openldap-bugs

openldap-bugs@openldap.org

1 participants
20967 discussions

Re: (ITS#6014) rev. 1.121 of clients/tools/common.c makes ldapmodify coredump
by ando＠sys-net.it 12 Mar '09

12 Mar '09

d(a)delphij.net wrote: > Here is a patch that intends to fix #6014. getpassphrase() (which in > turn would be a getpass() call, or lutil_getpass() call), returns a > pointer from a static char * pointer, which should never be free()'ed. > Therefore, a strdup() should be called. > > Note that, since both getpass() implementation could return NULL, we can > not strdup() directly. Instead, we need to detect whether it's NULL and > handle separately. Probably, a better solution would be to implement a lutil_get_terminal_password(char *prompt, struct berval *passwd) routine that mallocs as appropriate. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#6015) ldapsearch can not retrieve same uid that has been added after it was deleted
by Pierangelo Masarati 12 Mar '09

12 Mar '09

Please direct software usage questions to openldap-software(a)openldap.org. Also, note that 2.2.13 is ancient. You should upgrade to 2.4.15. This ITS will be closed. p.

1 0

Re: (ITS#6018) TLS memory leak
by timling2003＠gmail.com 12 Mar '09

12 Mar '09

--000e0cd1af8ce900de0464e92621 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit OpenSSL version is 0.9.7d 17 Mar 2004. I will create a connect to LDAP server( windows active directory on windows server 2003) for every query request. Then, I will unbind this connect. 2009/3/12 ling qing <timling2003(a)gmail.com> > I have checked it on openldap-2.4.15. But, it still has this problem. > btw, I use cyrus-sasl-2.1.22.tar.gz for building. > thanks > > 2009/3/12 Pierangelo Masarati <openldap-its(a)openldap.org> > >> 2.3.32 is obsolete. It's pointless to debug it. Please check whether the >> problem persists in 2.4.15. >> >> p. >> > > --000e0cd1af8ce900de0464e92621 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable OpenSSL version is 0.9.7d 17 Mar 2004.<br>I will create a connect to LDAP s= erver( windows active directory on windows server 2003) for every query req= uest. Then, I will unbind this connect.<br><br><div class=3D"gmail_quote"> 2009/3/12 ling qing <span dir=3D"ltr"><<a href=3D"mailto:timling2003@gma= il.com">timling2003(a)gmail.com</a>></span><br><blockquote class=3D"gmail_= quote" style=3D"border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt = 0pt 0.8ex; padding-left: 1ex;"> I have checked it on openldap-2.4.15. But, it still has this problem.<br>bt= w, I use cyrus-sasl-2.1.22.tar.gz for building.<br>thanks<br><br><div class= =3D"gmail_quote">2009/3/12 Pierangelo Masarati <span dir=3D"ltr"><<a hre= f=3D"mailto:openldap-its@openldap.org" target=3D"_blank">openldap-its@openl= dap.org</a>></span><div class=3D"im"> <br> <blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, = 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">2.3.32 is obsolet= e. =A0It's pointless to debug it. =A0Please check whether the<br> problem persists in 2.4.15.<br> <br> p.<br> </blockquote></div></div><br> </blockquote></div><br> --000e0cd1af8ce900de0464e92621--

1 0

Re: (ITS#6018) TLS memory leak
by timling2003＠gmail.com 12 Mar '09

12 Mar '09

--000e0cd292782d513d0464e91168 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit I have checked it on openldap-2.4.15. But, it still has this problem. btw, I use cyrus-sasl-2.1.22.tar.gz for building. thanks 2009/3/12 Pierangelo Masarati <openldap-its(a)openldap.org> > 2.3.32 is obsolete. It's pointless to debug it. Please check whether the > problem persists in 2.4.15. > > p. > --000e0cd292782d513d0464e91168 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I have checked it on openldap-2.4.15. But, it still has this problem.<br>bt= w, I use cyrus-sasl-2.1.22.tar.gz for building.<br>thanks<br><br><div class= =3D"gmail_quote">2009/3/12 Pierangelo Masarati <span dir=3D"ltr"><<a hre= f=3D"mailto:openldap-its@openldap.org">openldap-its(a)openldap.org</a>></s= pan><br> <blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, = 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">2.3.32 is obsolet= e. =A0It's pointless to debug it. =A0Please check whether the<br> problem persists in 2.4.15.<br> <br> p.<br> </blockquote></div><br> --000e0cd292782d513d0464e91168--

1 0

Re: (ITS#6017) Implement parentGUID or similar in OpenLDAP
by ando＠sys-net.it 12 Mar '09

12 Mar '09

abartlet(a)samba.org wrote: > I found the formal spec in MS-ADTS: > > It currently reads: > > 3.1.1.4.5.28 parentGUID > This attribute is not present on an object that is the root of an NC. > For all other objects, let TO be > the object from which the parentGUID attribute is being read and let > TP be TO!parent. > TO!parentGUID is equal to TP!objectGUID. Sounds like a nightmare of internal searches if we want to generate it on the fly (although possibly acceptable by those queries that require it). It might be worth to consider storing it in directory, and track add/rename operations accordingly. The overlay that implements it should also provide a tool hook for bi_tool_entry_put. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#6018) TLS memory leak
by Pierangelo Masarati 12 Mar '09

12 Mar '09

2.3.32 is obsolete. It's pointless to debug it. Please check whether the problem persists in 2.4.15. p.

1 0

(ITS#6018) TLS memory leak
by timling2003＠gmail.com 12 Mar '09

12 Mar '09

Full_Name: Tim Ling Version: 2.3.32 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (202.111.48.66) I develop a client of LDAP with TLS/SSL. This client is a daemon to query LDAP server. For SSL, I use ldap_initialize(ld, "ldaps://..."). For TLS, I use ldap_start_tls_s( ld, NULL, NULL ). I also use ldap_set_option( ld, LDAP_OPT_PROTOCOL_VERSION, &protocol ) (protocol=3) and ldap_set_option( NULL, LDAP_OPT_X_TLS_REQUIRE_CERT, &rc ) (rc=0). The method of bind is LDAP_AUTH_SIMPLE. For every request, I will call ldap_initialize(). After that, I will use ldap_unbind_s(ld). ( I cannot use ldap_pvt_tls_destroy(), because this function can be called only once ). After handling a lot of requests, it will cause memory leak.

1 0

Re: (ITS#6016) Make moduleload automatic
by ando＠sys-net.it 12 Mar '09

12 Mar '09

hyc(a)symas.com wrote: > Right. I think we'll go with another approach instead - Samba will always spit > out moduleload directives. We'll change moduleload to check for > already-existing backends or overlays, and silently succeed in those cases. Well, I think we could also provide sort of an off-line means to check what is statically built-in and what's not. In principle, one could implement tool mode in back-monitor and perform a echo "database monitor" > slapd.conf slapcat -f slapd.conf -s "cn=Backends,cn=Monitor" | grep whatever slapcat -f slapd.conf -s "cn=Overlays,cn=Monitor" | grep whatever to find what's available. If it fails, back-monitor itself is needed; then echo "modulepath path/to/back-monitor" > slapd.conf echo "moduleload back_monitor.la" >> slapd.conf echo "database monitor" >> slapd.conf slapcat -f slapd.conf -s "cn=Backends,cn=Monitor" | grep whatever slapcat -f slapd.conf -s "cn=Overlays,cn=Monitor" | grep whatever Looks like an overkill, but it might be of general usefulness. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Re: (ITS#6016) Make moduleload automatic
by hyc＠symas.com 11 Mar '09

11 Mar '09

Pierangelo Masarati wrote: > hyc(a)symas.com wrote: >> As a further clarification - we're only considering this for backends and >> overlays; other dynamically loaded elements' (like syntaxes, password hashes, >> whatever) behavior will not be changed. > > I see quite a few issues (unless already discussed). For example, one > would typically discover the need to load back_monitor.la only close to > the end of the configuration, while the module defines some specific > schema and even some specific calls that may be needed by other backends > instantiated earlier in order to allow custom monitoring. I guess the > problem can be generalized. Right. I think we'll go with another approach instead - Samba will always spit out moduleload directives. We'll change moduleload to check for already-existing backends or overlays, and silently succeed in those cases. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#6016) Make moduleload automatic
by ando＠sys-net.it 11 Mar '09

11 Mar '09

hyc(a)symas.com wrote: > abartlet(a)samba.org wrote: >> Full_Name: Andrew Bartlett >> Version: 2.4.15 >> OS: Fedora 9 >> URL: ftp://ftp.openldap.org/incoming/ >> Submission from: (NULL) (59.167.251.137) >> >> >> In Samba4, we generate a slapd.conf for OpenLDAP as part of our >> provision-backend process. This avoids administrators needing to guess at >> Samba's specific requirements. >> >> However, this places the Samba4 software in the position of having to guess how >> this host's OpenLDAP installation was compiled. In particular, we need to guess >> if the required overlays are built in, or modules. >> >> Work was done a while back to avoid us having to guess what the module path is >> (the default is is now hard-coded in the binary), but we still have to guess >> which set of modules to load. Currently this is done in 'make test' by guessing >> different sets of modules in an included 'modules.conf' and running slaptest >> until we find a combination that works. >> >> We (Samba4) would really like it if the slapd binary would load modules >> (assuming a one-to-one mapping between overlay/backend names and modules) from >> that default path, if not found static in the binary. >> >> This way, Samba would not specify modules at all in the slapd.conf, but they >> would be loaded as required, if required. >> >> Thanks, >> >> Andrew Bartlett >> >> (As discussed with Howard Chu on #openldap-devel) >> > As a further clarification - we're only considering this for backends and > overlays; other dynamically loaded elements' (like syntaxes, password hashes, > whatever) behavior will not be changed. I see quite a few issues (unless already discussed). For example, one would typically discover the need to load back_monitor.la only close to the end of the configuration, while the module defines some specific schema and even some specific calls that may be needed by other backends instantiated earlier in order to allow custom monitoring. I guess the problem can be generalized. > And before we go there, what if we just provided a slapd option to dump out > all of its compiled-in paths? Then you could inspect the modulepath and see > whether any modules of interest reside there. ? p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it ----------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Fax: +39 0382 476497 Email: ando(a)sys-net.it -----------------------------------

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs