openldap-bugs

openldap-bugs@openldap.org

1 participants
21001 discussions

(ITS#5591) olcSpReloadHint attribute missing from olcSyncProvConfig objectClass
by mark.horstman＠att.com 02 Jul '08

02 Jul '08

Full_Name: Mark Horstman Version: 2.4.10 OS: Linux 2.6.9-67.0.4.ELsmp 2.6.9-67.0.15.ELsmp i686 i686 i386 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (144.160.98.31) servers/slapd/overlays/syncprov.c defines the olcSpReloadHint attribute but does not include it in the olcSyncProvConfig definition. This seems to be why one cannot add that attribute to a syncprov overlay configured in slapd.d/cn=config.

1 0

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by jstrunk＠math.utexas.edu 02 Jul '08

02 Jul '08

On Wednesday 02 July 2008 10:05:02 am Howard Chu wrote: > Jeff Strunk wrote: > > One example is adding the olcSyncrepl attribute to > > olcDatabase={1}hdb,cn=config . Ldapmodify reported success. Ldapsearch > > shows the new attribute. syncrepl works. > > However, /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif > > does not have an olcSyncrepl attribute. When slapd is restarted, the > > olcSyncrepl attribute is missing. > > > > The same thing happened when adding the entry for the syncrepl overlay. > > Have you successfully run "make test"? Those exact operations are part of > test050... Have you got any slapd debug messages from these modification > attempts? This was an Ubuntu issue. They created an apparmor profile for /usr/sbin/slapd, but they didn't let it write to /etc/ldap/slapd.d . It the debug log, you'll find a permission denied error when trying to write a tempfile with this bug. It works with the following line in /etc/apparmor.d/usr.sbin.slapd : /etc/ldap/slapd.d/** rw, My strange symptom of only being able to write to cn=config.ldif was because I used the following line instead: /etc/ldap/slapd.d/* rw, Thanks, Jeff

1 0

Re: (ITS#5589) Segfault in syncrepl on provider
by michael＠fladi.at 02 Jul '08

02 Jul '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Yes, I can confirm that the segfault is now gone in CVS. Syncrepl works as expected. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkhrmfoACgkQeJ3z1zFMUGbzjgCeLn+en9DepG5UvwVDyBTPcNav A1EAniRDgkQI8/MZF4o8yXSr552+NQZz =gvp/ -----END PGP SIGNATURE-----

1 0

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by hyc＠symas.com 02 Jul '08

02 Jul '08

Jeff Strunk wrote: > One example is adding the olcSyncrepl attribute to > olcDatabase={1}hdb,cn=config . Ldapmodify reported success. Ldapsearch shows > the new attribute. syncrepl works. > However, /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif does > not have an olcSyncrepl attribute. When slapd is restarted, the olcSyncrepl > attribute is missing. > > The same thing happened when adding the entry for the syncrepl overlay. Have you successfully run "make test"? Those exact operations are part of test050... Have you got any slapd debug messages from these modification attempts? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by jstrunk＠math.utexas.edu 02 Jul '08

02 Jul '08

On Wednesday 02 July 2008 09:49:14 am Howard Chu wrote: > jstrunk(a)math.utexas.edu wrote: > > Full_Name: Jeff Strunk > > Version: 2.4.9-0ubuntu0.8.04 > > OS: Ubuntu 8.04 > > URL: > > Submission from: (NULL) (146.6.139.147) > > > > > > I am setting up a new LDAP server and trying to utilize the cn=config > > configuration style. While testing it out, I noticed that changes I make > > to cn=config are getting written to /etc/ldap/slapd.d/cn=config/ldif, but > > changes made to olcDatabase={1}hdb,cn=config are not getting written to > > /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif or anything > > else. > > > > What could be happening? > > Impossible to guess with the info you've provided. What are the changes you > tried to make that aren't being saved? One example is adding the olcSyncrepl attribute to olcDatabase={1}hdb,cn=config . Ldapmodify reported success. Ldapsearch shows the new attribute. syncrepl works. However, /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif does not have an olcSyncrepl attribute. When slapd is restarted, the olcSyncrepl attribute is missing. The same thing happened when adding the entry for the syncrepl overlay. Thank you, Jeff

1 0

Re: (ITS#5590) Method for storing last successful bind by a user
by hyc＠symas.com 02 Jul '08

02 Jul '08

prieheck(a)iwu.edu wrote: > Full_Name: Pat Riehecky > Version: 2.4.10 > OS: Ubuntu Linux 8.04, kernel 2.6.24 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (198.178.132.251) > > > Our internal auditing system is poor. Periodically I am asked about how often > certain classes of users use our system. As a University our account database > just grows and grows. It would be nice to have a metric for how often alumni > use their accounts. I envision something similar to the modifyTimestamp that > OpenLDAP already records. This will assist with various types of tracking in > environments where ppolicy cannot be implemented due to either politics or > limitations. I suggest you use slapo-accesslog(5) and log Bind requests there; that's what the overlay was designed for... -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5587) some changes in cn=config are not written to slapd.d
by hyc＠symas.com 02 Jul '08

02 Jul '08

jstrunk(a)math.utexas.edu wrote: > Full_Name: Jeff Strunk > Version: 2.4.9-0ubuntu0.8.04 > OS: Ubuntu 8.04 > URL: > Submission from: (NULL) (146.6.139.147) > > > I am setting up a new LDAP server and trying to utilize the cn=config > configuration style. While testing it out, I noticed that changes I make to > cn=config are getting written to /etc/ldap/slapd.d/cn=config/ldif, but changes > made to olcDatabase={1}hdb,cn=config are not getting written to > /etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb,cn=config.ldif or anything else. > > What could be happening? Impossible to guess with the info you've provided. What are the changes you tried to make that aren't being saved? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#5589) Segfault in syncrepl on provider
by hyc＠symas.com 02 Jul '08

02 Jul '08

michael(a)fladi.at wrote: > Full_Name: Michael Fladischer > Version: 2.4.10 > OS: Debian GNU/Linux Unstable > URL: http://storage.fladi.at/~fladischer.michael/slapd/ > Submission from: (NULL) (193.170.104.18) > > > I'm running two instances of slapd (2.4.10 from Debian/Unstable) on separate > machines. > One is the master/provider and the other the slave, pulling changes via syncrepl > from the provider. > Since 2.4.9 the provider slapd instance crashes with a segfault when the slave > attempts to search for the latest changes. If there are no changes the operation > completes successful. > If I change an attribute of an object on the master (add/delete/modify) the > slapd instance crashes with a segfault immediately the moment when the slave > starts his search. > I can reproduce this every time but only with a slave slapd doing the search. > The segfault does not occur when searching with ldapsearch. > > A backtrace can be found at the provided URL. Thanks for the report, a fix is now in CVS HEAD. Please test. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#5590) Method for storing last successful bind by a user
by prieheck＠iwu.edu 02 Jul '08

02 Jul '08

Full_Name: Pat Riehecky Version: 2.4.10 OS: Ubuntu Linux 8.04, kernel 2.6.24 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (198.178.132.251) Our internal auditing system is poor. Periodically I am asked about how often certain classes of users use our system. As a University our account database just grows and grows. It would be nice to have a metric for how often alumni use their accounts. I envision something similar to the modifyTimestamp that OpenLDAP already records. This will assist with various types of tracking in environments where ppolicy cannot be implemented due to either politics or limitations.

1 0

(ITS#5589) Segfault in syncrepl on provider
by michael＠fladi.at 02 Jul '08

02 Jul '08

Full_Name: Michael Fladischer Version: 2.4.10 OS: Debian GNU/Linux Unstable URL: http://storage.fladi.at/~fladischer.michael/slapd/ Submission from: (NULL) (193.170.104.18) I'm running two instances of slapd (2.4.10 from Debian/Unstable) on separate machines. One is the master/provider and the other the slave, pulling changes via syncrepl from the provider. Since 2.4.9 the provider slapd instance crashes with a segfault when the slave attempts to search for the latest changes. If there are no changes the operation completes successful. If I change an attribute of an object on the master (add/delete/modify) the slapd instance crashes with a segfault immediately the moment when the slave starts his search. I can reproduce this every time but only with a slave slapd doing the search. The segfault does not occur when searching with ldapsearch. A backtrace can be found at the provided URL.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs