- openldap-bugs - openldap.org

[Issue 8649] Issue when fetching the backend that will receive the contextCSN when we have glued databases
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8649 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8589] cn=config replication plus DB replication can break replication
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8589 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8577] Accesslog overlay hangs slapd depending on module loading order
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8577 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8458] syncrepl ppolicy with LDIF backend fails
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8458 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8440] syncrepl improvements for delta-sync mmr
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8440 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8227] syncprov should use more threads
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8227 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8149] nssov loginStatus doesn't play well with replication
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8149 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8102] syncrepl_entry: be_modify failed (16)
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8102 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8055] High CPU usage with syncrepl and wrong port
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8055 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7766] Account unlocked in slave after two modifications on a master (overlay ppolicy)
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7766 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7748] rare failure of test058
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7748 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7439] crash in rwm when tree is syncrepl synced and database ldap with rwm inside same tree
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7439 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7330] slapd mmr failure due to tls cert name mismatch
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7330 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7321] Subtree replication: when removing object outside of subtree, contextCSN is not updating!
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7321 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7258] slapo-rwm: Possible suffixmassage and syncrepl bug
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7258 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6830] slapo-ppolicy.5 has incorrect schema fragments
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=6830 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |OL_2_5_REQ -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6268] multi-master sync replication ldap_add error code 68 bug
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=6268 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6138] Bad Cancel/Abandon/"internal abandon"/Syncprov interactions
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=6138 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6136] replicated slapd.d interrupts syncrepl refresh
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=6136 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6097] MMR problems with deletes
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=6097 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5973] Syncrepl can update more than one csn value
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=5973 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8125] MMR throws away valid changes causing drift
by openldap-its＠openldap.org 08 Sep '20

08 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8125 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |replication -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8769] Docs: Fix oid search extension syntax
by openldap-its＠openldap.org 05 Sep '20

05 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8769 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |TEST Keywords|has_patch, OL_2_5_REQ | --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • c8ba729f by Lukas Juhrich at 2020-09-04T22:39:53+00:00 Issue#8769 - Fix oid search extension syntax in documentation -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9043] Improve loglevel sync logging
by openldap-its＠openldap.org 04 Sep '20

04 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=9043 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |2.4.53 Resolution|TEST |FIXED --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • ef3c62e7 by Ondřej Kuzník at 2020-09-03T23:11:41+00:00 ITS#9043 Improve replication loggging 3 changed files: • servers/slapd/ctxcsn.c • servers/slapd/overlays/syncprov.c • servers/slapd/syncrepl.c -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9336] New: Add native support for SASL/EXTERNAL to the client tools
by openldap-its＠openldap.org 04 Sep '20

04 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=9336 Issue ID: 9336 Summary: Add native support for SASL/EXTERNAL to the client tools Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: client tools Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- While slapd has built in support for SASL/EXTERNAL if built without Cyrus SASL support, the client tools lack this support. This means you end up in a scenario where you can only use SASL/EXTERNAL on the client side if cyrus-sasl is linked in, but the server can function without it. This lack of support on the client side also prevents validation of the server side SASL/EXTERNAL support in the test suite, since we can't use ldapwhoami, etc, to confirm SASL/EXTERNAL is functioning correctly. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8047] TIMEOUT and NETWORK_TIMEOUT don't work properly with SSL
by openldap-its＠openldap.org 04 Sep '20

04 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8047 --- Comment #8 from Allen Zhang <allen.zhang(a)audiocodes.com> --- We have some new findings as below. We tested two scenarios: The first test has a setup as below: 1. the server's IP is accessible. 2. server listens on the port but no response to any incoming data (so no ssl) Test result: ldapsearch will not timeout whatever timeout value we set. The second test has a setup below: 1. the server's IP is NOT accessible. Test result: ldapsearch will timeout only after TCP timeout (about 120 seconds) but not timeout at the timeout value we set. With our "fix version", ldapsearch will timeout according to our timeout value. So we believe there are two issues in the implementation. 1. No timeout for TCP connection(when startTLS is used) -- this is a bug. 2. No timeout for ssl connection. this is an openssl lib limitation. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9302] New: ppolicy pwdFailureTime race condition leaves acccount unlocked, violating pwdLockout policy
by openldap-its＠openldap.org 04 Sep '20

04 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=9302 Issue ID: 9302 Summary: ppolicy pwdFailureTime race condition leaves acccount unlocked, violating pwdLockout policy Product: OpenLDAP Version: 2.4.50 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: requate(a)univention.de Target Milestone: --- Multiple concurrent ldap binds with invalid passwords against a user account sometimes don't trigger account lockout, even though the number of failed attempts exceeds the configured pwdLockout policy of the ppolicy overlay. How to reproduce: 1. Configure ppolicy overlay with pwdLockout: TRUE 2. set pwdMaxFailure to some value, e.g. 5 3. Create a test user account and start just enough (or more) parallel ldapsearch processes to make the account get locked, e.g. like this in bash/sh (note the backgrounding): for i in $(seq 6); do ldapsearch -x -D "uid=testuser1,$ldap_base" -w invalid >/dev/null 2>&1 & done 4. Check relevant ppolicy attributes, like: ldapsearch -x -H LDAPI:// -b "uid=testuser1,$ldap_base" + \ grep -E '^(pwdFailureTime|pwdAccountLockedTime):' This often shows no pwdAccountLockedTime but enough (or more) pwdFailureTime values to meet the lockout policy. -- You are receiving this mail because: You are on the CC list for the issue.

1 8

[Issue 9320] New: ldapsearch nettimeout doesn't work with startTls when the server address is not reachable
by openldap-its＠openldap.org 03 Sep '20

03 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=9320 Issue ID: 9320 Summary: ldapsearch nettimeout doesn't work with startTls when the server address is not reachable Product: OpenLDAP Version: 2.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: client tools Assignee: bugs(a)openldap.org Reporter: allen.zhang(a)audiocodes.com Target Milestone: --- We found that ldapsearch doesn't return with failure according to the nettimeout when the server address is not valid. it fails only after TCP timeout (about 120 seconds in my environment). we dug into in to the source code and found that : in common.c, we set the nettimeout after ldap_start_tls_s is called. We tried to call "ldap_set_option( ld, LDAP_OPT_NETWORK_TIMEOUT, (void *) &nettimeout )" before ldap_start_tls_s and it works well! -- You are receiving this mail because: You are on the CC list for the issue.

1 11

[Issue 7743] mdb_idl_intersection() seems to expand the search candidates unnecessarily
by openldap-its＠openldap.org 03 Sep '20

03 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7743 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7743] mdb_idl_intersection() seems to expand the search candidates unnecessarily
by openldap-its＠openldap.org 03 Sep '20

03 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7743 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |DUPLICATE Status|UNCONFIRMED |RESOLVED --- Comment #8 from Howard Chu <hyc(a)openldap.org> --- *** This issue has been marked as a duplicate of issue 8868 *** -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8868] Inefficiency when processing certain search filters
by openldap-its＠openldap.org 03 Sep '20

03 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8868 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |yos-nishino(a)ys.jp.nec.com --- Comment #5 from Howard Chu <hyc(a)openldap.org> --- *** Issue 7743 has been marked as a duplicate of this issue. *** -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8047] TIMEOUT and NETWORK_TIMEOUT don't work properly with SSL
by openldap-its＠openldap.org 03 Sep '20

03 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8047 --- Comment #7 from Allen Zhang <allen.zhang(a)audiocodes.com> --- we will try to reproduce the SSL engine problem. but we do see there is another problem in the TCP connecting phase -- before the connecting SSL. no timeout if the server IP is not reachable. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5840] mdb online indexing and shutdown
by openldap-its＠openldap.org 02 Sep '20

02 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=5840 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|bdb_online_index and |mdb online indexing and |shutdown |shutdown -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7400] Memberof and Syncrepl incompatibility
by openldap-its＠openldap.org 02 Sep '20

02 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7400 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7400] Memberof and Syncrepl incompatibility
by openldap-its＠openldap.org 02 Sep '20

02 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=7400 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |WONTFIX Keywords|OL_2_5_REQ | Target Milestone|2.5.0 |--- --- Comment #11 from Quanah Gibson-Mount <quanah(a)openldap.org> --- For 2.5, memberof is deprecated and the recommendation is to use slapo-dynlist as a replacement. The 2.5 dynlist allows memberOf population on objects via static and/or dynamic groups. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5422] strerror(errno) problems
by openldap-its＠openldap.org 02 Sep '20

02 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=5422 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=5421 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5421] slapd vs LDAP_R_COMPILE
by openldap-its＠openldap.org 02 Sep '20

02 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=5421 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=5422 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8738] test066-autoca aborts with TLS error
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

1 0

[Issue 8738] test066-autoca aborts with TLS error
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8738 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INVALID Status|UNCONFIRMED |RESOLVED --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Hi Dieter, Your change removes startTLS from being critical, which is a critical part of what's being tested. I.e., it allows the startTLS operation to fail. If you're still seeing this issue, it would imply that your system does not have a validly configured "localhost". Regards, Quanah -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8159] Missing parameter in the Configuration man page
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8159 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST Keywords|OL_2_5_REQ | --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • e749750a by Quanah Gibson-Mount at 2020-09-01T19:40:36+00:00 ITS#8159 - Add missing "hard" parameter to size.prtotal -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6225] GSSAPI support for client library (fixes)
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

1 0

[Issue 6225] GSSAPI support for client library (fixes)
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=6225 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |INVALID Status|UNCONFIRMED |RESOLVED --- Comment #8 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Superceded by Issue#6567 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8159] Missing parameter in the Configuration man page
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8159 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0 |1 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/131 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8333] NAME 'internationalISDNNumber' (RFC 4519)
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8333 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Target Milestone|2.5.0 |2.6.0 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6151] Update cosine.schema to RFC 4524
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=6151 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Status|IN_PROGRESS |CONFIRMED Target Milestone|2.5.0 |2.6.0 --- Comment #21 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Punting to 2.6 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8175] Some more missing parameter in the Configuration man page
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8175 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Status|UNCONFIRMED |RESOLVED Resolution|--- |TEST --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 04124c1f by Quanah Gibson-Mount at 2020-09-01T18:04:06+00:00 ITS#8175 - Fix missing descriptions for olcDisallows for proxy_authz_non_critical and dontusecopy_non_critical -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8175] Some more missing parameter in the Configuration man page
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8175 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/130 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8047] TIMEOUT and NETWORK_TIMEOUT don't work properly with SSL
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8047 --- Comment #6 from Allen Zhang <allen.zhang(a)audiocodes.com> --- HI what we see is, we get stuck at connect() below 120 seconds. if opt_tv is set, the connect will work in non-block mode and return immediately. later in ldap_int_poll(), the network timeout will take effect. what do you think? static int ldap_pvt_connect(LDAP *ld, ber_socket_t s, struct sockaddr *sin, ber_socklen_t addrlen, int async) { int rc, err; struct timeval tv, *opt_tv = NULL; #ifdef LDAP_CONNECTIONLESS /* We could do a connect() but that would interfere with * attempts to poll a broadcast address */ if (LDAP_IS_UDP(ld)) { if (ld->ld_options.ldo_peer) ldap_memfree(ld->ld_options.ldo_peer); ld->ld_options.ldo_peer=ldap_memcalloc(1, sizeof(struct sockaddr_storage)); AC_MEMCPY(ld->ld_options.ldo_peer,sin,addrlen); return ( 0 ); } #endif if ( ld->ld_options.ldo_tm_net.tv_sec >= 0 ) { tv = ld->ld_options.ldo_tm_net; opt_tv = &tv; } osip_debug(ld, "ldap_pvt_connect: fd: %d tm: %ld async: %d\n", s, opt_tv ? tv.tv_sec : -1L, async); if ( opt_tv && ldap_pvt_ndelay_on(ld, s) == -1 ) return ( -1 ); do{ osip_debug(ld, "attempting to connect: \n", 0, 0, 0); if ( connect(s, sin, addrlen) != AC_SOCKET_ERROR ) { osip_debug(ld, "connect success\n", 0, 0, 0); if ( !async && opt_tv && ldap_pvt_ndelay_off(ld, s) == -1 ) return ( -1 ); return ( 0 ); } err = sock_errno(); osip_debug(ld, "connect errno: %d\n", err, 0, 0); } while(err == EINTR && LDAP_BOOL_GET( &ld->ld_options, LDAP_BOOL_RESTART )); if ( err != EINPROGRESS && err != EWOULDBLOCK ) { return ( -1 ); } if ( async ) { /* caller will call ldap_int_poll() as appropriate? */ return ( -2 ); } rc = ldap_int_poll( ld, s, opt_tv, 1 ); osip_debug(ld, "ldap_pvt_connect: %d\n", rc, 0, 0); return rc; } -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8159] Missing parameter in the Configuration man page
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8159 --- Comment #1 from Quanah Gibson-Mount <quanah(a)openldap.org> --- So if the argument is "hard", then the code will use the "hard" limit set to the general "sizelimit" parameter. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8047] TIMEOUT and NETWORK_TIMEOUT don't work properly with SSL
by openldap-its＠openldap.org 01 Sep '20

01 Sep '20

https://bugs.openldap.org/show_bug.cgi?id=8047 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Target Milestone|2.5.0 |--- --- Comment #5 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Not possible until all SSL engines support async in the underlying SSL library, which is currently not the case -- You are receiving this mail because: You are on the CC list for the issue.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs