- openldap-bugs - openldap.org

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8847 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8773] slapo-deref: man page and test suite needed
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8773 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8742] slapd.conf/slapd-config divergence
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8742 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8726] slapd -d pcache not available when pcache is a module
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8726 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8724] slapo-pcache truncates remote results
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8724 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8698 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8589] cn=config replication plus DB replication can break replication
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8589 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8577] Accesslog overlay hangs slapd depending on module loading order
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

1 0

[Issue 8415] Documentation has hard coded date
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8415 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8345] inconsistencies regarding LDIF line length
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8345 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8246] defining multiple frontend DBs should probably not be allowed
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=8246 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7990] (docs) Admin guide: bad link in password policy overlay section
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=7990 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7832] Proposing ppolicy extended module for OpenLDAP
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=7832 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|TEST |FIXED Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7786] Impossible to modify cn=config if olcDbDirectory doesn't exist
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=7786 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7295] Problem with TLS: threads and OpenSSL
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=7295 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|TEST |FIXED Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6830] slapo-ppolicy.5 has incorrect schema fragments
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=6830 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5365] Library symbol versioning or other help for library transitions
by openldap-its＠openldap.org 01 Apr '21

01 Apr '21

https://bugs.openldap.org/show_bug.cgi?id=5365 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9514] New: Modification of a record by changing its password in one master, intermittently causes the record to be deleted from other masters.
by openldap-its＠openldap.org 31 Mar '21

31 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9514 Issue ID: 9514 Summary: Modification of a record by changing its password in one master, intermittently causes the record to be deleted from other masters. Product: OpenLDAP Version: 2.4.44 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: loojonathand+ldap(a)gmail.com Target Milestone: --- We have a network topology with 3 master LDAP servers in 3 different cities. Each master has 1 replica, so a total of 6 LDAP servers. All of them are VMs running CentOS Linux release 7.9.2009. When we use ldapmodify to modify a record (for example, change its password) on one of the master servers, then the next time LDAP replicates to the other 2 masters, sometimes the record we tried to modify is deleted from the other 2 masters. (The usual procedure is to modify the record in all 3 masters, but the same thing happens if you modify the record in one master LDAP server and then sync the other 2 masters.) So for example if we modify a record on one server Mar 30 11:58:25 VMWGTNMSBRLD01 slapd[9083]: conn=675967 op=1 MOD dn="uid=JZTEST,ou=users,ou=radius,dc=hnops,dc=net" then sometimes we get, in one of the other servers: Mar 30 12:06:38 VMWNLVMSBRLD01 slapd[5079]: syncrepl_del_nonpresent: rid=004 be_delete uid=JZTEST,ou=users,ou=radius,dc=hnops,dc=net (0) The password-change process uses an "ldapmodify" command not a delete command, so not sure why this happens. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 7786] Impossible to modify cn=config if olcDbDirectory doesn't exist
by openldap-its＠openldap.org 31 Mar '21

31 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7786 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • e8c03ba5 by Ondřej Kuzník at 2021-03-31T16:14:25+00:00 ITS#7786 Document cn=config recovery options • 80cfd811 by Ondřej Kuzník at 2021-03-31T16:14:25+00:00 ITS#7786 Try to synthesize missing attribute types -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7786] Impossible to modify cn=config if olcDbDirectory doesn't exist
by openldap-its＠openldap.org 31 Mar '21

31 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7786 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.4 |2.5.3 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7786] Impossible to modify cn=config if olcDbDirectory doesn't exist
by openldap-its＠openldap.org 31 Mar '21

31 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7786 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.3 |2.5.4 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5271] size limit by ip (feature request)
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=5271 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Probably timelimit should have this as well -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5271] size limit by ip (feature request)
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=5271 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.6.0 See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=9512 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9001] try_read1msg() takes O(n) steps to lookup a matching request
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9001 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • e36d1e31 by Ondřej Kuzník at 2021-03-30T15:46:40+01:00 ITS#9001 manual changes • 3bd1b090 by Ondřej Kuzník at 2021-03-30T15:46:40+01:00 ITS#9001 Use a TAvl for request tracking in libldap -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8698 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 0df931b9 by Ondřej Kuzník at 2021-03-30T02:10:19+00:00 ITS#8698 Only remove our own callback • 51c444b0 by Ondřej Kuzník at 2021-03-30T02:10:19+00:00 ITS#8698 Defer policy checker cleanup if it's a pw extop -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 30 Mar '21

30 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8847 --- Comment #43 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • bc0d62db by Howard Chu at 2021-03-27T10:38:59+00:00 Revert "ITS#8847 more fallout from ldap_pvt_sockaddrstr move" This reverts commit f2ddf89e3cbe2ba65728cfc7b4c022d72192f442. Move Sockaddr def to ac/socket.h instead. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5365] Library symbol versioning or other help for library transitions
by openldap-its＠openldap.org 29 Mar '21

29 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=5365 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 38d1ac04 by Quanah Gibson-Mount at 2021-03-29T18:11:00+00:00 ITS#5365 - Add support for symbol versioning libldap and lilber -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9510] New: Build fails with slibtool and --disable-shared with undefined pthread references
by openldap-its＠openldap.org 29 Mar '21

29 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9510 Issue ID: 9510 Summary: Build fails with slibtool and --disable-shared with undefined pthread references Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: orbea(a)riseup.net Target Milestone: --- Created attachment 810 --> https://bugs.openldap.org/attachment.cgi?id=810&action=edit Build log with rdlibtool. When building openldap with --disable-shared and slibtool (https://dev.midipix.org/cross/slibtool) the build fails with many undefined pthread references. My understanding is that building static libraries exposes undefined references that otherwise would be exposed with -no-undefined. I am not sure how GNU libtool avoids this, perhaps it silently adds -lpthread? For the record GNU libtool will silently ignore -no-undefind while slibtool will not. This exposes several related issues in openldap. * libldap has no configure check indicating it requires --with-threads. * libldap does add $(LTHREAD_LIBS) to its $(LINK_LIBS), but then actually fails to use it. * The client tools requires threads, but they also have no configure check indicating so. * The client tools do not have a configure check to disable them, but there is a --without-threads. * The client tools really do needs $(LTHREAD_LIBS) added to the $(LINK_LIBS) I made a MR that fixes these problems or see the attached patch. https://git.openldap.org/openldap/openldap/-/merge_requests/303 -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 7832] Proposing ppolicy extended module for OpenLDAP
by openldap-its＠openldap.org 26 Mar '21

26 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7832 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|IN_PROGRESS |RESOLVED --- Comment #20 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • f3975b3f by David Coutadeur at 2021-03-26T15:01:36+00:00 Proposing ppolicy extended module for OpenLDAP (issue #7832) • c81bb207 by David Coutadeur at 2021-03-26T15:01:36+00:00 clean and homogenize ppm files for integration into contrib (issue #7832 !252) -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 26 Mar '21

26 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8847 --- Comment #42 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 829263c4 by Howard Chu at 2021-03-26T13:45:26+00:00 ITS#8847 move lutil_sockaddrstr() to ldap_pvt_sockaddrstr() Commits: • f2ddf89e by Howard Chu at 2021-03-26T14:12:47+00:00 ITS#8847 more fallout from ldap_pvt_sockaddrstr move -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8698] ppolicy: responses from pwdCheckModule discarded when using an extended password modify
by openldap-its＠openldap.org 26 Mar '21

26 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8698 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0 |1 --- Comment #1 from Ondřej Kuzník <ondra(a)mistotebe.net> --- https://git.openldap.org/openldap/openldap/-/merge_requests/304 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9347] ppolicy: Password policy not applied when pwdMaxAge overflows max int (32-bit)
by openldap-its＠openldap.org 26 Mar '21

26 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9347 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 61e9b6d3 by Ondřej Kuzník at 2021-03-25T23:57:07+00:00 ITS#9347 Log which policy attribute is invalid -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7788] pwdFailureTime and pwdChangedTime registered in user entry even if no ppolicy associated with the entry
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7788 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.3 --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 109d967f by Ondřej Kuzník at 2021-03-25T19:43:18+00:00 ITS#7788 Hashing should be independent of a useable policy -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8847 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|CONFIRMED |RESOLVED --- Comment #41 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 8ebd0650 by HoweverAT at 2021-03-25T17:37:26+00:00 ITS#8847 Print local address in connection dump • 9d594a11 by HoweverAT at 2021-03-25T18:47:11+00:00 ITS#8847 Add SOCKET_BIND_ADDRESSES Option -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8847] New LDAP URL syntax to support binding to specific IP address at client side
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8847 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.4 |2.5.3 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7786] Impossible to modify cn=config if olcDbDirectory doesn't exist
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=7786 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/299 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5365] Library symbol versioning or other help for library transitions
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

1 0

[Issue 9509] New: ldap_pvt_tls_check_hostname missing prototype
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9509 Issue ID: 9509 Summary: ldap_pvt_tls_check_hostname missing prototype Product: OpenLDAP Version: 2.4.57 Hardware: Other OS: Mac OS Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: noloader(a)gmail.com Target Milestone: --- Hi Everyone, I'm building OpenLDAP 2.4.57 on Apple M1. Apple turned on -Werror for missing prototypes. It results in: tls2.c:378:9: error: implicit declaration of function 'ldap_pvt_tls_check_hostname' is invalid in C99 [-Werror,-Wimplicit-function-declaration] err = ldap_pvt_tls_check_hostname( ld, ssl, host ); You can access an Apple M1 machine on the GCC Compile Farm. It is GCC304, port 2409. If needed you can get an account at https://cfarm.tetaneutral.net/users/new/. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 9508] New: Add support for maxentrysize for slapd-mdb
by openldap-its＠openldap.org 25 Mar '21

25 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9508 Issue ID: 9508 Summary: Add support for maxentrysize for slapd-mdb Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Symas has code to set a max entry size limitation on entries in back-mdb. This code needs upstreaming for 2.5 -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 8707] slapd: Add systemd service notification support
by openldap-its＠openldap.org 24 Mar '21

24 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8707 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.3 |2.5.4 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8707] slapd: Add systemd service notification support
by openldap-its＠openldap.org 24 Mar '21

24 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8707 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |CONFIRMED --- Comment #30 from Quanah Gibson-Mount <quanah(a)openldap.org> --- This patch is seriously deficient and will be rejected unless there is follow up in the near future from the patch author. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8950] segfault with TXN+accesslog
by openldap-its＠openldap.org 23 Mar '21

23 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8950 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST --- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • c6e521fa by Howard Chu at 2021-03-23T14:58:09+00:00 ITS#8950 move txn setup to frontend -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8668] pcache failing to update after entry moved
by openldap-its＠openldap.org 23 Mar '21

23 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8668 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.3 |--- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8668] pcache failing to update after entry moved
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8668 --- Comment #4 from Howard Chu <hyc(a)openldap.org> --- (In reply to Howard Chu from comment #3) > I was able to reproduce the behavior, but there is no bug here. > > You're seeing the old entry because it's left over from a previous run of > slapd. > The pcache overlay will forget what it knows about the cache contents on a > restart, unless you configure pcachePersist. When you enable this setting, > then it remembers its cached queries across restarts and will expire old > entries instead of returning them in new search requests. To be clear: I could only reproduce this behavior if slapd was stopped and restarted between queries: 1: perform a cacheable search 2: shutdown slapd and restart before cached query expires 3: move entry on remote server 4: repeat the cacheable search 5: repeat the cacheable search again On step 1, pcache will query the remote and store a copy of the returned entry. On step 2, the restart will make pcache forget it stored anything. On step 4, pcache will query the remote server because it thinks its cache is empty, and store and return the new result (only). On step 5, pcache will serve the request entirely from cache, and return both the old and new entries. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8668] pcache failing to update after entry moved
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=8668 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INVALID Status|UNCONFIRMED |RESOLVED --- Comment #3 from Howard Chu <hyc(a)openldap.org> --- I was able to reproduce the behavior, but there is no bug here. You're seeing the old entry because it's left over from a previous run of slapd. The pcache overlay will forget what it knows about the cache contents on a restart, unless you configure pcachePersist. When you enable this setting, then it remembers its cached queries across restarts and will expire old entries instead of returning them in new search requests. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9251] slapd tries to allocate huge amounts of memory for deeply nested filter
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9251 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | --- Comment #8 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • f1ebb456 by Howard Chu at 2021-03-22T17:31:13+00:00 ITS#9251 make max filter depth configurable -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5365] Library symbol versioning or other help for library transitions
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=5365 --- Comment #8 from Howard Chu <hyc(a)openldap.org> --- HowTo docs here https://www.netfort.gr.jp/~dancer/column/libpkg-guide/libpkg-guide.html#sym… -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9251] slapd tries to allocate huge amounts of memory for deeply nested filter
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9251 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|UNCONFIRMED |RESOLVED --- Comment #7 from Howard Chu <hyc(a)openldap.org> --- added config keyword in master -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6206] Admin guide appendices or tools in contrib should be better than Ubuntu docs
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=6206 --- Comment #5 from Howard Chu <hyc(a)openldap.org> --- (In reply to Gavin Henry from comment #4) > I think these are now them: > > https://ubuntu.com/server/docs/service-ldap Yes, but there is no mention of any auxiliary/contrib stuff on that page at all. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9421] New: SIGSEGV in the MMR synchro
by openldap-its＠openldap.org 22 Mar '21

22 Mar '21

https://bugs.openldap.org/show_bug.cgi?id=9421 Issue ID: 9421 Summary: SIGSEGV in the MMR synchro Product: OpenLDAP Version: 2.4.56 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: benjamin.demarteau(a)liege.be Target Milestone: --- We are in the process of migrating from a single outdated node to an up to date MMR cluster. Through this process we write LSC synchronizations from the old server to the new server so we can keep the old server around. Our preliminary tests show that when LSC hammers the ldap using multiple threads while another node is included in the replication, we get segmentation faults with the following backtrace: #0 0x00007f7f578748ef in __strncasecmp_l_avx () from /lib64/libc.so.6 #1 0x000056094a7ca298 in avl_find (root=0x56094bb28820, data=data@entry=0x7f7e74000cd0, fcmp=fcmp@entry=0x56094a7166a0 <oc_index_name_cmp>) at avl.c:545 #2 0x000056094a716bde in oc_bvfind (ocname=0x7f7e74000cd0) at oc.c:186 #3 oc_bvfind (ocname=ocname@entry=0x7f7e74000cd0) at oc.c:178 #4 0x000056094a70ec5a in objectSubClassMatch (matchp=0x7f7e5fff8c8c, flags=256, syntax=<optimized out>, mr=<optimized out>, value=<optimized out>, assertedValue=0x7f7e74000cd0) at schema_prep.c:214 #5 0x000056094a6e9fb9 in ordered_value_match (match=match@entry=0x7f7e5fff8c8c, ad=0x56094bb184e0, mr=mr@entry=0x56094bb09810, flags=flags@entry=256, v1=v1@entry=0x7f7e5810f470, v2=v2@entry=0x7f7e74000cd0, text=0x7f7e5fff8c90) at value.c:693 #6 0x000056094a6ec44d in test_ava_filter (op=op@entry=0x7f7e5fff90c0, e=e@entry=0x56094bb54a88, ava=0x7f7e74000cc8, type=type@entry=163) at filterentry.c:777 #7 0x000056094a6ecfec in test_filter (op=op@entry=0x7f7e5fff90c0, e=e@entry=0x56094bb54a88, f=f@entry=0x7f7e74000d08) at filterentry.c:88 #8 0x000056094a6ecc81 in test_filter_and (flist=<optimized out>, e=0x56094bb54a88, op=0x7f7e5fff90c0) at filterentry.c:879 #9 test_filter (op=op@entry=0x7f7e5fff90c0, e=0x56094bb54a88, f=<optimized out>) at filterentry.c:118 #10 0x00007f7f5382c58f in syncprov_matchops (op=op@entry=0x7f7e5fff9c80, opc=opc@entry=0x7f7e58001808, saveit=saveit@entry=0) at syncprov.c:1393 #11 0x00007f7f5382e37f in syncprov_op_response (op=0x7f7e5fff9c80, rs=<optimized out>) at syncprov.c:2115 #12 0x000056094a6dcb98 in slap_response_play (op=op@entry=0x7f7e5fff9c80, rs=rs@entry=0x7f7e5fff9c10) at result.c:508 #13 0x000056094a6dd11c in send_ldap_response (op=op@entry=0x7f7e5fff9c80, rs=rs@entry=0x7f7e5fff9c10) at result.c:583 #14 0x000056094a6ddd43 in slap_send_ldap_result (op=0x7f7e5fff9c80, rs=0x7f7e5fff9c10) at result.c:861 #15 0x000056094a7a86fd in mdb_add (op=0x7f7e5fff9c80, rs=0x7f7e5fff9c10) at add.c:435 #16 0x000056094a73cd78 in overlay_op_walk (op=op@entry=0x7f7e5fff9c80, rs=0x7f7e5fff9c10, which=op_add, oi=0x56094bb8a720, on=<optimized out>) at backover.c:677 #17 0x000056094a73ceab in over_op_func (op=0x7f7e5fff9c80, rs=<optimized out>, which=<optimized out>) at backover.c:730 #18 0x00007f7f5361ff6a in accesslog_response (op=<optimized out>, rs=<optimized out>) at accesslog.c:1877 #19 0x000056094a6dcb98 in slap_response_play (op=op@entry=0x7f7e7410fff0, rs=rs@entry=0x7f7e5fffa870) at result.c:508 #20 0x000056094a6dd11c in send_ldap_response (op=op@entry=0x7f7e7410fff0, rs=rs@entry=0x7f7e5fffa870) at result.c:583 #21 0x000056094a6ddd43 in slap_send_ldap_result (op=0x7f7e7410fff0, rs=0x7f7e5fffa870) at result.c:861 #22 0x000056094a7a86fd in mdb_add (op=0x7f7e7410fff0, rs=0x7f7e5fffa870) at add.c:435 #23 0x000056094a73cd78 in overlay_op_walk (op=op@entry=0x7f7e7410fff0, rs=0x7f7e5fffa870, which=op_add, oi=0x56094bb8a900, on=<optimized out>) at backover.c:677 #24 0x000056094a73ceab in over_op_func (op=0x7f7e7410fff0, rs=<optimized out>, which=<optimized out>) at backover.c:730 #25 0x000056094a6d32bd in fe_op_add (op=0x7f7e7410fff0, rs=0x7f7e5fffa870) at add.c:334 #26 0x000056094a6d4139 in do_add (op=0x7f7e7410fff0, rs=0x7f7e5fffa870) at add.c:194 #27 0x000056094a6cbfc0 in connection_operation (ctx=ctx@entry=0x7f7e5fffaab0, arg_v=arg_v@entry=0x7f7e7410fff0) at connection.c:1175 #28 0x000056094a6ccdbe in connection_read_thread (ctx=0x7f7e5fffaab0, argv=0x1a) at connection.c:1311 #29 0x00007f7f5903bead in ldap_int_thread_pool_wrapper (xpool=0x56094bb2a1d0) at tpool.c:696 #30 0x00007f7f57ae414a in start_thread () from /lib64/libpthread.so.0 #31 0x00007f7f57815f23 in clone () from /lib64/libc.so.6 If we take down the second node, we cannot reproduce the segfaults anymore. Let me know if we can provide more information (we can't provide the core dump since it's full of passwords). -- You are receiving this mail because: You are on the CC list for the issue.

1 19

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs