0x00007f2a32fa0a28 in hook_request_late () from /usr/lib64/httpd/modules/mod_security3.so #12 0x000000000045616b in ap_process_request_internal () #13 0x0000000000476ef3 in ap_process_async_request () #14 0x0000000000473150 in ap_process_http_connection () #15 0x00000000004695bf in ap_run_process_connection () #16 0x00007f2a33492831 in process_socket () from /usr/lib64/httpd/modules/mod_mpm_event.so #17 0x00007f2a33493307 in worker_thread () from /usr/lib64/httpd/modules/mod_mpm_event.so #18 0x00007f2a33703fd6 in start_thread () from /lib64/libpthread.so.0 #19 0x00007f2a336241df in clone () from /lib64/libc.so.6 (gdb) Regards, Carlos Velasco -- You are receiving this mail because: You are on the CC list for the issue.

1 6

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs