- openldap-bugs - openldap.org

[Issue 8977] Make IDL sizes configurable in back-mdb
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=8977 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |TEST -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8977] Make IDL sizes configurable in back-mdb
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=8977 --- Comment #14 from Howard Chu <hyc(a)openldap.org> --- (In reply to Quanah Gibson-Mount from comment #8) > --On Thursday, June 27, 2019 8:56 PM +0000 quanah(a)symas.com wrote: > > > --On Thursday, June 27, 2019 8:35 PM +0000 hyc(a)symas.com wrote: > > > >> No, because order is irrelevant for these. > > > > Cool, thanks! I'll continue on with deeper testing then. :) > > Given the current implementation of OpenLDAP, this feature is impossible to > use w/o recompiling OpenLDAP when a change to the IDL size is made. This > is because LDAP_PVT_THREAD_STACK_SIZE must be adjusted as well and that > requires a recompile. This is actually not correct. The stack size was only required because IDLs were of constant size and some were allocated on the stack. But with this patch, since IDL sizes are variable they must all be dynamically allocated using ch_malloc, and so has no impact on the stack any more. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7509] 2.4 Admin Guide olcDatabase={0}config Clarification w.r.t. olcRootDN
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

1 0

[Issue 7425] documentation for slapo-pcache when using slapd-config
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=7425 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Target Milestone|2.5.3 |--- -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7129] slapo-valsort(5) missing description of LDAP_CONTROL_VALSORT
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=7129 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Target Milestone|2.5.3 |--- -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7036] ldapsearch should attempt DNS-based fallback if possible
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

1 0

[Issue 6277] Missing documentation for cn=config
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

1 0

[Issue 9467] New: Update sysexits-compat.h to latest version
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9467 Issue ID: 9467 Summary: Update sysexits-compat.h to latest version Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- We ship a version of the sysexits.h header file for OSes that don't include it, however our version is several years out of date. We should update it to the latest version. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 8835] update admin guide to use "openssl rehash" instead of c_rehash
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=8835 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6757] SASL canonicalize doesn't work as documented
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=6757 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9451] New: README file needs updating
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9451 Issue ID: 9451 Summary: README file needs updating Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- The README file in the root of the source tree for the 2.5 branch needs to be updated to a production version -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Issue 9180] Update slapo-memberOf man page about replication
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9180 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9161] Codespell report for "OpenLDAP" (on fossies.org)
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9161 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7508] 2.4 Administrator's Guide Missing Date on PDF Version
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=7508 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8665] limits documentation update for glued databases
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=8665 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7790] config.h filename clash. include path broken.
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=7790 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9422] New: add #define LDAP_OPT_X_TLS_PROTOCOL_TLS1_3 to ldap.h
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9422 Issue ID: 9422 Summary: add #define LDAP_OPT_X_TLS_PROTOCOL_TLS1_3 to ldap.h Product: OpenLDAP Version: 2.4.56 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: michael(a)stroeder.com Target Milestone: --- I'm not sure whether naively adding this line to ldap.h would be correct: #define LDAP_OPT_X_TLS_PROTOCOL_TLS1_3 ((3 << 8) + 4) -- You are receiving this mail because: You are on the CC list for the issue.

1 7

[Issue 8464] Documentation for enabling monitoring via cn=config
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=8464 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9102] Update sasl-secprops ssf wording
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9102 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9465] New: When compiled in debug mode ldap_get_option asserts breaking API compatibility
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9465 Issue ID: 9465 Summary: When compiled in debug mode ldap_get_option asserts breaking API compatibility Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: doug.leavitt(a)oracle.com Target Milestone: --- In a multi-threaded application, sometimes it is useful to use ldap_get_option to get the LDAP_OPT_RESULT_CODE of an operation (possibly from a different thread). A useful side effect of calling ldap_get_option is that if the connection is no longer valid, the API returns LDAP_OPT_ERR when compiled without debug per the man page: ERRORS On success, the functions return LDAP_OPT_SUCCESS, while they may return LDAP_OPT_ERROR to indicate a generic option handling error. ... However, if libldap is compiled with debugging enabled the same if test throws an assert instead of returning the documented error code, changing the behavior of the API. Specifically this assert: https://git.openldap.org/openldap/openldap/-/blob/master/libraries/libldap/… Compiling in debugging is useful for tracing output even in complex production environments but since there is no specific libldap API to test for valid LD* the seemingly best choice of ldap_get_option breaks in this situation. It is not clear what the original rational for the assert at this specific location was. This ITS requests removing the assert so that ldap_get_option behaves the same both with and without debugging enabled. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Bug 9197] New: slapd-ldap/slapo-chain hits error 80 after idletimeout
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9197 Bug ID: 9197 Summary: slapd-ldap/slapo-chain hits error 80 after idletimeout Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- From a customer: In order to communicate via the LB managed writable ldap, we have to ensure that an idle connection is periodically refreshed. If we do not, the LB will silently drop the connection after 5 minutes. Therefore to combat that I set an olcIdleTimeout on the writable server so that the chain cached connections will be removed before the LB timeout hits. However the slapo-ldap client goes into CLOSE_WAIT state, which causes subsequent ldapmodify updates being brokered by the read only instance to fail with err=80. There appear to be a few bugs filed on this in the past against slapd-ldap, but it's not clear if we may be hitting the same issue, or if this is a new one. I've also connected the read only instances directly to the writable ldap instances and the CLOSE_WAIT issue persists, so I don't believe the CLOSE_WAIT issue is caused by the LB These were the other threads I found as I started looking for this problem, these are using the ldap-proxy though I think: https://www.openldap.org/lists/openldap-technical/201301/msg00323.html http://www.openldap.org/lists/openldap-software/201004/msg00060.html https://www.openldap.org/lists/openldap-bugs/200412/msg00029.html The LB we have seems to be set to forget connections that last over 5 min per the setting, so the 240:10:30 seemed like it should have worked and I just thought it wasn't working because in the man page the text "Only some systems support the customization of these values" is present. however after setting keepalive to 60:10:30 did I maintain a stable connection, so there may be other network settings at play I'm not aware of. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Issue 9450] New: INSTALL file needs updating
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9450 Issue ID: 9450 Summary: INSTALL file needs updating Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- The file "INSTALL" in the root of the source repository needs to be updated to account for the new load balancer. -- You are receiving this mail because: You are on the CC list for the issue.

1 7

[Issue 8248] misleading information in manpage about the use of the logfile option
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=8248 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8904] Cannot enable SSL3 when disabled by default in OpenSSL
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=8904 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7262] slapo-ppolicy overlay cannot use a policy stored in a different backend from the account that it controls
by openldap-its＠openldap.org 27 Feb '21

27 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=7262 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs