- openldap-bugs - openldap.org

[Issue 7596] slapo-ppolicy: OpenLDAP returning incorrect value for "graceAuthNsRemaining"
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=7596 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8707] slapd: Add systemd service notification support
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=8707 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7347] Exclusive bit masks for: ACL_WADD, ACL_WDEL, and ACL_WRITE
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=7347 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9122] slapadd with dry run fails with back-mdb
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9122 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9127] back-mdb: memory leak in mdb_entry_decode()
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9127 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6205] Discuss slapadd -S in Admin guide appendix
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=6205 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8900] contextCSN issue for export if last op was to delete an entry
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=8900 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8178] back-sock: Timeout to avoid locking
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=8178 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8890] Bug fix patches unbreaking the build on x32 systems
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=8890 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8721] Quarantine in meta backend
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=8721 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8440] syncrepl improvements for delta-sync mmr
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=8440 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.5.1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8479] overlay unique + mdb: loop and OOM kill, 2 URS as olcUniqueURI value
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=8479 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8009] SUBSTR caseIgnoreIA5SubstringsMatch for *Record in cosine schema
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=8009 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6301] PATCH - used red-black tree for response messages
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=6301 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9351] New: Always build monitor, and force it to be static.
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9351 Issue ID: 9351 Summary: Always build monitor, and force it to be static. Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- With 2.5, the monitor backend should always be enabled and built as a static module rather than dynamic. -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Issue 9349] New: Performance problem when trying to remove a value from an indexed attribute
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9349 Issue ID: 9349 Summary: Performance problem when trying to remove a value from an indexed attribute Product: OpenLDAP Version: 2.4.45 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: gbuades(a)soffid.com Target Milestone: --- Created attachment 762 --> https://bugs.openldap.org/attachment.cgi?id=762&action=edit Patch to improve attribute removal I have an LDAP with MDB backend, and a groupOfUniqueNames with 50.000 members. The uniqueMember attribute is indexed. When I try to remove a single user, the process takes more or less one minute to complete. After debugging, I've just found out the process to identify the old values to remove from the index is not optimum, as the time required to compare the old and the new values depends on number of values ^ 2. Taking advantage of the fact, that the values in the old and new attributes are ordered in the same way, I've build a patch to opmtimize this search process. Now, the same operation takes 0.2 seconds, when it used to take 50s. Thanks a lot for your effort, and I hope this contribution helps you and other users. The attached file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Soffid. Soffid has not assigned rights and/or interest in this work to any party. I, Gabriel Buades am authorized by Soffid, my employer, to release this work under the following terms. Soffid hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. The attached modifications to OpenLDAP Software are subject to the following notice: Copyright 2020 Soffid Redistribution and use in source and binary forms, with or without modification, are permitted only as authorized by the OpenLDAP Public License. -- You are receiving this mail because: You are on the CC list for the issue.

1 10

[Issue 9348] New: libldap uses deprecated symbols sys_errlist and sys_nerr
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9348 Issue ID: 9348 Summary: libldap uses deprecated symbols sys_errlist and sys_nerr Product: OpenLDAP Version: 2.4.53 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: ditu.alexandru(a)gmail.com Target Milestone: --- Starting with libc >= 2.32 the symbols sys_errlist and sys_nerr are removed: From the release notes (https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD): * The deprecated symbols sys_errlist, _sys_errlist, sys_nerr, and _sys_nerr are no longer available to newly linked binaries, and their declarations have been removed from from <stdio.h>. They are exported solely as compatibility symbols to support old binaries. All programs should use strerror or strerror_r instead. Their usage should be removed from libldap (include/ac/errno.h) and replaced with strerror or strerror_r. Otherwise any library that uses libldap compiled with libc < 2.32 won't run on systems that use newer libc versions (>= 2.32). -- You are receiving this mail because: You are on the CC list for the issue.

1 19

[Issue 9346] New: test063 only supports 2 servers, should handle up to 9
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9346 Issue ID: 9346 Summary: test063 only supports 2 servers, should handle up to 9 Product: OpenLDAP Version: 2.4.52 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: hyc(a)openldap.org Target Milestone: --- And the default should be 4, as with test050 etc. -- You are receiving this mail because: You are on the CC list for the issue.

1 2

[Issue 9344] New: test067-tls fails on solaris 10 due to unescaped quotes in quoted string
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9344 Issue ID: 9344 Summary: test067-tls fails on solaris 10 due to unescaped quotes in quoted string Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- This statement in test067 causes it to fail in solaris 10: TLS_PEERKEY_HASHED_FAIL="$TLS_PEERKEY_HASHALG:`echo "a fake key to hash" | \ "${openssl}" dgst "-$TLS_PEERKEY_HASHALG" -binary 2>/dev/null | \ "${openssl}" enc -base64 2>/dev/null`" Solaris10's shell requires the quotes here to be escaped, like: TLS_PEERKEY_HASHED_FAIL="$TLS_PEERKEY_HASHALG:`echo \"a fake key to hash\" | \ "${openssl}" dgst "-$TLS_PEERKEY_HASHALG" -binary 2>/dev/null | \ "${openssl}" enc -base64 2>/dev/null`" With this change the test passes -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9335] New: test068 fails when openldap is built without SASL support
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9335 Issue ID: 9335 Summary: test068 fails when openldap is built without SASL support Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Need to fix test068 to test for SASL support. -- You are receiving this mail because: You are on the CC list for the issue.

1 2

[Issue 9333] New: Delete TIMING variable from test suite
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9333 Issue ID: 9333 Summary: Delete TIMING variable from test suite Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- The TIMING variable used in the test suite was introduced in OpenLDAP 2.0 for the "bdb2" backend which hasn't existed in decades. The elapsed time data that is generated in 2.5 supersedes this functionality as well. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9311] New: Singular overlays should be flagged as such
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9311 Issue ID: 9311 Summary: Singular overlays should be flagged as such Product: OpenLDAP Version: 2.4.51 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- After the fix for issue#9309 it is now possible to ensure the singularity of overlays that should only be instantiated once on a DB. Currently only two are marked this way: ppolicy and rwm. The following overlays should also be marked this way: auditlog autoca collect constraint dds deref dyngroup dynlist seqmod sssvlv syncprov unique valsort The following overlays it is valid to have multiple instances: accesslog memberOf pcache refint retcode translucent The contrib overlays need examining as well. -- You are receiving this mail because: You are on the CC list for the issue.

1 6

[Issue 9307] New: --enable-<option>=mod should require --enable-modules
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9307 Issue ID: 9307 Summary: --enable-<option>=mod should require --enable-modules Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- In master/RE25, ./configure --enable-backends=mod fails with: checking configure arguments... configure: error: slapd requires a backend if --enable-modules is not also specified. In RE24, and for overlays in both versions, the specified modules get switched to static automatically, and a warning is emitted for each: configure: WARNING: building static accesslog overlay The behaviour was changed in issue 8224; the idea was to have it fail earlier if neither loadable module support nor any static backend was selected, but the error is not clear enough. Quanah and I agreed that it would be better to fail with an explicit error message in this case, rather than automatically do something different than requested. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9280] New: A read-only ppolicy installation
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9280 Issue ID: 9280 Summary: A read-only ppolicy installation Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: ondra(a)mistotebe.net Target Milestone: --- There might be environments where letting ppolicy write into the local database is not appropriate, but neither is chaining. It should be possible to skip the modifications altogether. -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Issue 9264] New: Add lock to slapo-unique to delay new ops until current op is complete
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9264 Issue ID: 9264 Summary: Add lock to slapo-unique to delay new ops until current op is complete Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: gnoe(a)symas.com Target Milestone: --- Locking is needed in slapo-unique to prevent duplicate values when new operations are started before previous operations are completed. -- You are receiving this mail because: You are on the CC list for the issue.

1 5

[Bug 9242] New: build failure with OpenSSL 0.9.7: EVP_sha256() undefined
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9242 Bug ID: 9242 Summary: build failure with OpenSSL 0.9.7: EVP_sha256() undefined Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- git master fails to build with OpenSSL 0.9.7d: $ openssl version OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes for: CVE-2005-2969 CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339 CVE-2006-4343 CVE-2006-7250 CVE-2007-5135 CVE-2007-3108 CVE-2008-5077 CVE-2008-7270 CVE-2009-0590 CVE-2009-2409 CVE-2009-3555 CVE-2010-4180 CVE-2011-4576 CVE-2011-4619 CVE-2012-0884 CVE-2012-1165 CVE-2012-2110 CVE-2012-2131 CVE-2012-2333) $ ./configure --with-tls=openssl --disable-slapd && make [...] libtool: link: gcc -g -O2 -o apitest apitest.o -L/usr/sfw/lib ./.libs/libldap.a /export/home/ryan/openldap/libraries/liblber/.libs/liblber.a ../../libraries/liblber/.libs/liblber.a ../../libraries/liblutil/liblutil.a -lsasl -lssl -lcrypto -lresolv -lgen -lnsl -lsocket -R/usr/sfw/lib Undefined first referenced symbol in file EVP_sha256 ./.libs/libldap.a(tls_o.o) ld: fatal: symbol referencing errors. No output written to apitest collect2: ld returned 1 exit status *** Error code 1 The SHA-2 algorithms were first added in OpenSSL 0.9.8. If the use of EVP_sha256() is to be unconditional, please make configure fail if an older version is detected, and update the documentation as well (i.e. admin guide for 2.5). (This could also be an opportunity to make the CRL feature unconditional; currently it is enabled only with OpenSSL 0.9.7d or later.) -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 9239] New: test007 failed on Solaris 10: slapmodify crashed
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9239 Bug ID: 9239 Summary: test007 failed on Solaris 10: slapmodify crashed Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- ./configure CPPFLAGS=-I/opt/csw/include LDFLAGS="-L/opt/csw/lib -R/opt/csw/lib" && make && make check >>>>> Starting test007-slapmodify for mdb... running defines.sh Running slapadd to build slapd database... Testing modify, add, and delete using slapmodify... Segmentation Fault - core dumped slapmodify failed (139)! >>>>> test007-slapmodify failed for mdb after $(( %s - %s )) seconds (exit 139) -bash-3.2$ dbx servers/slapd/slapd tests/core [...] program terminated by signal SEGV (no mapping at the fault address) 0xfead646c: strlen+0x000c: movl (%eax),%edx Current function is lutil_debug 74 len = vsnprintf( buffer+off, sizeof(buffer)-off, fmt, vl ); (dbx) where [1] strlen(0x0), at 0xfead646c [2] _ndoprnt(0x823a44b, 0x8046ebc, 0x8045e60, 0x0), at 0xfeb31bce [3] vsnprintf(0x8045e99, 0xff7, 0x823a430, 0x8046ebc), at 0xfeb34d8f =>[4] lutil_debug(debug = 16645, level = 1, fmt = 0x823a430 "oc_check_required entry (%s), objectClass "%s"\n", ... = <value unavailable>, ...), line 74 in "debug.c" [5] oc_check_required(e = 0x8534ad4, oc = 0x831a890, ocname = 0x852a1b8), line 514 in "schema_check.c" [6] entry_schema_check(op = 0x804718c, e = 0x8534ad4, oldattrs = (nil), manage = 0, add = 1, socp = (nil), text = 0x80475d0, textbuf = 0x804708c "", textlen = 256U), line 430 in "schema_check.c" [7] slap_tool_entry_check(progname = 0x824a964 "slapmodify", op = 0x804718c, e = 0x8534ad4, lineno = 3, text = 0x80475d0, textbuf = 0x804708c "", textlen = 256U), line 1186 in "slapcommon.c" [8] slapmodify(argc = 10, argv = 0x8047838), line 446 in "slapmodify.c" [9] main(argc = 10, argv = 0x8047838), line 670 in "main.c" (dbx) up Current function is oc_check_required 514 Debug( LDAP_DEBUG_TRACE, (dbx) list 514 Debug( LDAP_DEBUG_TRACE, 515 "oc_check_required entry (%s), objectClass \"%s\"\n", 516 e->e_dn, ocname->bv_val ); 517 518 519 /* check for empty oc_required */ 520 if(oc->soc_required == NULL) { 521 return NULL; 522 } 523 (dbx) print e->e_dn e->e_dn = (nil) (dbx) print ocname->bv_val ocname->bv_val = 0x852a1a0 "OpenLDAPperson" On other systems, the debug output is: 5ea0dcca oc_check_required entry ((null)), objectClass "OpenLDAPperson" It appears this version of vsnprintf cannot handle the %s argument being NULL. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 9237] New: Remove back-perl
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9237 Bug ID: 9237 Summary: Remove back-perl Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- For 2.5, we will be removing back perl. In master, remove the ability to build back perl, but keep the source for the 2.5 branch, remove the source as well. -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 9236] New: Remove back-shell
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9236 Bug ID: 9236 Summary: Remove back-shell Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- For 2.5+ remove back-shell from being built. In master, keep the source code for now (Delete for 2.6+) For 2.5 branch, delete the source as well. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 9235] New: Stop building libldap
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9235 Bug ID: 9235 Summary: Stop building libldap Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- For 2.5+, we will no longer build libldap, only libldap_r Source should remain in the tree -- You are receiving this mail because: You are on the CC list for the bug.

1 13

[Bug 9234] New: Disable back-sql with --enable-backends
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9234 Bug ID: 9234 Summary: Disable back-sql with --enable-backends Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Similar to what was done for back-ndb, disable back-sql building when --enable-backends is given -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 9232] New: [PATCH] Implement caseIgnoreListSubstringsMatch
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9232 Bug ID: 9232 Summary: [PATCH] Implement caseIgnoreListSubstringsMatch Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: fredrik(a)roubert.name Target Milestone: --- As far as I've been able to figure out by searching the mailing list archives, the sole reason for this not being implemented yet is simply that no-one has cared to do it yet: https://www.openldap.org/lists/openldap-software/200502/msg00232.html https://www.openldap.org/lists/openldap-software/200605/msg00208.html Now I myself would like to use caseIgnoreListSubstringsMatch on my own OpenLDAP server, so I've written this patch: https://roubert.name/fredrik/software/openldap/0001-Implement-caseIgnoreLis… Notice of Origin: The attached patch file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Fredrik Roubert <fredrik(a)roubert.name>. I have not assigned rights and/or interest in this work to any party. Rights Statement: I, Fredrik Roubert, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 9226] New: MinGW build fails to link rewrite program with --enable-dynamic
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9226 Bug ID: 9226 Summary: MinGW build fails to link rewrite program with --enable-dynamic Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- /bin/sh ../../libtool --mode=link cc -g -O2 -o rewrite rewrite.o parse.o librewrite.a ../../libraries/libldap_r/libldap_r.la ../../libraries/liblber/liblber.la ../../libraries/liblutil/liblutil.a -lregex -lws2_32 libtool: link: cc -g -O2 -o .libs/rewrite rewrite.o parse.o librewrite.a ../../libraries/libldap_r/.libs/libldap_r.dll.a /home/ryan/openldap/libraries/liblber/.libs/liblber.dll.a ../../libraries/liblber/.libs/liblber.dll.a ../../libraries/liblutil/liblutil.a -lregex -lws2_32 -L/mingw64/lib C:/msys64/mingw64/bin/../lib/gcc/x86_64-w64-mingw32/9.3.0/../../../../x86_64-w64-mingw32/bin/ld.exe: ../../libraries/liblutil/liblutil.a(utils.o): in function `lutil_str2bin': C:\msys64\home\ryan\openldap\libraries\liblutil/utils.c:933: undefined reference to `__imp_ber_memfree_x' C:/msys64/mingw64/bin/../lib/gcc/x86_64-w64-mingw32/9.3.0/../../../../x86_64-w64-mingw32/bin/ld.exe: C:\msys64\home\ryan\openldap\libraries\liblutil/utils.c:887: undefined reference to `__imp_ber_memalloc_x' collect2.exe: error: ld returned 1 exit status make[2]: *** [Makefile:292: rewrite] Error 1 I think this is caused by the order of libraries on the link line. MinGW's import libraries (.dll.a) behave like static libraries with one .o per function, so liblutil.a should come before liblber.dll.a. I guess it doesn't occur on UNIX because the shared libraries are scanned differently. It doesn't occur with static linking because entire objects are linked and liblber.a/memory.o is already pulled in by libldap. N.B.: RE24 with --enable-dynamic fails to link liblber; the error looks superficially similar but it is not the same. RE24's issue is a libtool bug, already fixed in master by upgrading libtool. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 9215] New: Embedded _XOPEN_SOURCE breaks Solaris build [regression]
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9215 Bug ID: 9215 Summary: Embedded _XOPEN_SOURCE breaks Solaris build [regression] Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: grapvar(a)gmail.com Target Milestone: --- The commit [2020-03-26 57b7003 | thr_posix.c: fix implicit function declaration for 'pthread_setconcurrency'] introduced in the bug 8676, comment 8: > --- a/libraries/libldap_r/thr_posix.c > +++ b/libraries/libldap_r/thr_posix.c > @@ -15,4 +15,6 @@ > */ > > +#define _XOPEN_SOURCE 500 /* For pthread_setconcurrency() on glibc */ > + > #include "portable.h" breaks build on Solaris (likely any version; irrelevant compiling options omitted): | cc ... -c ../../../libraries/libldap_r/thr_posix.c -o .libs/thr_posix.o | "/usr/include/sys/feature_tests.h", line 354: #error: "Compiler or options invalid for pre-UNIX 03 X/Open applications and pre-2001 POSIX applications" The system headers bear in mind: "If you are using c99-compatible compiler ..." and we all are using such compilers in 2020, isn't it? "... and want to use X/Open CAE, it must be at least Issue 6" i.e., not the Issue 5 (_XOPEN_SOURCE=500). This part of system headers came from the times when Solaris was Sun yet. Given the long respectful history of Sun's commitment to standard conformance, I trust this assertion. The problem, however, is not an incorrect X/Open version this patch employs. 1st of all, this patch is a system-specific hack, that targets not even GNU-based systems, but, I suppose, specifically, GNU linux, maybe, even specific version and distro. E.g., there are no problems with pthread_setconcurrency() visibility on Solaris. 2nd of all, the influence of configuration macros _XOPEN_SOURCE, _POSIX_SOURCE, _POSIX_C_SOURCE, _XOPEN_VERSION, _XOPEN_SOURCE_EXTENDED, __EXTENSIONS__ etc is very system- and compiler- specific, and embedding these macros directly in a source is likely to cause problems. I believe the best course of action is to put a test in autoconf to check what is the best way to achieve pthread_setconcurrency() visibility on any given system. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 9213] New: undefined reference in back_ldap when --enable-ldap=mod and --disable-dynamic
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9213 Bug ID: 9213 Summary: undefined reference in back_ldap when --enable-ldap=mod and --disable-dynamic Product: OpenLDAP Version: 2.4.49 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: build Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- ./configure --enable-modules --enable-ldap=mod doesn't link back_ldap with libldap (--enable-dynamic is disabled per default). The resulting binary doesn't work; slapd has libldap statically linked, but doesn't include all the symbols back_ldap uses: specifically ldap_modify_ext. slaptest passes, but back_ldap fails at runtime (test022 fails). Not sure if other modules would have the same problem. -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 9212] New: [2.5] entry_schema_check can leave text uninitialized
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9212 Bug ID: 9212 Summary: [2.5] entry_schema_check can leave text uninitialized Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- 76df74dbeab47195e42946a474c3a5f8557c168d removed some important snprintfs in schema_check.c. Now we can get uninitialized data in *text for these cases. For example: $ ./clients/tools/ldapmodify -H ldap://:9000 -x -D cn=admin,dc=example,dc=com -w secret dn: cn=test,dc=example,dc=com changetype: add objectclass: device adding new entry "cn=test,dc=example,dc=com" dn: cn=test,dc=example,dc=com add: sn sn: test modifying entry "cn=test,dc=example,dc=com" ldap_modify: Object class violation (65) additional info: | $ ./clients/tools/ldapmodify -H ldap://:9000 -x -D cn=admin,dc=example,dc=com -w secret dn: cn=test,dc=example,dc=com add: sn sn: test modifying entry "cn=test,dc=example,dc=com" ldap_modify: Object class violation (65) additional info: ^[[?1;2c $ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 9209] New: test072/test075 fail on Solaris due to buggy test script
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9209 Bug ID: 9209 Summary: test072/test075 fail on Solaris due to buggy test script Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Both test072 and test075 have this logic: if test -z `which dsadm`; then echo "DSEE dsadm not in path, test skipped" exit 0 fi This works fine on Linux, however it does not work on Solaris causing the test to execute (and then fail). -- You are receiving this mail because: You are on the CC list for the bug.

1 24

[Bug 9207] New: Remove Moznss compatibility layer
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9207 Bug ID: 9207 Summary: Remove Moznss compatibility layer Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- For the 2.5 release, remove the MozNSS compatibility layer. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 9201] New: LDAP_THREAD_DEBUG doesn't compile
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9201 Bug ID: 9201 Summary: LDAP_THREAD_DEBUG doesn't compile Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- on master @ 4ac88b219d: ./configure CPPFLAGS="-DLDAP_THREAD_DEBUG" && make make[2]: Entering directory '/home/ryan/tmp/openldap/libraries/libldap_r' /bin/sh ../../libtool --mode=compile cc -g -O2 -I../../include -I../../include -DLDAP_R_COMPILE -I./../libldap -DLDAP_THREAD_DEBUG -DLDAP_LIBRARY -c threads.c cc -g -O2 -I../../include -I../../include -DLDAP_R_COMPILE -I./../libldap -DLDAP_THREAD_DEBUG -DLDAP_LIBRARY -c threads.c -fPIC -DPIC -o .libs/threads.o In file included from ldap_thr_debug.h:129, from threads.c:73: ../../include/ldap_pvt_thread.h:114:1: error: conflicting types for 'ldap_pvt_thread_mutex_recursive_init' ldap_pvt_thread_mutex_recursive_init LDAP_P(( ldap_pvt_thread_mutex_t *mutex )); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ In file included from ldap_thr_debug.h:129, from threads.c:26: ../../include/ldap_pvt_thread.h:114:1: note: previous declaration of 'ldap_pvt_thread_mutex_recursive_init' was here ldap_pvt_thread_mutex_recursive_init LDAP_P(( ldap_pvt_thread_mutex_t *mutex )); ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ make[2]: *** [Makefile:420: threads.lo] Error 1 -- You are receiving this mail because: You are on the CC list for the bug.

1 13

[Bug 9194] New: slapd-ndb: Remove backend for the 2.5 release
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9194 Bug ID: 9194 Summary: slapd-ndb: Remove backend for the 2.5 release Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: backends Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- Remove the slapd-ndb backend for the 2.5 release, as it was never finished and development on it has ceased. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 9191] New: libraries\liblutil\meter.c have a bad function lutil_meter_update, maybe divide 0
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9191 Bug ID: 9191 Summary: libraries\liblutil\meter.c have a bad function lutil_meter_update, maybe divide 0 Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: client tools Assignee: bugs(a)openldap.org Reporter: digpython(a)163.com Target Milestone: --- int lutil_meter_update ( lutil_meter_t *meter, size_t position, int force) { static const double display_rate = 0.5; double frac, cycle_length, speed, now; time_t remaining_time, elapsed; int rc; assert( meter != NULL ); lutil_get_now( &now ); if ( !force && now - meter->last_update < display_rate ) return 0; frac = ((double)position) / ((double) meter->goal_value); elapsed = now - meter->start_time; if (frac <= 0.0) return 0; if (frac >= 1.0) { rc = meter->display->display_update( &meter->display_data, 1.0, 0, (time_t) elapsed, ((double)position) / elapsed); } else { ... } -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 9184] New: slapd -V flag not documented
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9184 Bug ID: 9184 Summary: slapd -V flag not documented Product: OpenLDAP Version: 2.4.49 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: documentation Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- The slapd(8) man page does not document the -V (version info) flag. https://openldap.org/software/man.cgi?query=slapd&apropos=0&sektion=0&manpa… https://openldap.org/software/man.cgi?query=slapd&apropos=0&sektion=0&manpa… -- You are receiving this mail because: You are watching someone on the CC list of the bug.

1 5

[Issue 9177] Finish the autoconf 2.69 upgrade
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9177 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9176] libldap support for TLS SNI
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9176 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9166] RE25 admin guide fails to build
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9166 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|TEST |FIXED Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9165] Paged search results on FreeBSD exceed static buffer
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9165 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|TEST |FIXED Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9160] Out-of-memory handling issues
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9160 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9156] latest ppolicy draft support
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9156 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9125] [regression] back-ldap does not respect --without-tls
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9125 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|TEST |FIXED Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9121] dynlist enhancements
by openldap-its＠openldap.org 14 Oct '20

14 Oct '20

https://bugs.openldap.org/show_bug.cgi?id=9121 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Resolution|TEST |FIXED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs