- openldap-bugs - openldap.org

[Issue 7248] Cast to string in back-sql when upper_needs_cast is declared in slapd.conf
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=7248 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|has_patch | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6461] back-sql quote characters in query
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=6461 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|has_patch | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5982] man page for ldapexop
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5982 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5856] adauth overlay contribution
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5856 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5696] Patch - support Mozilla NSS for crypto operations
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5696 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5695] AC syntax in OpenLDAP
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5695 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5449] X-PIGLATIN password hashing functions
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5449 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5395] Patch for test system
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5395 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5369] GSSAPI support for client library
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5369 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5305] Contribware: Two overlays for implementing NESTED dynamic groups
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5305 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5281] doc contribution - set examples - following references
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5281 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5279] doc contribution - set examples - memberUid
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5279 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5278] doc contribution - set examples - recursive groups
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5278 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5217] refint overlay doc contribution
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5217 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5216] Dynamic Lists doc contribution to the admin guide
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5216 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5167] Contribution of section for admin guide covering memberof overlay
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5167 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 4796] Contribution: JLDAP support for simple paging of results (RFC 2696)
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=4796 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 4721] thr_stub.c needs do nothing ldap_pvt_thread_pool_tid()
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=4721 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|IPR_OK | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8653] ber_flus2 assertion fail leads to a crash of slapd
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8653 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7102] slapd segfaults on slapo-dds refresh with syncprov enabled
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=7102 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|replication, reviewed | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6171] Kill or fix K&R support
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=6171 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|reviewed | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9482] New: slapi_int_get_plugins() may return uninitialized data
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9482 Issue ID: 9482 Summary: slapi_int_get_plugins() may return uninitialized data Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: grapvar(a)gmail.com Target Milestone: --- ... because > if ( be == NULL ) { > goto done; > } returns before output variable ppFuncPtrs has been initialized. This may be not affect openldap code, but, if I understand correctly, slapi_int_get_plugins() is part of api and may affect 3rd party. -- You are receiving this mail because: You are on the CC list for the issue.

1 6

[Issue 9483] New: Need dummy value for AC_TLS_TYPE
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9483 Issue ID: 9483 Summary: Need dummy value for AC_TLS_TYPE Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- If slapd is built without any type of TLS, AC_TLS_TYPE becomes empty, which then causes problems in the test suite. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 9498] New: assert failed in connection_next
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9498 Issue ID: 9498 Summary: assert failed in connection_next Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: hyc(a)openldap.org Target Milestone: --- Discovered in test074 in CI Thread 5 (Thread 0x7f9767fff700 (LWP 10601)): #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 #1 0x00007f9776ba2535 in __GI_abort () at abort.c:79 #2 0x00007f9776ba240f in __assert_fail_base (fmt=0x7f9776d04ee0 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=0x55fb742287f0 "c->c_conn_state != SLAP_C_INVALID", file=0x55fb742282cd "connection.c", line=928, function=<optimized out>) at assert.c:92 #3 0x00007f9776bb0102 in __GI___assert_fail (assertion=assertion@entry=0x55fb742287f0 "c->c_conn_state != SLAP_C_INVALID", file=file@entry=0x55fb742282cd "connection.c", line=line@entry=928, function=function@entry=0x55fb74229180 <__PRETTY_FUNCTION__.12455> "connection_next") at assert.c:101 No locals. #4 0x000055fb7418499f in connection_next (c=0x7f9775a7c950, index=0x7f9767ffd82c) at connection.c:928 c_struct = <optimized out> __PRETTY_FUNCTION__ = "connection_next" c_struct = <optimized out> #5 connection_next (c=0x0, index=index@entry=0x7f9767ffd82c) at connection.c:896 __PRETTY_FUNCTION__ = "connection_next" c_struct = <optimized out> #6 0x000055fb742096da in monitor_subsys_rww_update (op=<optimized out>, rs=<optimized out>, e=0x55fb745008d8) at rww.c:194 mi = 0x55fb74299240 <monitor_info> c = <optimized out> connindex = 117 nconns = <optimized out> nwritewaiters = 0 nreadwaiters = 4 i = <optimized out> nrdn = {bv_len = 7, bv_val = 0x55fb74598010 "cn=read,cn=waiters,cn=monitor"} a = <optimized out> buf = "\260\027C`\227\177\000\000\340\211\033`\227\177\000\000x\372O", <incomplete sequence \373> num = 0 len = <optimized out> __PRETTY_FUNCTION__ = "monitor_subsys_rww_update" #7 0x000055fb7420f3df in monitor_entry_update (op=op@entry=0x7f975c2d1280, rs=rs@entry=0x7f9767ffead0, e=e@entry=0x55fb745008d8) at entry.c:59 mi = <optimized out> mp = 0x55fb74598430 rc = 32768 __PRETTY_FUNCTION__ = "monitor_entry_update" #8 0x000055fb74209c2f in monitor_send_children (op=op@entry=0x7f975c2d1280, rs=rs@entry=0x7f9767ffead0, e_nonvolatile=e_nonvolatile@entry=0x55fb745008d8, e_ch=<optimized out>, sub=sub@entry=1) at search.c:103 sub_nv = 0x0 sub_ch = 0x0 mi = 0x55fb74299240 <monitor_info> e = 0x55fb745008d8 e_tmp = <optimized out> mp = <optimized out> rc = <optimized out> nonvolatile = 0 #9 0x000055fb74209cbf in monitor_send_children (op=op@entry=0x7f975c2d1280, rs=rs@entry=0x7f9767ffead0, e_nonvolatile=e_nonvolatile@entry=0x55fb744ff6b8, e_ch=<optimized out>, sub=1) at search.c:139 sub_nv = 0x55fb745008d8 sub_ch = 0x0 mi = 0x55fb74299240 <monitor_info> e = 0x55fb744ffa78 e_tmp = 0x0 mp = <optimized out> rc = <optimized out> nonvolatile = 1 #10 0x000055fb74209f4c in monitor_back_search (op=0x7f975c2d1280, rs=0x7f9767ffead0) at search.c:238 mi = 0x55fb74299240 <monitor_info> rc = <optimized out> e = 0x55fb744ff668 matched = 0x0 e_nv = 0x55fb744ff6b8 e_ch = 0x0 mask = 4159 #11 0x000055fb74186121 in fe_op_search (op=0x7f975c2d1280, rs=0x7f9767ffead0) at search.c:406 bd = 0x55fb74298880 <slap_frontendDB> #12 0x000055fb74185b24 in do_search (op=0x7f975c2d1280, rs=0x7f9767ffead0) at search.c:247 base = {bv_len = 10, bv_val = 0x7f975c2d1248 "cn=Monitor"} siz = 0 off = 0 i = <optimized out> #13 0x000055fb74183504 in connection_operation (ctx=0x7f9767ffebb0, arg_v=0x7f975c2d1280) at connection.c:1168 -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Issue 9479] New: asyncmeta: test074 failure to terminate
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9479 Issue ID: 9479 Summary: asyncmeta: test074 failure to terminate Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- When the asyncmeta backend is enabled in master test074 routinely fails to complete, causing CI/CD to force kill the container and marking the branch as failed. This same problem with test074 has manifested in environments outside of the CI/CD system, such as the launchpad PPA service. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 9481] New: servers/slapd/proxyp.c does not respect --disable-ipv6 and fails to compile
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9481 Issue ID: 9481 Summary: servers/slapd/proxyp.c does not respect --disable-ipv6 and fails to compile Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: grapvar(a)gmail.com Target Milestone: --- current git master, commit: a44706f64 2021-02-26 | ITS#7508 - fix website build ... -- You are receiving this mail because: You are on the CC list for the issue.

1 8

[Issue 9484] New: contrib passwd modules fail to build
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9484 Issue ID: 9484 Summary: contrib passwd modules fail to build Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: contrib Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- ../../../libtool --mode=compile gcc -g -O2 -Wall -I../../../include -I../../../include -I../../../servers/slapd -c kerberos.c libtool: compile: gcc -g -O2 -Wall -I../../../include -I../../../include -I../../../servers/slapd -c kerberos.c -fPIC -DPIC -o .libs/kerberos.o In file included from kerberos.c:20: ../../../include/lutil.h:356:18: error: field ‘sa_addr’ has incomplete type 356 | struct sockaddr sa_addr; | ^~~~~~~ ../../../include/lutil.h:357:21: error: field ‘sa_in_addr’ has incomplete type 357 | struct sockaddr_in sa_in_addr; | ^~~~~~~~~~ make: *** [Makefile:34: kerberos.lo] Error 1 ../../../libtool --mode=compile gcc -g -O2 -Wall -I../../../include -I../../../include -I../../../servers/slapd -c netscape.c libtool: compile: gcc -g -O2 -Wall -I../../../include -I../../../include -I../../../servers/slapd -c netscape.c -fPIC -DPIC -o .libs/netscape.o In file included from netscape.c:20: ../../../include/lutil.h:356:18: error: field ‘sa_addr’ has incomplete type 356 | struct sockaddr sa_addr; | ^~~~~~~ ../../../include/lutil.h:357:21: error: field ‘sa_in_addr’ has incomplete type 357 | struct sockaddr_in sa_in_addr; | ^~~~~~~~~~ make: *** [Makefile:34: netscape.lo] Error 1 ../../../libtool --mode=compile gcc -g -O2 -Wall -I../../../include -I../../../include -I../../../servers/slapd -c apr1.c libtool: compile: gcc -g -O2 -Wall -I../../../include -I../../../include -I../../../servers/slapd -c apr1.c -fPIC -DPIC -o .libs/apr1.o In file included from ../../../include/lutil.h:21, from apr1.c:23: ../../../include/ac/socket.h:233:46: error: unknown type name ‘uid_t’ 233 | LDAP_LUTIL_F( int ) lutil_getpeereid( int s, uid_t *, gid_t * ); | ^~~~~ ../../../include/ac/socket.h:233:55: error: unknown type name ‘gid_t’ 233 | LDAP_LUTIL_F( int ) lutil_getpeereid( int s, uid_t *, gid_t * ); | ^~~~~ In file included from apr1.c:23: ../../../include/lutil.h:356:18: error: field ‘sa_addr’ has incomplete type 356 | struct sockaddr sa_addr; | ^~~~~~~ ../../../include/lutil.h:357:21: error: field ‘sa_in_addr’ has incomplete type 357 | struct sockaddr_in sa_in_addr; | ^~~~~~~~~~ make: *** [Makefile:34: apr1.lo] Error 1 Patch is coming. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 9490] New: Make it so keepalive settings can be configured in ldap.conf
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9490 Issue ID: 9490 Summary: Make it so keepalive settings can be configured in ldap.conf Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- There are certain cases where it would be helpful to be able to set a system wide set of keepalive settings for any applications that use libldap (at least on linux). -- You are receiving this mail because: You are on the CC list for the issue.

1 8

[Issue 9491] New: memleak in asyncmeta
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9491 Issue ID: 9491 Summary: memleak in asyncmeta Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: hyc(a)openldap.org Target Milestone: --- Due to some code skew between old Symas repo and public repo, asyncmeta in master/2.5 leaks a memctx on every operation. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9504] New: Assertion failure after reconfiguring olcDbIDAssertBind in slapd-ldap
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9504 Issue ID: 9504 Summary: Assertion failure after reconfiguring olcDbIDAssertBind in slapd-ldap Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: tero.saarni(a)est.tech Target Milestone: --- OpenLDAP crashes to following assert error: slapd: bind.c:2657: ldap_back_proxy_authz_ctrl: Assertion `0' failed. The crash can be reproduced by executing following sequence: 1. create proxy with OLC configuration 2. execute modify operation that changes olcDbIDAssertBind (replace or delete&add) but do set mode=legacy as the value 3. execute ldapsearch as user that maps into idassert-bind 4. slapd crashes with the above error message mode=legacy is the default and everything works after initial configuration (1) even without adding mode=legacy into the configuration, but when doing re-configuration using OLC (2) the default value does not seem to get initialized correctly anymore. This causes next LDAP operation (3) to fail after changing the configuration since the server crashes (4). The assert in question is here, in the default branch when "mode" variable is not set at all: https://git.openldap.org/openldap/openldap/-/blob/c9ee2ccd1c8aadaef9db90742… -- You are receiving this mail because: You are on the CC list for the issue.

1 6

[Issue 9501] ITS#9419 regression: slapd-ldap will silently fall back from starttls to cleartext
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9501 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9480] New: Update default slapd.conf and slapd.ldif to include back-monitor
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9480 Issue ID: 9480 Summary: Update default slapd.conf and slapd.ldif to include back-monitor Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Now that back-monitor is always built into the slapd binary, we should update the default slapd.conf and slapd.ldif files so it's present. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 9453] New: Move argon2 overlay out of contrib
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9453 Issue ID: 9453 Summary: Move argon2 overlay out of contrib Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- The argon2 module should be moved out of contrib and into mainline OpenLDAP. Additionally, configure options needs to be added to test for the presence of libsodium or libargon2 if the argon2 module is to be built -- You are receiving this mail because: You are on the CC list for the issue.

1 6

[Issue 9446] New: back_passwd: invalid parsing of gecos field
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9446 Issue ID: 9446 Summary: back_passwd: invalid parsing of gecos field Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: grapvar(a)gmail.com Target Milestone: --- Created attachment 788 --> https://bugs.openldap.org/attachment.cgi?id=788&action=edit fix Parsing gecos(comment) field of /etc/passwd in servers/slapd/back-passwd/search.c`pw2entry() has issues. I expands '&': 1) anywhere in in gecos, but the expansion must be limited by user's full name. 2) only 1st '&', but all `&'s in full name must be expanded (nice explanation: https://unix.stackexchange.com/questions/535189/ampersand-in-the-passwd-gec…) fix attached. It expands each `&', left to right, until expanded user's full name fits into internal { char buf[1024]; } -- You are receiving this mail because: You are on the CC list for the issue.

1 10

[Issue 9382] New: client tools ldapvc.c tracks criticality but doesn't use it
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9382 Issue ID: 9382 Summary: client tools ldapvc.c tracks criticality but doesn't use it Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: client tools Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- In clients/toolsldapv.c, we have: switch ( i ) { char *control, *cvalue; int crit; ... case 'E': /* vc extension */ crit = 0; if( optarg[0] == '!' ) { crit = 1; and then we never use "crit" again. It would appear the intention was to determine whether or not this control is marked critical and then do something based on that, but there is in fact nothing ever done. This leads to a warning that crit is set but unused. If the criticality of the control doesn't matter, than this variable should be eliminated. If it does matter, then the missing code needs to be added. -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Issue 9347] ppolicy: Password policy not applied when pwdMaxAge overflows max int (32-bit)
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9347 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9288] New: slapd service stops suddenly but generates crash file
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9288 Issue ID: 9288 Summary: slapd service stops suddenly but generates crash file Product: OpenLDAP Version: 2.4.49 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: tekkitan(a)gmail.com Target Milestone: --- System: t3.small AWS instance 2VCPU 2GB RAM OS: Ubuntu 20.04 (was happening on 16.04 as well) Package Version: 2.4.49+dfsg-2ubuntu1.2 We've been having this weird problem with slapd between Ubuntu 16.04 and Ubuntu 20.04 where slapd will suddenly stop according to syslog but will also generate a crash file within apport. We thought it was due to some weird stuff we were doing in the 16.04 version (2.4.42+dfsg-2ubuntu3.8), but we deployed a new LDAP proxy in 20.04 (2.4.49+dfsg-2ubuntu1.2) which appears to have the same issue so I am reporting it and hoping for guidance as we use this proxy for our corporate VPN. Below is the backtrace which was the same from both proxy systems, but this one is from the 20.04 version as that is our current system in use: root@useldap02:~/_usr_sbin_slapd.0.crash# apport-retrace --stdout /var/crash/_usr_sbin_slapd.0.crash --- stack trace --- #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 set = {__val = {0, 140488162916432, 140488307736576, 140487911640016, 140487911640117, 140487911640016, 140487911640016, 140487911640147, 140487911640316, 140487911640016, 140487911640316, 0, 0, 0, 0, 0}} pid = <optimized out> tid = <optimized out> ret = <optimized out> #1 0x00007fc5f3043859 in __GI_abort () at abort.c:79 save_stage = 1 act = {__sigaction_handler = {sa_handler = 0x2, sa_sigaction = 0x2}, sa_mask = {__val = {131, 4, 99, 0, 0, 140488164070405, 0, 21474836480, 140488121483504, 0, 140488164102160, 0, 6703301646461552640, 140488164070405, 140488165695488, 140488164087176}}, sa_flags = -235332728, sa_restorer = 0xbf} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007fc5f3043729 in __assert_fail_base (fmt=0x7fc5f31d9588 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n", assertion=0x7fc5f1f91953 "!LDAP_BACK_CONN_TAINTED( lc )", file=0x7fc5f1f91b88 "../../../../../servers/slapd/back-ldap/bind.c", line=191, function=<optimized out>) at assert.c:92 str = 0x7fc5c410a280 "@Q\021\344\305\177" total = 4096 #3 0x00007fc5f3054f36 in __GI___assert_fail (assertion=0x7fc5f1f91953 "!LDAP_BACK_CONN_TAINTED( lc )", file=0x7fc5f1f91b88 "../../../../../servers/slapd/back-ldap/bind.c", line=191, function=0x7fc5f1f921a0 "ldap_back_conn_delete") at assert.c:101 No locals. #4 0x00007fc5f1f807c7 in ldap_back_conn_delete () from /usr/lib/ldap/back_ldap-2.4.so.2 No symbol table info available. #5 0x00007fc5f1f814a4 in ?? () from /usr/lib/ldap/back_ldap-2.4.so.2 No symbol table info available. #6 0x00007fc5f1f815ad in ldap_back_release_conn_lock () from /usr/lib/ldap/back_ldap-2.4.so.2 No symbol table info available. #7 0x00007fc5f1f833bc in ldap_back_retry () from /usr/lib/ldap/back_ldap-2.4.so.2 No symbol table info available. #8 0x00007fc5f1f7ec0b in ldap_back_search () from /usr/lib/ldap/back_ldap-2.4.so.2 No symbol table info available. #9 0x000055b87105cc88 in overlay_op_walk () No symbol table info available. #10 0x000055b87105cdb7 in ?? () No symbol table info available. #11 0x000055b870fef80d in fe_op_search () No symbol table info available. #12 0x000055b870fef034 in do_search () No symbol table info available. #13 0x000055b870fec6ed in ?? () No symbol table info available. #14 0x000055b870fed22c in ?? () No symbol table info available. #15 0x00007fc5f32e7a03 in ?? () from /lib/x86_64-linux-gnu/libldap_r-2.4.so.2 No symbol table info available. #16 0x00007fc5f3219609 in start_thread (arg=<optimized out>) at pthread_create.c:477 ret = <optimized out> pd = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140488121493248, -8220430158823943899, 140488129874654, 140488129874655, 140488129874784, 140488121490880, 8241811018110734629, 8241811687867814181}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 #17 0x00007fc5f3140103 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95 No locals. This is usually what we see within syslog when slapd stops: Jul 11 00:49:32 useldap02 slapd[5257]: conn=1035 op=239 SRCH base="ou=people,dc=company,dc=com" scope=2 deref=0 filter="(&(|(objectClass=person)(objectClass=organizationalPerson)(objectClass=inetOrgPerson)(?objectClass=fw1Person))(uid=exampleusername))" Jul 11 00:49:32 useldap02 slapd[5257]: conn=1035 op=239 SRCH attr=cn uid sn mail proxyAddresses userPrincipalName fullName displayName description objectclass fw1hour-range-from fw1hour-range-to fw1expiration-date fw1day fw1allowed-dst fw1allowed-src fw1auth-method userAccountControl fw1userPwdPolicy mobile fw1BadPwdCount fw1lastLoginFailure fw1pwdLastMod fw1auth-server fw1auth-server fw1groupTemplate fw1sr-auth-track fw1enc-methods fw1ISAKMP-EncMethod fw1ISAKMP-AuthMethods fw1ISAKMP-HashMethods fw1ISAKMP-Transform fw1ISAKMP-DataIntegrityMethod fw1ISAKMP-SharedSecret fw1ISAKMP-DataEncMethod givenName surname Jul 11 00:49:32 useldap02 slapd[5257]: conn=1035 op=240 SRCH base="ou=groups,dc=company,dc=com" scope=2 deref=0 filter="(&(|(objectClass=person)(objectClass=organizationalPerson)(objectClass=inetOrgPerson)(?objectClass=fw1Person))(uid=exampleusername))" Jul 11 00:49:32 useldap02 slapd[5257]: conn=1035 op=240 SRCH attr=cn uid sn mail proxyAddresses userPrincipalName fullName displayName description objectclass fw1hour-range-from fw1hour-range-to fw1expiration-date fw1day fw1allowed-dst fw1allowed-src fw1auth-method userAccountControl fw1userPwdPolicy mobile fw1BadPwdCount fw1lastLoginFailure fw1pwdLastMod fw1auth-server fw1auth-server fw1groupTemplate fw1sr-auth-track fw1enc-methods fw1ISAKMP-EncMethod fw1ISAKMP-AuthMethods fw1ISAKMP-HashMethods fw1ISAKMP-Transform fw1ISAKMP-DataIntegrityMethod fw1ISAKMP-SharedSecret fw1ISAKMP-DataEncMethod givenName surname Jul 11 00:49:34 useldap02 slapd[28099]: * Stopping OpenLDAP slapd Jul 11 00:49:34 useldap02 slapd[28099]: ...done. Jul 11 00:49:34 useldap02 systemd[1]: slapd.service: Succeeded. Note that a lot of these attributes being searched for (all the fw1* attributes) do not exist within our LDAP. Not sure if that would be the cause. Thank you for any help that can be provided. -- You are receiving this mail because: You are on the CC list for the issue.

1 13

[Issue 9270] New: Admin guide: Add detailed information on indexing
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9270 Issue ID: 9270 Summary: Admin guide: Add detailed information on indexing Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- It would be useful to outline what the different types of indexing options do, and when they are useful, in the admin guide. For example: presence indexing is only useful if looking to find entries with a given attribute, when generally < 50% of the entries in the DB have an instance of that attribute. equality indexing would not be particularly useful on an attribute that exists in most every entry, and the attribute always has the same value etc. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Bug 9260] New: slapd-ldap(5) man page missing conn-pool-max option
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9260 Bug ID: 9260 Summary: slapd-ldap(5) man page missing conn-pool-max option Product: OpenLDAP Version: 2.4.50 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- The slapd-ldap(5) man page is missing any information on the conn-pool-max configuration option. Part of ITS#4791 -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Issue 9251] slapd tries to allocate huge amounts of memory for deeply nested filter
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9251 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Bug 9241] New: olcRefintNothing refuse to accept space in the target dn
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9241 Bug ID: 9241 Summary: olcRefintNothing refuse to accept space in the target dn Product: OpenLDAP Version: 2.4.49 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: sebastien.chaumat(a)qspin.be Target Milestone: --- When configuring refint : dn: olcOverlay={2}refint,olcDatabase={1}mdb,cn=config objectClass: olcOverlayConfig objectClass: olcRefintConfig olcOverlay: {2}refint olcRefintAttribute: seeAlso olcRefintNothing: cn=admin,dc=test is accepted but olcRefintNothing: cn=admin space,dc=test is rejected when I ldapadd the configuration with the message : ldap_add: Constraint violation (19) additional info: <olcRefintNothing> extra cruft after <string> I tried various quoting : cn="admin space",dc=test cn=admin\20space "cn=admin space" -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Issue 9152] Configuring autoca before database exists crashes slapd
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9152 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9079] documentation: slapo-unique syntax explanation unclear
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9079 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9051] slapo-accesslog fails to log compare, search
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9051 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9016] cn=config should fail on EMIT if target directory not empty
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9016 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9001] try_read1msg() takes O(n) steps to lookup a matching request
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=9001 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8996] Please supply a pkg-config file for libldap
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8996 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8967] back-mdb "unchecked" limit broken vs. search scope
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8967 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8950] segfault with TXN+accesslog
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8950 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8889] Clarify default loglevel and consistently use debug/logging as appropriate
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8889 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs