- openldap-bugs - openldap.org

[Issue 5271] size limit by ip (feature request)
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=5271 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Probably timelimit should have this as well -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5271] size limit by ip (feature request)
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=5271 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.6.0 See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=9512 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9001] try_read1msg() takes O(n) steps to lookup a matching request
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9001 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • e36d1e31 by Ondřej Kuzník at 2021-03-30T15:46:40+01:00 ITS#9001 manual changes • 3bd1b090 by Ondřej Kuzník at 2021-03-30T15:46:40+01:00 ITS#9001 Use a TAvl for request tracking in libldap -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8698 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 0df931b9 by Ondřej Kuzník at 2021-03-30T02:10:19+00:00 ITS#8698 Only remove our own callback • 51c444b0 by Ondřej Kuzník at 2021-03-30T02:10:19+00:00 ITS#8698 Defer policy checker cleanup if it's a pw extop -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 29 Mar '21

29 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8847 --- Comment #43 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • bc0d62db by Howard Chu at 2021-03-27T10:38:59+00:00 Revert "ITS#8847 more fallout from ldap_pvt_sockaddrstr move" This reverts commit f2ddf89e3cbe2ba65728cfc7b4c022d72192f442. Move Sockaddr def to ac/socket.h instead. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5365] Library symbol versioning or other help for library transitions
by openldap-its＠openldap.org 29 Mar '21

29 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=5365 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 38d1ac04 by Quanah Gibson-Mount at 2021-03-29T18:11:00+00:00 ITS#5365 - Add support for symbol versioning libldap and lilber -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9510] New: Build fails with slibtool and --disable-shared with undefined pthread references
by openldap-its＠openldap.org 29 Mar '21

29 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9510 Issue ID: 9510 Summary: Build fails with slibtool and --disable-shared with undefined pthread references Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: orbea(a)riseup.net Target Milestone: --- Created attachment 810 --> https://bugs.openldap.org/attachment.cgi?id=810&action=edit Build log with rdlibtool. When building openldap with --disable-shared and slibtool (https://dev.midipix.org/cross/slibtool) the build fails with many undefined pthread references. My understanding is that building static libraries exposes undefined references that otherwise would be exposed with -no-undefined. I am not sure how GNU libtool avoids this, perhaps it silently adds -lpthread? For the record GNU libtool will silently ignore -no-undefind while slibtool will not. This exposes several related issues in openldap. * libldap has no configure check indicating it requires --with-threads. * libldap does add $(LTHREAD_LIBS) to its $(LINK_LIBS), but then actually fails to use it. * The client tools requires threads, but they also have no configure check indicating so. * The client tools do not have a configure check to disable them, but there is a --without-threads. * The client tools really do needs $(LTHREAD_LIBS) added to the $(LINK_LIBS) I made a MR that fixes these problems or see the attached patch. https://git.openldap.org/openldap/openldap/-/merge_requests/303 -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 7832] Proposing ppolicy extended module for OpenLDAP
by openldap-its＠openldap.org 26 Mar '21

26 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7832 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|IN_PROGRESS |RESOLVED --- Comment #20 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • f3975b3f by David Coutadeur at 2021-03-26T15:01:36+00:00 Proposing ppolicy extended module for OpenLDAP (issue #7832) • c81bb207 by David Coutadeur at 2021-03-26T15:01:36+00:00 clean and homogenize ppm files for integration into contrib (issue #7832 !252) -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 26 Mar '21

26 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8847 --- Comment #42 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 829263c4 by Howard Chu at 2021-03-26T13:45:26+00:00 ITS#8847 move lutil_sockaddrstr() to ldap_pvt_sockaddrstr() Commits: • f2ddf89e by Howard Chu at 2021-03-26T14:12:47+00:00 ITS#8847 more fallout from ldap_pvt_sockaddrstr move -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 26 Mar '21

26 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8698 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0 |1 --- Comment #1 from Ondřej Kuzník <ondra(a)mistotebe.net> --- https://git.openldap.org/openldap/openldap/-/merge_requests/304 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9347] ppolicy: Password policy not applied when pwdMaxAge overflows max int (32-bit)
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9347 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 61e9b6d3 by Ondřej Kuzník at 2021-03-25T23:57:07+00:00 ITS#9347 Log which policy attribute is invalid -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7788] pwdFailureTime and pwdChangedTime registered in user entry even if no ppolicy associated with the entry
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7788 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.3 --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 109d967f by Ondřej Kuzník at 2021-03-25T19:43:18+00:00 ITS#7788 Hashing should be independent of a useable policy -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8847 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|CONFIRMED |RESOLVED --- Comment #41 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 8ebd0650 by HoweverAT at 2021-03-25T17:37:26+00:00 ITS#8847 Print local address in connection dump • 9d594a11 by HoweverAT at 2021-03-25T18:47:11+00:00 ITS#8847 Add SOCKET_BIND_ADDRESSES Option -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8847 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.4 |2.5.3 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7786] Impossible to modify cn=config if olcDbDirectory doesn't exist
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7786 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/299 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5365] Library symbol versioning or other help for library transitions
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

1 0

[Issue 9509] New: ldap_pvt_tls_check_hostname missing prototype
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9509 Issue ID: 9509 Summary: ldap_pvt_tls_check_hostname missing prototype Product: OpenLDAP Version: 2.4.57 Hardware: Other OS: Mac OS Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: noloader(a)gmail.com Target Milestone: --- Hi Everyone, I'm building OpenLDAP 2.4.57 on Apple M1. Apple turned on -Werror for missing prototypes. It results in: tls2.c:378:9: error: implicit declaration of function 'ldap_pvt_tls_check_hostname' is invalid in C99 [-Werror,-Wimplicit-function-declaration] err = ldap_pvt_tls_check_hostname( ld, ssl, host ); You can access an Apple M1 machine on the GCC Compile Farm. It is GCC304, port 2409. If needed you can get an account at https://cfarm.tetaneutral.net/users/new/. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 9508] New: Add support for maxentrysize for slapd-mdb
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9508 Issue ID: 9508 Summary: Add support for maxentrysize for slapd-mdb Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Symas has code to set a max entry size limitation on entries in back-mdb. This code needs upstreaming for 2.5 -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 8707] slapd: Add systemd service notification support
by openldap-its＠openldap.org 24 Mar '21

24 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8707 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.3 |2.5.4 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8707] slapd: Add systemd service notification support
by openldap-its＠openldap.org 24 Mar '21

24 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8707 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |CONFIRMED --- Comment #30 from Quanah Gibson-Mount <quanah(a)openldap.org> --- This patch is seriously deficient and will be rejected unless there is follow up in the near future from the patch author. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8950] segfault with TXN+accesslog
by openldap-its＠openldap.org 23 Mar '21

23 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8950 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST --- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • c6e521fa by Howard Chu at 2021-03-23T14:58:09+00:00 ITS#8950 move txn setup to frontend -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8668] pcache failing to update after entry moved
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8668 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.3 |--- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8668] pcache failing to update after entry moved
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8668 --- Comment #4 from Howard Chu <hyc(a)openldap.org> --- (In reply to Howard Chu from comment #3) > I was able to reproduce the behavior, but there is no bug here. > > You're seeing the old entry because it's left over from a previous run of > slapd. > The pcache overlay will forget what it knows about the cache contents on a > restart, unless you configure pcachePersist. When you enable this setting, > then it remembers its cached queries across restarts and will expire old > entries instead of returning them in new search requests. To be clear: I could only reproduce this behavior if slapd was stopped and restarted between queries: 1: perform a cacheable search 2: shutdown slapd and restart before cached query expires 3: move entry on remote server 4: repeat the cacheable search 5: repeat the cacheable search again On step 1, pcache will query the remote and store a copy of the returned entry. On step 2, the restart will make pcache forget it stored anything. On step 4, pcache will query the remote server because it thinks its cache is empty, and store and return the new result (only). On step 5, pcache will serve the request entirely from cache, and return both the old and new entries. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8668] pcache failing to update after entry moved
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8668 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INVALID Status|UNCONFIRMED |RESOLVED --- Comment #3 from Howard Chu <hyc(a)openldap.org> --- I was able to reproduce the behavior, but there is no bug here. You're seeing the old entry because it's left over from a previous run of slapd. The pcache overlay will forget what it knows about the cache contents on a restart, unless you configure pcachePersist. When you enable this setting, then it remembers its cached queries across restarts and will expire old entries instead of returning them in new search requests. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9251] slapd tries to allocate huge amounts of memory for deeply nested filter
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9251 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | --- Comment #8 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • f1ebb456 by Howard Chu at 2021-03-22T17:31:13+00:00 ITS#9251 make max filter depth configurable -- You are receiving this mail because: You are on the CC list for the issue.

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs