- openldap-bugs - openldap.org

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by Kurt＠OpenLDAP.org 06 Aug '08

06 Aug '08

On Aug 4, 2008, at 9:56 PM, h.b.furuseth(a)usit.uio.no wrote: > Kurt(a)OpenLDAP.org writes: >> On Aug 4, 2008, at 2:06 PM, h.b.furuseth(a)usit.uio.no wrote: >>> Kurt(a)OpenLDAP.org writes: >>>> I note as well that properly deploying release signing requires >>>> more than script modification. For instance, one does need to >>>> consider that the host to sign the releases might itself been >>>> taken over and the implications of such a takeover. >>> >>> For that part, signatures in the 'https:' site would help. >> >> I think you need to re-think that assertion. > > Er, yes, I was thinking of the "outside" equivalent, hacking DNS and > "taking over" that way. Those mounting such attacks are more likely to take over google.com than openldap.org. > I have the impression that's the most common way to "take over" a > site, but I may be wrong. I would say it's a more commonly talked about "take over" approach at present. Though I don't know if its more common that other major site "take over" approaches. But "take over" of small sites, such are openldap.org, are different because the goal is different. Folks "take over" major sites (generally in an isolated way, such as via a particular ISP) because there is a reasonable chance that users will access the taken over site. These take overs often are attempts to install malware on user systems (be careful, that google search button might not be a true google search button). Take over of small sites is commonly done to deface the site, to gain notoriety or to grind an axe or something. So, I'm not particularly worried about former, but am worried about the latter. But you and others brought up https:// in the context of a PGP signing discussion. This is, I think, confused. -- Kurt

1 0

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by Kurt＠OpenLDAP.org 06 Aug '08

06 Aug '08

I figure that an attacker can convince most downloaders who might verify a PGP signature that the project no longer signs releases, making the project's use of PGP signatures moot. While it can be argued that there might be some downloaders who want to establish rigid signature verification procedures and follow them, I simply haven't heard anyone claim to be such a downloader. And even if there where a few that might now claim this, I think the amount of work involved (both initially and on a per release basis) is worth the time spent. I would argue time is better spent on improvements that are benefit most downloaders, such as a more comprehensive web/ftp change detection/notice system. -- Kurt

1 0

Re: (ITS#5642) Double free on exit, when specific attributetype is defined
by hyc＠symas.com 06 Aug '08

06 Aug '08

stef(a)memberwebs.com wrote: > Full_Name: Stef Walter > Version: 2.4.11 > OS: FreeBSD 6.3-RELEASE-p2 > URL: > Submission from: (NULL) (38.99.5.20) > > > When the following line is present in the schema (or slapd.conf), then upon exit > any slap* process aborts due to a double free of memory: > > attributetype ( 278.1.3.6.1 NAME 'requireClass' SUP objectClass ) > > > The OID is obviously fictional. This can be triggered reliably by running: > > # slaptest This also occurs in 2.3, and is specific to objectClass and a few other built in attributes with custom matching rules. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5645) <suffix> invalid DN 21 (Invalid syntax)
by support＠msm-projects.net 06 Aug '08

06 Aug '08

Full_Name: MSM-Projects Support Version: 2.4.11 OS: Debian Linux (2.6.18-6-xen-amd64) URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (213.9.60.153) We installed a ldap server version 2.4.11. With default slapd.conf the server is starting. Changing the default-suffix to a version we need (building a replica with an existing host), we get error: line 54 (suffix "o=my-domain, c=com") >>> dnPrettyNormal: <o=my-domain, c=com> => ldap_bv2dn(o=my-domain, c=com,0) <= ldap_bv2dn(o=my-domain, c=com)=0 ldap_err2string /usr/local/openldap/etc/openldap/slapd.conf: line 54: <suffix> invalid DN 21 (Invalid syntax)

1 0

Re: (ITS#5581) slapd: search.c:970: oc_filter: Assertion `f != ((void *)0)' failed.
by stef＠memberwebs.com 05 Aug '08

05 Aug '08

I get this problem with 2.4.11 (but not with 2.4.10). My slapo-unique configuration is as follows: unique_uri ldap:///?cn?sub unique_uri ldap:///?uid,login?sub?(!(disabled=TRUE)) The filter seems valid to me, but please correct me if I'm wrong.

1 0

Re: (ITS#5644) make test000 core dumps
by michael＠stroeder.com 05 Aug '08

05 Aug '08

Pierangelo Masarati wrote: > ----- michael(a)stroeder.com wrote: > >> michael(a)stroeder.com wrote: >>> Maybe slapd starts but this is not correctly detected by the test >> script? >> >> This does not seem to be the case. > > Can you start it manually? Good idea. Indeed that's possible: cd tests/ ../servers/slapd/.libs/lt-slapd -d 1 -h ldap://127.0.0.1:9011 -f testrun/slapd.1.conf Ciao, Michael.

1 0

Re: (ITS#5644) make test000 core dumps
by ando＠sys-net.it 05 Aug '08

05 Aug '08

----- michael(a)stroeder.com wrote: > michael(a)stroeder.com wrote: > > Maybe slapd starts but this is not correctly detected by the test > script? > > This does not seem to be the case. Can you start it manually? p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5644) make test000 core dumps
by michael＠stroeder.com 05 Aug '08

05 Aug '08

michael(a)stroeder.com wrote: > Maybe slapd starts but this is not correctly detected by the test script? This does not seem to be the case. Ciao, Michael.

1 0

Re: (ITS#5644) make test000 core dumps
by michael＠stroeder.com 05 Aug '08

05 Aug '08

Pierangelo Masarati wrote: >> slapd starting >> daemon: listen(ldap://localhost:9011/, 5) failed errno=3D98 (Address >> already in use) > > ^^^^ ? p. I already saw this but this is caused by the 2nd try to start slapd. You might have noticed several lines of console output saying "Waiting 5 seconds for slapd to start...". I've checked with fuser 9011/tcp and by looking at output of 'netstat -anp' before invoking 'make test' that there's no process bound on that port. Maybe slapd starts but this is not correctly detected by the test script? Ciao, Michael.

1 0

Re: (ITS#5644) make test000 core dumps
by ando＠sys-net.it 05 Aug '08

05 Aug '08

> slapd starting > daemon: listen(ldap://localhost:9011/, 5) failed errno=3D98 (Address > alre= > ady in use) ^^^^ ? p. > lt-slapd shutdown: initiated > =3D=3D=3D=3D> bdb_cache_release_all > lt-slapd destroy: freeing system resources. > slapd stopped. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5644) make test000 core dumps
by michael＠stroeder.com 05 Aug '08

05 Aug '08

This is a multi-part message in MIME format. --------------000504090501070603080100 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Pierangelo Masarati wrote: > ----- "Michael Ströder" <michael(a)stroeder.com> wrote: > >> Pierangelo Masarati wrote: >>> Are you sure you're loading the sasl mechs you've compiled for? >> That's a typical issue with SASL (see SASL_PATH, in case). >>>> #2 0x405df014 in ?? () from /usr/lib/libldap-2.4.so.2 >> Hmm, it seems the problem is rather that the LDAP client libs from the >> >> RPM package installed by openSUSE are loaded instead the ones from the >> >> build directory. That's bad. Any way around this when running 'make >> test'? > > LD_LIBRARY_PATH to your just built libs? Hmm, I don't have a clue what's going on. I tried with my RE24 source tree from which I've successfully built a couple of days ago. I've removed openSUSE packages for OpenLDAP client libs and cyrus-sasl-ldap-auxprop. Still no success. It does not core dump anymore but slapd does not start (see below). Ciao, Michael. -------------------------------- snip --------------------------------- >>>>> Starting test000-rootdse ... running defines.sh Starting slapd on TCP/IP port 9011... Using ldapsearch to retrieve the root DSE... Waiting 5 seconds for slapd to start... Waiting 5 seconds for slapd to start... Waiting 5 seconds for slapd to start... Waiting 5 seconds for slapd to start... Waiting 5 seconds for slapd to start... Waiting 5 seconds for slapd to start... ./scripts/test000-rootdse: line 66: kill: (21057) - No such process ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) >>>>> Test failed >>>>> ./scripts/test000-rootdse failed (exit 255) make[2]: *** [bdb-yes] Error 255 make[2]: Leaving directory `/home/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/tests' make[1]: *** [test] Error 2 make[1]: Leaving directory `/home/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/tests' make: *** [test] Error 2 -------------------------------- snip --------------------------------- --------------000504090501070603080100 Content-Type: text/x-log; name="slapd.1.log" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline; filename="slapd.1.log" @(#) $OpenLDAP: slapd 2.4.X (Aug 5 2008 13:40:27) $ michael@nb2:/home/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/ser= vers/slapd ldap_pvt_gethostbyname_a: host=3Dnb2, r=3D0 daemon_init: ldap://localhost:9011/ daemon_init: listen on ldap://localhost:9011/ daemon_init: 1 listeners to open... ldap_url_parse_ext(ldap://localhost:9011/) daemon: listener initialized ldap://localhost:9011/ daemon_init: 3 listeners opened ldap_create lt-slapd init: initiated server. slap_sasl_init: initialized! bdb_back_initialize: initialize BDB backend bdb_back_initialize: Berkeley DB 4.5.20: (June 6, 2008) hdb_back_initialize: initialize HDB backend hdb_back_initialize: Berkeley DB 4.5.20: (June 6, 2008) =3D=3D>sql_back_initialize() <=3D=3Dsql_back_initialize() =3D=3D> translucent_initialize =3D> str2entry: "dn: vendorName: The OpenLDAP Project <http://www.openldap.org/> " >>> dnPrettyNormal: <> <<< dnPrettyNormal: <>, <> <=3D str2entry() -> 0x8338184 bdb_db_init: Initializing BDB database >>> dnPrettyNormal: <o=3DOpenLDAP Project,l=3DInternet> =3D> ldap_bv2dn(o=3DOpenLDAP Project,l=3DInternet,0) <=3D ldap_bv2dn(o=3DOpenLDAP Project,l=3DInternet)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(o=3DOpenLDAP Project,l=3DInternet)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(o=3Dopenldap project,l=3Dinternet)=3D0=20 <<< dnPrettyNormal: <o=3DOpenLDAP Project,l=3DInternet>, <o=3Dopenldap pr= oject,l=3Dinternet> >>> dnPrettyNormal: <cn=3DMonitor> =3D> ldap_bv2dn(cn=3DMonitor,0) <=3D ldap_bv2dn(cn=3DMonitor)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DMonitor)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3Dmonitor)=3D0=20 <<< dnPrettyNormal: <cn=3DMonitor>, <cn=3Dmonitor> >>> dnNormalize: <cn=3DSubschema> =3D> ldap_bv2dn(cn=3DSubschema,0) <=3D ldap_bv2dn(cn=3DSubschema)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3Dsubschema)=3D0=20 <<< dnNormalize: <cn=3Dsubschema> matching_rule_use_init 1.2.840.113556.1.4.804 (integerBitOrMatch): matchingRuleUse: ( 1.2.84= 0.113556.1.4.804 NAME 'integerBitOrMatch' APPLIES ( supportedLDAPVersion = $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $= olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcInd= exSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcInde= xIntLen $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSo= ckbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThread= s $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSiz= e $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth= $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcDDSmaxDynamicObject= s $ olcProxyCacheQueries $ olcSpSessionlog $ mailPreferenceOption $ shado= wLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ sh= adowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber= $ searchTimeLimit $ bindTimeLimit $ profileTTL $ pwdMinAge $ pwdMaxAge $= pwdInHistory $ pwdCheckQuality $ pwdMinLength $ pwdExpireWarning $ pwdGr= aceAuthNLimit $ pwdLockoutDuration $ pwdMaxFailure $ pwdFailureCountInter= val ) ) 1.2.840.113556.1.4.803 (integerBitAndMatch): matchingRuleUse: ( 1.2.8= 40.113556.1.4.803 NAME 'integerBitAndMatch' APPLIES ( supportedLDAPVersio= n $ entryTtl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending= $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcI= ndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIn= dexIntLen $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olc= SockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThre= ads $ olcDbCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheS= ize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDep= th $ olcDbProtocolVersion $ olcDbConnectionPoolMax $ olcDDSmaxDynamicObje= cts $ olcProxyCacheQueries $ olcSpSessionlog $ mailPreferenceOption $ sha= dowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ = shadowExpire $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumb= er $ searchTimeLimit $ bindTimeLimit $ profileTTL $ pwdMinAge $ pwdMaxAge= $ pwdInHistory $ pwdCheckQuality $ pwdMinLength $ pwdExpireWarning $ pwd= GraceAuthNLimit $ pwdLockoutDuration $ pwdMaxFailure $ pwdFailureCountInt= erval ) ) 1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match): matchingRuleUse: ( 1= =2E3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' APPLIES ( altServer= $ olcDbConfig $ c $ mail $ dc $ associatedDomain $ email $ aRecord $ mDR= ecord $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox $ co= rbaIor $ javaCodebase $ javaDoc $ mailLocalAddress $ mailHost $ mailRouti= ngAddress $ rfc822MailMember $ gecos $ homeDirectory $ loginShell $ membe= rUid $ memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumb= er $ macAddress $ bootFile $ nisMapEntry $ attributeMap $ credentialLevel= $ objectclassMap $ defaultSearchScope $ serviceCredentialLevel $ pwdChec= kModule ) ) 1.3.6.1.4.1.1466.109.114.1 (caseExactIA5Match): matchingRuleUse: ( 1.= 3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' APPLIES ( altServer $ o= lcDbConfig $ c $ mail $ dc $ associatedDomain $ email $ aRecord $ mDRecor= d $ mXRecord $ nSRecord $ sOARecord $ cNAMERecord $ janetMailbox $ corbaI= or $ javaCodebase $ javaDoc $ mailLocalAddress $ mailHost $ mailRoutingAd= dress $ rfc822MailMember $ gecos $ homeDirectory $ loginShell $ memberUid= $ memberNisNetgroup $ ipHostNumber $ ipNetworkNumber $ ipNetmaskNumber $= macAddress $ bootFile $ nisMapEntry $ attributeMap $ credentialLevel $ o= bjectclassMap $ defaultSearchScope $ serviceCredentialLevel $ pwdCheckMod= ule ) ) 2.5.13.35 (certificateMatch): 2.5.13.34 (certificateExactMatch): = matchingRuleUse: ( 2.5.13.34 NAME 'certificateExactMatch' APPLIES ( userC= ertificate $ cACertificate ) ) 2.5.13.30 (objectIdentifierFirstComponentMatch): matchingRuleUse: ( 2= =2E5.13.30 NAME 'objectIdentifierFirstComponentMatch' APPLIES ( supported= Control $ supportedExtension $ supportedFeatures $ ldapSyntaxes $ support= edApplicationContext $ pwdAttribute ) ) 2.5.13.29 (integerFirstComponentMatch): matchingRuleUse: ( 2.5.13.29 = NAME 'integerFirstComponentMatch' APPLIES ( supportedLDAPVersion $ entryT= tl $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConn= MaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstr= IfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcIndexIntLen = $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMax= Incoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcD= bCacheFree $ olcDbCacheSize $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcD= bMode $ olcDbSearchStack $ olcDbShmKey $ olcChainMaxReferralDepth $ olcDb= ProtocolVersion $ olcDbConnectionPoolMax $ olcDDSmaxDynamicObjects $ olcP= roxyCacheQueries $ olcSpSessionlog $ mailPreferenceOption $ shadowLastCha= nge $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpi= re $ shadowFlag $ ipServicePort $ ipProtocolNumber $ oncRpcNumber $ searc= hTimeLimit $ bindTimeLimit $ profileTTL $ pwdMinAge $ pwdMaxAge $ pwdInHi= story $ pwdCheckQuality $ pwdMinLength $ pwdExpireWarning $ pwdGraceAuthN= Limit $ pwdLockoutDuration $ pwdMaxFailure $ pwdFailureCountInterval ) ) 2.5.13.27 (generalizedTimeMatch): matchingRuleUse: ( 2.5.13.27 NAME '= generalizedTimeMatch' APPLIES ( createTimestamp $ modifyTimestamp $ pwdCh= angedTime $ pwdAccountLockedTime $ pwdFailureTime $ pwdGraceUseTime ) ) 2.5.13.24 (protocolInformationMatch): matchingRuleUse: ( 2.5.13.24 NA= ME 'protocolInformationMatch' APPLIES protocolInformation ) 2.5.13.23 (uniqueMemberMatch): matchingRuleUse: ( 2.5.13.23 NAME 'uni= queMemberMatch' APPLIES uniqueMember ) 2.5.13.22 (presentationAddressMatch): matchingRuleUse: ( 2.5.13.22 NA= ME 'presentationAddressMatch' APPLIES presentationAddress ) 2.5.13.20 (telephoneNumberMatch): matchingRuleUse: ( 2.5.13.20 NAME '= telephoneNumberMatch' APPLIES ( telephoneNumber $ homePhone $ mobile $ pa= ger ) ) 2.5.13.17 (octetStringMatch): matchingRuleUse: ( 2.5.13.17 NAME 'octe= tStringMatch' APPLIES ( userPassword $ olcDbCryptKey $ pwdHistory $ javaS= erializedData ) ) 2.5.13.16 (bitStringMatch): matchingRuleUse: ( 2.5.13.16 NAME 'bitStr= ingMatch' APPLIES x500UniqueIdentifier ) 2.5.13.14 (integerMatch): matchingRuleUse: ( 2.5.13.14 NAME 'integerM= atch' APPLIES ( supportedLDAPVersion $ entryTtl $ uidNumber $ gidNumber $= olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTime= out $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAny= Len $ olcIndexSubstrAnyStep $ olcIndexIntLen $ olcLocalSSF $ olcMaxDerefD= epth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxInco= mingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize = $ olcDbDNcacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ o= lcDbShmKey $ olcChainMaxReferralDepth $ olcDbProtocolVersion $ olcDbConne= ctionPoolMax $ olcDDSmaxDynamicObjects $ olcProxyCacheQueries $ olcSpSess= ionlog $ mailPreferenceOption $ shadowLastChange $ shadowMin $ shadowMax = $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ ipServiceP= ort $ ipProtocolNumber $ oncRpcNumber $ searchTimeLimit $ bindTimeLimit $= profileTTL $ pwdMinAge $ pwdMaxAge $ pwdInHistory $ pwdCheckQuality $ pw= dMinLength $ pwdExpireWarning $ pwdGraceAuthNLimit $ pwdLockoutDuration $= pwdMaxFailure $ pwdFailureCountInterval ) ) 2.5.13.13 (booleanMatch): matchingRuleUse: ( 2.5.13.13 NAME 'booleanM= atch' APPLIES ( hasSubordinates $ olcGentleHUP $ olcHidden $ olcLastMod $= olcMirrorMode $ olcMonitoring $ olcReadOnly $ olcReverseLookup $ olcDbNo= Sync $ olcDbDirtyRead $ olcDbLinearIndex $ olcChainCacheURI $ olcChainRet= urnError $ olcDbRebindAsUser $ olcDbChaseReferrals $ olcDbProxyWhoAmI $ o= lcDbSingleConn $ olcDbUseTemporaryConn $ olcDbNorefs $ olcAccessLogSucces= s $ olcDDSstate $ olcMemberOfRefInt $ pwdReset $ olcPPolicyHashCleartext = $ olcPPolicyUseLockout $ olcProxySaveQueries $ olcRwmNormalizeMapped $ ol= cSpNoPresent $ olcSpReloadHint $ olcTranslucentStrict $ olcTranslucentNoG= lue $ olcUniqueStrict $ followReferrals $ dereferenceAliases $ pwdLockout= $ pwdMustChange $ pwdAllowUserChange $ pwdSafeModify ) ) 2.5.13.11 (caseIgnoreListMatch): matchingRuleUse: ( 2.5.13.11 NAME 'c= aseIgnoreListMatch' APPLIES ( postalAddress $ registeredAddress $ homePos= talAddress ) ) 2.5.13.8 (numericStringMatch): matchingRuleUse: ( 2.5.13.8 NAME 'nume= ricStringMatch' APPLIES ( x121Address $ internationaliSDNNumber ) ) 2.5.13.7 (caseExactSubstringsMatch): matchingRuleUse: ( 2.5.13.7 NAME= 'caseExactSubstringsMatch' APPLIES ( serialNumber $ destinationIndicator= $ dnQualifier ) ) 2.5.13.6 (caseExactOrderingMatch): matchingRuleUse: ( 2.5.13.6 NAME '= caseExactOrderingMatch' APPLIES ( serialNumber $ destinationIndicator $ d= nQualifier ) ) 2.5.13.5 (caseExactMatch): matchingRuleUse: ( 2.5.13.5 NAME 'caseExac= tMatch' APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ = ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcCon= figDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcA= ttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcB= ackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcInclude $ o= lcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olc= ObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFo= rmat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcR= eferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplog= File $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslHost $= olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLimi= t $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTimeLimit $ olcTLSCAC= ertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLS= CertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile $= olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcUpdateRef $= olcDbDirectory $ olcDbCheckpoint $ olcDbCryptFile $ olcDbIndex $ olcDbLo= ckDetect $ olcChainingBehavior $ olcDbURI $ olcDbStartTLS $ olcDbACLPassw= d $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAsser= tMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbIdl= eTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuaran= tine $ olcDbSocketPath $ olcDbSocketExtensions $ olcAccessLogOps $ olcAcc= essLogPurge $ olcAccessLogOld $ olcAccessLogOldAttr $ olcAuditlogFile $ o= lcConstraintAttribute $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl $ = olcDDSinterval $ olcDDStolerance $ olcDGAttrPair $ olcDLattrSet $ olcMemb= erOfDangling $ olcMemberOfGroupOC $ olcMemberOfMemberAD $ olcMemberOfMemb= erOfAD $ olcMemberOfDanglingError $ olcProxyCache $ olcProxyAttrset $ olc= ProxyTemplate $ olcProxyResponseCB $ olcRefintAttribute $ olcRwmRewrite $= olcRwmTFSupport $ olcRwmMap $ olcSpCheckpoint $ olcTranslucentLocal $ ol= cTranslucentRemote $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueURI = $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st = $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox= $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initia= ls $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseu= donym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ ho= st $ documentIdentifier $ documentTitle $ documentVersion $ documentLocat= ion $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ buil= dingName $ documentPublisher $ corbaRepositoryId $ javaClassName $ javaCl= assNames $ javaFactory $ javaReferenceAddress $ carLicense $ departmentNu= mber $ displayName $ employeeNumber $ employeeType $ preferredLanguage $ = ipServiceProtocol $ nisMapName $ defaultServerList $ preferredServerList = $ authenticationMethod $ serviceSearchDescriptor $ serviceAuthenticationM= ethod $ memberURL ) ) 2.5.13.4 (caseIgnoreSubstringsMatch): matchingRuleUse: ( 2.5.13.4 NAM= E 'caseIgnoreSubstringsMatch' APPLIES ( serialNumber $ destinationIndicat= or $ dnQualifier ) ) 2.5.13.3 (caseIgnoreOrderingMatch): matchingRuleUse: ( 2.5.13.3 NAME = 'caseIgnoreOrderingMatch' APPLIES ( serialNumber $ destinationIndicator $= dnQualifier ) ) 2.5.13.2 (caseIgnoreMatch): matchingRuleUse: ( 2.5.13.2 NAME 'caseIgn= oreMatch' APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion = $ ref $ name $ cn $ uid $ labeledURI $ description $ olcConfigFile $ olcC= onfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ ol= cAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ ol= cBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcInclude $= olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ o= lcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSalt= Format $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ ol= cReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcRepl= ogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslHost= $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcServerID $ olcSizeLi= mit $ olcSortVals $ olcSubordinate $ olcSyncrepl $ olcTimeLimit $ olcTLSC= ACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcT= LSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSCRLFile= $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcUpdateRef= $ olcDbDirectory $ olcDbCheckpoint $ olcDbCryptFile $ olcDbIndex $ olcDb= LockDetect $ olcChainingBehavior $ olcDbURI $ olcDbStartTLS $ olcDbACLPas= swd $ olcDbACLBind $ olcDbIDAssertPasswd $ olcDbIDAssertBind $ olcDbIDAss= ertMode $ olcDbIDAssertAuthzFrom $ olcDbTFSupport $ olcDbTimeout $ olcDbI= dleTimeout $ olcDbConnTtl $ olcDbNetworkTimeout $ olcDbCancel $ olcDbQuar= antine $ olcDbSocketPath $ olcDbSocketExtensions $ olcAccessLogOps $ olcA= ccessLogPurge $ olcAccessLogOld $ olcAccessLogOldAttr $ olcAuditlogFile $= olcConstraintAttribute $ olcDDSmaxTtl $ olcDDSminTtl $ olcDDSdefaultTtl = $ olcDDSinterval $ olcDDStolerance $ olcDGAttrPair $ olcDLattrSet $ olcMe= mberOfDangling $ olcMemberOfGroupOC $ olcMemberOfMemberAD $ olcMemberOfMe= mberOfAD $ olcMemberOfDanglingError $ olcProxyCache $ olcProxyAttrset $ o= lcProxyTemplate $ olcProxyResponseCB $ olcRefintAttribute $ olcRwmRewrite= $ olcRwmTFSupport $ olcRwmMap $ olcSpCheckpoint $ olcTranslucentLocal $ = olcTranslucentRemote $ olcUniqueIgnore $ olcUniqueAttribute $ olcUniqueUR= I $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ s= t $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeB= ox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ init= ials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ ps= eudonym $ textEncodedORAddress $ info $ drink $ roomNumber $ userClass $ = host $ documentIdentifier $ documentTitle $ documentVersion $ documentLoc= ation $ personalTitle $ co $ uniqueIdentifier $ organizationalStatus $ bu= ildingName $ documentPublisher $ corbaRepositoryId $ javaClassName $ java= ClassNames $ javaFactory $ javaReferenceAddress $ carLicense $ department= Number $ displayName $ employeeNumber $ employeeType $ preferredLanguage = $ ipServiceProtocol $ nisMapName $ defaultServerList $ preferredServerLis= t $ authenticationMethod $ serviceSearchDescriptor $ serviceAuthenticatio= nMethod $ memberURL ) ) 1.2.36.79672281.1.13.3 (rdnMatch): 2.5.13.1 (distinguishedNameMat= ch): matchingRuleUse: ( 2.5.13.1 NAME 'distinguishedNameMatch' APPLIES ( = creatorsName $ modifiersName $ subschemaSubentry $ entryDN $ namingContex= ts $ aliasedObjectName $ dynamicSubtrees $ distinguishedName $ seeAlso $ = olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olcSuffix $ olcUpdateDN = $ olcDbACLAuthcDn $ olcDbIDAssertAuthcDn $ olcRelay $ olcAccessLogDB $ me= mberOf $ olcMemberOfDN $ pwdPolicySubentry $ olcPPolicyDefault $ olcRefin= tNothing $ olcRefintModifiersName $ olcUniqueBase $ member $ owner $ role= Occupant $ manager $ documentAuthor $ secretary $ associatedName $ dITRed= irect $ defaultSearchBase $ dgIdentity ) ) 2.5.13.0 (objectIdentifierMatch): matchingRuleUse: ( 2.5.13.0 NAME 'o= bjectIdentifierMatch' APPLIES ( supportedControl $ supportedExtension $ s= upportedFeatures $ supportedApplicationContext $ pwdAttribute ) ) lt-slapd startup: initiated. backend_startup_one: starting "cn=3Dconfig" config_back_db_open config_build_entry: "cn=3Dconfig" config_build_entry: "cn=3Dschema" config_build_entry: "cn=3D{0}core" config_build_entry: "cn=3D{1}cosine" config_build_entry: "cn=3D{2}corba" config_build_entry: "cn=3D{3}java" config_build_entry: "cn=3D{4}inetorgperson" config_build_entry: "cn=3D{5}misc" config_build_entry: "cn=3D{6}nis" config_build_entry: "cn=3D{7}openldap" config_build_entry: "cn=3D{8}duaconf" config_build_entry: "cn=3D{9}dyngroup" config_build_entry: "cn=3D{10}ppolicy" config_build_entry: "olcDatabase=3D{-1}frontend" config_build_entry: "olcDatabase=3D{0}config" config_build_entry: "olcDatabase=3D{1}bdb" config_build_entry: "olcDatabase=3D{2}monitor" backend_startup_one: starting "o=3DOpenLDAP Project,l=3DInternet" bdb_db_open: "o=3DOpenLDAP Project,l=3DInternet" bdb_db_open: warning - no DB_CONFIG file found in directory /home/michael= /src/openldap/OPENLDAP_REL_ENG_2_4/openldap/tests/testrun/db.1.a: (2). Expect poor performance for suffix "o=3DOpenLDAP Project,l=3DInternet". bdb_db_open: database "o=3DOpenLDAP Project,l=3DInternet": dbenv_open(/ho= me/michael/src/openldap/OPENLDAP_REL_ENG_2_4/openldap/tests/testrun/db.1.= a). backend_startup_one: starting "cn=3DMonitor" >>> dnNormalize: <cn=3DMonitor> <<< dnNormalize: <cn=3Dmonitor> >>> dnPretty: <cn=3DBackends> =3D> ldap_bv2dn(cn=3DBackends,0) <=3D ldap_bv2dn(cn=3DBackends)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DBackends)=3D0=20 <<< dnPretty: <cn=3DBackends> >>> dnNormalize: <cn=3DBackends> <<< dnNormalize: <cn=3Dbackends> >>> dnPretty: <cn=3DConnections> =3D> ldap_bv2dn(cn=3DConnections,0) <=3D ldap_bv2dn(cn=3DConnections)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DConnections)=3D0=20 <<< dnPretty: <cn=3DConnections> >>> dnNormalize: <cn=3DConnections> <<< dnNormalize: <cn=3Dconnections> >>> dnPretty: <cn=3DDatabases> =3D> ldap_bv2dn(cn=3DDatabases,0) <=3D ldap_bv2dn(cn=3DDatabases)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DDatabases)=3D0=20 <<< dnPretty: <cn=3DDatabases> >>> dnNormalize: <cn=3DDatabases> <<< dnNormalize: <cn=3Ddatabases> >>> dnPretty: <cn=3DListeners> =3D> ldap_bv2dn(cn=3DListeners,0) <=3D ldap_bv2dn(cn=3DListeners)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DListeners)=3D0=20 <<< dnPretty: <cn=3DListeners> >>> dnNormalize: <cn=3DListeners> <<< dnNormalize: <cn=3Dlisteners> >>> dnPretty: <cn=3DLog> =3D> ldap_bv2dn(cn=3DLog,0) <=3D ldap_bv2dn(cn=3DLog)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DLog)=3D0=20 <<< dnPretty: <cn=3DLog> >>> dnNormalize: <cn=3DLog> <<< dnNormalize: <cn=3Dlog> >>> dnPretty: <cn=3DOperations> =3D> ldap_bv2dn(cn=3DOperations,0) <=3D ldap_bv2dn(cn=3DOperations)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DOperations)=3D0=20 <<< dnPretty: <cn=3DOperations> >>> dnNormalize: <cn=3DOperations> <<< dnNormalize: <cn=3Doperations> >>> dnPretty: <cn=3DOverlays> =3D> ldap_bv2dn(cn=3DOverlays,0) <=3D ldap_bv2dn(cn=3DOverlays)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DOverlays)=3D0=20 <<< dnPretty: <cn=3DOverlays> >>> dnNormalize: <cn=3DOverlays> <<< dnNormalize: <cn=3Doverlays> >>> dnPretty: <cn=3DSASL> =3D> ldap_bv2dn(cn=3DSASL,0) <=3D ldap_bv2dn(cn=3DSASL)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DSASL)=3D0=20 <<< dnPretty: <cn=3DSASL> >>> dnNormalize: <cn=3DSASL> <<< dnNormalize: <cn=3Dsasl> >>> dnPretty: <cn=3DStatistics> =3D> ldap_bv2dn(cn=3DStatistics,0) <=3D ldap_bv2dn(cn=3DStatistics)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DStatistics)=3D0=20 <<< dnPretty: <cn=3DStatistics> >>> dnNormalize: <cn=3DStatistics> <<< dnNormalize: <cn=3Dstatistics> >>> dnPretty: <cn=3DThreads> =3D> ldap_bv2dn(cn=3DThreads,0) <=3D ldap_bv2dn(cn=3DThreads)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DThreads)=3D0=20 <<< dnPretty: <cn=3DThreads> >>> dnNormalize: <cn=3DThreads> <<< dnNormalize: <cn=3Dthreads> >>> dnPretty: <cn=3DTime> =3D> ldap_bv2dn(cn=3DTime,0) <=3D ldap_bv2dn(cn=3DTime)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DTime)=3D0=20 <<< dnPretty: <cn=3DTime> >>> dnNormalize: <cn=3DTime> <<< dnNormalize: <cn=3Dtime> >>> dnPretty: <cn=3DTLS> =3D> ldap_bv2dn(cn=3DTLS,0) <=3D ldap_bv2dn(cn=3DTLS)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DTLS)=3D0=20 <<< dnPretty: <cn=3DTLS> >>> dnNormalize: <cn=3DTLS> <<< dnNormalize: <cn=3Dtls> >>> dnPretty: <cn=3DWaiters> =3D> ldap_bv2dn(cn=3DWaiters,0) <=3D ldap_bv2dn(cn=3DWaiters)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3DWaiters)=3D0=20 <<< dnPretty: <cn=3DWaiters> >>> dnNormalize: <cn=3DWaiters> <<< dnNormalize: <cn=3Dwaiters> >>> dnNormalize: <cn=3DBackend 0> <<< dnNormalize: <cn=3Dbackend 0> >>> dnNormalize: <cn=3DDatabase 0,cn=3DDatabases,cn=3DMonitor> =3D> ldap_bv2dn(cn=3DDatabase 0,cn=3DDatabases,cn=3DMonitor,0) <=3D ldap_bv2dn(cn=3DDatabase 0,cn=3DDatabases,cn=3DMonitor)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3Ddatabase 0,cn=3Ddatabases,cn=3Dmonitor)=3D0=20 <<< dnNormalize: <cn=3Ddatabase 0,cn=3Ddatabases,cn=3Dmonitor> >>> dnNormalize: <cn=3DBackend 1> <<< dnNormalize: <cn=3Dbackend 1> >>> dnNormalize: <cn=3DBackend 2> <<< dnNormalize: <cn=3Dbackend 2> >>> dnNormalize: <cn=3DDatabase 2,cn=3DDatabases,cn=3DMonitor> =3D> ldap_bv2dn(cn=3DDatabase 2,cn=3DDatabases,cn=3DMonitor,0) <=3D ldap_bv2dn(cn=3DDatabase 2,cn=3DDatabases,cn=3DMonitor)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3Ddatabase 2,cn=3Ddatabases,cn=3Dmonitor)=3D0=20 <<< dnNormalize: <cn=3Ddatabase 2,cn=3Ddatabases,cn=3Dmonitor> >>> dnNormalize: <cn=3DBackend 3> <<< dnNormalize: <cn=3Dbackend 3> >>> dnNormalize: <cn=3DDatabase 1,cn=3DDatabases,cn=3DMonitor> =3D> ldap_bv2dn(cn=3DDatabase 1,cn=3DDatabases,cn=3DMonitor,0) <=3D ldap_bv2dn(cn=3DDatabase 1,cn=3DDatabases,cn=3DMonitor)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3Ddatabase 1,cn=3Ddatabases,cn=3Dmonitor)=3D0=20 <<< dnNormalize: <cn=3Ddatabase 1,cn=3Ddatabases,cn=3Dmonitor> >>> dnNormalize: <cn=3DBackend 4> <<< dnNormalize: <cn=3Dbackend 4> >>> dnNormalize: <cn=3DBackend 5> <<< dnNormalize: <cn=3Dbackend 5> >>> dnNormalize: <cn=3DBackend 6> <<< dnNormalize: <cn=3Dbackend 6> >>> dnNormalize: <cn=3DBackend 7> <<< dnNormalize: <cn=3Dbackend 7> >>> dnNormalize: <cn=3DBackend 8> <<< dnNormalize: <cn=3Dbackend 8> >>> dnNormalize: <cn=3DBackend 9> <<< dnNormalize: <cn=3Dbackend 9> >>> dnNormalize: <cn=3DBackend 10> <<< dnNormalize: <cn=3Dbackend 10> >>> dnNormalize: <cn=3DBackend 11> <<< dnNormalize: <cn=3Dbackend 11> >>> dnNormalize: <cn=3DBackend 12> <<< dnNormalize: <cn=3Dbackend 12> >>> dnNormalize: <cn=3DMax File Descriptors> <<< dnNormalize: <cn=3Dmax file descriptors> >>> dnNormalize: <cn=3DTotal> <<< dnNormalize: <cn=3Dtotal> >>> dnNormalize: <cn=3DCurrent> <<< dnNormalize: <cn=3Dcurrent> >>> dnNormalize: <cn=3DFrontend> <<< dnNormalize: <cn=3Dfrontend> >>> dnNormalize: <cn=3DDatabase 0> <<< dnNormalize: <cn=3Ddatabase 0> >>> dnNormalize: <cn=3DBackend 0,cn=3DBackends,cn=3DMonitor> =3D> ldap_bv2dn(cn=3DBackend 0,cn=3DBackends,cn=3DMonitor,0) <=3D ldap_bv2dn(cn=3DBackend 0,cn=3DBackends,cn=3DMonitor)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3Dbackend 0,cn=3Dbackends,cn=3Dmonitor)=3D0=20 <<< dnNormalize: <cn=3Dbackend 0,cn=3Dbackends,cn=3Dmonitor> >>> dnNormalize: <cn=3DDatabase 1> <<< dnNormalize: <cn=3Ddatabase 1> >>> dnNormalize: <cn=3DBackend 3,cn=3DBackends,cn=3DMonitor> =3D> ldap_bv2dn(cn=3DBackend 3,cn=3DBackends,cn=3DMonitor,0) <=3D ldap_bv2dn(cn=3DBackend 3,cn=3DBackends,cn=3DMonitor)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3Dbackend 3,cn=3Dbackends,cn=3Dmonitor)=3D0=20 <<< dnNormalize: <cn=3Dbackend 3,cn=3Dbackends,cn=3Dmonitor> >>> dnNormalize: <cn=3DDatabase 2> <<< dnNormalize: <cn=3Ddatabase 2> >>> dnNormalize: <cn=3DBackend 2,cn=3DBackends,cn=3DMonitor> =3D> ldap_bv2dn(cn=3DBackend 2,cn=3DBackends,cn=3DMonitor,0) <=3D ldap_bv2dn(cn=3DBackend 2,cn=3DBackends,cn=3DMonitor)=3D0=20 =3D> ldap_dn2bv(272) <=3D ldap_dn2bv(cn=3Dbackend 2,cn=3Dbackends,cn=3Dmonitor)=3D0=20 <<< dnNormalize: <cn=3Dbackend 2,cn=3Dbackends,cn=3Dmonitor> >>> dnNormalize: <cn=3DListener 0> <<< dnNormalize: <cn=3Dlistener 0> >>> dnNormalize: <cn=3DListener 1> <<< dnNormalize: <cn=3Dlistener 1> >>> dnNormalize: <cn=3DListener 2> <<< dnNormalize: <cn=3Dlistener 2> >>> dnNormalize: <cn=3DBind> <<< dnNormalize: <cn=3Dbind> >>> dnNormalize: <cn=3DUnbind> <<< dnNormalize: <cn=3Dunbind> >>> dnNormalize: <cn=3DSearch> <<< dnNormalize: <cn=3Dsearch> >>> dnNormalize: <cn=3DCompare> <<< dnNormalize: <cn=3Dcompare> >>> dnNormalize: <cn=3DModify> <<< dnNormalize: <cn=3Dmodify> >>> dnNormalize: <cn=3DModrdn> <<< dnNormalize: <cn=3Dmodrdn> >>> dnNormalize: <cn=3DAdd> <<< dnNormalize: <cn=3Dadd> >>> dnNormalize: <cn=3DDelete> <<< dnNormalize: <cn=3Ddelete> >>> dnNormalize: <cn=3DAbandon> <<< dnNormalize: <cn=3Dabandon> >>> dnNormalize: <cn=3DExtended> <<< dnNormalize: <cn=3Dextended> >>> dnNormalize: <cn=3DOverlay 0> <<< dnNormalize: <cn=3Doverlay 0> >>> dnNormalize: <cn=3DOverlay 1> <<< dnNormalize: <cn=3Doverlay 1> >>> dnNormalize: <cn=3DOverlay 2> <<< dnNormalize: <cn=3Doverlay 2> >>> dnNormalize: <cn=3DOverlay 3> <<< dnNormalize: <cn=3Doverlay 3> >>> dnNormalize: <cn=3DOverlay 4> <<< dnNormalize: <cn=3Doverlay 4> >>> dnNormalize: <cn=3DOverlay 5> <<< dnNormalize: <cn=3Doverlay 5> >>> dnNormalize: <cn=3DOverlay 6> <<< dnNormalize: <cn=3Doverlay 6> >>> dnNormalize: <cn=3DOverlay 7> <<< dnNormalize: <cn=3Doverlay 7> >>> dnNormalize: <cn=3DOverlay 8> <<< dnNormalize: <cn=3Doverlay 8> >>> dnNormalize: <cn=3DOverlay 9> <<< dnNormalize: <cn=3Doverlay 9> >>> dnNormalize: <cn=3DOverlay 10> <<< dnNormalize: <cn=3Doverlay 10> >>> dnNormalize: <cn=3DOverlay 11> <<< dnNormalize: <cn=3Doverlay 11> >>> dnNormalize: <cn=3DOverlay 12> <<< dnNormalize: <cn=3Doverlay 12> >>> dnNormalize: <cn=3DOverlay 13> <<< dnNormalize: <cn=3Doverlay 13> >>> dnNormalize: <cn=3DOverlay 14> <<< dnNormalize: <cn=3Doverlay 14> >>> dnNormalize: <cn=3DOverlay 15> <<< dnNormalize: <cn=3Doverlay 15> >>> dnNormalize: <cn=3DOverlay 16> <<< dnNormalize: <cn=3Doverlay 16> >>> dnNormalize: <cn=3DOverlay 17> <<< dnNormalize: <cn=3Doverlay 17> >>> dnNormalize: <cn=3DOverlay 18> <<< dnNormalize: <cn=3Doverlay 18> >>> dnNormalize: <cn=3DOverlay 19> <<< dnNormalize: <cn=3Doverlay 19> >>> dnNormalize: <cn=3DBytes> <<< dnNormalize: <cn=3Dbytes> >>> dnNormalize: <cn=3DPDU> <<< dnNormalize: <cn=3Dpdu> >>> dnNormalize: <cn=3DEntries> <<< dnNormalize: <cn=3Dentries> >>> dnNormalize: <cn=3DReferrals> <<< dnNormalize: <cn=3Dreferrals> >>> dnNormalize: <cn=3DMax> <<< dnNormalize: <cn=3Dmax> >>> dnNormalize: <cn=3DMax Pending> <<< dnNormalize: <cn=3Dmax pending> >>> dnNormalize: <cn=3DOpen> <<< dnNormalize: <cn=3Dopen> >>> dnNormalize: <cn=3DStarting> <<< dnNormalize: <cn=3Dstarting> >>> dnNormalize: <cn=3DActive> <<< dnNormalize: <cn=3Dactive> >>> dnNormalize: <cn=3DPending> <<< dnNormalize: <cn=3Dpending> >>> dnNormalize: <cn=3DBackload> <<< dnNormalize: <cn=3Dbackload> >>> dnNormalize: <cn=3DState> <<< dnNormalize: <cn=3Dstate> >>> dnNormalize: <cn=3DRunqueue> <<< dnNormalize: <cn=3Drunqueue> >>> dnNormalize: <cn=3DTasklist> <<< dnNormalize: <cn=3Dtasklist> >>> dnNormalize: <cn=3DStart> <<< dnNormalize: <cn=3Dstart> >>> dnNormalize: <cn=3DCurrent> <<< dnNormalize: <cn=3Dcurrent> >>> dnNormalize: <cn=3DUptime> <<< dnNormalize: <cn=3Duptime> >>> dnNormalize: <cn=3DRead> <<< dnNormalize: <cn=3Dread> >>> dnNormalize: <cn=3DWrite> <<< dnNormalize: <cn=3Dwrite> slapd starting daemon: listen(ldap://localhost:9011/, 5) failed errno=3D98 (Address alre= ady in use) lt-slapd shutdown: initiated =3D=3D=3D=3D> bdb_cache_release_all lt-slapd destroy: freeing system resources. slapd stopped. --------------000504090501070603080100--

1 0

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by michael＠stroeder.com 05 Aug '08

05 Aug '08

Kurt Zeilenga wrote: >> Hashes have to be validated out-of-band each time a new release is >> published. The trusted keys be have to be validated out-of-band only >> each time a new trust anchor key is generated. > > The point here that an attacker can create the same level of trust for > any new signing key they might use (or trust in that no signing was > done) for the rouge release as the trust tends to be just publication of > the signing key on the web site. Creating signing keys happens less frequently and keys can also be digitally signed by others. So it's not the same level of trust if done right. > And, as I noted, an attacker could just change stable from 2.m.y to > 2.n.x, where 2.n.x was some crackable release. This is another question anyway. It's not a matter of hash vs. digital signature of the released tar.gz since "stable" is additional meta-information on the web site. Publishing this meta-information in a trusted way would certainly also desirable. (And for related reasons I still consider my request in ITS#4787 to be valid.) > What about a purely self-signed signing key with finger print published > on the website, and possible release announcements. I'm fine with that. > (The latter arguable would be better, as it's more widely published.) > [This appears to be the appraoch you've taken with web2ldap.] And I'm open to get my key cross-signed. > But, as I've noted, this really doesn't offer significant better > security than widely published hashes. Once you trusted this signing key you will notice if the key changes. > However, if what you want is a signing key in which members of the > public can personally verify is in the control of the project, that > would be more difficult to provide. Yes. Again, I'm fine with a pragmatic approach. > Or, if what you want is a signing key which is in a wide web of trust, > the difficultly depends on the scale of the web of trust desired (to the > point of approaching the general public problem). You could start with signing and try to spread the signing key and additionally get it signed by others. BTW: I'm not limited to PGP in this regard. Ciao, Michael.

1 0

Re: (ITS#5634) str2entry NULL (smr_normalize reqControls 21) when slapadding accesslog-DB with reqControls
by michael＠stroeder.com 05 Aug '08

05 Aug '08

Pierangelo Masarati wrote: > ----- michael(a)stroeder.com wrote: > >> ando(a)sys-net.it wrote: >>> Should be fixed now, please test. p. >> Thanks. >> >> Unfortunately I can't test HEAD because of ITS#5644. > > Well, that seems to happen at shutdown, so you should be able to test this specific issue :) It seems to work. Ciao, Michael.

1 0

Re: (ITS#5644) make test000 core dumps
by ando＠sys-net.it 05 Aug '08

05 Aug '08

----- "Michael Ströder" <michael(a)stroeder.com> wrote: > Pierangelo Masarati wrote: > > Are you sure you're loading the sasl mechs you've compiled for? > That's a typical issue with SASL (see SASL_PATH, in case). > > > >> #2 0x405df014 in ?? () from /usr/lib/libldap-2.4.so.2 > > Hmm, it seems the problem is rather that the LDAP client libs from the > > RPM package installed by openSUSE are loaded instead the ones from the > > build directory. That's bad. Any way around this when running 'make > test'? LD_LIBRARY_PATH to your just built libs? p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5644) make test000 core dumps
by michael＠stroeder.com 05 Aug '08

05 Aug '08

Pierangelo Masarati wrote: > Are you sure you're loading the sasl mechs you've compiled for? That's a typical issue with SASL (see SASL_PATH, in case). > >> #2 0x405df014 in ?? () from /usr/lib/libldap-2.4.so.2 Hmm, it seems the problem is rather that the LDAP client libs from the RPM package installed by openSUSE are loaded instead the ones from the build directory. That's bad. Any way around this when running 'make test'? Ciao, Michael.

1 0

Re: (ITS#5634) str2entry NULL (smr_normalize reqControls 21) when slapadding accesslog-DB with reqControls
by ando＠sys-net.it 05 Aug '08

05 Aug '08

----- michael(a)stroeder.com wrote: > ando(a)sys-net.it wrote: > > Should be fixed now, please test. p. > > Thanks. > > Unfortunately I can't test HEAD because of ITS#5644. Well, that seems to happen at shutdown, so you should be able to test this specific issue :) p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5644) make test000 core dumps
by ando＠sys-net.it 05 Aug '08

05 Aug '08

Are you sure you're loading the sasl mechs you've compiled for? That's a typical issue with SASL (see SASL_PATH, in case). p. ----- michael(a)stroeder.com wrote: > Full_Name: Michael Str�der > Version: HEAD > OS: openSUSE Linux 11.0 > URL: > Submission from: (NULL) (84.163.95.185) > > > (gdb) bt full > #0 0x40462915 in free () from /lib/libc.so.6 > No symbol table info available. > #1 0x40074ccd in ber_memfree_x (p=0x7fffffff, ctx=0x0) at > memory.c:152 > __PRETTY_FUNCTION__ = "ber_memfree_x" > #2 0x405df014 in ?? () from /usr/lib/libldap-2.4.so.2 > No symbol table info available. > #3 0x405c1578 in ?? () from /usr/lib/libldap-2.4.so.2 > No symbol table info available. > #4 0x405ee930 in _fini () from /usr/lib/libldap-2.4.so.2 > No symbol table info available. > #5 0x40012ebf in ?? () from /lib/ld-linux.so.2 > No symbol table info available. > #6 0x40013817 in ?? () from /lib/ld-linux.so.2 > No symbol table info available. > #7 0x40254cb4 in ?? () from /lib/libdl.so.2 > No symbol table info available. > #8 0x4000de26 in ?? () from /lib/ld-linux.so.2 > No symbol table info available. > #9 0x402550dc in ?? () from /lib/libdl.so.2 > No symbol table info available. > #10 0x40254cea in dlclose () from /lib/libdl.so.2 > No symbol table info available. > #11 0x4024d3a1 in _sasl_done_with_plugins () from > /usr/lib/libsasl2.so.2 > No symbol table info available. > #12 0x40245c20 in sasl_done () from /usr/lib/libsasl2.so.2 > No symbol table info available. > #13 0x080cc1e4 in slap_sasl_destroy () at sasl.c:1156 > No locals. > #14 0x080a48c9 in slap_destroy () at init.c:255 > rc = 0 > #15 0x08050cfb in main (argc=8, argv=0xbfbe2184) at main.c:965 > i = 8 > no_detach = 1 > rc = 0 > urls = 0x82d2050 "ldap://localhost:9011/" > username = 0x0 > groupname = 0x0 > sandbox = 0x0 > syslogUser = 160 > g_argc = 8 > g_argv = (char **) 0xbfbe2184 > configfile = 0x82d2008 > "/home/michael/src/openldap/HEAD/openldap/tests/testrun/slapd.1.conf" > configdir = 0x0 > serverName = 0xbfbe4079 "lt-slapd" > serverMode = 1 > scp = (struct sync_cookie *) 0x0 > scp_entry = (struct sync_cookie *) 0x0 > debug_unknowns = (char **) 0x0 > syslog_unknowns = (char **) 0x0 > serverNamePrefix = 0x81f146b "" > l = 2097734 > slapd_pid_file_unlink = 1 > ---Type <return> to continue, or q <return> to quit--- > slapd_args_file_unlink = 1 > firstopt = 0 > __PRETTY_FUNCTION__ = "main" Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5634) str2entry NULL (smr_normalize reqControls 21) when slapadding accesslog-DB with reqControls
by michael＠stroeder.com 05 Aug '08

05 Aug '08

ando(a)sys-net.it wrote: > Should be fixed now, please test. p. Thanks. Unfortunately I can't test HEAD because of ITS#5644. Ciao, Michael.

1 0

(ITS#5644) make test000 core dumps
by michael＠stroeder.com 05 Aug '08

05 Aug '08

Full_Name: Michael Ströder Version: HEAD OS: openSUSE Linux 11.0 URL: Submission from: (NULL) (84.163.95.185) (gdb) bt full #0 0x40462915 in free () from /lib/libc.so.6 No symbol table info available. #1 0x40074ccd in ber_memfree_x (p=0x7fffffff, ctx=0x0) at memory.c:152 __PRETTY_FUNCTION__ = "ber_memfree_x" #2 0x405df014 in ?? () from /usr/lib/libldap-2.4.so.2 No symbol table info available. #3 0x405c1578 in ?? () from /usr/lib/libldap-2.4.so.2 No symbol table info available. #4 0x405ee930 in _fini () from /usr/lib/libldap-2.4.so.2 No symbol table info available. #5 0x40012ebf in ?? () from /lib/ld-linux.so.2 No symbol table info available. #6 0x40013817 in ?? () from /lib/ld-linux.so.2 No symbol table info available. #7 0x40254cb4 in ?? () from /lib/libdl.so.2 No symbol table info available. #8 0x4000de26 in ?? () from /lib/ld-linux.so.2 No symbol table info available. #9 0x402550dc in ?? () from /lib/libdl.so.2 No symbol table info available. #10 0x40254cea in dlclose () from /lib/libdl.so.2 No symbol table info available. #11 0x4024d3a1 in _sasl_done_with_plugins () from /usr/lib/libsasl2.so.2 No symbol table info available. #12 0x40245c20 in sasl_done () from /usr/lib/libsasl2.so.2 No symbol table info available. #13 0x080cc1e4 in slap_sasl_destroy () at sasl.c:1156 No locals. #14 0x080a48c9 in slap_destroy () at init.c:255 rc = 0 #15 0x08050cfb in main (argc=8, argv=0xbfbe2184) at main.c:965 i = 8 no_detach = 1 rc = 0 urls = 0x82d2050 "ldap://localhost:9011/" username = 0x0 groupname = 0x0 sandbox = 0x0 syslogUser = 160 g_argc = 8 g_argv = (char **) 0xbfbe2184 configfile = 0x82d2008 "/home/michael/src/openldap/HEAD/openldap/tests/testrun/slapd.1.conf" configdir = 0x0 serverName = 0xbfbe4079 "lt-slapd" serverMode = 1 scp = (struct sync_cookie *) 0x0 scp_entry = (struct sync_cookie *) 0x0 debug_unknowns = (char **) 0x0 syslog_unknowns = (char **) 0x0 serverNamePrefix = 0x81f146b "" l = 2097734 slapd_pid_file_unlink = 1 ---Type <return> to continue, or q <return> to quit--- slapd_args_file_unlink = 1 firstopt = 0 __PRETTY_FUNCTION__ = "main"

1 0

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by h.b.furuseth＠usit.uio.no 04 Aug '08

04 Aug '08

Kurt(a)OpenLDAP.org writes: >On Aug 4, 2008, at 2:06 PM, h.b.furuseth(a)usit.uio.no wrote: >> Kurt(a)OpenLDAP.org writes: >>> I note as well that properly deploying release signing requires >>> more than script modification. For instance, one does need to >>> consider that the host to sign the releases might itself been >>> taken over and the implications of such a takeover. >> >> For that part, signatures in the 'https:' site would help. > > I think you need to re-think that assertion. Er, yes, I was thinking of the "outside" equivalent, hacking DNS and "taking over" that way. I have the impression that's the most common way to "take over" a site, but I may be wrong. -- Hallvard

1 0

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by Kurt＠OpenLDAP.org 04 Aug '08

04 Aug '08

On Aug 4, 2008, at 3:23 PM, michael(a)stroeder.com wrote: > Kurt Zeilenga wrote: >> For instance, web_ldap says it provides a signature for a digital >> release, but clicking on the link provides a page which says "Not >> found". > > I knew this (transition during a major OS update on my local machine). > It's fixed. My point was not wether you knew it or not, but whether any verifier would care. > >> But, as I noted with hashes, the fact that release messages are >> widely >> published may make it more likely that such problems will be >> detected. > > Hashes have to be validated out-of-band each time a new release is > published. The trusted keys be have to be validated out-of-band only > each time a new trust anchor key is generated. The point here that an attacker can create the same level of trust for any new signing key they might use (or trust in that no signing was done) for the rouge release as the trust tends to be just publication of the signing key on the web site. And, as I noted, an attacker could just change stable from 2.m.y to 2.n.x, where 2.n.x was some crackable release. Personally, I place a less trust on a signing key I fetch off a website than a hash I get both by email, on a moderated list, that I can verify in the list archives, and on the FTP site. The former is actually seems more subject to MITM attack than the latter. Now, with https:, I would say they have fairly comparable security considerations. Basically, if an attacker owns the website/ftp host, the attacker can fool most everyone. > >> For instance, one does need to consider that >> the host to sign the releases might itself been taken over and the >> implications of such a takeover. > > There is no 100% security. I already know this. But raising security > level is always an desirable goal. You haven't clearly stated how the security level is actually getting raised through the signing you suggest. > >> Anyways, for this to go anywhere, I think you or others advocating it >> need to more precisely state which attacks you concerned about, how >> you >> think digital signatures will help, and detail requirements on that >> signing (in particular, requirements on signing key so trust can be >> established and maintained). > > I have no objections against a single release manager using his > personal > key or a dedicated key for OpenLDAP tar.gz signing stored in your > local > file system reasonably protected by a passphrase. As I see it > you're the > only one packaging the tar.gz. So this should not be too difficult for > you. What about a purely self-signed signing key with finger print published on the website, and possible release announcements. (The latter arguable would be better, as it's more widely published.) [This appears to be the appraoch you've taken with web2ldap.] But, as I've noted, this really doesn't offer significant better security than widely published hashes. However, if what you want is a signing key in which members of the public can personally verify is in the control of the project, that would be more difficult to provide. Or, if what you want is a signing key which is in a wide web of trust, the difficultly depends on the scale of the web of trust desired (to the point of approaching the general public problem). > Well, if you don't want to do that then just leave it... > >> Note that these are human-factor attacks, not attacks based upon any >> weakness in the PGP signing standards or implementations. > > I already know that. This comment was for the peanut gallery. -- Kurt

1 0

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by Kurt＠OpenLDAP.org 04 Aug '08

04 Aug '08

On Aug 4, 2008, at 2:06 PM, h.b.furuseth(a)usit.uio.no wrote: > Kurt(a)OpenLDAP.org writes: >> I note as well that properly deploying release signing requires >> more than script modification. For instance, one does need to >> consider that the host to sign the releases might itself been >> taken over and the implications of such a takeover. > > For that part, signatures in the 'https:' site would help. I think you need to re-think that assertion. > Not that I'm making an issue of it, I've got OpenLDAP installations > that I didn't verify against any signature right on this host. > > -- > Hallvard > >

1 0

Re: (ITS#5634) str2entry NULL (smr_normalize reqControls 21) when slapadding accesslog-DB with reqControls
by ando＠sys-net.it 04 Aug '08

04 Aug '08

Should be fixed now, please test. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#5624) overlay rwm causes assertion
by ando＠sys-net.it 04 Aug '08

04 Aug '08

This should be now fixed in HEAD; please test. Sorry for the late commit. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5643) Back-relay subordinate issue
by ando＠sys-net.it 04 Aug '08

04 Aug '08

Full_Name: Pierangelo Masarati Version: HEAD,re24,re23 OS: irrelevant URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (82.231.225.242) Submitted by: ando Back-relay wants to find the relayed database while parsing the "relay" directive; however, if back-relay is instantiated as subordinate, the relayed database might not exist yet, or it might just not show up because subordinated as well. The issue can be worked around by not defining a relay directive. However, a simple fix appears to consist in deferring relayed database lookup. p.

1 0

Re: (ITS#5634) str2entry NULL (smr_normalize reqControls 21) when slapadding accesslog-DB with reqControls
by ando＠sys-net.it 04 Aug '08

04 Aug '08

----- michael(a)stroeder.com wrote: > Full_Name: Michael Str�der > Version: RE24 > OS: Linux > URL: > Submission from: (NULL) (84.163.81.95) > > > I tried to restore an accesslog > > reqControls: {0}{2.16.840.1.113730.3.4.2} > > <= str2entry NULL (smr_normalize reqControls 21) > slapadd: could not parse entry (line=6) I have a fix, but can't commit right now; I'll try later. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5642) Double free on exit, when specific attributetype is defined
by stef＠memberwebs.com 04 Aug '08

04 Aug '08

Full_Name: Stef Walter Version: 2.4.11 OS: FreeBSD 6.3-RELEASE-p2 URL: Submission from: (NULL) (38.99.5.20) When the following line is present in the schema (or slapd.conf), then upon exit any slap* process aborts due to a double free of memory: attributetype ( 278.1.3.6.1 NAME 'requireClass' SUP objectClass ) The OID is obviously fictional. This can be triggered reliably by running: # slaptest

1 0

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by michael＠stroeder.com 04 Aug '08

04 Aug '08

Kurt Zeilenga wrote: > For instance, web_ldap says it provides a signature for a digital > release, but clicking on the link provides a page which says "Not > found". I knew this (transition during a major OS update on my local machine). It's fixed. > But, as I noted with hashes, the fact that release messages are widely > published may make it more likely that such problems will be detected. Hashes have to be validated out-of-band each time a new release is published. The trusted keys be have to be validated out-of-band only each time a new trust anchor key is generated. > For instance, one does need to consider that > the host to sign the releases might itself been taken over and the > implications of such a takeover. There is no 100% security. I already know this. But raising security level is always an desirable goal. > Anyways, for this to go anywhere, I think you or others advocating it > need to more precisely state which attacks you concerned about, how you > think digital signatures will help, and detail requirements on that > signing (in particular, requirements on signing key so trust can be > established and maintained). I have no objections against a single release manager using his personal key or a dedicated key for OpenLDAP tar.gz signing stored in your local file system reasonably protected by a passphrase. As I see it you're the only one packaging the tar.gz. So this should not be too difficult for you. Well, if you don't want to do that then just leave it... > Note that these are human-factor attacks, not attacks based upon any > weakness in the PGP signing standards or implementations. I already know that. Ciao, Michael.

1 0

Re: (ITS#5586) SLAPD crashing with SIGABRT in connection.c on Solaris - reference through nil pointer
by dbb＠st-andrews.ac.uk 04 Aug '08

04 Aug '08

Just an update, still present in 2.4.11, backtrace below. Still can't work out why it's happening, it's something in the way that sendmail uses ldap and not the actual queries that cause the crash. I can replay the connections and searches to the server, and I've used Suns ldap load testing software to load up the server way over what we ever see and I can't replicate the SIGABRT or crash it in any other way. Any help appreciated. Thanks, Duncan # /usr/local/SUNWspro/bin/dbx /source/openldap-2.4.11/servers/slapd/.libs/slapd ./slapd-2.4.11-core-1300-4-8-08 For information about new features see `help changes' To remove this message, put `dbxenv suppress_startup_message 7.6' in your .dbxrc Reading slapd core file header read successfully Reading ld.so.1 Reading libldap_r-2.4.so.2.1.0 Reading liblber-2.4.so.2.1.0 Reading libltdl.so.3.1.5 Reading libdb-4.2.so Reading libicuuc.so.3 Reading libicudata.so.3 Reading libsasl2.so.2.0.22 Reading libdl.so.1 Reading libssl.so.0.9.8 Reading libcrypto.so.0.9.8 Reading libresolv.so.2 Reading libgen.so.1 Reading libnsl.so.1 Reading libsocket.so.1 Reading libc.so.1 Reading libgcc_s.so.1 Reading libgcc_s.so.1 Reading libpthread.so.1 Reading libm.so.2 Reading libCrun.so.1 Reading libc_psr.so.1 t@2 (l@2) terminated by signal ABRT (Abort) 0xfe2c0f90: __lwp_kill+0x0008: bcc,a,pt %icc,__lwp_kill+0x18 ! 0xfe2c0fa0 Current function is connection_next 871 assert( connections[*index].c_conn_state == SLAP_C_INVALID ); (dbx) where current thread: t@2 [1] __lwp_kill(0x0, 0x6, 0x0, 0x6, 0xfc00, 0x0), at 0xfe2c0f90 [2] raise(0x6, 0x0, 0xfe2a4a98, 0xffffffff, 0xfe2e8284, 0x6), at 0xfe25fd78 [3] abort(0xfdfff3f0, 0x1, 0xfe2e9288, 0xa83f0, 0xfe2eb298, 0x0), at 0xfe23ff98 [4] __assert(0x1a1808, 0x1a183c, 0x367, 0x0, 0xa810c, 0x1d7b80), at 0xfe2401d4 =>[5] connection_next(c = (nil), index = 0xfdfff6d4), line 871 in "connection.c" [6] connections_timeout_idle(now = 1217851229), line 225 in "connection.c" [7] slapd_daemon_task(ptr = (nil)), line 2152 in "daemon.c" (dbx) threads t@1 a l@1 ?() LWP suspended in __lwp_wait() o> t@2 a l@2 slapd_daemon_task() signal SIGABRT in __lwp_kill() t@3 a l@3 ldap_int_thread_pool_wrapper() sleep on 0x258570 in __lwp_park() t@4 a l@4 ldap_int_thread_pool_wrapper() sleep on 0x258570 in __lwp_park() t@5 a l@5 ldap_int_thread_pool_wrapper() sleep on 0x258570 in __lwp_park() t@6 a l@6 ldap_int_thread_pool_wrapper() sleep on 0x258570 in __lwp_park() Current function is connection_next 871 assert( connections[*index].c_conn_state == SLAP_C_INVALID ); (dbx) dump c_struct = 1 index = 0xfdfff6d4 c = (nil) (dbx) up Current function is connections_timeout_idle 225 c = connection_next( c, &connindex ) ) (dbx) dump connindex = 21 c = 0x2c14b0 now = 1217851229 i = 3 (dbx) up Current function is slapd_daemon_task 2152 connections_timeout_idle( now ); (dbx) dump rtask = (nil) cat = RECORD nwriters = 0 nfds = 68 writefds = RECORD at = 1 now = 1217851229 ns = 0 nrfds = 0 readfds = RECORD tdelta = 1 nwfds = 0 tvp = 0xfdfffb60 i = 22 tv = RECORD last_idle_check = 1217851221 l = 1 idle = RECORD ptr = (nil) ebadf = 0

1 0

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by h.b.furuseth＠usit.uio.no 04 Aug '08

04 Aug '08

Kurt(a)OpenLDAP.org writes: > I note as well that properly deploying release signing requires > more than script modification. For instance, one does need to > consider that the host to sign the releases might itself been > taken over and the implications of such a takeover. For that part, signatures in the 'https:' site would help. Not that I'm making an issue of it, I've got OpenLDAP installations that I didn't verify against any signature right on this host. -- Hallvard

1 0

Re: (ITS#5639) Digital (PGP-)signature for downloadable sources
by Kurt＠OpenLDAP.org 04 Aug '08

04 Aug '08

On Aug 3, 2008, at 11:38 AM, michael(a)stroeder.com wrote: > Full_Name: Michael Ströder > Version: HEAD > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (84.163.112.78) > > > Source files downloadable fomr http://www.openldap.org should be > digitally > signed. It's common practice to use PGP (GnuPG) for that. Saying this should be done solely because you claim it is "common practice" is lame. It would be better to state what attacks you worry about, and why you think providing digital signatures using a trustworthy signing key, and what requirements are for this trustworthy signing key. But I note the practice is, itself, lame. Often there is no reason to trust the signing key other than where the link to the signing key was published. Often the signature itself is not widely published, or errors in providing it too far common to raise concerns in case the signature publication fails (by error or attack). For instance, web_ldap says it provides a signature for a digital release, but clicking on the link provides a page which says "Not found". Maybe your releases have been hacked, but most likely its just publication issue. Most verifiers faced with such such a "Not found" message will just not perform the verification. Often they won't even bother to raise an issue to the publisher. And if an attacker successfully takes over the main website, we have to realize that they can replace everything. Maybe they will replace whatever text we have about digital signatures with a statement that signatures are no longer provided, and then delete them. Or they may fake publication errors. They could even fake an email to the announcement list that signatures are temporarily not provided due to operational reasons, or announce a new signing key. Fortunately, it is unlikely that such an attack would go unnoticed for long period of time. I would argue that if takeover was a major threat (which it might well be), that more time should be spent detecting a takeover (we have some in place). I also find it interesting that you suggest signing tarballs and not announcement messages. I note that an attacker need not modify a tarball, or cause a new tarball to be distributed, to successfully mount an attack against the downloader. One could simply point "stable" to a known problematic release. As the signature for the problematic release would be valid, it doesn't help the downloader in detecting they got the wrong release. Of course, even if you sign release messages, the attacker can still replace the current messages with prior ones whose signatures would still be valid. But, as I noted with hashes, the fact that release messages are widely published may make it more likely that such problems will be detected. I note as well that properly deploying release signing requires more than script modification. For instance, one does need to consider that the host to sign the releases might itself been taken over and the implications of such a takeover. Also, in signing announcements, considerable testing would need to take place to ensure produced signatures were actually verifiable (lots of things muck with email in ways that invalid email signatures). Anyways, for this to go anywhere, I think you or others advocating it need to more precisely state which attacks you concerned about, how you think digital signatures will help, and detail requirements on that signing (in particular, requirements on signing key so trust can be established and maintained). I note that GNU PGP folks say that verification of a wide published message digest is sufficient to ensure the integrity of their releases. Basically, PGP signing here offers little value as an attacker who has supplanted the other protections (namely widely distributed message digests) is in position to convince most every downloader than the current release is not signed, or was signed but that signature is not currently available, or was signed by some key other than that previously used by the distributor. Note that these are human-factor attacks, not attacks based upon any weakness in the PGP signing standards or implementations.

1 0

(ITS#5641) Segmentation fault - slaptest and slapd
by hfranzke＠tee.toshiba.de 04 Aug '08

04 Aug '08

Full_Name: Helmut Franzke Version: 2.4.11 / 2.4.9 OS: Ubuntu server 8.04.1 / Centos 4.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (192.109.150.105) I could get slaptest/slapd to produce a segmentation fault by using the unique overlay and a unique_uri with a base dn. This behaviour depends on the position of the overlay/unique_uri in slapd.conf and doesn't appear if you don't use a base dn regardless of the position. (I know an overlay should be defined after the other configuration settings have been set. I encountered this bug when I put it in the first part by mistake, see below) I could reproduce this with OpenLdap 2.4.9 from Ubuntu 8.04.1 server as well as a fresh compiled OpenLdap 2.4.11 on Ubuntu 8.04.1 and Centos 4.6 How to reproduce: Take a (very simple) OpenLdap installation and put the overlay stuff before the suffix configuration: ------------------------------------------------------------- . . moduleload unique . . ####################################################################### # Specific Directives for database #1, of type hdb: # Database specific directives apply to this databasse until another # 'database' directive occurs database hdb # The base of your directory in database #1 overlay unique unique_uri ldap:///"dc=my-domain,dc=com"?gidNumber?sub suffix "dc=my-domain,dc=com" . . ------------------------------------------------------- Then check the configuration: ldapmaster-dev:/etc/ldap#slaptest Segmentation fault ldapmaster-dev:/etc/ldap#slapd -d 4 Segmentation fault Putting the overlay stuff at the end of the database section or the suffix configuration before the overly stuff it works as expected. It also works without a base dn (unique_uri ldap:///?gidNumber?sub) regardless of the position.

1 0

(ITS#5640) slapd scans too many objects at startup
by ali.pouya＠free.fr 04 Aug '08

04 Aug '08

Full_Name: Ali Pouya Version: 2.4.11 OS: Linux 2.6 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (145.242.11.4) I have a test directory with two mirrors A and B and a replica C connected to A. I usaually use server A for write operations. I encounter the following problems : 1) If the data base is initiated in stand alone (so serverID defaults to zero) and then I set serverIDs 1 and 2 for A and B then each time I start up slapd on C it scans all of the objects writtent on A afterwards, producing the followin log for each object : ====================================================== entry_decode: "cn=testr1,ou=resources,ou=mefi,o=gouv,c=fr" <= entry_decode(cn=testr1,ou=resources,ou=mefi,o=gouv,c=fr) => bdb_dn2id("cn=testr1,ou=resources,ou=mefi,o=gouv,c=fr") <= bdb_dn2id: got id=0x9 => test_filter GE => access_allowed: search access to "cn=testr1,ou=resources,ou=mefi,o=gouv,c=fr" "entryCSN" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 ====================================================== For a directory with 10 million objects the this takes more than one hour (slapd is running but the service is not available). If I set serverID=3 on the replica C the problem disapears. 2) If I do only one write operation on B, then I get two contextCSN values, which is normal. But il this case slapd on B scans, at each startup, all objecs written on A after the write operation on B. The log and the effect are similar to those explained above. Should I consider this as a normal behaviour or a bug ? My mirror configuration is similar to the one recommended in Admin's Guide. Of course I can provide more detailed information if required. Thanks for your HELP Best Regards Ali

1 0

(ITS#5639) Digital (PGP-)signature for downloadable sources
by michael＠stroeder.com 03 Aug '08

03 Aug '08

Full_Name: Michael Ströder Version: HEAD OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (84.163.112.78) Source files downloadable fomr http://www.openldap.org should be digitally signed. It's common practice to use PGP (GnuPG) for that.

1 0

Re: (ITS#5638) Openldap 2.4.11 aborts in oc_filter in back_bdb/search.c
by hyc＠symas.com 02 Aug '08

02 Aug '08

stef(a)memberwebs.com wrote: > Full_Name: Stef > Version: 2.4.11 > OS: FreeBSD 6.3-RELEASE-p2 > URL: > Submission from: (NULL) (38.99.5.20) > > > After upgrading to 2.4.11 all our LDAP servers would abort when modifications > were made to them. Here are the last messages leading up to and including the > abort: This appears to be the same as ITS#5581. Please direct all further emails to that item instead. It looks like there's a problem in your slapo-unique configuration. > > => bdb_list_candidates 0xa0 > => bdb_filter_candidates > OR > => bdb_list_candidates 0xa1 > => bdb_filter_candidates > EQUALITY > => bdb_equality_candidates (objectClass) > => key_read > bdb_idl_fetch_key: [b49d1940] > <= bdb_index_read: failed (-30989) > <= bdb_equality_candidates: id=0, first=0, last=0 > <= bdb_filter_candidates: id=0 first=0 last=0 > => bdb_filter_candidates > <= bdb_filter_candidates: id=0 first=0 last=0 > <= bdb_list_candidates: id=0 first=0 last=0 > <= bdb_filter_candidates: id=0 first=0 last=0 > <= bdb_list_candidates: id=0 first=1 last=0 > <= bdb_filter_candidates: id=0 first=1 last=0 > bdb_search_candidates: id=0 first=1 last=0 > bdb_search: no candidates > send_ldap_result: conn=7 op=13 p=3 > send_ldap_result: err=0 matched="" text="" > => unique_search found 0 records > ==> unique_search > str2filter "(&(?=error)(|))" > put_filter: "(&(?=error)(|))" > put_filter: AND > put_filter_list "(?=error)(|)" > put_filter: "(?=error)" > put_filter: simple > put_simple_filter: "?=error" > => bdb_search > bdb_dn2entry("dc=fam") > => access_allowed: search access to "dc=fam" "entry" requested > <= root access granted > => access_allowed: search access granted by manage(=mwrscxd) > search_candidates: base="dc=fam" (0x00000001) scope=2 > Assertion failed: (f != NULL), function oc_filter, file search.c, line 970. > Abort trap: 6 -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5635) slapi SLAPI_MODIFY_MODS mod->mod_op offset.
by hyc＠symas.com 01 Aug '08

01 Aug '08

m.d.t.evans(a)qmul.ac.uk wrote: > Full_Name: Martin Evans > Version: 2.4.10 > OS: Linux/F9 > URL: > Submission from: (NULL) (138.37.8.59) > > > In a slapi pre-modify function (SLAPI_PLUGIN_PRE_MODIFY_FN) you can get a null > terminated array of LDAPMod modifications. Like so: > > /* get list of mods */ > if (slapi_pblock_get(pb,SLAPI_MODIFY_MODS,&mods) || !mods) { > LOG("[%i] Error retrieving LDAPMods.\n",conn_id); > return (PLUGIN_STOP); > } > DEBUG("[%i] Got LDAPMods.",conn_id); > > > If you loop over these and extract the mod_op values which are held in > mod->mod_op, the values seem to be offset by 128. i.e. an add operation, which > should have a value of 0 (LDAP_MOD_ADD) has a value of 128. A delete operation, > should have 2 (LDAP_MOD_DELETE) it seems to be set to 130. > > The numbers differ only in the 8th bit. So I'm wondering if there is a strange > signed/unsigned int conversion thing going on somewhere. That's the LDAP_MOD_BVALUES flag. There's no bug here, this ITS will be closed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5638) Openldap 2.4.11 aborts in oc_filter in back_bdb/search.c
by stef＠memberwebs.com 01 Aug '08

01 Aug '08

Full_Name: Stef Version: 2.4.11 OS: FreeBSD 6.3-RELEASE-p2 URL: Submission from: (NULL) (38.99.5.20) After upgrading to 2.4.11 all our LDAP servers would abort when modifications were made to them. Here are the last messages leading up to and including the abort: => bdb_list_candidates 0xa0 => bdb_filter_candidates OR => bdb_list_candidates 0xa1 => bdb_filter_candidates EQUALITY => bdb_equality_candidates (objectClass) => key_read bdb_idl_fetch_key: [b49d1940] <= bdb_index_read: failed (-30989) <= bdb_equality_candidates: id=0, first=0, last=0 <= bdb_filter_candidates: id=0 first=0 last=0 => bdb_filter_candidates <= bdb_filter_candidates: id=0 first=0 last=0 <= bdb_list_candidates: id=0 first=0 last=0 <= bdb_filter_candidates: id=0 first=0 last=0 <= bdb_list_candidates: id=0 first=1 last=0 <= bdb_filter_candidates: id=0 first=1 last=0 bdb_search_candidates: id=0 first=1 last=0 bdb_search: no candidates send_ldap_result: conn=7 op=13 p=3 send_ldap_result: err=0 matched="" text="" => unique_search found 0 records ==> unique_search str2filter "(&(?=error)(|))" put_filter: "(&(?=error)(|))" put_filter: AND put_filter_list "(?=error)(|)" put_filter: "(?=error)" put_filter: simple put_simple_filter: "?=error" => bdb_search bdb_dn2entry("dc=fam") => access_allowed: search access to "dc=fam" "entry" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) search_candidates: base="dc=fam" (0x00000001) scope=2 Assertion failed: (f != NULL), function oc_filter, file search.c, line 970. Abort trap: 6

1 0

(ITS#5637) dynacl broken when an access mask has been already applied by previous ACL rule
by kouk＠noc.uoa.gr 01 Aug '08

01 Aug '08

Full_Name: Kostantinos Koukopoulos Version: 2.4.11 OS: Solaris URL: ftp://ftp.openldap.org/incoming/kostantinos-koukopoulos-080801.diff Submission from: (NULL) (195.134.100.30) There is a bug in the function 'slap_acl_mask' in servers/slapd/acl.c that affects the processing of dynacls. In particular the code attempts to apply ACL_ACCESS2PRIV to a variable already containing a slap_mask_t value. By chance this does not make a difference except when the dynacl rule is applied after a 'break' in a previous rule that has altered the default mask. It appears that the intention was to check whether the requested access level applies to the dynacl rule access mask. Instead the check is made against the current applied mask. The referenced patch fixes this issue by passing the requested access level as an extra parameter to the function and using it for the check.

1 0

(ITS#5636) performance improvement in ACI evaluation
by stef＠noc.uoa.gr 01 Aug '08

01 Aug '08

Full_Name: Stefanos Stamatis Version: 2.4.11 OS: Solaris URL: ftp://ftp.openldap.org/incoming/stefanos-stamatis-080801.diff Submission from: (NULL) (195.134.100.30) The function 'aci_mask' in servers/slapd/aci.c will evaluate the type and subject part of an ACI even if the 'action;rights;attr;' part of the ACI does not apply. This is bad for performance, especially if the subject is a set which dereferences the objects 'user' or 'this'. The referenced patch solves this issue by fixing 'aci_list_get_rights' to return 0 if the returned mask does not effect a change.

1 0

(ITS#5635) slapi SLAPI_MODIFY_MODS mod->mod_op offset.
by m.d.t.evans＠qmul.ac.uk 31 Jul '08

31 Jul '08

Full_Name: Martin Evans Version: 2.4.10 OS: Linux/F9 URL: Submission from: (NULL) (138.37.8.59) In a slapi pre-modify function (SLAPI_PLUGIN_PRE_MODIFY_FN) you can get a null terminated array of LDAPMod modifications. Like so: /* get list of mods */ if (slapi_pblock_get(pb,SLAPI_MODIFY_MODS,&mods) || !mods) { LOG("[%i] Error retrieving LDAPMods.\n",conn_id); return (PLUGIN_STOP); } DEBUG("[%i] Got LDAPMods.",conn_id); If you loop over these and extract the mod_op values which are held in mod->mod_op, the values seem to be offset by 128. i.e. an add operation, which should have a value of 0 (LDAP_MOD_ADD) has a value of 128. A delete operation, should have 2 (LDAP_MOD_DELETE) it seems to be set to 130. The numbers differ only in the 8th bit. So I'm wondering if there is a strange signed/unsigned int conversion thing going on somewhere. For info, I need to do the following to fix those values in my slapi code so that my comparisons of mod->mod_op match the #defined macros LDAP_MOD_(ADD|DELETE|&c): while((mod=*mods)){ /* workaround for bad mod_op values */ if(mod->mod_op>127){ DEBUG("[%i] mod_op value (%i) is offset, fixing.",conn_id,mod->mod_op); mod->mod_op-=128; } if(mod->mod_op==LDAP_MOD_ADD) { ... } } Thought I'd report it. Cheers, Martin.

1 0

(ITS#5634) str2entry NULL (smr_normalize reqControls 21) when slapadding accesslog-DB with reqControls
by michael＠stroeder.com 30 Jul '08

30 Jul '08

Full_Name: Michael Ströder Version: RE24 OS: Linux URL: Submission from: (NULL) (84.163.81.95) I tried to restore an accesslog reqControls: {0}{2.16.840.1.113730.3.4.2} <= str2entry NULL (smr_normalize reqControls 21) slapadd: could not parse entry (line=6) Ciao, Michael.

1 0

Slapd terminates unexpectedly
by Craig Worgan 26 Jul '08

26 Jul '08

Hello, I am running OpenLDAP 2.3.42 on Windows as a service and am experiencing very frequent cases where the slapd service terminates unexpectedly. I run the same OpenLDAP load on Redhat Linux where I have had only a single (unconfirmed) report of slapd stopping on its own. I suspected that the problem may be related to the Windows Service Manager, so I ran a slapd instance from the command line to remove WSM from the equation. I was able to reproduce the problem twice, each time the console printed the following message: Assertion failed: sd == AC_SOCKET_INVALID, file connection.c, line 288 This application has requested the Runtime to terminate it in an unusual way. Please contact the application's support team for more information. I am currently running slapd in the console with full debugging turned on, but as of yet haven't seen the problem. I will forward a more complete trace if I can capture one. I have been running various version of OpenLDAP on Windows in this manner for the past 4 years without problems. Recently, I started using syncrepl and PPOLICY. I don't think this is related to my problem, but thought it worth noting. Thanks, Craig Worgan

2 1

Re: (ITS#5632) "overlay" directive listing in slapd.conf misleading
by hyc＠symas.com 25 Jul '08

25 Jul '08

quanah(a)OpenLDAP.org wrote: > Full_Name: Quanah Gibson-Mount > Version: 2.4 > OS: NA > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (75.111.29.239) > > > The "overlay" directive in slapd.conf is listed under "general database > options", but it can in fact be global, depending on the overlay. At least the > wording in slapd.conf for this directive should be updated to reflect that. The majority of overlays don't work as globals. Since those that do are the exception, it's probably better to just note these exceptions on the individual slapo- manpages. A lot more would need to be reworked to really describe things accurately; there are in fact no global overlays at all. Just that some of them work when attached to the frontendDB database. And the frontendDB was created after overlays were first designed; the docs just haven't caught up to this fact yet. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5633) slapo-retcode manpage
by ando＠sys-net.it 25 Jul '08

25 Jul '08

----- quanah(a)OpenLDAP.org wrote: > Full_Name: Quanah Gibson-Mount > Version: 2.4 > OS: > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (75.111.29.239) > > > The slapo-retcode man page has this as the example: > > overlay retcode > retcode-parent "ou=RetCodes,dc=example,dc=com" > include ./retcode.conf > > # Wait 10 seconds, then return success (0x00) > retcode-item "cn=Success after 10 seconds" 0x00 > sleeptime=10 > # Wait 10 seconds, then return timelimitExceeded (0x03) > retcode-item "cn=Timelimit after 10 seconds" 0x03 > sleeptime=10 > > > I think the "include" bit there is a mistake, and the following lines > were the > contents of it? Not sure about that (don't recall writing that example, at least) but a retcode.conf actually exists, and contains declarations for LDAP (and LDAPish) errors. The additional lines provide extra declarations for errors that are returned only after sleeping 10 seconds, to test client's resilience to delays or intermediate timeouts. So the two things are not incompatible. Of course, the example could clarify where retcode.conf can be found, if it is installed at all. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

(ITS#5633) slapo-retcode manpage
by quanah＠OpenLDAP.org 25 Jul '08

25 Jul '08

Full_Name: Quanah Gibson-Mount Version: 2.4 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.29.239) The slapo-retcode man page has this as the example: overlay retcode retcode-parent "ou=RetCodes,dc=example,dc=com" include ./retcode.conf # Wait 10 seconds, then return success (0x00) retcode-item "cn=Success after 10 seconds" 0x00 sleeptime=10 # Wait 10 seconds, then return timelimitExceeded (0x03) retcode-item "cn=Timelimit after 10 seconds" 0x03 sleeptime=10 I think the "include" bit there is a mistake, and the following lines were the contents of it? --Quanah

1 0

(ITS#5632) "overlay" directive listing in slapd.conf misleading
by quanah＠OpenLDAP.org 25 Jul '08

25 Jul '08

Full_Name: Quanah Gibson-Mount Version: 2.4 OS: NA URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.29.239) The "overlay" directive in slapd.conf is listed under "general database options", but it can in fact be global, depending on the overlay. At least the wording in slapd.conf for this directive should be updated to reflect that.

1 0

(ITS#5631) slapd crashes due to assertion failure
by jwm＠horde.net 25 Jul '08

25 Jul '08

Full_Name: John Morrissey Version: RE23 from 12 June 2008 w/ITS#5565 fix OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (2001:4830:120d:0:21f:5bff:fee9:da92) Our provider slapd continues to crash due to the same assertion failure described in ITS#5565. We've patched our slapd locally with CVS revisions 1.220 and 1.147.2.28 from servers/slapd/overlays/syncprov.c, which is the apparent fix for ITS#5565/5401. These crashes seem to coincide at least somewhat with loss of network connectivity to one of this slapd's consumers. Backtraces are below. GNU gdb 6.4.90-debian Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i486-linux-gnu"...Using host libthread_db library "/lib/tls/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread -1213171488 (LWP 14247)] [New Thread -1948275792 (LWP 14282)] [New Thread -1931478096 (LWP 14280)] [New Thread -1927283792 (LWP 14279)] [New Thread -1923089488 (LWP 14278)] [New Thread -1918895184 (LWP 14277)] [New Thread -1884472400 (LWP 14254)] [New Thread -1880278096 (LWP 14253)] [New Thread -1876083792 (LWP 14252)] [New Thread -1539327056 (LWP 14251)] Failed to read a valid object file image from memory. 0xb7c55183 in pthread_join () from /lib/tls/libpthread.so.0 [New Thread -1961915472 (LWP 14285)] [New Thread -1966109776 (LWP 14286)] [New Thread -1971356752 (LWP 14287)] [New Thread -1975551056 (LWP 14288)] [New Thread -1979745360 (LWP 14289)] [New Thread -1984992336 (LWP 14290)] [New Thread -2018575440 (LWP 14291)] [New Thread -2059420752 (LWP 14292)] [New Thread -2081453136 (LWP 14293)] [New Thread -2085647440 (LWP 14294)] [New Thread -2090894416 (LWP 14295)] [New Thread -2105586768 (LWP 14296)] [New Thread 2141772720 (LWP 14297)] [New Thread 2137578416 (LWP 14298)] [New Thread 2102393776 (LWP 14305)] [New Thread 2098199472 (LWP 14306)] [New Thread 2094005168 (LWP 14307)] [New Thread 2061474736 (LWP 14340)] [New Thread 2057280432 (LWP 14341)] [New Thread 1967127472 (LWP 19362)] [New Thread 1961880496 (LWP 19363)] Program received signal SIGABRT, Aborted. [Switching to Thread -1975551056 (LWP 14288)] 0xb7b45947 in raise () from /lib/tls/libc.so.6 Thread 31 (Thread 1961880496 (LWP 19363)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x927c8a8, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x57, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x8227498, ltk_data = 0xef, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x741fd008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 1961880496 i = 766 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 30 (Thread 1967127472 (LWP 19362)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8eaf988, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x56, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x8227498, ltk_data = 0xf0, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x739fc008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 1967127472 i = 607 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 29 (Thread 2057280432 (LWP 14341)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x82ae770, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x54, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x8227498, ltk_data = 0xd1, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x79bf7008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2057280432 i = 612 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 28 (Thread 2061474736 (LWP 14340)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x846f4f0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x55, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x8227498, ltk_data = 0xd2, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x793f6008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2061474736 i = 676 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 27 (Thread 2094005168 (LWP 14307)): #0 0xb7a61e47 in __memp_fget_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #1 0xb79d93f9 in __bam_search_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #2 0xb79cd0b3 in __bam_c_init_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #3 0xb79ce101 in __bam_c_init_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #4 0xb7a2aaee in __db_c_get_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #5 0xb7a32456 in __db_c_get_pp_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #6 0xb7981080 in bdb_idl_delete_key (be=0x7ccfed4c, db=0x82170d0, tid=0x6d43e100, key=0x7ccfeb74, id=2226664) at /misc/src/net/openldap/servers/slapd/back-bdb/idl.c:930 rc = 0 data = {data = 0x7ccfeb14, size = 4, ulen = 4, dlen = 0, doff = 0, flags = 32} cursor = (DBC *) 0x8238200 lo = <value optimized out> hi = <value optimized out> tmp = <value optimized out> nid = <value optimized out> nlo = 0 nhi = 2094001012 err = <value optimized out> __PRETTY_FUNCTION__ = "bdb_idl_delete_key" #7 0xb797edb2 in bdb_dn2id_delete (op=0x7ccfee98, txn=0x6d43e100, eip=0x8217ef0, e=0x73739630) at /misc/src/net/openldap/servers/slapd/back-bdb/dn2id.c:212 bdb = (struct bdb_info *) 0x819d478 db = (DB *) 0x82170d0 buf = 0x7c805ecc "@reqStart=20080709154901.000011Z,cn=log" key = {data = 0x7c805ecc, size = 40, ulen = 0, dlen = 0, doff = 0, flags = 32} lock = {off = 280856, ndx = 895, gen = 211030, mode = DB_LOCK_WRITE} pdn = <value optimized out> ptr = <value optimized out> rc = 0 #8 0xb79711d8 in bdb_delete (op=0x7ccfee98, rs=0x7ccff1f4) at /misc/src/net/openldap/servers/slapd/back-bdb/delete.c:356 bdb = (struct bdb_info *) 0x819d478 matched = <value optimized out> pdn = {bv_len = 6, bv_val = 0x6e72be78 "cn=log"} e = (Entry *) 0x73739630 p = (Entry *) 0x701ec9f0 ei = (EntryInfo *) 0x707c1628 eip = (EntryInfo *) 0x8217ef0 manageDSAit = 0 children = (AttributeDescription *) 0x814af20 entry = (AttributeDescription *) 0x814ad90 ltid = (DB_TXN *) 0x6d847168 lt2 = (DB_TXN *) 0x6d43e100 opinfo = {boi_bdb = 0x7ccfed4c, boi_txn = 0x6d847168, boi_err = 0, boi_locker = 2147679477, boi_acl_cache = 0, boi_locks = 0x0} eid = 1885339664 locker = 2147679477 lock = {off = 280568, ndx = 464, gen = 205302, mode = DB_LOCK_READ} plock = {off = 280208, ndx = 386, gen = 271579, mode = DB_LOCK_READ} num_retries = 0 rc = <value optimized out> preread_ctrl = (LDAPControl **) 0x0 ctrls = {0x0, 0x6be0f6cc, 0x0, 0x73739630, 0xb795c640, 0x6be0f6c0} num_ctrls = 0 parent_is_glue = <value optimized out> parent_is_leaf = 2094001224 #9 0x080c57e0 in overlay_op_walk (op=0x7ccfee98, rs=0x7ccff1f4, which=op_delete, oi=0x819d960, on=0x819da60) at /misc/src/net/openldap/servers/slapd/backover.c:650 sc_next = <value optimized out> rc = 32768 #10 0x080c5bde in over_op_func (op=0x7ccfee98, rs=0x7ccff1f4, which=op_delete) at /misc/src/net/openldap/servers/slapd/backover.c:702 oi = (slap_overinfo *) 0x819d960 on = (slap_overinst *) 0x819da60 be = (BackendDB *) 0x819d370 db = {bd_info = 0xb7989920, be_ctrls = "\000\001\001\001\000\000\001\000\001\000\001\001\001\000\001", '\0' <repeats 17 times>, "\001", be_flags = 256, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x819d728, be_nsuffix = 0x819d740, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 14, bv_val = 0x819d5e0 "cn=root,cn=log"}, be_rootndn = {bv_len = 14, bv_val = 0x819d7c8 "cn=root,cn=log"}, be_rootpw = {bv_len = 0, bv_val = 0x0}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x819d7b8, be_acl = 0x818c9e8, be_dfltaccess = ACL_READ, be_replica = 0x0, be_replogfile = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0x82165e0, be_pcl_mutex = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {__status = 0, __spinlock = 0}}, be_pcl_mutexp = 0x819d440, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0xb79895c0, be_private = 0x819d478, be_next = {stqe_next = 0x819dc98}} cb = {sc_next = 0xb7964660, sc_response = 0x80c5550 <over_back_response>, sc_cleanup = 0, sc_private = 0x819d960} rc = -1327610800 __PRETTY_FUNCTION__ = "over_op_func" #11 0xb795fd20 in accesslog_purge (ctx=0x7ccff2c8, arg=0x819e288) at /misc/src/net/openldap/servers/slapd/overlays/accesslog.c:589 i = 41 li = <value optimized out> conn = {c_struct_state = 0, c_conn_state = 0, c_conn_idx = 0, c_close_reason = 0x0, c_mutex = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {__status = 0, __spinlock = 0}}, c_sb = 0x0, c_starttime = 0, c_activitytime = 0, c_connid = 4294967295, c_peer_domain = {bv_len = 0, bv_val = 0x80f4a70 ""}, c_peer_name = {bv_len = 0, bv_val = 0x80f4a70 ""}, c_listener = 0x80f5d20, c_sasl_bind_in_progress = 0, c_sasl_bind_mech = {bv_len = 0, bv_val = 0x0}, c_sasl_dn = {bv_len = 0, bv_val = 0x0}, c_sasl_authz_dn = {bv_len = 0, bv_val = 0x0}, c_authz_backend = 0x0, c_authz_cookie = 0x0, c_authz = {sai_method = 0, sai_mech = {bv_len = 0, bv_val = 0x0}, sai_dn = {bv_len = 0, bv_val = 0x0}, sai_ndn = {bv_len = 0, bv_val = 0x0}, sai_ssf = 0, sai_transport_ssf = 0, sai_tls_ssf = 0, sai_sasl_ssf = 0}, c_protocol = 0, c_ops = {stqh_first = 0x0, stqh_last = 0x0}, c_pending_ops = {stqh_first = 0x0, stqh_last = 0x0}, c_write_mutex = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {__status = 0, __spinlock = 0}}, c_write_cv = {__c_lock = {__status = 0, __spinlock = 0}, __c_waiting = 0x0, __padding = '\0' <repeats 27 times>, __align = 0}, c_currentber = 0x0, c_writewaiter = 0, c_is_tls = 0, c_needs_tls_accept = 0, c_sasl_layers = 0, c_sasl_done = 0, c_sasl_authctx = 0x0, c_sasl_sockctx = 0x0, c_sasl_extra = 0x0, c_sasl_bindop = 0x0, c_pagedresults_state = {ps_be = 0x0, ps_size = 0, ps_cookie = 0, ps_count = 0}, c_n_ops_received = 0, c_n_ops_executing = 0, c_n_ops_pending = 0, c_n_ops_completed = 0, c_n_get = 0, c_n_read = 0, c_n_write = 0, c_pb = 0x0, c_extensions = 0x0, c_clientfunc = 0, c_clientarg = 0x0, c_send_ldap_result = 0x807ef50 <slap_send_ldap_result>, c_send_search_entry = 0x807c600 <slap_send_search_entry>, c_send_search_reference = 0x807bd00 <slap_send_search_reference>, c_send_ldap_extended = 0, c_send_ldap_intermediate = 0} opbuf = {buffer = "hÔ|J\000\000\000\n§\210H\000\000\000\000LÌ|&\000\000\000H¬[n&\000\000\000Xærn\001\000\000\000\000\000\000\000ˇˇˇˇˇˇˇˇ\000\000\000\000\001\000\000\000\000º\023\b|Ú|\033\000\000\000\f\177|", '\0' <repeats 52 times>, "Ô|", '\0' <repeats 12 times>, "\016\000\000\000\031\b\016\000\000\000»◊\031\b", '\0' <repeats 24 times>, "ž\\\200|\000\000\000\000 \000\000\000¥Ò|\204Ï|\000\000\000\000\000\000\000\000ˇˇˇˇD|", '\0' <repeats 12 times>, "»Ú|\bFI\207∞æ\023\bconn=-1 op=0", '\0' <repeats 171 times>, ialign = 2094002024, lalign = 2094002024, falign = 8.63728948e+36, dalign = 1.5806226299381059e-312, palign = 0x7ccfef68 ""} op = (Operation *) 0x7ccfee98 rs = {sr_type = REP_RESULT, sr_tag = 107, sr_msgid = 0, sr_err = -30990, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}, sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x813bc00, r_nentries = 0, r_v2ref = 0x0}}, sr_flags = 0} cb = {sc_next = 0x0, sc_response = 0xb795fd70 <log_old_lookup>, sc_cleanup = 0, sc_private = 0x7ccff230} f = {f_choice = 166, f_un = {f_un_result = 2094002800, f_un_dn = 0x7ccff270, f_un_desc = 0x7ccff270, f_un_ava = 0x7ccff270, f_un_ssa = 0x7ccff270, f_un_mra = 0x7ccff270, f_un_complex = 0x7ccff270}, f_next = 0x0} ava = {aa_desc = 0x8187280, aa_value = {bv_len = 15, bv_val = 0x7ccff24a "20080710154722Z"}} pd = {slots = 7400, used = 7385, dn = 0x6de6b410, ndn = 0x6df5a040, csn = {bv_len = 32, bv_val = 0x7ccff1b4 "20080709154745Z#000000#00#000000ÿŽ-\220ËÒ|Ω&Ï∑d\023\b8˛~\b\bÚ|\036˘\a\bd\023\b"}} timebuf = "20080710154722Z\000|\213l≈∑" csnbuf = "20080709154745Z#000000#00#000000ÿŽ-\220ËÒ|Ω&Ï∑d\023\b8˛~\b\bÚ|\036˘\a\bd\023\b" old = 1215704842 #12 0xb7ec1eff in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:478 ctx = (ldap_int_thread_ctx_t *) 0x8da00698 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x87494608, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x51, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x8227498, ltk_data = 0xbb, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x7adfa008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2094005168 i = 758 hash = <value optimized out> #13 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #14 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 26 (Thread 2098199472 (LWP 14306)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8f0c2e8, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0xb9, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x7bdfc008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x53, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2098199472 i = 567 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 25 (Thread 2102393776 (LWP 14305)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x897c1d0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x52, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x8227498, ltk_data = 0xba, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x7b5fb008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2102393776 i = 631 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 24 (Thread 2137578416 (LWP 14298)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8ceb480, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0xac, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x7e08a008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x4f, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2137578416 i = 626 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 23 (Thread 2141772720 (LWP 14297)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8d122a0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x97, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x7e88b008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x4e, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2141772720 i = 690 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 22 (Thread -2105586768 (LWP 14296)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x844bc70, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x7f, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x8028f008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x50, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2189380528 i = 508 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 21 (Thread -2090894416 (LWP 14295)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x83e5fb0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x45, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x827f5008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x8227498, ltk_data = 0x80, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2204072880 i = 525 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 20 (Thread -2085647440 (LWP 14294)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8448790, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x85, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x82168f8, ltk_data = 0x4a, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x7fa8e008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2209319856 i = 621 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 19 (Thread -2081453136 (LWP 14293)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8435378, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x6f, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x81af3008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x47, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2213514160 i = 685 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 18 (Thread -2059420752 (LWP 14292)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x842d400, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x6e, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x81291008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x49, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2235546544 i = 559 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 17 (Thread -2018575440 (LWP 14291)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x835d1c8, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x3a, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x853fc008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x8227498, ltk_data = 0x6d, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2276391856 i = 736 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 16 (Thread -1984992336 (LWP 14290)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8260540, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x34, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x8227498, ltk_data = 0x6b, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x86bff008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2309974960 i = 595 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 15 (Thread -1979745360 (LWP 14289)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8251780, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x6a, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x82168f8, ltk_data = 0x39, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x83ef9008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2315221936 i = 691 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 14 (Thread -1975551056 (LWP 14288)): #0 0xb7b45947 in raise () from /lib/tls/libc.so.6 No symbol table info available. #1 0xb7b470c9 in abort () from /lib/tls/libc.so.6 No symbol table info available. #2 0xb7b3f05f in __assert_fail () from /lib/tls/libc.so.6 No symbol table info available. #3 0x0806bba2 in connection_state_closing (c=0x902da338) at /misc/src/net/openldap/servers/slapd/connection.c:765 state = <value optimized out> __PRETTY_FUNCTION__ = "connection_state_closing" #4 0x0807bc34 in send_ldap_ber (conn=0x902da338, ber=0x8a3f6dac) at /misc/src/net/openldap/servers/slapd/result.c:162 err = 6 sd = 135489725 bytes = <value optimized out> #5 0x0807dd19 in slap_send_search_entry (op=0x8a3f6f20, rs=0x8a3f71cc) at /misc/src/net/openldap/servers/slapd/result.c:1137 a_flags = 0x1 <Address 0x1 out of bounds> berbuf = {buffer = "\002\000\001\000\000\000\000\000ˇˇˇˇ\000\000\000\000\000\000\000\000$aO\211\232aO\211RqO\211\000\000\000\000\000\000\000\000\2107&\b\000\000\000\000\2107&\b\000\000\000\000(MÎ∑\030\000\000\000(MÎ∑\000\000\000\000xr?\212\030n?\212\000Î∑\r\000\000\000\2107&\b\000\000\000\000\tÎ∑\f\000\000\000xr?\2128n?\212\005Î∑\fPO\211hn?\212\f\000\000\000tn?\212\001\000\000\000 o?\212»n?\212\231t\f\bhn?\212\f\000\000\000\001\000\000\000xr?\212\2107&\bln?\212hn?\212\206ıÍ∑\001\000\000\000\000\000\000\000csn=,rid=001"..., ialign = 65538, lalign = 65538, falign = 9.18382988e-41, dalign = 3.2380074297143616e-319, palign = 0x10002 <Address 0x10002 out of bounds>} ber = (BerElement *) 0x8a3f6dac a = (Attribute *) 0x6 i = 1 j = <value optimized out> rc = <value optimized out> edn = 0x6d253cef "reqStart=20080709154858.000017Z,cn=log" userattrs = 1 acl_state = {as_recorded = 0, as_vd_acl = 0x0, as_vi_acl = 0x0, as_vd_acl_mask = 0, as_vd_acl_matches = {{rm_so = 0, rm_eo = 0} <repeats 100 times>}, as_vd_acl_count = 0, as_vd_access = 0x0, as_vd_access_count = 0, as_result = 0, as_vd_ad = 0x0} attrsonly = 0 ad_entry = (AttributeDescription *) 0x814ad90 e_flags = (char **) 0x0 #6 0xb7958eea in syncprov_qtask (ctx=0x8a3f72c8, arg=0x76944290) at /misc/src/net/openldap/servers/slapd/overlays/syncprov.c:798 so = (syncops *) 0x868f758 on = (slap_overinst *) 0x819da60 opbuf = {buffer = "o?\212c\000\000\000£R\207H\000\000\000\000Ãp?\212\006\000\000\000QÌ∏\v\006\000\000\000XÌ∏\v\002\000\000\000\000\000\000\000ˇˇˇˇˇˇˇˇ\\ÿ\031\b\000\000\000\000TÏ∏\vX-\221\b.\000\000\000_Ì∏\v", '\0' <repeats 12 times>, "\001", '\0' <repeats 39 times>, "Lp?\212\200", '\0' <repeats 11 times>, "\025\000\000\000;Ì∏\v\025\000\000\000;Ì∏\v", '\0' <repeats 44 times>, "Æ#\b\001\000\000\000\222Ø\b\0008£-\220\002\000\000\000\003\000\000\000\000\000\000\000»r?\212\2107&\b∞æ\023\bconn=569234 op=1", '\0' <repeats 167 times>, ialign = -1975554064, lalign = -1975554064, falign = -9.21736859e-33, dalign = 2.1122352570200277e-312, palign = 0x8a3f6ff0 "\001"} op = (Operation *) 0x8a3f6f20 be = {bd_info = 0x819d960, be_ctrls = "\000\001\001\001\000\000\001\000\001\000\001\001\001\000\001", '\0' <repeats 17 times>, "\001", be_flags = 256, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x819d728, be_nsuffix = 0x819d740, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 14, bv_val = 0x819d5e0 "cn=root,cn=log"}, be_rootndn = {bv_len = 14, bv_val = 0x819d7c8 "cn=root,cn=log"}, be_rootpw = {bv_len = 0, bv_val = 0x0}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x819d7b8, be_acl = 0x818c9e8, be_dfltaccess = ACL_READ, be_replica = 0x0, be_replogfile = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0x82165e0, be_pcl_mutex = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {__status = 0, __spinlock = 0}}, be_pcl_mutexp = 0x819d440, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0xb79895c0, be_private = 0x819d478, be_next = {stqe_next = 0x819dc98}} rc = <value optimized out> #7 0xb7ec1eff in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:478 ctx = (ldap_int_thread_ctx_t *) 0x87401680 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8263788, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x5e, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x88af2008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x37, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2319416240 i = 500 hash = <value optimized out> #8 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #9 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 13 (Thread -1971356752 (LWP 14287)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8da009b8, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x6c, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x85bfd008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x46, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2323610544 i = 564 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 12 (Thread -1966109776 (LWP 14286)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x825f198, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x63, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x87af0008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x38, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2328857520 i = 660 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 11 (Thread -1961915472 (LWP 14285)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x825e9d0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x7c, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x80a90008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x48, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2333051824 i = 469 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 10 (Thread -1539327056 (LWP 14251)): #0 0xb7be9679 in epoll_wait () from /lib/tls/libc.so.6 No symbol table info available. #1 0x0806a0df in slapd_daemon_task (ptr=0x0) at /misc/src/net/openldap/servers/slapd/daemon.c:2174 active = <value optimized out> l = 4 last_idle_check = 0 ebadf = 0 #2 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #3 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 9 (Thread -1876083792 (LWP 14252)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x82381b0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x1c, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x8edd2008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x8227498, ltk_data = 0xad, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2418883504 i = 424 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 8 (Thread -1880278096 (LWP 14253)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x823a798, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x48, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x82168f8, ltk_data = 0x25, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x8e3cf008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2414689200 i = 615 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 7 (Thread -1884472400 (LWP 14254)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x823b650, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x24, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x8227498, ltk_data = 0x49, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x8dbce008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2410494896 i = 551 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 6 (Thread -1918895184 (LWP 14277)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x82494f8, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x58, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x863fe008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x3b, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2376072112 i = 727 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 5 (Thread -1923089488 (LWP 14278)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x824fd10, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x5f, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x882f1008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x35, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2371877808 i = 663 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 4 (Thread -1927283792 (LWP 14279)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x82576c0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x59, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x8bdfb008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x40, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2367683504 i = 599 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 3 (Thread -1931478096 (LWP 14280)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x82501d0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x8227498, ltk_data = 0x5d, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x8b1fa008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x4b, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2363489200 i = 790 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 2 (Thread -1948275792 (LWP 14282)): #0 0xb7c56c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7ec2033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x824d350, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x36, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0xb7976800, ltk_data = 0x846fa008, ltk_free = 0xb79768d0 <search_stack_free>}, {ltk_key = 0x8227498, ltk_data = 0x79, ltk_free = 0xb79832e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2346691504 i = 709 hash = <value optimized out> #3 0xb7c540bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7be901e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 1 (Thread -1213171488 (LWP 14247)): #0 0xb7c55183 in pthread_join () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7ec2894 in ldap_pvt_thread_join (thread=2755640240, thread_return=0x0) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:193 No locals. #2 0x08067b06 in slapd_daemon () at /misc/src/net/openldap/servers/slapd/daemon.c:2579 listener_tid = 2755640240 rc = 0 #3 0x0805a309 in main (argc=9, argv=0xbff6e854) at /misc/src/net/openldap/servers/slapd/main.c:859 save_errno = <value optimized out> fp = <value optimized out> i = 9 no_detach = 0 rc = 1 urls = 0x8140008 "ldap:/// ldaps:///" username = 0x8140030 "gidNumber" groupname = 0x8140020 "\202Ó√∑∞Ž\224∑" sandbox = 0x0 syslogUser = 160 configfile = 0x8140040 "/etc/ldap/slapd.conf.master" configdir = 0x0 serverName = <value optimized out> scp = <value optimized out> scp_entry = <value optimized out> debug_unknowns = (char **) 0x0 syslog_unknowns = (char **) 0x0 l = <value optimized out> slapd_pid_file_unlink = 1 slapd_args_file_unlink = 1 __PRETTY_FUNCTION__ = "main" #0 0xb7b45947 in raise () from /lib/tls/libc.so.6 Quitting: Can't detach LWP 14286: No such process GNU gdb 6.4.90-debian Copyright (C) 2006 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i486-linux-gnu"...Using host libthread_db library "/lib/tls/libthread_db.so.1". [Thread debugging using libthread_db enabled] [New Thread -1212577568 (LWP 12126)] [New Thread -1883878480 (LWP 12133)] [New Thread -1879684176 (LWP 12132)] [New Thread -1875489872 (LWP 12131)] [New Thread -1538733136 (LWP 12130)] Failed to read a valid object file image from memory. 0xb7ce6183 in pthread_join () from /lib/tls/libpthread.so.0 [New Thread -1917862992 (LWP 12154)] [New Thread -1923109968 (LWP 12155)] [New Thread -1927304272 (LWP 12156)] [New Thread -1932551248 (LWP 12157)] [New Thread -1936745552 (LWP 12158)] [New Thread -1940939856 (LWP 12159)] [New Thread -1955632208 (LWP 12160)] [New Thread -1979769936 (LWP 12186)] [New Thread -1983964240 (LWP 12187)] [New Thread -1998656592 (LWP 12188)] [New Thread -2002850896 (LWP 12189)] Program received signal SIGABRT, Aborted. [Switching to Thread -1932551248 (LWP 12157)] 0xb7bd6947 in raise () from /lib/tls/libc.so.6 Thread 16 (Thread -2002850896 (LWP 12189)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8387b18, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 31 times>} tid = 2292116400 i = 705 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 15 (Thread -1998656592 (LWP 12188)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x85a4d28, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 31 times>} tid = 2296310704 i = 769 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 14 (Thread -1983964240 (LWP 12187)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8ed201d8, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 31 times>} tid = 2311003056 i = 531 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 13 (Thread -1979769936 (LWP 12186)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8ed20880, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 31 times>} tid = 2315197360 i = 595 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 12 (Thread -1955632208 (LWP 12160)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x84a4588, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x822c5f0, ltk_data = 0x6f, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0xb7a07800, ltk_data = 0x88ef0008, ltk_free = 0xb7a078d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 29 times>} tid = 2339335088 i = 533 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 11 (Thread -1940939856 (LWP 12159)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x855fc48, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 31 times>} tid = 2354027440 i = 550 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 10 (Thread -1936745552 (LWP 12158)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x855e428, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x37, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x822c5f0, ltk_data = 0x6e, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 29 times>} tid = 2358221744 i = 614 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 9 (Thread -1932551248 (LWP 12157)): #0 0xb7bd6947 in raise () from /lib/tls/libc.so.6 No symbol table info available. #1 0xb7bd80c9 in abort () from /lib/tls/libc.so.6 No symbol table info available. #2 0xb7bd005f in __assert_fail () from /lib/tls/libc.so.6 No symbol table info available. #3 0x0806bba2 in connection_state_closing (c=0x90369228) at /misc/src/net/openldap/servers/slapd/connection.c:765 state = <value optimized out> __PRETTY_FUNCTION__ = "connection_state_closing" #4 0x0807bc34 in send_ldap_ber (conn=0x90369228, ber=0x8ccf8dac) at /misc/src/net/openldap/servers/slapd/result.c:162 err = 6 sd = 135489725 bytes = <value optimized out> #5 0x0807dd19 in slap_send_search_entry (op=0x8ccf8f20, rs=0x8ccf91cc) at /misc/src/net/openldap/servers/slapd/result.c:1137 a_flags = 0x1 <Address 0x1 out of bounds> berbuf = {buffer = "\002\000\001\000\000\000\000\000ˇˇˇˇ\000\000\000\000\000\000\000\000$°ˇ\213\232°ˇ\213R±ˇ\213\000\000\000\000\000\000\000\000\234S\b\000\000\000\000\234S\b\000\000\000\000(]Ù∑\030\000\000\000(]Ù∑\000\000\000\000x\222\214\030\216\214\020Ù∑\r\000\000\000\234S\b\000\000\000\000\031Ù∑\f\000\000\000x\222\2148\216\214\025Ù∑\f\220ˇ\213h\216\214\f\000\000\000t\216\214\001\000\000\000 \217\214»\216\214\231t\f\bh\216\214\f\000\000\000\001\000\000\000x\222\214\234S\bl\216\214h\216\214\206\005Ù∑\001\000\000\000\000\000\000\000csn=,rid=001"..., ialign = 65538, lalign = 65538, falign = 9.18382988e-41, dalign = 3.2380074297143616e-319, palign = 0x10002 <Address 0x10002 out of bounds>} ber = (BerElement *) 0x8ccf8dac a = (Attribute *) 0x6 i = 1 j = <value optimized out> rc = <value optimized out> edn = 0x8ed20cff "reqStart=20080709184853.000001Z,cn=log" userattrs = 1 acl_state = {as_recorded = 0, as_vd_acl = 0x0, as_vi_acl = 0x0, as_vd_acl_mask = 0, as_vd_acl_matches = {{rm_so = 0, rm_eo = 0} <repeats 100 times>}, as_vd_acl_count = 0, as_vd_access = 0x0, as_vd_access_count = 0, as_result = 0, as_vd_ad = 0x0} attrsonly = 0 ad_entry = (AttributeDescription *) 0x814ad90 e_flags = (char **) 0x0 #6 0xb79e9eea in syncprov_qtask (ctx=0x8ccf92c8, arg=0x8285c18) at /misc/src/net/openldap/servers/slapd/overlays/syncprov.c:798 so = (syncops *) 0x84a3b40 on = (slap_overinst *) 0x819da60 opbuf = {buffer = "\217\214c\000\000\000\224ß\210H\000\000\000\000Ã\220\214\006\000\000\000!;\b\006\000\000\000(;\b\002\000\000\000\000\000\000\000ˇˇˇˇˇˇˇˇ\\ÿ\031\b\000\000\000\000$;\b¿f-\b.\000\000\000/;\b", '\0' <repeats 12 times>, "\001", '\0' <repeats 39 times>, "L\220\214\200", '\0' <repeats 11 times>, "\025\000\000\000\v;\b\025\000\000\000\v;\b", '\0' <repeats 44 times>, "ÿ\035\216\001\000\000\000*\000\000\000(\2226\220\002\000\000\000\003\000\000\000\000\000\000\000»\222\214\234S\b∞æ\023\bconn=42 op=1", '\0' <repeats 171 times>, ialign = -1932554256, lalign = -1932554256, falign = -3.19800291e-31, dalign = 2.1124477042991334e-312, palign = 0x8ccf8ff0 "\001"} op = (Operation *) 0x8ccf8f20 be = {bd_info = 0x819d960, be_ctrls = "\000\001\001\001\000\000\001\000\001\000\001\001\001\000\001", '\0' <repeats 17 times>, "\001", be_flags = 256, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x819d728, be_nsuffix = 0x819d740, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 14, bv_val = 0x819d5e0 "cn=root,cn=log"}, be_rootndn = {bv_len = 14, bv_val = 0x819d7c8 "cn=root,cn=log"}, be_rootpw = {bv_len = 0, bv_val = 0x0}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x819d7b8, be_acl = 0x818c9e8, be_dfltaccess = ACL_READ, be_replica = 0x0, be_replogfile = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0x82165e0, be_pcl_mutex = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {__status = 0, __spinlock = 0}}, be_pcl_mutexp = 0x819d440, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0xb7a1a5c0, be_private = 0x819d478, be_next = {stqe_next = 0x819dc98}} rc = <value optimized out> #7 0xb7f52eff in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:478 ctx = (ldap_int_thread_ctx_t *) 0x8ed17e90 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8539cd0, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x822c5f0, ltk_data = 0x6b, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0xb7a07800, ltk_data = 0x8a9f5008, ltk_free = 0xb7a078d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x36, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2362416048 i = 678 hash = <value optimized out> #8 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #9 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 8 (Thread -1927304272 (LWP 12156)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8ed19760, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x822c5f0, ltk_data = 0x6d, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x82168f8, ltk_data = 0x38, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 29 times>} tid = 2367663024 i = 519 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 7 (Thread -1923109968 (LWP 12155)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8553080, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x35, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x822c5f0, ltk_data = 0x6c, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0xb7a07800, ltk_data = 0x8a1f4008, ltk_free = 0xb7a078d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2371857328 i = 583 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 6 (Thread -1917862992 (LWP 12154)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x854e048, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x34, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x822c5f0, ltk_data = 0x6a, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0xb7a07800, ltk_data = 0x8b6f7008, ltk_free = 0xb7a078d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2377104304 i = 679 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 5 (Thread -1538733136 (LWP 12130)): #0 0xb7c7a679 in epoll_wait () from /lib/tls/libc.so.6 No symbol table info available. #1 0x0806a0df in slapd_daemon_task (ptr=0x0) at /misc/src/net/openldap/servers/slapd/daemon.c:2174 active = <value optimized out> l = 4 last_idle_check = 0 ebadf = 0 #2 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #3 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 4 (Thread -1875489872 (LWP 12131)): #0 0xb7af2e47 in __memp_fget_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #1 0xb7a6a3f9 in __bam_search_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #2 0xb7a5e0b3 in __bam_c_init_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #3 0xb7a5f101 in __bam_c_init_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #4 0xb7abbaee in __db_c_get_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #5 0xb7ac3456 in __db_c_get_pp_4002 () from /usr/lib/libdb-4.2.so No symbol table info available. #6 0xb7a12080 in bdb_idl_delete_key (be=0x90363d4c, db=0x9142990, tid=0x8ed21210, key=0x90363ac4, id=2228300) at /misc/src/net/openldap/servers/slapd/back-bdb/idl.c:930 rc = 0 data = {data = 0x90363a84, size = 4, ulen = 4, dlen = 0, doff = 0, flags = 32} cursor = (DBC *) 0x9143010 lo = <value optimized out> hi = <value optimized out> tmp = <value optimized out> nid = <value optimized out> nlo = 134887173 nhi = 2419473064 err = <value optimized out> __PRETTY_FUNCTION__ = "bdb_idl_delete_key" #7 0xb7a0be86 in bdb_key_change (be=0x90363d4c, db=0x9142990, txn=0x8ed21210, k=0x8f6cabcc, id=2228300, op=2) at /misc/src/net/openldap/servers/slapd/back-bdb/key.c:97 rc = <value optimized out> key = {data = 0x8f6cabe4, size = 4, ulen = 4, dlen = 0, doff = 0, flags = 32} #8 0xb7a0b3a3 in indexer (op=0x90363e98, txn=0x8ed21210, ad=0x8147d00, atname=0x8147d5c, vals=0x85ba69c, id=2228300, opid=2, mask=4) at /misc/src/net/openldap/servers/slapd/back-bdb/index.c:201 rc = <value optimized out> db = (DB *) 0x9142990 keys = (struct berval *) 0x8f6cabcc __PRETTY_FUNCTION__ = "indexer" #9 0xb7a0b852 in index_at_values (op=0x90363e98, txn=0x8ed21210, ad=0x90363874, type=0x8147d20, tags=0x8147d10, vals=0x85ba69c, id=2228300, opid=2) at /misc/src/net/openldap/servers/slapd/back-bdb/index.c:324 desc = <value optimized out> rc = <value optimized out> mask = <value optimized out> ixop = 2 ai = <value optimized out> #10 0xb7a0b9cb in bdb_index_entry (op=0x90363e98, txn=0x8ed21210, opid=2, e=0x85ba478) at /misc/src/net/openldap/servers/slapd/back-bdb/index.c:544 rc = <value optimized out> ap = (Attribute *) 0x85ba678 #11 0xb7a022e5 in bdb_delete (op=0x90363e98, rs=0x903641f4) at /misc/src/net/openldap/servers/slapd/back-bdb/delete.c:372 bdb = (struct bdb_info *) 0x819d478 matched = <value optimized out> pdn = {bv_len = 6, bv_val = 0x85ba870 "cn=log"} e = (Entry *) 0x85ba478 p = (Entry *) 0x8226420 ei = (EntryInfo *) 0x85ba788 eip = (EntryInfo *) 0x8226238 manageDSAit = 0 children = (AttributeDescription *) 0x814af20 entry = (AttributeDescription *) 0x814ad90 ltid = (DB_TXN *) 0x8ed20d40 lt2 = (DB_TXN *) 0x8ed21210 opinfo = {boi_bdb = 0x90363d4c, boi_txn = 0x8ed20d40, boi_err = 0, boi_locker = 2147486965, boi_acl_cache = 0, boi_locks = 0x0} eid = 2395996176 locker = 2147486965 lock = {off = 282080, ndx = 83, gen = 2968, mode = DB_LOCK_READ} plock = {off = 282512, ndx = 386, gen = 2055, mode = DB_LOCK_READ} num_retries = 0 rc = <value optimized out> preread_ctrl = (LDAPControl **) 0x0 ctrls = {0x0, 0x8ed20a84, 0x0, 0x85ba478, 0xb79ed640, 0x8ed20a78} num_ctrls = 0 parent_is_glue = <value optimized out> parent_is_leaf = -1875493816 #12 0x080c57e0 in overlay_op_walk (op=0x90363e98, rs=0x903641f4, which=op_delete, oi=0x819d960, on=0x819da60) at /misc/src/net/openldap/servers/slapd/backover.c:650 sc_next = <value optimized out> rc = 32768 #13 0x080c5bde in over_op_func (op=0x90363e98, rs=0x903641f4, which=op_delete) at /misc/src/net/openldap/servers/slapd/backover.c:702 oi = (slap_overinfo *) 0x819d960 on = (slap_overinst *) 0x819da60 be = (BackendDB *) 0x819d370 db = {bd_info = 0xb7a1a920, be_ctrls = "\000\001\001\001\000\000\001\000\001\000\001\001\001\000\001", '\0' <repeats 17 times>, "\001", be_flags = 256, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x819d728, be_nsuffix = 0x819d740, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 14, bv_val = 0x819d5e0 "cn=root,cn=log"}, be_rootndn = {bv_len = 14, bv_val = 0x819d7c8 "cn=root,cn=log"}, be_rootpw = {bv_len = 0, bv_val = 0x0}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x819d7b8, be_acl = 0x818c9e8, be_dfltaccess = ACL_READ, be_replica = 0x0, be_replogfile = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0x82165e0, be_pcl_mutex = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {__status = 0, __spinlock = 0}}, be_pcl_mutexp = 0x819d440, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0xb7a1a5c0, be_private = 0x819d478, be_next = {stqe_next = 0x819dc98}} cb = {sc_next = 0xb79f5660, sc_response = 0x80c5550 <over_back_response>, sc_cleanup = 0, sc_private = 0x819d960} rc = -1218606384 __PRETTY_FUNCTION__ = "over_op_func" #14 0xb79f0d20 in accesslog_purge (ctx=0x903642c8, arg=0x819e288) at /misc/src/net/openldap/servers/slapd/overlays/accesslog.c:589 i = 1636 li = <value optimized out> conn = {c_struct_state = 0, c_conn_state = 0, c_conn_idx = 0, c_close_reason = 0x0, c_mutex = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {__status = 0, __spinlock = 0}}, c_sb = 0x0, c_starttime = 0, c_activitytime = 0, c_connid = 4294967295, c_peer_domain = {bv_len = 0, bv_val = 0x80f4a70 ""}, c_peer_name = {bv_len = 0, bv_val = 0x80f4a70 ""}, c_listener = 0x80f5d20, c_sasl_bind_in_progress = 0, c_sasl_bind_mech = {bv_len = 0, bv_val = 0x0}, c_sasl_dn = {bv_len = 0, bv_val = 0x0}, c_sasl_authz_dn = {bv_len = 0, bv_val = 0x0}, c_authz_backend = 0x0, c_authz_cookie = 0x0, c_authz = {sai_method = 0, sai_mech = {bv_len = 0, bv_val = 0x0}, sai_dn = {bv_len = 0, bv_val = 0x0}, sai_ndn = {bv_len = 0, bv_val = 0x0}, sai_ssf = 0, sai_transport_ssf = 0, sai_tls_ssf = 0, sai_sasl_ssf = 0}, c_protocol = 0, c_ops = {stqh_first = 0x0, stqh_last = 0x0}, c_pending_ops = {stqh_first = 0x0, stqh_last = 0x0}, c_write_mutex = {__m_reserved = 0, __m_count = 0, __m_owner = 0x0, __m_kind = 0, __m_lock = {__status = 0, __spinlock = 0}}, c_write_cv = {__c_lock = {__status = 0, __spinlock = 0}, __c_waiting = 0x0, __padding = '\0' <repeats 27 times>, __align = 0}, c_currentber = 0x0, c_writewaiter = 0, c_is_tls = 0, c_needs_tls_accept = 0, c_sasl_layers = 0, c_sasl_done = 0, c_sasl_authctx = 0x0, c_sasl_sockctx = 0x0, c_sasl_extra = 0x0, c_sasl_bindop = 0x0, c_pagedresults_state = {ps_be = 0x0, ps_size = 0, ps_cookie = 0, ps_count = 0}, c_n_ops_received = 0, c_n_ops_executing = 0, c_n_ops_pending = 0, c_n_ops_completed = 0, c_n_get = 0, c_n_read = 0, c_n_write = 0, c_pb = 0x0, c_extensions = 0x0, c_clientfunc = 0, c_clientarg = 0x0, c_send_ldap_result = 0x807ef50 <slap_send_ldap_result>, c_send_search_entry = 0x807c600 <slap_send_search_entry>, c_send_search_reference = 0x807bd00 <slap_send_search_reference>, c_send_ldap_extended = 0, c_send_ldap_intermediate = 0} opbuf = {buffer = "h?6\220J\000\000\000\212ß\210H\002\000\000\000L=6\220&\000\000\000 ®[\b&\000\000\000P®[\b\001\000\000\000\000\000\000\000ˇˇˇˇˇˇˇˇ\000\000\000\000\001\000\000\000\000º\023\b|B6\220\033\000\000\000\f@f\217", '\0' <repeats 52 times>, "?6\220", '\0' <repeats 12 times>, "\016\000\000\000\031\b\016\000\000\000»◊\031\b", '\0' <repeats 24 times>, "l©l\217\000\000\000\000 \000\000\000¥A6\220\204<6\220\000\000\000\000\000\000\000\000ˇˇˇˇD@6\220", '\0' <repeats 12 times>, "»B6\2200K$\b∞æ\023\bconn=-1 op=0", '\0' <repeats 171 times>, ialign = -1875493016, lalign = -1875493016, falign = -3.59420176e-29, dalign = 1.5822306765417464e-312, palign = 0x90363f68 ""} op = (Operation *) 0x90363e98 rs = {sr_type = REP_RESULT, sr_tag = 107, sr_msgid = 0, sr_err = 0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}, sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x813bc00, r_nentries = 0, r_v2ref = 0x0}}, sr_flags = 0} cb = {sc_next = 0x0, sc_response = 0xb79f0d70 <log_old_lookup>, sc_cleanup = 0, sc_private = 0x90364230} f = {f_choice = 166, f_un = {f_un_result = -1875492240, f_un_dn = 0x90364270, f_un_desc = 0x90364270, f_un_ava = 0x90364270, f_un_ssa = 0x90364270, f_un_mra = 0x90364270, f_un_complex = 0x90364270}, f_next = 0x0} ava = {aa_desc = 0x8187280, aa_value = {bv_len = 15, bv_val = 0x9036424a "20080710160218Z"}} pd = {slots = 7500, used = 7421, dn = 0x916d6e0, ndn = 0x917c148, csn = {bv_len = 32, bv_val = 0x903641b4 "20080709154901Z#000000#00#000000"}} timebuf = "20080710160218Z\000\000\000\000\000\000" csnbuf = "20080709154901Z#000000#00#000000", '\0' <repeats 31 times> old = 1215705738 #15 0xb7f52eff in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:478 ctx = (ldap_int_thread_ctx_t *) 0x822e708 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8244b30, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x82168f8, ltk_data = 0x1c, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0xb7a07800, ltk_data = 0x8ee63008, ltk_free = 0xb7a078d0 <search_stack_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 29 times>} tid = 2419477424 i = 449 hash = <value optimized out> #16 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #17 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 3 (Thread -1879684176 (LWP 12132)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x827ad28, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x822c5f0, ltk_data = 0x58, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0xb7a07800, ltk_data = 0x8dafc008, ltk_free = 0xb7a078d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x33, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2415283120 i = 640 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 2 (Thread -1883878480 (LWP 12133)): #0 0xb7ce7c01 in pthread_cond_wait@@GLIBC_2.3.2 () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53754 in ldap_pvt_thread_cond_wait (cond=0x814d374, mutex=0x814d35c) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:299 No locals. #2 0xb7f53033 in ldap_int_thread_pool_wrapper (xpool=0x814d358) at /misc/src/net/openldap/libraries/libldap_r/tpool.c:466 ctx = (ldap_int_thread_ctx_t *) 0x0 ltc_key = {{ltk_key = 0x80b73c0, ltk_data = 0x8284760, ltk_free = 0x80b6f10 <slap_sl_mem_destroy>}, {ltk_key = 0x822c5f0, ltk_data = 0x50, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0xb7a07800, ltk_data = 0x8e2fd008, ltk_free = 0xb7a078d0 <search_stack_free>}, {ltk_key = 0x82168f8, ltk_data = 0x32, ltk_free = 0xb7a142e0 <bdb_locker_id_free>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>} tid = 2411088816 i = 576 hash = <value optimized out> #3 0xb7ce50bd in start_thread () from /lib/tls/libpthread.so.0 No symbol table info available. #4 0xb7c7a01e in clone () from /lib/tls/libc.so.6 No symbol table info available. Thread 1 (Thread -1212577568 (LWP 12126)): #0 0xb7ce6183 in pthread_join () from /lib/tls/libpthread.so.0 No symbol table info available. #1 0xb7f53894 in ldap_pvt_thread_join (thread=2756234160, thread_return=0x0) at /misc/src/net/openldap/libraries/libldap_r/thr_posix.c:193 No locals. #2 0x08067b06 in slapd_daemon () at /misc/src/net/openldap/servers/slapd/daemon.c:2579 listener_tid = 2756234160 rc = 0 #3 0x0805a309 in main (argc=9, argv=0xbfe413d4) at /misc/src/net/openldap/servers/slapd/main.c:859 save_errno = <value optimized out> fp = <value optimized out> i = 9 no_detach = 0 rc = 1 urls = 0x8140008 "ldap:/// ldaps:///" username = 0x8140030 "gidNumber" groupname = 0x8140020 "\202˛Ã∑∞ª\235∑" sandbox = 0x0 syslogUser = 160 configfile = 0x8140040 "/etc/ldap/slapd.conf.master" configdir = 0x0 serverName = <value optimized out> scp = <value optimized out> scp_entry = <value optimized out> debug_unknowns = (char **) 0x0 syslog_unknowns = (char **) 0x0 l = <value optimized out> slapd_pid_file_unlink = 1 slapd_args_file_unlink = 1 __PRETTY_FUNCTION__ = "main" #0 0xb7bd6947 in raise () from /lib/tls/libc.so.6 Quitting: Can't detach LWP 12131: No such process

1 0

(ITS#5630) allow variable sharing between authz-regexp and slapo-rwm
by kouk＠noc.uoa.gr 25 Jul '08

25 Jul '08

Full_Name: Kostantinos Koukopoulos Version: 2.4.11 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (195.134.100.30) It would be helpfull if one could assign a variable in the context of authz-regexp like one can in rwm-rewriteRule, ie. ${&&name(value)}, and then dereference the variable name in some other context of slapo-rwm. This could be done with some sort of cross-session variable support or with a sharing of sessions between slapo-rwm and authz-regexp.

1 0

Re: (ITS#5629) documentation on ldapsearch and other clients
by hyc＠symas.com 25 Jul '08

25 Jul '08

gdsroka(a)hotmail.com wrote: > Full_Name: Gabriel Sroka > Version: 2.4.9 > OS: Ubuntu > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (130.150.113.161) > > > ldapsearch and other tools include a -C (uppercase) option to enable referral > chasing, but the option doesn't show up in the tool_common_usage() nor on the > man pages This is intentional. This ITS will be closed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5629) documentation on ldapsearch and other clients
by gdsroka＠hotmail.com 25 Jul '08

25 Jul '08

Full_Name: Gabriel Sroka Version: 2.4.9 OS: Ubuntu URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (130.150.113.161) ldapsearch and other tools include a -C (uppercase) option to enable referral chasing, but the option doesn't show up in the tool_common_usage() nor on the man pages

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs