- openldap-bugs - openldap.org

RE: (ITS#3460) Adding LDAP statistics script to contrib directory
by daveh＠ci.com.au 06 Nov '06

06 Nov '06

> Do you mind if I do some clean up on it? > > Mainly Perl::Critic and Perl::Tidy. There's a few tests missing and > assumptions been made with opening files and system commands etc. You might also highlight the fact that it seems to require at least 5.8 (due to the "qw()" lists). I also don't like hard-wiring "/usr/bin/perl", as the system Perls are rarely up to date. My favourite technique is: #! /usr/bin/env perl -w which finds Perl from $PATH. Or just hard-wire "/usr/local/bin/perl" and let the sysadmin sort it out... -- Dave Horsfall DTM VK2KFU daveh(a)ci.com.au Ph: +61 2 9552-5509 (d) -5500 (sw) Corinthian Eng'ng P/L, Ste 54 Jones Bay Whf, 26-32 Pirrama Rd, Pyrmont 2009, AU

1 0

(ITS#4733) back-config should populate defaults
by hyc＠OpenLDAP.org 05 Nov '06

05 Nov '06

Full_Name: Howard Chu Version: 2.3/HEAD OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (76.168.84.21) Submitted by: hyc If a minimal LDIF is slapadd'd to create the slapd configuration, any parameters that are not specified on input will take on their default values. However, these defaults will not be present in the config entries and will not be visible upon subsequent slapcat/ldapsearch. It would be nicer if after each entry is loaded from slapd.d and parsed, the entire entry is regenerated internally, with all defaults populated.

1 0

Re: (ITS#4712) test007: slapd crashes
by michael＠stroeder.com 05 Nov '06

05 Nov '06

It seems you can close this ITS. I followed Howard's advice and started over with a new CVS working dir. Ciao, Michael.

1 0

Re: (ITS#4731) Build without modules fails
by michael＠stroeder.com 05 Nov '06

05 Nov '06

Howard Chu wrote: > A fresh pull (as of 2 minutes ago) builds fine for me. > > If the problem you're running into is that distclean left something from > your previous build, then you need to tell us what your previous build > invocation was as well. > > I suggest you try building with a separate object directory, so that you > can just rm -rf the object tree when you want a fresh build. Ok, it seems the build worked with a fresh CVS working dir. You can close this ITS. I'll file another one for make distclean though... Ciao, Michael.

1 0

Re: (ITS#4697) core dump from acl.c regex
by quanah＠stanford.edu 04 Nov '06

04 Nov '06

Still coring in 2.3.28 + connection code from HEAD. Backtrace: (gdb) info threads 10 process 25180 0x00002ae257d12e2c in pthread_join () from /lib/libpthread.so.0 9 process 25184 0x00002ae257ef2b2c in epoll_wait () from /lib/libc.so.6 8 process 25186 0x00002ae257d144e4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0 7 process 25188 0x00002ae257d144e4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0 6 process 25189 0x00002ae257d144e4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0 5 process 25190 0x00002ae257d144e4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0 4 process 25212 0x00002ae257d144e4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0 3 process 25213 0x00002ae257d144e4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0 2 process 25216 0x00002ae257d144e4 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/libpthread.so.0 * 1 process 25185 0x00002ae257ed27dd in fnmatch () from /lib/libc.so.6 (gdb) thread 1 [Switching to thread 1 (process 25185)]#7 0x00000000004457f6 in slap_acl_get (a=Variable "a" is not available. ) at acl.c:874 874 if ( regexec( &a->acl_attrval_re, val->bv_val, 0, NULL, 0 ) ) (gdb) bt #0 0x00002ae257ed27dd in fnmatch () from /lib/libc.so.6 #1 0x00002ae257eddd22 in re_exec () from /lib/libc.so.6 #2 0x00002ae257edb70b in re_exec () from /lib/libc.so.6 #3 0x00002ae257ed9d83 in re_exec () from /lib/libc.so.6 #4 0x00002ae257ed8526 in re_exec () from /lib/libc.so.6 #5 0x00002ae257ed7e83 in re_exec () from /lib/libc.so.6 #6 0x00002ae257ed74a6 in regexec () from /lib/libc.so.6 #7 0x00000000004457f6 in slap_acl_get (a=Variable "a" is not available. ) at acl.c:874 #8 0x0000000000445eb3 in slap_access_allowed (op=0x2aaaab0e03c8, e=0x2ae359f442c8, desc=0x2ae2586e3d88, val=0x2aaab6d68fb8, access=ACL_READ, state=0x40e7d500, maskp=0x40e7d448) at acl.c:221 #9 0x0000000000447dd1 in fe_access_allowed (op=0x2aaaab0e03c8, e=0x2ae359f442c8, desc=0x2ae2586e3d88, val=0x2aaab6d68fb8, access=ACL_READ, state=0x40e7d500, maskp=0x40e7d448) at acl.c:318 #10 0x0000000000444620 in access_allowed_mask (op=0x2aaaab0e03c8, e=0x2ae359f442c8, desc=0x2ae2586e3d88, val=0x2aaab6d68fb8, access=ACL_READ, state=0x40e7d500, maskp=0x0) at acl.c:429 #11 0x00000000004356f1 in slap_send_search_entry (op=0x2aaaab0e03c8, rs=0x40ffeee0) at result.c:894 #12 0x00002ae2596f4894 in hdb_search (op=0x2aaaab0e03c8, rs=0x40ffeee0) at search.c:878 #13 0x0000000000429502 in fe_op_search (op=0x2aaaab0e03c8, rs=0x40ffeee0) at search.c:355 #14 0x0000000000429d42 in do_search (op=0x2aaaab0e03c8, rs=0x40ffeee0) at search.c:217 #15 0x0000000000427a0f in connection_operation (ctx=Variable "ctx" is not available. ) at connection.c:1109 #16 0x0000000000427dd4 in connection_read_thread (ctx=0x40fff030, argv=Variable "argv" is not available. ) at connection.c:1236 (gdb) frame 7 #7 0x00000000004457f6 in slap_acl_get (a=Variable "a" is not available. ) at acl.c:874 874 if ( regexec( &a->acl_attrval_re, val->bv_val, 0, NULL, 0 ) ) (gdb) frame 8 #8 0x0000000000445eb3 in slap_access_allowed (op=0x2aaaab0e03c8, e=0x2ae359f442c8, desc=0x2ae2586e3d88, val=0x2aaab6d68fb8, access=ACL_READ, state=0x40e7d500, maskp=0x40e7d448) at acl.c:221 221 while ( ( a = slap_acl_get( a, &count, op, e, desc, val, (gdb) frame 9 #9 0x0000000000447dd1 in fe_access_allowed (op=0x2aaaab0e03c8, e=0x2ae359f442c8, desc=0x2ae2586e3d88, val=0x2aaab6d68fb8, access=ACL_READ, state=0x40e7d500, maskp=0x40e7d448) at acl.c:318 318 rc = slap_access_allowed( op, e, desc, val, access, state, maskp ); (gdb) frame 10 #10 0x0000000000444620 in access_allowed_mask (op=0x2aaaab0e03c8, e=0x2ae359f442c8, desc=0x2ae2586e3d88, val=0x2aaab6d68fb8, access=ACL_READ, state=0x40e7d500, maskp=0x0) at acl.c:429 429 ret = frontendDB->bd_info->bi_access_allowed( op, e, (gdb) frame 11 #11 0x00000000004356f1 in slap_send_search_entry (op=0x2aaaab0e03c8, rs=0x40ffeee0) at result.c:894 894 if ( ! access_allowed( op, rs->sr_entry, (gdb) frame 12 #12 0x00002ae2596f4894 in hdb_search (op=0x2aaaab0e03c8, rs=0x40ffeee0) at search.c:878 878 rs->sr_err = send_search_entry( op, rs ); (gdb) frame 13 #13 0x0000000000429502 in fe_op_search (op=0x2aaaab0e03c8, rs=0x40ffeee0) at search.c:355 355 (op->o_bd->be_search)( op, rs ); (gdb) frame 14 #14 0x0000000000429d42 in do_search (op=0x2aaaab0e03c8, rs=0x40ffeee0) at search.c:217 217 rs->sr_err = frontendDB->be_search( op, rs ); (gdb) frame 15 #15 0x0000000000427a0f in connection_operation (ctx=Variable "ctx" is not available. ) at connection.c:1109 1109 rc = (*(opfun[opidx]))( op, &rs ); (gdb) frame 16 #16 0x0000000000427dd4 in connection_read_thread (ctx=0x40fff030, argv=Variable "argv" is not available. ) at connection.c:1236 1236 rc = (long)connection_operation( ctx, cri.op ); (gdb) frame 17 #17 0x00002ae2572c5724 in ldap_int_thread_pool_wrapper (xpool=0x2ae258ac0080) at tpool.c:478 478 ctx->ltc_start_routine(ltc_key, ctx->ltc_arg); (gdb) frame 8 #8 0x0000000000445eb3 in slap_access_allowed (op=0x2aaaab0e03c8, e=0x2ae359f442c8, desc=0x2ae2586e3d88, val=0x2aaab6d68fb8, access=ACL_READ, state=0x40e7d500, maskp=0x40e7d448) at acl.c:221 221 while ( ( a = slap_acl_get( a, &count, op, e, desc, val, (gdb) print *a $2 = {acl_filter = 0x0, acl_dn_style = ACL_STYLE_CHILDREN, acl_dn_re = {buffer = 0x0, allocated = 0, used = 0, syntax = 0, fastmap = 0x0, translate = 0x0, re_nsub = 0, can_be_null = 0, regs_allocated = 0, fastmap_accurate = 0, no_sub = 0, not_bol = 0, not_eol = 0, newline_anchor = 0}, acl_dn_pat = { bv_len = 18, bv_val = 0x2ae2586ce858 "dc=stanford,dc=edu"}, acl_attrs = 0x2ae258640080, acl_attrval_mr = 0x0, acl_attrval_style = ACL_STYLE_REGEX, acl_attrval_re = {buffer = 0x0, allocated = 0, used = 0, syntax = 0, fastmap = 0x0, translate = 0x0, re_nsub = 0, can_be_null = 0, regs_allocated = 0, fastmap_accurate = 0, no_sub = 0, not_bol = 0, not_eol = 0, newline_anchor = 0}, acl_attrval = {bv_len = 0, bv_val = 0x0}, acl_access = 0x2ae258ae9e20, acl_next = 0x2ae258ac55c0} --Quanah -- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

1 0

Re: (ITS#4732) slapd.d man page missing
by hyc＠symas.com 03 Nov '06

03 Nov '06

This is already ITS#3812. This ITS will be closed as a dup. ghenry(a)suretecsystems.com wrote: > Full_Name: Gavin Henry > Version: > OS: > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (212.159.59.85) > > > Not listed at: > > http://www.openldap.org/software/man.cgi?query=(5)&sektion=&apropos=1&manpa… > > As mentioned at: > > http://www.openldap.org/doc/admin23/slapdconf2.html > > Thanks. > > > > . > -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc OpenLDAP Core Team http://www.openldap.org/project/

1 0

(ITS#4732) slapd.d man page missing
by ghenry＠suretecsystems.com 03 Nov '06

03 Nov '06

Full_Name: Gavin Henry Version: OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (212.159.59.85) Not listed at: http://www.openldap.org/software/man.cgi?query=(5)&sektion=&apropos=1&manpa… As mentioned at: http://www.openldap.org/doc/admin23/slapdconf2.html Thanks.

1 0

Re: (ITS#4731) Build without modules fails
by hyc＠symas.com 03 Nov '06

03 Nov '06

A fresh pull (as of 2 minutes ago) builds fine for me. If the problem you're running into is that distclean left something from your previous build, then you need to tell us what your previous build invocation was as well. I suggest you try building with a separate object directory, so that you can just rm -rf the object tree when you want a fresh build. e.g. mkdir head cd head cvs co ... cd .. mkdir obj cd obj ../head/configure ... make depend; make Personally I have never used "make distclean" ... michael(a)stroeder.com wrote: > Full_Name: Michael Ströder > Version: HEAD > OS: SuSE Linux 10.1 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (83.124.30.198) > > > I tried to build without modules (after make distclean): > > ./configure \ > --prefix=${PREFIX} \ > --enable-dynamic \ > --enable-modules=no \ > --enable-backends=yes \ > --enable-overlays=yes \ > --enable-cleartext \ > --enable-crypt=yes \ > --enable-debug=yes \ > --enable-kpasswd=yes \ > --enable-lmpasswd=yes \ > --enable-rewrite=yes \ > --enable-rlookups=yes \ > --enable-slapi=yes \ > --enable-slp=yes \ > --enable-spasswd=yes \ > --enable-wrappers=no \ > --enable-aci=yes \ > --with-cyrus-sasl=yes \ > --with-kerberos=yes \ > --with-readline=yes \ > --with-threads=yes \ > --with-tls=yes > > > But build fails: > > cc -g -O0 -I../../../include -I../../../include -I.. -I./.. -I./../slapi > -I/opt/bdb-4.5/include -I/opt/sasl/include -I/opt/heimdal/include -c version.c > -o version.o > ar ruv libback_monitor.a `echo init.lo search.lo compare.lo modify.lo bind.lo > operational.lo cache.lo entry.lo backend.lo database.lo thread.lo conn.lo rww.lo > log.lo operation.lo sent.lo listener.lo time.lo overlay.lo | sed 's/\.lo/.o/g'` > version.o > ar: creating libback_monitor.a > ar: init.o: No such file or directory > make[3]: *** [libback_monitor.a] Error 1 > make[3]: Leaving directory > `/home/michael/src/openldap-HEAD/ldap/servers/slapd/back-monitor' > make[2]: *** [.backend] Error 1 > make[2]: Leaving directory `/home/michael/src/openldap-HEAD/ldap/servers/slapd' > make[1]: *** [all-common] Error 1 > make[1]: Leaving directory `/home/michael/src/openldap-HEAD/ldap/servers' > make: *** [all-common] Error 1 > > > > -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc OpenLDAP Core Team http://www.openldap.org/project/

1 0

(ITS#4731) Build without modules fails
by michael＠stroeder.com 03 Nov '06

03 Nov '06

Full_Name: Michael Ströder Version: HEAD OS: SuSE Linux 10.1 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (83.124.30.198) I tried to build without modules (after make distclean): ./configure \ --prefix=${PREFIX} \ --enable-dynamic \ --enable-modules=no \ --enable-backends=yes \ --enable-overlays=yes \ --enable-cleartext \ --enable-crypt=yes \ --enable-debug=yes \ --enable-kpasswd=yes \ --enable-lmpasswd=yes \ --enable-rewrite=yes \ --enable-rlookups=yes \ --enable-slapi=yes \ --enable-slp=yes \ --enable-spasswd=yes \ --enable-wrappers=no \ --enable-aci=yes \ --with-cyrus-sasl=yes \ --with-kerberos=yes \ --with-readline=yes \ --with-threads=yes \ --with-tls=yes But build fails: cc -g -O0 -I../../../include -I../../../include -I.. -I./.. -I./../slapi -I/opt/bdb-4.5/include -I/opt/sasl/include -I/opt/heimdal/include -c version.c -o version.o ar ruv libback_monitor.a `echo init.lo search.lo compare.lo modify.lo bind.lo operational.lo cache.lo entry.lo backend.lo database.lo thread.lo conn.lo rww.lo log.lo operation.lo sent.lo listener.lo time.lo overlay.lo | sed 's/\.lo/.o/g'` version.o ar: creating libback_monitor.a ar: init.o: No such file or directory make[3]: *** [libback_monitor.a] Error 1 make[3]: Leaving directory `/home/michael/src/openldap-HEAD/ldap/servers/slapd/back-monitor' make[2]: *** [.backend] Error 1 make[2]: Leaving directory `/home/michael/src/openldap-HEAD/ldap/servers/slapd' make[1]: *** [all-common] Error 1 make[1]: Leaving directory `/home/michael/src/openldap-HEAD/ldap/servers' make: *** [all-common] Error 1

1 0

Re: (ITS#3460) Adding LDAP statistics script to contrib directory
by peter＠adpm.de 03 Nov '06

03 Nov '06

Hi, On Thursday, 2. November 2006 20:42, Quanah Gibson-Mount wrote: > Peter S, Dave, Peter M, Frank, and Todd, do you also grant such a release > for the work you've done with this script? :) Granted ! Peter -- Peter Marschall peter(a)adpm.de

1 0

Re: (ITS#4730) Overlay that generates operational attributes to support GUI interaction
by ando＠sys-net.it 03 Nov '06

03 Nov '06

> This overlay provides simple support for allowedAttributes and > allowedAttributesEffective, a (somewhat broken) AD feature that is > intended to > help GUIs into determining, based on the current objectClass values of an > object, what attributes would comply with the schema (without distinction > between "allowed" and "required"), by listing them in "allowedAttributes", This could be made more useful by providing ";x-allowed" or ";x-required" options to "allowedAttributes", so that GUI developers can easily handle mandatory vs. optional fields. However, I bet this would break existing applications that make use of those attributes. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.n.c. Via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ------------------------------------------ Office: +39.02.23998309 Mobile: +39.333.4963172 Email: pierangelo.masarati(a)sys-net.it ------------------------------------------

1 0

(ITS#4730) Overlay that generates operational attributes to support GUI interaction
by ando＠sys-net.it 03 Nov '06

03 Nov '06

Full_Name: Pierangelo Masarati Version: HEAD OS: irrelevant URL: ftp://ftp.openldap.org/incoming/pierangelo-masarati-2006-11-03-allowed.c Submission from: (NULL) (81.72.89.40) Submitted by: ando This overlay provides simple support for allowedAttributes and allowedAttributesEffective, a (somewhat broken) AD feature that is intended to help GUIs into determining, based on the current objectClass values of an object, what attributes would comply with the schema (without distinction between "allowed" and "required"), by listing them in "allowedAttributes", and, furthermore, by providing a hint to what of those values could be effectively added by the current connection, by listing them in "allowedAttributesEffective". This is broken since it doesn't consider the possibility of value-dependent ACLs, so it should really be considered just a hint, while the "allowedAttributes" could really be computed starting from the schema definition, which remains the recommended way to solve the problem So this overlay should really be considered only food for thought as a starting base for a tighter integration of OpenLDAP into Samba4. There's minimal support for "allowedChildClasses" and "allowedChildClassesEffective", whose definition is absolutely obscure to me, as I believe the only classes that can be added to an existing object are all the AUXILIARY ones, while considering what are effectively allowed implies getting into value-dependent ACLs. Some discussion can be found here (follow the thread) <http://www.redhat.com/archives/fedora-directory-devel/2006-November/msg0000…> while portions of the schema definition has been taken from here <http://www.redhat.com/archives/fedora-directory-devel/2006-August/msg00007.…> p.

1 0

Re: (ITS#4729) Build fails in dynlist.c
by ando＠sys-net.it 03 Nov '06

03 Nov '06

michael(a)stroeder.com wrote: > Full_Name: Michael Ströder > Version: RE23 > OS: SuSE Linux 10.0 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (83.124.4.222) > > > dynlist.c: In function 'dynlist_initialize': > dynlist.c:1401: error: 'BackendInfo' has no member named 'bi_obsolete_names' > make[3]: *** [dynlist.lo] Error 1 > make[3]: Leaving directory > `/home/michael/src/openldap-OPENLDAP_REL_ENG_2_3/ldap/servers/slapd/overlays' > make[2]: *** [dynamic_overlays] Error 2 > make[2]: Leaving directory > `/home/michael/src/openldap-OPENLDAP_REL_ENG_2_3/ldap/servers/slapd' > make[1]: *** [all-common] Error 1 > make[1]: Leaving directory > `/home/michael/src/openldap-OPENLDAP_REL_ENG_2_3/ldap/servers' > make: *** [all-common] Error 1 > My fault: some -devel stuff slipped in re23; you should remove the lines #elif SLAPD_OVER_DYNGROUP != SLAPD_MOD_STATIC #define TAKEOVER_DYNGROUP at the top of dynlist.c. I'm about to fix re23. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.n.c. Via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ------------------------------------------ Office: +39.02.23998309 Mobile: +39.333.4963172 Email: pierangelo.masarati(a)sys-net.it ------------------------------------------

1 0

RE: (ITS#3460) Adding LDAP statistics script to contrib directory
by quanah＠stanford.edu 03 Nov '06

03 Nov '06

--On Thursday, November 02, 2006 11:07 PM +0000 ghenry(a)suretecsystems.com wrote: > <quote who="quanah(a)stanford.edu"> >> I'd like to see this script included as well. There were two concern >> listed in the ITS: >> >> # 1) Awaiting new version with proper copyright notice. >> # 2) Need information about incorporated patches to ensure all who have >> # IPR >> in this >> script have made appropriate license grants. >> >> I know #1 has been addressed. >> >> As for #2, I grant such a release for the work I've done on the script. >> >> Peter S, Dave, Peter M, Frank, and Todd, do you also grant such a release >> for the work you've done with this script? :) > > Do you mind if I do some clean up on it? > > Mainly Perl::Critic and Perl::Tidy. There's a few tests missing and > assumptions been made with opening files and system commands etc. > > I'll have a patch tomorrow. > > You can take it or leave it ;-) I don't mind at all, just make sure you get the very latest version. ;) --Quanah -- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

1 0

(ITS#4729) Build fails in dynlist.c
by michael＠stroeder.com 03 Nov '06

03 Nov '06

Full_Name: Michael Ströder Version: RE23 OS: SuSE Linux 10.0 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (83.124.4.222) dynlist.c: In function 'dynlist_initialize': dynlist.c:1401: error: 'BackendInfo' has no member named 'bi_obsolete_names' make[3]: *** [dynlist.lo] Error 1 make[3]: Leaving directory `/home/michael/src/openldap-OPENLDAP_REL_ENG_2_3/ldap/servers/slapd/overlays' make[2]: *** [dynamic_overlays] Error 2 make[2]: Leaving directory `/home/michael/src/openldap-OPENLDAP_REL_ENG_2_3/ldap/servers/slapd' make[1]: *** [all-common] Error 1 make[1]: Leaving directory `/home/michael/src/openldap-OPENLDAP_REL_ENG_2_3/ldap/servers' make: *** [all-common] Error 1

1 0

RE: (ITS#3460) Adding LDAP statistics script to contrib directory
by ghenry＠suretecsystems.com 03 Nov '06

03 Nov '06

<quote who="quanah(a)stanford.edu"> > I'd like to see this script included as well. There were two concern > listed in the ITS: > > #1) Awaiting new version with proper copyright notice. > #2) Need information about incorporated patches to ensure all who have IPR > in this > script have made appropriate license grants. > > I know #1 has been addressed. > > As for #2, I grant such a release for the work I've done on the script. > > Peter S, Dave, Peter M, Frank, and Todd, do you also grant such a release > for the work you've done with this script? :) Do you mind if I do some clean up on it? Mainly Perl::Critic and Perl::Tidy. There's a few tests missing and assumptions been made with opening files and system commands etc. I'll have a patch tomorrow. You can take it or leave it ;-) Gavin. http://perlmonks.org/?node_id=386673 http://www.suretecsystems.com/

1 0

RE: (ITS#3460) Adding LDAP statistics script to contrib directory
by daveh＠ci.com.au 02 Nov '06

02 Nov '06

On Thu, 2 Nov 2006, Quanah Gibson-Mount wrote: > Peter S, Dave, Peter M, Frank, and Todd, do you also grant such a > release for the work you've done with this script? :) Sure; fame at last :-) -- Dave Horsfall DTM VK2KFU daveh(a)ci.com.au Ph: +61 2 9552-5509 (d) -5500 (sw) Corinthian Eng'ng P/L, Ste 54 Jones Bay Whf, 26-32 Pirrama Rd, Pyrmont 2009, AU

1 0

Re: (ITS#3460) Adding LDAP statistics script to contrib directory
by peter.schober＠univie.ac.at 02 Nov '06

02 Nov '06

quanah et al., * Quanah Gibson-Mount <quanah(a)stanford.edu> [2006-11-02 20:42]: > Peter S, Dave, Peter M, Frank, and Todd, do you also grant such a > release for the work you've done with this script? :) go ahead. actually I though about rewriting it not just once before (it's rather spaghetti-ish, imho) but too many other things keep popping up. regards, -p.schober -- peter.schober(a)univie.ac.at - vienna university computer center Universitaetsstrasse 7, A-1010 Wien, Austria/Europe Tel. +43-1-4277-14155, Fax. +43-1-4277-9140

1 0

Re: (ITS#3460) Adding LDAP statistics script to contrib directory
by tlyons＠ivenue.com 02 Nov '06

02 Nov '06

On Thu, Nov 02, 2006 at 11:42:32AM -0800, Quanah Gibson-Mount wrote: >I'd like to see this script included as well. There were two concern >listed in the ITS: > >#1) Awaiting new version with proper copyright notice. >#2) Need information about incorporated patches to ensure all who have IPR >in this >script have made appropriate license grants. > >I know #1 has been addressed. > >As for #2, I grant such a release for the work I've done on the script. > >Peter S, Dave, Peter M, Frank, and Todd, do you also grant such a release >for the work you've done with this script? :) I do, though I don't think my work amounts to much more than one item in a foreach loop. But I do. -- Regards... Todd when you shoot yourself in the foot, just because you are so neurally broken that the signal takes years to register in your brain, it does not mean that your foot does not have a hole in it. --Randy Bush Linux kernel 2.6.17-5mdv 3 users, load average: 0.00, 0.04, 0.13

1 0

RE: (ITS#3460) Adding LDAP statistics script to contrib directory
by quanah＠stanford.edu 02 Nov '06

02 Nov '06

I'd like to see this script included as well. There were two concern listed in the ITS: #1) Awaiting new version with proper copyright notice. #2) Need information about incorporated patches to ensure all who have IPR in this script have made appropriate license grants. I know #1 has been addressed. As for #2, I grant such a release for the work I've done on the script. Peter S, Dave, Peter M, Frank, and Todd, do you also grant such a release for the work you've done with this script? :) --Quanah -- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

1 0

Re: (ITS#4728) accesslog dont write attributes removing
by hyc＠symas.com 02 Nov '06

02 Nov '06

ando(a)sys-net.it wrote: > Sounds odd; can you provide a log at level "packets" of the request with > php? I suspect it's doing something like > > dn: uid=user,ou=people,dc=example > changetype: modify > replace: autoreply > - > This was the problem, it was ignoring Replace when no values were provided. Fixed now in HEAD and RE23. > or > > dn: uid=user,ou=people,dc=example > changetype: modify > delete: autoreply > autoreply: TRUE > - > > which, although semantically equivalent to what you tried, could be handled differently by acesslog(and that would be a bug) -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc OpenLDAP Core Team http://www.openldap.org/project/

1 0

Re: (ITS#4728) accesslog dont write attributes removing
by ando＠sys-net.it 02 Nov '06

02 Nov '06

surnu(a)alkohol.ee wrote: > i made some test and found that if i use ldapmodify > ldapmodify -x -W -ZZ -H 'ldap://example' -D "cn=admin,dc=example" > > dn: uid=user,ou=people,dc=example > changetype: modify > add: autoreply > autoreply: TRUE > modifying entry "uid=user,ou=people,dc=example" > > dn: uid=user,ou=people,dc=example > changetype: modify > delete: autoreply > modifying entry "uid=user,ou=people,dc=example" > > and accesslog shows everything correct > > dn: reqStart=20061102130447.000000Z,cn=log,dc=example > objectClass: auditModify > structuralObjectClass: auditModify > reqStart: 20061102130447.000000Z > reqEnd: 20061102130447.000001Z > reqType: modify > reqSession: 153 > reqAuthzID: cn=admin,dc=example > reqDN: uid=user,ou=people,dc=example > reqResult: 0 > reqMod: autoReply:+ TRUE > reqMod: entryCSN:= 20061102130447Z#000000#00#000000 > reqMod: modifiersName:= cn=admin,dc=example > reqMod: modifyTimestamp:= 20061102130447Z > entryUUID: 7658ab48-febe-102a-9f6c-19ea2369af21 > creatorsName: cn=log,dc=example > createTimestamp: 20061102130447Z > entryCSN: 20061102130447Z#000000#00#000000 > modifiersName: cn=log,dc=example > modifyTimestamp: 20061102130447Z > > dn: reqStart=20061102130558.000000Z,cn=log,dc=example > objectClass: auditModify > structuralObjectClass: auditModify > reqStart: 20061102130558.000000Z > reqEnd: 20061102130558.000001Z > reqType: modify > reqSession: 153 > reqAuthzID: cn=admin,dc=example > reqDN: uid=user,ou=people,dc=example > reqResult: 0 > reqMod: autoReply:- > reqMod: entryCSN:= 20061102130558Z#000000#00#000000 > reqMod: modifiersName:= cn=admin,dc=example > reqMod: modifyTimestamp:= 20061102130558Z > entryUUID: a041e758-febe-102a-9f6d-19ea2369af21 > creatorsName: cn=log,dc=example > createTimestamp: 20061102130558Z > entryCSN: 20061102130558Z#000000#00#000000 > modifiersName: cn=log,dc=example > modifyTimestamp: 20061102130558Z > > but if i do same thing with phpldapadmin or any other php application i > get acceslog > > dn: reqStart=20061102131503.000002Z,cn=log,dc=example > objectClass: auditModify > structuralObjectClass: auditModify > reqStart: 20061102131503.000002Z > reqEnd: 20061102131503.000003Z > reqType: modify > reqSession: 180 > reqAuthzID: uid=user,ou=people,dc=example > reqDN: uid=user,ou=people,dc=example > reqResult: 0 > reqMod: autoReply:+ TRUE > reqMod: entryCSN:= 20061102131503Z#000000#00#000000 > reqMod: modifiersName:= uid=user,ou=people,dc=example > reqMod: modifyTimestamp:= 20061102131503Z > entryUUID: e55e6432-febf-102a-9f70-19ea2369af21 > creatorsName: cn=log,dc=example > createTimestamp: 20061102131503Z > entryCSN: 20061102131503Z#000000#00#000000 > modifiersName: cn=log,dc=example > modifyTimestamp: 20061102131503Z > > dn: reqStart=20061102131511.000002Z,cn=log,dc=example > objectClass: auditModify > structuralObjectClass: auditModify > reqStart: 20061102131511.000002Z > reqEnd: 20061102131511.000003Z > reqType: modify > reqSession: 182 > reqAuthzID: uid=user,ou=people,dc=example > reqDN: uid=user,ou=people,dc=example > reqResult: 0 > reqMod: entryCSN:= 20061102131511Z#000000#00#000000 > reqMod: modifiersName:= uid=user,ou=people,dc=example > reqMod: modifyTimestamp:= 20061102131511Z > entryUUID: ea4cd596-febf-102a-9f71-19ea2369af21 > creatorsName: cn=log,dc=example > createTimestamp: 20061102131511Z > entryCSN: 20061102131511Z#000000#00#000000 > modifiersName: cn=log,dc=example > modifyTimestamp: 20061102131511Z > > and if using ldap admin (http://ldapadmin.sourceforge.net/) then > accesslog is also correct. > Sounds odd; can you provide a log at level "packets" of the request with php? I suspect it's doing something like dn: uid=user,ou=people,dc=example changetype: modify replace: autoreply - or dn: uid=user,ou=people,dc=example changetype: modify delete: autoreply autoreply: TRUE - which, although semantically equivalent to what you tried, could be handled differently by acesslog(and that would be a bug) p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.n.c. Via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ------------------------------------------ Office: +39.02.23998309 Mobile: +39.333.4963172 Email: pierangelo.masarati(a)sys-net.it ------------------------------------------

1 0

Re: (ITS#4728) accesslog dont write attributes removing
by surnu＠alkohol.ee 02 Nov '06

02 Nov '06

i made some test and found that if i use ldapmodify ldapmodify -x -W -ZZ -H 'ldap://example' -D "cn=admin,dc=example" dn: uid=user,ou=people,dc=example changetype: modify add: autoreply autoreply: TRUE modifying entry "uid=user,ou=people,dc=example" dn: uid=user,ou=people,dc=example changetype: modify delete: autoreply modifying entry "uid=user,ou=people,dc=example" and accesslog shows everything correct dn: reqStart=20061102130447.000000Z,cn=log,dc=example objectClass: auditModify structuralObjectClass: auditModify reqStart: 20061102130447.000000Z reqEnd: 20061102130447.000001Z reqType: modify reqSession: 153 reqAuthzID: cn=admin,dc=example reqDN: uid=user,ou=people,dc=example reqResult: 0 reqMod: autoReply:+ TRUE reqMod: entryCSN:= 20061102130447Z#000000#00#000000 reqMod: modifiersName:= cn=admin,dc=example reqMod: modifyTimestamp:= 20061102130447Z entryUUID: 7658ab48-febe-102a-9f6c-19ea2369af21 creatorsName: cn=log,dc=example createTimestamp: 20061102130447Z entryCSN: 20061102130447Z#000000#00#000000 modifiersName: cn=log,dc=example modifyTimestamp: 20061102130447Z dn: reqStart=20061102130558.000000Z,cn=log,dc=example objectClass: auditModify structuralObjectClass: auditModify reqStart: 20061102130558.000000Z reqEnd: 20061102130558.000001Z reqType: modify reqSession: 153 reqAuthzID: cn=admin,dc=example reqDN: uid=user,ou=people,dc=example reqResult: 0 reqMod: autoReply:- reqMod: entryCSN:= 20061102130558Z#000000#00#000000 reqMod: modifiersName:= cn=admin,dc=example reqMod: modifyTimestamp:= 20061102130558Z entryUUID: a041e758-febe-102a-9f6d-19ea2369af21 creatorsName: cn=log,dc=example createTimestamp: 20061102130558Z entryCSN: 20061102130558Z#000000#00#000000 modifiersName: cn=log,dc=example modifyTimestamp: 20061102130558Z but if i do same thing with phpldapadmin or any other php application i get acceslog dn: reqStart=20061102131503.000002Z,cn=log,dc=example objectClass: auditModify structuralObjectClass: auditModify reqStart: 20061102131503.000002Z reqEnd: 20061102131503.000003Z reqType: modify reqSession: 180 reqAuthzID: uid=user,ou=people,dc=example reqDN: uid=user,ou=people,dc=example reqResult: 0 reqMod: autoReply:+ TRUE reqMod: entryCSN:= 20061102131503Z#000000#00#000000 reqMod: modifiersName:= uid=user,ou=people,dc=example reqMod: modifyTimestamp:= 20061102131503Z entryUUID: e55e6432-febf-102a-9f70-19ea2369af21 creatorsName: cn=log,dc=example createTimestamp: 20061102131503Z entryCSN: 20061102131503Z#000000#00#000000 modifiersName: cn=log,dc=example modifyTimestamp: 20061102131503Z dn: reqStart=20061102131511.000002Z,cn=log,dc=example objectClass: auditModify structuralObjectClass: auditModify reqStart: 20061102131511.000002Z reqEnd: 20061102131511.000003Z reqType: modify reqSession: 182 reqAuthzID: uid=user,ou=people,dc=example reqDN: uid=user,ou=people,dc=example reqResult: 0 reqMod: entryCSN:= 20061102131511Z#000000#00#000000 reqMod: modifiersName:= uid=user,ou=people,dc=example reqMod: modifyTimestamp:= 20061102131511Z entryUUID: ea4cd596-febf-102a-9f71-19ea2369af21 creatorsName: cn=log,dc=example createTimestamp: 20061102131511Z entryCSN: 20061102131511Z#000000#00#000000 modifiersName: cn=log,dc=example modifyTimestamp: 20061102131511Z and if using ldap admin (http://ldapadmin.sourceforge.net/) then accesslog is also correct.

1 0

Re: (ITS#4728) accesslog dont write attributes removing
by surnu＠alkohol.ee 01 Nov '06

01 Nov '06

> It works fine here. Does test043 in the test suite succeed or fail for you? It succeed, i send my configuration. slapd.conf: # Schema and objectClass definitions include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/samba-tng.schema include /etc/openldap/schema/myown.schema # Where the pid file is put. The init.d script # will not stop the server if you change this. pidfile /var/run/openldap/slapd.pid # List of arguments that were passed to the server argsfile /var/run/openldap/slapd.args # Read slapd.conf(5) for possible values loglevel 256 # Allow LDAPv2 for legacy clients allow bind_v2 security update_ssf=128 # Allow nof entries with single search sizelimit -1 timelimit 30 #threads threads 256 # TLS TLSCertificateFile /etc/openldap/ssl/example.crt TLSCertificateKeyFile /etc/openldap/ssl/example.key TLSCACertificateFile /etc/openldap/ssl/ca.crt # REFERRAL referral ldap://example.org # ACL include /etc/openldap/example.acl # Database conf include /etc/openldap/slapd.bdb.log.example include /etc/openldap/slapd.bdb.example slapd.bdb.log.example: database bdb suffix "cn=example_log,dc=logs" directory /var/lib/openldap-data/example/example_log rootdn "cn=example_log,dc=logs" rootpw "secret" cachesize 5000 idlcachesize 1000 checkpoint 128 30 lastmod on overlay syncprov syncprov-nopresent TRUE syncprov-reloadhint TRUE # Indexid include /etc/openldap/slapd.log.index slapd.bdb.example: database bdb suffix "dc=example" rootdn "cn=admin,dc=example" rootpw "secret" directory "/var/lib/openldap-data/example/" cachesize 100000 idlcachesize 100000 schemacheck on checkpoint 8 15 lastmod on include /etc/openldap/slapd.index overlay accesslog logdb cn=pop_log,dc=logs logops writes logpurge 7+00:00 1+00:00 limits dn.exact="uid=sync,ou=sync,dc=example" time.soft=unlimited time.hard=unlimited size.soft=unlimited size.hard=unlimited overlay syncprov syncprov-checkpoint 1000 60 syncprov-sessionlog 1000 modulepath /usr/lib/openldap/openldap/ moduleload back_monitor database monitor rootdn "cn=monitor"

1 0

Re: (ITS#4725) back-perl not calling bind method
by quanah＠stanford.edu 31 Oct '06

31 Oct '06

--On Tuesday, October 31, 2006 5:50 PM +0000 quanah(a)stanford.edu wrote: > > > --On Tuesday, October 31, 2006 11:07 AM +0000 Mike Woods > <mike(a)arishi.com> wrote: > >> As promised, my log entries >> >> from my ldap log we have >> >> Oct 31 11:03:01 Menchi slapd[392]: conn=65 fd=7 ACCEPT from >> IP=127.0.0.1:61497 (IP=0.0.0.0:340) >> Oct 31 11:03:01 Menchi slapd[392]: conn=65 op=0 BIND >> dn="uid=replicator,o=menchi" method=128 >> Oct 31 11:03:01 Menchi slapd[392]: conn=65 op=0 RESULT tag=97 err=49 >> text= Oct 31 11:03:01 Menchi slapd[392]: conn=65 op=1 UNBIND >> Oct 31 11:03:01 Menchi slapd[392]: conn=65 fd=7 closed >> >> And from the test modules log we have this. >> >> Oct 31 10:30:58 Menchi Glue: New >> Oct 31 10:30:58 Menchi Glue: Config >> Oct 31 10:30:58 Menchi Glue: Config >> Oct 31 10:30:58 Menchi Glue: Config >> Oct 31 10:30:58 Menchi Glue: Config >> Oct 31 10:30:58 Menchi Glue: Config >> Oct 31 10:30:58 Menchi Glue: Config >> Oct 31 10:30:58 Menchi Glue: Init >> >> This is all i get, it starts up, runs through new, all the config calls >> and then init, slapd stays up and seems perfectly well but when anything >> attempts to bind to it we get nothing at all! > > I need you to reproduce the behavior involved using the "ldapsearch" > command. I'm going to elaborate on this a little more. Your operation is performing a simple bind. The BIND operation is *only* going to get passed into the PERL backend if it controls the suffix which the binding identity is attempting to bind to. Since you haven't supplied your slapd.conf information for back-perl, this is impossible to determine. However, I will note that unless your slapd.conf has: database perl suffix "o=menchi" I do not expect to see the bind operation in the perl backend. --Quanah -- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs