- openldap-bugs - openldap.org

Re: (ITS#5296) Search netgroup by triple don't report existing entry
by hyc＠symas.com 22 Dec '07

22 Dec '07

rochette_jean-louis(a)emc.com wrote: > Full_Name: Jean-Louis ROCHETTE > Version: 2.3.39 > OS: Linux Fedora > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (152.62.109.163) > > > Brief description of the problem > -------------------------------- > Lookup of a netgroup by triple doesn't work in last stable release slapd 2.3.39, > though it worked well with slapd 2.3.27. > This looks like a regression in slapd. > This should be easy to reproduce. > The problem was first noticed in slapd 2.3.30. > The lookup by triple succeeds with a iPlanet server. There are no matching rules defined for nisNetgroupTriple in nis.schema. There have never been, since RFC2307 doesn't define any. As such, filtering by nisNetgroupTriple is totally undefined. Any server that returns your expected result using the search filter you provide is broken. There is no regression here. Your distro vendor may have hacked their own schema files to provide one, that's an issue for you to discuss with your vendor. This ITS will be closed. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5261) Samba4 can 'hang' OpenLDAP slapd
by hyc＠symas.com 21 Dec '07

21 Dec '07

Andrew Bartlett wrote: > On Fri, 2007-12-21 at 19:55 -0800, Howard Chu wrote: >> Fixed in CVS HEAD. Happy New Year! ;) > > While I still have other issues (probably in Samba), we are past this > one. Thankyou very much! Great, thanks for the confirmation. > > Andrew Bartlett > -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#4982) link libldap_r explicitly with the threading libraries
by quanah＠zimbra.com 21 Dec '07

21 Dec '07

--On December 21, 2007 8:17:40 PM +0000 rra(a)stanford.edu wrote: > Is there any further thoughts on this ITS? It's still open and it doesn't > look like the patch has been applied, but it seemed like we'd reached a > conclusion that it was the right thing to do. This is now fixed in HEAD and 2.4. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#4982) link libldap_r explicitly with the threading libraries
by rra＠stanford.edu 21 Dec '07

21 Dec '07

Is there any further thoughts on this ITS? It's still open and it doesn't look like the patch has been applied, but it seemed like we'd reached a conclusion that it was the right thing to do. To recap, the problem is that libldap_r isn't being linked with the threading libraries, which means that when the linker builds the shared library, it doesn't have symbol versioning information available for the pthread functions and creates unversioned references. If the current ABI of the functions ever changes (as has happened in the past with glibc on Alpha), segfaults and other unpleasantness result. The patch adds the threading libraries to the link command for libldap_r so that the linker has the symbol versioning information available and can bind the pthread functions to the appropriate symbol versions in glibc, allowing the library to keep working using glibc's backwards compatibility support even if the current ABI changes again. -- Russ Allbery (rra(a)stanford.edu) <http://www.eyrie.org/~eagle/>

1 0

Re: (ITS#5296) Search netgroup by triple don't report existing entry
by quanah＠zimbra.com 21 Dec '07

21 Dec '07

Please verify if this issue occurs in OpenLDAP 2.4.7. Thanks. --Quanah --On December 21, 2007 11:37:38 AM +0000 rochette_jean-louis(a)emc.com wrote: > Full_Name: Jean-Louis ROCHETTE > Version: 2.3.39 > OS: Linux Fedora > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (152.62.109.163) > > > Brief description of the problem > -------------------------------- > Lookup of a netgroup by triple doesn't work in last stable release slapd > 2.3.39, though it worked well with slapd 2.3.27. > This looks like a regression in slapd. > This should be easy to reproduce. > The problem was first noticed in slapd 2.3.30. > The lookup by triple succeeds with a iPlanet server. > > > Details > ------- > Let's define a host, and a netgroup with a single triple designating this > host: > > dn: cn=r2d2,ou=Hosts,dc=devldapdom1,dc=lcsc > objectClass: top > objectClass: ipHost > objectClass: device > ipHostNumber: 192.168.5.69 > cn: r2d2 > > dn: cn=r2d2netg,ou=netgroup,dc=devldapdom1,dc=lcsc > objectClass: top > objectClass: nisNetgroup > cn: r2d2netg > description: netgroup r2d2netg to test AR 98216 > nisNetgroupTriple: (r2d2,,) > > The syntax for the nisNetgroupTriple attribute is IA5String (instead of > Netgroup Triple): > attributeTypes: ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgroup > triple' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) > > > 1) *** Test with slapd 2.3.27 : OK *** > jlr@SUSE-LDAP1(53) uname -a > Linux SUSE-LDAP1 2.6.18.2-34-default #1 SMP Mon Nov 27 11:46:27 UTC 2006 > i686 i686 i386 GNU/Linux > jlr@SUSE-LDAP1(42) ps -ef |grep slap > ldap 3774 1 0 Nov29 ? 00:04:47 /usr/lib/openldap/slapd -h > ldap:/// -u ldap -g ldap -o slp=on > jlr@SUSE-LDAP1(45) /usr/lib/openldap/slapd -V > @(#) $OpenLDAP: slapd 2.3.27 (Nov 25 2006 17:08:16) $ > > abuild@eisler:/usr/src/packages/BUILD/openldap-2.3.27/servers/slapd > jlr@SUSE-LDAP1(46) ldapsearch -V > ldapsearch: @(#) $OpenLDAP: ldapsearch 2.3.27 (Nov 25 2006 17:09:14) $ > abuild@dale:/usr/src/packages/BUILD/openldap-2.3.27/clients/tools > (LDAP library: OpenLDAP 20327) > > // locate the netgroup by name -> find r2d2netg with triple (r2d2,,) : OK > jlr@SUSE-LDAP1(49) ldapsearch -x -b "ou=netgroup,dc=devldapdom1,dc=lcsc" > -s one "(&(objectClass=nisNetgroup)(cn=r2d2netg))" cn nisNetgroupTriple ># extended LDIF ># ># LDAPv3 ># base <ou=netgroup,dc=devldapdom1,dc=lcsc> with scope oneLevel ># filter: (&(objectClass=nisNetgroup)(cn=r2d2netg)) ># requesting: cn nisNetgroupTriple ># > ># r2d2netg, netgroup, devldapdom1.lcsc > dn: cn=r2d2netg,ou=netgroup,dc=devldapdom1,dc=lcsc > cn: r2d2netg > nisNetgroupTriple: (r2d2,,) > ># search result > search: 2 > result: 0 Success > ># numResponses: 2 ># numEntries: 1 > > // locate the netgroup by triple -> found too, ok. > jlr@SUSE-LDAP1(52) ldapsearch -x -b "ou=netgroup,dc=devldapdom1,dc=lcsc" > -s one "(&(objectClass=nisNetgroup)(nisNetgroupTriple=$r2d2,,$))" cn ># extended LDIF ># ># LDAPv3 ># base <ou=netgroup,dc=devldapdom1,dc=lcsc> with scope oneLevel ># filter: (&(objectClass=nisNetgroup)(nisNetgroupTriple=$r2d2,,$)) ># requesting: cn ># > ># r2d2netg, netgroup, devldapdom1.lcsc > dn: cn=r2d2netg,ou=netgroup,dc=devldapdom1,dc=lcsc > cn: r2d2netg > ># search result > search: 2 > result: 0 Success > ># numResponses: 2 ># numEntries: 1 > > > 2) *** Test with slapd 2.3.39 : PROBLEM *** > jlr@newlnxjlr(19) uname -a > Linux newlnxjlr 2.6.18-1.2798.fc6 #1 SMP Mon Oct 16 14:37:32 EDT 2006 > i686 i686 i386 GNU/Linux > jlr@newlnxjlr(17) ps -ef |grep slap > ldap 4684 1 0 Dec20 ? 00:00:00 /usr/sbin/slapd -h > ldap:/// -u ldap > jlr@newlnxjlr(18) /usr/sbin/slapd -V > @(#) $OpenLDAP: slapd 2.3.39 (Dec 20 2007 17:00:06) $ > jlr@newlnxjlr:/tmp/openldap-2.3.39/servers/slapd > jlr@newlnxjlr(20) ldapsearch -V > ldapsearch: @(#) $OpenLDAP: ldapsearch 2.3.39 (Dec 20 2007 16:58:50) $ > jlr@newlnxjlr:/tmp/openldap-2.3.39/clients/tools > (LDAP library: OpenLDAP 20339) > // this server is a replicate of previous one > > // locate the netgroup by name -> find r2d2netg with triple (r2d2,,) : OK > jlr@newlnxjlr(24) ldapsearch -x -b "ou=netgroup,dc=devldapdom1,dc=lcsc" > -s one "(&(objectClass=nisNetgroup)(cn=r2d2netg))" cn nisNetgroupTriple ># extended LDIF ># ># LDAPv3 ># base <ou=netgroup,dc=devldapdom1,dc=lcsc> with scope oneLevel ># filter: (&(objectClass=nisNetgroup)(cn=r2d2netg)) ># requesting: cn nisNetgroupTriple ># > ># r2d2netg, netgroup, devldapdom1.lcsc > dn: cn=r2d2netg,ou=netgroup,dc=devldapdom1,dc=lcsc > cn: r2d2netg > nisNetgroupTriple: (r2d2,,) > ># search result > search: 2 > result: 0 Success > ># numResponses: 2 ># numEntries: 1 > > // locate the netgroup by triple -> NOT FOUND? PROBLEM. > jlr@newlnxjlr(25) ldapsearch -x -b "ou=netgroup,dc=devldapdom1,dc=lcsc" > -s one "(&(objectClass=nisNetgroup)(nisNetgroupTriple=$r2d2,,$))" cn ># extended LDIF ># ># LDAPv3 ># base <ou=netgroup,dc=devldapdom1,dc=lcsc> with scope oneLevel ># filter: (&(objectClass=nisNetgroup)(nisNetgroupTriple=$r2d2,,$)) ># requesting: cn ># > ># search result > search: 2 > result: 0 Success > ># numResponses: 1 > > // eof > > -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#5297) I have a problem when I switch authldap.schema
by quanah＠zimbra.com 21 Dec '07

21 Dec '07

Usage questions should be sent to openldap-software(a)openldap.org --Quanah --On December 21, 2007 1:01:59 PM +0000 bsdrab(a)gmail.com wrote: > Full_Name: Nikolay G. Petrov > Version: 24 > OS: FreeBSD 7.0-BETA2 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (193.125.204.194) > > > I have a problem with my ldap server. When I discribe path to > authldap.schema in slapd.conf, after restart slapd, sirver didn't to up. > > -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#5297) I have a problem when I switch authldap.schema
by bsdrab＠gmail.com 21 Dec '07

21 Dec '07

Full_Name: Nikolay G. Petrov Version: 24 OS: FreeBSD 7.0-BETA2 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (193.125.204.194) I have a problem with my ldap server. When I discribe path to authldap.schema in slapd.conf, after restart slapd, sirver didn't to up.

1 0

(ITS#5296) Search netgroup by triple don't report existing entry
by rochette_jean-louis＠emc.com 21 Dec '07

21 Dec '07

Full_Name: Jean-Louis ROCHETTE Version: 2.3.39 OS: Linux Fedora URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (152.62.109.163) Brief description of the problem -------------------------------- Lookup of a netgroup by triple doesn't work in last stable release slapd 2.3.39, though it worked well with slapd 2.3.27. This looks like a regression in slapd. This should be easy to reproduce. The problem was first noticed in slapd 2.3.30. The lookup by triple succeeds with a iPlanet server. Details ------- Let's define a host, and a netgroup with a single triple designating this host: dn: cn=r2d2,ou=Hosts,dc=devldapdom1,dc=lcsc objectClass: top objectClass: ipHost objectClass: device ipHostNumber: 192.168.5.69 cn: r2d2 dn: cn=r2d2netg,ou=netgroup,dc=devldapdom1,dc=lcsc objectClass: top objectClass: nisNetgroup cn: r2d2netg description: netgroup r2d2netg to test AR 98216 nisNetgroupTriple: (r2d2,,) The syntax for the nisNetgroupTriple attribute is IA5String (instead of Netgroup Triple): attributeTypes: ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgroup triple' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) 1) *** Test with slapd 2.3.27 : OK *** jlr@SUSE-LDAP1(53) uname -a Linux SUSE-LDAP1 2.6.18.2-34-default #1 SMP Mon Nov 27 11:46:27 UTC 2006 i686 i686 i386 GNU/Linux jlr@SUSE-LDAP1(42) ps -ef |grep slap ldap 3774 1 0 Nov29 ? 00:04:47 /usr/lib/openldap/slapd -h ldap:/// -u ldap -g ldap -o slp=on jlr@SUSE-LDAP1(45) /usr/lib/openldap/slapd -V @(#) $OpenLDAP: slapd 2.3.27 (Nov 25 2006 17:08:16) $ abuild@eisler:/usr/src/packages/BUILD/openldap-2.3.27/servers/slapd jlr@SUSE-LDAP1(46) ldapsearch -V ldapsearch: @(#) $OpenLDAP: ldapsearch 2.3.27 (Nov 25 2006 17:09:14) $ abuild@dale:/usr/src/packages/BUILD/openldap-2.3.27/clients/tools (LDAP library: OpenLDAP 20327) // locate the netgroup by name -> find r2d2netg with triple (r2d2,,) : OK jlr@SUSE-LDAP1(49) ldapsearch -x -b "ou=netgroup,dc=devldapdom1,dc=lcsc" -s one "(&(objectClass=nisNetgroup)(cn=r2d2netg))" cn nisNetgroupTriple # extended LDIF # # LDAPv3 # base <ou=netgroup,dc=devldapdom1,dc=lcsc> with scope oneLevel # filter: (&(objectClass=nisNetgroup)(cn=r2d2netg)) # requesting: cn nisNetgroupTriple # # r2d2netg, netgroup, devldapdom1.lcsc dn: cn=r2d2netg,ou=netgroup,dc=devldapdom1,dc=lcsc cn: r2d2netg nisNetgroupTriple: (r2d2,,) # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 // locate the netgroup by triple -> found too, ok. jlr@SUSE-LDAP1(52) ldapsearch -x -b "ou=netgroup,dc=devldapdom1,dc=lcsc" -s one "(&(objectClass=nisNetgroup)(nisNetgroupTriple=$r2d2,,$))" cn # extended LDIF # # LDAPv3 # base <ou=netgroup,dc=devldapdom1,dc=lcsc> with scope oneLevel # filter: (&(objectClass=nisNetgroup)(nisNetgroupTriple=$r2d2,,$)) # requesting: cn # # r2d2netg, netgroup, devldapdom1.lcsc dn: cn=r2d2netg,ou=netgroup,dc=devldapdom1,dc=lcsc cn: r2d2netg # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 2) *** Test with slapd 2.3.39 : PROBLEM *** jlr@newlnxjlr(19) uname -a Linux newlnxjlr 2.6.18-1.2798.fc6 #1 SMP Mon Oct 16 14:37:32 EDT 2006 i686 i686 i386 GNU/Linux jlr@newlnxjlr(17) ps -ef |grep slap ldap 4684 1 0 Dec20 ? 00:00:00 /usr/sbin/slapd -h ldap:/// -u ldap jlr@newlnxjlr(18) /usr/sbin/slapd -V @(#) $OpenLDAP: slapd 2.3.39 (Dec 20 2007 17:00:06) $ jlr@newlnxjlr:/tmp/openldap-2.3.39/servers/slapd jlr@newlnxjlr(20) ldapsearch -V ldapsearch: @(#) $OpenLDAP: ldapsearch 2.3.39 (Dec 20 2007 16:58:50) $ jlr@newlnxjlr:/tmp/openldap-2.3.39/clients/tools (LDAP library: OpenLDAP 20339) // this server is a replicate of previous one // locate the netgroup by name -> find r2d2netg with triple (r2d2,,) : OK jlr@newlnxjlr(24) ldapsearch -x -b "ou=netgroup,dc=devldapdom1,dc=lcsc" -s one "(&(objectClass=nisNetgroup)(cn=r2d2netg))" cn nisNetgroupTriple # extended LDIF # # LDAPv3 # base <ou=netgroup,dc=devldapdom1,dc=lcsc> with scope oneLevel # filter: (&(objectClass=nisNetgroup)(cn=r2d2netg)) # requesting: cn nisNetgroupTriple # # r2d2netg, netgroup, devldapdom1.lcsc dn: cn=r2d2netg,ou=netgroup,dc=devldapdom1,dc=lcsc cn: r2d2netg nisNetgroupTriple: (r2d2,,) # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 // locate the netgroup by triple -> NOT FOUND? PROBLEM. jlr@newlnxjlr(25) ldapsearch -x -b "ou=netgroup,dc=devldapdom1,dc=lcsc" -s one "(&(objectClass=nisNetgroup)(nisNetgroupTriple=$r2d2,,$))" cn # extended LDIF # # LDAPv3 # base <ou=netgroup,dc=devldapdom1,dc=lcsc> with scope oneLevel # filter: (&(objectClass=nisNetgroup)(nisNetgroupTriple=$r2d2,,$)) # requesting: cn # # search result search: 2 result: 0 Success # numResponses: 1 // eof

1 0

syncrepl (refreshAndPersist) fails after system date is moved backwards
by jan.cedergren＠nsn.com 21 Dec '07

21 Dec '07

Hello, I'm facing some problems with replication and hoping that someone could clarify how this case should work (is this a bug or a feature). Replication seems to work initially as expected but if I change the system date to something in the past (e.g. 1 year backwards) then the replication stops working. When I change back the current date (to the year that it initially was) then everything seems to work fine again. Is this kind of behaviour in LDAP a restriction that has to do with having timestamps in the CSNs or is this a bug? I tried to find this problem from the archives with no success. Br, -Jani

2 2

(ITS#5295) option to allow slapd bind to any available port
by chitrav＠us.ibm.com 20 Dec '07

20 Dec '07

Full_Name: Chitra Vemkatramani Version: 2.3.27 OS: Redhat URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (162.83.178.28) For a project that we are using openldap in, we would like to allow multiple users to start up ldap servers on the same machine. We would like an option on the slapd command line asking the server to pick any available port to bind to. We can then do netstat, find the port and pass that on to the client. Here is the patch we put in, to allow us to specify -1 for the port, so that the server will pick any available port. Can you please consider adding this to the server options ? --- openldap-2.3.27/libraries/libldap/url.c 2006-04-03 15:49:55.000000000 -0400 +++ /homes/hny1/chitrav/bindport0/url.c 2007-04-19 12:26:47.407806503 -0400 @@ -833,7 +833,7 @@ ludp->lud_next = NULL; ludp->lud_host = NULL; - ludp->lud_port = 0; + ludp->lud_port = -1; ludp->lud_dn = NULL; ludp->lud_attrs = NULL; ludp->lud_scope = LDAP_SCOPE_DEFAULT; @@ -1118,7 +1118,7 @@ (*ludpp)->lud_host = NULL; } - if ((*ludpp)->lud_port == 0) { + if ((*ludpp)->lud_port == -1) { if( strcmp((*ludpp)->lud_scheme, "ldap") == 0 ) { (*ludpp)->lud_port = LDAP_PORT; #ifdef LDAP_CONNECTIONLESS --- openldap-2.3.27/servers/slapd/daemon.c 2006-05-11 14:33:31.000000000 -0400 +++ /homes/hny1/chitrav/bindport0/daemon.c 2007-04-19 12:35:25.814156154 -0400 @@ -683,7 +683,7 @@ struct sockaddr **sap; #ifdef LDAP_PF_LOCAL - if ( port == 0 ) { + if ( port == -1 ) { *sal = ch_malloc(2 * sizeof(void *)); if (*sal == NULL) return -1; @@ -866,12 +866,12 @@ return -1; } - if(! lud->lud_port ) lud->lud_port = LDAP_PORT; + if( lud->lud_port == -1 ) lud->lud_port = LDAP_PORT; #else l.sl_is_tls = ldap_pvt_url_scheme2tls( lud->lud_scheme ); - if(! lud->lud_port ) { + if( lud->lud_port == -1 ) { lud->lud_port = l.sl_is_tls ? LDAPS_PORT : LDAP_PORT; } #endif

1 0

(ITS#5294) ldapdelete gives error when too many entries
by chitrav＠us.ibm.com 20 Dec '07

20 Dec '07

Full_Name: Chitra Vemkatramani Version: 2.3.27 OS: Redhat URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (162.83.178.28) The ldapdelete command does not have a sizelimit option. If I have a lot of entries in my LDAP server and issue an ldapdelete command, the command fails saying that there are too many entries (default seems to be 500). It would be useful to have a -z <sizelimit> option for ldapdelete, as for ldapsearch, so that I can use ldapdelete to delete sets of entries at a time. thanks -Chitra

1 0

(ITS#5293) ldapdelete issue
by chitrav＠us.ibm.com 20 Dec '07

20 Dec '07

Full_Name: Chitra Venkatramani Version: 2.3.27 OS: Redhat URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (162.83.178.28) I added a set of entries to the LDAP server, with sub directories, such as -- dn: cn=aa,ou=chitrav,o=ibm.com dn: ou=bb,ou=chitrav,o=ibm.com dn: cn=bb1,ou=bb,ou=chitrav,o=ibm.com dn: ou=cc,ou=bb,ou=chitrav,o=ibm.com dn: cn=cc1,ou=cc,ou=bb,ou=chitrav,o=ibm.com when I tried to do an ldapdelete command with -r option, I get the following error for every entry in the server, although all the entries do get deleted. ldap_search: Server is unwilling to perform (53) additional info: critical control unavailable in context On looking at the ldapdelete.c source code, lines 390 and 391 say c.ldctl_oid = LDAP_CONTROL_SUBENTRIES; c.ldctl_iscritical = 1; Marking the iscritical flag to 0, makes the error go away. I am not sure what this control does. This seems like a bug though. If so, please let me know what the fix should be, and in which release it will be available. Please let me know if you need any more information. thanks -Chitra

1 0

(ITS#3429) schema download module
by raphael.ouazana＠linagora.com 20 Dec '07

20 Dec '07

Hi, Le Sam 15 décembre 2007 04:31, hyc(a)symas.com a écrit : > I was looking at this code in relation to current HEAD/RE24, and things have > changed quite a bit. Given the ability to dynamically load schema into cn=config, is there still a need for this module? (It is in fact the changes > made for dynamic schema manipulation in slapd that causes the > compatibility > issues with this module.) I don't use this module anymore. Dynamic schema loading would be useful to replace it by allowing replication of schema. In fact I see only a case where the module is still useful: when I want to get automatically the schema of some directory which is not very respectful of LDAP standards, for example by providing attributes without OID. Regards, Raphaël Ouazana.

1 0

(ITS#5292) Test047 requires "rwm"
by daveh＠coreng.com.au 19 Dec '07

19 Dec '07

Full_Name: Dave Horsfall Version: 2.4.7 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (192.65.182.30) When running "make test", test047 fails because "rwm" is assumed to be configured. It works fine if I configure it in before compiling.

1 0

(ITS#5291) Client timeout dumps core
by daveh＠coreng.com.au 19 Dec '07

19 Dec '07

Full_Name: Dave Horsfall Version: 2.4.7 OS: FreeBSD 4.10-STABLE URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (192.65.182.30) On setting the general client timeout with LDAP_OPT_TIMEOUT and performing a search on a simulated hung server ("nc -l 389"), I get a coredump: assertion "r != NULL" failed: file "error.c", line 272 GDB: (gdb) bt #0 0x28136748 in kill () from /usr/lib/libc.so.4 #1 0x2817803e in abort () from /usr/lib/libc.so.4 #2 0x28154033 in __assert () from /usr/lib/libc.so.4 #3 0x280bf519 in ldap_parse_result (ld=0x8050000, r=0x0, errcodep=0xbfbfdb2c, matcheddnp=0x0, errmsgp=0x0, referralsp=0x0, serverctrls=0x0, freeit=0) at error.c:272 #4 0x280bf455 in ldap_result2error (ld=0x8050000, r=0x0, freeit=0) at error.c:222 #5 0x280c016d in ldap_search_s (ld=0x8050000, base=0x0, scope=2, filter=0xbfbff450 "(uid=daveh)", attrs=0xbfbfdbd8, attrsonly=0, res=0xbfbfdbe0) at search.c:392 #6 0x8049e9b in main (argc=0, argv=0xbfbff8b8) at lget.c:662

1 0

Re: (ITS#5290) -E option missing from ldapsearch man page
by hyc＠symas.com 19 Dec '07

19 Dec '07

thm(a)duke.edu wrote: > Full_Name: Hunter Matthews > Version: ldapsearch 2.3.27 > OS: Centos-5 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (152.3.12.219) > > > ldapsearch -h > shows all (I assume) the options I can use. > > But the man page is missing -E at least. The -E option was added in a later release. The current 2.3 release is 2.3.39; you're far out of date. This ITS will be closed. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5290) -E option missing from ldapsearch man page
by thm＠duke.edu 19 Dec '07

19 Dec '07

Full_Name: Hunter Matthews Version: ldapsearch 2.3.27 OS: Centos-5 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (152.3.12.219) ldapsearch -h shows all (I assume) the options I can use. But the man page is missing -E at least.

1 0

Re: (ITS#5289) test028 failed
by hyc＠symas.com 18 Dec '07

18 Dec '07

dieter(a)dkluenter.de wrote: > Full_Name: Dieter Kluenter > Version: HEAD > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (84.142.223.222) > test 028 fails with segmentation fault All tests pass for me. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5289) test028 failed
by dieter＠dkluenter.de 18 Dec '07

18 Dec '07

Full_Name: Dieter Kluenter Version: HEAD OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (84.142.223.222) test 028 fails with segmentation fault gdb output Reading symbols from /work/ldap-src/servers/slapd/back-ldap/.libs/back_ldap-2-devel.so.0...done. Loaded symbols for ../servers/slapd/back-ldap/.libs/back_ldap-2-devel.so.0 Reading symbols from /work/ldap-src/servers/slapd/overlays/.libs/rwm-2-devel.so.0...done. Loaded symbols for ../servers/slapd/overlays/.libs/rwm-2-devel.so.0 Core was generated by `/work/ldap-src/servers/slapd/.libs/lt-slapd -Ta -d 0 -f /work/ldap-src/tests/te'. Program terminated with signal 11, Segmentation fault. #0 0xb78926d4 in rwm_cf_gen (c=0xbff812dc) at rwm.c:1771 1771 (struct ldaprwmap *)on->on_bi.bi_private; (gdb) bt #0 0xb78926d4 in rwm_cf_gen (c=0xbff812dc) at rwm.c:1771 #1 0x0806eb67 in config_set_vals (Conf=0xb789a228, c=0xbff812dc) at config.c:314 #2 0x0806f049 in config_add_vals (Conf=0xb789a228, c=0xbff812dc) at config.c:383 #3 0x080f05be in over_db_config (be=0x8275840, fname=0x822e008 "/work/ldap-src/tests/testrun/slapadd.conf", lineno=98, argc=2, argv=0x8255648) at backover.c:151 #4 0x0807035f in read_config_file (fname=0x822e008 "/work/ldap-src/tests/testrun/slapadd.conf", depth=0, cf=0x0, cft=0x81c88a0) at config.c:792 #5 0x080667c4 in read_config (fname=0x822e008 "/work/ldap-src/tests/testrun/slapadd.conf", dir=0x0) at bconfig.c:3455 #6 0x080f5d18 in slap_tool_init (progname=0x818a920 "slapadd", tool=1, argc=10, argv=0xbff8ac74) at slapcommon.c:523 #7 0x080f3acc in slapadd (argc=10, argv=0xbff8ac74) at slapadd.c:73 #8 0x0805d013 in main (argc=10, argv=0xbff8ac74) at main.c:645 (gdb) (gdb) down 0xb78926d4 #8 0x0805d013 in main (argc=10, argv=0xbff8ac74) at main.c:645 645 rc = tools[i].func( argc, argv ); (gdb) down 0x0806eb67 #0 0xb78926d4 in rwm_cf_gen (c=0xbff812dc) at rwm.c:1771 1771 (struct ldaprwmap *)on->on_bi.bi_private; (gdb) -Dieter

1 0

(ITS#5288) DB_CONFIG.example URL wrong in comments
by ghenry＠OpenLDAP.org 18 Dec '07

18 Dec '07

Full_Name: Gavin Henry Version: All OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (212.159.59.85) Submitted by: ghenry Should be: http://www.oracle.com/technology/documentation/berkeley-db/db/ref/env/db_co… Correcting.

1 0

Re: (ITS#5287) lanman hashes break compiling with GnuTLS
by hyc＠symas.com 17 Dec '07

17 Dec '07

quanah(a)zimbra.com wrote: > <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=245341> > > has a patch for compiling against gcrypt, don't know it it needs work. That's all well and good, but we can't incorporate 3rd party code unless the author specifically grants us permission, with the same IPR declarations as any other submission. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5287) lanman hashes break compiling with GnuTLS
by quanah＠zimbra.com 17 Dec '07

17 Dec '07

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=245341> has a patch for compiling against gcrypt, don't know it it needs work. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#5287) lanman hashes break compiling with GnuTLS
by quanah＠zimbra.com 17 Dec '07

17 Dec '07

Full_Name: Quanah Gibson-Mount Version: 2.4.7 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (66.92.25.194) If one enables lanman hashes while building OpenLDAP, and using GnuTLS instead of OpenSSL, the build will fail as the lanman code has OpenSSL specific assumptions. --Quanah

1 0

(ITS#5286) NULL value in sets
by raphael.ouazana＠linagora.com 17 Dec '07

17 Dec '07

Full_Name: Raphael Ouazana Version: HEAD, RE24, RE23 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (164.2.255.244) Hi, I repost this here as I think the discussion was lost in a closed ITS (#4860). The two solutions (other operation or previous behavior) would be fine for us, but I have not really time to make a patch for the moment. Le Sam 10 novembre 2007 16:37, ando(a)sys-net.it a .crit : >> Below I represent sets in {element1, element2} notation, to describe the >> current behaviour (in HEAD) for slap_set_join on the '+' operation: >> - {"One", "Two"} + {"Three", "Four"} ==> {"OneThree", "OneFour", >> "TwoThree", "TwoFour"} >> - {"One", "Two"} + {""} ==> {"One", "Two"} >> - {"One", "Two"} + {NULL} ==> {"One", "Two"} > > Although sets lack a specification, I think this behavior is desirable > in many cases: adding NULL is equivalent to adding EMPTY (""). The problem is that {NULL} is equivalent to NULL, ie the empty set. >> Consider the following set: >> set="[ldap:///] + [ldap:///<searchbase>??<scope>?<filter1>] + >> [??<scope>?<filter2>]" >> >> Assuming [ldap:///<searchbase>??<scope>?<filter1>] returns a DN, this >> works. However, if [ldap:///<searchbase>??<scope>?<filter1>] returns no >> entries, this value is NULL. Therefore, the rest of the set becomes: >> "[ldap:///] + {NULL} + [??<scope>?<filter2>]" >> ...which is handed to the '+' operation in slap_set_join, to become: >> [ldap:///??<scope>?<filter2>] >> ...which obviously isn't valid. > > Well, it is valid: it's an URI with an EMPTY DN. In terms of LDAP, yes, but it can cause security issues here, as the EMPTY DN is at a higher level that any one which would have been returned by a normal result. >> The attached patch changes the last case of the current behaviour for >> slap_set_join on the '+' operation. This was already the behaviour >> before version 1.24.2.6 Thu Sep 13 20:43:29 2007 UTC: >> - {"One", "Two"} + {NULL} ==> {NULL} > > This is different from the above behavior, although it makes sense on > its own. Probably we need two different addition operators: one > inclusive (NULL is equivalent to "") and one exclusive (NULL nullifies > the concatenation). > > Comments? No problem in having the two operators. I just think the normal behavior is to return NULL, has in term of sets the cartesian product A x NULL returns NULL, not A. Regards, Raphael Ouazana.

1 0

Re: (ITS#5274) add search to online docs
by h.b.furuseth＠usit.uio.no 16 Dec '07

16 Dec '07

kurt(a)OpenLDAP.org writes: > Right, not everyone knows how to make the fullest of the tools > available to them, or even know what tools are available to them. I > don't see providing yet another tool as a solution to these problems. I thought I was suggesting (an interface to) an existing tool - and teaching a way to use that as an added bonus. A matter of semantics I guess. -- Regards, Hallvard

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs