- openldap-bugs - openldap.org

[Issue 7958] LMDB: LIFO-reclaiming, write-performance improvement & bugfixes
by openldap-its＠openldap.org 08 Jun '20

08 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=7958 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7958] LMDB: LIFO-reclaiming, write-performance improvement & bugfixes
by openldap-its＠openldap.org 07 Jun '20

07 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=7958 Leonid Yuriev <leo(a)yuriev.ru> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |WONTFIX Status|UNCONFIRMED |RESOLVED --- Comment #7 from Leonid Yuriev <leo(a)yuriev.ru> --- MDBX_LIFORECLAIM implemented & checked in the libmdbx project. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8610] ldaps not usable with DNS SRV
by openldap-its＠openldap.org 06 Jun '20

06 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8610 --- Comment #4 from Michael Ströder <michael(a)stroeder.com> --- And still there is no standard which defines a decent TLS domain name check for SRV RRs with well-defined subjectAltName values to prevent MITM attacks. See also: https://tools.ietf.org/html/rfc6125#section-3 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8610] ldaps not usable with DNS SRV
by openldap-its＠openldap.org 05 Jun '20

05 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8610 --- Comment #3 from braiamp(a)gmail.com --- Also present on Debian version ldapsearch: @(#) $OpenLDAP: ldapsearch 2.4.50+dfsg-1 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8610] ldaps not usable with DNS SRV
by openldap-its＠openldap.org 05 Jun '20

05 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8610 --- Comment #2 from braiamp(a)gmail.com --- This issue seem to be still present in master. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5974] libldap not consistently using namespaces
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

1 0

[Issue 8608] slapo-pcache: Inversion in filter pcacheTemplate cannot be parsed
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

1 0

[Issue 8608] slapo-pcache: Inversion in filter pcacheTemplate cannot be parsed
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8608 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |INVALID --- Comment #2 from Howard Chu <hyc(a)openldap.org> --- This feature works as designed. Read the ProxyCache design paper for details. https://openldap.org/conf/odd-wien-2003/proceedings.html -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8473] unkown plugin type {0} preoperation
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8473 --- Comment #2 from Ondřej Kuzník <ondra(a)mistotebe.net> --- Merge request to fix this has been proposed: https://git.openldap.org/openldap/openldap/-/merge_requests/78 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9051] slapo-accesslog fails to log compare, search
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=9051 --- Comment #2 from Ondřej Kuzník <ondra(a)mistotebe.net> --- Can't reproduce this in master or re24... Compares don't get logged if logsuccess is on, that should probably be fixed (including COMPARE_{TRUE,FALSE} and SASL_BIND_IN_PROGRESS as successes?) Needs more information? This is the minimal config where everything works (replace $ops accordingly): database null suffix cn=test rootdn cn=test rootpw pass overlay accesslog logdb cn=log logops $ops logsuccess off database mdb directory ./db suffix cn=log rootdn cn=test overlay syncprov -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8143] SegV in ~LDAPCtrl()
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8143 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|slapd |libraries -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5974] libldap not consistently using namespaces
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=5974 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|UNCONFIRMED |RESOLVED --- Comment #7 from Ondřej Kuzník <ondra(a)mistotebe.net> --- None of this applies to libldap(_r)/liblber in master anymore. Nor does slapd seem to reference ldap_int_* symbols directly. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8768] Syncprov shouldn't send a new cookie at the end of delete phase
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8768 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #5 from Ondřej Kuzník <ondra(a)mistotebe.net> --- https://git.openldap.org/openldap/openldap/-/merge_requests/4 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6467] syncrepl enhancements
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=6467 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS Depends on| |8768 --- Comment #5 from Ondřej Kuzník <ondra(a)mistotebe.net> --- Code to implement this is in a merge request here: https://git.openldap.org/openldap/openldap/-/merge_requests/5 Referenced Issues: https://bugs.openldap.org/show_bug.cgi?id=8768 [Issue 8768] Syncprov shouldn't send a new cookie at the end of delete phase -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8768] Syncprov shouldn't send a new cookie at the end of delete phase
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8768 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |6467 Referenced Issues: https://bugs.openldap.org/show_bug.cgi?id=6467 [Issue 6467] syncrepl enhancements -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6207] Build farm
by openldap-its＠openldap.org 04 Jun '20

04 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=6207 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|ondra(a)mistotebe.net |bugs(a)openldap.org -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8182] setspec matching fails unexpectedly
by openldap-its＠openldap.org 03 Jun '20

03 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8182 --- Comment #2 from Ondřej Kuzník <ondra(a)mistotebe.net> --- Dealing with this would need access to the attribute type in the other set we're joining with so the literal 'canBrowse' could be normalised accordingly. But the way set ACLs are parsed at the moment, there is no way to keep and propagate this information. We might have to turn to a parser generator to get an AST and annotate accordingly if this is needed. That would in turn make us require YACC or whatever we chose. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7089] ppolicy adds PWDFAILURETIME to organizationalUnit
by openldap-its＠openldap.org 03 Jun '20

03 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=7089 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #7 from Ondřej Kuzník <ondra(a)mistotebe.net> --- I have created a patchset that attempts to address this and other ppolicy related issues here: https://git.openldap.org/openldap/openldap/-/merge_requests/77 Please review, test and let me know if this addresses the issue and if you have any other comments. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8762] Unlocking an account doesn't remove pwdFailureTime
by openldap-its＠openldap.org 03 Jun '20

03 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8762 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #10 from Ondřej Kuzník <ondra(a)mistotebe.net> --- I have created a patchset that attempts to address this and other ppolicy related issues here: https://git.openldap.org/openldap/openldap/-/merge_requests/77 Please review, test and let me know if this addresses the issue and if you have any other comments. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7084] Password Modify Extended Operation to set pwdReset: TRUE
by openldap-its＠openldap.org 03 Jun '20

03 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=7084 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #4 from Ondřej Kuzník <ondra(a)mistotebe.net> --- I have created a patchset that attempts to address this and other ppolicy related issues here: https://git.openldap.org/openldap/openldap/-/merge_requests/77 Please review, test and let me know if this addresses the issue and if you have any other comments. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7788] pwdFailureTime and pwdChangedTime registered in user entry even if no ppolicy associated with the entry
by openldap-its＠openldap.org 03 Jun '20

03 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=7788 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #5 from Ondřej Kuzník <ondra(a)mistotebe.net> --- I have created a patchset that attempts to address this and other ppolicy related issues here: https://git.openldap.org/openldap/openldap/-/merge_requests/77 Please review, test and let me know if this addresses the issue and if you have any other comments. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7788] pwdFailureTime and pwdChangedTime registered in user entry even if no ppolicy associated with the entry
by openldap-its＠openldap.org 02 Jun '20

02 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=7788 --- Comment #4 from Clément OUDOT <clement.oudot(a)worteks.com> --- I don't think this solves the issue. The problem is on entries that are not linked to any password policy are updated by ppolicy overlay. Adding a parameter in the password policy is not a good solution from my point of view. The entry should never be updated by ppolicy overlay if no ppolicy definition is applied to it. Note that this bug was opened 6 years ago, I did not test recent OpenLDAP versions. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7788] pwdFailureTime and pwdChangedTime registered in user entry even if no ppolicy associated with the entry
by openldap-its＠openldap.org 02 Jun '20

02 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=7788 --- Comment #3 from Ondřej Kuzník <ondra(a)mistotebe.net> --- Hi Clément, this should still be possible if you set a default policy with pwdMaxRecordedFailure == 0, is there a reason this would not be appropriate before we go changing the default behaviour? Thanks, Ondrej -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8888] doc: sdf number disorder
by openldap-its＠openldap.org 01 Jun '20

01 Jun '20

https://bugs.openldap.org/show_bug.cgi?id=8888 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST Keywords|OL_2_5_REQ | --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 47974536 by Quanah Gibson-Mount at 2020-06-01T19:05:26+00:00 Issue #8888 - Change numbered list to Note format -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8675] tools continuing after ldap_start_tls_ returns non-LDAP error
by openldap-its＠openldap.org 28 May '20

28 May '20

https://bugs.openldap.org/show_bug.cgi?id=8675 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|has_patch, IPR_OK, | |openldap-scratch | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9020] Inconsistent cn=config objectClasses for overlays
by openldap-its＠openldap.org 27 May '20

27 May '20

https://bugs.openldap.org/show_bug.cgi?id=9020 --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- In fact, for autoCA, I'm not a fan of the other olc config attr names either -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9020] Inconsistent cn=config objectClasses for overlays
by openldap-its＠openldap.org 27 May '20

27 May '20

https://bugs.openldap.org/show_bug.cgi?id=9020 --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- and Dyngroup does this as well -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9020] Inconsistent cn=config objectClasses for overlays
by openldap-its＠openldap.org 27 May '20

27 May '20

https://bugs.openldap.org/show_bug.cgi?id=9020 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- autoca continues this unfortunate trend -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8888] doc: sdf number disorder
by openldap-its＠openldap.org 27 May '20

27 May '20

https://bugs.openldap.org/show_bug.cgi?id=8888 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #1 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/75 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7530] gethostbyname_r fails if initial buffer size is too small
by openldap-its＠openldap.org 27 May '20

27 May '20

https://bugs.openldap.org/show_bug.cgi?id=7530 --- Comment #4 from ujvari(a)microsec.hu <ujvari(a)microsec.hu> --- Én köszönöm a javítást. It's me who thank you for fixing the problem. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8873] slapd-meta/ldap - Remove deprecated options
by openldap-its＠openldap.org 26 May '20

26 May '20

https://bugs.openldap.org/show_bug.cgi?id=8873 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • f926e667 by Quanah Gibson-Mount at 2020-05-26T19:59:56+00:00 ITS#8873 - Delete obsolete configuration options from back-ldap, back-meta, and back-asyncmeta -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7990] (docs) Admin guide: bad link in password policy overlay section
by openldap-its＠openldap.org 26 May '20

26 May '20

https://bugs.openldap.org/show_bug.cgi?id=7990 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=9156 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9156] latest ppolicy draft support
by openldap-its＠openldap.org 26 May '20

26 May '20

https://bugs.openldap.org/show_bug.cgi?id=9156 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=7990 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7530] gethostbyname_r fails if initial buffer size is too small
by openldap-its＠openldap.org 26 May '20

26 May '20

https://bugs.openldap.org/show_bug.cgi?id=7530 --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- (In reply to ujvari(a)microsec.hu from comment #0) > Full_Name: Aron Ujvari köszönöm -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7530] gethostbyname_r fails if initial buffer size is too small
by openldap-its＠openldap.org 26 May '20

26 May '20

https://bugs.openldap.org/show_bug.cgi?id=7530 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Keywords|OL_2_5_REQ | Resolution|--- |TEST --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • fb1933f5 by Quanah Gibson-Mount at 2020-05-26T19:18:02+00:00 Issue#7530 - Test for ERANGE when using 6 form gethostbyname_r -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Bug 9257] New: Abstract attribute types can be instantiated
by openldap-its＠openldap.org 25 May '20

25 May '20

https://bugs.openldap.org/show_bug.cgi?id=9257 Bug ID: 9257 Summary: Abstract attribute types can be instantiated Product: OpenLDAP Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: grapvar(a)gmail.com Target Milestone: --- If you add 'name' or 'distinguishedName' attributes somewhere they are added seamlessly. However, these attributes are SLAP_AT_ABSTRACT, which > slap.h: #define SLAP_AT_ABSTRACT 0x0100U /* cannot be instantiated */ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Issue 9267] New: libldap incorrectly accepts IP addresses in cert subject field as valid
by openldap-its＠openldap.org 23 May '20

23 May '20

https://bugs.openldap.org/show_bug.cgi?id=9267 Issue ID: 9267 Summary: libldap incorrectly accepts IP addresses in cert subject field as valid Product: OpenLDAP Version: 2.4.50 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: quanah(a)openldap.org Target Milestone: --- With a cert that has no subjectAltName, and has an IP address in the subject, ldap client connections are still made instead of rejected. This appears to violate RFC 4513, section 3.1.3: The server's identity may also be verified by comparing the reference identity to the Common Name (CN) [RFC4519] value in the leaf Relative Distinguished Name (RDN) of the subjectName field of the server's certificate. This comparison is performed using the rules for comparison of DNS names in Section 3.1.3.1, below, with the exception that no wildcard matching is allowed. Although the use of the Common Name value is existing practice, it is deprecated, and Certification Authorities are encouraged to provide subjectAltName values instead. Note that the TLS implementation may represent DNs in certificates according to X.500 or other conventions. For example, some X.500 implementations order the RDNs in a DN using a left-to-right (most significant to least significant) convention instead of LDAP's right-to-left convention. I do know we have an exception to the above in relation to wildcards in subject, since many CAs only issue certs that way (or at least did so at the time). However that still revolves around DNS names. The acceptance of IP addresses is a separate matter and seems like it should be treated as a bug. -- You are receiving this mail because: You are on the CC list for the issue.

1 4

[Issue 7501] added TCP keepalive support to back_ldap
by openldap-its＠openldap.org 22 May '20

22 May '20

https://bugs.openldap.org/show_bug.cgi?id=7501 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Keywords|OL_2_5_REQ | Resolution|--- |FIXED Target Milestone|2.5.0 |--- --- Comment #12 from Quanah Gibson-Mount <quanah(a)openldap.org> --- (In reply to Quanah Gibson-Mount from comment #10) > Need to confirm that dynamic config conversion still works. conversion works > Need to ensure similar support in back-meta (back-asyncmeta too?) Support exists > Need to examine the bits that use #if 0 (comment#1) Looks fine Fixed in 2.4.34 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9059] session log parsing triggers cascading REFRESH
by openldap-its＠openldap.org 22 May '20

22 May '20

https://bugs.openldap.org/show_bug.cgi?id=9059 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Keywords|OL_2_5_REQ | Resolution|--- |TEST --- Comment #6 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 709d805f by Ondřej Kuzník at 2020-05-22T16:57:53+00:00 ITS#9059 Skip mincsn check if sessionlog replay was successful • f3952d94 by Ondřej Kuzník at 2020-05-22T16:57:53+00:00 ITS#9059 Document why we do FIND_CSN -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9165] Paged search results on FreeBSD exceed static buffer
by openldap-its＠openldap.org 21 May '20

21 May '20

https://bugs.openldap.org/show_bug.cgi?id=9165 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Side note: there were no security issues with the code, but it did have room for improvement which has now been done. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9165] Paged search results on FreeBSD exceed static buffer
by openldap-its＠openldap.org 20 May '20

20 May '20

https://bugs.openldap.org/show_bug.cgi?id=9165 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Status|UNCONFIRMED |RESOLVED Resolution|--- |TEST --- Comment #1 from Quanah Gibson-Mount <quanah(a)openldap.org> --- • 57d5aefe by Howard Chu at 2020-05-20T19:58:28+01:00 ITS#9165 Fix pageedResults cookie printing -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8376] Use getaddrinfo to resolve FQDN
by openldap-its＠openldap.org 19 May '20

19 May '20

https://bugs.openldap.org/show_bug.cgi?id=8376 --- Comment #16 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Suspending until someone cares to work on this. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8376] Use getaddrinfo to resolve FQDN
by openldap-its＠openldap.org 19 May '20

19 May '20

https://bugs.openldap.org/show_bug.cgi?id=8376 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.5.0 |--- -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8376] Use getaddrinfo to resolve FQDN
by openldap-its＠openldap.org 19 May '20

19 May '20

1 0

[Issue 8835] update admin guide to use "openssl rehash" instead of c_rehash
by openldap-its＠openldap.org 19 May '20

19 May '20

https://bugs.openldap.org/show_bug.cgi?id=8835 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Target Milestone|2.5.0 |--- -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8835] update admin guide to use "openssl rehash" instead of c_rehash
by openldap-its＠openldap.org 19 May '20

19 May '20

https://bugs.openldap.org/show_bug.cgi?id=8835 --- Comment #1 from Quanah Gibson-Mount <quanah(a)openldap.org> --- So at least at the moment, the 3.0.0 alpha for OpenSSL still includes c_rehash. Given that "rehash" is relatively new (1.1.0 line) and c_rehash doesn't seem to be going anywhere soon, I'm actually inclined to leave the admin guide as-is for now, unless we're planning on updating the minimum required version of OpenSSL, since c_rehash works with all versions we support. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8154] sizeLimit/timeLimit are described as Multi-value in slapd-config man page
by openldap-its＠openldap.org 18 May '20

18 May '20

https://bugs.openldap.org/show_bug.cgi?id=8154 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST Keywords|OL_2_5_REQ | --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- • 005c870d by Quanah Gibson-Mount at 2020-05-18T20:49:25+00:00 ITS#8154 - olcTimeLimit and olcSizeLimit are single valued, fix docs -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8614] Remove ability to build non-threaded slapd
by openldap-its＠openldap.org 18 May '20

18 May '20

https://bugs.openldap.org/show_bug.cgi?id=8614 --- Comment #11 from Quanah Gibson-Mount <quanah(a)openldap.org> --- • 83217b98 by Quanah Gibson-Mount at 2020-05-18T19:37:47+00:00 ITS#8614 - documentation updates -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Bug 9261] New: Slow subtree search when starting in large containers
by openldap-its＠openldap.org 18 May '20

18 May '20

https://bugs.openldap.org/show_bug.cgi?id=9261 Bug ID: 9261 Summary: Slow subtree search when starting in large containers Product: OpenLDAP Version: 2.4.44 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: --- Component: slapd Assignee: bugs(a)openldap.org Reporter: matthew.slowe(a)jisc.ac.uk Target Milestone: --- Using "hdb" database type in slapd 2.4.44 on RedHat Enterprise Linux 7.8 When doing an indexed subtree search from a base which has a large number of objects the search result take considerably longer to find then starting "higher" in the tree. For example: dc=example,dc=org - 10 objects `- ou=test - 300,000 objects Tests: 1. Search for (uid=username) basedn:dc=example,dc=org type:subtree 2. Search for (uid=username) basedn:ou=test,dc=example,dc=org type:subtree 3. Search for (uid=username) basedn:ou=test,dc=example,dc=org type:one Expected results: All three searches should be roughly the same given that "uid" has an equality index. Actual results: 1. 0.1s 2. 5.5s 3. 0.1s A debug trace excerpt of test (2) shows: May 11 14:55:16 76ffcc7a2f29 slapd[1462]: conn=1000 op=1 SRCH base="ou=test,dc=example,dc=org" scope=2 deref=0 filter="(uid=username)" May 11 14:55:21 76ffcc7a2f29 slapd[1462]: 5eb96759 => bdb_filter_candidates -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 8614] Remove ability to build non-threaded slapd
by openldap-its＠openldap.org 14 May '20

14 May '20

https://bugs.openldap.org/show_bug.cgi?id=8614 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ | Status|IN_PROGRESS |RESOLVED Resolution|--- |TEST --- Comment #10 from Quanah Gibson-Mount <quanah(a)openldap.org> --- • c91bbe6e by Quanah Gibson-Mount at 2020-05-14T16:30:17+00:00 ITS#8614 - slapd must be built threaded -- You are receiving this mail because: You are on the CC list for the bug.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs