openldap-bugs

openldap-bugs@openldap.org

1 participants
20895 discussions

[Issue 6445] Duplicate free with back-relay + passwd op
by openldap-its＠openldap.org 20 Jul '21

20 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6445 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |WORKSFORME Status|UNCONFIRMED |RESOLVED --- Comment #2 from Howard Chu <hyc(a)openldap.org> --- Unable to reproduce. Probably fixed by df2573b4a91462031782bc7da84776b7c9e1583a ITS#6632 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8775] PASSMOD exop fails with RWM and tight ACLs
by openldap-its＠openldap.org 20 Jul '21

20 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8775 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|UNCONFIRMED |RESOLVED --- Comment #1 from Howard Chu <hyc(a)openldap.org> --- Fixed in master In general everything was working as documented in slapd-relay(5). But ACLs by "self" would never work due to the target entries having virtual DNs while the connection is always authenticated as the real DN. -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6916] slapo-unique returns operations error when assertion control is used
by openldap-its＠openldap.org 20 Jul '21

20 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6916 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|UNCONFIRMED |RESOLVED --- Comment #12 from Howard Chu <hyc(a)openldap.org> --- fixed in master -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 5555] authzTo ACL check for wrong principal
by openldap-its＠openldap.org 19 Jul '21

19 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=5555 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #17 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/360 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8171] slapd-sock(5): Details for CONTINUE response missing
by openldap-its＠openldap.org 19 Jul '21

19 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8171 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |IN_PROGRESS Ever confirmed|0 |1 --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/359 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 6949] OpenLDAP Logging
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=6949 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS --- Comment #4 from Howard Chu <hyc(a)openldap.org> --- (In reply to Quanah Gibson-Mount from comment #3) > hyc - This may be a good catchall bug for the logging rework. https://git.openldap.org/openldap/openldap/-/merge_requests/358 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9607] New: ldapsearch nettimeout option is not respected
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=9607 Issue ID: 9607 Summary: ldapsearch nettimeout option is not respected Product: OpenLDAP Version: 2.5.5 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: client tools Assignee: bugs(a)openldap.org Reporter: simon.pichugin(a)gmail.com Target Milestone: --- Description of problem: ldapsearch doesn't respect nettimeout option and hangs forever if the server is not accessible (for example when packets are dropped by iptables). Version-Release number of selected component (if applicable): ldapsearch: @(#) $OpenLDAP: ldapsearch 2.5.5 (Jul 9 2021 07:02:36) $ Checking with openssl-1.1.1k Additionally: The issue is also present in the older versions. Also, the issue still exists with openssl-3.0.0-0.alpha16 How reproducible: always Steps to Reproduce: 1. iptables -A INPUT -p tcp --sport 636 -m tcp --tcp-flags PSH PSH -j DROP 2. ldapsearch -o nettimeout=3 -H ldaps://192.168.0.1 -b dc=example,dc=com -x -s base Actual results: ldapsearch hangs Expected results: ldapsearch should return error: ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1) Additional info: ldap_url_parse_ext(ldaps://192.168.0.1) ldap_create ldap_url_parse_ext(ldaps://192.168.0.1:636/??base) ldap_sasl_bind ldap_send_initial_request ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP 192.168.0.1:636 ldap_new_socket: 3 ldap_prepare_socket: 3 ldap_connect_to_host: Trying 192.168.0.1:636 ldap_pvt_connect: fd: 3 tm: 3 async: 0 ldap_ndelay_on: 3 attempting to connect: connect errno: 115 ldap_int_poll: fd: 3 tm: 3 ldap_is_sock_ready: 3 ldap_ndelay_off: 3 ldap_pvt_connect: 0 TLS trace: SSL_connect:before SSL initialization tls_write: want=285, written=285 0000: 16 03 01 01 18 01 00 01 14 03 03 d9 3e 1d 7f d5 ............>... 0010: d9 4d 52 b5 3f 49 33 f5 b2 4b 2c 1a 24 0b 3f d6 .MR.?I3..K,.$.?. ... ... 0100: e1 be fe 47 48 5c 93 91 6b eb fd 36 94 fd 64 7b ...GH\..k..6..d{ 0110: 84 80 7a 25 c5 c5 a4 9b d2 53 28 62 25 ..z%.....S(b% TLS trace: SSL_connect:SSLv3/TLS write client hello tls_read: want=5 error=Resource temporarily unavailable TLS trace: SSL_connect:SSLv3/TLS write client hello tls_read: want=5 error=Resource temporarily unavailable TLS trace: SSL_connect:SSLv3/TLS write client hello tls_read: want=5 error=Resource temporarily unavailable ... Repeats the following lines eternally: TLS trace: SSL_connect:SSLv3/TLS write client hello tls_read: want=5 error=Resource temporarily unavailable -- You are receiving this mail because: You are on the CC list for the issue.

1 2

[Issue 8047] TIMEOUT and NETWORK_TIMEOUT don't work properly with SSL
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8047 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |simon.pichugin(a)gmail.com --- Comment #9 from Quanah Gibson-Mount <quanah(a)openldap.org> --- *** Issue 9607 has been marked as a duplicate of this issue. *** -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8008] back-ldap: proxyauth with saslmech EXTERNAL not working
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8008 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED Target Milestone|2.6.0 |--- -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8008] back-ldap: proxyauth with saslmech EXTERNAL not working
by openldap-its＠openldap.org 16 Jul '21

16 Jul '21

https://bugs.openldap.org/show_bug.cgi?id=8008 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED See Also| |https://bugs.openldap.org/s | |how_bug.cgi?id=7403 Resolution|--- |WONTFIX --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Behavior change due to fix in ITS#7403 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs