openldap-bugs

openldap-bugs@openldap.org

1 participants
20961 discussions

Re: (ITS#7340) Regression in slapo-constraint
by hyc＠symas.com 20 Aug '12

20 Aug '12

michael(a)stroeder.com wrote: > michael(a)stroeder.com wrote: >> quanah(a)zimbra.com wrote: >>> --On Saturday, August 18, 2012 2:06 PM +0200 Michael Ströder >>> <michael(a)stroeder.com> wrote: >>>> I experienced the regression with RE24 but did not test with master yet. >>>> But if it works with master the porting to RE24 might have been >>>> incomplete back then. >>> >>> Ok. I'll backport it again, with the large test suite it now has as well, >>> and see what happens. ;) > > Retested with RE24 5e7b8160621ba7ed369ecebc0d03bed745914447 > >>>>>> Starting test064-constraint for bdb... > running defines.sh > slapadd: could not parse entry (line=883) > Starting slapd on TCP/IP port 9011... > Inserting constraint overlay... > ldapadd failed (32)! >>>>>> test064-constraint failed for bdb > (exit 32) > make[2]: *** [bdb-mod] Error 32 > make[2]: Leaving directory `/usr/src/michael/openldap-git/re24/openldap/tests' > make[1]: *** [test] Error 2 > make[1]: Leaving directory `/usr/src/michael/openldap-git/re24/openldap/tests' > make: *** [test] Error 2 I see this as well. The test script is not taking into account a backend that is built as a loadable module. Will fix this shortly. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7340) Regression in slapo-constraint
by michael＠stroeder.com 20 Aug '12

20 Aug '12

michael(a)stroeder.com wrote: > quanah(a)zimbra.com wrote: >> --On Saturday, August 18, 2012 2:06 PM +0200 Michael Ströder >> <michael(a)stroeder.com> wrote: >>> I experienced the regression with RE24 but did not test with master yet. >>> But if it works with master the porting to RE24 might have been >>> incomplete back then. >> >> Ok. I'll backport it again, with the large test suite it now has as well, >> and see what happens. ;) Retested with RE24 5e7b8160621ba7ed369ecebc0d03bed745914447 >>>>> Starting test064-constraint for bdb... running defines.sh slapadd: could not parse entry (line=883) Starting slapd on TCP/IP port 9011... Inserting constraint overlay... ldapadd failed (32)! >>>>> test064-constraint failed for bdb (exit 32) make[2]: *** [bdb-mod] Error 32 make[2]: Leaving directory `/usr/src/michael/openldap-git/re24/openldap/tests' make[1]: *** [test] Error 2 make[1]: Leaving directory `/usr/src/michael/openldap-git/re24/openldap/tests' make: *** [test] Error 2 See also http://www.stroeder.com/temp/openldap-its7340-testrun.tar.gz Ciao, Michael.

1 0

(ITS#7360) Patch - Mozilla NSS - accept MozNSS certname in the form of tokenname:certnickname
by rmeggins＠redhat.com 20 Aug '12

20 Aug '12

Full_Name: Rich Megginson Version: master OS: Fedora17 URL: ftp://ftp.openldap.org/incoming/0001-accept-nss-certname-in-the-form-of-tok… Submission from: (NULL) (76.26.104.137) There are cases where the user may want to force the use of a particular PKCS11 device to use for a given certificate. Allow the user to do this with MozNSS by specifying the cert as "tokenname:certnickname" where token name is the name of a token/slot in a PKCS11 device and certnickname is the nickname of a certificate on that device. These patch files are derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Red Hat. Red Hat has not assigned rights and/or interest in this work to any party. I, Rich Megginson am authorized by Red Hat, my employer, to release this work under the following terms. Red Hat hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

1 0

(ITS#7359) [PATCH] MozNSS: prefer unlocked slot when getting private key
by jvcelak＠redhat.com 20 Aug '12

20 Aug '12

Full_Name: Jan Vcelak Version: git master OS: Linux URL: ftp://ftp.openldap.org/incoming/jvcelak-20120820-nss-prefer-unlocked-slot-p… Submission from: (NULL) (94.113.220.43) With last MozNSS patches for OpenLDAP, the library explicitly opens the certificate database when retrieving the certificates, even if the database is already opened. (Requried for safe certificate lookup from a nickname.) This might also require a re-authentication to a slot, which holds the private key. Some application might expect that the slot with private key is already unlocked before passing the control to libldap. This got broken with the recent changes. I'm attaching a patch which fixes it. If the certificate (and corresponding key) is held in multiple slots, libldap will take the key from an already authenticated slot. The attached file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Red Hat. Red Hat has not assigned rights and/or interest in this work to any party. I, Jan Vcelak am authorized by Red Hat, my employer, to release this work under the following terms. Red Hat hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

1 0

(ITS#7358) Patch to fix Visual Studio build broken by 2.4.32
by mbooth＠apache.org 20 Aug '12

20 Aug '12

Full_Name: Mat Booth Version: 2.4.32 OS: Windows XP URL: http://people.apache.org/~mbooth/0001-Fix-build-error-syntax-error-missing-… Submission from: (NULL) (77.86.30.139) The provided patch fixes a build problem for Visual Studio 2005 that was introduced with OpenLDAP 2.4.32. * libraries/libldap/init.c Use C89-style variable declarations because Visual C does not support C99-style declarations. Avoids a "syntax error : missing ; before type" compile-time error with Microsoft compilers. The attached patch file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Mat Booth <mbooth(a)apache.org>. I have not assigned rights and/or interest in this work to any party. I, Mat Booth, hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

1 0

(ITS#7357) Pass-through radius auth. with RFC2865
by jet＠transniaga.co.th 19 Aug '12

19 Aug '12

Full_Name: Jetasik Anantakunupakorn Version: 2.4.32 OS: FreeBSD 9.0-RELEASE amd64 URL: http://www.openldap.org/lists/openldap-technical/201208/msg00172.html Submission from: (NULL) (58.11.65.20) Pass-through radius authentication in contrib's passwd module(radius.c) does not include either a NAS-IP or a NAS-Identifier, according to radius RFC 2865 one of these attributes is mandatory in the access request. The thing is that the previous version of Radius RFC standard(RFC 2138) specified that the access request "SHOULD" contain either a NAS-IP or a NAS-Identifier but the current version use "MUST" instead.

1 0

Re: (ITS#7340) Regression in slapo-constraint
by michael＠stroeder.com 19 Aug '12

19 Aug '12

quanah(a)zimbra.com wrote: > --On Saturday, August 18, 2012 2:06 PM +0200 Michael Ströder > <michael(a)stroeder.com> wrote: >> I experienced the regression with RE24 but did not test with master yet. >> But if it works with master the porting to RE24 might have been >> incomplete back then. > > Ok. I'll backport it again, with the large test suite it now has as well, > and see what happens. ;) Thanks. After your commits I will test RE24 immediately with my customer's setup and provide an example config if RE24 fails. Ciao, Michael.

1 0

Re: (ITS#7340) Regression in slapo-constraint
by quanah＠zimbra.com 19 Aug '12

19 Aug '12

--On Saturday, August 18, 2012 2:06 PM +0200 Michael Ströder <michael(a)stroeder.com> wrote: > quanah(a)zimbra.com wrote: >> --On Tuesday, July 31, 2012 11:41 AM +0000 jsynacek(a)redhat.com wrote: >>> I'm having hard time reproducing this. Still works for me. >>> >>> Please provide a minimal setup and an example that fails, so I can fix >>> the patch. Thank you. >> >> Have you had any luck in providing a configuration that doesn't work to >> Jan, so this can be resolved? > > I'm currently *very* busy. It's definitely on my TODO list to provide a > test config. > > One question: > Is the patch still enabled in GIT master? > > I experienced the regression with RE24 but did not test with master yet. > But if it works with master the porting to RE24 might have been > incomplete back then. Ok. I'll backport it again, with the large test suite it now has as well, and see what happens. ;) --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7340) Regression in slapo-constraint
by michael＠stroeder.com 18 Aug '12

18 Aug '12

quanah(a)zimbra.com wrote: > --On Tuesday, July 31, 2012 11:41 AM +0000 jsynacek(a)redhat.com wrote: >> I'm having hard time reproducing this. Still works for me. >> >> Please provide a minimal setup and an example that fails, so I can fix the >> patch. Thank you. > > Have you had any luck in providing a configuration that doesn't work to > Jan, so this can be resolved? I'm currently *very* busy. It's definitely on my TODO list to provide a test config. One question: Is the patch still enabled in GIT master? I experienced the regression with RE24 but did not test with master yet. But if it works with master the porting to RE24 might have been incomplete back then. Ciao, Michael.

1 0

Re: (ITS#7340) Regression in slapo-constraint
by quanah＠zimbra.com 17 Aug '12

17 Aug '12

--On Tuesday, July 31, 2012 11:41 AM +0000 jsynacek(a)redhat.com wrote: > On 07/30/2012 08:38 PM, Michael Str?der wrote: >> Jan Synacek wrote: >>> On 07/27/2012 10:47 PM, michael(a)stroeder.com wrote: >>>> It seems there's a regression in slapo-constraint possibly caused by a >>>> patch for ITS#7168. >>> >>> This works for me: >>> >>> slapd.ldif: >>> ... >>> dn: olcOverlay=constraint,olcDatabase={1}bdb,cn=config >>> objectClass: olcOverlayConfig >>> objectClass: olcConstraintConfig >>> olcOverlay: constraint >>> olcConstraintAttribute: mail count 3 >>> olcConstraintAttribute: description count 2 >>> ... >> >> From the excerpt above it seems you've only added a count constraint. >> >> Please use more features of slapo-constraint for testing, e.g. regex- or >> URL-based constraints. >> >> The patch for ITS#7168 broke all my customer setups since I'm >> slapo-constraint quite heavily. >> >> Ciao, Michael. >> > > I'm having hard time reproducing this. Still works for me. > > Please provide a minimal setup and an example that fails, so I can fix the > patch. Thank you. Hi Michael, Have you had any luck in providing a configuration that doesn't work to Jan, so this can be resolved? Thanks, Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs