- openldap-bugs - openldap.org

[Issue 8171] slapd-sock(5): Details for CONTINUE response missing
by openldap-its＠openldap.org 21 Jul '21

21 Jul '21

1 0

[Issue 8171] slapd-sock(5): Details for CONTINUE response missing
by openldap-its＠openldap.org 21 Jul '21

21 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8171 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |INVALID --- Comment #4 from Howard Chu <hyc(a)openldap.org> --- This ITS is invalid. (In reply to Michael Ströder from comment #0) > It's not clear from the description in slapd-sock(5) whether the CONTINUE > response in overlay mode should contain the msgid or not. > > While there's the detailed syntax for RESULT > > RESULT > msgid: <message id> This bug description is incorrect. This RESULT message syntax is only for response messages being sent from the slapo-sock overlay to the external program. It is clearly documented as such: If the overlay is configured to send response messages to the external program, they will appear as an extended RESULT message or as an ENTRY message, defined below. The RESULT message is similar to the one above, but also includes the msgid and any configured extensions: > code: <integer> > matched: <matched DN> > info: <text> > <blank line> For a standard RESULT message from the external program to the slapo-sock overlay, there is no msgid nor any trailing blank line. > > there is no such syntax for CONTINUE. > > Is this correct? No, because CONTINUE is not an extended response from slapo-sock to an external program. It is only a standard response from an external program to slapo-sock. > > CONTINUE > msgid: <message id> > <blank line> Closing this ITS. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6244] "now" dynacl module
by openldap-its＠openldap.org 20 Jul '21

20 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6244 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/361 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6445] Duplicate free with back-relay + passwd op
by openldap-its＠openldap.org 20 Jul '21

20 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6445 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6445] Duplicate free with back-relay + passwd op
by openldap-its＠openldap.org 20 Jul '21

20 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6445 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |WORKSFORME Status|UNCONFIRMED |RESOLVED --- Comment #2 from Howard Chu <hyc(a)openldap.org> --- Unable to reproduce. Probably fixed by df2573b4a91462031782bc7da84776b7c9e1583a ITS#6632 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8775] PASSMOD exop fails with RWM and tight ACLs
by openldap-its＠openldap.org 20 Jul '21

20 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8775 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|UNCONFIRMED |RESOLVED --- Comment #1 from Howard Chu <hyc(a)openldap.org> --- Fixed in master In general everything was working as documented in slapd-relay(5). But ACLs by "self" would never work due to the target entries having virtual DNs while the connection is always authenticated as the real DN. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6916] slapo-unique returns operations error when assertion control is used
by openldap-its＠openldap.org 20 Jul '21

20 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6916 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|UNCONFIRMED |RESOLVED --- Comment #12 from Howard Chu <hyc(a)openldap.org> --- fixed in master -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5555] authzTo ACL check for wrong principal
by openldap-its＠openldap.org 19 Jul '21

19 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=5555 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #17 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/360 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8171] slapd-sock(5): Details for CONTINUE response missing
by openldap-its＠openldap.org 19 Jul '21

19 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8171 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0 |1 --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/359 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6949] OpenLDAP Logging
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6949 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #4 from Howard Chu <hyc(a)openldap.org> --- (In reply to Quanah Gibson-Mount from comment #3) > hyc - This may be a good catchall bug for the logging rework. https://git.openldap.org/openldap/openldap/-/merge_requests/358 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9607] New: ldapsearch nettimeout option is not respected
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=9607 Issue ID: 9607 Summary: ldapsearch nettimeout option is not respected Product: OpenLDAP Version: 2.5.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: client tools Assignee: bugs(a)openldap.org Reporter: simon.pichugin(a)gmail.com Target Milestone: --- Description of problem: ldapsearch doesn't respect nettimeout option and hangs forever if the server is not accessible (for example when packets are dropped by iptables). Version-Release number of selected component (if applicable): ldapsearch: @(#) $OpenLDAP: ldapsearch 2.5.5 (Jul 9 2021 07:02:36) $ Checking with openssl-1.1.1k Additionally: The issue is also present in the older versions. Also, the issue still exists with openssl-3.0.0-0.alpha16 How reproducible: always Steps to Reproduce: 1. iptables -A INPUT -p tcp --sport 636 -m tcp --tcp-flags PSH PSH -j DROP 2. ldapsearch -o nettimeout=3 -H ldaps://192.168.0.1 -b dc=example,dc=com -x -s base Actual results: ldapsearch hangs Expected results: ldapsearch should return error: ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) Additional info: ldap_url_parse_ext(ldaps://192.168.0.1) ldap_create ldap_url_parse_ext(ldaps://192.168.0.1:636/??base) ldap_sasl_bind ldap_send_initial_request ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP 192.168.0.1:636 ldap_new_socket: 3 ldap_prepare_socket: 3 ldap_connect_to_host: Trying 192.168.0.1:636 ldap_pvt_connect: fd: 3 tm: 3 async: 0 ldap_ndelay_on: 3 attempting to connect: connect errno: 115 ldap_int_poll: fd: 3 tm: 3 ldap_is_sock_ready: 3 ldap_ndelay_off: 3 ldap_pvt_connect: 0 TLS trace: SSL_connect:before SSL initialization tls_write: want=285, written=285 0000: 16 03 01 01 18 01 00 01 14 03 03 d9 3e 1d 7f d5 ............>... 0010: d9 4d 52 b5 3f 49 33 f5 b2 4b 2c 1a 24 0b 3f d6 .MR.?I3..K,.$.?. ... ... 0100: e1 be fe 47 48 5c 93 91 6b eb fd 36 94 fd 64 7b ...GH\..k..6..d{ 0110: 84 80 7a 25 c5 c5 a4 9b d2 53 28 62 25 ..z%.....S(b% TLS trace: SSL_connect:SSLv3/TLS write client hello tls_read: want=5 error=Resource temporarily unavailable TLS trace: SSL_connect:SSLv3/TLS write client hello tls_read: want=5 error=Resource temporarily unavailable TLS trace: SSL_connect:SSLv3/TLS write client hello tls_read: want=5 error=Resource temporarily unavailable ... Repeats the following lines eternally: TLS trace: SSL_connect:SSLv3/TLS write client hello tls_read: want=5 error=Resource temporarily unavailable -- You are receiving this mail because: You are on the CC list for the issue.

1 2

[Issue 8047] TIMEOUT and NETWORK_TIMEOUT don't work properly with SSL
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8047 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |simon.pichugin(a)gmail.com --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- *** Issue 9607 has been marked as a duplicate of this issue. *** -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8008] back-ldap: proxyauth with saslmech EXTERNAL not working
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8008 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Target Milestone|2.6.0 |--- -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8008] back-ldap: proxyauth with saslmech EXTERNAL not working
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8008 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=7403 Resolution|--- |WONTFIX --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Behavior change due to fix in ITS#7403 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7403] back-ldap idassert always overrides
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=7403 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=8008 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7372] slapd-meta stops at first unreachable target
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=7372 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7372] slapd-meta stops at first unreachable target
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=7372 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |WORKSFORME --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- May have been fixed by its#8721. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8008] back-ldap: proxyauth with saslmech EXTERNAL not working
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8008 --- Comment #6 from Nadezhda Ivanova <nivanova(a)symas.com> --- I can't find the uploaded configuration or additionally requested data to try and reproduce the issue, but, judging by the last comment, the issue was caused by the fix of ITS#7403, included in 2.4.33. It seems to me this initially worked because of a bug, fixed with ITS#7403, so it is not a bug in itself. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7372] slapd-meta stops at first unreachable target
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=7372 --- Comment #2 from Nadezhda Ivanova <nivanova(a)symas.com> --- I wasn't able to reproduce this issue in 2.5 - failover worked for me both with -j DROP and when back-end ldap service was stopped. Based on the described behavior, there was some issue during initial bind of a connection that was fixed in the 9 since then, or it was a misconfiguration. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9610] New: Missing config.h
by openldap-its＠openldap.org 15 Jul '21

15 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=9610 Issue ID: 9610 Summary: Missing config.h Product: OpenLDAP Version: 2.5.5 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: jb00356987(a)techmahindra.com Target Milestone: --- Dears, When I tried to compile custom overlays written in "C", I get errors vs missing config.h file. I noticed it was missing from openldap2.5.5/servers/slapd/ directory but I found it in openldap2.4.59/servers/slapd/ directory. After I copied from 2.4.59 to 2.5.5 directory, I was able to compile but I'm not sure this is the correct version for 2.5.5 and why it's not present ? Can you advice ? Thx, Jean-Luc. -- You are receiving this mail because: You are on the CC list for the issue.

1 2

[Issue 9609] New: Unrecognized database type (monitor)
by openldap-its＠openldap.org 13 Jul '21

13 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=9609 Issue ID: 9609 Summary: Unrecognized database type (monitor) Product: OpenLDAP Version: 2.4.59 Hardware: All OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: fdepaz(a)vmware.com Target Milestone: --- Hello, I'm getting issues setting up the monitor backend in OpenLDAP 2.4.59, with it throwing the following error: ---- Unrecognized database type (monitor) 60edd056 olcDatabase: value #0: <olcDatabase> failed init (monitor) slapadd: could not add entry dn="olcDatabase={1}monitor,cn=config" (line=631): ---- It seems it is not detecting "monitor" as a valid database backend. My monitor configuration via cn=config is the following: ---- dn: olcDatabase=monitor,cn=config objectClass: olcDatabaseConfig olcDatabase: monitor ... ---- This same configuration is working without issues using both the previous version 2.4.58 and the newest 2.5.5, but not in 2.4.59. Regards, Francisco de Paz -- You are receiving this mail because: You are on the CC list for the issue.

1 2

[Issue 7215] Configuration Bug of index_substr_if_{max, min}len
by openldap-its＠openldap.org 13 Jul '21

13 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=7215 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs(a)openldap.org |ondra(a)mistotebe.net -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7080] post read control in back-config
by openldap-its＠openldap.org 13 Jul '21

13 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=7080 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs(a)openldap.org |ondra(a)mistotebe.net -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8197] slapo-constraint and delold=0
by openldap-its＠openldap.org 13 Jul '21

13 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8197 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.6.0 |2.7.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7347] Exclusive bit masks for: ACL_WADD, ACL_WDEL, and ACL_WRITE
by openldap-its＠openldap.org 13 Jul '21

13 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=7347 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.6.0 |2.7.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs