- openldap-bugs - openldap.org

Re: (ITS#6015) ldapsearch can not retrieve same uid that has been added after it was deleted
by Pierangelo Masarati 12 Mar '09

12 Mar '09

Please direct software usage questions to openldap-software(a)openldap.org. Also, note that 2.2.13 is ancient. You should upgrade to 2.4.15. This ITS will be closed. p.

1 0

Re: (ITS#6018) TLS memory leak
by timling2003＠gmail.com 12 Mar '09

12 Mar '09

--000e0cd1af8ce900de0464e92621 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit OpenSSL version is 0.9.7d 17 Mar 2004. I will create a connect to LDAP server( windows active directory on windows server 2003) for every query request. Then, I will unbind this connect. 2009/3/12 ling qing <timling2003(a)gmail.com> > I have checked it on openldap-2.4.15. But, it still has this problem. > btw, I use cyrus-sasl-2.1.22.tar.gz for building. > thanks > > 2009/3/12 Pierangelo Masarati <openldap-its(a)openldap.org> > >> 2.3.32 is obsolete. It's pointless to debug it. Please check whether the >> problem persists in 2.4.15. >> >> p. >> > > --000e0cd1af8ce900de0464e92621 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable OpenSSL version is 0.9.7d 17 Mar 2004. I will create a connect to LDAP s= erver( windows active directory on windows server 2003) for every query req= uest. Then, I will unbind this connect. <div class=3D"gmail_quote"> 2009/3/12 ling qing <<a href=3D"mailto:timling2003@gma= il.com">timling2003(a)gmail.com</a>> <blockquote class=3D"gmail_= quote" style=3D"border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt = 0pt 0.8ex; padding-left: 1ex;"> I have checked it on openldap-2.4.15. But, it still has this problem. bt= w, I use cyrus-sasl-2.1.22.tar.gz for building. thanks <div class= =3D"gmail_quote">2009/3/12 Pierangelo Masarati <<a hre= f=3D"mailto:openldap-its@openldap.org" target=3D"_blank">openldap-its@openl= dap.org</a>><div class=3D"im"> <blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, = 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">2.3.32 is obsolet= e. =A0It's pointless to debug it. =A0Please check whether the problem persists in 2.4.15. p. </blockquote></div></div> </blockquote></div> --000e0cd1af8ce900de0464e92621--

1 0

Re: (ITS#6018) TLS memory leak
by timling2003＠gmail.com 12 Mar '09

12 Mar '09

--000e0cd292782d513d0464e91168 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit I have checked it on openldap-2.4.15. But, it still has this problem. btw, I use cyrus-sasl-2.1.22.tar.gz for building. thanks 2009/3/12 Pierangelo Masarati <openldap-its(a)openldap.org> > 2.3.32 is obsolete. It's pointless to debug it. Please check whether the > problem persists in 2.4.15. > > p. > --000e0cd292782d513d0464e91168 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I have checked it on openldap-2.4.15. But, it still has this problem. bt= w, I use cyrus-sasl-2.1.22.tar.gz for building. thanks <div class= =3D"gmail_quote">2009/3/12 Pierangelo Masarati <<a hre= f=3D"mailto:openldap-its@openldap.org">openldap-its(a)openldap.org</a>></s= pan> <blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, = 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">2.3.32 is obsolet= e. =A0It's pointless to debug it. =A0Please check whether the problem persists in 2.4.15. p. </blockquote></div> --000e0cd292782d513d0464e91168--

1 0

Re: (ITS#6017) Implement parentGUID or similar in OpenLDAP
by ando＠sys-net.it 12 Mar '09

12 Mar '09

abartlet(a)samba.org wrote: > I found the formal spec in MS-ADTS: > > It currently reads: > > 3.1.1.4.5.28 parentGUID > This attribute is not present on an object that is the root of an NC. > For all other objects, let TO be > the object from which the parentGUID attribute is being read and let > TP be TO!parent. > TO!parentGUID is equal to TP!objectGUID. Sounds like a nightmare of internal searches if we want to generate it on the fly (although possibly acceptable by those queries that require it). It might be worth to consider storing it in directory, and track add/rename operations accordingly. The overlay that implements it should also provide a tool hook for bi_tool_entry_put. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#6018) TLS memory leak
by Pierangelo Masarati 12 Mar '09

12 Mar '09

2.3.32 is obsolete. It's pointless to debug it. Please check whether the problem persists in 2.4.15. p.

1 0

(ITS#6018) TLS memory leak
by timling2003＠gmail.com 12 Mar '09

12 Mar '09

Full_Name: Tim Ling Version: 2.3.32 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (202.111.48.66) I develop a client of LDAP with TLS/SSL. This client is a daemon to query LDAP server. For SSL, I use ldap_initialize(ld, "ldaps://..."). For TLS, I use ldap_start_tls_s( ld, NULL, NULL ). I also use ldap_set_option( ld, LDAP_OPT_PROTOCOL_VERSION, &protocol ) (protocol=3) and ldap_set_option( NULL, LDAP_OPT_X_TLS_REQUIRE_CERT, &rc ) (rc=0). The method of bind is LDAP_AUTH_SIMPLE. For every request, I will call ldap_initialize(). After that, I will use ldap_unbind_s(ld). ( I cannot use ldap_pvt_tls_destroy(), because this function can be called only once ). After handling a lot of requests, it will cause memory leak.

1 0

Re: (ITS#6016) Make moduleload automatic
by ando＠sys-net.it 12 Mar '09

12 Mar '09

hyc(a)symas.com wrote: > Right. I think we'll go with another approach instead - Samba will always spit > out moduleload directives. We'll change moduleload to check for > already-existing backends or overlays, and silently succeed in those cases. Well, I think we could also provide sort of an off-line means to check what is statically built-in and what's not. In principle, one could implement tool mode in back-monitor and perform a echo "database monitor" > slapd.conf slapcat -f slapd.conf -s "cn=Backends,cn=Monitor" | grep whatever slapcat -f slapd.conf -s "cn=Overlays,cn=Monitor" | grep whatever to find what's available. If it fails, back-monitor itself is needed; then echo "modulepath path/to/back-monitor" > slapd.conf echo "moduleload back_monitor.la" >> slapd.conf echo "database monitor" >> slapd.conf slapcat -f slapd.conf -s "cn=Backends,cn=Monitor" | grep whatever slapcat -f slapd.conf -s "cn=Overlays,cn=Monitor" | grep whatever Looks like an overkill, but it might be of general usefulness. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#6016) Make moduleload automatic
by hyc＠symas.com 12 Mar '09

12 Mar '09

Pierangelo Masarati wrote: > hyc(a)symas.com wrote: >> As a further clarification - we're only considering this for backends and >> overlays; other dynamically loaded elements' (like syntaxes, password hashes, >> whatever) behavior will not be changed. > > I see quite a few issues (unless already discussed). For example, one > would typically discover the need to load back_monitor.la only close to > the end of the configuration, while the module defines some specific > schema and even some specific calls that may be needed by other backends > instantiated earlier in order to allow custom monitoring. I guess the > problem can be generalized. Right. I think we'll go with another approach instead - Samba will always spit out moduleload directives. We'll change moduleload to check for already-existing backends or overlays, and silently succeed in those cases. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6016) Make moduleload automatic
by ando＠sys-net.it 12 Mar '09

12 Mar '09

hyc(a)symas.com wrote: > abartlet(a)samba.org wrote: >> Full_Name: Andrew Bartlett >> Version: 2.4.15 >> OS: Fedora 9 >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (59.167.251.137) >> >> >> In Samba4, we generate a slapd.conf for OpenLDAP as part of our >> provision-backend process. This avoids administrators needing to guess at >> Samba's specific requirements. >> >> However, this places the Samba4 software in the position of having to guess how >> this host's OpenLDAP installation was compiled. In particular, we need to guess >> if the required overlays are built in, or modules. >> >> Work was done a while back to avoid us having to guess what the module path is >> (the default is is now hard-coded in the binary), but we still have to guess >> which set of modules to load. Currently this is done in 'make test' by guessing >> different sets of modules in an included 'modules.conf' and running slaptest >> until we find a combination that works. >> >> We (Samba4) would really like it if the slapd binary would load modules >> (assuming a one-to-one mapping between overlay/backend names and modules) from >> that default path, if not found static in the binary. >> >> This way, Samba would not specify modules at all in the slapd.conf, but they >> would be loaded as required, if required. >> >> Thanks, >> >> Andrew Bartlett >> >> (As discussed with Howard Chu on #openldap-devel) >> > As a further clarification - we're only considering this for backends and > overlays; other dynamically loaded elements' (like syntaxes, password hashes, > whatever) behavior will not be changed. I see quite a few issues (unless already discussed). For example, one would typically discover the need to load back_monitor.la only close to the end of the configuration, while the module defines some specific schema and even some specific calls that may be needed by other backends instantiated earlier in order to allow custom monitoring. I guess the problem can be generalized. > And before we go there, what if we just provided a slapd option to dump out > all of its compiled-in paths? Then you could inspect the modulepath and see > whether any modules of interest reside there. ? p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#6017) Implement parentGUID or similar in OpenLDAP
by abartlet＠samba.org 12 Mar '09

12 Mar '09

--=-IfMlemfEuIIh4cVKP58C Content-Type: text/plain Content-Transfer-Encoding: quoted-printable I found the formal spec in MS-ADTS: It currently reads: 3.1.1.4.5.28 parentGUID This attribute is not present on an object that is the root of an NC. For all other objects, let TO be the object from which the parentGUID attribute is being read and let TP be TO!parent. TO!parentGUID is equal to TP!objectGUID. --=20 Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc. --=-IfMlemfEuIIh4cVKP58C Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQBJuINDz4A8Wyi0NrsRAovEAJ9ENJCjmWM0oiK43uK9GWLOWzhzBACbBGpS geE0JFNIqoWTAWYGV5JpJNo= =l42G -----END PGP SIGNATURE----- --=-IfMlemfEuIIh4cVKP58C--

1 0

(ITS#6017) Implement parentGUID or similar in OpenLDAP
by abartlet＠samba.org 12 Mar '09

12 Mar '09

Full_Name: Andrew Bartlett Version: 2.4.15 OS: Fedora 9 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (59.167.251.137) Samba4 would find it most helpful if OpenLDAP would be able to present an operational attribute 'parentGUID' similar to the one that Windows 2008 has implemented in AD. http://msdn.microsoft.com/en-us/library/cc221277(PROT.13).aspx Formalised details of the required semantics are not very clear at this point (I will request clarification from Microsoft on this), but for now: The root entries on a partition have no parentGUID All other entries have a value parentGUID equal to the objectGUID of the parent This value is available in search results if requested. As Samba handles the translation from text to binary, feel free to use the existing entryUUID formatting. Implementing this would avoid Samba having to perform an auxillary search to find this information, which should be very cheaply available to hdb when it is resolving the DN. Thanks, Andrew Bartlett (Discussed with Howard Chu on #openldap-devel)

1 0

Re: (ITS#6016) Make moduleload automatic
by hyc＠symas.com 12 Mar '09

12 Mar '09

abartlet(a)samba.org wrote: > Full_Name: Andrew Bartlett > Version: 2.4.15 > OS: Fedora 9 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (59.167.251.137) > > > In Samba4, we generate a slapd.conf for OpenLDAP as part of our > provision-backend process. This avoids administrators needing to guess at > Samba's specific requirements. > > However, this places the Samba4 software in the position of having to guess how > this host's OpenLDAP installation was compiled. In particular, we need to guess > if the required overlays are built in, or modules. > > Work was done a while back to avoid us having to guess what the module path is > (the default is is now hard-coded in the binary), but we still have to guess > which set of modules to load. Currently this is done in 'make test' by guessing > different sets of modules in an included 'modules.conf' and running slaptest > until we find a combination that works. > > We (Samba4) would really like it if the slapd binary would load modules > (assuming a one-to-one mapping between overlay/backend names and modules) from > that default path, if not found static in the binary. > > This way, Samba would not specify modules at all in the slapd.conf, but they > would be loaded as required, if required. > > Thanks, > > Andrew Bartlett > > (As discussed with Howard Chu on #openldap-devel) > As a further clarification - we're only considering this for backends and overlays; other dynamically loaded elements' (like syntaxes, password hashes, whatever) behavior will not be changed. And before we go there, what if we just provided a slapd option to dump out all of its compiled-in paths? Then you could inspect the modulepath and see whether any modules of interest reside there. ? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#6016) Make moduleload automatic
by abartlet＠samba.org 12 Mar '09

12 Mar '09

Full_Name: Andrew Bartlett Version: 2.4.15 OS: Fedora 9 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (59.167.251.137) In Samba4, we generate a slapd.conf for OpenLDAP as part of our provision-backend process. This avoids administrators needing to guess at Samba's specific requirements. However, this places the Samba4 software in the position of having to guess how this host's OpenLDAP installation was compiled. In particular, we need to guess if the required overlays are built in, or modules. Work was done a while back to avoid us having to guess what the module path is (the default is is now hard-coded in the binary), but we still have to guess which set of modules to load. Currently this is done in 'make test' by guessing different sets of modules in an included 'modules.conf' and running slaptest until we find a combination that works. We (Samba4) would really like it if the slapd binary would load modules (assuming a one-to-one mapping between overlay/backend names and modules) from that default path, if not found static in the binary. This way, Samba would not specify modules at all in the slapd.conf, but they would be loaded as required, if required. Thanks, Andrew Bartlett (As discussed with Howard Chu on #openldap-devel)

1 0

(ITS#6015) ldapsearch can not retrieve same uid that has been added after it was deleted
by arun_patel＠yahoo.com 11 Mar '09

11 Mar '09

Full_Name: Arun Patel Version: 2.2.13 OS: linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (135.207.175.192) Here is the scenario. 1) Add new user (example testid) dn: uid=testid,o=xyz.com (with the attibutes and its values, etc) 2) ldapsearch -LLL -x -b uid=tesid,xyz.com finds the testid 3) Delete the user (testid) dn: uid=testid,o=xyz.com changemodify: delete 4) ldapsearch -LLL -x -b uid=tesid,xyz.com No match for DN (Good) 5) Add same user back (testid) dn: uid=testid,o=xyz.com (with the attibutes and its values, etc) 6) ldapsearch -LLL -x -b uid=tesid,xyz.com unable to retrieve the testid (Problem) I know the testid is in ldap, because went thru ldap browser and did see the entry. I then did /etc/init.d/ldap stop and /etc/init.d/ldap start After entering ldapsearch -LLL -x -b uid=tesid,xyz.com, it works, Why does this happen? Help is highly appreciated. Arun

1 0

Re: (ITS#6014) rev. 1.121 of clients/tools/common.c makes ldapmodify coredump
by d＠delphij.net 11 Mar '09

11 Mar '09

This is a multi-part message in MIME format. --------------060204070408080909040407 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Hi, Here is a patch that intends to fix #6014. getpassphrase() (which in turn would be a getpass() call, or lutil_getpass() call), returns a pointer from a static char * pointer, which should never be free()'ed. Therefore, a strdup() should be called. Note that, since both getpass() implementation could return NULL, we can not strdup() directly. Instead, we need to detect whether it's NULL and handle separately. Cheers, -- Xin LI <delphij(a)delphij.net> http://www.delphij.net/ FreeBSD - The Power to Serve! --------------060204070408080909040407 Content-Type: text/plain; name="patch-ITS6014" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="patch-ITS6014" Index: clients/tools/ldapcompare.c =================================================================== RCS file: /repo/OpenLDAP/pkg/ldap/clients/tools/ldapcompare.c,v retrieving revision 1.52 diff -u -p -r1.52 ldapcompare.c --- clients/tools/ldapcompare.c 21 Jan 2009 23:40:09 -0000 1.52 +++ clients/tools/ldapcompare.c 11 Mar 2009 17:22:58 -0000 @@ -182,6 +182,7 @@ main( int argc, char **argv ) { char *compdn = NULL, *attrs = NULL; char *sep; + const char *passphrase; int rc; LDAP *ld = NULL; struct berval bvalue = { 0, NULL }; @@ -233,7 +234,8 @@ main( int argc, char **argv ) rc = lutil_get_filed_password( pw_file, &passwd ); if( rc ) return EXIT_FAILURE; } else { - passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") ); + passphrase = getpassphrase( _("Enter LDAP Password: ") ); + passwd.bv_val = passphrase ? strdup(passphrase) : NULL; passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0; } } Index: clients/tools/ldapdelete.c =================================================================== RCS file: /repo/OpenLDAP/pkg/ldap/clients/tools/ldapdelete.c,v retrieving revision 1.130 diff -u -p -r1.130 ldapdelete.c --- clients/tools/ldapdelete.c 21 Jan 2009 23:40:09 -0000 1.130 +++ clients/tools/ldapdelete.c 11 Mar 2009 17:22:58 -0000 @@ -162,6 +162,7 @@ int main( int argc, char **argv ) { char buf[ 4096 ]; + const char *passphrase; FILE *fp; LDAP *ld; int rc, retval; @@ -191,7 +192,8 @@ main( int argc, char **argv ) rc = lutil_get_filed_password( pw_file, &passwd ); if( rc ) return EXIT_FAILURE; } else { - passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") ); + passphrase = getpassphrase( _("Enter LDAP Password: ") ); + passwd.bv_val = passphrase ? strdup(passphrase) : 0; passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0; } } Index: clients/tools/ldapexop.c =================================================================== RCS file: /repo/OpenLDAP/pkg/ldap/clients/tools/ldapexop.c,v retrieving revision 1.16 diff -u -p -r1.16 ldapexop.c --- clients/tools/ldapexop.c 21 Jan 2009 23:40:09 -0000 1.16 +++ clients/tools/ldapexop.c 11 Mar 2009 17:22:58 -0000 @@ -70,6 +70,7 @@ main( int argc, char *argv[] ) LDAP *ld = NULL; char *matcheddn = NULL, *text = NULL, **refs = NULL; + const char *passphrase; LDAPControl **ctrls = NULL; int id, code; LDAPMessage *res; @@ -91,7 +92,8 @@ main( int argc, char *argv[] ) rc = lutil_get_filed_password( pw_file, &passwd ); if( rc ) return EXIT_FAILURE; } else { - passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") ); + passphrase = getpassphrase( _("Enter LDAP Password: ") ); + passwd.bv_val = passphrase ? strdup( passphrase ) : NULL; passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0; } } Index: clients/tools/ldapmodify.c =================================================================== RCS file: /repo/OpenLDAP/pkg/ldap/clients/tools/ldapmodify.c,v retrieving revision 1.209 diff -u -p -r1.209 ldapmodify.c --- clients/tools/ldapmodify.c 21 Jan 2009 23:40:09 -0000 1.209 +++ clients/tools/ldapmodify.c 11 Mar 2009 17:22:58 -0000 @@ -237,6 +237,7 @@ int main( int argc, char **argv ) { char *rbuf = NULL, *rejbuf = NULL; + const char *passphrase; FILE *rejfp; struct LDIFFP *ldiffp, ldifdummy = {0}; char *matched_msg, *error_msg; @@ -286,7 +287,8 @@ main( int argc, char **argv ) rc = lutil_get_filed_password( pw_file, &passwd ); if( rc ) return EXIT_FAILURE; } else { - passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") ); + passphrase = getpassphrase( _("Enter LDAP Password: ") ); + passwd.bv_val = passphrase ? strdup( passphrase ) : NULL; passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0; } } Index: clients/tools/ldapmodrdn.c =================================================================== RCS file: /repo/OpenLDAP/pkg/ldap/clients/tools/ldapmodrdn.c,v retrieving revision 1.124 diff -u -p -r1.124 ldapmodrdn.c --- clients/tools/ldapmodrdn.c 21 Jan 2009 23:40:09 -0000 1.124 +++ clients/tools/ldapmodrdn.c 11 Mar 2009 17:22:58 -0000 @@ -151,6 +151,7 @@ int main(int argc, char **argv) { char *entrydn = NULL, *rdn = NULL, buf[ 4096 ]; + const char *passphrase; FILE *fp; LDAP *ld; int rc, retval, havedn; @@ -192,7 +193,8 @@ main(int argc, char **argv) rc = lutil_get_filed_password( pw_file, &passwd ); if( rc ) return EXIT_FAILURE; } else { - passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") ); + passphrase = getpassphrase( _("Enter LDAP Password: ") ); + passwd.bv_val = passphrase ? strdup( passphrase ) : NULL; passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0; } } Index: clients/tools/ldappasswd.c =================================================================== RCS file: /repo/OpenLDAP/pkg/ldap/clients/tools/ldappasswd.c,v retrieving revision 1.148 diff -u -p -r1.148 ldappasswd.c --- clients/tools/ldappasswd.c 7 Mar 2009 23:08:09 -0000 1.148 +++ clients/tools/ldappasswd.c 11 Mar 2009 17:22:59 -0000 @@ -205,8 +205,9 @@ main( int argc, char *argv[] ) if( want_oldpw && oldpw.bv_val == NULL ) { /* prompt for old password */ - char *ckoldpw; - oldpw.bv_val = strdup(getpassphrase(_("Old password: "))); + const char *oldpassphrase, *ckoldpw; + oldpassphrase = getpassphrase(_("Old password: ")); + oldpw.bv_val = oldpassphrase ? strdup(oldpassphrase) : NULL; ckoldpw = getpassphrase(_("Re-enter old password: ")); if( oldpw.bv_val == NULL || ckoldpw == NULL || @@ -217,7 +218,7 @@ main( int argc, char *argv[] ) goto done; } - oldpw.bv_len = strlen( oldpw.bv_val ); + oldpw.bv_len = oldpw.bv_val ? strlen( oldpw.bv_val ) : 0; } if( newpwfile ) { @@ -230,8 +231,9 @@ main( int argc, char *argv[] ) if( want_newpw && newpw.bv_val == NULL ) { /* prompt for new password */ - char *cknewpw; - newpw.bv_val = strdup(getpassphrase(_("New password: "))); + const char *newpassphrase, *cknewpw; + newpassphrase = getpassphrase(_("New password: ")); + newpw.bv_val = newpassphrase ? strdup(newpassphrase) : NULL; cknewpw = getpassphrase(_("Re-enter new password: ")); if( newpw.bv_val == NULL || cknewpw == NULL || @@ -242,7 +244,7 @@ main( int argc, char *argv[] ) goto done; } - newpw.bv_len = strlen( newpw.bv_val ); + newpw.bv_len = newpw.bv_val ? strlen( newpw.bv_val ) : 0; } if ( pw_file ) { @@ -253,7 +255,9 @@ main( int argc, char *argv[] ) } } else if ( want_bindpw ) { - passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") ); + const char *bindpassphrase; + bindpassphrase = getpassphrase( _("Enter LDAP Password: ") ); + passwd.bv_val = bindpassphrase ? strdup(bindpassphrase) : NULL; passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0; } Index: clients/tools/ldapsearch.c =================================================================== RCS file: /repo/OpenLDAP/pkg/ldap/clients/tools/ldapsearch.c,v retrieving revision 1.262 diff -u -p -r1.262 ldapsearch.c --- clients/tools/ldapsearch.c 7 Mar 2009 00:31:34 -0000 1.262 +++ clients/tools/ldapsearch.c 11 Mar 2009 17:22:59 -0000 @@ -718,6 +718,7 @@ int main( int argc, char **argv ) { char *filtpattern, **attrs = NULL, line[BUFSIZ]; + const char *passphrase; FILE *fp = NULL; int rc, rc1, i, first; LDAP *ld = NULL; @@ -831,7 +832,8 @@ main( int argc, char **argv ) rc = lutil_get_filed_password( pw_file, &passwd ); if( rc ) return EXIT_FAILURE; } else { - passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") ); + passphrase = getpassphrase( _("Enter LDAP Password: ") ); + passwd.bv_val = passphrase ? strdup(passphrase) : NULL; passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0; } } Index: clients/tools/ldapwhoami.c =================================================================== RCS file: /repo/OpenLDAP/pkg/ldap/clients/tools/ldapwhoami.c,v retrieving revision 1.50 diff -u -p -r1.50 ldapwhoami.c --- clients/tools/ldapwhoami.c 21 Jan 2009 23:40:09 -0000 1.50 +++ clients/tools/ldapwhoami.c 11 Mar 2009 17:22:59 -0000 @@ -112,6 +112,7 @@ main( int argc, char *argv[] ) LDAP *ld = NULL; char *matcheddn = NULL, *text = NULL, **refs = NULL; char *retoid = NULL; + const char *passphrase; struct berval *retdata = NULL; int id, code = 0; LDAPMessage *res; @@ -134,7 +135,8 @@ main( int argc, char *argv[] ) rc = lutil_get_filed_password( pw_file, &passwd ); if( rc ) return EXIT_FAILURE; } else { - passwd.bv_val = getpassphrase( _("Enter LDAP Password: ") ); + passphrase = getpassphrase( _("Enter LDAP Password: ") ); + passwd.bv_val = passphrase ? strdup(passphrase) : NULL; passwd.bv_len = passwd.bv_val ? strlen( passwd.bv_val ) : 0; } } --------------060204070408080909040407--

1 0

Re: (ITS#6014) rev. 1.121 of clients/tools/common.c makes ldapmodify coredump
by ando＠sys-net.it 11 Mar '09

11 Mar '09

Isn't getpass() deprecated and removed from POSIX? p. yuri.pankov(a)gmail.com wrote: > Full_Name: Yuri Pankov > Version: 2.4.15 > OS: FreeBSD > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (85.175.25.104) > > > Running ldap{add,modify} with -W switch leads to following coredump (introduced > in rev.1.121 of clients/tools/common.c): >> ldapadd -x -D "cn=root,dc=darklight,dc=homeunix,dc=org" -W -f root.ldif > Enter LDAP Password: > adding new entry "dc=darklight,dc=homeunix,dc=org" > > Assertion failed: (arena != NULL), function arena_dalloc, file > /usr/src/lib/libc/stdlib/malloc.c, line 3843. > Abort (core dumped) > > We shouldn't try to free() result returned by getpass(): > > --- ./clients/tools/common.c.orig 2009-03-11 19:24:18.523596600 +0300 > +++ ./clients/tools/common.c 2009-03-11 19:24:52.443459786 +0300 > @@ -255,9 +255,11 @@ > ber_memfree( binddn ); > } > > +#ifndef HAVE_GETPASS > if ( passwd.bv_val != NULL ) { > ber_memfree( passwd.bv_val ); > } > +#endif > } > > void > Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#6014) rev. 1.121 of clients/tools/common.c makes ldapmodify coredump
by yuri.pankov＠gmail.com 11 Mar '09

11 Mar '09

Full_Name: Yuri Pankov Version: 2.4.15 OS: FreeBSD URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (85.175.25.104) Running ldap{add,modify} with -W switch leads to following coredump (introduced in rev.1.121 of clients/tools/common.c): > ldapadd -x -D "cn=root,dc=darklight,dc=homeunix,dc=org" -W -f root.ldif Enter LDAP Password: adding new entry "dc=darklight,dc=homeunix,dc=org" Assertion failed: (arena != NULL), function arena_dalloc, file /usr/src/lib/libc/stdlib/malloc.c, line 3843. Abort (core dumped) We shouldn't try to free() result returned by getpass(): --- ./clients/tools/common.c.orig 2009-03-11 19:24:18.523596600 +0300 +++ ./clients/tools/common.c 2009-03-11 19:24:52.443459786 +0300 @@ -255,9 +255,11 @@ ber_memfree( binddn ); } +#ifndef HAVE_GETPASS if ( passwd.bv_val != NULL ) { ber_memfree( passwd.bv_val ); } +#endif } void

1 0

Re: (ITS#6005)
by rupreht-mobi2＠olympus.ru 11 Mar '09

11 Mar '09

Pierangelo Masarati пишет: > <http://www.openldap.org/faq/data/cache/59.html> > > p. > > >> %ldapsearch -x -w xxxxxxx -h mail -b "ou=transport,dc=test,dc=ru" -D >> "cn=replic,dc=test,dc=ru" >> Ok >> >> %ldapsearch -Wx -h mail -b "ou=transport,dc=test,dc=ru" -D >> "cn=replic,dc=test,dc=ru" >> Enter LDAP Password: >> # extended LDIF >> # >> # LDAPv3 >> ..... >> # search result >> search: 2 >> result: 0 Success >> >> # numResponses: 5 >> # numEntries: 4 >> Segmentation fault > > > > > Ing. Pierangelo Masarati > OpenLDAP Core Team > > SysNet s.r.l. > via Dossi, 8 - 27100 Pavia - ITALIA > http://www.sys-net.it > ----------------------------------- > Office: +39 02 23998309 > Mobile: +39 333 4963172 > Fax: +39 0382 476497 > Email: ando(a)sys-net.it > ----------------------------------- > %gdb `where ldapsearch` GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd"...(no debugging symbols found)... (gdb) r -d -1 -Wx -h mail -b "ou=transport,dc=test,dc=ru" -D "cn=replic,dc=test,dc=ru" Starting program: /usr/local/bin/ldapsearch -d -1 -Wx -h mail -b "ou=transport,dc=test,dc=ru" -D "cn=replic,dc=test,dc=ru" ldap_create ldap_url_parse_ext(ldap://mail) Enter LDAP Password: ldap_sasl_bind ldap_send_initial_request ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP mail:389 ldap_new_socket: 3 ldap_prepare_socket: 3 ldap_connect_to_host: Trying xxx.xxx.xxx:389 ldap_pvt_connect: fd: 3 tm: -1 async: 0 ldap_open_defconn: successful ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x4841e000 ptr=0x4841e000 end=0x4841e033 len=51 0000: 30 31 02 01 01 60 2c 02 01 03 04 1a 63 6e 3d 72 01...`,.....cn=r -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- ber_scanf fmt ({i) ber: ber_dump: buf=0x4841e000 ptr=0x4841e005 end=0x4841e033 len=46 0000: 60 2c 02 01 03 04 1a 63 6e 3d 72 65 70 6c 69 63 `,.....cn=replic -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- ber_flush2: 51 bytes to sd 3 0000: 30 31 02 01 01 60 2c 02 01 03 04 1a 63 6e 3d 72 01...`,.....cn=r -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- ldap_write: want=51, written=51 0000: 30 31 02 01 01 60 2c 02 01 03 04 1a 63 6e 3d 72 01...`,.....cn=r -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- ldap_result ld 0x48425040 msgid 1 wait4msg ld 0x48425040 msgid 1 (infinite timeout) wait4msg continue ld 0x48425040 msgid 1 all 1 ** ld 0x48425040 Connections: * host: mail port: 389 (default) refcnt: 2 status: Connected last used: Wed Mar 11 10:15:15 2009 ** ld 0x48425040 Outstanding Requests: * msgid 1, origid 1, status InProgress outstanding referrals 0, parent count 0 ld 0x48425040 request count 1 (abandoned 0) ** ld 0x48425040 Response Queue: Empty ld 0x48425040 response count 0 ldap_chkResponseList ld 0x48425040 msgid 1 all 1 ldap_chkResponseList returns ld 0x48425040 NULL ldap_int_select read1msg: ld 0x48425040 msgid 1 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 0c 02 01 01 61 07 0a 0....a.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x484200c0 ptr=0x484200c0 end=0x484200cc len=12 0000: 02 01 01 61 07 0a 01 00 04 00 04 00 ...a........ read1msg: ld 0x48425040 msgid 1 message type bind ber_scanf fmt ({eAA) ber: ber_dump: buf=0x484200c0 ptr=0x484200c3 end=0x484200cc len=9 0000: 61 07 0a 01 00 04 00 04 00 a........ read1msg: ld 0x48425040 0 new referrals read1msg: mark request completed, ld 0x48425040 msgid 1 request done: ld 0x48425040 msgid 1 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 1, msgid 1) ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x484200c0 ptr=0x484200c3 end=0x484200cc len=9 0000: 61 07 0a 01 00 04 00 04 00 a........ ber_scanf fmt (}) ber: ber_dump: buf=0x484200c0 ptr=0x484200cc end=0x484200cc len=0 ldap_msgfree # extended LDIF # # LDAPv3 # base <ou=transport,dc=test,dc=ru> with scope subtree # filter: (objectclass=*) # requesting: ALL # ldap_search_ext put_filter: "(objectclass=*)" put_filter: simple put_simple_filter: "objectclass=*" ldap_build_search_req ATTRS: * ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x4841f000 ptr=0x4841f000 end=0x4841f044 len=68 0000: 30 42 02 01 02 63 3d 04 1d 6f 75 3d 74 72 61 6e 0B...c=..ou=tran -x-x-x-x-x-x-x-x-x- 0020: 2c 64 63 3d 72 75 0a 01 02 0a 01 00 02 01 00 02 ,dc=ru.......... 0030: 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c 61 .......objectcla 0040: 73 73 30 00 ss0. ber_scanf fmt ({) ber: ber_dump: buf=0x4841f000 ptr=0x4841f005 end=0x4841f044 len=63 0000: 63 3d 04 1d 6f 75 3d 74 72 61 6e 73 70 6f 72 74 c=..ou=transport -x-x-x-x-x-x-x-x-x- 0020: 75 0a 01 02 0a 01 00 02 01 00 02 01 00 01 01 00 u............... 0030: 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 30 00 ..objectclass0. ber_flush2: 68 bytes to sd 3 0000: 30 42 02 01 02 63 3d 04 1d 6f 75 3d 74 72 61 6e 0B...c=..ou=tran -x-x-x-x-x-x-x-x-x- 0020: 2c 64 63 3d 72 75 0a 01 02 0a 01 00 02 01 00 02 ,dc=ru.......... 0030: 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c 61 .......objectcla 0040: 73 73 30 00 ss0. ldap_write: want=68, written=68 0000: 30 42 02 01 02 63 3d 04 1d 6f 75 3d 74 72 61 6e 0B...c=..ou=tran -x-x-x-x-x-x-x-x-x- 0020: 2c 64 63 3d 72 75 0a 01 02 0a 01 00 02 01 00 02 ,dc=ru.......... 0030: 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c 61 .......objectcla 0040: 73 73 30 00 ss0. ldap_result ld 0x48425040 msgid -1 wait4msg ld 0x48425040 msgid -1 (infinite timeout) wait4msg continue ld 0x48425040 msgid -1 all 0 ** ld 0x48425040 Connections: * host: mail port: 389 (default) refcnt: 2 status: Connected last used: Wed Mar 11 10:15:15 2009 ** ld 0x48425040 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ld 0x48425040 request count 1 (abandoned 0) ** ld 0x48425040 Response Queue: Empty ld 0x48425040 response count 0 ldap_chkResponseList ld 0x48425040 msgid -1 all 0 ldap_chkResponseList returns ld 0x48425040 NULL ldap_int_select read1msg: ld 0x48425040 msgid -1 all 0 ber_get_next ldap_read: want=8, got=8 0000: 30 63 02 01 02 64 5e 04 0c...d^. ldap_read: want=93, got=93 0000: 1d 6f 75 3d 74 72 61 6e 73 70 6f 72 74 2c 64 63 .ou=transport,dc -x-x-x-x-x-x-x-x-x- 0020: 30 11 04 02 6f 75 31 0b 04 09 74 72 61 6e 73 70 0...ou1...transp 0030: 6f 72 74 30 28 04 0b 6f 62 6a 65 63 74 43 6c 61 ort0(..objectCla 0040: 73 73 31 19 04 03 74 6f 70 04 12 6f 72 67 61 6e ss1...top..organ 0050: 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 izationalUnit ber_get_next: tag 0x30 len 99 contents: ber_dump: buf=0x48433080 ptr=0x48433080 end=0x484330e3 len=99 0000: 02 01 02 64 5e 04 1d 6f 75 3d 74 72 61 6e 73 70 ...d^..ou=transp -x-x-x-x-x-x-x-x-x- 0020: 63 3d 72 75 30 3d 30 11 04 02 6f 75 31 0b 04 09 c=ru0=0...ou1... 0030: 74 72 61 6e 73 70 6f 72 74 30 28 04 0b 6f 62 6a transport0(..obj 0040: 65 63 74 43 6c 61 73 73 31 19 04 03 74 6f 70 04 ectClass1...top. 0050: 12 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 .organizationalU 0060: 6e 69 74 nit read1msg: ld 0x48425040 msgid 2 message type search-entry ldap_get_dn_ber ber_scanf fmt ({ml{) ber: ber_dump: buf=0x48433080 ptr=0x48433083 end=0x484330e3 len=96 0000: 64 5e 04 1d 6f 75 3d 74 72 61 6e 73 70 6f 72 74 d^..ou=transport -x-x-x-x-x-x-x-x-x- 0020: 75 30 3d 30 11 04 02 6f 75 31 0b 04 09 74 72 61 u0=0...ou1...tra 0030: 6e 73 70 6f 72 74 30 28 04 0b 6f 62 6a 65 63 74 nsport0(..object 0040: 43 6c 61 73 73 31 19 04 03 74 6f 70 04 12 6f 72 Class1...top..or 0050: 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 ganizationalUnit ldap_dn2ufn ldap_dn_normalize => ldap_bv2dn(ou=transport,dc=test,dc=ru,0) <= ldap_bv2dn(ou=transport,dc=test,dc=ru)=0 => ldap_dn2bv(64) <= ldap_dn2bv(transport, test.ru)=0 # transport, test.ru dn: ou=transport,dc=test,dc=ru ber_scanf fmt ({xx) ber: ber_dump: buf=0x48433080 ptr=0x48433083 end=0x484330e3 len=96 0000: 64 5e 04 1d 6f 75 3d 74 72 61 6e 73 70 6f 72 74 d^..ou=transport -x-x-x-x-x-x-x-x-x- 0020: 75 00 3d 30 11 04 02 6f 75 31 0b 04 09 74 72 61 u.=0...ou1...tra 0030: 6e 73 70 6f 72 74 30 28 04 0b 6f 62 6a 65 63 74 nsport0(..object 0040: 43 6c 61 73 73 31 19 04 03 74 6f 70 04 12 6f 72 Class1...top..or 0050: 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 ganizationalUnit ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433080 ptr=0x484330a6 end=0x484330e3 len=61 0000: 30 11 04 02 6f 75 31 0b 04 09 74 72 61 6e 73 70 0...ou1...transp 0010: 6f 72 74 30 28 04 0b 6f 62 6a 65 63 74 43 6c 61 ort0(..objectCla 0020: 73 73 31 19 04 03 74 6f 70 04 12 6f 72 67 61 6e ss1...top..organ 0030: 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 izationalUnit ou: transport ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433080 ptr=0x484330b9 end=0x484330e3 len=42 0000: 00 28 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 .(..objectClass1 0010: 19 04 03 74 6f 70 04 12 6f 72 67 61 6e 69 7a 61 ...top..organiza 0020: 74 69 6f 6e 61 6c 55 6e 69 74 tionalUnit objectClass: top objectClass: organizationalUnit ldap_get_attribute_ber ldap_msgfree ldap_result ld 0x48425040 msgid -1 wait4msg ld 0x48425040 msgid -1 (infinite timeout) wait4msg continue ld 0x48425040 msgid -1 all 0 ** ld 0x48425040 Connections: * host: mail port: 389 (default) refcnt: 2 status: Connected last used: Wed Mar 11 10:15:15 2009 ** ld 0x48425040 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ld 0x48425040 request count 1 (abandoned 0) ** ld 0x48425040 Response Queue: Empty ld 0x48425040 response count 0 ldap_chkResponseList ld 0x48425040 msgid -1 all 0 ldap_chkResponseList returns ld 0x48425040 NULL ldap_int_select read1msg: ld 0x48425040 msgid -1 all 0 ber_get_next ldap_read: want=8, got=8 0000: 30 81 b3 02 01 02 64 81 0.....d. ldap_read: want=174, got=174 -x-x-x-x-x-x-x-x-x- 0010: 2e 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f 72 74 .ru,ou=transport -x-x-x-x-x-x-x-x-x- 0030: 75 30 7b 30 19 04 0c 64 65 6c 69 76 65 72 79 4d u0{0...deliveryM 0040: 6f 64 65 31 09 04 07 76 69 72 74 75 61 6c 30 17 ode1...virtual0. -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0080: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 1f 04 ..objectClass1.. 0090: 09 71 6d 61 69 6c 55 73 65 72 04 12 6f 72 67 61 .qmailUser..orga 00a0: 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 nizationalUnit ber_get_next: tag 0x30 len 179 contents: ber_dump: buf=0x48422180 ptr=0x48422180 end=0x48422233 len=179 -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0030: 2c 64 63 3d 72 75 30 7b 30 19 04 0c 64 65 6c 69 ,dc=ru0{0...deli 0040: 76 65 72 79 4d 6f 64 65 31 09 04 07 76 69 72 74 veryMode1...virt 0050: 75 61 6c 30 17 04 04 6d 61 69 6c 31 0f 04 0d 6f ual0...mail1...o 0060: 6c 79 6d 70 75 73 6e 73 70 2e 72 75 30 15 04 02 lympusnsp.ru0... -x-x-x-x-x-x-x-x-x- 0080: 2e 72 75 30 2e 04 0b 6f 62 6a 65 63 74 43 6c 61 .ru0...objectCla 0090: 73 73 31 1f 04 09 71 6d 61 69 6c 55 73 65 72 04 ss1...qmailUser. 00a0: 12 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 .organizationalU 00b0: 6e 69 74 nit read1msg: ld 0x48425040 msgid 2 message type search-entry ldap_get_dn_ber ber_scanf fmt ({ml{) ber: ber_dump: buf=0x48422180 ptr=0x48422183 end=0x48422233 len=176 -x-x-x-x-x-x-x-x-x- 0010: 73 70 2e 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f sp.ru,ou=transpo -x-x-x-x-x-x-x-x-x- 0030: 3d 72 75 30 7b 30 19 04 0c 64 65 6c 69 76 65 72 =ru0{0...deliver 0040: 79 4d 6f 64 65 31 09 04 07 76 69 72 74 75 61 6c yMode1...virtual -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0080: 30 2e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0090: 1f 04 09 71 6d 61 69 6c 55 73 65 72 04 12 6f 72 ...qmailUser..or 00a0: 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 ganizationalUnit ldap_dn2ufn ldap_dn_normalize => ldap_bv2dn(ou=testnsp.ru,ou=transport,dc=test,dc=ru,0) <= ldap_bv2dn(ou=testnsp.ru,ou=transport,dc=test,dc=ru)=0 => ldap_dn2bv(64) <= ldap_dn2bv(testnsp.ru, transport, test.ru)=0 # testnsp.ru, transport, test.ru dn: ou=testnsp.ru,ou=transport,dc=test,dc=ru ber_scanf fmt ({xx) ber: ber_dump: buf=0x48422180 ptr=0x48422183 end=0x48422233 len=176 -x-x-x-x-x-x-x-x-x- 0010: 73 70 2e 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f sp.ru,ou=transpo -x-x-x-x-x-x-x-x-x- 0030: 3d 72 75 00 7b 30 19 04 0c 64 65 6c 69 76 65 72 =ru.{0...deliver 0040: 79 4d 6f 64 65 31 09 04 07 76 69 72 74 75 61 6c yMode1...virtual -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0080: 30 2e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0090: 1f 04 09 71 6d 61 69 6c 55 73 65 72 04 12 6f 72 ...qmailUser..or 00a0: 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 ganizationalUnit ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48422180 ptr=0x484221b8 end=0x48422233 len=123 0000: 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f 64 65 0...deliveryMode 0010: 31 09 04 07 76 69 72 74 75 61 6c 30 17 04 04 6d 1...virtual0...m -x-x-x-x-x-x-x-x-x- 0030: 70 2e 72 75 30 15 04 02 6f 75 31 0f 04 0d 6f 6c p.ru0...ou1...ol 0040: 79 6d 70 75 73 6e 73 70 2e 72 75 30 2e 04 0b 6f ympusnsp.ru0...o 0050: 62 6a 65 63 74 43 6c 61 73 73 31 1f 04 09 71 6d bjectClass1...qm 0060: 61 69 6c 55 73 65 72 04 12 6f 72 67 61 6e 69 7a ailUser..organiz 0070: 61 74 69 6f 6e 61 6c 55 6e 69 74 ationalUnit deliveryMode: virtual ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48422180 ptr=0x484221d3 end=0x48422233 len=96 -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0030: 30 2e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 0...objectClass1 0040: 1f 04 09 71 6d 61 69 6c 55 73 65 72 04 12 6f 72 ...qmailUser..or 0050: 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 ganizationalUnit mail: testnsp.ru ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48422180 ptr=0x484221ec end=0x48422233 len=71 -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0020: 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 tClass1...qmailU 0030: 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f ser..organizatio 0040: 6e 61 6c 55 6e 69 74 nalUnit ou: testnsp.ru ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48422180 ptr=0x48422203 end=0x48422233 len=48 0000: 00 2e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 ....objectClass1 0010: 1f 04 09 71 6d 61 69 6c 55 73 65 72 04 12 6f 72 ...qmailUser..or 0020: 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 ganizationalUnit objectClass: qmailUser objectClass: organizationalUnit ldap_get_attribute_ber ldap_msgfree ldap_result ld 0x48425040 msgid -1 wait4msg ld 0x48425040 msgid -1 (infinite timeout) wait4msg continue ld 0x48425040 msgid -1 all 0 ** ld 0x48425040 Connections: * host: mail port: 389 (default) refcnt: 2 status: Connected last used: Wed Mar 11 10:15:15 2009 ** ld 0x48425040 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ld 0x48425040 request count 1 (abandoned 0) ** ld 0x48425040 Response Queue: Empty ld 0x48425040 response count 0 ldap_chkResponseList ld 0x48425040 msgid -1 all 0 ldap_chkResponseList returns ld 0x48425040 NULL ldap_int_select read1msg: ld 0x48425040 msgid -1 all 0 ber_get_next ldap_read: want=8, got=8 0000: 30 81 aa 02 01 02 64 81 0.....d. ldap_read: want=165, got=165 -x-x-x-x-x-x-x-x-x- 0010: 2c 6f 75 3d 74 72 61 6e 73 70 6f 72 74 2c 64 63 ,ou=transport,dc -x-x-x-x-x-x-x-x-x- 0030: 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f 64 65 0...deliveryMode 0040: 31 09 04 07 76 69 72 74 75 61 6c 30 14 04 04 6d 1...virtual0...m -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0070: 75 73 2e 72 75 30 2e 04 0b 6f 62 6a 65 63 74 43 us.ru0...objectC 0080: 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 73 65 lass1...qmailUse 0090: 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 r..organizationa 00a0: 6c 55 6e 69 74 lUnit ber_get_next: tag 0x30 len 170 contents: ber_dump: buf=0x48433060 ptr=0x48433060 end=0x4843310a len=170 -x-x-x-x-x-x-x-x-x- 0010: 75 73 2e 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f us.ru,ou=transpo -x-x-x-x-x-x-x-x-x- 0030: 3d 72 75 30 75 30 19 04 0c 64 65 6c 69 76 65 72 =ru0u0...deliver 0040: 79 4d 6f 64 65 31 09 04 07 76 69 72 74 75 61 6c yMode1...virtual -x-x-x-x-x-x-x-x-x- 0060: 70 75 73 2e 72 75 30 12 04 02 6f 75 31 0c 04 0a pus.ru0...ou1... -x-x-x-x-x-x-x-x-x- 0080: 6a 65 63 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 jectClass1...qma 0090: 69 6c 55 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 ilUser..organiza 00a0: 74 69 6f 6e 61 6c 55 6e 69 74 tionalUnit read1msg: ld 0x48425040 msgid 2 message type search-entry ldap_get_dn_ber ber_scanf fmt ({ml{) ber: ber_dump: buf=0x48433060 ptr=0x48433063 end=0x4843310a len=167 -x-x-x-x-x-x-x-x-x- 0010: 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f 72 74 2c ru,ou=transport, -x-x-x-x-x-x-x-x-x- 0030: 30 75 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f 0u0...deliveryMo 0040: 64 65 31 09 04 07 76 69 72 74 75 61 6c 30 14 04 de1...virtual0.. -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0080: 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 tClass1...qmailU 0090: 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f ser..organizatio 00a0: 6e 61 6c 55 6e 69 74 nalUnit ldap_dn2ufn ldap_dn_normalize => ldap_bv2dn(ou=test.ru,ou=transport,dc=test,dc=ru,0) <= ldap_bv2dn(ou=test.ru,ou=transport,dc=test,dc=ru)=0 => ldap_dn2bv(64) <= ldap_dn2bv(test.ru, transport, test.ru)=0 # test.ru, transport, test.ru dn: ou=test.ru,ou=transport,dc=test,dc=ru ber_scanf fmt ({xx) ber: ber_dump: buf=0x48433060 ptr=0x48433063 end=0x4843310a len=167 -x-x-x-x-x-x-x-x-x- 0010: 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f 72 74 2c ru,ou=transport, -x-x-x-x-x-x-x-x-x- 0030: 00 75 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f .u0...deliveryMo 0040: 64 65 31 09 04 07 76 69 72 74 75 61 6c 30 14 04 de1...virtual0.. -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0080: 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 tClass1...qmailU 0090: 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f ser..organizatio 00a0: 6e 61 6c 55 6e 69 74 nalUnit ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433060 ptr=0x48433095 end=0x4843310a len=117 0000: 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f 64 65 0...deliveryMode 0010: 31 09 04 07 76 69 72 74 75 61 6c 30 14 04 04 6d 1...virtual0...m -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0040: 75 73 2e 72 75 30 2e 04 0b 6f 62 6a 65 63 74 43 us.ru0...objectC 0050: 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 73 65 lass1...qmailUse 0060: 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 r..organizationa 0070: 6c 55 6e 69 74 lUnit deliveryMode: virtual ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433060 ptr=0x484330b0 end=0x4843310a len=90 -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0030: 6a 65 63 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 jectClass1...qma 0040: 69 6c 55 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 ilUser..organiza 0050: 74 69 6f 6e 61 6c 55 6e 69 74 tionalUnit mail: test.ru ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433060 ptr=0x484330c6 end=0x4843310a len=68 -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0020: 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 73 65 72 ass1...qmailUser 0030: 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 6c ..organizational 0040: 55 6e 69 74 Unit ou: test.ru ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433060 ptr=0x484330da end=0x4843310a len=48 0000: 00 2e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 ....objectClass1 0010: 1f 04 09 71 6d 61 69 6c 55 73 65 72 04 12 6f 72 ...qmailUser..or 0020: 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 ganizationalUnit objectClass: qmailUser objectClass: organizationalUnit ldap_get_attribute_ber ldap_msgfree ldap_result ld 0x48425040 msgid -1 wait4msg ld 0x48425040 msgid -1 (infinite timeout) wait4msg continue ld 0x48425040 msgid -1 all 0 ** ld 0x48425040 Connections: * host: mail port: 389 (default) refcnt: 2 status: Connected last used: Wed Mar 11 10:15:15 2009 ** ld 0x48425040 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ld 0x48425040 request count 1 (abandoned 0) ** ld 0x48425040 Response Queue: Empty ld 0x48425040 response count 0 ldap_chkResponseList ld 0x48425040 msgid -1 all 0 ldap_chkResponseList returns ld 0x48425040 NULL ldap_int_select read1msg: ld 0x48425040 msgid -1 all 0 ber_get_next ldap_read: want=8, got=8 0000: 30 81 aa 02 01 02 64 81 0.....d. ldap_read: want=165, got=165 -x-x-x-x-x-x-x-x-x- 0010: 2c 6f 75 3d 74 72 61 6e 73 70 6f 72 74 2c 64 63 ,ou=transport,dc -x-x-x-x-x-x-x-x-x- 0030: 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f 64 65 0...deliveryMode 0040: 31 09 04 07 76 69 72 74 75 61 6c 30 14 04 04 6d 1...virtual0...m -x-x-x-x-x-x-x-x-x- 0060: 75 30 12 04 02 6f 75 31 0c 04 0a 72 75 70 72 65 u0...ou1...rupre 0070: 68 74 2e 72 75 30 2e 04 0b 6f 62 6a 65 63 74 43 ht.ru0...objectC 0080: 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 73 65 lass1...qmailUse 0090: 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 r..organizationa 00a0: 6c 55 6e 69 74 lUnit ber_get_next: tag 0x30 len 170 contents: ber_dump: buf=0x48433060 ptr=0x48433060 end=0x4843310a len=170 -x-x-x-x-x-x-x-x-x- 0010: 68 74 2e 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f ht.ru,ou=transpo -x-x-x-x-x-x-x-x-x- 0030: 3d 72 75 30 75 30 19 04 0c 64 65 6c 69 76 65 72 =ru0u0...deliver 0040: 79 4d 6f 64 65 31 09 04 07 76 69 72 74 75 61 6c yMode1...virtual -x-x-x-x-x-x-x-x-x- 0060: 65 68 74 2e 72 75 30 12 04 02 6f 75 31 0c 04 0a eht.ru0...ou1... -x-x-x-x-x-x-x-x-x- 0080: 6a 65 63 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 jectClass1...qma 0090: 69 6c 55 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 ilUser..organiza 00a0: 74 69 6f 6e 61 6c 55 6e 69 74 tionalUnit read1msg: ld 0x48425040 msgid 2 message type search-entry ldap_get_dn_ber ber_scanf fmt ({ml{) ber: ber_dump: buf=0x48433060 ptr=0x48433063 end=0x4843310a len=167 -x-x-x-x-x-x-x-x-x- 0010: 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f 72 74 2c ru,ou=transport, -x-x-x-x-x-x-x-x-x- 0030: 30 75 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f 0u0...deliveryMo 0040: 64 65 31 09 04 07 76 69 72 74 75 61 6c 30 14 04 de1...virtual0.. -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0080: 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 tClass1...qmailU 0090: 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f ser..organizatio 00a0: 6e 61 6c 55 6e 69 74 nalUnit ldap_dn2ufn ldap_dn_normalize => ldap_bv2dn(ou=rupreht.ru,ou=transport,dc=test,dc=ru,0) <= ldap_bv2dn(ou=rupreht.ru,ou=transport,dc=test,dc=ru)=0 => ldap_dn2bv(64) <= ldap_dn2bv(rupreht.ru, transport, test.ru)=0 # rupreht.ru, transport, test.ru dn: ou=rupreht.ru,ou=transport,dc=test,dc=ru ber_scanf fmt ({xx) ber: ber_dump: buf=0x48433060 ptr=0x48433063 end=0x4843310a len=167 -x-x-x-x-x-x-x-x-x- 0010: 72 75 2c 6f 75 3d 74 72 61 6e 73 70 6f 72 74 2c ru,ou=transport, -x-x-x-x-x-x-x-x-x- 0030: 00 75 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f .u0...deliveryMo 0040: 64 65 31 09 04 07 76 69 72 74 75 61 6c 30 14 04 de1...virtual0.. -x-x-x-x-x-x-x-x-x- 0060: 2e 72 75 30 12 04 02 6f 75 31 0c 04 0a 72 75 70 .ru0...ou1...rup 0070: 72 65 68 74 2e 72 75 30 2e 04 0b 6f 62 6a 65 63 reht.ru0...objec 0080: 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 tClass1...qmailU 0090: 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f ser..organizatio 00a0: 6e 61 6c 55 6e 69 74 nalUnit ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433060 ptr=0x48433095 end=0x4843310a len=117 0000: 30 19 04 0c 64 65 6c 69 76 65 72 79 4d 6f 64 65 0...deliveryMode 0010: 31 09 04 07 76 69 72 74 75 61 6c 30 14 04 04 6d 1...virtual0...m -x-x-x-x-x-x-x-x-x- -x-x-x-x-x-x-x-x-x- 0040: 68 74 2e 72 75 30 2e 04 0b 6f 62 6a 65 63 74 43 ht.ru0...objectC 0050: 6c 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 73 65 lass1...qmailUse 0060: 72 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 r..organizationa 0070: 6c 55 6e 69 74 lUnit deliveryMode: virtual ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433060 ptr=0x484330b0 end=0x4843310a len=90 -x-x-x-x-x-x-x-x-x- 0010: 65 68 74 2e 72 75 30 12 04 02 6f 75 31 0c 04 0a eht.ru0...ou1... -x-x-x-x-x-x-x-x-x- 0030: 6a 65 63 74 43 6c 61 73 73 31 1f 04 09 71 6d 61 jectClass1...qma 0040: 69 6c 55 73 65 72 04 12 6f 72 67 61 6e 69 7a 61 ilUser..organiza 0050: 74 69 6f 6e 61 6c 55 6e 69 74 tionalUnit mail: rupreht.ru ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433060 ptr=0x484330c6 end=0x4843310a len=68 -x-x-x-x-x-x-x-x-x- 0010: 74 2e 72 75 30 2e 04 0b 6f 62 6a 65 63 74 43 6c t.ru0...objectCl 0020: 61 73 73 31 1f 04 09 71 6d 61 69 6c 55 73 65 72 ass1...qmailUser 0030: 04 12 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 6c ..organizational 0040: 55 6e 69 74 Unit ou: rupreht.ru ldap_get_attribute_ber ber_scanf fmt ({mM}) ber: ber_dump: buf=0x48433060 ptr=0x484330da end=0x4843310a len=48 0000: 00 2e 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 ....objectClass1 0010: 1f 04 09 71 6d 61 69 6c 55 73 65 72 04 12 6f 72 ...qmailUser..or 0020: 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 55 6e 69 74 ganizationalUnit objectClass: qmailUser objectClass: organizationalUnit ldap_get_attribute_ber ldap_msgfree ldap_result ld 0x48425040 msgid -1 wait4msg ld 0x48425040 msgid -1 (infinite timeout) wait4msg continue ld 0x48425040 msgid -1 all 0 ** ld 0x48425040 Connections: * host: mail port: 389 (default) refcnt: 2 status: Connected last used: Wed Mar 11 10:15:15 2009 ** ld 0x48425040 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ld 0x48425040 request count 1 (abandoned 0) ** ld 0x48425040 Response Queue: Empty ld 0x48425040 response count 0 ldap_chkResponseList ld 0x48425040 msgid -1 all 0 ldap_chkResponseList returns ld 0x48425040 NULL ldap_int_select read1msg: ld 0x48425040 msgid -1 all 0 ber_get_next ldap_read: want=8, got=8 0000: 30 0c 02 01 02 65 07 0a 0....e.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x484200c0 ptr=0x484200c0 end=0x484200cc len=12 0000: 02 01 02 65 07 0a 01 00 04 00 04 00 ...e........ read1msg: ld 0x48425040 msgid 2 message type search-result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x484200c0 ptr=0x484200c3 end=0x484200cc len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ read1msg: ld 0x48425040 0 new referrals read1msg: mark request completed, ld 0x48425040 msgid 2 request done: ld 0x48425040 msgid 2 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 2, msgid 2) # search result search: 2 ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x484200c0 ptr=0x484200c3 end=0x484200cc len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ ber_scanf fmt (}) ber: ber_dump: buf=0x484200c0 ptr=0x484200cc end=0x484200cc len=0 ldap_err2string result: 0 Success ldap_msgfree # numResponses: 5 # numEntries: 4 ldap_free_connection 1 1 ldap_send_unbind ber_flush2: 7 bytes to sd 3 0000: 30 05 02 01 03 42 00 0....B. ldap_write: want=7, written=7 0000: 30 05 02 01 03 42 00 0....B. ldap_free_connection: actually freed Program received signal SIGSEGV, Segmentation fault. 0x482d7527 in calloc () from /lib/libc.so.7 (gdb) bt full #0 0x482d7527 in calloc () from /lib/libc.so.7 No symbol table info available. #1 0x482d77f6 in free () from /lib/libc.so.7 No symbol table info available. #2 0x480d015d in ber_memfree_x (p=0x48359fc0, ctx=0x0) at memory.c:152 __func__ = "ber_memfree_x" #3 0x480d0dc5 in ber_memfree (p=0x48359fc0) at memory.c:165 No locals. #4 0x080519ad in ?? () No symbol table info available. #5 0x48359fc0 in __stack_chk_guard () from /lib/libc.so.7 No symbol table info available. #6 0x00000000 in ?? () No symbol table info available. #7 0x7fbfebf8 in ?? () No symbol table info available. #8 0x0804df92 in ?? () No symbol table info available. #9 0x48425040 in ?? () No symbol table info available. #10 0x08055c86 in ?? () No symbol table info available. #11 0x00000000 in ?? () No symbol table info available. #12 0x00000000 in ?? () No symbol table info available. #13 0x00000000 in ?? () No symbol table info available. #14 0x00000000 in ?? () No symbol table info available. #15 0x00000000 in ?? () No symbol table info available. #16 0xffffffff in ?? () No symbol table info available. #17 0x08055c86 in ?? () No symbol table info available. #18 0x00000000 in ?? () No symbol table info available. #19 0x00000000 in ?? () No symbol table info available. #20 0x48425040 in ?? () No symbol table info available. #21 0x00000000 in ?? () No symbol table info available. #22 0x00000000 in ?? () No symbol table info available. ---Type <return> to continue, or q <return> to quit--- #23 0x7fbfe9dc in ?? () No symbol table info available. #24 0x00000000 in ?? () No symbol table info available. #25 0x00000000 in ?? () No symbol table info available. #26 0x00000000 in ?? () No symbol table info available. #27 0x7fbfe9dc in ?? () No symbol table info available. #28 0x48085e00 in ?? () No symbol table info available. #29 0x00000003 in ?? () No symbol table info available. #30 0x480842a0 in ?? () No symbol table info available. #31 0x00000000 in ?? () No symbol table info available. #32 0x00000000 in ?? () No symbol table info available. #33 0x00000000 in ?? () No symbol table info available. #34 0x00000000 in ?? () No symbol table info available. #35 0x00000000 in ?? () No symbol table info available. #36 0x00000000 in ?? () No symbol table info available. #37 0x00000000 in ?? () No symbol table info available. #38 0x00000000 in ?? () No symbol table info available. #39 0x4805c4bb in _rtld_error () from /libexec/ld-elf.so.1 No symbol table info available. Previous frame inner to this frame (corrupt stack?) (gdb) thread apply all bt (gdb) q The program is running. Exit anyway? (y or n) y %

1 0

Re: (ITS#5993) slapo-chain TLS issues
by duramaxlb7＠gmail.com 10 Mar '09

10 Mar '09

--00163631059d4b89b00464ca1412 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Finally got it going. I was missing chain-acl-bind which is needed for privileged users. Thanks! --00163631059d4b89b00464ca1412 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Finally got it going. I was missing chain-acl-bind which is needed for privileged users. Thanks! --00163631059d4b89b00464ca1412--

1 0

Re: (ITS#6011) test050 segfault
by quanah＠zimbra.com 10 Mar '09

10 Mar '09

--On Tuesday, March 10, 2009 1:26 AM +0000 quanah(a)zimbra.com wrote: > --On Tuesday, March 10, 2009 1:23 AM +0000 openldap-its(a)OpenLDAP.org > wrote: > > This doesn't look good to me... > > (gdb) thread 1 > [Switching to thread 1 (process 5616)]#1 0x00000000004c41ff in > slap_parse_csn_sid (csnp=0xde63140) at > ../../../servers/slapd/ldapsync.c:129 129 p = ber_bvchr( > &csn, '#' ); > (gdb) print p > $4 = 0x434388a0 "??????\210CC" > (gdb) print csn > $5 = {bv_len = 226880736, bv_val = 0x0} Unable to reproduce the segfault so far, but I got a lock in lt-slapd2 now: (gdb) thr apply all bt Thread 4 (Thread 1085503808 (LWP 26643)): #0 0x00002b89ae006496 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib64/libpthread.so.0 #1 0x00002b89ad84abd3 in ldap_pvt_thread_cond_wait (cond=0x1056b320, mutex=0x1056b2f8) at ../../../libraries/libldap_r/thr_posix.c:277 #2 0x00002b89ad849398 in ldap_pvt_thread_pool_destroy (tpool=0x7a3de8, run_pending=1) at ../../../libraries/libldap_r/tpool.c:570 #3 0x0000000000435cf5 in slapd_daemon_task (ptr=0x0) at ../../../servers/slapd/daemon.c:2600 #4 0x00002b89ae0022f7 in start_thread () from /lib64/libpthread.so.0 #5 0x000000395e0d1e3d in clone () from /lib64/libc.so.6 Thread 3 (Thread 1102289216 (LWP 26660)): #0 0x000000395e0b8c17 in sched_yield () from /lib64/libc.so.6 #1 0x00002b89ad84ab53 in ldap_pvt_thread_yield () at ../../../libraries/libldap_r/thr_posix.c:232 #2 0x00000000004b1203 in do_syncrepl (ctx=0x41b38d90, arg=0x10988850) at ../../../servers/slapd/syncrepl.c:1264 #3 0x00002b89ad8496b7 in ldap_int_thread_pool_wrapper (xpool=0x1056b2f0) at ../../../libraries/libldap_r/tpool.c:663 #4 0x00002b89ae0022f7 in start_thread () from /lib64/libpthread.so.0 #5 0x000000395e0d1e3d in clone () from /lib64/libc.so.6 Thread 2 (Thread 1119074624 (LWP 26686)): #0 0x000000395e0b8c17 in sched_yield () from /lib64/libc.so.6 #1 0x00002b89ad84ab53 in ldap_pvt_thread_yield () at ../../../libraries/libldap_r/thr_posix.c:232 #2 0x00000000004b1203 in do_syncrepl (ctx=0x42b3ad90, arg=0x10987fc0) at ../../../servers/slapd/syncrepl.c:1264 #3 0x00002b89ad8496b7 in ldap_int_thread_pool_wrapper (xpool=0x1056b2f0) at ../../../libraries/libldap_r/tpool.c:663 #4 0x00002b89ae0022f7 in start_thread () from /lib64/libpthread.so.0 #5 0x000000395e0d1e3d in clone () from /lib64/libc.so.6 Thread 1 (Thread 47870363381552 (LWP 26628)): #0 0x00002b89ae0035b5 in pthread_join () from /lib64/libpthread.so.0 #1 0x00002b89ad84ab2b in ldap_pvt_thread_join (thread=1085503808, thread_return=0x0) at ../../../libraries/libldap_r/thr_posix.c:197 #2 0x0000000000435dbf in slapd_daemon () at ../../../servers/slapd/daemon.c:2665 #3 0x0000000000418104 in main (argc=8, argv=0x7ffffd2726d8) at ../../../servers/slapd/main.c:948 #0 0x00002b89ae0035b5 in pthread_join () from /lib64/libpthread.so.0 (gdb) thread 2 [Switching to thread 2 (Thread 1119074624 (LWP 26686))]#0 0x000000395e0b8c17 in sched_yield () from /lib64/libc.so.6 (gdb) frame 2 #2 0x00000000004b1203 in do_syncrepl (ctx=0x42b3ad90, arg=0x10987fc0) at ../../../servers/slapd/syncrepl.c:1264 1264 ldap_pvt_thread_yield(); (gdb) print si->si_mutex $1 = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 1761636208, __spins = 1667449208, __list = {__prev = 0x45440027746e756f, __next = 0xa1}}, __size = '\0' <repeats 16 times>, "po\000ixAccount'\000DEï¿½\000\000\000\000\000\000", __align = 0} Why would it be stuck waiting for an unlocked mutex to be released? --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#6005)
by ando＠sys-net.it 10 Mar '09

10 Mar '09

<http://www.openldap.org/faq/data/cache/59.html> p. rupreht-mobi2(a)olympus.ru wrote: > %ldapsearch -x -w xxxxxxx -h mail -b "ou=transport,dc=test,dc=ru" -D > "cn=replic,dc=test,dc=ru" > Ok > > %ldapsearch -Wx -h mail -b "ou=transport,dc=test,dc=ru" -D > "cn=replic,dc=test,dc=ru" > Enter LDAP Password: > # extended LDIF > # > # LDAPv3 > ..... > # search result > search: 2 > result: 0 Success > > # numResponses: 5 > # numEntries: 4 > Segmentation fault Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5696) Patch - support Mozilla NSS for crypto operations
by rmeggins＠redhat.com 10 Mar '09

10 Mar '09

Kurt(a)OpenLDAP.org wrote: > On Feb 25, 2009, at 1:42 AM, hyc(a)symas.com wrote: > > >> The -compat code is LGPL. I'm considering copying the ciphersuite >> handling and >> a few other pieces out of there, directly into our tree. There's a >> lot of >> other baggage in the compat library we don't need, and there's some >> OpenSSL >> emulation that would interfere with the NSS code we already have. >> Any problem >> with excerpting the bits we need? >> > > I would need to take a very careful look at this. In general, the > answer is "NO", don't bring in LGPL code into our primary code base > (standalone LGPL in contrib is another matter). > The license change to the nss_compat_ossl package has been committed - http://svn.fedorahosted.org/svn/identity/common/trunk/nss_compat_ossl/ > -- Kurt > > > > >

1 0

(ITS#6013) test045 failing
by ghenry＠OpenLDAP.org 10 Mar '09

10 Mar '09

Full_Name: Gavin Henry Version: RE_2_4 OS: Fedora 10 i386 URL: ftp://ftp.openldap.org/incoming/test045-syncreplication-proxied-10.03.09.ta… Submission from: (NULL) (212.159.59.85) Submitted by: ghenry ./run test045 Cleaning up test run directory leftover from previous run. Running ./scripts/test045-syncreplication-proxied... running defines.sh Starting master slapd on TCP/IP port 9011... Using ldapsearch to check that master slapd is running... Using ldapadd to create the context prefix entry in the master... Starting slave slapd on TCP/IP port 9012... Using ldapsearch to check that slave slapd is running... Starting proxy slapd on TCP/IP port 9013... Using ldapsearch to check that proxy slapd is running... 1 > Using ldapadd to populate the master directory... 1 < Comparing retrieved entries from master and slave... 2 > Stopping the provider, sleeping 15 seconds and restarting it... Using ldapsearch to check that master slapd is running... Using ldapmodify to modify master directory... Waiting 7 seconds for syncrepl to receive changes... Waiting 7 seconds for syncrepl to receive changes... Waiting 7 seconds for syncrepl to receive changes... 2 < Comparing retrieved entries from master and slave... test failed - master and slave databases differ testrun attached. Thanks, Gavin.

1 0

(ITS#6005)
by rupreht-mobi2＠olympus.ru 10 Mar '09

10 Mar '09

%ldapsearch -x -w xxxxxxx -h mail -b "ou=transport,dc=test,dc=ru" -D "cn=replic,dc=test,dc=ru" Ok %ldapsearch -Wx -h mail -b "ou=transport,dc=test,dc=ru" -D "cn=replic,dc=test,dc=ru" Enter LDAP Password: # extended LDIF # # LDAPv3 ..... # search result search: 2 result: 0 Success # numResponses: 5 # numEntries: 4 Segmentation fault

1 0

Re: (ITS#6012) segmentation fault triggered with slapcat
by hyc＠symas.com 10 Mar '09

10 Mar '09

martin.konold(a)erfrakon.de wrote: > Full_Name: Martin Konold > Version: 2.4.15 > OS: Linux > URL: http://www.erfrakon.de/konold/openldap-2.4.15.empty-db-segfault.patch > Submission from: (NULL) (91.46.180.44) > > > Previous versions of OpenLDAP could show a sig11 when doing slapcat (using bdb > backend). > > The version 2.4.15 improved in this respect already though doing a slapcat with > an emtpy db still results in a segmentation fault. > > The following small patch by andreas.mack at erfrakon.de resolves this issue > > http://www.erfrakon.de/konold/openldap-2.4.15.empty-db-segfault.patch > > The patch is used by the Kolab Project in productive installations What exactly do you mean by an empty db? I see: >>> ada:~/OD/o24/tests> rm testrun/db.1.a/* ada:~/OD/o24/tests> ../servers/slapd/slapd -Tc -f testrun/slapd.1.conf bdb_db_open: warning - no DB_CONFIG file found in directory /home/hyc/OD/o24/tests/testrun/db.1.a: (2). Expect poor performance for suffix "dc=example,dc=com". bdb_db_open: database "dc=example,dc=com": db_open(/home/hyc/OD/o24/tests/testrun/db.1.a/id2entry.bdb) failed: No such file or directory (2). backend_startup_one: bi_db_open failed! (2) slap_startup failed ada:~/OD/o24/tests> <<< Please provide steps to reproduce the segfault, thanks. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#6012) segmentation fault triggered with slapcat
by martin.konold＠erfrakon.de 10 Mar '09

10 Mar '09

Full_Name: Martin Konold Version: 2.4.15 OS: Linux URL: http://www.erfrakon.de/konold/openldap-2.4.15.empty-db-segfault.patch Submission from: (NULL) (91.46.180.44) Previous versions of OpenLDAP could show a sig11 when doing slapcat (using bdb backend). The version 2.4.15 improved in this respect already though doing a slapcat with an emtpy db still results in a segmentation fault. The following small patch by andreas.mack at erfrakon.de resolves this issue http://www.erfrakon.de/konold/openldap-2.4.15.empty-db-segfault.patch The patch is used by the Kolab Project in productive installations Regards, -- martin

1 0

Re: (ITS#5983) ldappasswd returns "Additional info: password hash failed" in Solaris 10 SPARC
by mariusp44＠gmail.com 10 Mar '09

10 Mar '09

so I finally found what's the problem. I run openldap in chroot. In Solaris, function lutil_entropy() uses /dev/urandom (if configure script finds it which is my case) to generate random strings for salt. Since in chroot it was not able to open /dev/urandom since it was not existent in chroot jail and there is no any error message loged in the lutil_entropy() when open() returns value <0. it simply returns up to calling function. Once I mknod dev/urandom in chroot everything started to work properly. So it is definately not the bug nor is it compiler flaw. Not sure if it's required by coding standards but I would log some informative message if function fails to open a device apart from very generic "implementation specific" message. Thanks all for help, /M. ando(a)sys-net.it wrote: > mariusp44(a)gmail.com wrote: >> sorry, if I was misunderstood. I am not asking to do my legwork. Just >> trying to understand what is going wrong. Sorry, if it seemed that way. >> >> I installed Sun Studio 12 (latest) and the problem is the same. I don't >> think Sun Studio is not working compiler. Just looks very unlikely. IT >> compiles everything without single problem. both 32 and 64 bit memory >> models. >> >> Perhaps I was not entirely clear. Weird thing is that it is only not >> working when changing password using ldappasswd and hash is set to SMD5 >> SSHA or CRYPT. If I manually change the password setting userPassword >> after generating it with slappasswd using say SSHA, it works fine. I >> mean user can bind using password that is stored in SSHA or SMD5. That >> tells me that slapd can still do encryption properly and check against >> hashes in question. At some point it needs to generate a hash and does >> it properly. Only when slapd is asked to change a password with >> ldappasswd it is unable to generate proper hash. Unless process is >> entirely different when changing password and authorizing against password. >> I am not insisting it is a bug in slapd code. But I am running out of >> ideas what else could be wrong and was just hoping that somebody else is >> using openldap on the same architecture and perhaps experienced >> something similar. > > Since no one else is seeing the problem, I already recommended that you > step in the (non-optimized) code with a debugger and see why this > happens. The right place to start is slap_passwd_hash_type(), whose > failure is setting the error message you see. > > p. > > > Ing. Pierangelo Masarati > OpenLDAP Core Team > > SysNet s.r.l. > via Dossi, 8 - 27100 Pavia - ITALIA > http://www.sys-net.it > ----------------------------------- > Office: +39 02 23998309 > Mobile: +39 333 4963172 > Fax: +39 0382 476497 > Email: ando(a)sys-net.it > ----------------------------------- > > >

1 0

Re: (ITS#5836) hung writers
by hyc＠symas.com 10 Mar '09

10 Mar '09

quanah(a)OpenLDAP.org wrote: > --On November 28, 2008 10:49:36 PM +0000 quanah(a)OpenLDAP.org wrote: > >> slapd ends up hanging indefinitely. This happened with 8 replicas >> connected to the server, where for four of those replicas, the connection >> between the master and the replica wouldn't connect (but you could go >> from the replica to the master) at some point after the initial >> connection was made. >> >> Patch to HEAD from Howard is committed. > > > Patch from Howard needs to be expanded so that a new keyword is used for > the idle timer here, rather than the value from idletimeout. This will > require some reworking of the daemon to wake up for that interval as well. Committed to HEAD - added a writetimeout config keyword. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6011) test050 segfault
by quanah＠zimbra.com 10 Mar '09

10 Mar '09

--On Tuesday, March 10, 2009 1:23 AM +0000 openldap-its(a)OpenLDAP.org wrote: This doesn't look good to me... (gdb) thread 1 [Switching to thread 1 (process 5616)]#1 0x00000000004c41ff in slap_parse_csn_sid (csnp=0xde63140) at ../../../servers/slapd/ldapsync.c:129 129 p = ber_bvchr( &csn, '#' ); (gdb) print p $4 = 0x434388a0 "ï¿½\210CC" (gdb) print csn $5 = {bv_len = 226880736, bv_val = 0x0} --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#6011) test050 segfault
by quanah＠OpenLDAP.org 10 Mar '09

10 Mar '09

Full_Name: Quanah Gibson-Mount Version: RE24 3/9/2009 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.29.239) Current RE24 segfaults in test050 for me. Backtrace: Program terminated with signal 11, Segmentation fault. #0 0x000000395e0790f6 in memchr () from /lib64/libc.so.6 (gdb) thr apply all bt Thread 7 (process 5559): #0 0x00002b457abc55b5 in pthread_join () from /lib64/libpthread.so.0 #1 0x00002b457a40cb2b in ldap_pvt_thread_join (thread=1088002368, thread_return=0x0) at ../../../libraries/libldap_r/thr_posix.c:197 #2 0x0000000000435dbf in slapd_daemon () at ../../../servers/slapd/daemon.c:2665 #3 0x0000000000418104 in main (argc=8, argv=0x7fff306aeb18) at ../../../servers/slapd/main.c:948 Thread 6 (process 5574): #0 0x000000395e0d2228 in epoll_wait () from /lib64/libc.so.6 #1 0x0000000000435071 in slapd_daemon_task (ptr=0x0) at ../../../servers/slapd/daemon.c:2291 #2 0x00002b457abc42f7 in start_thread () from /lib64/libpthread.so.0 #3 0x000000395e0d1e3d in clone () from /lib64/libc.so.6 Thread 5 (process 5589): #0 0x000000395e0ddbe8 in __lll_mutex_lock_wait () from /lib64/libc.so.6 #1 0x000000395e0616e9 in _L_lock_39 () from /lib64/libc.so.6 #2 0x000000395e061602 in fputs () from /lib64/libc.so.6 #3 0x00002b457a660bce in ber_error_print (data=0x4171d920 "ber_scanf fmt ({mW}) ber:\n") at ../../../libraries/liblber/bprint.c:79 #4 0x00002b457a660edb in ber_pvt_log_printf (errlvl=1, loglvl=261, fmt=0x2b457a664bee "ber_scanf fmt (%s) ber:\n") at ../../../libraries/liblber/bprint.c:141 #5 0x00002b457a65be36 in ber_scanf (ber=0xde6fee0, fmt=0x516949 "{mW}") at ../../../libraries/liblber/decode.c:784 #6 0x00000000004b3434 in syncrepl_message_to_entry (si=0x2aaaac0195e0, op=0x4171e690, msg=0xde63100, modlist=0x4171e418, entry=0x4171e4e0, syncstate=1) at ../../../servers/slapd/syncrepl.c:1855 #7 0x00000000004afbe0 in do_syncrep2 (op=0x4171e690, si=0x2aaaac0195e0) at ../../../servers/slapd/syncrepl.c:887 #8 0x00000000004b1546 in do_syncrepl (ctx=0x4171ed90, arg=0x2aaaac016d00) at ../../../servers/slapd/syncrepl.c:1348 #9 0x00002b457a40b6b7 in ldap_int_thread_pool_wrapper (xpool=0xd8272f0) at ../../../libraries/libldap_r/tpool.c:663 #10 0x00002b457abc42f7 in start_thread () from /lib64/libpthread.so.0 #11 0x000000395e0d1e3d in clone () from /lib64/libc.so.6 Thread 4 (process 5590): #0 0x00000000004c3ed3 in slap_compose_sync_cookie (op=0x0, cookie=0x2aaaac017640, csn=0x0, rid=1, sid=2) at ../../../servers/slapd/ldapsync.c:47 #1 0x00000000004aefcc in do_syncrep1 (op=0x42438690, si=0x2aaaac017480) at ../../../servers/slapd/syncrepl.c:661 #2 0x00000000004b14b4 in do_syncrepl (ctx=0x42438d90, arg=0x2aaaac0182b0) at ../../../servers/slapd/syncrepl.c:1336 #3 0x00002b457a40b6b7 in ldap_int_thread_pool_wrapper (xpool=0xd8272f0) at ../../../libraries/libldap_r/tpool.c:663 #4 0x00002b457abc42f7 in start_thread () from /lib64/libpthread.so.0 #5 0x000000395e0d1e3d in clone () from /lib64/libc.so.6 Thread 3 (process 5615): #0 0x000000395e0ddbe8 in __lll_mutex_lock_wait () from /lib64/libc.so.6 #1 0x000000395e060de8 in _L_lock_101 () from /lib64/libc.so.6 #2 0x000000395e060d63 in fflush () from /lib64/libc.so.6 #3 0x00002b457a660c18 in ber_error_print (data=0x42c38850 "<= ldap_bv2dn(cn=config)=0 \n") at ../../../libraries/liblber/bprint.c:87 #4 0x00002b457a433465 in ldap_log_printf (ld=0x0, loglvl=4, fmt=0x2b457a447b90 "<= ldap_bv2dn(%s)=%d %s\n") at print.c:60 #5 0x00002b457a4201fc in ldap_bv2dn_x (bvin=0x2aaab000b1b0, dn=0x42c38f50, flags=0, ctx=0x0) at getdn.c:892 #6 0x0000000000453ccb in dnNormalize (use=2, syntax=0xd810b10, mr=0xd815030, val=0x2aaab000b1b0, out=0x2aaab000ba50, ctx=0x0) at ../../../servers/slapd/dn.c:438 #7 0x000000000045e7e4 in ordered_value_normalize (usage=2, ad=0xd81c310, mr=0xd815030, val=0x2aaab000b1b0, normalized=0x2aaab000ba50, ctx=0x0) at ../../../servers/slapd/value.c:583 #8 0x0000000000458cf3 in slap_mods_check (op=0x42c39630, ml=0x2aaab000b200, text=0x42c39238, textbuf=0x42c39130 "p\221�B", textlen=256, ctx=0x0) at ../../../servers/slapd/modify.c:625 #9 0x00000000004b35c8 in syncrepl_message_to_entry (si=0x2aaaac0177a0, op=0x42c39630, msg=0x2aaab000afa0, modlist=0x42c393b8, entry=0x42c39480, syncstate=1) at ../../../servers/slapd/syncrepl.c:1892 #10 0x00000000004afbe0 in do_syncrep2 (op=0x42c39630, si=0x2aaaac0177a0) at ../../../servers/slapd/syncrepl.c:887 #11 0x00000000004b1546 in do_syncrepl (ctx=0x42c39d90, arg=0x2aaaac00db90) at ../../../servers/slapd/syncrepl.c:1348 #12 0x0000000000439047 in connection_read_thread (ctx=0x42c39d90, argv=0x9) at ../../../servers/slapd/connection.c:1225 #13 0x00002b457a40b6b7 in ldap_int_thread_pool_wrapper (xpool=0xd8272f0) at ../../../libraries/libldap_r/tpool.c:663 #14 0x00002b457abc42f7 in start_thread () from /lib64/libpthread.so.0 #15 0x000000395e0d1e3d in clone () from /lib64/libc.so.6 Thread 2 (process 5767): #0 0x000000395e0b8c17 in sched_yield () from /lib64/libc.so.6 #1 0x00002b457a40cb53 in ldap_pvt_thread_yield () at ../../../libraries/libldap_r/thr_posix.c:232 #2 0x00000000004b1203 in do_syncrepl (ctx=0x43c3bd90, arg=0xdc43fc0) at ../../../servers/slapd/syncrepl.c:1264 #3 0x00002b457a40b6b7 in ldap_int_thread_pool_wrapper (xpool=0xd8272f0) at ../../../libraries/libldap_r/tpool.c:663 #4 0x00002b457abc42f7 in start_thread () from /lib64/libpthread.so.0 #5 0x000000395e0d1e3d in clone () from /lib64/libc.so.6 Thread 1 (process 5616): #0 0x000000395e0790f6 in memchr () from /lib64/libc.so.6 #1 0x00000000004c41ff in slap_parse_csn_sid (csnp=0xde63140) at ../../../servers/slapd/ldapsync.c:129 #2 0x00002aaaaaab9799 in syncprov_op_response (op=0x4343a630, rs=0x4343a1b0) at ../../../../servers/slapd/overlays/syncprov.c:1673 #3 0x000000000044e039 in slap_response_play (op=0x4343a630, rs=0x4343a1b0) at ../../../servers/slapd/result.c:349 #4 0x000000000044e24f in send_ldap_response (op=0x4343a630, rs=0x4343a1b0) at ../../../servers/slapd/result.c:423 #5 0x000000000044f101 in slap_send_ldap_result (op=0x4343a630, rs=0x4343a1b0) at ../../../servers/slapd/result.c:692 #6 0x00000000004272f3 in config_back_modify (op=0x4343a630, rs=0x4343a1b0) at ../../../servers/slapd/bconfig.c:5197 #7 0x00000000004c206a in overlay_op_walk (op=0x4343a630, rs=0x4343a1b0, which=op_modify, oi=0xda30020, on=0x0) at ../../../servers/slapd/backover.c:669 #8 0x00000000004c226d in over_op_func (op=0x4343a630, rs=0x4343a1b0, which=op_modify) at ../../../servers/slapd/backover.c:721 #9 0x00000000004c234b in over_op_modify (op=0x4343a630, rs=0x4343a1b0) at ../../../servers/slapd/backover.c:755 #10 0x00000000004b7209 in syncrepl_updateCookie (si=0xdc44440, op=0x4343a630, pdn=0xd83fd20, syncCookie=0x4343a420) at ../../../servers/slapd/syncrepl.c:2979 #11 0x00000000004afc79 in do_syncrep2 (op=0x4343a630, si=0xdc44440) at ../../../servers/slapd/syncrepl.c:894 #12 0x00000000004b1546 in do_syncrepl (ctx=0x4343ad90, arg=0xdc44850) at ../../../servers/slapd/syncrepl.c:1348 #13 0x0000000000439047 in connection_read_thread (ctx=0x4343ad90, argv=0xe) at ../../../servers/slapd/connection.c:1225 #14 0x00002b457a40b6b7 in ldap_int_thread_pool_wrapper (xpool=0xd8272f0) at ../../../libraries/libldap_r/tpool.c:663 #15 0x00002b457abc42f7 in start_thread () from /lib64/libpthread.so.0 #16 0x000000395e0d1e3d in clone () from /lib64/libc.so.6

1 0

ldapsearch weird results - wild card not working as expected
by Simon McGregor 10 Mar '09

10 Mar '09

I wrote a script to add groups to my ldap directory --------------------------------- #!/bin/sh # Get the latest gid gidlast="`ldapsearch -x "cn=*" -b "ou=Group,dc=mydomain,dc=com" -h myserver | grep gidNumber | awk '{ print $2 }' | sort -u | tail -n 1`" newgid="`echo "$gidlast + 1" | bc`" echo "newgid: $newgid" # Make the Mods echo "dn: cn=$1,ou=Group,dc=mydomain,dc=com" > /tmp/modify.ldap echo "changetype: add" >> /tmp/modify.ldap echo "objectClass: posixGroup" >> /tmp/modify.ldap echo "objectClass: top" >> /tmp/modify.ldap echo "cn: $1" >> /tmp/modify.ldap echo "gidNumber: $newgid" >> /tmp/modify.ldap # Run the Update ldapmodify -x -f /tmp/modify.ldap -h myserver -D cn=Manager,dc=mydomain,dc=com -w mypasswd ---------------------------------- This correctly creates a new group eg. ./mkgroup.sh mygroup01 $ ldapsearch -x "cn=mygroup01" -h myserver produces -> # mygroup01, Group, mydomain.com dn: cn=mygroup01,ou=Group,dc=mydomain,dc=com objectClass: posixGroup objectClass: top cn: mygroup01 gidNumber: 7435 memberUid: dummyuser The issue is the following: $ ldapsearch -x "cn=mygroup*" -b "ou=Group,dc=mydomain,dc=com" -h myserver | grep gidNumber | awk '{ print $2 }' | sort -u | tail -n 1 returns the result 7435 $ ldapsearch -x "cn=*" -b "ou=Group,dc=mydomain,dc=com" -h myserver | grep gidNumber | awk '{ print $2 }' | sort -u | tail -n 1 returns the result 7434 In other words the wild card is not picking up the new group even though it is actually there. Perhaps someone can show me the error of my ways but I think both results should return the same value I am running centos 5 with openldap-clients-2.3.27-8.el5_2.4 openldap-servers-2.3.27-8.el5_2.4 openldap-2.3.27-8.el5_2.4 openldap-devel-2.3.27-8.el5_2.4 The information contained in this email and any attachments is strictly confidential. If you are not the intended recipient you must not disclose or use the information contained in it. If you have received this email in error please notify us immediately by return email and delete the document. Domain Principal Pty Ltd accepts no liability for any loss or damage caused by this email or its attachments due to viruses interference interception corruption or unauthorised access.

2 1

Re: (ITS#6010) substitution for acl sets
by hyc＠symas.com 10 Mar '09

10 Mar '09

quanah(a)OpenLDAP.org wrote: > Full_Name: Quanah Gibson-Mount > Version: HEAD > OS: NA > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (75.111.29.239) > > > substitution was added for ACL sets with ITS#2285. However, as per ITS#5804, > the man page is lacking documentation on this feature. It should be added. The man page lacks documentation on sets, period... The examples in the Admin Guide only touch on one use case. I think it's time we acknowledged that this feature exists, largely unchanged from its initial inception. (Yes, features have been added, but there's been no radical redesign.) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6004) test039 seg faults
by hyc＠symas.com 10 Mar '09

10 Mar '09

michael(a)stroeder.com wrote: > Quanah Gibson-Mount wrote: >> --On Monday, March 09, 2009 4:23 PM +0000 michael(a)stroeder.com wrote: >> >>> michael(a)stroeder.com wrote: >>>> Full_Name: Michael Str?der >>>> Version: HEAD >>>> OS: openSUSE Linux 11.1 >>>> URL: >>>> Submission from: (NULL) (84.163.90.131) >>>> >>>> Will try to grab a stack trace. >>> So here's the end of the output of test039 (with HDB) and a backtrace. >>> >>> See also a tar.gz of directory testrun/: >>> http://www.stroeder.com/temp/openldap/testrun-its6004_test039_seg_faults. >>> tar.gz >> Why are the symbols missing from most of the stack frames? The build >> should always have symbols. Do you have an LD_LIBRARY_PATH set that's >> causing it to pick up some other libraries on the system that are stripped? > > Hmm, a pre-installed libldap could be picked up if -releng is already > removed from the shared lib names. Since this is switched back and forth > in CVS there's no easy way to keep my system working and maintain a > completely separate build tree. That's an issue Hallvard already raised > (with no success). Hallvard's situation was mainly due to his particular -rpath requirements. The libtool wrapper script will set LD_LIBRARY_PATH to include all of the build directories of its dependent libraries, but that didn't help because of his compiled in runpaths. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6004) test039 seg faults
by michael＠stroeder.com 10 Mar '09

10 Mar '09

Quanah Gibson-Mount wrote: > --On Monday, March 09, 2009 11:39 PM +0000 michael(a)stroeder.com wrote: > >> Quanah Gibson-Mount wrote: >>> --On Monday, March 09, 2009 4:23 PM +0000 michael(a)stroeder.com wrote: >>> >>>> michael(a)stroeder.com wrote: >>>>> Full_Name: Michael Str?der >>>>> Version: HEAD >>>>> OS: openSUSE Linux 11.1 >>>>> URL: >>>>> Submission from: (NULL) (84.163.90.131) >>>>> >>>>> Will try to grab a stack trace. >>>> >>>> So here's the end of the output of test039 (with HDB) and a backtrace. >>>> >>>> See also a tar.gz of directory testrun/: >>>> http://www.stroeder.com/temp/openldap/testrun-its6004_test039_seg_fault >>>> s. tar.gz >>> >>> Why are the symbols missing from most of the stack frames? The build >>> should always have symbols. Do you have an LD_LIBRARY_PATH set that's >>> causing it to pick up some other libraries on the system that are >>> stripped? >> >> Hmm, a pre-installed libldap could be picked up if -releng is already >> removed from the shared lib names. Since this is switched back and forth >> in CVS there's no easy way to keep my system working and maintain a >> completely separate build tree. That's an issue Hallvard already raised >> (with no success). > > Current RE24 is releng, so if your CVS tree is fully up to date, it > should not pick up any other ldap libs. Sorry, I had the RE24 local installation in the LD_LIBRARY_PATH. Hmm... Ciao, Michael.

1 0

Re: (ITS#6004) test039 seg faults
by quanah＠zimbra.com 10 Mar '09

10 Mar '09

--On Monday, March 09, 2009 11:39 PM +0000 michael(a)stroeder.com wrote: > Quanah Gibson-Mount wrote: >> --On Monday, March 09, 2009 4:23 PM +0000 michael(a)stroeder.com wrote: >> >>> michael(a)stroeder.com wrote: >>>> Full_Name: Michael Str?der >>>> Version: HEAD >>>> OS: openSUSE Linux 11.1 >>>> URL: >>>> Submission from: (NULL) (84.163.90.131) >>>> >>>> Will try to grab a stack trace. >>> >>> So here's the end of the output of test039 (with HDB) and a backtrace. >>> >>> See also a tar.gz of directory testrun/: >>> http://www.stroeder.com/temp/openldap/testrun-its6004_test039_seg_fault >>> s. tar.gz >> >> Why are the symbols missing from most of the stack frames? The build >> should always have symbols. Do you have an LD_LIBRARY_PATH set that's >> causing it to pick up some other libraries on the system that are >> stripped? > > Hmm, a pre-installed libldap could be picked up if -releng is already > removed from the shared lib names. Since this is switched back and forth > in CVS there's no easy way to keep my system working and maintain a > completely separate build tree. That's an issue Hallvard already raised > (with no success). Current RE24 is releng, so if your CVS tree is fully up to date, it should not pick up any other ldap libs. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#6004) test039 seg faults
by michael＠stroeder.com 10 Mar '09

10 Mar '09

Quanah Gibson-Mount wrote: > --On Monday, March 09, 2009 4:23 PM +0000 michael(a)stroeder.com wrote: > >> michael(a)stroeder.com wrote: >>> Full_Name: Michael Str?der >>> Version: HEAD >>> OS: openSUSE Linux 11.1 >>> URL: >>> Submission from: (NULL) (84.163.90.131) >>> >>> Will try to grab a stack trace. >> >> So here's the end of the output of test039 (with HDB) and a backtrace. >> >> See also a tar.gz of directory testrun/: >> http://www.stroeder.com/temp/openldap/testrun-its6004_test039_seg_faults. >> tar.gz > > Why are the symbols missing from most of the stack frames? The build > should always have symbols. Do you have an LD_LIBRARY_PATH set that's > causing it to pick up some other libraries on the system that are stripped? Hmm, a pre-installed libldap could be picked up if -releng is already removed from the shared lib names. Since this is switched back and forth in CVS there's no easy way to keep my system working and maintain a completely separate build tree. That's an issue Hallvard already raised (with no success). Ciao, Michael.

1 0

Re: (ITS#6004) test039 seg faults
by quanah＠zimbra.com 10 Mar '09

10 Mar '09

--On Monday, March 09, 2009 4:23 PM +0000 michael(a)stroeder.com wrote: > michael(a)stroeder.com wrote: >> Full_Name: Michael Str?der >> Version: HEAD >> OS: openSUSE Linux 11.1 >> URL: >> Submission from: (NULL) (84.163.90.131) >> >> Will try to grab a stack trace. > > So here's the end of the output of test039 (with HDB) and a backtrace. > > See also a tar.gz of directory testrun/: > http://www.stroeder.com/temp/openldap/testrun-its6004_test039_seg_faults. > tar.gz Why are the symbols missing from most of the stack frames? The build should always have symbols. Do you have an LD_LIBRARY_PATH set that's causing it to pick up some other libraries on the system that are stripped? --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#6010) substitution for acl sets
by quanah＠OpenLDAP.org 10 Mar '09

10 Mar '09

Full_Name: Quanah Gibson-Mount Version: HEAD OS: NA URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.29.239) substitution was added for ACL sets with ITS#2285. However, as per ITS#5804, the man page is lacking documentation on this feature. It should be added.

1 0

Re: (ITS#6009) test019: test failed - master and R2 slave databases differ
by quanah＠zimbra.com 09 Mar '09

09 Mar '09

Yeah, I know. ;) But there's a few fixes left to go in, including what I believe will fix what you saw. That's why I haven't called for testing yet on openldap-devel. --Quanah --On Monday, March 09, 2009 6:30 PM +0000 michael(a)stroeder.com wrote: > Quanah Gibson-Mount wrote: >> --On Monday, March 09, 2009 3:24 PM +0000 michael(a)stroeder.com wrote: >> >>> michael(a)stroeder.com wrote: >>>> Full_Name: Michael Str?der >>>> Version: RE24 >>> >>> Seems to work in HEAD on the very same system. >> >> RE24 is not ready for testing yet. > > Well, Howard recently recommended to use it (see below). So I'm testing > as usual... > > Ciao, Michael. > > -------- Original Message -------- > Subject: Re: RE24 (2.4.15) slapd consuming large amounts of CPU > Date: Sat, 07 Mar 2009 00:47:57 -0800 > From: Howard Chu <hyc(a)symas.com> > To: John Morrissey <jwm(a)horde.net> > CC: openldap-software(a)openldap.org > References: <20090304185521.GA3184(a)boost.horde.net> > <49AEE757.3000502(a)symas.com> <20090306141020.GA7876(a)boost.horde.net> > > John Morrissey wrote: >> On Wed, Mar 04, 2009 at 12:40:55PM -0800, Howard Chu wrote: >>> John Morrissey wrote: >>>> A backtrace (below) shows many threads waiting on a mutex in >>>> bdb_cache_*(). >>> From the trace it looks similar to ITS#5860. The patches for this >>> are in HEAD, not yet released. >> >> With an shm_key, slapd CPU consumption dropped noticably and has been >> running long enough to make the leak apparent. >> >> Since this second-round fix for ITS#5860 has been merged into RE24, >> do you recommend running that, or should I cherry-pick >> 1.120.2.{21,22} into our local packaging? > > At this point I would just use RE24. Unless any new critical bugs show > up in the next few days, it's very likely what will be 2.4.16. > > -- > -- Howard Chu > CTO, Symas Corp. http://www.symas.com > Director, Highland Sun http://highlandsun.com/hyc/ > Chief Architect, OpenLDAP http://www.openldap.org/project/ > > -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#6009) test019: test failed - master and R2 slave databases differ
by michael＠stroeder.com 09 Mar '09

09 Mar '09

Quanah Gibson-Mount wrote: > --On Monday, March 09, 2009 3:24 PM +0000 michael(a)stroeder.com wrote: > >> michael(a)stroeder.com wrote: >>> Full_Name: Michael Str?der >>> Version: RE24 >> >> Seems to work in HEAD on the very same system. > > RE24 is not ready for testing yet. Well, Howard recently recommended to use it (see below). So I'm testing as usual... Ciao, Michael. -------- Original Message -------- Subject: Re: RE24 (2.4.15) slapd consuming large amounts of CPU Date: Sat, 07 Mar 2009 00:47:57 -0800 From: Howard Chu <hyc(a)symas.com> To: John Morrissey <jwm(a)horde.net> CC: openldap-software(a)openldap.org References: <20090304185521.GA3184(a)boost.horde.net> <49AEE757.3000502(a)symas.com> <20090306141020.GA7876(a)boost.horde.net> John Morrissey wrote: > On Wed, Mar 04, 2009 at 12:40:55PM -0800, Howard Chu wrote: >> John Morrissey wrote: >>> A backtrace (below) shows many threads waiting on a mutex in >>> bdb_cache_*(). >> From the trace it looks similar to ITS#5860. The patches for this >> are in HEAD, not yet released. > > With an shm_key, slapd CPU consumption dropped noticably and has been > running long enough to make the leak apparent. > > Since this second-round fix for ITS#5860 has been merged into RE24, > do you recommend running that, or should I cherry-pick > 1.120.2.{21,22} into our local packaging? At this point I would just use RE24. Unless any new critical bugs show up in the next few days, it's very likely what will be 2.4.16. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6009) test019: test failed - master and R2 slave databases differ
by quanah＠zimbra.com 09 Mar '09

09 Mar '09

--On Monday, March 09, 2009 3:24 PM +0000 michael(a)stroeder.com wrote: > michael(a)stroeder.com wrote: >> Full_Name: Michael Str?der >> Version: RE24 > > Seems to work in HEAD on the very same system. RE24 is not ready for testing yet. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#6004) test039 seg faults
by michael＠stroeder.com 09 Mar '09

09 Mar '09

Howard Chu wrote: > michael(a)stroeder.com wrote: >> P.S.: I had this case more than once: A test script exited with error >> when being run within 'make test' but then I can't reproduce the issue. > > Yeah, that's the nature of things. We should probably add a "ulimit -c > unlimited" to the run script so we can always get a core file. Already added this to my build script which also invokes 'make test'. > Problems of this type that occur during "make test" but not when > running the individual script seem to have a dependency on the memory > pressure from other processes. (I.e., when "make test" is running > there are more processes than when you simply run an individual > script.) Well, I thought running OpenOffice, Seamonkey and an additional virtual machine on my ancient 1 GB laptop is enough "memory pressure". But it seems to happen rarely. > In this case, it's most likely ITS#5733, which still hasn't been tracked > down. Anyway I was able to obtain a stack-trace. See my other posting. Ciao, Michael.

1 0

Re: (ITS#5993) slapo-chain TLS issues
by duramaxlb7＠gmail.com 09 Mar '09

09 Mar '09

--0016364edc12a6fc2e0464b21737 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit overlay chain chain-rebind-as-user FALSE chain-uri ldap://XXXXXX chain-rebind-as-user TRUE chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=XXXX,dc=com" credentials=secret mode=self starttls=yes tls_reqcert=never chain-tls start chain-return-error TRUE ----------- bind as rootdn ---------------------- conn=7 fd=14 ACCEPT from IP=10.1.1.10:42992 (IP=0.0.0.0:389) conn=7 op=0 EXT oid=1.3.6.1.4.1.1466.20037 conn=7 op=0 STARTTLS conn=7 op=0 RESULT oid= err=0 text= conn=7 fd=14 TLS established tls_ssf=256 ssf=256 conn=7 op=1 BIND dn="cn=Manager,dc=XXXX,dc=com" method=128 conn=7 op=1 BIND dn="cn=Manager,dc=XXXX,dc=com" mech=SIMPLE ssf=0 conn=7 op=1 RESULT tag=97 err=0 text= conn=7 op=2 SRCH base="uid=USERNAME,ou=People,dc=XXXX,dc=com" scope=0 deref=0 filter="(objectClass=*)" conn=7 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= conn=7 op=3 MOD dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" conn=7 op=3 MOD attr=userPassword userPassword TLS certificate verification: Error, self signed certificate in certificate chain TLS: can't connect: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed. conn=7 op=3 RESULT tag=103 err=52 text= conn=7 op=4 UNBIND conn=7 fd=14 closed ----------- bind as normal user ---------------------- conn=11 fd=14 ACCEPT from IP=10.1.1.10:36765 (IP=0.0.0.0:389) conn=11 op=0 EXT oid=1.3.6.1.4.1.1466.20037 conn=11 op=0 STARTTLS conn=11 op=0 RESULT oid= err=0 text= conn=11 fd=14 TLS established tls_ssf=256 ssf=256 conn=11 op=1 BIND dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" method=128 conn=11 op=1 BIND dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" mech=SIMPLE ssf=0 conn=11 op=1 RESULT tag=97 err=0 text= conn=11 op=2 SRCH base="uid=USERNAME,ou=People,dc=XXXX,dc=com" scope=0 deref=0 filter="(objectClass=*)" conn=11 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= conn=11 op=3 MOD dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" conn=11 op=3 MOD attr=userPassword userPassword conn=11 op=3 RESULT tag=103 err=0 text= conn=11 op=4 UNBIND conn=11 fd=14 closed conn=12 fd=14 ACCEPT from IP=10.1.1.10:36766 (IP=0.0.0.0:389) conn=12 op=0 EXT oid=1.3.6.1.4.1.1466.20037 conn=12 op=0 STARTTLS conn=12 op=0 RESULT oid= err=0 text= conn=12 fd=14 TLS established tls_ssf=256 ssf=256 conn=12 op=1 BIND dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" method=128 conn=12 op=1 RESULT tag=97 err=49 text= conn=13 fd=24 ACCEPT from IP=10.1.1.10:36767 (IP=0.0.0.0:389) conn=13 op=0 EXT oid=1.3.6.1.4.1.1466.20037 conn=13 op=0 STARTTLS conn=13 op=0 RESULT oid= err=0 text= conn=13 fd=24 TLS established tls_ssf=256 ssf=256 conn=13 op=1 BIND dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" method=128 conn=13 op=1 RESULT tag=97 err=49 text= conn=12 op=2 UNBIND conn=12 fd=14 closed conn=13 op=2 UNBIND conn=13 fd=24 closed --0016364edc12a6fc2e0464b21737 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable overlay chain chain-rebind-as-user FALSE chain-uri ldap://XXXXXX c= hain-rebind-as-user TRUE chain-idassert-bind =A0=A0=A0 bindmethod=3Ds= imple =A0=A0=A0 binddn=3D"cn=3DManager,dc=3DXXXX,dc=3Dcom" = =A0=A0=A0 credentials=3Dsecret =A0=A0=A0 mode=3Dself =A0=A0=A0 starttls=3Dyes =A0=A0=A0 tls_reqcert= =3Dnever chain-tls start chain-return-error TRUE ----------- b= ind as rootdn ---------------------- conn=3D7 fd=3D14 ACCEPT from IP= =3D<a href=3D"http://10.1.1.10:42992">10.1.1.10:42992</a> (IP=3D<a href=3D"= http://0.0.0.0:389">0.0.0.0:389</a>) conn=3D7 op=3D0 EXT oid=3D1.3.6.1.4.1.1466.20037 conn=3D7 op=3D0 STARTTL= S conn=3D7 op=3D0 RESULT oid=3D err=3D0 text=3D conn=3D7 fd=3D14 TLS = established tls_ssf=3D256 ssf=3D256 conn=3D7 op=3D1 BIND dn=3D"cn= =3DManager,dc=3DXXXX,dc=3Dcom" method=3D128 conn=3D7 op=3D1 BIND dn=3D"cn=3DManager,dc=3DXXXX,dc=3Dcom" mech= =3DSIMPLE ssf=3D0 conn=3D7 op=3D1 RESULT tag=3D97 err=3D0 text=3D con= n=3D7 op=3D2 SRCH base=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dco= m" scope=3D0 deref=3D0 filter=3D"(objectClass=3D*)" conn=3D7 op=3D2 SEARCH RESULT tag=3D101 err=3D0 nentries=3D1 text=3D con= n=3D7 op=3D3 MOD dn=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom&q= uot; conn=3D7 op=3D3 MOD attr=3DuserPassword userPassword TLS certifi= cate verification: Error, self signed certificate in certificate chain TLS: can't connect: error:14090086:SSL routines:SSL3_GET_SERVER_CER= TIFICATE:certificate verify failed. conn=3D7 op=3D3 RESULT tag=3D103 err= =3D52 text=3D conn=3D7 op=3D4 UNBIND conn=3D7 fd=3D14 closed <= br>----------- bind as normal user ---------------------- conn=3D11 fd=3D14 ACCEPT from IP=3D<a href=3D"http://10.1.1.10:36765">1= 0.1.1.10:36765</a> (IP=3D<a href=3D"http://0.0.0.0:389">0.0.0.0:389</a>)<br= >conn=3D11 op=3D0 EXT oid=3D1.3.6.1.4.1.1466.20037 conn=3D11 op=3D0 STAR= TTLS conn=3D11 op=3D0 RESULT oid=3D err=3D0 text=3D conn=3D11 fd=3D14 TLS established tls_ssf=3D256 ssf=3D256 conn=3D11 op= =3D1 BIND dn=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom" me= thod=3D128 conn=3D11 op=3D1 BIND dn=3D"uid=3DUSERNAME,ou=3DPeople,d= c=3DXXXX,dc=3Dcom" mech=3DSIMPLE ssf=3D0 conn=3D11 op=3D1 RESULT tag=3D97 err=3D0 text=3D conn=3D11 op=3D2 SRCH b= ase=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom" scope=3D0 d= eref=3D0 filter=3D"(objectClass=3D*)" conn=3D11 op=3D2 SEARCH = RESULT tag=3D101 err=3D0 nentries=3D1 text=3D conn=3D11 op=3D3 MOD dn=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dc= om" conn=3D11 op=3D3 MOD attr=3DuserPassword userPassword conn= =3D11 op=3D3 RESULT tag=3D103 err=3D0 text=3D conn=3D11 op=3D4 UNBIND<br= >conn=3D11 fd=3D14 closed conn=3D12 fd=3D14 ACCEPT from IP=3D<a href=3D"= http://10.1.1.10:36766">10.1.1.10:36766</a> (IP=3D<a href=3D"http://0.0.0.0= :389">0.0.0.0:389</a>) conn=3D12 op=3D0 EXT oid=3D1.3.6.1.4.1.1466.20037 conn=3D12 op=3D0 START= TLS conn=3D12 op=3D0 RESULT oid=3D err=3D0 text=3D conn=3D12 fd=3D14 = TLS established tls_ssf=3D256 ssf=3D256 conn=3D12 op=3D1 BIND dn=3D&quot= ;uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom" method=3D128 conn=3D12 op=3D1 RESULT tag=3D97 err=3D49 text=3D conn=3D13 fd=3D24 ACCE= PT from IP=3D<a href=3D"http://10.1.1.10:36767">10.1.1.10:36767</a> (IP=3D<= a href=3D"http://0.0.0.0:389">0.0.0.0:389</a>) conn=3D13 op=3D0 EXT oid= =3D1.3.6.1.4.1.1466.20037 conn=3D13 op=3D0 STARTTLS conn=3D13 op=3D0 RESULT oid=3D err=3D0 text=3D= conn=3D13 fd=3D24 TLS established tls_ssf=3D256 ssf=3D256 conn=3D13 = op=3D1 BIND dn=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom" = method=3D128 conn=3D13 op=3D1 RESULT tag=3D97 err=3D49 text=3D conn=3D12 op=3D2 UNBIND conn=3D12 fd=3D14 closed conn=3D13 op=3D2 UNB= IND conn=3D13 fd=3D24 closed --0016364edc12a6fc2e0464b21737--

1 0

Re: (ITS#6004) test039 seg faults
by michael＠stroeder.com 09 Mar '09

09 Mar '09

michael(a)stroeder.com wrote: > Full_Name: Michael Ströder > Version: HEAD > OS: openSUSE Linux 11.1 > URL: > Submission from: (NULL) (84.163.90.131) > > Will try to grab a stack trace. So here's the end of the output of test039 (with HDB) and a backtrace. See also a tar.gz of directory testrun/: http://www.stroeder.com/temp/openldap/testrun-its6004_test039_seg_faults.ta… Ciao, Michael. ----------------------------- snip ----------------------------- PID=12116 - Read(1000): entry="cn=Database 1,cn=Databases,cn=Monitor". PID=12113 - Search(500): base="cn=Monitor" scope=sub filter="(objectClass=*)" attrs=cn (more...). PID=12119 - Bind(1000): dn="". PID=12125 - Search(500): base="o=Example,c=US" scope=sub filter="(cn=Barbara Jensen)" attrs=cn (more...). slapd-search PID=12113: ldap_sasl_bind_s: Can't contact LDAP server (-1) bindDN="cn=Manager,o=Example,c=US" slapd-read PID=12116: ldap_sasl_bind_s: Can't contact LDAP server (-1) slapd-bind PID=12119: ldap_sasl_bind_s: Can't contact LDAP server (-1) PID=12119 - Bind done (-1). slapd-search PID=12125: ldap_sasl_bind_s: Can't contact LDAP server (-1) bindDN="cn=Manager,o=Example,c=US" PID=12133 - Read(1000): entry="cn=Barbara Jensen,ou=Information Technology Division,ou=People,o=Example,c=US". PID=12142 - Bind(1000): dn="cn=Barbara Jensen,ou=Information Technology Division,ou=People,o=Example,c=US". slapd-read PID=12133: ldap_sasl_bind_s: Can't contact LDAP server (-1) slapd-bind PID=12142: ldap_sasl_bind_s: Can't contact LDAP server (-1) PID=12142 - Bind done (-1). PID=12156 - Search(500): base="ou=people,o=Example,c=US" scope=sub filter="(cn=Bjorn Jensen)" attrs=cn (more...). slapd-search PID=12156: ldap_sasl_bind_s: Can't contact LDAP server (-1) bindDN="cn=Manager,o=Example,c=US" stopping: child exited with status 1 ./scripts/test039-glue-ldap-concurrency: line 188: 11492 Aborted (core dumped) $SLAPD -f $CONF3 -h $URI3 -d $LVL $TIMING > $LOG3 2>&1 slapd-tester failed (1)! ./scripts/test039-glue-ldap-concurrency: line 193: kill: (11492) - No such process >>>>> ./scripts/test039-glue-ldap-concurrency failed (exit 1) make[2]: *** [hdb-yes] Error 1 ----------------------------- snip ----------------------------- (gdb) info threads 18 Thread 11817 0x40070f0d in ber_printf (ber=0x454c4c74, fmt=0x81c654c "{O{") at encode.c:855 17 Thread 11522 0xffffe430 in __kernel_vsyscall () 16 Thread 11754 0xffffe430 in __kernel_vsyscall () 15 Thread 11815 0xffffe430 in __kernel_vsyscall () 14 Thread 11739 0xffffe430 in __kernel_vsyscall () 13 Thread 11507 0xffffe430 in __kernel_vsyscall () 12 Thread 11781 0xffffe430 in __kernel_vsyscall () 11 Thread 11782 0xffffe430 in __kernel_vsyscall () 10 Thread 11749 0xffffe430 in __kernel_vsyscall () 9 Thread 11813 0xffffe430 in __kernel_vsyscall () 8 Thread 11697 0xffffe430 in __kernel_vsyscall () 7 Thread 11821 0xffffe430 in __kernel_vsyscall () 6 Thread 11717 0xffffe430 in __kernel_vsyscall () 5 Thread 11719 0xffffe430 in __kernel_vsyscall () 4 Thread 11703 0xffffe430 in __kernel_vsyscall () 3 Thread 11492 0xffffe430 in __kernel_vsyscall () 2 Thread 11660 0xffffe430 in __kernel_vsyscall () * 1 Thread 11679 0xffffe430 in __kernel_vsyscall () (gdb) thread apply all bt Thread 18 (Thread 11817): #0 0x40070f0d in ber_printf (ber=0x454c4c74, fmt=0x81c654c "{O{") at encode.c:855 #1 0x0807b5f8 in ?? () #2 0x0810da3a in ?? () #3 0x0810d94c in ?? () #4 0x0810dd5d in ?? () #5 0x0806bcf3 in ?? () #6 0x080d2f0c in ?? () #7 0x080d3ad4 in ?? () #8 0x0806c568 in ?? () #9 0x0806983b in ?? () #10 0x0806a297 in ?? () #11 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x83ee578) at tpool.c:663 #12 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #13 0x405793be in clone () from /lib/libc.so.6 Thread 17 (Thread 11522): #0 0xffffe430 in __kernel_vsyscall () #1 0x40250b3b in write () from /lib/libpthread.so.0 #2 0x4007547b in sb_stream_write (sbiod=0x45c12248, buf=0x40fad17c, len=65) at sockbuf.c:535 #3 0x400745ba in sb_debug_write (sbiod=0x45c10310, buf=0x40fad17c, len=65) at sockbuf.c:852 #4 0x400749c2 in ber_int_sb_write (sb=0x45c0e490, buf=0x40fad17c, len=65) at sockbuf.c:445 #5 0x40072244 in ber_flush2 (sb=0x45c0e490, ber=0x40fa9c74, freeit=0) at io.c:256 #6 0x0807a49f in ?? () #7 0x0807c5bb in ?? () #8 0x0810da3a in ?? () #9 0x0810d94c in ?? () #10 0x0810dd5d in ?? () #11 0x0806bcf3 in ?? () #12 0x080d2f0c in ?? () #13 0x080d3ad4 in ?? () #14 0x0806c568 in ?? () #15 0x0806983b in ?? () #16 0x0806a297 in ?? () #17 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x4073d578) at tpool.c:663 #18 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #19 0x405793be in clone () from /lib/libc.so.6 Thread 16 (Thread 11754): #0 0xffffe430 in __kernel_vsyscall () #1 0x40250b3b in write () from /lib/libpthread.so.0 #2 0x4007547b in sb_stream_write (sbiod=0x8425cd0, buf=0x43cbf534, len=120) at sockbuf.c:535 #3 0x400745ba in sb_debug_write (sbiod=0x8425dd8, buf=0x43cbf534, len=120) at sockbuf.c:852 #4 0x400749c2 in ber_int_sb_write (sb=0x45c02a08, buf=0x43cbf534, len=120) at sockbuf.c:445 #5 0x40072244 in ber_flush2 (sb=0x45c02a08, ber=0x43cbba1c, freeit=0) at io.c:256 #6 0x0807a49f in ?? () #7 0x0807cd4e in ?? () #8 0x0807d96f in ?? () #9 0x080fb8ea in ?? () #10 0x080d13d8 in ?? () #11 0x080d2e96 in ?? () #12 0x080d3ad4 in ?? () #13 0x0806bcf3 in ?? () #14 0x080d2f0c in ?? () #15 0x080d3ad4 in ?? () #16 0x0806c568 in ?? () #17 0x0806983b in ?? () #18 0x0806a297 in ?? () #19 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x40739b34) at tpool.c:663 #20 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #21 0x405793be in clone () from /lib/libc.so.6 Thread 15 (Thread 11815): #0 0xffffe430 in __kernel_vsyscall () #1 0x402508dc in __lll_unlock_wake () from /lib/libpthread.so.0 #2 0x4024d0bb in _L_unlock_94 () from /lib/libpthread.so.0 #3 0x4024cccc in __pthread_mutex_unlock_usercnt () from /lib/libpthread.so.0 #4 0x4003001d in ldap_pvt_thread_mutex_unlock (mutex=0x4073bc24) at thr_posix.c:308 #5 0x0807a63b in ?? () #6 0x0807cd4e in ?? () #7 0x0807d96f in ?? () #8 0x081499f0 in ?? () #9 0x0814ad83 in ?? () #10 0x080d2f0c in ?? () #11 0x080d3ad4 in ?? () #12 0x0808835c in ?? () #13 0x080d2f0c in ?? () #14 0x080d3ad4 in ?? () #15 0x08088e92 in ?? () #16 0x0806983b in ?? () #17 0x0806a297 in ?? () #18 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x4073bcc0) at tpool.c:663 #19 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #20 0x405793be in clone () from /lib/libc.so.6 Thread 14 (Thread 11739): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83d7b58, timeout=0x432b7b20) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83d7b58, msgid=943, all=0, timeout=0x432b7c1c, result=0x432b7c34) at result.c:335 #4 0x080fbbab in ?? () #5 0x080d0b50 in ?? () #6 0x080d18e4 in ?? () #7 0x080d2e96 in ?? () #8 0x080d3ad4 in ?? () #9 0x0806bcf3 in ?? () #10 0x080d2f0c in ?? () #11 0x080d3ad4 in ?? () #12 0x0806c568 in ?? () #13 0x0806983b in ?? () #14 0x0806a297 in ?? () #15 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x0) at tpool.c:663 #16 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #17 0x405793be in clone () from /lib/libc.so.6 Thread 13 (Thread 11507): #0 0xffffe430 in __kernel_vsyscall () #1 0x40579c56 in epoll_wait () from /lib/libc.so.6 #2 0x0806627f in ?? () #3 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #4 0x405793be in clone () from /lib/libc.so.6 Thread 12 (Thread 11781): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x838e580, timeout=0x441bdb20) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x838e580, msgid=588, all=0, timeout=0x441bdc1c, result=0x441bdc34) at result.c:335 #4 0x080fbbab in ?? () #5 0x080d0b50 in ?? () #6 0x080d18e4 in ?? () #7 0x080d2e96 in ?? () #8 0x080d3ad4 in ?? () #9 0x0806bcf3 in ?? () #10 0x080d2f0c in ?? () #11 0x080d3ad4 in ?? () #12 0x0806c568 in ?? () #13 0x0806983b in ?? () #14 0x0806a297 in ?? () #15 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x0) at tpool.c:663 #16 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #17 0x405793be in clone () from /lib/libc.so.6 Thread 11 (Thread 11782): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83ceda8, timeout=0x445beb20) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83ceda8, msgid=777, all=0, timeout=0x445bec1c, result=0x445bec34) at result.c:335 #4 0x080fbbab in ?? () #5 0x080d0b50 in ?? () #6 0x080d18b3 in ?? () #7 0x080d2e96 in ?? () #8 0x080d3ad4 in ?? () #9 0x0806bcf3 in ?? () #10 0x080d2f0c in ?? () #11 0x080d3ad4 in ?? () #12 0x0806c568 in ?? () #13 0x0806983b in ?? () #14 0x0806a297 in ?? () #15 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x0) at tpool.c:663 #16 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #17 0x405793be in clone () from /lib/libc.so.6 Thread 10 (Thread 11749): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83c6820, timeout=0x437babe0) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83c6820, msgid=237, all=1, timeout=0x437bac50, result=0x437bac58) at result.c:335 #4 0x08149840 in ?? () #5 0x081520a1 in ?? () #6 0x080d2f0c in ?? () #7 0x080d3ad4 in ?? () #8 0x08083edb in ?? () #9 0x080d2f0c in ?? () #10 0x080d3ad4 in ?? () #11 0x08084496 in ?? () #12 0x0806983b in ?? () #13 0x0806a297 in ?? () #14 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x437bb0c8) at tpool.c:663 #15 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #16 0x405793be in clone () from /lib/libc.so.6 Thread 9 (Thread 11813): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83fe760, timeout=0x44bc2be0) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83fe760, msgid=457, all=1, timeout=0x44bc2c50, result=0x44bc2c58) at result.c:335 #4 0x08149840 in ?? () #5 0x081520a1 in ?? () #6 0x080d2f0c in ?? () #7 0x080d3ad4 in ?? () #8 0x08083edb in ?? () #9 0x080d2f0c in ?? () #10 0x080d3ad4 in ?? () #11 0x08084496 in ?? () #12 0x0806983b in ?? () #13 0x0806a297 in ?? () #14 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x44bc30c8) at tpool.c:663 #15 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #16 0x405793be in clone () from /lib/libc.so.6 Thread 8 (Thread 11697): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x45c050a8, timeout=0x41dafb60) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x45c050a8, msgid=446, all=1, timeout=0x41dafbd0, result=0x41dafbd8) at result.c:335 #4 0x08149840 in ?? () #5 0x080f9b8e in ?? () #6 0x080d2f0c in ?? () #7 0x080d3ad4 in ?? () #8 0x0808526f in ?? () #9 0x080d2f0c in ?? () #10 0x080d3ad4 in ?? () #11 0x08085dd7 in ?? () #12 0x0806983b in ?? () #13 0x0806a297 in ?? () #14 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x41db00c8) at tpool.c:663 #15 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #16 0x405793be in clone () from /lib/libc.so.6 Thread 7 (Thread 11821): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83adec0, timeout=0x458c69f0) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83adec0, msgid=137, all=1, timeout=0x458c6a60, result=0x458c6a68) at result.c:335 #4 0x08149840 in ?? () #5 0x08146d87 in ?? () #6 0x080d2f0c in ?? () #7 0x080d3ad4 in ?? () #8 0x0807100f in ?? () #9 0x080d2f0c in ?? () #10 0x080d3ad4 in ?? () #11 0x08071bab in ?? () #12 0x0806983b in ?? () #13 0x0806a297 in ?? () #14 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x458c70c8) at tpool.c:663 #15 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #16 0x405793be in clone () from /lib/libc.so.6 Thread 6 (Thread 11717): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83bfbf8, timeout=0x427b3b60) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83bfbf8, msgid=17, all=1, timeout=0x427b3bd0, result=0x427b3bd8) at result.c:335 #4 0x08149840 in ?? () #5 0x080f9b8e in ?? () #6 0x080d2f0c in ?? () #7 0x080d3ad4 in ?? () #8 0x0808526f in ?? () #9 0x080d2f0c in ?? () #10 0x080d3ad4 in ?? () #11 0x08085dd7 in ?? () #12 0x0806983b in ?? () #13 0x0806a297 in ?? () #14 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x427b40c8) at tpool.c:663 #15 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #16 0x405793be in clone () from /lib/libc.so.6 Thread 5 (Thread 11719): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83fe600, timeout=0x42db69f0) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83fe600, msgid=782, all=1, timeout=0x42db6a60, result=0x42db6a68) at result.c:335 #4 0x08149840 in ?? () #5 0x08146d87 in ?? () #6 0x080d2f0c in ?? () #7 0x080d3ad4 in ?? () #8 0x0807100f in ?? () #9 0x080d2f0c in ?? () #10 0x080d3ad4 in ?? () #11 0x08071bab in ?? () #12 0x0806983b in ?? () #13 0x0806a297 in ?? () #14 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x42db70c8) at tpool.c:663 #15 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #16 0x405793be in clone () from /lib/libc.so.6 Thread 4 (Thread 11703): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83b6ae8, timeout=0x423b2b60) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83b6ae8, msgid=18, all=1, timeout=0x423b2bd0, result=0x423b2bd8) at result.c:335 #4 0x08149840 in ?? () #5 0x080f9b8e in ?? () #6 0x080d2f0c in ?? () #7 0x080d3ad4 in ?? () #8 0x0808526f in ?? () #9 0x080d2f0c in ?? () #10 0x080d3ad4 in ?? () #11 0x08085dd7 in ?? () #12 0x0806983b in ?? () #13 0x0806a297 in ?? () #14 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x423b30c8) at tpool.c:663 #15 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #16 0x405793be in clone () from /lib/libc.so.6 Thread 3 (Thread 11492): #0 0xffffe430 in __kernel_vsyscall () #1 0x4024a747 in pthread_join () from /lib/libpthread.so.0 #2 0x40030254 in ldap_pvt_thread_join (thread=1085975440, thread_return=0x0) at thr_posix.c:197 #3 0x08063793 in ?? () #4 0x08050f6d in ?? () #5 0x404be705 in __libc_start_main () from /lib/libc.so.6 #6 0x0804f6b1 in ?? () Thread 2 (Thread 11660): #0 0xffffe430 in __kernel_vsyscall () #1 0x4056f6a7 in poll () from /lib/libc.so.6 #2 0x40049f75 in ldap_int_select (ld=0x83c0c98, timeout=0x414abb20) at os-ip.c:1056 #3 0x40031d6f in ldap_result (ld=0x83c0c98, msgid=445, all=0, timeout=0x414abc1c, result=0x414abc34) at result.c:335 #4 0x080fbbab in ?? () #5 0x080d0b50 in ?? () #6 0x080d18e4 in ?? () #7 0x080d2e96 in ?? () #8 0x080d3ad4 in ?? () #9 0x0806bcf3 in ?? () #10 0x080d2f0c in ?? () #11 0x080d3ad4 in ?? () #12 0x0806c568 in ?? () #13 0x0806983b in ?? () #14 0x0806a297 in ?? () #15 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x0) at tpool.c:663 #16 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #17 0x405793be in clone () from /lib/libc.so.6 Thread 1 (Thread 11679): #0 0xffffe430 in __kernel_vsyscall () #1 0x404d2990 in raise () from /lib/libc.so.6 #2 0x404d42c8 in abort () from /lib/libc.so.6 #3 0x404cb78e in __assert_fail () from /lib/libc.so.6 #4 0x081487f3 in ?? () #5 0x08149515 in ?? () #6 0x081495e3 in ?? () #7 0x0814b039 in ?? () #8 0x080d2f0c in ?? () #9 0x080d3ad4 in ?? () #10 0x0808835c in ?? () #11 0x080d2f0c in ?? () #12 0x080d3ad4 in ?? () #13 0x08088e92 in ?? () #14 0x0806983b in ?? () #15 0x0806a297 in ?? () #16 0x4002f480 in ldap_int_thread_pool_wrapper (xpool=0x0) at tpool.c:663 #17 0x4024a1b5 in start_thread () from /lib/libpthread.so.0 #18 0x405793be in clone () from /lib/libc.so.6

1 0

Re: (ITS#5997) slapo-chain TLS issues
by duramaxlb7＠gmail.com 09 Mar '09

09 Mar '09

--0016364270d292f5780464b1d5a8 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit overlay chain chain-rebind-as-user FALSE chain-uri ldap://XXXXXX chain-rebind-as-user TRUE chain-idassert-bind bindmethod=simple binddn="cn=Manager,dc=XXXX,dc=com" credentials=secret mode=self starttls=yes tls_reqcert=never chain-tls start chain-return-error TRUE ----------- bind as rootdn ---------------------- conn=7 fd=14 ACCEPT from IP=10.1.1.10:42992 (IP=0.0.0.0:389) conn=7 op=0 EXT oid=1.3.6.1.4.1.1466.20037 conn=7 op=0 STARTTLS conn=7 op=0 RESULT oid= err=0 text= conn=7 fd=14 TLS established tls_ssf=256 ssf=256 conn=7 op=1 BIND dn="cn=Manager,dc=XXXX,dc=com" method=128 conn=7 op=1 BIND dn="cn=Manager,dc=XXXX,dc=com" mech=SIMPLE ssf=0 conn=7 op=1 RESULT tag=97 err=0 text= conn=7 op=2 SRCH base="uid=USERNAME,ou=People,dc=XXXX,dc=com" scope=0 deref=0 filter="(objectClass=*)" conn=7 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= conn=7 op=3 MOD dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" conn=7 op=3 MOD attr=userPassword userPassword TLS certificate verification: Error, self signed certificate in certificate chain TLS: can't connect: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed. conn=7 op=3 RESULT tag=103 err=52 text= conn=7 op=4 UNBIND conn=7 fd=14 closed ----------- bind as normal user ---------------------- conn=11 fd=14 ACCEPT from IP=10.1.1.10:36765 (IP=0.0.0.0:389) conn=11 op=0 EXT oid=1.3.6.1.4.1.1466.20037 conn=11 op=0 STARTTLS conn=11 op=0 RESULT oid= err=0 text= conn=11 fd=14 TLS established tls_ssf=256 ssf=256 conn=11 op=1 BIND dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" method=128 conn=11 op=1 BIND dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" mech=SIMPLE ssf=0 conn=11 op=1 RESULT tag=97 err=0 text= conn=11 op=2 SRCH base="uid=USERNAME,ou=People,dc=XXXX,dc=com" scope=0 deref=0 filter="(objectClass=*)" conn=11 op=2 SEARCH RESULT tag=101 err=0 nentries=1 text= conn=11 op=3 MOD dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" conn=11 op=3 MOD attr=userPassword userPassword conn=11 op=3 RESULT tag=103 err=0 text= conn=11 op=4 UNBIND conn=11 fd=14 closed conn=12 fd=14 ACCEPT from IP=10.1.1.10:36766 (IP=0.0.0.0:389) conn=12 op=0 EXT oid=1.3.6.1.4.1.1466.20037 conn=12 op=0 STARTTLS conn=12 op=0 RESULT oid= err=0 text= conn=12 fd=14 TLS established tls_ssf=256 ssf=256 conn=12 op=1 BIND dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" method=128 conn=12 op=1 RESULT tag=97 err=49 text= conn=13 fd=24 ACCEPT from IP=10.1.1.10:36767 (IP=0.0.0.0:389) conn=13 op=0 EXT oid=1.3.6.1.4.1.1466.20037 conn=13 op=0 STARTTLS conn=13 op=0 RESULT oid= err=0 text= conn=13 fd=24 TLS established tls_ssf=256 ssf=256 conn=13 op=1 BIND dn="uid=USERNAME,ou=People,dc=XXXX,dc=com" method=128 conn=13 op=1 RESULT tag=97 err=49 text= conn=12 op=2 UNBIND conn=12 fd=14 closed conn=13 op=2 UNBIND conn=13 fd=24 closed --0016364270d292f5780464b1d5a8 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable overlay chain chain-rebind-as-user FALSE chain-uri ldap://XXXXXX c= hain-rebind-as-user TRUE chain-idassert-bind =A0=A0=A0 bindmethod=3Ds= imple =A0=A0=A0 binddn=3D"cn=3DManager,dc=3DXXXX,dc=3Dcom" = =A0=A0=A0 credentials=3Dsecret =A0=A0=A0 mode=3Dself =A0=A0=A0 starttls=3Dyes =A0=A0=A0 tls_reqcert= =3Dnever chain-tls start chain-return-error TRUE -----= ------ bind as rootdn ---------------------- conn=3D7 fd=3D14 ACCEPT= from IP=3D<a href=3D"http://10.1.1.10:42992">10.1.1.10:42992</a> (IP=3D<a = href=3D"http://0.0.0.0:389">0.0.0.0:389</a>) conn=3D7 op=3D0 EXT oid=3D1.3.6.1.4.1.1466.20037 conn=3D7 op=3D0 STARTTL= S conn=3D7 op=3D0 RESULT oid=3D err=3D0 text=3D conn=3D7 fd=3D14 TLS = established tls_ssf=3D256 ssf=3D256 conn=3D7 op=3D1 BIND dn=3D"cn= =3DManager,dc=3DXXXX,dc=3Dcom" method=3D128 conn=3D7 op=3D1 BIND dn=3D"cn=3DManager,dc=3DXXXX,dc=3Dcom" mech= =3DSIMPLE ssf=3D0 conn=3D7 op=3D1 RESULT tag=3D97 err=3D0 text=3D con= n=3D7 op=3D2 SRCH base=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dco= m" scope=3D0 deref=3D0 filter=3D"(objectClass=3D*)" conn=3D7 op=3D2 SEARCH RESULT tag=3D101 err=3D0 nentries=3D1 text=3D con= n=3D7 op=3D3 MOD dn=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom&q= uot; conn=3D7 op=3D3 MOD attr=3DuserPassword userPassword TLS certifi= cate verification: Error, self signed certificate in certificate chain TLS: can't connect: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFI= CATE:certificate verify failed. conn=3D7 op=3D3 RESULT tag=3D103 err=3D5= 2 text=3D conn=3D7 op=3D4 UNBIND conn=3D7 fd=3D14 closed -= ---------- bind as normal user ---------------------- conn=3D11 fd=3D14 ACCEPT from IP=3D<a href=3D"http://10.1.1.10:36765">1= 0.1.1.10:36765</a> (IP=3D<a href=3D"http://0.0.0.0:389">0.0.0.0:389</a>)<br= >conn=3D11 op=3D0 EXT oid=3D1.3.6.1.4.1.1466.20037 conn=3D11 op=3D0 STAR= TTLS conn=3D11 op=3D0 RESULT oid=3D err=3D0 text=3D conn=3D11 fd=3D14 TLS established tls_ssf=3D256 ssf=3D256 conn=3D11 op= =3D1 BIND dn=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom" me= thod=3D128 conn=3D11 op=3D1 BIND dn=3D"uid=3DUSERNAME,ou=3DPeople,d= c=3DXXXX,dc=3Dcom" mech=3DSIMPLE ssf=3D0 conn=3D11 op=3D1 RESULT tag=3D97 err=3D0 text=3D conn=3D11 op=3D2 SRCH b= ase=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom" scope=3D0 d= eref=3D0 filter=3D"(objectClass=3D*)" conn=3D11 op=3D2 SEARCH = RESULT tag=3D101 err=3D0 nentries=3D1 text=3D conn=3D11 op=3D3 MOD dn=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dc= om" conn=3D11 op=3D3 MOD attr=3DuserPassword userPassword conn= =3D11 op=3D3 RESULT tag=3D103 err=3D0 text=3D conn=3D11 op=3D4 UNBIND<br= >conn=3D11 fd=3D14 closed conn=3D12 fd=3D14 ACCEPT from IP=3D<a href=3D"= http://10.1.1.10:36766">10.1.1.10:36766</a> (IP=3D<a href=3D"http://0.0.0.0= :389">0.0.0.0:389</a>) conn=3D12 op=3D0 EXT oid=3D1.3.6.1.4.1.1466.20037 conn=3D12 op=3D0 START= TLS conn=3D12 op=3D0 RESULT oid=3D err=3D0 text=3D conn=3D12 fd=3D14 = TLS established tls_ssf=3D256 ssf=3D256 conn=3D12 op=3D1 BIND dn=3D&quot= ;uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom" method=3D128 conn=3D12 op=3D1 RESULT tag=3D97 err=3D49 text=3D conn=3D13 fd=3D24 ACCE= PT from IP=3D<a href=3D"http://10.1.1.10:36767">10.1.1.10:36767</a> (IP=3D<= a href=3D"http://0.0.0.0:389">0.0.0.0:389</a>) conn=3D13 op=3D0 EXT oid= =3D1.3.6.1.4.1.1466.20037 conn=3D13 op=3D0 STARTTLS conn=3D13 op=3D0 RESULT oid=3D err=3D0 text=3D= conn=3D13 fd=3D24 TLS established tls_ssf=3D256 ssf=3D256 conn=3D13 = op=3D1 BIND dn=3D"uid=3DUSERNAME,ou=3DPeople,dc=3DXXXX,dc=3Dcom" = method=3D128 conn=3D13 op=3D1 RESULT tag=3D97 err=3D49 text=3D conn=3D12 op=3D2 UNBIND conn=3D12 fd=3D14 closed conn=3D13 op=3D2 UNB= IND conn=3D13 fd=3D24 closed --0016364270d292f5780464b1d5a8--

1 0

Re: (ITS#6009) test019: test failed - master and R2 slave databases differ
by michael＠stroeder.com 09 Mar '09

09 Mar '09

michael(a)stroeder.com wrote: > Full_Name: Michael Ströder > Version: RE24 Seems to work in HEAD on the very same system. Ciao, Michael.

1 0

(ITS#6009) test019: test failed - master and R2 slave databases differ
by michael＠stroeder.com 09 Mar '09

09 Mar '09

Full_Name: Michael Ströder Version: RE24 OS: openSUSE Linux 11.1 URL: Submission from: (NULL) (84.163.91.160) $ ./run -b bdb test019 Running ./scripts/test019-syncreplication-cascade... running defines.sh Starting master slapd on TCP/IP port 9011... Using ldapsearch to check that master slapd (pid=5018) is running... Waiting 5 seconds for slapd to start... Using ldapadd to create the context prefix entry in the master... Starting R1 slave slapd on TCP/IP port 9012... Using ldapsearch to check that R1 slave slapd (pid=5094) is running... Starting R2 slave slapd on TCP/IP port 9013... Using ldapsearch to check that R2 slave slapd (pid=5126) is running... Starting P1 slave slapd on TCP/IP port 9014... Using ldapsearch to check that P1 slave slapd (pid=5158) is running... Starting P2 slave slapd on TCP/IP port 9015... Using ldapsearch to check that P2 slave slapd (pid=5190) is running... Starting P3 slave slapd on TCP/IP port 9016... Using ldapsearch to check that P3 slave slapd (pid=5222) is running... Using ldapadd to populate the master directory... Waiting 10 seconds for syncrepl to receive changes... Using ldapmodify to modify master directory... Waiting 10 seconds for syncrepl to receive changes... Performing modify alone on provider... Waiting 10 seconds for syncrepl to receive changes... Using ldapsearch to read all the entries from the master... Using ldapsearch to read all the entries from the R1 slave... Using ldapsearch to read all the entries from the R2 slave... Using ldapsearch to read all the entries from the P1 slave... Using ldapsearch to read all the entries from the P2 slave... Using ldapsearch to read all the entries from the P3 slave... Filtering master ldapsearch results... Filtering R1 slave ldapsearch results... Filtering R2 slave ldapsearch results... Filtering P1 slave ldapsearch results... Filtering P2 slave ldapsearch results... Filtering P3 slave ldapsearch results... Comparing retrieved entries from master and R1 slave... Comparing retrieved entries from master and R2 slave... test failed - master and R2 slave databases differ

1 0

Delta-syncrepl and mirrormode
by julien puntous 09 Mar '09

09 Mar '09

HI I am trying to do a mirrormode with 2 servers and deltasyncrepl. Is it possible? We have some problemes with the update referrals, we can t write on the both servers. Thank you, Julien Puntous

2 1

Re: (ITS#5988) entries skipped in n-way mutimaster replication
by hyc＠symas.com 09 Mar '09

09 Mar '09

adrien.futschik(a)atosorigin.com wrote: > Full_Name: Adrien Futschik > Version: 2.4.15 > OS: Linux RHEL 4-5& Solaris 10 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (192.54.193.59) > > > Hello, > > As suggested by Howard Chu, I am filling an ITS for a problem I encountered when > testing N-way multimaster with OpenLDAP 2.4.15. > > Here is the situation : > > I have been testing n-way multimaster replication with OpenLDAP for a while > now (from 2.4.11, to 2.4.15) and just when I though that everything was > working perfectly, I dicided to test N-way multimaster not only with 2 masters > on different servers, but with 4 ! (all 4 servers are time-synced using NTP) Some changes have been made in the syncprov overlay's queue management in CVS HEAD. The test050 script has also been changed to test up to 9 masters, and it passes for me with several hundred iterations of 9 servers. (Some of the timing delays have to be increased though.) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6007) README - db.4.7.25.patch no longer used
by hyc＠symas.com 09 Mar '09

09 Mar '09

rich(a)mirch.com wrote: > Full_Name: Rich Mirch > Version: 2.4.15 > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (98.215.53.133) > > > The README REQUIRED SOFTWARE section instructs to install a BDB patch - "In > addition, for BDB 4.7, it is advised to also use the supplied > build/db.4.7.25.patch.". Per the CHANGES document the patch was removed in the > 2.4.14 release. I believe this should be removed from the README file. > Thanks, that note has now been removed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs