- openldap-bugs - openldap.org

(ITS#5262) test008 failures
by hyc＠OpenLDAP.org 05 Dec '07

05 Dec '07

Full_Name: Howard Chu Version: HEAD/RE24/RE23 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (76.91.220.157) Submitted by: hyc As originally reported by Aaron Richton here http://www.openldap.org/lists/openldap-devel/200711/msg00097.html and further here http://www.openldap.org/lists/openldap-devel/200712/msg00026.html ITS#5257 is a secondary effect of this bug.

1 0

Re: (ITS#5261) Samba4 can 'hang' OpenLDAP slapd
by abartlet＠samba.org 05 Dec '07

05 Dec '07

--=-Y3mFtyVHKLn0c8Gx/BD0 Content-Type: multipart/mixed; boundary="=-k5lHyfbmg0BMeRkyykUB" --=-k5lHyfbmg0BMeRkyykUB Content-Type: text/plain Content-Transfer-Encoding: quoted-printable On Wed, 2007-12-05 at 01:56 -0800, Howard Chu wrote: > abartlet(a)samba.org wrote: > > Full_Name: Andrew Bartlett > > Version: cvs 2007-12-05 > > OS: Fedora 8 > > URL: ftp://ftp.openldap.org/incoming/ > > Submission from: (NULL) (59.167.251.137) > >=20 > >=20 > > Using Samba4's 'make test', I can hang OpenLDAP's slapd. Samba4 SVN -r= 26305 > >=20 > > That is, it will not process any further requests, but is waiting in > > pthread_join(), not stuck somewhere else. > >=20 > > OpenLDAP was built with: > > `dirname $0`/configure --enable-overlays=3Dyes --enable-modules --enabl= e-dynamic > > --enable-syncprov=3Dyes > >=20 > > Samba4 was built with: > > CC=3D"ccache gcc" CFLAGS=3D"-O3" ./configure --enable-developer -C > > --prefix=3D/data/samba/samba4/prefix > > --with-winbindd-socket-dir=3D/data/samba/samba4/prefix/wb > >=20 > > Samba4 testsuite command line: > >=20 > > OPENLDAP_PATH=3D/usr/local/libexec:/usr/local/sbin TEST_LDAP=3Dyes make= test > >=20 > > This hangs during the 'provision' processing. > >=20 > > Note that this outputs an ldapi:// URL. Using that URL, this test show= s it's > > not just samba that is stuck: > >=20 > > ldapadd -H ldapi://%2Fhome%2Fdata%2Fsamba%2Fsamba4%2Fclean%2Fsource%2Fs= t%2Fdc%2Fprivate%2Fldap%2Fldapi > > -f st/dc/private/ldap/samba.example.com.ldif -D > > cn=3DManager,dc=3Dsamba,dc=3Dexample,dc=3Dcom -w localdcpass -x >=20 > You should run slapd with -d debugging enabled and (I usually start with = -d7)=20 > send the info for the last few requests prior to the hang. Also, you shou= ld=20 > use gdb to attach to the slapd and get a trace of all the threads to see = where=20 > they've gotten stuck. >=20 > http://www.openldap.org/faq/data/cache/59.html Loaded symbols for /usr/lib64/sasl2/libsasldb.so.2 0x00000035242076dd in pthread_join () from /lib64/libpthread.so.0 (gdb) thread apply all bt Thread 6 (Thread 1082132816 (LWP 26448)): #0 0x00000035236d50d8 in epoll_wait () from /lib64/libc.so.6 #1 0x000000000042af5a in ?? () #2 0x0000003524206407 in start_thread () from /lib64/libpthread.so.0 #3 0x00000035236d4b0d in clone () from /lib64/libc.so.6 Thread 5 (Thread 1090525520 (LWP 26453)): #0 0x000000352420a8f9 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00002aaaaaabd300 in ldap_int_thread_pool_wrapper (xpool=3D0x844530) at tpool.c:582 #2 0x0000003524206407 in start_thread () from /lib64/libpthread.so.0 #3 0x00000035236d4b0d in clone () from /lib64/libc.so.6 Thread 4 (Thread 1098918224 (LWP 26455)): #0 0x000000352420a8f9 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000353ac28a2d in __db_pthread_mutex_lock () from /lib64/libdb-4.6.so #2 0x000000353ac2866f in __db_tas_mutex_lock () from /lib64/libdb-4.6.so #3 0x000000353ac9136d in __lock_get_internal () from /lib64/libdb-4.6.so #4 0x000000353ac9193e in __lock_vec () from /lib64/libdb-4.6.so #5 0x000000353ac9241b in __lock_vec_pp () from /lib64/libdb-4.6.so #6 0x00000000004c545f in hdb_cache_entry_db_relock () #7 0x00000000004c5c00 in hdb_cache_modify () #8 0x00000000004a03bd in hdb_modify () #9 0x0000000000500036 in ?? () #10 0x0000000000500382 in ?? () #11 0x000000000043bd15 in ?? () #12 0x000000000043e52f in ?? () #13 0x000000000043f158 in slap_send_ldap_result () #14 0x00000000004c314d in hdb_add () #15 0x00000000004888d2 in overlay_op_walk () #16 0x0000000000488dd5 in ?? () #17 0x00000000004343d7 in fe_op_add () #18 0x0000000000434bdc in do_add () #19 0x000000000042dd86 in ?? () #20 0x000000000042e21d in ?? () #21 0x00002aaaaaabd2a7 in ldap_int_thread_pool_wrapper (xpool=3D0x844530) at tpool.c:625 ---Type <return> to continue, or q <return> to quit--- #22 0x0000003524206407 in start_thread () from /lib64/libpthread.so.0 #23 0x00000035236d4b0d in clone () from /lib64/libc.so.6 Thread 3 (Thread 1107310928 (LWP 26456)): #0 0x000000352420a8f9 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00002aaaaaabd300 in ldap_int_thread_pool_wrapper (xpool=3D0x844530) at tpool.c:582 #2 0x0000003524206407 in start_thread () from /lib64/libpthread.so.0 #3 0x00000035236d4b0d in clone () from /lib64/libc.so.6 Thread 2 (Thread 1115703632 (LWP 26457)): #0 0x000000352420a8f9 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x000000353ac28a2d in __db_pthread_mutex_lock () from /lib64/libdb-4.6.so #2 0x000000353ac2866f in __db_tas_mutex_lock () from /lib64/libdb-4.6.so #3 0x000000353ac9136d in __lock_get_internal () from /lib64/libdb-4.6.so #4 0x000000353ac916fa in __lock_get_pp () from /lib64/libdb-4.6.so #5 0x00000000004c52c4 in ?? () #6 0x00000000004c6a89 in hdb_cache_find_id () #7 0x00000000004c9f99 in hdb_dn2entry () #8 0x00000000004a3cd0 in hdb_referrals () #9 0x00000000004888d2 in overlay_op_walk () #10 0x0000000000488dd5 in ?? () #11 0x0000000000438f90 in backend_check_referrals () #12 0x000000000043427b in fe_op_add () #13 0x0000000000434bdc in do_add () #14 0x000000000042dd86 in ?? () #15 0x000000000042e21d in ?? () #16 0x00002aaaaaabd2a7 in ldap_int_thread_pool_wrapper (xpool=3D0x844530) at tpool.c:625 #17 0x0000003524206407 in start_thread () from /lib64/libpthread.so.0 #18 0x00000035236d4b0d in clone () from /lib64/libc.so.6 Thread 1 (Thread 46912500832560 (LWP 26443)): #0 0x00000035242076dd in pthread_join () from /lib64/libpthread.so.0 #1 0x0000000000428ca2 in slapd_daemon () #2 0x0000000000418519 in main () #0 0x00000035242076dd in pthread_join () from /lib64/libpthread.so.0 (gdb)=20 --=20 Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc. --=-k5lHyfbmg0BMeRkyykUB Content-Disposition: attachment; filename=logs-its Content-Transfer-Encoding: base64 Content-Type: text/plain; name=logs-its; charset=utf-8 c2VuZF9sZGFwX3Jlc3VsdDogY29ubj01IG9wPTMgcD0zDQpzZW5kX2xkYXBfcmVzdWx0OiBlcnI9 MCBtYXRjaGVkPSIiIHRleHQ9IiINCnNlbmRfbGRhcF9yZXNwb25zZTogbXNnaWQ9NCB0YWc9MTAx IGVycj0wDQpiZXJfZmx1c2gyOiAxNCBieXRlcyB0byBzZCAyMg0KICAwMDAwOiAgMzAgMGMgMDIg MDEgMDQgNjUgMDcgMGEgIDAxIDAwIDA0IDAwIDA0IDAwICAgICAgICAgMC4uLi5lLi4uLi4uLi4g ICAgDQpsZGFwX3dyaXRlOiB3YW50PTE0LCB3cml0dGVuPTE0DQogIDAwMDA6ICAzMCAwYyAwMiAw MSAwNCA2NSAwNyAwYSAgMDEgMDAgMDQgMDAgMDQgMDAgICAgICAgICAwLi4uLmUuLi4uLi4uLiAg ICANCmNvbm5lY3Rpb25fZ2V0KDIzKQ0KY29ubmVjdGlvbl9nZXQoMjMpOiBnb3QgY29ubmlkPTYN CmNvbm5lY3Rpb25fcmVhZCgyMyk6IGNoZWNraW5nIGZvciBpbnB1dCBvbiBpZD02DQpiZXJfZ2V0 X25leHQNCmxkYXBfcmVhZDogd2FudD04LCBnb3Q9OA0KICAwMDAwOiAgMzAgNzAgMDIgMDEgMDIg NjMgNjkgMDQgICAgICAgICAgICAgICAgICAgICAgICAgICAgMHAuLi5jaS4gICAgICAgICAgDQps ZGFwX3JlYWQ6IHdhbnQ9MTA2LCBnb3Q9MTA2DQogIDAwMDA6ICAxYSA0NCA0MyAzZCA3MyA2MSA2 ZCA2MiAgNjEgMmMgNDQgNDMgM2QgNjUgNzggNjEgICAuREM9c2FtYmEsREM9ZXhhICANCiAgMDAx MDogIDZkIDcwIDZjIDY1IDJjIDQ0IDQzIDNkICA2MyA2ZiA2ZCAwYSAwMSAwMCAwYSAwMSAgIG1w bGUsREM9Y29tLi4uLi4gIA0KICAwMDIwOiAgMDAgMDIgMDEgMDAgMDIgMDEgMDAgMDEgIDAxIDAw IGExIDIwIDg3IDBiIDZmIDYyICAgLi4uLi4uLi4uLi4gLi5vYiAgDQogIDAwMzA6ICA2YSA2NSA2 MyA3NCA0MyA2YyA2MSA3MyAgNzMgODcgMTEgNjQgNjkgNzMgNzQgNjkgICBqZWN0Q2xhc3MuLmRp c3RpICANCiAgMDA0MDogIDZlIDY3IDc1IDY5IDczIDY4IDY1IDY0ICA0ZSA2MSA2ZCA2NSAzMCAx YSAwNCAwZCAgIG5ndWlzaGVkTmFtZTAuLi4gIA0KICAwMDUwOiAgNjYgNTMgNGQgNGYgNTIgNmYg NmMgNjUgIDRmIDc3IDZlIDY1IDcyIDA0IDA5IDY5ICAgZlNNT1JvbGVPd25lci4uaSAgDQogIDAw NjA6ICA3MyA0NCA2NSA2YyA2NSA3NCA2NSA2NCAgYTAgMDAgICAgICAgICAgICAgICAgICAgICBz RGVsZXRlZC4uICAgICAgICANCmJlcl9nZXRfbmV4dDogdGFnIDB4MzAgbGVuIDExMiBjb250ZW50 czoNCmJlcl9nZXRfbmV4dA0KbGRhcF9yZWFkOiB3YW50PTggZXJyb3I9UmVzb3VyY2UgdGVtcG9y YXJpbHkgdW5hdmFpbGFibGUNCmNvbm49NiBvcD0xIGRvX3NlYXJjaA0KYmVyX3NjYW5mIGZtdCAo e21paWlpYikgYmVyOg0KPj4+IGRuUHJldHR5Tm9ybWFsOiA8REM9c2FtYmEsREM9ZXhhbXBsZSxE Qz1jb20+DQo9PiBsZGFwX2J2MmRuKERDPXNhbWJhLERDPWV4YW1wbGUsREM9Y29tLDApDQo8PSBs ZGFwX2J2MmRuKERDPXNhbWJhLERDPWV4YW1wbGUsREM9Y29tKT0wIA0KPT4gbGRhcF9kbjJidigy NzIpDQo8PSBsZGFwX2RuMmJ2KGRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tKT0wIA0KPT4gbGRh cF9kbjJidigyNzIpDQo8PSBsZGFwX2RuMmJ2KGRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tKT0w IA0KPDw8IGRuUHJldHR5Tm9ybWFsOiA8ZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20+LCA8ZGM9 c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20+DQpTUkNIICJEQz1zYW1iYSxEQz1leGFtcGxlLERDPWNv bSIgMCAwICAgIDAgMCAwDQpiZXJfc2NhbmYgZm10IChtKSBiZXI6DQpiZXJfc2NhbmYgZm10ICht KSBiZXI6DQogICAgZmlsdGVyOiAofChvYmplY3RDbGFzcz0qKShkaXN0aW5ndWlzaGVkTmFtZT0q KSkNCmJlcl9zY2FuZiBmbXQgKHtNfX0pIGJlcjoNCj0+IGdldF9jdHJscw0KPD0gZ2V0X2N0cmxz OiBuPTAgcmM9MCBlcnI9IiINCiAgICBhdHRyczogZlNNT1JvbGVPd25lciBpc0RlbGV0ZWQNCj0+ IGhkYl9zZWFyY2gNCmJkYl9kbjJlbnRyeSgiZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20iKQ0K c2VuZF9sZGFwX3Jlc3VsdDogY29ubj02IG9wPTEgcD0zDQpzZW5kX2xkYXBfcmVzdWx0OiBlcnI9 MTAgbWF0Y2hlZD0iIiB0ZXh0PSIiDQpzZW5kX2xkYXBfcmVzcG9uc2U6IG1zZ2lkPTIgdGFnPTEw MSBlcnI9MzINCmJlcl9mbHVzaDI6IDE0IGJ5dGVzIHRvIHNkIDIzDQogIDAwMDA6ICAzMCAwYyAw MiAwMSAwMiA2NSAwNyAwYSAgMDEgMjAgMDQgMDAgMDQgMDAgICAgICAgICAwLi4uLmUuLi4gLi4u LiAgICANCmxkYXBfd3JpdGU6IHdhbnQ9MTQsIHdyaXR0ZW49MTQNCiAgMDAwMDogIDMwIDBjIDAy IDAxIDAyIDY1IDA3IDBhICAwMSAyMCAwNCAwMCAwNCAwMCAgICAgICAgIDAuLi4uZS4uLiAuLi4u ICAgIA0KY29ubmVjdGlvbl9nZXQoMjMpDQpjb25uZWN0aW9uX2dldCgyMyk6IGdvdCBjb25uaWQ9 Ng0KY29ubmVjdGlvbl9yZWFkKDIzKTogY2hlY2tpbmcgZm9yIGlucHV0IG9uIGlkPTYNCmJlcl9n ZXRfbmV4dA0KbGRhcF9yZWFkOiB3YW50PTgsIGdvdD04DQogIDAwMDA6ICAzMCAzNSAwMiAwMSAw MyA2MyAzMCAwNCAgICAgICAgICAgICAgICAgICAgICAgICAgICAwNS4uLmMwLiAgICAgICAgICAN CmxkYXBfcmVhZDogd2FudD00NywgZ290PTQ3DQogIDAwMDA6ICAwMCAwYSAwMSAwMCAwYSAwMSAw MCAwMiAgMDEgMDAgMDIgMDEgMDAgMDEgMDEgMDAgICAuLi4uLi4uLi4uLi4uLi4uICANCiAgMDAx MDogIDg3IDBiIDZmIDYyIDZhIDY1IDYzIDc0ICA0MyA2YyA2MSA3MyA3MyAzMCAxMCAwNCAgIC4u b2JqZWN0Q2xhc3MwLi4gIA0KICAwMDIwOiAgMGUgNmUgNjEgNmQgNjkgNmUgNjcgNDMgIDZmIDZl IDc0IDY1IDc4IDc0IDczICAgICAgLm5hbWluZ0NvbnRleHRzICAgDQpiZXJfZ2V0X25leHQ6IHRh ZyAweDMwIGxlbiA1MyBjb250ZW50czoNCmJlcl9nZXRfbmV4dA0KbGRhcF9yZWFkOiB3YW50PTgg ZXJyb3I9UmVzb3VyY2UgdGVtcG9yYXJpbHkgdW5hdmFpbGFibGUNCmNvbm49NiBvcD0yIGRvX3Nl YXJjaA0KYmVyX3NjYW5mIGZtdCAoe21paWlpYikgYmVyOg0KPj4+IGRuUHJldHR5Tm9ybWFsOiA8 Pg0KPDw8IGRuUHJldHR5Tm9ybWFsOiA8PiwgPD4NClNSQ0ggIiIgMCAwICAgIDAgMCAwDQpiZXJf c2NhbmYgZm10IChtKSBiZXI6DQogICAgZmlsdGVyOiAob2JqZWN0Q2xhc3M9KikNCmJlcl9zY2Fu ZiBmbXQgKHtNfX0pIGJlcjoNCiAgICBhdHRyczogbmFtaW5nQ29udGV4dHMNCj0+IHNlbmRfc2Vh cmNoX2VudHJ5OiBjb25uIDYgZG49IiINCmJlcl9mbHVzaDI6IDE2NCBieXRlcyB0byBzZCAyMw0K ICAwMDAwOiAgMzAgODEgYTEgMDIgMDEgMDMgNjQgODEgIDliIDA0IDAwIDMwIDgxIDk2IDMwIDgx ICAgMC4uLi4uZC4uLi4wLi4wLiAgDQogIDAwMTA6ICA5MyAwNCAwZSA2ZSA2MSA2ZCA2OSA2ZSAg NjcgNDMgNmYgNmUgNzQgNjUgNzggNzQgICAuLi5uYW1pbmdDb250ZXh0ICANCiAgMDAyMDogIDcz IDMxIDgxIDgwIDA0IDM1IDYzIDZlICAzZCA1MyA2MyA2OCA2NSA2ZCA2MSAyYyAgIHMxLi4uNWNu PVNjaGVtYSwgIA0KICAwMDMwOiAgNjMgNmUgM2QgNDMgNmYgNmUgNjYgNjkgIDY3IDc1IDcyIDYx IDc0IDY5IDZmIDZlICAgY249Q29uZmlndXJhdGlvbiAgDQogIDAwNDA6ICAyYyA2NCA2MyAzZCA3 MyA2MSA2ZCA2MiAgNjEgMmMgNjQgNjMgM2QgNjUgNzggNjEgICAsZGM9c2FtYmEsZGM9ZXhhICAN CiAgMDA1MDogIDZkIDcwIDZjIDY1IDJjIDY0IDYzIDNkICA2MyA2ZiA2ZCAwNCAyYiA2MyA2ZSAz ZCAgIG1wbGUsZGM9Y29tLitjbj0gIA0KICAwMDYwOiAgNDMgNmYgNmUgNjYgNjkgNjcgNzUgNzIg IDYxIDc0IDY5IDZmIDZlIDJjIDY0IDYzICAgQ29uZmlndXJhdGlvbixkYyAgDQogIDAwNzA6ICAz ZCA3MyA2MSA2ZCA2MiA2MSAyYyA2NCAgNjMgM2QgNjUgNzggNjEgNmQgNzAgNmMgICA9c2FtYmEs ZGM9ZXhhbXBsICANCiAgMDA4MDogIDY1IDJjIDY0IDYzIDNkIDYzIDZmIDZkICAwNCAxYSA2NCA2 MyAzZCA3MyA2MSA2ZCAgIGUsZGM9Y29tLi5kYz1zYW0gIA0KICAwMDkwOiAgNjIgNjEgMmMgNjQg NjMgM2QgNjUgNzggIDYxIDZkIDcwIDZjIDY1IDJjIDY0IDYzICAgYmEsZGM9ZXhhbXBsZSxkYyAg DQogIDAwYTA6ICAzZCA2MyA2ZiA2ZCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICA9Y29tICAgICAgICAgICAgICANCmxkYXBfd3JpdGU6IHdhbnQ9MTY0LCB3cml0dGVuPTE2 NA0KICAwMDAwOiAgMzAgODEgYTEgMDIgMDEgMDMgNjQgODEgIDliIDA0IDAwIDMwIDgxIDk2IDMw IDgxICAgMC4uLi4uZC4uLi4wLi4wLiAgDQogIDAwMTA6ICA5MyAwNCAwZSA2ZSA2MSA2ZCA2OSA2 ZSAgNjcgNDMgNmYgNmUgNzQgNjUgNzggNzQgICAuLi5uYW1pbmdDb250ZXh0ICANCiAgMDAyMDog IDczIDMxIDgxIDgwIDA0IDM1IDYzIDZlICAzZCA1MyA2MyA2OCA2NSA2ZCA2MSAyYyAgIHMxLi4u NWNuPVNjaGVtYSwgIA0KICAwMDMwOiAgNjMgNmUgM2QgNDMgNmYgNmUgNjYgNjkgIDY3IDc1IDcy IDYxIDc0IDY5IDZmIDZlICAgY249Q29uZmlndXJhdGlvbiAgDQogIDAwNDA6ICAyYyA2NCA2MyAz ZCA3MyA2MSA2ZCA2MiAgNjEgMmMgNjQgNjMgM2QgNjUgNzggNjEgICAsZGM9c2FtYmEsZGM9ZXhh ICANCiAgMDA1MDogIDZkIDcwIDZjIDY1IDJjIDY0IDYzIDNkICA2MyA2ZiA2ZCAwNCAyYiA2MyA2 ZSAzZCAgIG1wbGUsZGM9Y29tLitjbj0gIA0KICAwMDYwOiAgNDMgNmYgNmUgNjYgNjkgNjcgNzUg NzIgIDYxIDc0IDY5IDZmIDZlIDJjIDY0IDYzICAgQ29uZmlndXJhdGlvbixkYyAgDQogIDAwNzA6 ICAzZCA3MyA2MSA2ZCA2MiA2MSAyYyA2NCAgNjMgM2QgNjUgNzggNjEgNmQgNzAgNmMgICA9c2Ft YmEsZGM9ZXhhbXBsICANCiAgMDA4MDogIDY1IDJjIDY0IDYzIDNkIDYzIDZmIDZkICAwNCAxYSA2 NCA2MyAzZCA3MyA2MSA2ZCAgIGUsZGM9Y29tLi5kYz1zYW0gIA0KICAwMDkwOiAgNjIgNjEgMmMg NjQgNjMgM2QgNjUgNzggIDYxIDZkIDcwIDZjIDY1IDJjIDY0IDYzICAgYmEsZGM9ZXhhbXBsZSxk YyAgDQogIDAwYTA6ICAzZCA2MyA2ZiA2ZCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICA9Y29tICAgICAgICAgICAgICANCjw9IHNlbmRfc2VhcmNoX2VudHJ5OiBjb25uIDYg ZXhpdC4NCnNlbmRfbGRhcF9yZXN1bHQ6IGNvbm49NiBvcD0yIHA9Mw0Kc2VuZF9sZGFwX3Jlc3Vs dDogZXJyPTAgbWF0Y2hlZD0iIiB0ZXh0PSIiDQpzZW5kX2xkYXBfcmVzcG9uc2U6IG1zZ2lkPTMg dGFnPTEwMSBlcnI9MA0KYmVyX2ZsdXNoMjogMTQgYnl0ZXMgdG8gc2QgMjMNCiAgMDAwMDogIDMw IDBjIDAyIDAxIDAzIDY1IDA3IDBhICAwMSAwMCAwNCAwMCAwNCAwMCAgICAgICAgIDAuLi4uZS4u Li4uLi4uICAgIA0KbGRhcF93cml0ZTogd2FudD0xNCwgd3JpdHRlbj0xNA0KICAwMDAwOiAgMzAg MGMgMDIgMDEgMDMgNjUgMDcgMGEgIDAxIDAwIDA0IDAwIDA0IDAwICAgICAgICAgMC4uLi5lLi4u Li4uLi4gICAgDQpjb25uZWN0aW9uX2dldCgyMykNCmNvbm5lY3Rpb25fZ2V0KDIzKTogZ290IGNv bm5pZD02DQpjb25uZWN0aW9uX3JlYWQoMjMpOiBjaGVja2luZyBmb3IgaW5wdXQgb24gaWQ9Ng0K YmVyX2dldF9uZXh0DQpsZGFwX3JlYWQ6IHdhbnQ9OCwgZ290PTgNCiAgMDAwMDogIDMwIDM3IDAy IDAxIDA0IDYzIDMyIDA0ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDA3Li4uYzIuICAgICAg ICAgIA0KbGRhcF9yZWFkOiB3YW50PTQ5LCBnb3Q9NDkNCiAgMDAwMDogIDAwIDBhIDAxIDAwIDBh IDAxIDAwIDAyICAwMSAwMCAwMiAwMSAwMCAwMSAwMSAwMCAgIC4uLi4uLi4uLi4uLi4uLi4gIA0K ICAwMDEwOiAgODcgMGIgNmYgNjIgNmEgNjUgNjMgNzQgIDQzIDZjIDYxIDczIDczIDMwIDEyIDA0 ICAgLi5vYmplY3RDbGFzczAuLiAgDQogIDAwMjA6ICAxMCA3MyA3NSA3MCA3MCA2ZiA3MiA3NCAg NjUgNjQgNDMgNmYgNmUgNzQgNzIgNmYgICAuc3VwcG9ydGVkQ29udHJvICANCiAgMDAzMDogIDZj ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGwgICAgICAg ICAgICAgICAgIA0KYmVyX2dldF9uZXh0OiB0YWcgMHgzMCBsZW4gNTUgY29udGVudHM6DQpiZXJf Z2V0X25leHQNCmxkYXBfcmVhZDogd2FudD04IGVycm9yPVJlc291cmNlIHRlbXBvcmFyaWx5IHVu YXZhaWxhYmxlDQpjb25uPTYgb3A9MyBkb19zZWFyY2gNCmJlcl9zY2FuZiBmbXQgKHttaWlpaWIp IGJlcjoNCj4+PiBkblByZXR0eU5vcm1hbDogPD4NCjw8PCBkblByZXR0eU5vcm1hbDogPD4sIDw+ DQpTUkNIICIiIDAgMCAgICAwIDAgMA0KYmVyX3NjYW5mIGZtdCAobSkgYmVyOg0KICAgIGZpbHRl cjogKG9iamVjdENsYXNzPSopDQpiZXJfc2NhbmYgZm10ICh7TX19KSBiZXI6DQogICAgYXR0cnM6 IHN1cHBvcnRlZENvbnRyb2wNCj0+IHNlbmRfc2VhcmNoX2VudHJ5OiBjb25uIDYgZG49IiINCmJl cl9mbHVzaDI6IDU4NSBieXRlcyB0byBzZCAyMw0KICAwMDAwOiAgMzAgODIgMDIgNDUgMDIgMDEg MDQgNjQgIDgyIDAyIDNlIDA0IDAwIDMwIDgyIDAyICAgMC4uRS4uLmQuLj4uLjAuLiAgDQogIDAw MTA6ICAzOCAzMCA4MiAwMiAzNCAwNCAxMCA3MyAgNzUgNzAgNzAgNmYgNzIgNzQgNjUgNjQgICA4 MC4uNC4uc3VwcG9ydGVkICANCiAgMDAyMDogIDQzIDZmIDZlIDc0IDcyIDZmIDZjIDMxICA4MiAw MiAxZSAwNCAxOSAzMSAyZSAzMyAgIENvbnRyb2wxLi4uLi4xLjMgIA0KICAwMDMwOiAgMmUgMzYg MmUgMzEgMmUgMzQgMmUgMzEgIDJlIDM0IDMyIDMwIDMzIDJlIDM2IDM2ICAgLjYuMS40LjEuNDIw My42NiAgDQogIDAwNDA6ICAzNiAyZSAzNSAyZSAzMSAzNCAwNCAxOCAgMzEgMmUgMzMgMmUgMzYg MmUgMzEgMmUgICA2LjUuMTQuLjEuMy42LjEuICANCiAgMDA1MDogIDM0IDJlIDMxIDJlIDM0IDMy IDMwIDMzICAyZSAzMSAyZSAzOSAyZSAzMSAyZSAzMSAgIDQuMS40MjAzLjEuOS4xLjEgIA0KICAw MDYwOiAgMDQgMWQgMzEgMmUgMzMgMmUgMzYgMmUgIDMxIDJlIDM0IDJlIDMxIDJlIDM0IDMyICAg Li4xLjMuNi4xLjQuMS40MiAgDQogIDAwNzA6ICAzMCAzMyAyZSAzNiAzNiAzNiAyZSAzMSAgMzEg MmUgMzkgMmUgMzUgMmUgMzEgMDQgICAwMy42NjYuMTEuOS41LjEuICANCiAgMDA4MDogIDE5IDMx IDJlIDMzIDJlIDM2IDJlIDMxICAyZSAzNCAyZSAzMSAyZSAzNCAzMiAyZSAgIC4xLjMuNi4xLjQu MS40Mi4gIA0KICAwMDkwOiAgMzIgMmUgMzIgMzcgMmUgMzggMmUgMzUgIDJlIDMxIDA0IDFhIDMx IDJlIDMzIDJlICAgMi4yNy44LjUuMS4uMS4zLiAgDQogIDAwYTA6ICAzNiAyZSAzMSAyZSAzNCAy ZSAzMSAyZSAgMzIgMzEgMzAgMzAgMzggMmUgMzEgMzAgICA2LjEuNC4xLjIxMDA4LjEwICANCiAg MDBiMDogIDM4IDJlIDM2IDMzIDJlIDMxIDA0IDE4ICAzMiAyZSAzMSAzNiAyZSAzOCAzNCAzMCAg IDguNjMuMS4uMi4xNi44NDAgIA0KICAwMGMwOiAgMmUgMzEgMmUgMzEgMzEgMzMgMzcgMzMgIDMw IDJlIDMzIDJlIDM0IDJlIDMxIDM4ICAgLjEuMTEzNzMwLjMuNC4xOCAgDQogIDAwZDA6ICAwNCAx NyAzMiAyZSAzMSAzNiAyZSAzOCAgMzQgMzAgMmUgMzEgMmUgMzEgMzEgMzMgICAuLjIuMTYuODQw LjEuMTEzICANCiAgMDBlMDogIDM3IDMzIDMwIDJlIDMzIDJlIDM0IDJlICAzMiAwNCAxYiAzMSAy ZSAzMyAyZSAzNiAgIDczMC4zLjQuMi4uMS4zLjYgIA0KICAwMGYwOiAgMmUgMzEgMmUgMzQgMmUg MzEgMmUgMzQgIDMyIDMwIDMzIDJlIDM2IDM2IDM2IDJlICAgLjEuNC4xLjQyMDMuNjY2LiAgDQog IDAxMDA6ICAzMSAzMSAyZSAzNyAyZSAzMiAwNCAxOSAgMzEgMmUgMzMgMmUgMzYgMmUgMzEgMmUg ICAxMS43LjIuLjEuMy42LjEuICANCiAgMDExMDogIDM0IDJlIDMxIDJlIDM0IDMyIDMwIDMzICAy ZSAzNiAzNiAzNiAyZSAzNSAyZSAzMSAgIDQuMS40MjAzLjY2Ni41LjEgIA0KICAwMTIwOiAgMzIg MDQgMTggMzEgMmUgMzMgMmUgMzYgIDJlIDMxIDJlIDM0IDJlIDMxIDJlIDM0ICAgMi4uMS4zLjYu MS40LjEuNCAgDQogIDAxMzA6ICAzMiAzMCAzMyAyZSAzNiAzNiAzNiAyZSAgMzUgMmUgMzIgMDQg MTcgMzEgMmUgMzMgICAyMDMuNjY2LjUuMi4uMS4zICANCiAgMDE0MDogIDJlIDM2IDJlIDMxIDJl IDM0IDJlIDMxICAyZSAzNCAzMiAzMCAzMyAyZSAzMSAyZSAgIC42LjEuNC4xLjQyMDMuMS4gIA0K ICAwMTUwOiAgMzEgMzAgMmUgMzEgMDQgMTcgMzEgMmUgIDMyIDJlIDM4IDM0IDMwIDJlIDMxIDMx ICAgMTAuMS4uMS4yLjg0MC4xMSAgDQogIDAxNjA6ICAzMyAzNSAzNSAzNiAyZSAzMSAyZSAzNCAg MmUgMzEgMzMgMzQgMzAgMDQgMTYgMzEgICAzNTU2LjEuNC4xMzQwLi4xICANCiAgMDE3MDogIDJl IDMyIDJlIDM4IDM0IDMwIDJlIDMxICAzMSAzMyAzNSAzNSAzNiAyZSAzMSAyZSAgIC4yLjg0MC4x MTM1NTYuMS4gIA0KICAwMTgwOiAgMzQgMmUgMzggMzAgMzUgMDQgMTcgMzEgIDJlIDMyIDJlIDM4 IDM0IDMwIDJlIDMxICAgNC44MDUuLjEuMi44NDAuMSAgDQogIDAxOTA6ICAzMSAzMyAzNSAzNSAz NiAyZSAzMSAyZSAgMzQgMmUgMzEgMzQgMzEgMzMgMDQgMTkgICAxMzU1Ni4xLjQuMTQxMy4uICAN CiAgMDFhMDogIDMxIDJlIDMzIDJlIDM2IDJlIDMxIDJlICAzNCAyZSAzMSAyZSAzNCAzMiAzMCAz MyAgIDEuMy42LjEuNC4xLjQyMDMgIA0KICAwMWIwOiAgMmUgMzYgMzYgMzYgMmUgMzUgMmUgMzEg IDM1IDA0IDE3IDMxIDJlIDMyIDJlIDM4ICAgLjY2Ni41LjE1Li4xLjIuOCAgDQogIDAxYzA6ICAz NCAzMCAyZSAzMSAzMSAzMyAzNSAzNSAgMzYgMmUgMzEgMmUgMzQgMmUgMzEgMzMgICA0MC4xMTM1 NTYuMS40LjEzICANCiAgMDFkMDogIDMzIDM5IDA0IDE2IDMxIDJlIDMyIDJlICAzOCAzNCAzMCAy ZSAzMSAzMSAzMyAzNSAgIDM5Li4xLjIuODQwLjExMzUgIA0KICAwMWUwOiAgMzUgMzYgMmUgMzEg MmUgMzQgMmUgMzQgIDM3IDMzIDA0IDE2IDMxIDJlIDMyIDJlICAgNTYuMS40LjQ3My4uMS4yLiAg DQogIDAxZjA6ICAzOCAzNCAzMCAyZSAzMSAzMSAzMyAzNSAgMzUgMzYgMmUgMzEgMmUgMzQgMmUg MzMgICA4NDAuMTEzNTU2LjEuNC4zICANCiAgMDIwMDogIDMxIDM5IDA0IDE3IDMxIDJlIDMyIDJl ICAzOCAzMiAzNiAyZSAzMCAyZSAzMSAyZSAgIDE5Li4xLjIuODI2LjAuMS4gIA0KICAwMjEwOiAg MzMgMzMgMzQgMzQgMzggMzEgMzAgMmUgIDMyIDJlIDMzIDA0IDBlIDMxIDJlIDMzICAgMzM0NDgx MC4yLjMuLjEuMyAgDQogIDAyMjA6ICAyZSAzNiAyZSAzMSAyZSAzMSAyZSAzMSAgMzMgMmUgMzIg MDQgMGUgMzEgMmUgMzMgICAuNi4xLjEuMTMuMi4uMS4zICANCiAgMDIzMDogIDJlIDM2IDJlIDMx IDJlIDMxIDJlIDMxICAzMyAyZSAzMSAwNCAwYyAzMSAyZSAzMyAgIC42LjEuMS4xMy4xLi4xLjMg IA0KICAwMjQwOiAgMmUgMzYgMmUgMzEgMmUgMzEgMmUgMzEgIDMyICAgICAgICAgICAgICAgICAg ICAgICAgLjYuMS4xLjEyICAgICAgICAgDQpsZGFwX3dyaXRlOiB3YW50PTU4NSwgd3JpdHRlbj01 ODUNCiAgMDAwMDogIDMwIDgyIDAyIDQ1IDAyIDAxIDA0IDY0ICA4MiAwMiAzZSAwNCAwMCAzMCA4 MiAwMiAgIDAuLkUuLi5kLi4+Li4wLi4gIA0KICAwMDEwOiAgMzggMzAgODIgMDIgMzQgMDQgMTAg NzMgIDc1IDcwIDcwIDZmIDcyIDc0IDY1IDY0ICAgODAuLjQuLnN1cHBvcnRlZCAgDQogIDAwMjA6 ICA0MyA2ZiA2ZSA3NCA3MiA2ZiA2YyAzMSAgODIgMDIgMWUgMDQgMTkgMzEgMmUgMzMgICBDb250 cm9sMS4uLi4uMS4zICANCiAgMDAzMDogIDJlIDM2IDJlIDMxIDJlIDM0IDJlIDMxICAyZSAzNCAz MiAzMCAzMyAyZSAzNiAzNiAgIC42LjEuNC4xLjQyMDMuNjYgIA0KICAwMDQwOiAgMzYgMmUgMzUg MmUgMzEgMzQgMDQgMTggIDMxIDJlIDMzIDJlIDM2IDJlIDMxIDJlICAgNi41LjE0Li4xLjMuNi4x LiAgDQogIDAwNTA6ICAzNCAyZSAzMSAyZSAzNCAzMiAzMCAzMyAgMmUgMzEgMmUgMzkgMmUgMzEg MmUgMzEgICA0LjEuNDIwMy4xLjkuMS4xICANCiAgMDA2MDogIDA0IDFkIDMxIDJlIDMzIDJlIDM2 IDJlICAzMSAyZSAzNCAyZSAzMSAyZSAzNCAzMiAgIC4uMS4zLjYuMS40LjEuNDIgIA0KICAwMDcw OiAgMzAgMzMgMmUgMzYgMzYgMzYgMmUgMzEgIDMxIDJlIDM5IDJlIDM1IDJlIDMxIDA0ICAgMDMu NjY2LjExLjkuNS4xLiAgDQogIDAwODA6ICAxOSAzMSAyZSAzMyAyZSAzNiAyZSAzMSAgMmUgMzQg MmUgMzEgMmUgMzQgMzIgMmUgICAuMS4zLjYuMS40LjEuNDIuICANCiAgMDA5MDogIDMyIDJlIDMy IDM3IDJlIDM4IDJlIDM1ICAyZSAzMSAwNCAxYSAzMSAyZSAzMyAyZSAgIDIuMjcuOC41LjEuLjEu My4gIA0KICAwMGEwOiAgMzYgMmUgMzEgMmUgMzQgMmUgMzEgMmUgIDMyIDMxIDMwIDMwIDM4IDJl IDMxIDMwICAgNi4xLjQuMS4yMTAwOC4xMCAgDQogIDAwYjA6ICAzOCAyZSAzNiAzMyAyZSAzMSAw NCAxOCAgMzIgMmUgMzEgMzYgMmUgMzggMzQgMzAgICA4LjYzLjEuLjIuMTYuODQwICANCiAgMDBj MDogIDJlIDMxIDJlIDMxIDMxIDMzIDM3IDMzICAzMCAyZSAzMyAyZSAzNCAyZSAzMSAzOCAgIC4x LjExMzczMC4zLjQuMTggIA0KICAwMGQwOiAgMDQgMTcgMzIgMmUgMzEgMzYgMmUgMzggIDM0IDMw IDJlIDMxIDJlIDMxIDMxIDMzICAgLi4yLjE2Ljg0MC4xLjExMyAgDQogIDAwZTA6ICAzNyAzMyAz MCAyZSAzMyAyZSAzNCAyZSAgMzIgMDQgMWIgMzEgMmUgMzMgMmUgMzYgICA3MzAuMy40LjIuLjEu My42ICANCiAgMDBmMDogIDJlIDMxIDJlIDM0IDJlIDMxIDJlIDM0ICAzMiAzMCAzMyAyZSAzNiAz NiAzNiAyZSAgIC4xLjQuMS40MjAzLjY2Ni4gIA0KICAwMTAwOiAgMzEgMzEgMmUgMzcgMmUgMzIg MDQgMTkgIDMxIDJlIDMzIDJlIDM2IDJlIDMxIDJlICAgMTEuNy4yLi4xLjMuNi4xLiAgDQogIDAx MTA6ICAzNCAyZSAzMSAyZSAzNCAzMiAzMCAzMyAgMmUgMzYgMzYgMzYgMmUgMzUgMmUgMzEgICA0 LjEuNDIwMy42NjYuNS4xICANCiAgMDEyMDogIDMyIDA0IDE4IDMxIDJlIDMzIDJlIDM2ICAyZSAz MSAyZSAzNCAyZSAzMSAyZSAzNCAgIDIuLjEuMy42LjEuNC4xLjQgIA0KICAwMTMwOiAgMzIgMzAg MzMgMmUgMzYgMzYgMzYgMmUgIDM1IDJlIDMyIDA0IDE3IDMxIDJlIDMzICAgMjAzLjY2Ni41LjIu LjEuMyAgDQogIDAxNDA6ICAyZSAzNiAyZSAzMSAyZSAzNCAyZSAzMSAgMmUgMzQgMzIgMzAgMzMg MmUgMzEgMmUgICAuNi4xLjQuMS40MjAzLjEuICANCiAgMDE1MDogIDMxIDMwIDJlIDMxIDA0IDE3 IDMxIDJlICAzMiAyZSAzOCAzNCAzMCAyZSAzMSAzMSAgIDEwLjEuLjEuMi44NDAuMTEgIA0KICAw MTYwOiAgMzMgMzUgMzUgMzYgMmUgMzEgMmUgMzQgIDJlIDMxIDMzIDM0IDMwIDA0IDE2IDMxICAg MzU1Ni4xLjQuMTM0MC4uMSAgDQogIDAxNzA6ICAyZSAzMiAyZSAzOCAzNCAzMCAyZSAzMSAgMzEg MzMgMzUgMzUgMzYgMmUgMzEgMmUgICAuMi44NDAuMTEzNTU2LjEuICANCiAgMDE4MDogIDM0IDJl IDM4IDMwIDM1IDA0IDE3IDMxICAyZSAzMiAyZSAzOCAzNCAzMCAyZSAzMSAgIDQuODA1Li4xLjIu ODQwLjEgIA0KICAwMTkwOiAgMzEgMzMgMzUgMzUgMzYgMmUgMzEgMmUgIDM0IDJlIDMxIDM0IDMx IDMzIDA0IDE5ICAgMTM1NTYuMS40LjE0MTMuLiAgDQogIDAxYTA6ICAzMSAyZSAzMyAyZSAzNiAy ZSAzMSAyZSAgMzQgMmUgMzEgMmUgMzQgMzIgMzAgMzMgICAxLjMuNi4xLjQuMS40MjAzICANCiAg MDFiMDogIDJlIDM2IDM2IDM2IDJlIDM1IDJlIDMxICAzNSAwNCAxNyAzMSAyZSAzMiAyZSAzOCAg IC42NjYuNS4xNS4uMS4yLjggIA0KICAwMWMwOiAgMzQgMzAgMmUgMzEgMzEgMzMgMzUgMzUgIDM2 IDJlIDMxIDJlIDM0IDJlIDMxIDMzICAgNDAuMTEzNTU2LjEuNC4xMyAgDQogIDAxZDA6ICAzMyAz OSAwNCAxNiAzMSAyZSAzMiAyZSAgMzggMzQgMzAgMmUgMzEgMzEgMzMgMzUgICAzOS4uMS4yLjg0 MC4xMTM1ICANCiAgMDFlMDogIDM1IDM2IDJlIDMxIDJlIDM0IDJlIDM0ICAzNyAzMyAwNCAxNiAz MSAyZSAzMiAyZSAgIDU2LjEuNC40NzMuLjEuMi4gIA0KICAwMWYwOiAgMzggMzQgMzAgMmUgMzEg MzEgMzMgMzUgIDM1IDM2IDJlIDMxIDJlIDM0IDJlIDMzICAgODQwLjExMzU1Ni4xLjQuMyAgDQog IDAyMDA6ICAzMSAzOSAwNCAxNyAzMSAyZSAzMiAyZSAgMzggMzIgMzYgMmUgMzAgMmUgMzEgMmUg ICAxOS4uMS4yLjgyNi4wLjEuICANCiAgMDIxMDogIDMzIDMzIDM0IDM0IDM4IDMxIDMwIDJlICAz MiAyZSAzMyAwNCAwZSAzMSAyZSAzMyAgIDMzNDQ4MTAuMi4zLi4xLjMgIA0KICAwMjIwOiAgMmUg MzYgMmUgMzEgMmUgMzEgMmUgMzEgIDMzIDJlIDMyIDA0IDBlIDMxIDJlIDMzICAgLjYuMS4xLjEz LjIuLjEuMyAgDQogIDAyMzA6ICAyZSAzNiAyZSAzMSAyZSAzMSAyZSAzMSAgMzMgMmUgMzEgMDQg MGMgMzEgMmUgMzMgICAuNi4xLjEuMTMuMS4uMS4zICANCiAgMDI0MDogIDJlIDM2IDJlIDMxIDJl IDMxIDJlIDMxICAzMiAgICAgICAgICAgICAgICAgICAgICAgIC42LjEuMS4xMiAgICAgICAgIA0K PD0gc2VuZF9zZWFyY2hfZW50cnk6IGNvbm4gNiBleGl0Lg0Kc2VuZF9sZGFwX3Jlc3VsdDogY29u bj02IG9wPTMgcD0zDQpzZW5kX2xkYXBfcmVzdWx0OiBlcnI9MCBtYXRjaGVkPSIiIHRleHQ9IiIN CnNlbmRfbGRhcF9yZXNwb25zZTogbXNnaWQ9NCB0YWc9MTAxIGVycj0wDQpiZXJfZmx1c2gyOiAx NCBieXRlcyB0byBzZCAyMw0KICAwMDAwOiAgMzAgMGMgMDIgMDEgMDQgNjUgMDcgMGEgIDAxIDAw IDA0IDAwIDA0IDAwICAgICAgICAgMC4uLi5lLi4uLi4uLi4gICAgDQpsZGFwX3dyaXRlOiB3YW50 PTE0LCB3cml0dGVuPTE0DQogIDAwMDA6ICAzMCAwYyAwMiAwMSAwNCA2NSAwNyAwYSAgMDEgMDAg MDQgMDAgMDQgMDAgICAgICAgICAwLi4uLmUuLi4uLi4uLiAgICANCmNvbm5lY3Rpb25fZ2V0KDIw KTogZ290IGNvbm5pZD0xDQpjb25uZWN0aW9uX3JlYWQoMjApOiBjaGVja2luZyBmb3IgaW5wdXQg b24gaWQ9MQ0KYmVyX2dldF9uZXh0DQpsZGFwX3JlYWQ6IHdhbnQ9OCwgZ290PTANCg0KYmVyX2dl dF9uZXh0IG9uIGZkIDIwIGZhaWxlZCBlcnJubz0wIChTdWNjZXNzKQ0KY29ubmVjdGlvbl9jbG9z aW5nOiByZWFkeWluZyBjb25uPTEgc2Q9MjAgZm9yIGNsb3NlDQpjb25uZWN0aW9uX2Nsb3NlOiBj b25uPTEgc2Q9MjANCmNvbm5lY3Rpb25fZ2V0KDIzKQ0KY29ubmVjdGlvbl9nZXQoMjMpOiBnb3Qg Y29ubmlkPTYNCmNvbm5lY3Rpb25fcmVhZCgyMyk6IGNoZWNraW5nIGZvciBpbnB1dCBvbiBpZD02 DQpiZXJfZ2V0X25leHQNCmxkYXBfcmVhZDogd2FudD04LCBnb3Q9OA0KICAwMDAwOiAgMzAgODIg MDggZWEgMDIgMDEgMDUgNjggICAgICAgICAgICAgICAgICAgICAgICAgICAgMC4uLi4uLmggICAg ICAgICAgDQpsZGFwX3JlYWQ6IHdhbnQ9MjI3OCwgZ290PTIyNzgNCiAgMDAwMDogIDgyIDA4IGUz IDA0IDFhIDQ0IDQzIDNkICA3MyA2MSA2ZCA2MiA2MSAyYyA0NCA0MyAgIC4uLi4uREM9c2FtYmEs REMgIA0KICAwMDEwOiAgM2QgNjUgNzggNjEgNmQgNzAgNmMgNjUgIDJjIDQ0IDQzIDNkIDYzIDZm IDZkIDMwICAgPWV4YW1wbGUsREM9Y29tMCAgDQogIDAwMjA6ICA4MiAwOCBjMyAzMCAwZCAwNCAw MiA2NCAgNjMgMzEgMDcgMDQgMDUgNzMgNjEgNmQgICAuLi4wLi4uZGMxLi4uc2FtICANCiAgMDAz MDogIDYyIDYxIDMwIDE0IDA0IDA5IDczIDYxICA2ZCA2MiA2MSAzNCA1MiA0NCA0ZSAzMSAgIGJh MC4uLnNhbWJhNFJETjEgIA0KICAwMDQwOiAgMDcgMDQgMDUgNzMgNjEgNmQgNjIgNjEgIDMwIDM5 IDA0IDBiIDZmIDYyIDZhIDY1ICAgLi4uc2FtYmEwOS4ub2JqZSAgDQogIDAwNTA6ICA2MyA3NCA0 MyA2YyA2MSA3MyA3MyAzMSAgMmEgMDQgMDMgNzQgNmYgNzAgMDQgMDYgICBjdENsYXNzMSouLnRv cC4uICANCiAgMDA2MDogIDY0IDZmIDZkIDYxIDY5IDZlIDA0IDA5ICA2NCA2ZiA2ZCA2MSA2OSA2 ZSA0NCA0ZSAgIGRvbWFpbi4uZG9tYWluRE4gIA0KICAwMDcwOiAgNTMgMDQgMTAgNjUgNzggNzQg NjUgNmUgIDczIDY5IDYyIDZjIDY1IDRmIDYyIDZhICAgUy4uZXh0ZW5zaWJsZU9iaiAgDQogIDAw ODA6ICA2NSA2MyA3NCAzMCA1NyAwNCAwZSA2ZiAgNjIgNmEgNjUgNjMgNzQgNDMgNjEgNzQgICBl Y3QwVy4ub2JqZWN0Q2F0ICANCiAgMDA5MDogIDY1IDY3IDZmIDcyIDc5IDMxIDQ1IDA0ICA0MyA0 MyA0ZSAzZCA0NCA0ZiA0ZCA0MSAgIGVnb3J5MUUuQ0NOPURPTUEgIA0KICAwMGEwOiAgNDkgNGUg MmQgNDQgNGUgNTMgMmMgNDMgIDRlIDNkIDUzIDQzIDQ4IDQ1IDRkIDQxICAgSU4tRE5TLENOPVND SEVNQSAgDQogIDAwYjA6ICAyYyA0MyA0ZSAzZCA0MyA0ZiA0ZSA0NiAgNDkgNDcgNTUgNTIgNDEg NTQgNDkgNGYgICAsQ049Q09ORklHVVJBVElPICANCiAgMDBjMDogIDRlIDJjIDQ0IDQzIDNkIDUz IDQxIDRkICA0MiA0MSAyYyA0NCA0MyAzZCA0NSA1OCAgIE4sREM9U0FNQkEsREM9RVggIA0KICAw MGQwOiAgNDEgNGQgNTAgNGMgNDUgMmMgNDQgNDMgIDNkIDQzIDRmIDRkIDMwIDgyIDA4IDA2ICAg QU1QTEUsREM9Q09NMC4uLiAgDQogIDAwZTA6ICAwNCAxNCA2ZSA1NCA1MyA2NSA2MyA3NSAgNzIg NjkgNzQgNzkgNDQgNjUgNzMgNjMgICAuLm5UU2VjdXJpdHlEZXNjICANCiAgMDBmMDogIDcyIDY5 IDcwIDc0IDZmIDcyIDMxIDgyICAwNyBlYyAwNCA4MiAwNyBlOCAwMSAwMCAgIHJpcHRvcjEuLi4u Li4uLi4gIA0KICAwMTAwOiAgMTQgODAgMTQgMDAgMDAgMDAgMjAgMDAgIDAwIDAwIDMwIDAwIDAw IDAwIGY4IDAwICAgLi4uLi4uIC4uLjAuLi4uLiAgDQogIDAxMTA6ICAwMCAwMCAwMSAwMSAwMCAw MCAwMCAwMCAgMDAgMDUgMTIgMDAgMDAgMDAgMDEgMDIgICAuLi4uLi4uLi4uLi4uLi4uICANCiAg MDEyMDogIDAwIDAwIDAwIDAwIDAwIDA1IDIwIDAwICAwMCAwMCAyMCAwMiAwMCAwMCAwNCAwMCAg IC4uLi4uLiAuLi4gLi4uLi4gIA0KICAwMTMwOiAgYzggMDAgMDUgMDAgMDAgMDAgMDIgNDAgIDE0 IDAwIDIwIDAwIDBjIDAwIDAxIDAxICAgLi4uLi4uLkAuLiAuLi4uLiAgDQogIDAxNDA6ICAwMCAw MCAwMCAwMCAwMCAwMSAwMCAwMCAgMDAgMDAgMDIgNDAgMTggMDAgMDAgMDEgICAuLi4uLi4uLi4u LkAuLi4uICANCiAgMDE1MDogIDAwIDAwIDAxIDAyIDAwIDAwIDAwIDAwICAwMCAwNSAyMCAwMCAw MCAwMCAyMCAwMiAgIC4uLi4uLi4uLi4gLi4uIC4gIA0KICAwMTYwOiAgMDAgMDAgMDIgNDAgMjQg MDAgMDAgMDEgIDAwIDAwIDAxIDA1IDAwIDAwIDAwIDAwICAgLi4uQCQuLi4uLi4uLi4uLiAgDQog IDAxNzA6ICAwMCAwNSAxNSAwMCAwMCAwMCAyZiBmMiAgNWMgZGQgOTkgZDcgNzUgZjQgYWQgYjkg ICAuLi4uLi4vLlwuLi51Li4uICANCiAgMDE4MDogIDgwIDVkIDAxIDAyIDAwIDAwIDA3IDQyICAz OCAwMCAyMCAwMCAwMCAwMCAwMyAwMCAgIC5dLi4uLi5COC4gLi4uLi4gIA0KICAwMTkwOiAgMDAg MDAgYmUgM2IgMGUgZjMgZjAgOWYgIGQxIDExIGI2IDAzIDAwIDAwIGY4IDAzICAgLi4uOy4uLi4u Li4uLi4uLiAgDQogIDAxYTA6ICA2NyBjMSBhNSA3YSA5NiBiZiBlNiAwZCAgZDAgMTEgYTIgODUg MDAgYWEgMDAgMzAgICBnLi56Li4uLi4uLi4uLi4wICANCiAgMDFiMDogIDQ5IGUyIDAxIDAxIDAw IDAwIDAwIDAwICAwMCAwMSAwMCAwMCAwMCAwMCAwNyA0MiAgIEkuLi4uLi4uLi4uLi4uLkIgIA0K ICAwMWMwOiAgMzggMDAgMjAgMDAgMDAgMDAgMDMgMDAgIDAwIDAwIGJmIDNiIDBlIGYzIGYwIDlm ICAgOC4gLi4uLi4uLi47Li4uLiAgDQogIDAxZDA6ICBkMSAxMSBiNiAwMyAwMCAwMCBmOCAwMyAg NjcgYzEgYTUgN2EgOTYgYmYgZTYgMGQgICAuLi4uLi4uLmcuLnouLi4uICANCiAgMDFlMDogIGQw IDExIGEyIDg1IDAwIGFhIDAwIDMwICA0OSBlMiAwMSAwMSAwMCAwMCAwMCAwMCAgIC4uLi4uLi4w SS4uLi4uLi4gIA0KICAwMWYwOiAgMDAgMDEgMDAgMDAgMDAgMDAgMDQgMDAgIGYwIDA2IDI4IDAw IDAwIDAwIDAwIDAwICAgLi4uLi4uLi4uLiguLi4uLiAgDQogIDAyMDA6ICAxNCAwMCAxMCAwMCAw MCAwMCAwMSAwMSAgMDAgMDAgMDAgMDAgMDAgMDEgMDAgMDAgICAuLi4uLi4uLi4uLi4uLi4uICAN CiAgMDIxMDogIDAwIDAwIDA1IDAwIDI4IDAwIDAwIDAxICAwMCAwMCAwMSAwMCAwMCAwMCBhYSBm NiAgIC4uLi4oLi4uLi4uLi4uLi4gIA0KICAwMjIwOiAgMzEgMTEgMDcgOWMgZDEgMTEgZjcgOWYg IDAwIGMwIDRmIGMyIGRjIGQyIDAxIDAxICAgMS4uLi4uLi4uLk8uLi4uLiAgDQogIDAyMzA6ICAw MCAwMCAwMCAwMCAwMCAwNSAwOSAwMCAgMDAgMDAgMDUgMDAgMjggMDAgMDAgMDEgICAuLi4uLi4u Li4uLi4oLi4uICANCiAgMDI0MDogIDAwIDAwIDAxIDAwIDAwIDAwIGFiIGY2ICAzMSAxMSAwNyA5 YyBkMSAxMSBmNyA5ZiAgIC4uLi4uLi4uMS4uLi4uLi4gIA0KICAwMjUwOiAgMDAgYzAgNGYgYzIg ZGMgZDIgMDEgMDEgIDAwIDAwIDAwIDAwIDAwIDA1IDA5IDAwICAgLi5PLi4uLi4uLi4uLi4uLiAg DQogIDAyNjA6ICAwMCAwMCAwNSAwMCAyOCAwMCAwMCAwMSAgMDAgMDAgMDEgMDAgMDAgMDAgYWMg ZjYgICAuLi4uKC4uLi4uLi4uLi4uICANCiAgMDI3MDogIDMxIDExIDA3IDljIGQxIDExIGY3IDlm ICAwMCBjMCA0ZiBjMiBkYyBkMiAwMSAwMSAgIDEuLi4uLi4uLi5PLi4uLi4gIA0KICAwMjgwOiAg MDAgMDAgMDAgMDAgMDAgMDUgMDkgMDAgIDAwIDAwIDA1IDAwIDJjIDAwIDAwIDAxICAgLi4uLi4u Li4uLi4uLC4uLiAgDQogIDAyOTA6ICAwMCAwMCAwMSAwMCAwMCAwMCBhYSBmNiAgMzEgMTEgMDcg OWMgZDEgMTEgZjcgOWYgICAuLi4uLi4uLjEuLi4uLi4uICANCiAgMDJhMDogIDAwIGMwIDRmIGMy IGRjIGQyIDAxIDAyICAwMCAwMCAwMCAwMCAwMCAwNSAyMCAwMCAgIC4uTy4uLi4uLi4uLi4uIC4g IA0KICAwMmIwOiAgMDAgMDAgMjAgMDIgMDAgMDAgMDUgMDAgIDJjIDAwIDAwIDAxIDAwIDAwIDAx IDAwICAgLi4gLi4uLi4sLi4uLi4uLiAgDQogIDAyYzA6ICAwMCAwMCBhYiBmNiAzMSAxMSAwNyA5 YyAgZDEgMTEgZjcgOWYgMDAgYzAgNGYgYzIgICAuLi4uMS4uLi4uLi4uLk8uICANCiAgMDJkMDog IGRjIGQyIDAxIDAyIDAwIDAwIDAwIDAwICAwMCAwNSAyMCAwMCAwMCAwMCAyMCAwMiAgIC4uLi4u Li4uLi4gLi4uIC4gIA0KICAwMmUwOiAgMDAgMDAgMDUgMDAgMmMgMDAgMDAgMDEgIDAwIDAwIDAx IDAwIDAwIDAwIGFjIGY2ICAgLi4uLiwuLi4uLi4uLi4uLiAgDQogIDAyZjA6ICAzMSAxMSAwNyA5 YyBkMSAxMSBmNyA5ZiAgMDAgYzAgNGYgYzIgZGMgZDIgMDEgMDIgICAxLi4uLi4uLi4uTy4uLi4u ICANCiAgMDMwMDogIDAwIDAwIDAwIDAwIDAwIDA1IDIwIDAwICAwMCAwMCAyMCAwMiAwMCAwMCAw MCAwMCAgIC4uLi4uLiAuLi4gLi4uLi4gIA0KICAwMzEwOiAgMTQgMDAgOTQgMDAgMDIgMDAgMDEg MDEgIDAwIDAwIDAwIDAwIDAwIDA1IDBiIDAwICAgLi4uLi4uLi4uLi4uLi4uLiAgDQogIDAzMjA6 ICAwMCAwMCAwMCAwMCAyNCAwMCBiZCAwMSAgMGUgMDAgMDEgMDUgMDAgMDAgMDAgMDAgICAuLi4u JC4uLi4uLi4uLi4uICANCiAgMDMzMDogIDAwIDA1IDE1IDAwIDAwIDAwIDJmIGYyICA1YyBkZCA5 OSBkNyA3NSBmNCBhZCBiOSAgIC4uLi4uLi8uXC4uLnUuLi4gIA0KICAwMzQwOiAgODAgNWQgMDAg MDIgMDAgMDAgMDAgMDIgIDE4IDAwIGJkIDAxIDBmIDAwIDAxIDAyICAgLl0uLi4uLi4uLi4uLi4u LiAgDQogIDAzNTA6ICAwMCAwMCAwMCAwMCAwMCAwNSAyMCAwMCAgMDAgMDAgMjAgMDIgMDAgMDAg MDAgMDAgICAuLi4uLi4gLi4uIC4uLi4uICANCiAgMDM2MDogIDE0IDAwIGZmIDAxIDBmIDAwIDAx IDAxICAwMCAwMCAwMCAwMCAwMCAwNSAxMiAwMCAgIC4uLi4uLi4uLi4uLi4uLi4gIA0KICAwMzcw OiAgMDAgMDAgMDAgMDIgMjQgMDAgZmYgMDEgIDBmIDAwIDAxIDA1IDAwIDAwIDAwIDAwICAgLi4u LiQuLi4uLi4uLi4uLiAgDQogIDAzODA6ICAwMCAwNSAxNSAwMCAwMCAwMCAyZiBmMiAgNWMgZGQg OTkgZDcgNzUgZjQgYWQgYjkgICAuLi4uLi4vLlwuLi51Li4uICANCiAgMDM5MDogIDgwIDVkIDA3 IDAyIDAwIDAwIDAwIDAyICAxOCAwMCAwNCAwMCAwMCAwMCAwMSAwMiAgIC5dLi4uLi4uLi4uLi4u Li4gIA0KICAwM2EwOiAgMDAgMDAgMDAgMDAgMDAgMDUgMjAgMDAgIDAwIDAwIDJhIDAyIDAwIDAw IDA1IDBhICAgLi4uLi4uIC4uLiouLi4uLiAgDQogIDAzYjA6ICAzYyAwMCAxMCAwMCAwMCAwMCAw MyAwMCAgMDAgMDAgZjggODggNzAgMDMgZTEgMGEgICA8Li4uLi4uLi4uLi5wLi4uICANCiAgMDNj MDogIGQyIDExIGI0IDIyIDAwIGEwIGM5IDY4ICBmOSAzOSBiYSA3YSA5NiBiZiBlNiAwZCAgIC4u LiIuLi5oLjkuei4uLi4gIA0KICAwM2QwOiAgZDAgMTEgYTIgODUgMDAgYWEgMDAgMzAgIDQ5IGUy IDAxIDAyIDAwIDAwIDAwIDAwICAgLi4uLi4uLjBJLi4uLi4uLiAgDQogIDAzZTA6ICAwMCAwNSAy MCAwMCAwMCAwMCAyYSAwMiAgMDAgMDAgMDUgMGEgM2MgMDAgMTAgMDAgICAuLiAuLi4qLi4uLi48 Li4uICANCiAgMDNmMDogIDAwIDAwIDAzIDAwIDAwIDAwIDQyIDJmICBiYSA1OSBhMiA3OSBkMCAx MSA5MCAyMCAgIC4uLi4uLkIvLlkueS4uLiAgIA0KICAwNDAwOiAgMDAgYzAgNGYgYzIgZDMgY2Yg YmEgN2EgIDk2IGJmIGU2IDBkIGQwIDExIGEyIDg1ICAgLi5PLi4uLnouLi4uLi4uLiAgDQogIDA0 MTA6ICAwMCBhYSAwMCAzMCA0OSBlMiAwMSAwMiAgMDAgMDAgMDAgMDAgMDAgMDUgMjAgMDAgICAu Li4wSS4uLi4uLi4uLiAuICANCiAgMDQyMDogIDAwIDAwIDJhIDAyIDAwIDAwIDA1IDBhICAzYyAw MCAxMCAwMCAwMCAwMCAwMyAwMCAgIC4uKi4uLi4uPC4uLi4uLi4gIA0KICAwNDMwOiAgMDAgMDAg NDAgYzIgMGEgYmMgYTkgNzkgIGQwIDExIDkwIDIwIDAwIGMwIDRmIGMyICAgLi5ALi4uLnkuLi4g Li5PLiAgDQogIDA0NDA6ICBkNCBjZiBiYSA3YSA5NiBiZiBlNiAwZCAgZDAgMTEgYTIgODUgMDAg YWEgMDAgMzAgICAuLi56Li4uLi4uLi4uLi4wICANCiAgMDQ1MDogIDQ5IGUyIDAxIDAyIDAwIDAw IDAwIDAwICAwMCAwNSAyMCAwMCAwMCAwMCAyYSAwMiAgIEkuLi4uLi4uLi4gLi4uKi4gIA0KICAw NDYwOiAgMDAgMDAgMDUgMGEgM2MgMDAgMTAgMDAgIDAwIDAwIDAzIDAwIDAwIDAwIDAwIDQyICAg Li4uLjwuLi4uLi4uLi4uQiAgDQogIDA0NzA6ICAxNiA0YyBjMCAyMCBkMCAxMSBhNyA2OCAgMDAg YWEgMDAgNmUgMDUgMjkgYmEgN2EgICAuTC4gLi4uaC4uLm4uKS56ICANCiAgMDQ4MDogIDk2IGJm IGU2IDBkIGQwIDExIGEyIDg1ICAwMCBhYSAwMCAzMCA0OSBlMiAwMSAwMiAgIC4uLi4uLi4uLi4u MEkuLi4gIA0KICAwNDkwOiAgMDAgMDAgMDAgMDAgMDAgMDUgMjAgMDAgIDAwIDAwIDJhIDAyIDAw IDAwIDA1IDBhICAgLi4uLi4uIC4uLiouLi4uLiAgDQogIDA0YTA6ICAzYyAwMCAxMCAwMCAwMCAw MCAwMyAwMCAgMDAgMDAgMTAgMjAgMjAgNWYgYTUgNzkgICA8Li4uLi4uLi4uLiAgXy55ICANCiAg MDRiMDogIGQwIDExIDkwIDIwIDAwIGMwIDRmIGMyICBkNCBjZiBiYSA3YSA5NiBiZiBlNiAwZCAg IC4uLiAuLk8uLi4uei4uLi4gIA0KICAwNGMwOiAgZDAgMTEgYTIgODUgMDAgYWEgMDAgMzAgIDQ5 IGUyIDAxIDAyIDAwIDAwIDAwIDAwICAgLi4uLi4uLjBJLi4uLi4uLiAgDQogIDA0ZDA6ICAwMCAw NSAyMCAwMCAwMCAwMCAyYSAwMiAgMDAgMDAgMDUgMDAgMmMgMDAgMTAgMDAgICAuLiAuLi4qLi4u Li4sLi4uICANCiAgMDRlMDogIDAwIDAwIDAxIDAwIDAwIDAwIDYwIDczICA0MCBjNyBiZiAyMCBk MCAxMSBhNyA2OCAgIC4uLi4uLmBzQC4uIC4uLmggIA0KICAwNGYwOiAgMDAgYWEgMDAgNmUgMDUg MjkgMDEgMDIgIDAwIDAwIDAwIDAwIDAwIDA1IDIwIDAwICAgLi4ubi4pLi4uLi4uLi4gLiAgDQog IDA1MDA6ICAwMCAwMCAyYSAwMiAwMCAwMCAwNSAwYSAgMmMgMDAgOTQgMDAgMDIgMDAgMDIgMDAg ICAuLiouLi4uLiwuLi4uLi4uICANCiAgMDUxMDogIDAwIDAwIDljIDdhIDk2IGJmIGU2IDBkICBk MCAxMSBhMiA4NSAwMCBhYSAwMCAzMCAgIC4uLnouLi4uLi4uLi4uLjAgIA0KICAwNTIwOiAgNDkg ZTIgMDEgMDIgMDAgMDAgMDAgMDAgIDAwIDA1IDIwIDAwIDAwIDAwIDJhIDAyICAgSS4uLi4uLi4u LiAuLi4qLiAgDQogIDA1MzA6ICAwMCAwMCAwMCAwMCAxOCAwMCAxMCAwMCAgMDIgMDAgMDEgMDIg MDAgMDAgMDAgMDAgICAuLi4uLi4uLi4uLi4uLi4uICANCiAgMDU0MDogIDAwIDA1IDIwIDAwIDAw IDAwIDJhIDAyICAwMCAwMCAwNSAwYSAyYyAwMCA5NCAwMCAgIC4uIC4uLiouLi4uLiwuLi4gIA0K ICAwNTUwOiAgMDIgMDAgMDIgMDAgMDAgMDAgYmEgN2EgIDk2IGJmIGU2IDBkIGQwIDExIGEyIDg1 ICAgLi4uLi4uLnouLi4uLi4uLiAgDQogIDA1NjA6ICAwMCBhYSAwMCAzMCA0OSBlMiAwMSAwMiAg MDAgMDAgMDAgMDAgMDAgMDUgMjAgMDAgICAuLi4wSS4uLi4uLi4uLiAuICANCiAgMDU3MDogIDAw IDAwIDJhIDAyIDAwIDAwIDAwIDAwICAxNCAwMCA5NCAwMCAwMiAwMCAwMSAwMSAgIC4uKi4uLi4u Li4uLi4uLi4gIA0KICAwNTgwOiAgMDAgMDAgMDAgMDAgMDAgMDUgMDkgMDAgIDAwIDAwIDA1IDBh IDNjIDAwIDEwIDAwICAgLi4uLi4uLi4uLi4uPC4uLiAgDQogIDA1OTA6ICAwMCAwMCAwMyAwMCAw MCAwMCBmOCA4OCAgNzAgMDMgZTEgMGEgZDIgMTEgYjQgMjIgICAuLi4uLi4uLnAuLi4uLi4iICAN CiAgMDVhMDogIDAwIGEwIGM5IDY4IGY5IDM5IDE0IGNjICAyOCA0OCAzNyAxNCBiYyA0NSA5YiAw NyAgIC4uLmguOS4uKEg3Li5FLi4gIA0KICAwNWIwOiAgYWQgNmYgMDEgNWUgNWYgMjggMDEgMDIg IDAwIDAwIDAwIDAwIDAwIDA1IDIwIDAwICAgLm8uXl8oLi4uLi4uLi4gLiAgDQogIDA1YzA6ICAw MCAwMCAyYSAwMiAwMCAwMCAwNSAwYSAgM2MgMDAgMTAgMDAgMDAgMDAgMDMgMDAgICAuLiouLi4u LjwuLi4uLi4uICANCiAgMDVkMDogIDAwIDAwIDQyIDJmIGJhIDU5IGEyIDc5ICBkMCAxMSA5MCAy MCAwMCBjMCA0ZiBjMiAgIC4uQi8uWS55Li4uIC4uTy4gIA0KICAwNWUwOiAgZDMgY2YgMTQgY2Mg MjggNDggMzcgMTQgIGJjIDQ1IDliIDA3IGFkIDZmIDAxIDVlICAgLi4uLihINy4uRS4uLm8uXiAg DQogIDA1ZjA6ICA1ZiAyOCAwMSAwMiAwMCAwMCAwMCAwMCAgMDAgMDUgMjAgMDAgMDAgMDAgMmEg MDIgICBfKC4uLi4uLi4uIC4uLiouICANCiAgMDYwMDogIDAwIDAwIDA1IDBhIDNjIDAwIDEwIDAw ICAwMCAwMCAwMyAwMCAwMCAwMCA0MCBjMiAgIC4uLi48Li4uLi4uLi4uQC4gIA0KICAwNjEwOiAg MGEgYmMgYTkgNzkgZDAgMTEgOTAgMjAgIDAwIGMwIDRmIGMyIGQ0IGNmIDE0IGNjICAgLi4ueS4u LiAuLk8uLi4uLiAgDQogIDA2MjA6ICAyOCA0OCAzNyAxNCBiYyA0NSA5YiAwNyAgYWQgNmYgMDEg NWUgNWYgMjggMDEgMDIgICAoSDcuLkUuLi5vLl5fKC4uICANCiAgMDYzMDogIDAwIDAwIDAwIDAw IDAwIDA1IDIwIDAwICAwMCAwMCAyYSAwMiAwMCAwMCAwNSAwYSAgIC4uLi4uLiAuLi4qLi4uLi4g IA0KICAwNjQwOiAgM2MgMDAgMTAgMDAgMDAgMDAgMDMgMDAgIDAwIDAwIDAwIDQyIDE2IDRjIGMw IDIwICAgPC4uLi4uLi4uLi5CLkwuICAgDQogIDA2NTA6ICBkMCAxMSBhNyA2OCAwMCBhYSAwMCA2 ZSAgMDUgMjkgMTQgY2MgMjggNDggMzcgMTQgICAuLi5oLi4ubi4pLi4oSDcuICANCiAgMDY2MDog IGJjIDQ1IDliIDA3IGFkIDZmIDAxIDVlICA1ZiAyOCAwMSAwMiAwMCAwMCAwMCAwMCAgIC5FLi4u by5eXyguLi4uLi4gIA0KICAwNjcwOiAgMDAgMDUgMjAgMDAgMDAgMDAgMmEgMDIgIDAwIDAwIDA1 IDBhIDNjIDAwIDEwIDAwICAgLi4gLi4uKi4uLi4uPC4uLiAgDQogIDA2ODA6ICAwMCAwMCAwMyAw MCAwMCAwMCAxMCAyMCAgMjAgNWYgYTUgNzkgZDAgMTEgOTAgMjAgICAuLi4uLi4uICBfLnkuLi4g ICANCiAgMDY5MDogIDAwIGMwIDRmIGMyIGQ0IGNmIDE0IGNjICAyOCA0OCAzNyAxNCBiYyA0NSA5 YiAwNyAgIC4uTy4uLi4uKEg3Li5FLi4gIA0KICAwNmEwOiAgYWQgNmYgMDEgNWUgNWYgMjggMDEg MDIgIDAwIDAwIDAwIDAwIDAwIDA1IDIwIDAwICAgLm8uXl8oLi4uLi4uLi4gLiAgDQogIDA2YjA6 ICAwMCAwMCAyYSAwMiAwMCAwMCAwNSAwYSAgMmMgMDAgOTQgMDAgMDIgMDAgMDIgMDAgICAuLiou Li4uLiwuLi4uLi4uICANCiAgMDZjMDogIDAwIDAwIDE0IGNjIDI4IDQ4IDM3IDE0ICBiYyA0NSA5 YiAwNyBhZCA2ZiAwMSA1ZSAgIC4uLi4oSDcuLkUuLi5vLl4gIA0KICAwNmQwOiAgNWYgMjggMDEg MDIgMDAgMDAgMDAgMDAgIDAwIDA1IDIwIDAwIDAwIDAwIDJhIDAyICAgXyguLi4uLi4uLiAuLi4q LiAgDQogIDA2ZTA6ICAwMCAwMCAwNSAwMCAyYyAwMCAxMCAwMCAgMDAgMDAgMDEgMDAgMDAgMDAg ZDAgOWYgICAuLi4uLC4uLi4uLi4uLi4uICANCiAgMDZmMDogIDExIGI4IGY2IDA0IDYyIDQ3IGFi IDdhICA0OSA4NiBjNyA2YiAzZiA5YSAwMSAwMiAgIC4uLi5iRy56SS4uaz8uLi4gIA0KICAwNzAw OiAgMDAgMDAgMDAgMDAgMDAgMDUgMjAgMDAgIDAwIDAwIDJhIDAyIDAwIDAwIDA1IDAwICAgLi4u Li4uIC4uLiouLi4uLiAgDQogIDA3MTA6ICAyOCAwMCAxMCAwMCAwMCAwMCAwMSAwMCAgMDAgMDAg ZDAgOWYgMTEgYjggZjYgMDQgICAoLi4uLi4uLi4uLi4uLi4uICANCiAgMDcyMDogIDYyIDQ3IGFi IDdhIDQ5IDg2IGM3IDZiICAzZiA5YSAwMSAwMSAwMCAwMCAwMCAwMCAgIGJHLnpJLi5rPy4uLi4u Li4gIA0KICAwNzMwOiAgMDAgMDUgMGIgMDAgMDAgMDAgMDUgMGEgIDM4IDAwIDEwIDAwIDAwIDAw IDAzIDAwICAgLi4uLi4uLi44Li4uLi4uLiAgDQogIDA3NDA6ICAwMCAwMCA2ZCA5ZSBjNiBiNyBj NyAyYyAgZDIgMTEgODUgNGUgMDAgYTAgYzkgODMgICAuLm0uLi4uLC4uLk4uLi4uICANCiAgMDc1 MDogIGY2IDA4IGJhIDdhIDk2IGJmIGU2IDBkICBkMCAxMSBhMiA4NSAwMCBhYSAwMCAzMCAgIC4u LnouLi4uLi4uLi4uLjAgIA0KICAwNzYwOiAgNDkgZTIgMDEgMDEgMDAgMDAgMDAgMDAgIDAwIDA1 IDA5IDAwIDAwIDAwIDA1IDBhICAgSS4uLi4uLi4uLi4uLi4uLiAgDQogIDA3NzA6ICAzOCAwMCAx MCAwMCAwMCAwMCAwMyAwMCAgMDAgMDAgNmQgOWUgYzYgYjcgYzcgMmMgICA4Li4uLi4uLi4ubS4u Li4sICANCiAgMDc4MDogIGQyIDExIDg1IDRlIDAwIGEwIGM5IDgzICBmNiAwOCA5YyA3YSA5NiBi ZiBlNiAwZCAgIC4uLk4uLi4uLi4uei4uLi4gIA0KICAwNzkwOiAgZDAgMTEgYTIgODUgMDAgYWEg MDAgMzAgIDQ5IGUyIDAxIDAxIDAwIDAwIDAwIDAwICAgLi4uLi4uLjBJLi4uLi4uLiAgDQogIDA3 YTA6ICAwMCAwNSAwOSAwMCAwMCAwMCAwNSAwYSAgMzggMDAgMTAgMDAgMDAgMDAgMDMgMDAgICAu Li4uLi4uLjguLi4uLi4uICANCiAgMDdiMDogIDAwIDAwIDZkIDllIGM2IGI3IGM3IDJjICBkMiAx MSA4NSA0ZSAwMCBhMCBjOSA4MyAgIC4ubS4uLi4sLi4uTi4uLi4gIA0KICAwN2MwOiAgZjYgMDgg ODYgN2EgOTYgYmYgZTYgMGQgIGQwIDExIGEyIDg1IDAwIGFhIDAwIDMwICAgLi4uei4uLi4uLi4u Li4uMCAgDQogIDA3ZDA6ICA0OSBlMiAwMSAwMSAwMCAwMCAwMCAwMCAgMDAgMDUgMDkgMDAgMDAg MDAgMDUgMDAgICBJLi4uLi4uLi4uLi4uLi4uICANCiAgMDdlMDogIDM4IDAwIDAwIDAxIDAwIDAw IDAxIDAwICAwMCAwMCBhZCBmNiAzMSAxMSAwNyA5YyAgIDguLi4uLi4uLi4uLjEuLi4gIA0KICAw N2YwOiAgZDEgMTEgZjcgOWYgMDAgYzAgNGYgYzIgIGRjIGQyIDAxIDA1IDAwIDAwIDAwIDAwICAg Li4uLi4uTy4uLi4uLi4uLiAgDQogIDA4MDA6ICAwMCAwNSAxNSAwMCAwMCAwMCAyZiBmMiAgNWMg ZGQgOTkgZDcgNzUgZjQgYWQgYjkgICAuLi4uLi4vLlwuLi51Li4uICANCiAgMDgxMDogIDgwIDVk IDA0IDAyIDAwIDAwIDA1IDAwICAyYyAwMCAwMCAwMSAwMCAwMCAwMSAwMCAgIC5dLi4uLi4uLC4u Li4uLi4gIA0KICAwODIwOiAgMDAgMDAgYWQgZjYgMzEgMTEgMDcgOWMgIGQxIDExIGY3IDlmIDAw IGMwIDRmIGMyICAgLi4uLjEuLi4uLi4uLi5PLiAgDQogIDA4MzA6ICBkYyBkMiAwMSAwMiAwMCAw MCAwMCAwMCAgMDAgMDUgMjAgMDAgMDAgMDAgMjAgMDIgICAuLi4uLi4uLi4uIC4uLiAuICANCiAg MDg0MDogIDAwIDAwIDA1IDAwIDJjIDAwIDAwIDAxICAwMCAwMCAwMSAwMCAwMCAwMCBjOSA2ZCAg IC4uLi4sLi4uLi4uLi4uLm0gIA0KICAwODUwOiAgYTMgZTIgMTcgYWUgYzMgNDcgYjUgOGIgIGJl IDM0IGM1IDViIGE2IDMzIDAxIDAyICAgLi4uLi5HLi4uNC5bLjMuLiAgDQogIDA4NjA6ICAwMCAw MCAwMCAwMCAwMCAwNSAyMCAwMCAgMDAgMDAgMmQgMDIgMDAgMDAgMDUgMDAgICAuLi4uLi4gLi4u LS4uLi4uICANCiAgMDg3MDogIDI4IDAwIDAwIDAxIDAwIDAwIDAxIDAwICAwMCAwMCA5YyAzNiAw ZiAyOCBjNyA2NyAgICguLi4uLi4uLi4uNi4oLmcgIA0KICAwODgwOiAgOGUgNDMgYWUgOTggMWQg NDYgZjMgYzYgIGY1IDQxIDAxIDAxIDAwIDAwIDAwIDAwICAgLkMuLi5GLi4uQS4uLi4uLiAgDQog IDA4OTA6ICAwMCAwNSAwYiAwMCAwMCAwMCAwNSAwMCAgMjggMDAgMDAgMDEgMDAgMDAgMDEgMDAg ICAuLi4uLi4uLiguLi4uLi4uICANCiAgMDhhMDogIDAwIDAwIDdkIGRjIGMyIGNjIGFkIGE2ICA3 YSA0YSA4OCA0NiBjMCA0ZSAzYyBjNSAgIC4ufS4uLi4uekouRi5OPC4gIA0KICAwOGIwOiAgMzUg MDEgMDEgMDEgMDAgMDAgMDAgMDAgIDAwIDA1IDBiIDAwIDAwIDAwIDA1IDAwICAgNS4uLi4uLi4u Li4uLi4uLiAgDQogIDA4YzA6ICAyOCAwMCAwMCAwMSAwMCAwMCAwMSAwMCAgMDAgMDAgNWUgNGMg YzcgMDUgZWIgNGQgICAoLi4uLi4uLi4uXkwuLi5NICANCiAgMDhkMDogIGI0IDQzIGJkIDlmIDg2 IDY2IDRjIDJhICA3ZiBkNSAwMSAwMSAwMCAwMCAwMCAwMCAgIC5DLi4uZkwqLi4uLi4uLi4gIA0K ICAwOGUwOiAgMDAgMDUgMGIgMDAgMDAgMDAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgLi4uLi4uICAgICAgICAgICAgDQpiZXJfZ2V0X25leHQ6IHRhZyAweDMwIGxlbiAyMjgyIGNv bnRlbnRzOg0KYmVyX2dldF9uZXh0DQpsZGFwX3JlYWQ6IHdhbnQ9OCBlcnJvcj1SZXNvdXJjZSB0 ZW1wb3JhcmlseSB1bmF2YWlsYWJsZQ0KY29ubj02IG9wPTQgZG9fYWRkDQpiZXJfc2NhbmYgZm10 ICh7bSkgYmVyOg0KY29ubj02IG9wPTQgZG9fYWRkOiBkbiAoREM9c2FtYmEsREM9ZXhhbXBsZSxE Qz1jb20pDQpiZXJfc2NhbmYgZm10ICh7bXtXfX0pIGJlcjoNCmJlcl9zY2FuZiBmbXQgKHtte1d9 fSkgYmVyOg0KYmVyX3NjYW5mIGZtdCAoe217V319KSBiZXI6DQpiZXJfc2NhbmYgZm10ICh7bXtX fX0pIGJlcjoNCmJlcl9zY2FuZiBmbXQgKHtte1d9fSkgYmVyOg0KYmVyX3NjYW5mIGZtdCAofSkg YmVyOg0KPj4+IGRuUHJldHR5Tm9ybWFsOiA8REM9c2FtYmEsREM9ZXhhbXBsZSxEQz1jb20+DQo9 PiBsZGFwX2J2MmRuKERDPXNhbWJhLERDPWV4YW1wbGUsREM9Y29tLDApDQo8PSBsZGFwX2J2MmRu KERDPXNhbWJhLERDPWV4YW1wbGUsREM9Y29tKT0wIA0KPT4gbGRhcF9kbjJidigyNzIpDQo8PSBs ZGFwX2RuMmJ2KGRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tKT0wIA0KPT4gbGRhcF9kbjJidigy NzIpDQo8PSBsZGFwX2RuMmJ2KGRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tKT0wIA0KPDw8IGRu UHJldHR5Tm9ybWFsOiA8ZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20+LCA8ZGM9c2FtYmEsZGM9 ZXhhbXBsZSxkYz1jb20+DQo+Pj4gZG5QcmV0dHk6IDxDTj1ET01BSU4tRE5TLENOPVNDSEVNQSxD Tj1DT05GSUdVUkFUSU9OLERDPVNBTUJBLERDPUVYQU1QTEUsREM9Q09NPg0KPT4gbGRhcF9idjJk bihDTj1ET01BSU4tRE5TLENOPVNDSEVNQSxDTj1DT05GSUdVUkFUSU9OLERDPVNBTUJBLERDPUVY QU1QTEUsREM9Q09NLDApDQo8PSBsZGFwX2J2MmRuKENOPURPTUFJTi1ETlMsQ049U0NIRU1BLENO PUNPTkZJR1VSQVRJT04sREM9U0FNQkEsREM9RVhBTVBMRSxEQz1DT00pPTAgDQo9PiBsZGFwX2Ru MmJ2KDI3MikNCjw9IGxkYXBfZG4yYnYoY249RE9NQUlOLUROUyxjbj1TQ0hFTUEsY249Q09ORklH VVJBVElPTixkYz1TQU1CQSxkYz1FWEFNUExFLGRjPUNPTSk9MCANCjw8PCBkblByZXR0eTogPGNu PURPTUFJTi1ETlMsY249U0NIRU1BLGNuPUNPTkZJR1VSQVRJT04sZGM9U0FNQkEsZGM9RVhBTVBM RSxkYz1DT00+DQo+Pj4gZG5Ob3JtYWxpemU6IDxjbj1ET01BSU4tRE5TLGNuPVNDSEVNQSxjbj1D T05GSUdVUkFUSU9OLGRjPVNBTUJBLGRjPUVYQU1QTEUsZGM9Q09NPg0KPT4gbGRhcF9idjJkbihj bj1ET01BSU4tRE5TLGNuPVNDSEVNQSxjbj1DT05GSUdVUkFUSU9OLGRjPVNBTUJBLGRjPUVYQU1Q TEUsZGM9Q09NLDApDQo8PSBsZGFwX2J2MmRuKGNuPURPTUFJTi1ETlMsY249U0NIRU1BLGNuPUNP TkZJR1VSQVRJT04sZGM9U0FNQkEsZGM9RVhBTVBMRSxkYz1DT00pPTAgDQo9PiBsZGFwX2RuMmJ2 KDI3MikNCjw9IGxkYXBfZG4yYnYoY249ZG9tYWluLWRucyxjbj1zY2hlbWEsY249Y29uZmlndXJh dGlvbixkYz1zYW1iYSxkYz1leGFtcGxlLGRjPWNvbSk9MCANCjw8PCBkbk5vcm1hbGl6ZTogPGNu PWRvbWFpbi1kbnMsY249c2NoZW1hLGNuPWNvbmZpZ3VyYXRpb24sZGM9c2FtYmEsZGM9ZXhhbXBs ZSxkYz1jb20+DQpiZGJfZG4yZW50cnkoImRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tIikNCmhk Yl9yZWZlcnJhbHM6IHRhZz0xMDQgdGFyZ2V0PSJkYz1zYW1iYSxkYz1leGFtcGxlLGRjPWNvbSIg bWF0Y2hlZD0iIg0KPT0+IGhkYl9hZGQ6IGRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tDQpvY19j aGVja19yZXF1aXJlZCBlbnRyeSAoZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20pLCBvYmplY3RD bGFzcyAiZG9tYWluRE5TIg0Kb2NfY2hlY2tfcmVxdWlyZWQgZW50cnkgKGRjPXNhbWJhLGRjPWV4 YW1wbGUsZGM9Y29tKSwgb2JqZWN0Q2xhc3MgImV4dGVuc2libGVPYmplY3QiDQpiZGJfZG4yZW50 cnkoImRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tIikNCj0+IGluZGV4X2VudHJ5X2FkZCggMSwg ImRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tIiApDQo9PiBrZXlfY2hhbmdlKEFERCwxKQ0KYmRi X2lkbF9pbnNlcnRfa2V5OiAxIFswMDk2ZGVmZF0NCjw9IGtleV9jaGFuZ2UgMA0KPT4ga2V5X2No YW5nZShBREQsMSkNCmJkYl9pZGxfaW5zZXJ0X2tleTogMSBbNWZmNjgwNmNdDQo8PSBrZXlfY2hh bmdlIDANCj0+IGtleV9jaGFuZ2UoQURELDEpDQpiZGJfaWRsX2luc2VydF9rZXk6IDEgWzZjZGRm YWYzXQ0KPD0ga2V5X2NoYW5nZSAwDQo9PiBrZXlfY2hhbmdlKEFERCwxKQ0KYmRiX2lkbF9pbnNl cnRfa2V5OiAxIFtiNTQ1Mzk5Zl0NCjw9IGtleV9jaGFuZ2UgMA0KPT4ga2V5X2NoYW5nZShBREQs MSkNCmJkYl9pZGxfaW5zZXJ0X2tleTogMSBbYTQyM2UwN2VdDQo8PSBrZXlfY2hhbmdlIDANCjw9 IGluZGV4X2VudHJ5X2FkZCggMSwgImRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tIiApIHN1Y2Nl c3MNCj0+IGVudHJ5X2VuY29kZSgweDAwMDAwMDAxKTogDQpoZGJfYWRkOiBhZGRlZCBpZD0wMDAw MDAwMSBkbj0iZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20iDQpzZW5kX2xkYXBfcmVzdWx0OiBj b25uPTYgb3A9NCBwPTMNCnNlbmRfbGRhcF9yZXN1bHQ6IGVycj0wIG1hdGNoZWQ9IiIgdGV4dD0i Ig0KaGRiX21vZGlmeTogZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20NCmJkYl9kbjJlbnRyeSgi ZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20iKQ0KYmRiX21vZGlmeV9pbnRlcm5hbDogMHgwMDAw MDAwMTogZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20NCmJkYl9tb2RpZnlfaW50ZXJuYWw6IHJl cGxhY2UgY29udGV4dENTTg0KPT4gZW50cnlfZW5jb2RlKDB4MDAwMDAwMDEpOiANCnNsYXBfbGlz dGVuZXJfYWN0aXZhdGUoNyk6IA0KPj4+IHNsYXBfbGlzdGVuZXIobGRhcGk6Ly8lMkZob21lJTJG ZGF0YSUyRnNhbWJhJTJGc2FtYmE0JTJGY2xlYW4lMkZzb3VyY2UlMkZzdCUyRmRjJTJGcHJpdmF0 ZSUyRmxkYXAlMkZsZGFwaSkNCmNvbm5lY3Rpb25fZ2V0KDI1KQ0KY29ubmVjdGlvbl9nZXQoMjUp OiBnb3QgY29ubmlkPTcNCmNvbm5lY3Rpb25fcmVhZCgyNSk6IGNoZWNraW5nIGZvciBpbnB1dCBv biBpZD03DQpiZXJfZ2V0X25leHQNCmxkYXBfcmVhZDogd2FudD04LCBnb3Q9OA0KICAwMDAwOiAg MzAgM2MgMDIgMDEgMDEgNjAgMzcgMDIgICAgICAgICAgICAgICAgICAgICAgICAgICAgMDwuLi5g Ny4gICAgICAgICAgDQpsZGFwX3JlYWQ6IHdhbnQ9NTQsIGdvdD01NA0KICAwMDAwOiAgMDEgMDMg MDQgMjUgNjMgNmUgM2QgNGQgIDYxIDZlIDYxIDY3IDY1IDcyIDJjIDY0ICAgLi4uJWNuPU1hbmFn ZXIsZCAgDQogIDAwMTA6ICA2MyAzZCA3MyA2MSA2ZCA2MiA2MSAyYyAgNjQgNjMgM2QgNjUgNzgg NjEgNmQgNzAgICBjPXNhbWJhLGRjPWV4YW1wICANCiAgMDAyMDogIDZjIDY1IDJjIDY0IDYzIDNk IDYzIDZmICA2ZCA4MCAwYiA2YyA2ZiA2MyA2MSA2YyAgIGxlLGRjPWNvbS4ubG9jYWwgIA0KICAw MDMwOiAgNjQgNjMgNzAgNjEgNzMgNzMgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ZGNwYXNzICAgICAgICAgICAgDQpiZXJfZ2V0X25leHQ6IHRhZyAweDMwIGxlbiA2MCBjb250ZW50 czoNCmJlcl9nZXRfbmV4dA0KbGRhcF9yZWFkOiB3YW50PTggZXJyb3I9UmVzb3VyY2UgdGVtcG9y YXJpbHkgdW5hdmFpbGFibGUNCmNvbm49NyBvcD0wIGRvX2JpbmQNCmJlcl9zY2FuZiBmbXQgKHtp bXQpIGJlcjoNCmJlcl9zY2FuZiBmbXQgKG19KSBiZXI6DQo+Pj4gZG5QcmV0dHlOb3JtYWw6IDxj bj1NYW5hZ2VyLGRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tPg0KPT4gbGRhcF9idjJkbihjbj1N YW5hZ2VyLGRjPXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tLDApDQo8PSBsZGFwX2J2MmRuKGNuPU1h bmFnZXIsZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20pPTAgDQo9PiBsZGFwX2RuMmJ2KDI3MikN Cjw9IGxkYXBfZG4yYnYoY249TWFuYWdlcixkYz1zYW1iYSxkYz1leGFtcGxlLGRjPWNvbSk9MCAN Cj0+IGxkYXBfZG4yYnYoMjcyKQ0KPD0gbGRhcF9kbjJidihjbj1tYW5hZ2VyLGRjPXNhbWJhLGRj PWV4YW1wbGUsZGM9Y29tKT0wIA0KPDw8IGRuUHJldHR5Tm9ybWFsOiA8Y249TWFuYWdlcixkYz1z YW1iYSxkYz1leGFtcGxlLGRjPWNvbT4sIDxjbj1tYW5hZ2VyLGRjPXNhbWJhLGRjPWV4YW1wbGUs ZGM9Y29tPg0KZG9fYmluZDogdmVyc2lvbj0zIGRuPSJjbj1NYW5hZ2VyLGRjPXNhbWJhLGRjPWV4 YW1wbGUsZGM9Y29tIiBtZXRob2Q9MTI4DQo9PT4gaGRiX2JpbmQ6IGRuOiBjbj1NYW5hZ2VyLGRj PXNhbWJhLGRjPWV4YW1wbGUsZGM9Y29tDQpkb19iaW5kOiB2MyBiaW5kOiAiY249TWFuYWdlcixk Yz1zYW1iYSxkYz1leGFtcGxlLGRjPWNvbSIgdG8gImNuPU1hbmFnZXIsZGM9c2FtYmEsZGM9ZXhh bXBsZSxkYz1jb20iDQpzZW5kX2xkYXBfcmVzdWx0OiBjb25uPTcgb3A9MCBwPTMNCnNlbmRfbGRh cF9yZXN1bHQ6IGVycj0wIG1hdGNoZWQ9IiIgdGV4dD0iIg0Kc2VuZF9sZGFwX3Jlc3BvbnNlOiBt c2dpZD0xIHRhZz05NyBlcnI9MA0KYmVyX2ZsdXNoMjogMTQgYnl0ZXMgdG8gc2QgMjUNCiAgMDAw MDogIDMwIDBjIDAyIDAxIDAxIDYxIDA3IDBhICAwMSAwMCAwNCAwMCAwNCAwMCAgICAgICAgIDAu Li4uYS4uLi4uLi4uICAgIA0KbGRhcF93cml0ZTogd2FudD0xNCwgd3JpdHRlbj0xNA0KICAwMDAw OiAgMzAgMGMgMDIgMDEgMDEgNjEgMDcgMGEgIDAxIDAwIDA0IDAwIDA0IDAwICAgICAgICAgMC4u Li5hLi4uLi4uLi4gICAgDQpjb25uZWN0aW9uX2dldCgyNSkNCmNvbm5lY3Rpb25fZ2V0KDI1KTog Z290IGNvbm5pZD03DQpjb25uZWN0aW9uX3JlYWQoMjUpOiBjaGVja2luZyBmb3IgaW5wdXQgb24g aWQ9Nw0KYmVyX2dldF9uZXh0DQpsZGFwX3JlYWQ6IHdhbnQ9OCwgZ290PTgNCiAgMDAwMDogIDMw IDZkIDAyIDAxIDAyIDY4IDY4IDA0ICAgICAgICAgICAgICAgICAgICAgICAgICAgIDBtLi4uaGgu ICAgICAgICAgIA0KbGRhcF9yZWFkOiB3YW50PTEwMywgZ290PTEwMw0KICAwMDAwOiAgMWEgNDQg NDMgM2QgNzMgNjEgNmQgNjIgIDYxIDJjIDQ0IDQzIDNkIDY1IDc4IDYxICAgLkRDPXNhbWJhLERD PWV4YSAgDQogIDAwMTA6ICA2ZCA3MCA2YyA2NSAyYyA0NCA0MyAzZCAgNjMgNmYgNmQgMzAgNGEg MzAgMzkgMDQgICBtcGxlLERDPWNvbTBKMDkuICANCiAgMDAyMDogIDBiIDZmIDYyIDZhIDY1IDYz IDc0IDQzICA2YyA2MSA3MyA3MyAzMSAyYSAwNCAwMyAgIC5vYmplY3RDbGFzczEqLi4gIA0KICAw MDMwOiAgNzQgNmYgNzAgMDQgMDYgNjQgNmYgNmQgIDYxIDY5IDZlIDA0IDA5IDY0IDZmIDZkICAg dG9wLi5kb21haW4uLmRvbSAgDQogIDAwNDA6ICA2MSA2OSA2ZSA0NCA0ZSA1MyAwNCAxMCAgNjUg NzggNzQgNjUgNmUgNzMgNjkgNjIgICBhaW5ETlMuLmV4dGVuc2liICANCiAgMDA1MDogIDZjIDY1 IDRmIDYyIDZhIDY1IDYzIDc0ICAzMCAwZCAwNCAwMiA2NCA2MyAzMSAwNyAgIGxlT2JqZWN0MC4u LmRjMS4gIA0KICAwMDYwOiAgMDQgMDUgNzMgNjEgNmQgNjIgNjEgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgLi5zYW1iYSAgICAgICAgICAgDQpiZXJfZ2V0X25leHQ6IHRhZyAweDMwIGxl biAxMDkgY29udGVudHM6DQpiZXJfZ2V0X25leHQNCmxkYXBfcmVhZDogd2FudD04IGVycm9yPVJl c291cmNlIHRlbXBvcmFyaWx5IHVuYXZhaWxhYmxlDQpjb25uPTcgb3A9MSBkb19hZGQNCmJlcl9z Y2FuZiBmbXQgKHttKSBiZXI6DQpjb25uPTcgb3A9MSBkb19hZGQ6IGRuIChEQz1zYW1iYSxEQz1l eGFtcGxlLERDPWNvbSkNCmJlcl9zY2FuZiBmbXQgKHtte1d9fSkgYmVyOg0KYmVyX3NjYW5mIGZt dCAoe217V319KSBiZXI6DQpiZXJfc2NhbmYgZm10ICh9KSBiZXI6DQo+Pj4gZG5QcmV0dHlOb3Jt YWw6IDxEQz1zYW1iYSxEQz1leGFtcGxlLERDPWNvbT4NCj0+IGxkYXBfYnYyZG4oREM9c2FtYmEs REM9ZXhhbXBsZSxEQz1jb20sMCkNCjw9IGxkYXBfYnYyZG4oREM9c2FtYmEsREM9ZXhhbXBsZSxE Qz1jb20pPTAgDQo9PiBsZGFwX2RuMmJ2KDI3MikNCjw9IGxkYXBfZG4yYnYoZGM9c2FtYmEsZGM9 ZXhhbXBsZSxkYz1jb20pPTAgDQo9PiBsZGFwX2RuMmJ2KDI3MikNCjw9IGxkYXBfZG4yYnYoZGM9 c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20pPTAgDQo8PDwgZG5QcmV0dHlOb3JtYWw6IDxkYz1zYW1i YSxkYz1leGFtcGxlLGRjPWNvbT4sIDxkYz1zYW1iYSxkYz1leGFtcGxlLGRjPWNvbT4NCmJkYl9k bjJlbnRyeSgiZGM9c2FtYmEsZGM9ZXhhbXBsZSxkYz1jb20iKQ0K --=-k5lHyfbmg0BMeRkyykUB-- --=-Y3mFtyVHKLn0c8Gx/BD0 Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQBHVof+z4A8Wyi0NrsRAk9xAJsHWQAw6AhUQp2UqZ/arCtlj/qwWQCffN3W eJg7ITzxs7KC47/6RA0cayU= =fmFU -----END PGP SIGNATURE----- --=-Y3mFtyVHKLn0c8Gx/BD0--

1 0

Re: (ITS#5257) test008 hanging in bdb
by hyc＠symas.com 05 Dec '07

05 Dec '07

h.b.furuseth(a)usit.uio.no wrote: > Hah. thr_debug found it (at least I presume it's the same bug) after 70 > iterations over test008. Just to confirm, test008 failed after 87 iterations even with this patch. So as I said in my previous email, going down this code path is just a side effect of the original bug. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5261) Samba4 can 'hang' OpenLDAP slapd
by hyc＠symas.com 05 Dec '07

05 Dec '07

abartlet(a)samba.org wrote: > Full_Name: Andrew Bartlett > Version: cvs 2007-12-05 > OS: Fedora 8 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (59.167.251.137) > > > Using Samba4's 'make test', I can hang OpenLDAP's slapd. Samba4 SVN -r 26305 > > That is, it will not process any further requests, but is waiting in > pthread_join(), not stuck somewhere else. > > OpenLDAP was built with: > `dirname $0`/configure --enable-overlays=yes --enable-modules --enable-dynamic > --enable-syncprov=yes > > Samba4 was built with: > CC="ccache gcc" CFLAGS="-O3" ./configure --enable-developer -C > --prefix=/data/samba/samba4/prefix > --with-winbindd-socket-dir=/data/samba/samba4/prefix/wb > > Samba4 testsuite command line: > > OPENLDAP_PATH=/usr/local/libexec:/usr/local/sbin TEST_LDAP=yes make test > > This hangs during the 'provision' processing. > > Note that this outputs an ldapi:// URL. Using that URL, this test shows it's > not just samba that is stuck: > > ldapadd -H ldapi://%2Fhome%2Fdata%2Fsamba%2Fsamba4%2Fclean%2Fsource%2Fst%2Fdc%2Fprivate%2Fldap%2Fldapi > -f st/dc/private/ldap/samba.example.com.ldif -D > cn=Manager,dc=samba,dc=example,dc=com -w localdcpass -x You should run slapd with -d debugging enabled and (I usually start with -d7) send the info for the last few requests prior to the hang. Also, you should use gdb to attach to the slapd and get a trace of all the threads to see where they've gotten stuck. http://www.openldap.org/faq/data/cache/59.html -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5261)
by abartlet＠samba.org 05 Dec '07

05 Dec '07

--=-sj7eji9lwVRllTKtUS/q Content-Type: text/plain Content-Transfer-Encoding: quoted-printable BTW, the SVN URL is: svn://svnanon.samba.org/samba/branches/SAMBA_4_0 --=20 Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc. --=-sj7eji9lwVRllTKtUS/q Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQBHVmdyz4A8Wyi0NrsRAoR8AKClVLbCKEm+OVUqGX8lNYVAyt7QzgCfR9vh 0klH1DFlRZKV6POw3tC6lnQ= =aa6D -----END PGP SIGNATURE----- --=-sj7eji9lwVRllTKtUS/q--

1 0

(ITS#5261) Samba4 can 'hang' OpenLDAP slapd
by abartlet＠samba.org 04 Dec '07

04 Dec '07

Full_Name: Andrew Bartlett Version: cvs 2007-12-05 OS: Fedora 8 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (59.167.251.137) Using Samba4's 'make test', I can hang OpenLDAP's slapd. Samba4 SVN -r 26305 That is, it will not process any further requests, but is waiting in pthread_join(), not stuck somewhere else. OpenLDAP was built with: `dirname $0`/configure --enable-overlays=yes --enable-modules --enable-dynamic --enable-syncprov=yes Samba4 was built with: CC="ccache gcc" CFLAGS="-O3" ./configure --enable-developer -C --prefix=/data/samba/samba4/prefix --with-winbindd-socket-dir=/data/samba/samba4/prefix/wb Samba4 testsuite command line: OPENLDAP_PATH=/usr/local/libexec:/usr/local/sbin TEST_LDAP=yes make test This hangs during the 'provision' processing. Note that this outputs an ldapi:// URL. Using that URL, this test shows it's not just samba that is stuck: ldapadd -H ldapi://%2Fhome%2Fdata%2Fsamba%2Fsamba4%2Fclean%2Fsource%2Fst%2Fdc%2Fprivate%2Fldap%2Fldapi -f st/dc/private/ldap/samba.example.com.ldif -D cn=Manager,dc=samba,dc=example,dc=com -w localdcpass -x

1 0

Re: (ITS#5257) test008 hanging in bdb
by hyc＠symas.com 04 Dec '07

04 Dec '07

h.b.furuseth(a)usit.uio.no wrote: > Hah. thr_debug found it (at least I presume it's the same bug) after 70 > iterations over test008. > > Compiled with > CPPFLAGS='-DLDAP_THREAD_DEBUG -DLDAP_REL_ENG' CFLAGS='-O0 -g' > run with export LDAP_THREAD_DEBUG=nocount > > backtrace and testrun directory: > http://folk.uio.no/hbf/test008bug-071204.tbz > > slapd.1.log ends with: > > ====> bdb_cache_delete( 146 ) > thr_debug.c:1024: ldap_pvt_thread_mutex_unlock error: !THREAD_MUTEX_OWNER( mutex ) > > The mutex owner is ldap_debug_thread_none, i.e. the mutex is not locked. > > It's cache.c:874:bdb_cache_entryinfo_unlock( *eip ); in bdb_cache_find_id(). > #3 0x00000000004e1df9 in bdb_cache_find_id (op=0x1ebb46a0, tid=0x0, id=4, eip=0x45809ad0, flag=1, locker=38, > lock=0x45809b20) at cache.c:874 > > > I had to patch thr_posix.c a bit to detect Linux NPTL threads: > > diff -u -2 -r1.50 thr_posix.c > --- thr_posix.c 25 Oct 2007 04:42:40 -0000 1.50 > +++ thr_posix.c 4 Dec 2007 23:06:29 -0000 > @@ -45,6 +45,6 @@ > #ifdef LDAP_THREAD_DEBUG > # if defined LDAP_INT_THREAD_MUTEXATTR /* May be defined in CPPFLAGS */ > -# elif defined HAVE_PTHREAD_KILL_OTHER_THREADS_NP > - /* LinuxThreads hack */ > +# elif 1 || defined HAVE_PTHREAD_KILL_OTHER_THREADS_NP > + /* LinuxThreads and NPTL hack */ > # define LDAP_INT_THREAD_MUTEXATTR PTHREAD_MUTEX_ERRORCHECK_NP > # else Ah, that one actually makes sense. Fix in HEAD. Unfortunately, this code path is only being triggered because of the other bug, it's not the root cause. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5161) delta-syncrepl mutex lockup
by quanah＠zimbra.com 04 Dec '07

04 Dec '07

Just hit this again today. (gdb) info threads 10 Thread 1082132800 (LWP 15704) 0xffffffffff600410 in ?? () * 9 Thread 1090525504 (LWP 15705) 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 8 Thread 1098918208 (LWP 15706) 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 7 Thread 1107310912 (LWP 15707) 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 6 Thread 1115703616 (LWP 32142) 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 5 Thread 1124096320 (LWP 1167) 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 4 Thread 1132489024 (LWP 1168) 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 3 Thread 1140881728 (LWP 1431) 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 2 Thread 1149274432 (LWP 1432) 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 1 Thread 46912515736208 (LWP 15700) 0x00000038dcc074e5 in pthread_join () from /lib64/libpthread.so.0 (gdb) thread 10 [Switching to thread 10 (Thread 1082132800 (LWP 15704))]#0 0xffffffffff600410 in ?? () (gdb) bt #0 0xffffffffff600410 in ?? () #1 0x00000038dc0862dd in time () from /lib64/libc.so.6 #2 0x0000000000428530 in slapd_daemon_task (ptr=0x0) at daemon.c:2033 #3 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #4 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #5 0x0000000000000000 in ?? () (gdb) thread 9 [Switching to thread 9 (Thread 1090525504 (LWP 15705))]#0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 #1 0x00000038dcc087c4 in _L_mutex_lock_107 () from /lib64/libpthread.so.0 #2 0x00000038dcc08263 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002aaaaad1685e in ldap_pvt_thread_mutex_lock (mutex=0x7f7fa58) at thr_posix.c:333 #4 0x00002aaaae660500 in accesslog_op_mod (op=0xc48fc00, rs=0x41000d00) at accesslog.c:1236 #5 0x00000000004a0cfe in overlay_op_walk (op=0xc48fc00, rs=0x41000d00, which=op_delete, oi=0x7f86c40, on=0x7f868c0) at backover.c:640 #6 0x00000000004a0f90 in over_op_func (op=0xc48fc00, rs=0x41000d00, which=op_delete) at backover.c:702 #7 0x00000000004a10da in over_op_delete (op=0xc48fc00, rs=0x41000d00) at backover.c:754 #8 0x000000000044c4f9 in fe_op_delete (op=0xc48fc00, rs=0x41000d00) at delete.c:179 #9 0x000000000044c126 in do_delete (op=0xc48fc00, rs=0x41000d00) at delete.c:91 #10 0x000000000042c2da in connection_operation (ctx=0x41000de0, arg_v=0xc48fc00) at connection.c:1133 #11 0x00002aaaaad154ba in ldap_int_thread_pool_wrapper (xpool=0x7c0ff00) at tpool.c:478 #12 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #13 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #14 0x0000000000000000 in ?? () (gdb) thread 8 [Switching to thread 8 (Thread 1098918208 (LWP 15706))]#0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 #1 0x00000038dcc087c4 in _L_mutex_lock_107 () from /lib64/libpthread.so.0 #2 0x00000038dcc08263 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002aaaaad1685e in ldap_pvt_thread_mutex_lock (mutex=0x7f7fa58) at thr_posix.c:333 #4 0x00002aaaae660500 in accesslog_op_mod (op=0xd5f7600, rs=0x41801ca0) at accesslog.c:1236 #5 0x00000000004a0cfe in overlay_op_walk (op=0xd5f7600, rs=0x41801ca0, which=op_delete, oi=0x7f86c40, on=0x7f868c0) at backover.c:640 #6 0x00000000004a0f90 in over_op_func (op=0xd5f7600, rs=0x41801ca0, which=op_delete) at backover.c:702 #7 0x00000000004a10da in over_op_delete (op=0xd5f7600, rs=0x41801ca0) at backover.c:754 #8 0x000000000044c4f9 in fe_op_delete (op=0xd5f7600, rs=0x41801ca0) at delete.c:179 #9 0x000000000044c126 in do_delete (op=0xd5f7600, rs=0x41801ca0) at delete.c:91 #10 0x000000000042c2da in connection_operation (ctx=0x41801de0, arg_v=0xd5f7600) at connection.c:1133 #11 0x000000000042c7b0 in connection_read_thread (ctx=0x41801de0, argv=0x1d) at connection.c:1261 #12 0x00002aaaaad154ba in ldap_int_thread_pool_wrapper (xpool=0x7c0ff00) at tpool.c:478 #13 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #14 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #15 0x0000000000000000 in ?? () (gdb) thread 7 [Switching to thread 7 (Thread 1107310912 (LWP 15707))]#0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 #1 0x00000038dcc087c4 in _L_mutex_lock_107 () from /lib64/libpthread.so.0 #2 0x00000038dcc08263 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002aaaaad1685e in ldap_pvt_thread_mutex_lock (mutex=0x7f7fa58) at thr_posix.c:333 #4 0x00002aaaae660500 in accesslog_op_mod (op=0xc48f900, rs=0x42002ca0) at accesslog.c:1236 #5 0x00000000004a0cfe in overlay_op_walk (op=0xc48f900, rs=0x42002ca0, which=op_delete, oi=0x7f86c40, on=0x7f868c0) at backover.c:640 #6 0x00000000004a0f90 in over_op_func (op=0xc48f900, rs=0x42002ca0, which=op_delete) at backover.c:702 #7 0x00000000004a10da in over_op_delete (op=0xc48f900, rs=0x42002ca0) at backover.c:754 #8 0x000000000044c4f9 in fe_op_delete (op=0xc48f900, rs=0x42002ca0) at delete.c:179 #9 0x000000000044c126 in do_delete (op=0xc48f900, rs=0x42002ca0) at delete.c:91 #10 0x000000000042c2da in connection_operation (ctx=0x42002de0, arg_v=0xc48f900) at connection.c:1133 #11 0x000000000042c7b0 in connection_read_thread (ctx=0x42002de0, argv=0x1c) at connection.c:1261 #12 0x00002aaaaad154ba in ldap_int_thread_pool_wrapper (xpool=0x7c0ff00) at tpool.c:478 #13 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #14 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #15 0x0000000000000000 in ?? () (gdb) thread 6 [Switching to thread 6 (Thread 1115703616 (LWP 32142))]#0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 #1 0x00000038dcc087c4 in _L_mutex_lock_107 () from /lib64/libpthread.so.0 #2 0x00000038dcc08263 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002aaaaad1685e in ldap_pvt_thread_mutex_lock (mutex=0x7f7fa58) at thr_posix.c:333 #4 0x00002aaaae660500 in accesslog_op_mod (op=0xb20ac00, rs=0x42803d00) at accesslog.c:1236 #5 0x00000000004a0cfe in overlay_op_walk (op=0xb20ac00, rs=0x42803d00, which=op_delete, oi=0x7f86c40, on=0x7f868c0) at backover.c:640 #6 0x00000000004a0f90 in over_op_func (op=0xb20ac00, rs=0x42803d00, which=op_delete) at backover.c:702 #7 0x00000000004a10da in over_op_delete (op=0xb20ac00, rs=0x42803d00) at backover.c:754 #8 0x000000000044c4f9 in fe_op_delete (op=0xb20ac00, rs=0x42803d00) at delete.c:179 #9 0x000000000044c126 in do_delete (op=0xb20ac00, rs=0x42803d00) at delete.c:91 #10 0x000000000042c2da in connection_operation (ctx=0x42803de0, arg_v=0xb20ac00) at connection.c:1133 #11 0x00002aaaaad154ba in ldap_int_thread_pool_wrapper (xpool=0x7c0ff00) at tpool.c:478 #12 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #13 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #14 0x0000000000000000 in ?? () (gdb) thread 5 [Switching to thread 5 (Thread 1124096320 (LWP 1167))]#0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 #1 0x00000038dcc087c4 in _L_mutex_lock_107 () from /lib64/libpthread.so.0 #2 0x00000038dcc08263 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002aaaaad1685e in ldap_pvt_thread_mutex_lock (mutex=0x7f7fa58) at thr_posix.c:333 #4 0x00002aaaae660500 in accesslog_op_mod (op=0xd5f7c00, rs=0x43004d00) at accesslog.c:1236 #5 0x00000000004a0cfe in overlay_op_walk (op=0xd5f7c00, rs=0x43004d00, which=op_delete, oi=0x7f86c40, on=0x7f868c0) at backover.c:640 #6 0x00000000004a0f90 in over_op_func (op=0xd5f7c00, rs=0x43004d00, which=op_delete) at backover.c:702 #7 0x00000000004a10da in over_op_delete (op=0xd5f7c00, rs=0x43004d00) at backover.c:754 #8 0x000000000044c4f9 in fe_op_delete (op=0xd5f7c00, rs=0x43004d00) at delete.c:179 #9 0x000000000044c126 in do_delete (op=0xd5f7c00, rs=0x43004d00) at delete.c:91 #10 0x000000000042c2da in connection_operation (ctx=0x43004de0, arg_v=0xd5f7c00) at connection.c:1133 #11 0x00002aaaaad154ba in ldap_int_thread_pool_wrapper (xpool=0x7c0ff00) at tpool.c:478 #12 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #13 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #14 0x0000000000000000 in ?? () (gdb) thread 4 [Switching to thread 4 (Thread 1132489024 (LWP 1168))]#0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 #1 0x00000038dcc087c4 in _L_mutex_lock_107 () from /lib64/libpthread.so.0 #2 0x00000038dcc08263 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002aaaaad1685e in ldap_pvt_thread_mutex_lock (mutex=0x7f7fa58) at thr_posix.c:333 #4 0x00002aaaae660500 in accesslog_op_mod (op=0xd5f7900, rs=0x43805ca0) at accesslog.c:1236 #5 0x00000000004a0cfe in overlay_op_walk (op=0xd5f7900, rs=0x43805ca0, which=op_delete, oi=0x7f86c40, on=0x7f868c0) at backover.c:640 #6 0x00000000004a0f90 in over_op_func (op=0xd5f7900, rs=0x43805ca0, which=op_delete) at backover.c:702 #7 0x00000000004a10da in over_op_delete (op=0xd5f7900, rs=0x43805ca0) at backover.c:754 #8 0x000000000044c4f9 in fe_op_delete (op=0xd5f7900, rs=0x43805ca0) at delete.c:179 #9 0x000000000044c126 in do_delete (op=0xd5f7900, rs=0x43805ca0) at delete.c:91 #10 0x000000000042c2da in connection_operation (ctx=0x43805de0, arg_v=0xd5f7900) at connection.c:1133 #11 0x000000000042c7b0 in connection_read_thread (ctx=0x43805de0, argv=0x1d) at connection.c:1261 #12 0x00002aaaaad154ba in ldap_int_thread_pool_wrapper (xpool=0x7c0ff00) at tpool.c:478 #13 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #14 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #15 0x0000000000000000 in ?? () (gdb) thread 3 [Switching to thread 3 (Thread 1140881728 (LWP 1431))]#0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 #1 0x00000038dcc087c4 in _L_mutex_lock_107 () from /lib64/libpthread.so.0 #2 0x00000038dcc08263 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002aaaaad1685e in ldap_pvt_thread_mutex_lock (mutex=0x7f7fa58) at thr_posix.c:333 #4 0x00002aaaae660500 in accesslog_op_mod (op=0xd955c00, rs=0x44006d00) at accesslog.c:1236 #5 0x00000000004a0cfe in overlay_op_walk (op=0xd955c00, rs=0x44006d00, which=op_delete, oi=0x7f86c40, on=0x7f868c0) at backover.c:640 #6 0x00000000004a0f90 in over_op_func (op=0xd955c00, rs=0x44006d00, which=op_delete) at backover.c:702 #7 0x00000000004a10da in over_op_delete (op=0xd955c00, rs=0x44006d00) at backover.c:754 #8 0x000000000044c4f9 in fe_op_delete (op=0xd955c00, rs=0x44006d00) at delete.c:179 #9 0x000000000044c126 in do_delete (op=0xd955c00, rs=0x44006d00) at delete.c:91 #10 0x000000000042c2da in connection_operation (ctx=0x44006de0, arg_v=0xd955c00) at connection.c:1133 #11 0x00002aaaaad154ba in ldap_int_thread_pool_wrapper (xpool=0x7c0ff00) at tpool.c:478 #12 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #13 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #14 0x0000000000000000 in ?? () (gdb) thread 2 [Switching to thread 2 (Thread 1149274432 (LWP 1432))]#0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc0c758 in __lll_mutex_lock_wait () from /lib64/libpthread.so.0 #1 0x00000038dcc087c4 in _L_mutex_lock_107 () from /lib64/libpthread.so.0 #2 0x00000038dcc08263 in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002aaaaad1685e in ldap_pvt_thread_mutex_lock (mutex=0x7f7fa58) at thr_posix.c:333 #4 0x00002aaaae660500 in accesslog_op_mod (op=0xd955900, rs=0x44807ca0) at accesslog.c:1236 #5 0x00000000004a0cfe in overlay_op_walk (op=0xd955900, rs=0x44807ca0, which=op_delete, oi=0x7f86c40, on=0x7f868c0) at backover.c:640 #6 0x00000000004a0f90 in over_op_func (op=0xd955900, rs=0x44807ca0, which=op_delete) at backover.c:702 #7 0x00000000004a10da in over_op_delete (op=0xd955900, rs=0x44807ca0) at backover.c:754 #8 0x000000000044c4f9 in fe_op_delete (op=0xd955900, rs=0x44807ca0) at delete.c:179 #9 0x000000000044c126 in do_delete (op=0xd955900, rs=0x44807ca0) at delete.c:91 #10 0x000000000042c2da in connection_operation (ctx=0x44807de0, arg_v=0xd955900) at connection.c:1133 #11 0x000000000042c7b0 in connection_read_thread (ctx=0x44807de0, argv=0x1e) at connection.c:1261 #12 0x00002aaaaad154ba in ldap_int_thread_pool_wrapper (xpool=0x7c0ff00) at tpool.c:478 #13 0x00000038dcc061b5 in start_thread () from /lib64/libpthread.so.0 #14 0x00000038dc0cd36d in clone () from /lib64/libc.so.6 #15 0x0000000000000000 in ?? () (gdb) thread 1 [Switching to thread 1 (Thread 46912515736208 (LWP 15700))]#0 0x00000038dcc074e5 in pthread_join () from /lib64/libpthread.so.0 (gdb) bt #0 0x00000038dcc074e5 in pthread_join () from /lib64/libpthread.so.0 #1 0x00002aaaaad16767 in ldap_pvt_thread_join (thread=1082132800, thread_return=0x0) at thr_posix.c:193 #2 0x0000000000429bd3 in slapd_daemon () at daemon.c:2579 #3 0x0000000000412113 in main (argc=10, argv=0x7fffd07d4fe8) at main.c:859 --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#5257) test008 hanging in bdb
by hyc＠symas.com 04 Dec '07

04 Dec '07

h.b.furuseth(a)usit.uio.no wrote: > Hah. thr_debug found it (at least I presume it's the same bug) after 70 > iterations over test008. > > Compiled with > CPPFLAGS='-DLDAP_THREAD_DEBUG -DLDAP_REL_ENG' CFLAGS='-O0 -g' > run with export LDAP_THREAD_DEBUG=nocount > > backtrace and testrun directory: > http://folk.uio.no/hbf/test008bug-071204.tbz > > slapd.1.log ends with: > > ====> bdb_cache_delete( 146 ) > thr_debug.c:1024: ldap_pvt_thread_mutex_unlock error: !THREAD_MUTEX_OWNER( mutex ) > > The mutex owner is ldap_debug_thread_none, i.e. the mutex is not locked. > > It's cache.c:874:bdb_cache_entryinfo_unlock( *eip ); in bdb_cache_find_id(). > #3 0x00000000004e1df9 in bdb_cache_find_id (op=0x1ebb46a0, tid=0x0, id=4, eip=0x45809ad0, flag=1, locker=38, > lock=0x45809b20) at cache.c:874 > Need to see the full stack trace. Obviously "this should never happen" ... -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5257) test008 hanging in bdb
by h.b.furuseth＠usit.uio.no 04 Dec '07

04 Dec '07

Hah. thr_debug found it (at least I presume it's the same bug) after 70 iterations over test008. Compiled with CPPFLAGS='-DLDAP_THREAD_DEBUG -DLDAP_REL_ENG' CFLAGS='-O0 -g' run with export LDAP_THREAD_DEBUG=nocount backtrace and testrun directory: http://folk.uio.no/hbf/test008bug-071204.tbz slapd.1.log ends with: ====> bdb_cache_delete( 146 ) thr_debug.c:1024: ldap_pvt_thread_mutex_unlock error: !THREAD_MUTEX_OWNER( mutex ) The mutex owner is ldap_debug_thread_none, i.e. the mutex is not locked. It's cache.c:874:bdb_cache_entryinfo_unlock( *eip ); in bdb_cache_find_id(). #3 0x00000000004e1df9 in bdb_cache_find_id (op=0x1ebb46a0, tid=0x0, id=4, eip=0x45809ad0, flag=1, locker=38, lock=0x45809b20) at cache.c:874 I had to patch thr_posix.c a bit to detect Linux NPTL threads: diff -u -2 -r1.50 thr_posix.c --- thr_posix.c 25 Oct 2007 04:42:40 -0000 1.50 +++ thr_posix.c 4 Dec 2007 23:06:29 -0000 @@ -45,6 +45,6 @@ #ifdef LDAP_THREAD_DEBUG # if defined LDAP_INT_THREAD_MUTEXATTR /* May be defined in CPPFLAGS */ -# elif defined HAVE_PTHREAD_KILL_OTHER_THREADS_NP - /* LinuxThreads hack */ +# elif 1 || defined HAVE_PTHREAD_KILL_OTHER_THREADS_NP + /* LinuxThreads and NPTL hack */ # define LDAP_INT_THREAD_MUTEXATTR PTHREAD_MUTEX_ERRORCHECK_NP # else (BTW, I tried to put it in ftp://ftp.openldap.org/incoming/Hallvard-Furuseth-071203.tbz but got disk full.) -- Hallvard

1 0

(ITS#5260) delta-syncrepl infinite loop
by quanah＠zimbra.com 04 Dec '07

04 Dec '07

Full_Name: Quanah Gibson-Mount Version: 2.3.39 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (76.21.80.71) If the sync cookie is stale between a replica and the master, and the accesslog DB is emtpy, delta sync starts slamming the master with search requests: Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19290 SEARCH RESULT tag=101 err=0 nentries=0 text= Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19291 SRCH base="cn=accesslog" scope=2 deref=0 filter="(&(objectClass=auditWriteObject)(reqResult=0))" Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19291 SRCH attr=reqDN reqType reqMod reqNewRDN reqDeleteOldRDN reqNewSuperior entryCSN Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19291 SEARCH RESULT tag=101 err=4096 nentries=0 text=sync cookie is stale Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19292 SRCH base="" scope=2 deref=0 filter="(objectClass=*)" Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19292 SRCH attr=* + Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19292 SEARCH RESULT tag=101 err=0 nentries=0 text= Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19293 SRCH base="cn=accesslog" scope=2 deref=0 filter="(&(objectClass=auditWriteObject)(reqResult=0))" Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19293 SRCH attr=reqDN reqType reqMod reqNewRDN reqDeleteOldRDN reqNewSuperior entryCSN Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19293 SEARCH RESULT tag=101 err=4096 nentries=0 text=sync cookie is stale Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19294 SRCH base="" scope=2 deref=0 filter="(objectClass=*)" Dec 4 13:43:33 freelancer slapd[30805]: conn=3 op=19294 SRCH attr=* + (as you can see, nearly 20,000 ops in just a few seconds)

1 0

(ITS#5259) SIGSEGV in slap_auxprop_store during SASL/OTP bind
by dwhite＠olp.net 04 Dec '07

04 Dec '07

Full_Name: Dan White Version: 2.3.39 OS: Linux URL: http://support.olp.net/ldap/log.txt Submission from: (NULL) (65.161.252.42) I'm experiencing crashes in slapd when attempting to bind via SASL using the OTP mech. I'm using openldap version 2.3.39 for both slapd and my ldap utils (ldapsearch). I'm using the bdb backend. I'm also using Debian Etch with the following versions of software: Cyrus SASL 2.1.22(.dfsg1-8) libdb 4.2.52(+dfsg-2) libc6 2.3.6(.ds1-13etch2) I've compiled cyrus sasl to use it's internal implementation of OTP, rather than OPIE: --enable-otp (--with-opie is not enabled) The problem I'm experiencing isn't when I successfully authenticate; that seems to work fine. It's when I run an ldapsearch, but instead of entering an OTP password, I press ctrl-c to cancel the search. >From the shell, when I perform an LDAP search, all appears normal: hiro:~# ldapsearch -Y OTP -U abrown(a)olp.net SASL/OTP authentication started Challenge: otp-md5 497 hi3182 ext Please enter your one-time password:<ctrl-c> hiro:~# However my slapd process dies. Here's a gdb backtrace of the server process: ... Core was generated by `/usr/sbin/slapd'. Program terminated with signal 11, Segmentation fault. #0 0x080b448e in slap_auxprop_store (glob_context=0x0, sparams=0x820b2a0, prctx=0x82351c0, user=0x820a148 "abrown(a)olp.net", ulen=14) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/sasl.c:478 478 op.o_hdr = conn->c_sasl_bindop->o_hdr; (gdb) bt #0 0x080b448e in slap_auxprop_store (glob_context=0x0, sparams=0x820b2a0, prctx=0x82351c0, user=0x820a148 "abrown(a)olp.net", ulen=14) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/sasl.c:478 #1 0xb7eb17d7 in sasl_auxprop_store () from /usr/lib/libsasl2.so.2 #2 0xb7973c89 in otp_server_plug_init () from /usr/lib/sasl2/libotp.so.2 #3 0xb7ebde36 in sasl_server_new () from /usr/lib/libsasl2.so.2 #4 0xb7eb6194 in sasl_dispose () from /usr/lib/libsasl2.so.2 #5 0x080b2992 in slap_sasl_close (conn=0xb7ec3618) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/sasl.c:1331 #6 0x0806cf27 in connection_close (c=0xb75b1148) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/connection.c:715 #7 0x0806e116 in connection_read (s=12) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/connection.c:1458 #8 0x0806a49f in slapd_daemon_task (ptr=0x0) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/daemon.c:2468 #9 0xb7cd3240 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #10 0xb7c674ae in clone () from /lib/tls/i686/cmov/libc.so.6 (gdb) quit I've added a debug statement within slap_auxprop_store, so the openldap debug information below will include some additional information about what's being modified. The output can be obtained from: http://support.olp.net/ldap/log.txt Notice the two lines: Dec 3 13:39:06 hiro slapd[11134]: slap_auxprop_store [conn=3]: Getting ready to set cmusaslsecretOTP to md5^I0499^Ihi5935^I0e81b33e30182715^I00000000001196711046. Dec 3 13:39:07 hiro slapd[11134]: slap_auxprop_store [conn=-1]: Getting ready to set cmusaslsecretOTP to md5^I0499^Ihi5935^I0e81b33e30182715^I00000000000000000000. If I enter a good OTP password, I get this in my logs: Dec 3 13:43:26 hiro slapd[11159]: slap_auxprop_store [conn=3]: Getting ready to set cmusaslsecretOTP to md5^I0499^Ihi5865^Iec8123986aec6550^I00000000001196711306. Dec 3 13:44:26 hiro slapd[11159]: slap_auxprop_store [conn=3]: Getting ready to set cmusaslsecretOTP to md5^I0498^Ihi5865^Ic3570f027cf46ed0^I00000000000000000000. If I enter an incorrect password, I get this: Dec 3 13:45:21 hiro slapd[11159]: slap_auxprop_store [conn=4]: Getting ready to set cmusaslsecretOTP to md5^I0498^Ihi5865^Ic3570f027cf46ed0^I00000000001196711421. Dec 3 13:45:22 hiro slapd[11159]: slap_auxprop_store [conn=4]: Getting ready to set cmusaslsecretOTP to md5^I0498^Ihi5865^Ic3570f027cf46ed0^I00000000000000000000. So in the case where it's crashing, it appears the Cyrus SASL is attempting to revert the OTP entry back to the previous version to "unlock" it. I assume that the connection id of '-1' is relevant to the crash. You should be able to reproduce this error with the following steps: Compile SASL with OTP, but without OPIE Configure a dummy SASL service configuration file to be used with saslpasswd2 below, e.g.: hiro:~# cat > /usr/lib/sasl2/test.conf <<EOF > auxprop_plugin: ldapdb > ldapdb_uri: ldapi:/// > ldapdb_mech: EXTERNAL > EOF hiro:~# Create a schema including an attribute of cmusaslsecretOTP, and create an entry in the directory which can use this attribute. Configure slapd.conf with the appropriate sasl configuration to convert both the shell (root) user (connecting via ldapi:///) and the user specified in the ldapsearch, for example: sasl-regexp "gidNumber=0\\\+uidNumber=0,cn=peercred,cn=external,cn=auth" cn=admin,dc=olp,dc=net sasl-regexp "uid=([^,]+),cn=otp,cn=auth" ldap:///ou=people,dc=olp,dc=net??one?(btcAltUid=$1) Issue a saslpasswd2 to initialize the cmusaslsecretOTP attribute for the user: hiro:~# saslpasswd2 -a test -n abrown(a)olp.net Password: Again (for verification): The cmusaslsecretOTP attribute should look something like: md5 0499 hi8351 1c19abc81f35dc63 00000000000000000000 opiekey can be used to convert the OTP challenge into the appropriate response. For instance: hiro:~# ldapsearch -Y OTP -U abrown(a)olp.net SASL/OTP authentication started Challenge: otp-md5 498 hi8351 ext Please enter your one-time password: Using opiekey to obtain response: dwhite@zek:~$ opiekey -5 -x 498 hi8351 Using the MD5 algorithm to compute response. Reminder: Don't use opiekey from telnet or dial-in sessions. Enter secret pass phrase: 556A 99B3 52FA CEB1 Feed the result back into ldapsearch for a successful bind. To reproduce the bug, of course just kill the ldapsearch before entering any response.

1 0

Problem to connect à LDAP server
by rodrigue Boyom 04 Dec '07

04 Dec '07

Hi , i m a technician of computer science and telecommunication.I have some problem when i configure LDAP server on RedHat 9.0 this a bugs i have when i want cretead a password to connect a LDAP server please help me : root@serveur root]# ldappasswd -s danse SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error [root@serveur root]#

2 1

SIGSEGV in slap_auxprop_store during SASL/OTP bind
by Dan White 04 Dec '07

04 Dec '07

I'm experiencing crashes in slapd when attempting to bind via SASL using the OTP mech. I'm using openldap version 2.3.39 for both slapd and my ldap utils (ldapsearch). I'm using the bdb backend. I'm also using Debian Etch with the following versions of software: Cyrus SASL 2.1.22(.dfsg1-8) libdb 4.2.52(+dfsg-2) libc6 2.3.6(.ds1-13etch2) I've compiled cyrus sasl to use it's internal implementation of OTP, rather than OPIE: --enable-otp (--with-opie is not enabled) The problem I'm experiencing isn't when I successfully authenticate; that seems to work fine. It's when I run an ldapsearch, but instead of entering an OTP password, I press ctrl-c to cancel the search. From the shell, when I perform an LDAP search, all appears normal: hiro:~# ldapsearch -Y OTP -U abrown(a)olp.net SASL/OTP authentication started Challenge: otp-md5 497 hi3182 ext Please enter your one-time password:<ctrl-c> hiro:~# However my slapd process dies. Here's a gdb backtrace of the server process: ... Core was generated by `/usr/sbin/slapd'. Program terminated with signal 11, Segmentation fault. #0 0x080b448e in slap_auxprop_store (glob_context=0x0, sparams=0x820b2a0, prctx=0x82351c0, user=0x820a148 "abrown(a)olp.net", ulen=14) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/sasl.c:478 478 op.o_hdr = conn->c_sasl_bindop->o_hdr; (gdb) bt #0 0x080b448e in slap_auxprop_store (glob_context=0x0, sparams=0x820b2a0, prctx=0x82351c0, user=0x820a148 "abrown(a)olp.net", ulen=14) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/sasl.c:478 #1 0xb7eb17d7 in sasl_auxprop_store () from /usr/lib/libsasl2.so.2 #2 0xb7973c89 in otp_server_plug_init () from /usr/lib/sasl2/libotp.so.2 #3 0xb7ebde36 in sasl_server_new () from /usr/lib/libsasl2.so.2 #4 0xb7eb6194 in sasl_dispose () from /usr/lib/libsasl2.so.2 #5 0x080b2992 in slap_sasl_close (conn=0xb7ec3618) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/sasl.c:1331 #6 0x0806cf27 in connection_close (c=0xb75b1148) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/connection.c:715 #7 0x0806e116 in connection_read (s=12) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/connection.c:1458 #8 0x0806a49f in slapd_daemon_task (ptr=0x0) at /usr/src/build/openldap/openldap2.3-2.3.39/servers/slapd/daemon.c:2468 #9 0xb7cd3240 in start_thread () from /lib/tls/i686/cmov/libpthread.so.0 #10 0xb7c674ae in clone () from /lib/tls/i686/cmov/libc.so.6 (gdb) quit I've added a debug statement within slap_auxprop_store, so the openldap debug information below will include some additional information about what's being modified. Here's output from an attempt that crashed (when I pressed ctrl-c in my ldapsearch): Dec 3 13:39:06 hiro slapd[11134]: daemon: activity on 1 descriptor Dec 3 13:39:06 hiro slapd[11134]: daemon: activity on: Dec 3 13:39:06 hiro slapd[11134]: Dec 3 13:39:06 hiro slapd[11134]: >>> slap_listener(ldapi:///) Dec 3 13:39:06 hiro slapd[11134]: daemon: listen=12, new connection on 16 Dec 3 13:39:06 hiro slapd[11134]: daemon: added 16r (active) listener=(nil) Dec 3 13:39:06 hiro slapd[11134]: conn=3 fd=16 ACCEPT from PATH=/var/run/slapd/ldapi (PATH=/var/run/slapd/ldapi) Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=8 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=9 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=10 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=11 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=12 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: daemon: activity on 1 descriptor Dec 3 13:39:06 hiro slapd[11134]: daemon: activity on: Dec 3 13:39:06 hiro slapd[11134]: 16r Dec 3 13:39:06 hiro slapd[11134]: Dec 3 13:39:06 hiro slapd[11134]: daemon: read active on 16 Dec 3 13:39:06 hiro slapd[11134]: connection_get(16) Dec 3 13:39:06 hiro slapd[11134]: connection_get(16): got connid=3 Dec 3 13:39:06 hiro slapd[11134]: connection_read(16): checking for input on id=3 Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=8 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=9 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: do_bind Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=10 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: >>> dnPrettyNormal: <> Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=11 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: <<< dnPrettyNormal: <>, <> Dec 3 13:39:06 hiro slapd[11134]: daemon: epoll: listen=12 active_threads=0 tvp=NULL Dec 3 13:39:06 hiro slapd[11134]: do_sasl_bind: dn () mech OTP Dec 3 13:39:06 hiro slapd[11134]: conn=3 op=0 BIND dn="" method=163 Dec 3 13:39:06 hiro slapd[11134]: ==> sasl_bind: dn="" mech=OTP datalen=29 Dec 3 13:39:06 hiro slapd[11134]: SASL Canonicalize [conn=3]: authcid="abrown(a)olp.net" Dec 3 13:39:06 hiro slapd[11134]: slap_sasl_getdn: conn 3 id=abrown(a)olp.net [len=14] Dec 3 13:39:06 hiro slapd[11134]: slap_sasl_getdn: u:id converted to uid=abrown(a)olp.net,cn=OTP,cn=auth Dec 3 13:39:06 hiro slapd[11134]: >>> dnNormalize: <uid=abrown(a)olp.net,cn=OTP,cn=auth> Dec 3 13:39:06 hiro slapd[11134]: <<< dnNormalize: <uid=abrown(a)olp.net,cn=otp,cn=auth> Dec 3 13:39:06 hiro slapd[11134]: ==>slap_sasl2dn: converting SASL name uid=abrown(a)olp.net,cn=otp,cn=auth to a DN Dec 3 13:39:06 hiro slapd[11134]: slap_authz_regexp: converting SASL name uid=abrown(a)olp.net,cn=otp,cn=auth Dec 3 13:39:06 hiro slapd[11134]: slap_authz_regexp: converted SASL name to ldap:///ou=people,dc=olp,dc=net??one?(btcAltUid=abrown@olp.net) Dec 3 13:39:06 hiro slapd[11134]: slap_parseURI: parsing ldap:///ou=people,dc=olp,dc=net??one?(btcAltUid=abrown@olp.net) Dec 3 13:39:06 hiro slapd[11134]: str2filter "(btcAltUid=abrown(a)olp.net)" Dec 3 13:39:06 hiro slapd[11134]: begin get_filter Dec 3 13:39:06 hiro slapd[11134]: EQUALITY Dec 3 13:39:06 hiro slapd[11134]: end get_filter 0 Dec 3 13:39:06 hiro slapd[11134]: >>> dnNormalize: <ou=people,dc=olp,dc=net> Dec 3 13:39:06 hiro slapd[11134]: <<< dnNormalize: <ou=people,dc=olp,dc=net> Dec 3 13:39:06 hiro slapd[11134]: slap_sasl2dn: performing internal search (base=ou=people,dc=olp,dc=net, scope=1) Dec 3 13:39:06 hiro slapd[11134]: => bdb_search Dec 3 13:39:06 hiro slapd[11134]: bdb_dn2entry("ou=people,dc=olp,dc=net") Dec 3 13:39:06 hiro slapd[11134]: search_candidates: base="ou=people,dc=olp,dc=net" (0x00000003) scope=1 Dec 3 13:39:06 hiro slapd[11134]: => bdb_dn2idl("ou=people,dc=olp,dc=net") Dec 3 13:39:06 hiro slapd[11134]: bdb_idl_fetch_key: %ou=people,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: <= bdb_dn2idl: id=68 first=7 last=136 Dec 3 13:39:06 hiro slapd[11134]: => bdb_filter_candidates Dec 3 13:39:06 hiro slapd[11134]: ^IAND Dec 3 13:39:06 hiro slapd[11134]: => bdb_list_candidates 0xa0 Dec 3 13:39:06 hiro slapd[11134]: => bdb_filter_candidates Dec 3 13:39:06 hiro slapd[11134]: ^IOR Dec 3 13:39:06 hiro slapd[11134]: => bdb_list_candidates 0xa1 Dec 3 13:39:06 hiro slapd[11134]: => bdb_filter_candidates Dec 3 13:39:06 hiro slapd[11134]: ^IEQUALITY Dec 3 13:39:06 hiro slapd[11134]: => bdb_equality_candidates (objectClass) Dec 3 13:39:06 hiro slapd[11134]: => key_read Dec 3 13:39:06 hiro slapd[11134]: bdb_idl_fetch_key: [b49d1940] Dec 3 13:39:06 hiro slapd[11134]: <= bdb_index_read: failed (-30990) Dec 3 13:39:06 hiro slapd[11134]: <= bdb_equality_candidates: id=0, first=0, last=0 Dec 3 13:39:06 hiro slapd[11134]: <= bdb_filter_candidates: id=0 first=0 last=0 Dec 3 13:39:06 hiro slapd[11134]: => bdb_filter_candidates Dec 3 13:39:06 hiro slapd[11134]: ^IEQUALITY Dec 3 13:39:06 hiro slapd[11134]: => bdb_equality_candidates (btcAltUID) Dec 3 13:39:06 hiro slapd[11134]: => key_read Dec 3 13:39:06 hiro slapd[11134]: bdb_idl_fetch_key: [b0f0ea63] Dec 3 13:39:06 hiro slapd[11134]: <= bdb_index_read 1 candidates Dec 3 13:39:06 hiro slapd[11134]: <= bdb_equality_candidates: id=1, first=7, last=7 Dec 3 13:39:06 hiro slapd[11134]: <= bdb_filter_candidates: id=1 first=7 last=7 Dec 3 13:39:06 hiro slapd[11134]: <= bdb_list_candidates: id=1 first=7 last=7 Dec 3 13:39:06 hiro slapd[11134]: <= bdb_filter_candidates: id=1 first=7 last=7 Dec 3 13:39:06 hiro slapd[11134]: <= bdb_list_candidates: id=1 first=7 last=7 Dec 3 13:39:06 hiro slapd[11134]: <= bdb_filter_candidates: id=1 first=7 last=7 Dec 3 13:39:06 hiro slapd[11134]: bdb_search_candidates: id=1 first=7 last=7 Dec 3 13:39:06 hiro slapd[11134]: => test_filter Dec 3 13:39:06 hiro slapd[11134]: EQUALITY Dec 3 13:39:06 hiro slapd[11134]: => access_allowed: auth access to "uid=abrown(a)olp.net,ou=People,dc=olp,dc=net" "btcAltUID" requested Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [1] ou=addressbooks,uid=([^,]+),ou=people,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [2] .*,ou=addressbooks,uid=([^,]+),ou=people,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dn: [3] ou=people,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => dn: [4] ou=groups,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => acl_get: [7] attr btcAltUID Dec 3 13:39:06 hiro slapd[11134]: => acl_mask: access to entry "uid=abrown(a)olp.net,ou=People,dc=olp,dc=net", attr "btcAltUID" requested Dec 3 13:39:06 hiro slapd[11134]: => acl_mask: to value by "", (=0) Dec 3 13:39:06 hiro slapd[11134]: <= check a_dn_pat: anonymous Dec 3 13:39:06 hiro slapd[11134]: <= acl_mask: [1] applying auth(=xd) (stop) Dec 3 13:39:06 hiro slapd[11134]: <= acl_mask: [1] mask: auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: => slap_access_allowed: auth access granted by auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: => access_allowed: auth access granted by auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: <= test_filter 6 Dec 3 13:39:06 hiro slapd[11134]: send_ldap_result: conn=3 op=0 p=3 Dec 3 13:39:06 hiro slapd[11134]: send_ldap_result: err=0 matched="" text="" Dec 3 13:39:06 hiro slapd[11134]: <==slap_sasl2dn: Converted SASL name to uid=abrown(a)olp.net,ou=people,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: slap_sasl_getdn: dn:id converted to uid=abrown(a)olp.net,ou=people,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: SASL Canonicalize [conn=3]: slapAuthcDN="uid=abrown(a)olp.net,ou=people,dc=olp,dc=net" Dec 3 13:39:06 hiro slapd[11134]: => bdb_search Dec 3 13:39:06 hiro slapd[11134]: bdb_dn2entry("uid=abrown(a)olp.net,ou=people,dc=olp,dc=net") Dec 3 13:39:06 hiro slapd[11134]: base_candidates: base: "uid=abrown(a)olp.net,ou=people,dc=olp,dc=net" (0x00000007) Dec 3 13:39:06 hiro slapd[11134]: => test_filter Dec 3 13:39:06 hiro slapd[11134]: PRESENT Dec 3 13:39:06 hiro slapd[11134]: => access_allowed: auth access to "uid=abrown(a)olp.net,ou=People,dc=olp,dc=net" "objectClass" requested Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [1] ou=addressbooks,uid=([^,]+),ou=people,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [2] .*,ou=addressbooks,uid=([^,]+),ou=people,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dn: [3] ou=people,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => dn: [4] ou=groups,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [12] .*n=([^,]+),ou=groups,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [13] .*n=([^,]+),ou=groups,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [14] ^cn=admin,cn=([^,]+),ou=groups,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [15] ^cn=([^,]+),ou=groups,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [16] ^cn=admin,cn=([^,]+),ou=groups,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => acl_get: [17] attr objectClass Dec 3 13:39:06 hiro slapd[11134]: => acl_mask: access to entry "uid=abrown(a)olp.net,ou=People,dc=olp,dc=net", attr "objectClass" requested Dec 3 13:39:06 hiro slapd[11134]: => acl_mask: to all values by "", (=0) Dec 3 13:39:06 hiro slapd[11134]: <= check a_dn_pat: self Dec 3 13:39:06 hiro slapd[11134]: <= check a_dn_pat: anonymous Dec 3 13:39:06 hiro slapd[11134]: <= acl_mask: [8] applying auth(=xd) (stop) Dec 3 13:39:06 hiro slapd[11134]: <= acl_mask: [8] mask: auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: => slap_access_allowed: auth access granted by auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: => access_allowed: auth access granted by auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: <= test_filter 6 Dec 3 13:39:06 hiro slapd[11134]: => access_allowed: auth access to "uid=abrown(a)olp.net,ou=People,dc=olp,dc=net" "cmusaslsecretOTP" requested Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [1] ou=addressbooks,uid=([^,]+),ou=people,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [2] .*,ou=addressbooks,uid=([^,]+),ou=people,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dn: [3] ou=people,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => dn: [4] ou=groups,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => acl_get: [8] attr cmusaslsecretOTP Dec 3 13:39:06 hiro slapd[11134]: => acl_mask: access to entry "uid=abrown(a)olp.net,ou=People,dc=olp,dc=net", attr "cmusaslsecretOTP" requested Dec 3 13:39:06 hiro slapd[11134]: => acl_mask: to all values by "", (=0) Dec 3 13:39:06 hiro slapd[11134]: <= check a_dn_pat: anonymous Dec 3 13:39:06 hiro slapd[11134]: <= acl_mask: [1] applying auth(=xd) (stop) Dec 3 13:39:06 hiro slapd[11134]: <= acl_mask: [1] mask: auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: => slap_access_allowed: auth access granted by auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: => access_allowed: auth access granted by auth(=xd) Dec 3 13:39:06 hiro slapd[11134]: send_ldap_result: conn=3 op=0 p=3 Dec 3 13:39:06 hiro slapd[11134]: send_ldap_result: err=0 matched="" text="" Dec 3 13:39:06 hiro slapd[11134]: SASL Canonicalize [conn=3]: authzid="abrown(a)olp.net" Dec 3 13:39:06 hiro slapd[11134]: slap_auxprop_store [conn=3]: Getting ready to set cmusaslsecretOTP to md5^I0499^Ihi5935^I0e81b33e30182715^I00000000001196711046. Dec 3 13:39:06 hiro slapd[11134]: bdb_modify: uid=abrown(a)olp.net,ou=people,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: bdb_dn2entry("uid=abrown(a)olp.net,ou=people,dc=olp,dc=net") Dec 3 13:39:06 hiro slapd[11134]: bdb_modify_internal: 0x00000007: uid=abrown(a)olp.net,ou=People,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => access_allowed: delete access to "uid=abrown(a)olp.net,ou=People,dc=olp,dc=net" "cmusaslsecretOTP" requested Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [1] ou=addressbooks,uid=([^,]+),ou=people,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dnpat: [2] .*,ou=addressbooks,uid=([^,]+),ou=people,dc=olp,dc=net$ nsub: 1 Dec 3 13:39:06 hiro slapd[11134]: => dn: [3] ou=people,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => dn: [4] ou=groups,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: => acl_get: [8] attr cmusaslsecretOTP Dec 3 13:39:06 hiro slapd[11134]: => slap_access_allowed: no res from state (cmusaslsecretOTP) Dec 3 13:39:06 hiro slapd[11134]: => acl_mask: access to entry "uid=abrown(a)olp.net,ou=People,dc=olp,dc=net", attr "cmusaslsecretOTP" requested Dec 3 13:39:06 hiro slapd[11134]: => acl_mask: to all values by "uid=abrown(a)olp.net,ou=people,dc=olp,dc=net", (=0) Dec 3 13:39:06 hiro slapd[11134]: <= check a_dn_pat: anonymous Dec 3 13:39:06 hiro slapd[11134]: <= check a_dn_pat: self Dec 3 13:39:06 hiro slapd[11134]: <= acl_mask: [2] applying write(=wrscxd) (stop) Dec 3 13:39:06 hiro slapd[11134]: <= acl_mask: [2] mask: write(=wrscxd) Dec 3 13:39:06 hiro slapd[11134]: => slap_access_allowed: delete access granted by write(=wrscxd) Dec 3 13:39:06 hiro slapd[11134]: => access_allowed: delete access granted by write(=wrscxd) Dec 3 13:39:06 hiro slapd[11134]: acl: internal mod entryCSN: modify access granted Dec 3 13:39:06 hiro slapd[11134]: acl: internal mod modifiersName: modify access granted Dec 3 13:39:06 hiro slapd[11134]: acl: internal mod modifyTimestamp: modify access granted Dec 3 13:39:06 hiro slapd[11134]: bdb_modify_internal: replace cmusaslsecretOTP Dec 3 13:39:06 hiro slapd[11134]: bdb_modify_internal: replace entryCSN Dec 3 13:39:06 hiro slapd[11134]: bdb_modify_internal: replace modifiersName Dec 3 13:39:06 hiro slapd[11134]: bdb_modify_internal: replace modifyTimestamp Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "account" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "posixAccount" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "shadowAccount" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "krb5KDCEntry" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "krb5Principal" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "sambaSamAccount" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "radiusprofile" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "btcAuthUser" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "cmuSaslUser" Dec 3 13:39:06 hiro slapd[11134]: oc_check_required entry (uid=abrown(a)olp.net,ou=People,dc=olp,dc=net), objectClass "pkiUser" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "uid" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "cn" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "uidNumber" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "gidNumber" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "homeDirectory" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "loginShell" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "shadowMin" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "shadowMax" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "shadowWarning" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "shadowExpire" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "gecos" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "structuralObjectClass" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "entryUUID" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "creatorsName" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "createTimestamp" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "krb5PrincipalName" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "krb5MaxLife" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "krb5MaxRenew" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "krb5KDCFlags" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "sambaSID" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "sambaAcctFlags" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "sambaPrimaryGroupSID" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "shadowLastChange" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "radiusGroupName" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "btcCertificatePassword" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "btcAltUID" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "UNDEFINED" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "userPassword" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "sambaPwdLastSet" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "sambaLMPassword" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "sambaNTPassword" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "krb5KeyVersionNumber" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "krb5Key" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "UNDEFINED" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "objectClass" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "UNDEFINED" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "cmusaslsecretOTP" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "entryCSN" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "modifiersName" Dec 3 13:39:06 hiro slapd[11134]: oc_check_allowed type "modifyTimestamp" Dec 3 13:39:06 hiro slapd[11134]: => entry_encode(0x00000007): uid=abrown(a)olp.net,ou=People,dc=olp,dc=net Dec 3 13:39:06 hiro slapd[11134]: bdb_modify: updated id=00000007 dn="uid=abrown(a)olp.net,ou=people,dc=olp,dc=net" Dec 3 13:39:06 hiro slapd[11134]: send_ldap_result: conn=3 op=0 p=3 Dec 3 13:39:06 hiro slapd[11134]: send_ldap_result: err=0 matched="" text="" Dec 3 13:39:06 hiro slapd[11134]: send_ldap_sasl: err=14 len=22 Dec 3 13:39:06 hiro slapd[11134]: send_ldap_response: msgid=1 tag=97 err=14 Dec 3 13:39:06 hiro slapd[11134]: conn=3 op=0 RESULT tag=97 err=14 text= Dec 3 13:39:06 hiro slapd[11134]: <== slap_sasl_bind: rc=14 Dec 3 13:39:07 hiro slapd[11134]: daemon: activity on 1 descriptor Dec 3 13:39:07 hiro slapd[11134]: daemon: activity on: Dec 3 13:39:07 hiro slapd[11134]: 16r Dec 3 13:39:07 hiro slapd[11134]: Dec 3 13:39:07 hiro slapd[11134]: daemon: read active on 16 Dec 3 13:39:07 hiro slapd[11134]: connection_get(16) Dec 3 13:39:07 hiro slapd[11134]: connection_get(16): got connid=3 Dec 3 13:39:07 hiro slapd[11134]: connection_read(16): checking for input on id=3 Dec 3 13:39:07 hiro slapd[11134]: ber_get_next on fd 16 failed errno=0 (Success) Dec 3 13:39:07 hiro slapd[11134]: connection_read(16): input error=-2 id=3, closing. Dec 3 13:39:07 hiro slapd[11134]: connection_closing: readying conn=3 sd=16 for close Dec 3 13:39:07 hiro slapd[11134]: connection_close: conn=3 sd=-1 Dec 3 13:39:07 hiro slapd[11134]: slap_auxprop_store [conn=-1]: Getting ready to set cmusaslsecretOTP to md5^I0499^Ihi5935^I0e81b33e30182715^I00000000000000000000. If I enter a good OTP password, I get this in my logs: Dec 3 13:43:26 hiro slapd[11159]: slap_auxprop_store [conn=3]: Getting ready to set cmusaslsecretOTP to md5^I0499^Ihi5865^Iec8123986aec6550^I00000000001196711306. Dec 3 13:44:26 hiro slapd[11159]: slap_auxprop_store [conn=3]: Getting ready to set cmusaslsecretOTP to md5^I0498^Ihi5865^Ic3570f027cf46ed0^I00000000000000000000. If I enter an incorrect password, I get this: Dec 3 13:45:21 hiro slapd[11159]: slap_auxprop_store [conn=4]: Getting ready to set cmusaslsecretOTP to md5^I0498^Ihi5865^Ic3570f027cf46ed0^I00000000001196711421. Dec 3 13:45:22 hiro slapd[11159]: slap_auxprop_store [conn=4]: Getting ready to set cmusaslsecretOTP to md5^I0498^Ihi5865^Ic3570f027cf46ed0^I00000000000000000000. So in the case where it's crashing, it appears the Cyrus SASL is attempting to revert the OTP entry back to the previous version to "unlock" it. I assume that the connection id of '-1' is relevant to the crash. You should be able to reproduce this error with the following steps: Compile SASL with OTP, but without OPIE Configure a dummy SASL service configuration file, e.g.: hiro:~# cat > /usr/lib/sasl2/test.conf <<EOF > auxprop_plugin: ldapdb > ldapdb_uri: ldapi:/// > ldapdb_mech: EXTERNAL > EOF hiro:~# Create a schema including an attribute of cmusaslsecretOTP, and create an entry in the directory which can use this attribute. Configure slapd.conf with the appropriate sasl configuration to convert both the openldap user (connecting via ldapi:///) and the user specified in the ldapsearch, for example: sasl-regexp "gidNumber=0\\\+uidNumber=0,cn=peercred,cn=external,cn=auth" cn=admin,dc=olp,dc=net sasl-regexp "uid=([^,]+),cn=otp,cn=auth" ldap:///ou=people,dc=olp,dc=net??one?(btcAltUid=$1) Issue a saslpasswd2 to initialize the cmusaslsecretOTP attribute for the user: hiro:~# saslpasswd2 -a test -n abrown(a)olp.net Password: Again (for verification): The cmusaslsecretOTP attribute should look something like: md5 0499 hi8351 1c19abc81f35dc63 00000000000000000000 opiekey can be used to convert the OTP challenge into the appropriate response. For instance: hiro:~# ldapsearch -Y OTP -U abrown(a)olp.net SASL/OTP authentication started Challenge: otp-md5 498 hi8351 ext Please enter your one-time password: Using opiekey to obtain response: dwhite@zek:~$ opiekey -5 -x 498 hi8351 Using the MD5 algorithm to compute response. Reminder: Don't use opiekey from telnet or dial-in sessions. Enter secret pass phrase: 556A 99B3 52FA CEB1 Feed the secret pass phrase back into ldapsearch for a successful bind. To reproduce the bug, of course just kill the ldapsearch before entering any response. - Dan White BTC Broadband

2 1

Re: (ITS#5245) auditlog man page and feature request
by ghenry＠suretecsystems.com 04 Dec '07

04 Dec '07

<quote who="hyc(a)symas.com"> > ghenry(a)suretecsystems.com wrote: >> Hi, >> >> I've just committed my additions and being my first proper man page >> work, >> would someone be so kind as to check I'm using the right syntax. >> >> It looks and reads ok via man anyway. > > Looks OK, but your example shouldn't use olcModule. OpenLDAP doesn't > support > modules by default; anybody who enables module support should already have > read the docs for moduleload and modulepath. Ah, right. Will fix. Thanks.

1 0

Re: (ITS#5245) auditlog man page and feature request
by hyc＠symas.com 04 Dec '07

04 Dec '07

ghenry(a)suretecsystems.com wrote: > Hi, > > I've just committed my additions and being my first proper man page work, > would someone be so kind as to check I'm using the right syntax. > > It looks and reads ok via man anyway. Looks OK, but your example shouldn't use olcModule. OpenLDAP doesn't support modules by default; anybody who enables module support should already have read the docs for moduleload and modulepath. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

i have problem with ldap
by francis kigmo 04 Dec '07

04 Dec '07

that is the message [root@localhost samba]# ldappasswd -s projet ldap_sasl_interactive_bind_s: No such attribute i need help

2 1

(ITS#5258) memberof-Overlay issue when deleting all values of the "memberof-member-ad" attribute
by rhafer＠suse.de 04 Dec '07

04 Dec '07

Full_Name: Ralf Haferkamp Version: HEAD, RE24 OS: - URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (89.166.197.88) I use the following slapo-memberof config: memberof-group-oc mygroup memberof-member-ad mymember memberof-memberof-ad mymemberof where "mygroup" has "mymember" as an optional ('MAY') attribute. If I know remove all values of "mymember" from a "mygroup" object. With an operation like this: dn: <groupdn> changetype: modify delete: mymember The "mymemberof" Attributes of the associated objects are not updated accordingly.

1 0

Re: (ITS#5245) auditlog man page and feature request
by ghenry＠suretecsystems.com 03 Dec '07

03 Dec '07

Hi, I've just committed my additions and being my first proper man page work, would someone be so kind as to check I'm using the right syntax. It looks and reads ok via man anyway. Thanks, Gavin.

1 0

Re: (ITS#5256) encoding of guide.sdf
by dieter＠dkluenter.de 03 Dec '07

03 Dec '07

"Gavin Henry" <ghenry(a)suretecsystems.com> writes: > <quote who="dieter(a)dkluenter.de"> >> Full_Name: Dieter Kluenter >> Version: REL_ENG_2_4 >> OS: Linux >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (84.142.202.173) >> >> >> Hi, >> the guide *.sdf files are UTF-8 encoded, but the online availeable HTML >> files >> seem to be iso8859-1 encoded, which leeds to display errors, an example is >> part >> 9.2.1. >> ... proxyâs efficiency ... > > Is this something I can fix, or is it part of the doc build for the main > site? Whoever is compiling the *.sdf files and putting the result online, so I think it is part of the doc build process. -Dieter -- Dieter Klünter | Systemberatung http://www.dkluenter.de GPG Key ID:8EF7B6C6

1 0

Re: (ITS#5257) test008 hanging in bdb
by h.b.furuseth＠usit.uio.no 03 Dec '07

03 Dec '07

I should have appended a 'backtrace full', not just backtrace. Here: ftp://ftp.openldap.org/incoming/Hallvard-Furuseth2-071203.bz2 (Stange, my submitted ITS isn't arriving though the confirmation message did. Hopefully ITS will pick this "reply" up anyway...) -- Hallvard

1 0

(ITS#5257) test008 hanging in bdb
by h.b.furuseth＠usit.uio.no 03 Dec '07

03 Dec '07

Full_Name: Hallvard B Furuseth Version: HEAD OS: Linux x86_64 URL: ftp://ftp.openldap.org/incoming/Hallvard-Furuseth-071203.tbz Submission from: (NULL) (129.240.6.233) Submitted by: hallvard test008 is hanging. slapd_daemon_task is waiting in epoll_wait(), main in pthread_join(), all other threads in bdb. Backtrace, output and testrun attached. I can reattach with gdb and check further, if someone says what to check.

1 0

Re: (ITS#5256) encoding of guide.sdf
by ghenry＠suretecsystems.com 02 Dec '07

02 Dec '07

hyc(a)symas.com wrote: > hyc(a)symas.com wrote: >> ghenry(a)suretecsystems.com wrote: >>> <quote who="dieter(a)dkluenter.de"> >>>> Hi, >>>> the guide *.sdf files are UTF-8 encoded, but the online availeable HTML >>>> files >>>> seem to be iso8859-1 encoded, which leeds to display errors, an example is >>>> part >>>> 9.2.1. >>>> ... proxyâs efficiency ... >>> Is this something I can fix, or is it part of the doc build for the main >>> site? >> It's in the SDF source files, therefore something you should fix. I don't know >> what text editor you used on those files, but you should use something else, >> or use one that you can set to just ISO8859-1. >> >> I can't think of a grep regex that will detect 8-bit characters, but you need >> to find them all and get rid of them. > > (Used a binary editor to generate a regexp for [ 0x80 - 0xff ]). There were > only two occurrences in the sdf files; both in backends.sdf. Both are the same > character, an apostrophe used instead of a single quote. > > (binary patch xx) > X=`cat xx` > % grep "[$X]" *.sdf > backends.sdf:same connection. This connection pooling strategy can enhance the > proxys > backends.sdf:maybe stored procedures cant be considered programming, anyway ;). > I use Vim and gedit. The above would have been copy and paste from the FAQ. I'll do a Vim trigger to clean up things like this before a commit/make. Thanks all. -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/

1 0

Re: (ITS#5256) encoding of guide.sdf
by h.b.furuseth＠usit.uio.no 02 Dec '07

02 Dec '07

hyc(a)symas.com writes: > I can't think of a grep regex that will detect 8-bit characters, but > you need to find them all and get rid of them. grep -v '[^ -~<tab>]' where you type ^V tab to the shell to get the <tab>. To search for probably-UTF-8 chars: perl -ne '/[\300-\377][\200-\277]/ && print "$ARGV:$_"' To search for probably-not-UTF-8 8-bit chars: perl -ne '/[\300-\377](?![\200-\277])|(^|[^\200-\377])[\200-\277]/ && print "$ARGV:$_"' -- Regards, Hallvard

1 0

Re: (ITS#5256) encoding of guide.sdf
by kurt＠OpenLDAP.org 02 Dec '07

02 Dec '07

On Dec 2, 2007, at 8:10 PM, ghenry(a)suretecsystems.com wrote: > <quote who="dieter(a)dkluenter.de"> >> Full_Name: Dieter Kluenter >> Version: REL_ENG_2_4 >> OS: Linux >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (84.142.202.173) >> >> >> Hi, >> the guide *.sdf files are UTF-8 encoded, but the online availeable >> HTML >> files >> seem to be iso8859-1 encoded, which leeds to display errors, an >> example is >> part >> 9.2.1. >> ... proxy’s efficiency ... > > Is this something I can fix, or is it part of the doc build for the > main > site? You can avoid using non-ASCII characters... > > >> >> -Dieter >> >> >> > >

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs