openldap-bugs

openldap-bugs@openldap.org

1 participants
20963 discussions

Re: (ITS#7415) Add MALLOC_CHECK_ and MALLOC_PERTURB_ libc env to the test suite for detecting heap corruption
by gitter.spiros＠gmail.com 11 Oct '12

11 Oct '12

You can also pull from git://github.com/devzero2000/openldap.git 2012/10/11 <openldap-its(a)openldap.org>: > > *** THIS IS AN AUTOMATICALLY GENERATED REPLY *** > > Thanks for your report to the OpenLDAP Issue Tracking System. Your > report has been assigned the tracking number ITS#7415. > > One of our support engineers will look at your report in due course. > Note that this may take some time because our support engineers > are volunteers. They only work on OpenLDAP when they have spare > time. > > If you need to provide additional information in regards to your > issue report, you may do so by replying to this message. Note that > any mail sent to openldap-its(a)openldap.org with (ITS#7415) > in the subject will automatically be attached to the issue report. > > mailto:openldap-its@openldap.org?subject=(ITS#7415) > > You may follow the progress of this report by loading the following > URL in a web browser: > http://www.OpenLDAP.org/its/index.cgi?findid=7415 > > Please remember to retain your issue tracking number (ITS#7415) > on any further messages you send to us regarding this report. If > you don't then you'll just waste our time and yours because we > won't be able to properly track the report. > > Please note that the Issue Tracking System is not intended to > be used to seek help in the proper use of OpenLDAP Software. > Such requests will be closed. > > OpenLDAP Software is user supported. > http://www.OpenLDAP.org/support/ > > -------------- > Copyright 1998-2007 The OpenLDAP Foundation, All Rights Reserved. >

1 0

(ITS#7415) Add MALLOC_CHECK_ and MALLOC_PERTURB_ libc env to the test suite for detecting heap corruption
by gitter.spiros＠gmail.com 11 Oct '12

11 Oct '12

Full_Name: Elia Pinto Version: 2.4 master OS: Linux FC12 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (2605:4400:1:781:216:3eff:fe31:f4d4) >From a8ff21429c29f1d2b6ef8f58ec84b7a9036cea73 Mon Sep 17 00:00:00 2001 From: Elia Pinto <gitter.spiros(a)gmail.com> Date: Thu, 11 Oct 2012 17:49:06 +0200 Subject: [PATCH] Add MALLOC_CHECK_ and MALLOC_PERTURB_ libc env to the test suite for detecting heap corruption Recent versions of Linux libc (later than 5.4.23) and glibc (2.x) include a malloc() implementation which is tunable via environment variables. When MALLOC_CHECK_ is set, a special (less efficient) implementation is used which is designed to be tolerant against simple errors, such as double calls of free() with the same argument, or overruns of a single byte (off-by-one bugs). When MALLOC_CHECK_ is set to 3, a diagnostic message is printed on stderr and the program is aborted. Setting the MALLOC_PERTURB_ environment variable causes the malloc functions in libc to return memory which has been wiped and clear memory when it is returned. Of course this does not affect calloc which always does clear the memory. The reason for this exercise is, of course, to find code which uses memory returned by malloc without initializing it and code which uses code after it is freed. valgrind can do this but it's costly to run. The MALLOC_PERTURB_ exchanges the ability to detect problems in 100% of the cases with speed. The byte value used to initialize values returned by malloc is the byte value of the environment value. The value used to clear memory is the bitwise inverse. Setting MALLOC_PERTURB_ to zero disables the feature. This technique can find hard to detect bugs. It is therefore suggested to always use this flag (at least temporarily) when testing out code or a new distribution. Signed-off-by: Elia Pinto <gitter.spiros(a)gmail.com> --- tests/run.in | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/tests/run.in b/tests/run.in index 5e6178b..fe25d0c 100644 --- a/tests/run.in +++ b/tests/run.in @@ -241,6 +241,11 @@ fi # disable LDAP initialization LDAPNOINIT=true; export LDAPNOINIT +# Add libc malloc_check and MALLOC_PERTURB test +MALLOC_CHECK_=3 +export MALLOC_CHECK_ +MALLOC_PERTURB_="$( expr $ $$ % 255 $ + 1)" +export MALLOC_PERTURB_ echo "Running ${SCRIPT} for ${BACKEND}..." while [ $COUNTER -le $LOOP ]; do -- 1.7.11.rc1

1 0

Re: (ITS#7414) rwm: ldapmodify, slapd segmentation fault
by hyc＠symas.com 11 Oct '12

11 Oct '12

jvcelak(a)redhat.com wrote: > Full_Name: Jan Vcelak > Version: 2.4.33 > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (209.132.186.34) > > > Hello, > > it is possible to crash slapd in certain configuration with rwm overlay enabled, > using specific ldapmodify. This problem seems to be present for a very long > time. > > Configuration used (slapd.ldif): > > dn: cn=config > objectClass: olcGlobal > cn: config > olcArgsFile: /var/run/openldap/slapd.args > olcPidFile: /var/run/openldap/slapd.pid > > dn: cn=module,cn=config > objectClass: olcModuleList > cn: module > olcModulepath: /usr/lib64/openldap > olcModuleload: rwm.la > > dn: cn=schema,cn=config > objectClass: olcSchemaConfig > cn: schema > > include: file:///etc/openldap/schema/core.ldif > include: file:///etc/openldap/schema/cosine.ldif > include: file:///etc/openldap/schema/inetorgperson.ldif > > dn: olcDatabase=frontend,cn=config > objectClass: olcDatabaseConfig > olcDatabase: frontend > > dn: olcDatabase=hdb,cn=config > objectClass: olcDatabaseConfig > objectClass: olcHdbConfig > olcDatabase: hdb > olcSuffix: dc=my-domain,dc=com > olcRootDN: cn=Manager,dc=my-domain,dc=com > olcRootPW: secret > olcDbDirectory: /var/lib/ldap > olcDbIndex: objectClass eq,pres > olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub > > dn: olcOverlay=rwm,olcDatabase={1}hdb,cn=config > objectClass: olcOverlayConfig > objectClass: olcRwmConfig > olcOverlay: rwm > olcRwmRewrite: {0}rwm-rewriteEngine "on" > olcRwmRewrite: {1}rwm-rewriteContext "bindDN" > olcRwmRewrite: {2}rwm-rewriteRule "cn=([a-z]+),ou=People,dc=my-domain,dc=com" > "uid=$1,ou=People,dc=my-domain,dc=com" > > > Set up and start the server. Add the initial data: > > dn: dc=my-domain,dc=com > objectClass: dcObject > objectClass: organizationalUnit > description: Root LDAP entry > dc: my-domain > ou: rootobject > > dn: cn=Manager,dc=my-domain,dc=com > objectClass: organizationalRole > cn: Manager > > dn: ou=People,dc=my-domain,dc=com > objectClass: top > objectClass: organizationalunit > ou: People > > dn: cn=test1,ou=People,dc=my-domain,dc=com > objectClass: inetOrgPerson > cn: test1 > sn: test > > > Perform following modify operation: > > dn: cn=test1,ou=People,dc=my-domain,dc=com > changetype: modrdn > newrdn: cn=test2 > deleteoldrdn: 1 > newsuperior: ou=People,dc=my-domain,dc=com > > > The slapd daemon will crash, here is the full backtrace: Thanks for the detailed report. Fixed now in master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7413) Some UTF-8 characters are wrongly recognized as identical in multi-valued attributes
by michail.bachmann＠cms.hu-berlin.de 11 Oct '12

11 Oct '12

--nextPart1483759.4qzvGhZdbd Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable On Thursday 11 October 2012, Howard Chu wrote: > m.bachmann(a)cms.hu-berlin.de wrote: > > Full_Name: Michail Bachmann > > Version: 2.4.31 > > OS: Linux > > URL: ftp://ftp.openldap.org/incoming/ > > Submission from: (NULL) (141.20.3.158) > > > > > > > > The UTF-8 character 'FEMININE ORDINAL INDICATOR' (U+00AA) is wrongly tr= eated as > > 'LATIN SMALL LETTER A' (U+0061), so adding a multi-valued attribute whe= re U+00AA > > is replaced with U+0061 (or the other way around) fails: >=20 > This works as designed. See the Unicode specification, rules for decompos= ition. Ah, ok. Thank you for your time and sorry for the noise. > > > > $ ldapadd -f create.ldif -h localhost -D 'cn=3Dadmin,dc=3Dexample,dc=3D= com' > > > > ### create.ldif ### > > dn: cn=3Dtest,dc=3Dexample,dc=3Dcom > > objectClass: organizationalRole > > objectClass: top > > cn: test > > street: a street > > ### /create.ldif ### > > > > $ ldapmodify -f modify.ldif -h localhost -D 'cn=3Dadmin,dc=3Dexample,dc= =3Dcom' > > > > ### modify.ldif ### > > dn: cn=3Dtest,dc=3Dexample,dc=3Dcom > > changetype: modify > > add: street > > street: =C2=AA street > > - > > > > ### /modify.ldif ### > > > > will result in > > > > ldap_modify: Type or value exists (20) > > additional info: modify/add: street: value #0 already exists > > > > It seems like U+00AA is decomposed into '<super>+U+0061' and then the '= <super>' > > part is discarded. > > > > Tested with 2.4.31 (Debian) and 2.4.21 (Ubuntu) > > > > > > >=20 >=20 >=20 --nextPart1483759.4qzvGhZdbd Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIOYTCCBCEw ggMJoAMCAQICAgDHMA0GCSqGSIb3DQEBBQUAMHExCzAJBgNVBAYTAkRFMRwwGgYDVQQKExNEZXV0 c2NoZSBUZWxla29tIEFHMR8wHQYDVQQLExZULVRlbGVTZWMgVHJ1c3QgQ2VudGVyMSMwIQYDVQQD ExpEZXV0c2NoZSBUZWxla29tIFJvb3QgQ0EgMjAeFw0wNjEyMTkxMDI5MDBaFw0xOTA2MzAyMzU5 MDBaMFoxCzAJBgNVBAYTAkRFMRMwEQYDVQQKEwpERk4tVmVyZWluMRAwDgYDVQQLEwdERk4tUEtJ MSQwIgYDVQQDExtERk4tVmVyZWluIFBDQSBHbG9iYWwgLSBHMDEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpm8NnhfkNrvWNVMOWUDU9YuluTO2U1wBblSJ01CDrNI/W7MAxBAuZgeKm FNJSoCgjhIt0iQReW+DieMF4yxbLKDU5ey2QRdDtoAB6fL9KDhsAw4bpXCsxEXsM84IkQ4wcOItq aACa7txPeKvSxhObdq3u3ibo7wGvdA/BCaL2a869080UME/15eOkyGKbghoDJzANAmVgTe3RCSMq ljVYJ9N2xnG2kB3E7f81hn1vM7PbD8URwoqDoZRdQWvY0hD1TP3KUazZve+Sg7va64sWVlZDz+HV Ez2mHycwzUlU28kTNJpxdcVs6qcLmPkhnSevPqM5OUhqjK3JmfvDEvK9AgMBAAGjgdkwgdYwcAYD VR0fBGkwZzBloGOgYYZfaHR0cDovL3BraS50ZWxlc2VjLmRlL2NnaS1iaW4vc2VydmljZS9hZl9E b3dubG9hZEFSTC5jcmw/LWNybF9mb3JtYXQ9WF81MDkmLWlzc3Vlcj1EVF9ST09UX0NBXzIwHQYD VR0OBBYEFEm3xs/oPR9/6kR7Eyn38QpwPt5kMB8GA1UdIwQYMBaAFDHDeRu69VPXF+CJei0XbAqz K50zMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgECMA0GCSqGSIb3DQEBBQUAA4IB AQA74Vp3wEgX3KkY7IGvWonwvSiSpspZGBJw7Cjy565/lizn8l0ZMfYTK3S9vYCyufdnyTmieTvh ERHua3iRM347XyYndVNljjNj7s9zw7CSI0khUHUjoR8Y4pSFPT8z6XcgjaK95qGFKUD2P3MyWA0J a6bahWzAP7uNZmRWJE6uDT8yNQFb6YyC2XJZT7GGhfF0hVblw/hc843uR7NTBXDn5U2KaYMo4RMJ hp5eyOpYHgwf+aTUWgRo/Sg+iwK2WLX2oSw3VwBnqyNojWOl75lrXP1LVvarQIc01BGSbOyHxQoL BzNytG8MHVQs2FHHzL8w00Ny8TK/jM5JY6gA9/IcMIIE9DCCA9ygAwIBAgIEC2I0jzANBgkqhkiG 9w0BAQUFADBaMQswCQYDVQQGEwJERTETMBEGA1UEChMKREZOLVZlcmVpbjEQMA4GA1UECxMHREZO LVBLSTEkMCIGA1UEAxMbREZOLVZlcmVpbiBQQ0EgR2xvYmFsIC0gRzAxMB4XDTA3MTEyMDEwMjky MVoXDTE5MDYzMDAwMDAwMFowaDELMAkGA1UEBhMCREUxKDAmBgNVBAoTH0h1bWJvbGR0LVVuaXZl cnNpdGFldCB6dSBCZXJsaW4xDjAMBgNVBAMTBUhVLUNBMR8wHQYJKoZIhvcNAQkBFhBwa2lAaHUt YmVybGluLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wxB17AojABvR7rEkR8v 3wfquJ1RAGBx9Bhv0pQis98kCJaaYYO1cspc0znfEAOcBk9lBhb/sWfV13KFKDcib7WlY1sFBHCJ AbGkpcNTfqp/enTtDZOzXFUzXOj5+lcaHwn6qt2HQ7oafm8wfPp9efd3ykRzCWhbZ7K3o/kCCMHw 5Dxe9na4OdQCXqwp6Hhpmx9CGHq2SPWxrRZqdZJzmfhmDV3yVYghIuyHN/jDTorshki3pWF3OFHp ok1w09LKPDUZRdHZzUt7ZIZYEwdvjVAKJAsHyKjzrASRfHJgXvJQLENcBJwPGXfJGMSXj3AcS9Cj wQdtMlyDsU4D5RV4BQIDAQABo4IBsjCCAa4wEgYDVR0TAQH/BAgwBgEB/wIBATALBgNVHQ8EBAMC AQYwHQYDVR0OBBYEFB/1LD73QKsukKBq0+J5XvJ2zYN0MB8GA1UdIwQYMBaAFEm3xs/oPR9/6kR7 Eyn38QpwPt5kMBsGA1UdEQQUMBKBEHBraUBodS1iZXJsaW4uZGUwgYgGA1UdHwSBgDB+MD2gO6A5 hjdodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9jcmwvY2FjcmwuY3Js MD2gO6A5hjdodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9jcmwvY2Fj cmwuY3JsMIGiBggrBgEFBQcBAQSBlTCBkjBHBggrBgEFBQcwAoY7aHR0cDovL2NkcDEucGNhLmRm bi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwRwYIKwYBBQUHMAKGO2h0 dHA6Ly9jZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0 MA0GCSqGSIb3DQEBBQUAA4IBAQBO3AOzYN+zVEPJLJHP12+Oa7wzhC2aji1SGLkPHqYnl27d2+Fx XgOo24p+rC7vS53tLGjE41EfkwEgO+cy4J9mUptTlDqa3gvzkR8C95Yl43fmYd5HJrZ+WqQTVddw hxnOBCY0f+oW+RmeybR6TYDAQ+ByK6ru6DFPBRQpIejuny75jjm0EZzcPwZZJ+gxObQ67RtMxiFk 6Io6jWRdpy40mDJ39NF1tJqAFxo+3hSKVRTVs1l/ML12lLmTq+tgri9bLBEQLwNoaCjGhn2aOMYJ B0Rd5a31pbiXEZLV4IBylWd5/y3Nfb9q3x+i1lXI05u+oJ3q9ox4PbuuKU3VWIngMIIFQDCCBCig AwIBAgIHE9HfrnKfDDANBgkqhkiG9w0BAQUFADBoMQswCQYDVQQGEwJERTEoMCYGA1UEChMfSHVt Ym9sZHQtVW5pdmVyc2l0YWV0IHp1IEJlcmxpbjEOMAwGA1UEAxMFSFUtQ0ExHzAdBgkqhkiG9w0B CQEWEHBraUBodS1iZXJsaW4uZGUwHhcNMTIwNTE1MTQwMzEwWhcNMTUwNTE1MTQwMzEwWjBnMQsw CQYDVQQGEwJERTEoMCYGA1UEChMfSHVtYm9sZHQtVW5pdmVyc2l0YWV0IHp1IEJlcmxpbjETMBEG A1UECxMKQ01TL0FidC4gMTEZMBcGA1UEAxMQTWljaGFpbCBCYWNobWFubjCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANiS1EZ9eoDkVZnlHdoqGKJD6WNnV16udnQKT7j5yHTRo5XnF7LB 3nagMKWopr84yVnqRnRay3O2IhmHsscAisJ4uENXeVed5g9QVBGAKUmUAy3jgcKXJ84PJNYXMy93 YN3tzi2VKwwbpM4pBDfC4FT2V4jsb1jynwH5ayoKpbt8d7oggwL3xr/l90h8gJoNW5LFcIgBKDll tWaHSHqytquHn859eNNxTDntFbgTgh9RGLaI6Kp+P9XBqrqLFX1ebWe24/MSHw6B2Pw2ny/Vy54A e3W/7FSxpLDCKllQiSbgqG5eyUWEsTOAG41D4Z56AHKcx8byks8j+A6E1xpCWfMCAwEAAaOCAe4w ggHqMBwGA1UdIAQVMBMwEQYPKwYBBAGBrSGCLAEBBAICMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgXg MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQUALsSnuznKfPHjGGxfAJr jZmz544wHwYDVR0jBBgwFoAUH/UsPvdAqy6QoGrT4nle8nbNg3QwLAYDVR0RBCUwI4EhbWljaGFp bC5iYWNobWFubkBjbXMuaHUtYmVybGluLmRlMIGDBgNVHR8EfDB6MDugOaA3hjVodHRwOi8vY2Rw MS5wY2EuZGZuLmRlL2h1LWJlcmxpbi1jYS9wdWIvY3JsL2NhY3JsLmNybDA7oDmgN4Y1aHR0cDov L2NkcDIucGNhLmRmbi5kZS9odS1iZXJsaW4tY2EvcHViL2NybC9jYWNybC5jcmwwgZ4GCCsGAQUF BwEBBIGRMIGOMEUGCCsGAQUFBzAChjlodHRwOi8vY2RwMS5wY2EuZGZuLmRlL2h1LWJlcmxpbi1j YS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwRQYIKwYBBQUHMAKGOWh0dHA6Ly9jZHAyLnBjYS5kZm4u ZGUvaHUtYmVybGluLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDANBgkqhkiG9w0BAQUFAAOCAQEA GrSDIsaKf9b6gt658mbHwV4bMO+YvsqpX8x/vQxRnAp7DvpLiHbAawWlDcOPKqkccmk6egUUeoMQ GICvA3FjCAJlWdNc3/A9ec1yWD2XEH56/uXWkf3Nny7SqnvMJRxPkwjidc/WP5xmuvsQScDm7Je2 jasRmvS5TFBVjNb/yEI56xBGCr1J+s3WeR8ILHsMXvP8ll9rRXI3GQHqx7jhw0FOFjuXKNdzBgLI 1DMcrAqQZeA8tyQxO0zCe53hHTCoJp3fYxYD5EDT8pM7X0woSdOKUmKl4ezUBNizYW55vx10IbFF j2VTQnTs3fCgRMyMH4dAm0DBeejarZDbKobPxTGCAiQwggIgAgEBMHMwaDELMAkGA1UEBhMCREUx KDAmBgNVBAoTH0h1bWJvbGR0LVVuaXZlcnNpdGFldCB6dSBCZXJsaW4xDjAMBgNVBAMTBUhVLUNB MR8wHQYJKoZIhvcNAQkBFhBwa2lAaHUtYmVybGluLmRlAgcT0d+ucp8MMAkGBSsOAwIaBQCggYcw GAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTIxMDExMTQyMzQzWjAj BgkqhkiG9w0BCQQxFgQUvEheLrh+IXZtXeaWZ0lHReCaO/MwKAYJKoZIhvcNAQkPMRswGTALBglg hkgBZQMEAQIwCgYIKoZIhvcNAwcwDQYJKoZIhvcNAQEBBQAEggEAGUem6qtixM8FdGDrjHhOypJh sbIYybMQMw5UKtWqVkne4VuLIVru8PWqh88D1uW/zpB3I0gZwhlDfiM/2tykwvNUDRAU1BAi19M3 XI8xVt0zi62uAbpD7QeEdbFwGry/7Tz5kgYp1DCjSfSni9FNT2NZVRPe749HhR89SHmUi1SwjDli LTGTur8KWnnWvJIIK7g5GCzPNpV1zeB6PiBTY5nr9w05Ro/mUgrrPlz4StsOY9eiPhRuEeAbXrnb 4zVnksaDExLf4QyKD3ikK4tadvfVO5Lph4XJySeHE/MiMRRI4gAekLvWZgdLMqeo6xM2nf52+vX6 UefhhpBc5gvH/QAAAAAAAA== --nextPart1483759.4qzvGhZdbd--

1 0

(ITS#7414) rwm: ldapmodify, slapd segmentation fault
by jvcelak＠redhat.com 11 Oct '12

11 Oct '12

Full_Name: Jan Vcelak Version: 2.4.33 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (209.132.186.34) Hello, it is possible to crash slapd in certain configuration with rwm overlay enabled, using specific ldapmodify. This problem seems to be present for a very long time. Configuration used (slapd.ldif): dn: cn=config objectClass: olcGlobal cn: config olcArgsFile: /var/run/openldap/slapd.args olcPidFile: /var/run/openldap/slapd.pid dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulepath: /usr/lib64/openldap olcModuleload: rwm.la dn: cn=schema,cn=config objectClass: olcSchemaConfig cn: schema include: file:///etc/openldap/schema/core.ldif include: file:///etc/openldap/schema/cosine.ldif include: file:///etc/openldap/schema/inetorgperson.ldif dn: olcDatabase=frontend,cn=config objectClass: olcDatabaseConfig olcDatabase: frontend dn: olcDatabase=hdb,cn=config objectClass: olcDatabaseConfig objectClass: olcHdbConfig olcDatabase: hdb olcSuffix: dc=my-domain,dc=com olcRootDN: cn=Manager,dc=my-domain,dc=com olcRootPW: secret olcDbDirectory: /var/lib/ldap olcDbIndex: objectClass eq,pres olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub dn: olcOverlay=rwm,olcDatabase={1}hdb,cn=config objectClass: olcOverlayConfig objectClass: olcRwmConfig olcOverlay: rwm olcRwmRewrite: {0}rwm-rewriteEngine "on" olcRwmRewrite: {1}rwm-rewriteContext "bindDN" olcRwmRewrite: {2}rwm-rewriteRule "cn=([a-z]+),ou=People,dc=my-domain,dc=com" "uid=$1,ou=People,dc=my-domain,dc=com" Set up and start the server. Add the initial data: dn: dc=my-domain,dc=com objectClass: dcObject objectClass: organizationalUnit description: Root LDAP entry dc: my-domain ou: rootobject dn: cn=Manager,dc=my-domain,dc=com objectClass: organizationalRole cn: Manager dn: ou=People,dc=my-domain,dc=com objectClass: top objectClass: organizationalunit ou: People dn: cn=test1,ou=People,dc=my-domain,dc=com objectClass: inetOrgPerson cn: test1 sn: test Perform following modify operation: dn: cn=test1,ou=People,dc=my-domain,dc=com changetype: modrdn newrdn: cn=test2 deleteoldrdn: 1 newsuperior: ou=People,dc=my-domain,dc=com The slapd daemon will crash, here is the full backtrace: #0 rwm_op_rollback (op=op@entry=0x7fffe8000930, ros=0x7fffe8001738, rs=<optimized out>) at rwm.c:110 No locals. #1 0x00007ffff210f1c2 in rwm_op_cleanup (op=0x7fffe8000930, rs=<optimized out>) at rwm.c:165 cb = 0x7fffe8001718 ros = <optimized out> #2 0x00005555555a606b in slap_cleanup_play (op=op@entry=0x7fffe8000930, rs=rs@entry=0x7ffff1106930) at result.c:541 sc_next = 0x7ffff11065c0 sc_nextp = 0x7fffe8001718 sc = 0x7fffe8001718 scp = 0x7ffff1106018 #3 0x00005555555a6573 in send_ldap_response (op=op@entry=0x7fffe8000930, rs=rs@entry=0x7ffff1106930) at result.c:733 berbuf = { buffer = "\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377", '\000' <repeats 24 times>, "F\030\000\350\377\177\000\000\024(\000\350\377\177\000\000\000\000\000\000\000\000\000\000F\030\000\350\377\177\000\000\320\016\000\350\377\177\000\000P\373\275UUU\000\000\200v\357\367\377\177\000\000\001\000\000\000hw\001", '\000' <repeats 17 times>"\266, \252r\367\377\177", '\000' <repeats 11 times>, "a\370<\316m]\037\200*\227\367\377\177\000\000\001\000\000\000UU\000\000\321\323vP\000\000\000\000\350\n\000\350\377\177\000\000\003", '\000' <repeats 23 times>"\225, \362\227\367\311\362\245\303\000\000\000\000\000\000\000\000+\246fUUU\000\000\030ӿUUU\000\000\223\204+\366\377\177\000\000\060\065\020\350\377\177\000\000\000a\370<\316m]\037", ialign = 65536, lalign = 4295032832, falign = 9.18354962e-41, dalign = 2.1220281700514382e-314, palign = 0x100010000 <Address 0x100010000 out of bounds>} ber = <optimized out> rc = 32768 bytes = <optimized out> __PRETTY_FUNCTION__ = "send_ldap_response" #4 0x00005555555a7126 in slap_send_ldap_result (op=0x7fffe8000930, rs=0x7ffff1106930) at result.c:860 tmp = 0x0 otext = 0x0 oref = 0x0 __PRETTY_FUNCTION__ = "slap_send_ldap_result" #5 0x0000555555621a50 in hdb_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:789 bdb = 0x5555559fa4f0 children = 0x55555599d260 entry = 0x55555599cfc0 p_dn = {bv_len = 29, bv_val = 0x7fffe8102399 "ou=People,dc=my-domain,dc=com"} p_ndn = {bv_len = 29, bv_val = 0x7fffe81023c9 ""} new_dn = {bv_len = 38, bv_val = 0x0} new_ndn = {bv_len = 38, bv_val = 0x0} e = <optimized out> p = <optimized out> ei = 0x7fffe8103f00 eip = 0x7fffe410a0a0 nei = 0x7fffe410a0a0 neip = 0x0 textbuf = "0\t\000\350\377\177\000\000\000e\020\361\377\177\000\000 i\237UUU\000\000\230\060\021\362\377\177\000\000\200\241^\366\377\177\000\000\000\000\000\000\316m]\037&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000\060\t\000\350\377\177\000\000\070\027\000\350\377\177\000\000\000\000\000\000\000\000\000\000)\323\020\362\377\177\000\000&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000&\000\000\000\000\000\000\000\270\022\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000\000\314X\021\362\377\177\000\000\060i\020\361\377\177\000\000\030\027\000\350\377\177\000\000\030\027\000\350\377\177\000\000\060i\020\361\377\177\000\000\332\326\020\362\377\177\000\000\360d\020\361\377\177\000\000\020e\020\361\377\177\000\000\b\000\000\000\000\000\000\000\270\023\000\350\377\177\000\000\b\000\000\000\000\000\000\000\350\023\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000" ltid = 0x0 lt2 = 0x7fffe81068f0 opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn = 0x7fffe8106730, boi_locks = 0x0, boi_err = 0, boi_acl_cache = 0 '\000', boi_flag = 0 '\000'} dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe8106890 "cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = { bv_len = 38, bv_val = 0x7fffe81068c0 "cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0, e_ocflags = 256, e_bv = { bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe8103f00} np = <optimized out> np_dn = <optimized out> np_ndn = <optimized out> new_parent_dn = <optimized out> manageDSAit = 0 lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE} plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ} nplock = {off = 0, ndx = 1436511616, gen = 21845, mode = 4044383224} num_retries = 0 preread_ctrl = 0x0 postread_ctrl = 0x0 ctrls = {0x0, 0x555555a2ea00, 0x0, 0x7ffff11064a0, 0x7ffff1106480, 0x7ffff1106450} num_ctrls = 0 rc = <optimized out> parent_is_glue = 0 parent_is_leaf = 1 __PRETTY_FUNCTION__ = "hdb_modrdn" #6 0x0000555555603c96 in overlay_op_walk (op=op@entry=0x7fffe8000930, rs=0x7ffff1106930, which=op_modrdn, oi=0x5555559f76b0, on=0x0) at backover.c:671 func = <optimized out> rc = 32768 #7 0x0000555555603deb in over_op_func (op=0x7fffe8000930, rs=<optimized out>, which=<optimized out>) at backover.c:723 oi = <optimized out> on = <optimized out> be = 0x5555559fa350 db = {bd_info = 0x5555558e3620, bd_self = 0x5555559fa350, be_ctrls = "\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001", '\000' <repeats 17 times>, "\001", be_flags = 2312, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x555555a1df40, be_nsuffix = 0x555555a1df70, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = { bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val = 0x555555a1e010 "cn=Manager,dc=my-domain,dc=com"}, be_rootndn = {bv_len = 30, bv_val = 0x555555a1e060 "cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len = 6, bv_val = 0x555555a1dee0 "secret"}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x0, be_acl = 0x0, be_dfltaccess = ACL_READ, be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0x555555bdbd80, be_pcl_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x5555558e7ec0, be_private = 0x5555559fa4f0, be_next = { stqe_next = 0x0}} cb = {sc_next = 0x0, sc_response = 0x555555602ff0 <over_back_response>, sc_cleanup = 0, sc_private = 0x5555559f76b0} sc = <optimized out> rc = 32768 __PRETTY_FUNCTION__ = "over_op_func" #8 0x00005555555b0f9c in fe_op_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:314 repl_user = <optimized out> dest_ndn = {bv_len = 38, bv_val = 0x7fffe80016e8 "cn=test2,ou=people,dc=my-domain,dc=com"} dest_pndn = {bv_len = 29, bv_val = 0x7fffe80016c0 "ou=people,dc=my-domain,dc=com"} pdn = {bv_len = 0, bv_val = 0x0} op_be = 0x5555559fa350 bd = 0x5555558ea2c0 diff = <optimized out> #9 0x00005555555b207e in do_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:186 dn = {bv_len = 38, bv_val = 0x7fffe81065c7 "cn=test1,ou=People,dc=my-domain,dc=com"} newrdn = {bv_len = 8, bv_val = 0x7fffe81065ef "cn=test2"} newSuperior = {bv_len = 29, bv_val = 0x7fffe81065fc "ou=People,dc=my-domain,dc=com"} deloldrdn = -1 pnewSuperior = {bv_len = 29, bv_val = 0x7fffe8001658 "ou=People,dc=my-domain,dc=com"} nnewSuperior = {bv_len = 29, bv_val = 0x7fffe80016c0 "ou=people,dc=my-domain,dc=com"} length = 29 #10 0x0000555555595d21 in connection_operation (ctx=ctx@entry=0x7ffff1106b60, arg_v=arg_v@entry=0x7fffe8000930) at connection.c:1150 rc = 80 cancel = <optimized out> op = 0x7fffe8000930 rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0} tag = 108 opidx = SLAP_OP_MODRDN conn = 0x555555a2ea00 memctx = 0x7fffe8000ed0 memctx_null = 0x0 memsiz = 1048576 __PRETTY_FUNCTION__ = "connection_operation" #11 0x0000555555596079 in connection_read_thread (ctx=0x7ffff1106b60, argv=<optimized out>) at connection.c:1286 rc = <optimized out> cri = {op = 0x7fffe8000930, func = 0, arg = 0x0, ctx = <optimized out>, nullop = <optimized out>} s = <optimized out> #12 0x00007ffff7b997f3 in ldap_int_thread_pool_wrapper (xpool=0x5555559a1b60) at tpool.c:688 pool = 0x5555559a1b60 task = 0x7fffec0008c0 work_list = <optimized out> ctx = {ltu_id = 140737237776128, ltu_key = {{ltk_key = 0x555555593ee0, ltk_data = 0x7fffe8000dc0, ltk_free = 0x555555593fb0 <conn_counter_destroy>}, {ltk_key = 0x5555555edcc0, ltk_data = 0x7fffe8000ed0, ltk_free = 0x5555555edce0 <slap_sl_mem_destroy>}, {ltk_key = 0x555555bdae00, ltk_data = 0x7fffe81010f0, ltk_free = 0x555555648bb0 <bdb_reader_free>}, {ltk_key = 0x5555555aa480, ltk_data = 0x0, ltk_free = 0x5555555aa3e0 <slap_op_q_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>}} kctx = <optimized out> keyslot = <optimized out> hash = <optimized out> __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" #13 0x00007ffff6e61d14 in start_thread (arg=0x7ffff1107700) at pthread_create.c:309 __res = <optimized out> pd = 0x7ffff1107700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737237776128, 5431369951291209288, 1, 140737354125312, 140737237776128, 23, -5431349871756872120, -5431349957038737848}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = { prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #14 0x00007ffff632a67d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 No locals. No symbol "bt" in current context. #0 rwm_op_rollback (op=op@entry=0x7fffe8000930, ros=0x7fffe8001738, rs=<optimized out>) at rwm.c:110 No locals. #1 0x00007ffff210f1c2 in rwm_op_cleanup (op=0x7fffe8000930, rs=<optimized out>) at rwm.c:165 cb = 0x7fffe8001718 ros = <optimized out> #2 0x00005555555a606b in slap_cleanup_play (op=op@entry=0x7fffe8000930, rs=rs@entry=0x7ffff1106930) at result.c:541 sc_next = 0x7ffff11065c0 sc_nextp = 0x7fffe8001718 sc = 0x7fffe8001718 scp = 0x7ffff1106018 #3 0x00005555555a6573 in send_ldap_response (op=op@entry=0x7fffe8000930, rs=rs@entry=0x7ffff1106930) at result.c:733 berbuf = {buffer = "\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377", '\000' <repeats 24 times>, "F\030\000\350\377\177\000\000\024(\000\350\377\177\000\000\000\000\000\000\000\000\000\000F\030\000\350\377\177\000\000\320\016\000\350\377\177\000\000P\373\275UUU\000\000\200v\357\367\377\177\000\000\001\000\000\000hw\001", '\000' <repeats 17 times>"\266, \252r\367\377\177", '\000' <repeats 11 times>, "a\370<\316m]\037\200*\227\367\377\177\000\000\001\000\000\000UU\000\000\321\323vP\000\000\000\000\350\n\000\350\377\177\000\000\003", '\000' <repeats 23 times>"\225, \362\227\367\311\362\245\303\000\000\000\000\000\000\000\000+\246fUUU\000\000\030ӿUUU\000\000\223\204+\366\377\177\000\000\060\065\020\350\377\177\000\000\000a\370<\316m]\037", ialign = 65536, lalign = 4295032832, falign = 9.18354962e-41, dalign = 2.1220281700514382e-314, palign = 0x100010000 <Address 0x100010000 out of bounds>} ber = <optimized out> rc = 32768 bytes = <optimized out> __PRETTY_FUNCTION__ = "send_ldap_response" #4 0x00005555555a7126 in slap_send_ldap_result (op=0x7fffe8000930, rs=0x7ffff1106930) at result.c:860 tmp = 0x0 otext = 0x0 oref = 0x0 __PRETTY_FUNCTION__ = "slap_send_ldap_result" #5 0x0000555555621a50 in hdb_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:789 bdb = 0x5555559fa4f0 children = 0x55555599d260 entry = 0x55555599cfc0 p_dn = {bv_len = 29, bv_val = 0x7fffe8102399 "ou=People,dc=my-domain,dc=com"} p_ndn = {bv_len = 29, bv_val = 0x7fffe81023c9 ""} new_dn = {bv_len = 38, bv_val = 0x0} new_ndn = {bv_len = 38, bv_val = 0x0} e = <optimized out> p = <optimized out> ei = 0x7fffe8103f00 eip = 0x7fffe410a0a0 nei = 0x7fffe410a0a0 neip = 0x0 textbuf = "0\t\000\350\377\177\000\000\000e\020\361\377\177\000\000 i\237UUU\000\000\230\060\021\362\377\177\000\000\200\241^\366\377\177\000\000\000\000\000\000\316m]\037&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000\060\t\000\350\377\177\000\000\070\027\000\350\377\177\000\000\000\000\000\000\000\000\000\000)\323\020\362\377\177\000\000&\000\000\000\000\000\000\000\060\022\000\350\377\177\000\000&\000\000\000\000\000\000\000\270\022\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000\000\314X\021\362\377\177\000\000\060i\020\361\377\177\000\000\030\027\000\350\377\177\000\000\030\027\000\350\377\177\000\000\060i\020\361\377\177\000\000\332\326\020\362\377\177\000\000\360d\020\361\377\177\000\000\020e\020\361\377\177\000\000\b\000\000\000\000\000\000\000\270\023\000\350\377\177\000\000\b\000\000\000\000\000\000\000\350\023\000\350\377\177\000\000\000k\237UUU\000\000\000\352\242UUU\000" ltid = 0x0 lt2 = 0x7fffe81068f0 opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn = 0x7fffe8106730, boi_locks = 0x0, boi_err = 0, boi_acl_cache = 0 '\000', boi_flag = 0 '\000'} dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe8106890 "cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = {bv_len = 38, bv_val = 0x7fffe81068c0 "cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0, e_ocflags = 256, e_bv = {bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe8103f00} np = <optimized out> np_dn = <optimized out> np_ndn = <optimized out> new_parent_dn = <optimized out> manageDSAit = 0 lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE} plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ} nplock = {off = 0, ndx = 1436511616, gen = 21845, mode = 4044383224} num_retries = 0 preread_ctrl = 0x0 postread_ctrl = 0x0 ctrls = {0x0, 0x555555a2ea00, 0x0, 0x7ffff11064a0, 0x7ffff1106480, 0x7ffff1106450} num_ctrls = 0 rc = <optimized out> parent_is_glue = 0 parent_is_leaf = 1 __PRETTY_FUNCTION__ = "hdb_modrdn" #6 0x0000555555603c96 in overlay_op_walk (op=op@entry=0x7fffe8000930, rs=0x7ffff1106930, which=op_modrdn, oi=0x5555559f76b0, on=0x0) at backover.c:671 func = <optimized out> rc = 32768 #7 0x0000555555603deb in over_op_func (op=0x7fffe8000930, rs=<optimized out>, which=<optimized out>) at backover.c:723 oi = <optimized out> on = <optimized out> be = 0x5555559fa350 db = {bd_info = 0x5555558e3620, bd_self = 0x5555559fa350, be_ctrls = "\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001", '\000' <repeats 17 times>, "\001", be_flags = 2312, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x555555a1df40, be_nsuffix = 0x555555a1df70, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val = 0x555555a1e010 "cn=Manager,dc=my-domain,dc=com"}, be_rootndn = {bv_len = 30, bv_val = 0x555555a1e060 "cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len = 6, bv_val = 0x555555a1dee0 "secret"}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x0, be_acl = 0x0, be_dfltaccess = ACL_READ, be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0x555555bdbd80, be_pcl_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x5555558e7ec0, be_private = 0x5555559fa4f0, be_next = {stqe_next = 0x0}} cb = {sc_next = 0x0, sc_response = 0x555555602ff0 <over_back_response>, sc_cleanup = 0, sc_private = 0x5555559f76b0} sc = <optimized out> rc = 32768 __PRETTY_FUNCTION__ = "over_op_func" #8 0x00005555555b0f9c in fe_op_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:314 repl_user = <optimized out> dest_ndn = {bv_len = 38, bv_val = 0x7fffe80016e8 "cn=test2,ou=people,dc=my-domain,dc=com"} dest_pndn = {bv_len = 29, bv_val = 0x7fffe80016c0 "ou=people,dc=my-domain,dc=com"} pdn = {bv_len = 0, bv_val = 0x0} op_be = 0x5555559fa350 bd = 0x5555558ea2c0 diff = <optimized out> #9 0x00005555555b207e in do_modrdn (op=0x7fffe8000930, rs=0x7ffff1106930) at modrdn.c:186 dn = {bv_len = 38, bv_val = 0x7fffe81065c7 "cn=test1,ou=People,dc=my-domain,dc=com"} newrdn = {bv_len = 8, bv_val = 0x7fffe81065ef "cn=test2"} newSuperior = {bv_len = 29, bv_val = 0x7fffe81065fc "ou=People,dc=my-domain,dc=com"} deloldrdn = -1 pnewSuperior = {bv_len = 29, bv_val = 0x7fffe8001658 "ou=People,dc=my-domain,dc=com"} nnewSuperior = {bv_len = 29, bv_val = 0x7fffe80016c0 "ou=people,dc=my-domain,dc=com"} length = 29 #10 0x0000555555595d21 in connection_operation (ctx=ctx@entry=0x7ffff1106b60, arg_v=arg_v@entry=0x7fffe8000930) at connection.c:1150 rc = 80 cancel = <optimized out> op = 0x7fffe8000930 rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0} tag = 108 opidx = SLAP_OP_MODRDN conn = 0x555555a2ea00 memctx = 0x7fffe8000ed0 memctx_null = 0x0 memsiz = 1048576 __PRETTY_FUNCTION__ = "connection_operation" #11 0x0000555555596079 in connection_read_thread (ctx=0x7ffff1106b60, argv=<optimized out>) at connection.c:1286 rc = <optimized out> cri = {op = 0x7fffe8000930, func = 0, arg = 0x0, ctx = <optimized out>, nullop = <optimized out>} s = <optimized out> #12 0x00007ffff7b997f3 in ldap_int_thread_pool_wrapper (xpool=0x5555559a1b60) at tpool.c:688 pool = 0x5555559a1b60 task = 0x7fffec0008c0 work_list = <optimized out> ctx = {ltu_id = 140737237776128, ltu_key = {{ltk_key = 0x555555593ee0, ltk_data = 0x7fffe8000dc0, ltk_free = 0x555555593fb0 <conn_counter_destroy>}, {ltk_key = 0x5555555edcc0, ltk_data = 0x7fffe8000ed0, ltk_free = 0x5555555edce0 <slap_sl_mem_destroy>}, {ltk_key = 0x555555bdae00, ltk_data = 0x7fffe81010f0, ltk_free = 0x555555648bb0 <bdb_reader_free>}, {ltk_key = 0x5555555aa480, ltk_data = 0x0, ltk_free = 0x5555555aa3e0 <slap_op_q_destroy>}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 28 times>}} kctx = <optimized out> keyslot = <optimized out> hash = <optimized out> __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" #13 0x00007ffff6e61d14 in start_thread (arg=0x7ffff1107700) at pthread_create.c:309 __res = <optimized out> pd = 0x7ffff1107700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737237776128, 5431369951291209288, 1, 140737354125312, 140737237776128, 23, -5431349871756872120, -5431349957038737848}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #14 0x00007ffff632a67d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 No locals. #0 0x00000000005a39de in rwm_op_rollback (op=0x7fffe4002960, rs=0x7ffff23e5a50, ros=0x7fffe4003558) at ../../../../servers/slapd/overlays/rwm.c:111 __PRETTY_FUNCTION__ = "rwm_op_rollback" #1 0x00000000005a3c79 in rwm_op_cleanup (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../../servers/slapd/overlays/rwm.c:167 cb = 0x7fffe4003538 ros = 0x7fffe4003558 #2 0x00000000004670e8 in slap_cleanup_play (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:541 sc_next = 0x7ffff23e5690 sc_nextp = 0x7fffe4003538 sc = 0x7fffe4003538 scp = 0x7ffff23e5080 #3 0x0000000000467b16 in send_ldap_response (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:733 berbuf = {buffer = "\000\000\001\000\001\000\000\000\377\377\377\377\377\377\377\377", '\000' <repeats 24 times>, "f6\000\344\377\177\000\000\064F\000\344\377\177\000\000\000\000\000\000\000\000\000\000f6\000\344\377\177\000\000\200'\000\344\377\177\000\000\017\326vP\000\000\000\000\000\017ƾ\032\372\235\264\000\000\000\000\000\000\000\000ĥ`", '\000' <repeats 13 times>, "\030+\000\344\377\177\000\000\003", '\000' <repeats 15 times>"\356, &\\\000\000\000\000\000иV\000\000\000\000\000 \314\020\344\377\177\000\000\000\017ƾ\032\372\235\264@R>\362\377\177\000\000H\314\020\344\377\177\000\000\a\000\000\000\000\000\000\000\361\264d\000\000\000\000\000\004\000\000\000\000\000\000\000P0\000\344\377\177", '\000' <repeats 18 times>, "PR>\362\377\177\000\000Pp\275\000\000\000\000", ialign = 65536, lalign = 4295032832, falign = 9.18354962e-41, dalign = 2.1220281700514382e-314, palign = 0x100010000 <Address 0x100010000 out of bounds>} ber = 0x7ffff23e50f0 rc = 32768 bytes = 14 __PRETTY_FUNCTION__ = "send_ldap_response" #4 0x0000000000468318 in slap_send_ldap_result (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/result.c:860 tmp = 0x0 otext = 0x0 oref = 0x0 __PRETTY_FUNCTION__ = "slap_send_ldap_result" #5 0x000000000051e4a9 in hdb_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at modrdn.c:789 bdb = 0x9ebd80 children = 0x9928d0 entry = 0x992630 p_dn = {bv_len = 29, bv_val = 0x7fffe410b7f9 "ou=People,dc=my-domain,dc=com"} p_ndn = {bv_len = 29, bv_val = 0x7fffe410b829 ""} new_dn = {bv_len = 38, bv_val = 0x0} new_ndn = {bv_len = 38, bv_val = 0x0} e = 0xbf3c78 p = 0x0 ei = 0x7fffe410cc20 eip = 0x7fffe410b970 nei = 0x7fffe410b970 neip = 0x0 textbuf = "X5\000\344\377\177\000\000%\231e\000\000\000\000\000PZ>\362\377\177\000\000`)\000\344\377\177\000\000\220U>\362\377\177\000\000\000\000\000\000\000\000\000\000\320{\236\000\000\000\000\000\260}\236\000\000\000\000\000&\000\000\000\000\000\000\000P0\000\344\377\177\000\000&\000\000\000\000\000\000\000\330\060\000\344\377\177\000\000\260}\236\000\000\000\000\000\200(\242\000\000\000\000\000%\231e\000\000\000\000\000PZ>\362\377\177\000\000\320U>\362\377\177\000\000BXZ\000\000\000\000\000PZ>\362\377\177\000\000`)\000\344\377\177\000\000PZ>\362\000\200\000\000\320{\236\000\000\000\000\000\260}\236\000\000\000\000\000\070\065\000\344\377\177\000\000\035\000\000\000\000\000\000\000\340\064\000\344\377\177\000\000\035\000\000\000\000\000\000\000x4\000\344\377\177\000\000\b\000\000\000\000\000\000\000\330\061\000\344\377\177\000\000\b\000\000\000\000\000\000\000\b"... textlen = 256 ltid = 0x0 lt2 = 0x7fffe410d8d0 opinfo = {boi_oe = {oe_next = {sle_next = 0x0}, oe_key = 0x0}, boi_txn = 0x7fffe40024f0, boi_locks = 0x0, boi_err = 0, boi_acl_cache = 0 '\000', boi_flag = 0 '\000'} dummy = {e_id = 4, e_name = {bv_len = 38, bv_val = 0x7fffe4002650 "cn=test2,ou=People,dc=my-domain,dc=com"}, e_nname = {bv_len = 38, bv_val = 0x7fffe4002680 "cn=test2,ou=people,dc=my-domain,dc=com"}, e_attrs = 0x0, e_ocflags = 256, e_bv = {bv_len = 0, bv_val = 0x0}, e_private = 0x7fffe410cc20} np = 0x0 np_dn = 0x0 np_ndn = 0x7ffff23e5360 new_parent_dn = 0x7ffff23e5350 manageDSAit = 0 lock = {off = 164424, ndx = 98, gen = 2, mode = DB_LOCK_WRITE} plock = {off = 157848, ndx = 932, gen = 2, mode = DB_LOCK_READ} nplock = {off = 0, ndx = 0, gen = 0, mode = DB_LOCK_NG} num_retries = 0 preread_ctrl = 0x0 postread_ctrl = 0x0 ctrls = {0x0, 0x7fffe4003050, 0xa22880, 0x0, 0x7ffff23e54a0, 0x5abe87} num_ctrls = 0 rc = 0 parent_is_glue = 0 parent_is_leaf = 1 settle = 0 __PRETTY_FUNCTION__ = "hdb_modrdn" #6 0x00000000004ebf0c in overlay_op_walk (op=0x7fffe4002960, rs=0x7ffff23e5a50, which=op_modrdn, oi=0x9e0c10, on=0x0) at ../../../servers/slapd/backover.c:671 func = 0x8bd198 rc = 32768 #7 0x00000000004ec141 in over_op_func (op=0x7fffe4002960, rs=0x7ffff23e5a50, which=op_modrdn) at ../../../servers/slapd/backover.c:723 oi = 0x9e0c10 on = 0x9e7bd0 be = 0x9ebbe0 db = {bd_info = 0x8bd140, bd_self = 0x9ebbe0, be_ctrls = "\000\001\001\001\000\001\000\000\001\000\000\001\001\000\001\001", '\000' <repeats 16 times>, "\001", be_flags = 264, be_restrictops = 0, be_requires = 0, be_ssf_set = {sss_ssf = 0, sss_transport = 0, sss_tls = 0, sss_sasl = 0, sss_update_ssf = 0, sss_update_transport = 0, sss_update_tls = 0, sss_update_sasl = 0, sss_simple_bind = 0}, be_suffix = 0x9d2740, be_nsuffix = 0x9ebbb0, be_schemadn = {bv_len = 0, bv_val = 0x0}, be_schemandn = {bv_len = 0, bv_val = 0x0}, be_rootdn = {bv_len = 30, bv_val = 0x9ec140 "cn=Manager,dc=my-domain,dc=com"}, be_rootndn = {bv_len = 30, bv_val = 0x9ec190 "cn=manager,dc=my-domain,dc=com"}, be_rootpw = {bv_len = 6, bv_val = 0x9ec440 "secret"}, be_max_deref_depth = 15, be_def_limit = {lms_t_soft = 3600, lms_t_hard = 0, lms_s_soft = 500, lms_s_hard = 0, lms_s_unchecked = -1, lms_s_pr = 0, lms_s_pr_hide = 0, lms_s_pr_total = 0}, be_limits = 0x0, be_acl = 0x0, be_dfltaccess = ACL_READ, be_extra_anlist = 0x0, be_update_ndn = {bv_len = 0, bv_val = 0x0}, be_update_refs = 0x0, be_pending_csn_list = 0xbd7030, be_pcl_mutex = {__data = {__lock = 0, __count = 0, __owner = 0, __nusers = 0, __kind = 0, __spins = 0, __list = {__prev = 0x0, __next = 0x0}}, __size = '\000' <repeats 39 times>, __align = 0}, be_syncinfo = 0x0, be_pb = 0x0, be_cf_ocs = 0x8c3400, be_private = 0x9ebd80, be_next = {stqe_next = 0x0}} cb = {sc_next = 0x0, sc_response = 0x4eacb0 <over_back_response>, sc_cleanup = 0, sc_private = 0x9e0c10} sc = 0x0 rc = 32768 __PRETTY_FUNCTION__ = "over_op_func" #8 0x00000000004ec2d8 in over_op_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/backover.c:768 No locals. #9 0x00000000004765fa in fe_op_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/modrdn.c:314 repl_user = 0 dest_ndn = {bv_len = 38, bv_val = 0x7fffe4003508 "cn=test2,ou=people,dc=my-domain,dc=com"} dest_pndn = {bv_len = 29, bv_val = 0x7fffe40034e0 "ou=people,dc=my-domain,dc=com"} pdn = {bv_len = 0, bv_val = 0x0} op_be = 0x9ebbe0 bd = 0x8c7620 diff = 0 #10 0x0000000000475d88 in do_modrdn (op=0x7fffe4002960, rs=0x7ffff23e5a50) at ../../../servers/slapd/modrdn.c:186 dn = {bv_len = 38, bv_val = 0x7fffe410cb37 "cn=test1,ou=People,dc=my-domain,dc=com"} newrdn = {bv_len = 8, bv_val = 0x7fffe410cb5f "cn=test2"} newSuperior = {bv_len = 29, bv_val = 0x7fffe410cb6c "ou=People,dc=my-domain,dc=com"} deloldrdn = -1 pnewSuperior = {bv_len = 29, bv_val = 0x7fffe4003478 "ou=People,dc=my-domain,dc=com"} nnewSuperior = {bv_len = 29, bv_val = 0x7fffe40034e0 "ou=people,dc=my-domain,dc=com"} length = 29 #11 0x000000000044fc27 in connection_operation (ctx=0x7ffff23e5b90, arg_v=0x7fffe4002960) at ../../../servers/slapd/connection.c:1150 rc = 80 cancel = 0 op = 0x7fffe4002960 rs = {sr_type = REP_RESULT, sr_tag = 109, sr_msgid = 2, sr_err = 0, sr_matched = 0x0, sr_text = 0x0, sr_ref = 0x0, sr_ctrls = 0x0, sr_un = {sru_search = {r_entry = 0x0, r_attr_flags = 0, r_operational_attrs = 0x0, r_attrs = 0x0, r_nentries = 0, r_v2ref = 0x0}, sru_sasl = {r_sasldata = 0x0}, sru_extended = {r_rspoid = 0x0, r_rspdata = 0x0}}, sr_flags = 0} tag = 108 opidx = SLAP_OP_MODRDN conn = 0xa22880 memctx = 0x7fffe4002780 memctx_null = 0x0 memsiz = 1048576 __PRETTY_FUNCTION__ = "connection_operation" #12 0x0000000000450254 in connection_read_thread (ctx=0x7ffff23e5b90, argv=0x17) at ../../../servers/slapd/connection.c:1286 rc = 0 cri = {op = 0x7fffe4002960, func = 0, arg = 0x0, ctx = 0x7ffff23e5b90, nullop = 0} s = 23 #13 0x00000000005c78ad in ldap_int_thread_pool_wrapper (xpool=0x9973b0) at ../../../libraries/libldap_r/tpool.c:688 pool = 0x9973b0 task = 0x7fffec000a20 work_list = 0x997448 ctx = {ltu_id = 140737257563904, ltu_key = {{ltk_key = 0x44f70c, ltk_data = 0x7fffe40028f0, ltk_free = 0x44f5df <conn_counter_destroy>}, {ltk_key = 0x4caa67, ltk_data = 0x7fffe4002780, ltk_free = 0x4ca88c <slap_sl_mem_destroy>}, {ltk_key = 0x46c531, ltk_data = 0x0, ltk_free = 0x46c484 <slap_op_q_destroy>}, {ltk_key = 0xbd9430, ltk_data = 0x7fffe4106590, ltk_free = 0x56eac3 <bdb_reader_free>}, {ltk_key = 0x0, ltk_data = 0x7fffe4000ac0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0} <repeats 22 times>, {ltk_key = 0x0, ltk_data = 0x7ffff6c46ba5, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}, {ltk_key = 0x0, ltk_data = 0x0, ltk_free = 0}}} kctx = 0x0 i = 32 keyslot = 949 hash = 3994472373 __PRETTY_FUNCTION__ = "ldap_int_thread_pool_wrapper" #14 0x00007ffff6c45d14 in start_thread (arg=0x7ffff23e6700) at pthread_create.c:309 __res = <optimized out> pd = 0x7ffff23e6700 now = <optimized out> unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737257563904, -4915901394837331576, 1, 140737354125312, 140737257563904, 0, 4915909644372648328, 4915916705226662280}, mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}} not_first_call = 0 pagesize_m1 = <optimized out> sp = <optimized out> freesize = <optimized out> #15 0x00007ffff611867d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:115 No locals.

1 0

Re: (ITS#7413) Some UTF-8 characters are wrongly recognized as identical in multi-valued attributes
by hyc＠symas.com 11 Oct '12

11 Oct '12

m.bachmann(a)cms.hu-berlin.de wrote: > Full_Name: Michail Bachmann > Version: 2.4.31 > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (141.20.3.158) > > > > The UTF-8 character 'FEMININE ORDINAL INDICATOR' (U+00AA) is wrongly treated as > 'LATIN SMALL LETTER A' (U+0061), so adding a multi-valued attribute where U+00AA > is replaced with U+0061 (or the other way around) fails: This works as designed. See the Unicode specification, rules for decomposition. > > $ ldapadd -f create.ldif -h localhost -D 'cn=admin,dc=example,dc=com' > > ### create.ldif ### > dn: cn=test,dc=example,dc=com > objectClass: organizationalRole > objectClass: top > cn: test > street: a street > ### /create.ldif ### > > $ ldapmodify -f modify.ldif -h localhost -D 'cn=admin,dc=example,dc=com' > > ### modify.ldif ### > dn: cn=test,dc=example,dc=com > changetype: modify > add: street > street: ª street > - > > ### /modify.ldif ### > > will result in > > ldap_modify: Type or value exists (20) > additional info: modify/add: street: value #0 already exists > > It seems like U+00AA is decomposed into '<super>+U+0061' and then the '<super>' > part is discarded. > > Tested with 2.4.31 (Debian) and 2.4.21 (Ubuntu) > > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7413) Some UTF-8 characters are wrongly recognized as identical in multi-valued attributes
by m.bachmann＠cms.hu-berlin.de 11 Oct '12

11 Oct '12

Full_Name: Michail Bachmann Version: 2.4.31 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (141.20.3.158) The UTF-8 character 'FEMININE ORDINAL INDICATOR' (U+00AA) is wrongly treated as 'LATIN SMALL LETTER A' (U+0061), so adding a multi-valued attribute where U+00AA is replaced with U+0061 (or the other way around) fails: $ ldapadd -f create.ldif -h localhost -D 'cn=admin,dc=example,dc=com' ### create.ldif ### dn: cn=test,dc=example,dc=com objectClass: organizationalRole objectClass: top cn: test street: a street ### /create.ldif ### $ ldapmodify -f modify.ldif -h localhost -D 'cn=admin,dc=example,dc=com' ### modify.ldif ### dn: cn=test,dc=example,dc=com changetype: modify add: street street: ª street - ### /modify.ldif ### will result in ldap_modify: Type or value exists (20) additional info: modify/add: street: value #0 already exists It seems like U+00AA is decomposed into '<super>+U+0061' and then the '<super>' part is discarded. Tested with 2.4.31 (Debian) and 2.4.21 (Ubuntu)

1 0

(ITS#7412) check_password contrib module
by clem.oudot＠gmail.com 11 Oct '12

11 Oct '12

Full_Name: Clément OUDOT Version: OS: GNU/Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (88.173.78.196) As said by Guillaume Rousse in ITS#7348 ( http://www.openldap.org/its/index.cgi/Incoming?id=7348;selectid=7348#themesg), I would like to contribute the check_password module to OpenLDAP. --- contrib/slapd-modules/README | 3 + contrib/slapd-modules/check-password/Makefile | 52 +++ contrib/slapd-modules/check-password/README | 146 +++++++++ .../slapd-modules/check-password/check_password.c | 356 +++++++++++++++= ++++++ 4 files changed, 557 insertions(+) create mode 100644 contrib/slapd-modules/check-password/Makefile create mode 100644 contrib/slapd-modules/check-password/README create mode 100644 contrib/slapd-modules/check-password/check_password.c= diff --git a/contrib/slapd-modules/README b/contrib/slapd-modules/README index db74379..d8005ff 100644 --- a/contrib/slapd-modules/README +++ b/contrib/slapd-modules/README @@ -20,6 +20,9 @@ allop (overlay) autogroup (overlay) Automated updates of group memberships. =20 +check_password (plugin) + External password quality check module for ppolicy + cloak (overlay) Hide specific attributes unless explicitely requested =20 diff --git a/contrib/slapd-modules/check-password/Makefile b/contrib/slap= d-modules/check-password/Makefile new file mode 100644 index 0000000..42dd18f --- /dev/null +++ b/contrib/slapd-modules/check-password/Makefile @@ -0,0 +1,52 @@ + +LDAP_SRC =3D ../../.. +LDAP_BUILD =3D ../../.. +LDAP_INC =3D -I$(LDAP_BUILD)/include -I$(LDAP_SRC)/include -I$(LDAP_SRC)= /servers/slapd +LDAP_LIB =3D $(LDAP_BUILD)/libraries/libldap_r/libldap_r.la \ + $(LDAP_BUILD)/libraries/liblber/liblber.la + +CRACKLIB_PATH =3D /usr/share/cracklib/pw_dict +CRACKLIB_INC =3D=20 +CRACKLIB_LIB =3D -lcrack + +CONFIG_PATH =3D /etc/openldap/check_password.conf + +LIBTOOL =3D $(LDAP_BUILD)/libtool +CC =3D gcc +OPT =3D -g -O2 -Wall +DEFS =3D -DHAVE_CRACKLIB -DCRACKLIB_DICTPATH=3D"\"$(CRACKLIB_PATH)\"" \ + -DCONFIG_FILE=3D"\"$(CONFIG_PATH)\"" -DDEBUG +INCS =3D $(LDAP_INC) $(CRACKLIB_INC) +LIBS =3D $(LDAP_LIB) $(CRACKLIB_LIB) + +PROGRAMS =3D check_password.la +LTVER =3D 0:0:0 + +prefix=3D/usr/local +exec_prefix=3D$(prefix) +ldap_subdir=3D/openldap + +libdir=3D$(exec_prefix)/lib +libexecdir=3D$(exec_prefix)/libexec +moduledir =3D $(libexecdir)$(ldap_subdir) + +.SUFFIXES: .c .o .lo + +.c.lo: + $(LIBTOOL) --mode=3Dcompile $(CC) $(OPT) $(DEFS) $(INCS) -c $< + +all: $(PROGRAMS) + +check_password.la: check_password.lo + $(LIBTOOL) --mode=3Dlink $(CC) $(OPT) -version-info $(LTVER) \ + -rpath $(moduledir) -module -o $@ $? $(LIBS) + +clean: + rm -rf *.o *.lo *.la .libs + +install: $(PROGRAMS) + mkdir -p $(DESTDIR)$(moduledir) + for p in $(PROGRAMS) ; do \ + $(LIBTOOL) --mode=3Dinstall cp $$p $(DESTDIR)$(moduledir) ; \ + done + diff --git a/contrib/slapd-modules/check-password/README b/contrib/slapd-= modules/check-password/README new file mode 100644 index 0000000..10191c2 --- /dev/null +++ b/contrib/slapd-modules/check-password/README @@ -0,0 +1,146 @@ + +check_password.c - OpenLDAP pwdChecker library + +2007-06-06 Michael Steinmann <msl(a)calivia.com> +2008-01-30 Pierre-Yves Bonnetain <py.bonnetain(a)ba-cst.com> +2009 Clement Oudot <clem.oudot(a)gmail.com> - LTB-project +2009 Jerome HUET - LTB-project + +check_password.c is an OpenLDAP pwdPolicyChecker module used to check th= e +strength and quality of user-provided passwords. + +This module is used as an extension of the OpenLDAP password policy cont= rols, +see slapo-ppolicy(5) section pwdCheckModule. + +check_password.c will run a number of checks on the passwords to ensure = minimum +strength and quality requirements are met. Passwords that do not meet th= ese +requirements are rejected. + + +Password checks +--------------- + - passwords shorter than 6 characters are rejected if cracklib is used = (because + cracklib WILL reject them). + + - syntactic checks controls how many different character classes are us= ed + (lower, upper, digit and punctuation characters). The minimum number = of + classes is defined in a configuration file. You ca The attached patch file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Clément OUDOT clem.oudot(a)gmail.com. I have not assigned rights and/or interest in this work to any party. I, Clément OUDOT, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

1 0

(ITS#7411) ldap_get_option.3: Warning from "groff" about a tab in the manual
by bjarniig＠rhi.hi.is 10 Oct '12

10 Oct '12

Full_Name: Bjarni Ingi Gislason Version: 2.4.32 OS: GNU/Linux URL: Submission from: (NULL) (130.208.164.54) Software: openldap Version: 2.4.32 File: doc/man/ldap_get_option.3 Patch: Yes From "groff -b -ww -z -mandoc ldap_get_option.3": groff: ldap_get_option.3: stdin:456: warning: tab character in unquoted macro argument # Output from "nroff" should (usually) have only the left margin adjusted (".ad l"). Otherwise the space between words can be too long. Output for a manual should (usually) have the right margin ragged (".ad l"), as it is not (usually) intended for a book or other professional printing medium. # # Each sentence should begin in a new line. a) The space between sentences is different between formatters. b) Changes in one line do then not affect others, and do therefore not appear as changed in the output of "diff". # Sometimes a small change in space between a roman and an italic character is needed (use ".RI" or ".IR" macros). # Remove spaces at end of lines. # Patch: --- ldap_get_option.3 2012-07-31 16:39:26.000000000 +0000 +++ /tmp/ldap_get_option.3.new 2012-10-09 21:27:10.240593613 +0000 @@ -453,7 +453,7 @@ .BR "char ***" . The caller must not free or otherwise muck with it. .TP -.B LDAP_OPT_X_SASL_NOCANON +.B LDAP_OPT_X_SASL_NOCANON Sets/gets the NOCANON flag. When unset, the hostname is canonicalized. .BR invalue

1 0

Re: (ITS#7348) enhancement: check_password contrib module
by Kurt Zeilenga 10 Oct '12

10 Oct '12

This submission was been placed in a suspended state for intellectual property rights (IPR) reasons. Unfortunately, I got busy with other things and didn't have time to respond. I do now. Generally, as the Foundation requires notices to be provided by authors (or other right holders), it does not accept 3rd party submissions. The Foundation views this as a 3rd party submission as it apparently comes from someone who has no rights in the submission. Generally, the Project does not duplication distribution of materials otherwise made available. This material appears to be distributed by the LTB Project and the Project sees no reason to supplant their effects. The submitter is not listed as a member of the LTB Project and assumes the submitter is not authorized to speak on behalf of the LTB Project. The contribution is missing appropriate IPR Notices. See <http://www.openldap.org/devel/contributing.html>. These MUST be provided by the authors (or other rights holders). IPR notices provided by non-authors will not be considered. For these reasons, your submission is rejected. If it is the LTB Project's wish to contribute this material to the OpenLDAP Project, their Project Leader (who we believed also authored portions of this material), working in cooperation with other authors, should personally submit the materials, with appropriate IPR notices, and a statement that they wish the OpenLDAP Project to include the materials in OpenLDAP Software and shepherd further development. This ITS will now be closed.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs