openldap-bugs

openldap-bugs@openldap.org

1 participants
20959 discussions

(ITS#4979) Bad response when requesting bad attributes
by elecharny＠apache.org 22 May '07

22 May '07

Full_Name: Emmanuel Lecharny Version: 2.3.32 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (82.236.207.89) When searching for entries using attributes to filter the result, you get all the entries attributes if you give a wrong attribute : ldapsearch -h localhost -p 10389 -D "uid=Admin,ou=system" -w secret -b "dc=example,dc=com" -s sub "(objectClass=*)" 9.9.9 will correctly returns only the DNs of all found entries, as if the 9.9.9 attribute was 1.1 but ldapsearch -h localhost -p 10389 -D "uid=Admin,ou=system" -w secret -b "dc=example,dc=com" -s sub "(objectClass=*)" person will return all entries attributes, as if the 'person' was substituted by "*" Of course, 'person' is not an attribute, but an objectClass, but the user intent was to get only one single attribute value, so I don't think that returning everything is correct. This is obviously not a serious issue.

1 0

Re: (ITS#4951) [contrib] RADIUS password module fixes
by ando＠sys-net.it 21 May '07

21 May '07

richton(a)nbcs.rutgers.edu wrote: >>> * config_filename could be passed to rad_config without initialization (when >>> accepting the default). >> rejected: global variables are always zeroed. > > Hmmmm. I agree that a static pointer variable should be NULL, but it's > definitely not what I'm seeing in dbx. I'll try and take it up with the > Sun Studio people... If that's an issue, I have no problem in explicitly setting that pointer to NULL. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

1 0

Re: (ITS#4951) [contrib] RADIUS password module fixes
by richton＠nbcs.rutgers.edu 21 May '07

21 May '07

>> * config_filename could be passed to rad_config without initialization (when >> accepting the default). > > rejected: global variables are always zeroed. Hmmmm. I agree that a static pointer variable should be NULL, but it's definitely not what I'm seeing in dbx. I'll try and take it up with the Sun Studio people... The rest looks OK, thanks.

1 0

Re: (ITS#4966) OpenLDAP 2.3.35 crashes on valsort overlay
by digant＠stanford.edu 21 May '07

21 May '07

Nothing that useful i could find: $4 = { sml_mod = { sm_op = 1, sm_flags = 0, sm_desc = 0x2aedc50244d0, sm_type = { bv_len = 20, bv_val = 0x2aabae9df741 "suorgcontactstanford" }, sm_values = 0x0, sm_nvalues = 0x0 }, sml_next = 0x2aaaaaaf4ee0 }

1 0

(ITS#4978) slapo-ppolicy.5 and missing Zero value example
by ghenry＠OpenLDAP.org 21 May '07

21 May '07

Full_Name: Gavin Henry Version: 2.3.35 and HEAD OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (212.159.59.85) Submitted by: ghenry Dear all, draft-behera-ldap-password-policy-xx.txt and ppolicy.schema list: "A 000001010000Z value means that the account has been locked permanently, and that only a password administrator can unlock the account." But pwdAccountLockedTime doesn't use integerMatch, so an example of the above syntax is needed with anything that has a generalizedTimeMatch. I think pwdAccountLockedTime is the only one? Please correct me if I'm wrong, otherwise I'll update the man page. Thanks, Gavin.

1 0

(ITS#4977) check parse_sync_cookie return in syncprov overlay
by donn＠u.washington.edu 21 May '07

21 May '07

Full_Name: Donn Cave Version: 2.4.4 OS: Red Hat RHEL 3 URL: Submission from: (NULL) (128.95.135.150) Control from 2.3.24 syncrepl client fails "sid=" parse in slap_parse_sync_cookie(), but return -1 is ignored, in syncprov_parseCtrl() ca. line 2770. slapd crashes in syncprov_op_search ca. line 2106, because srs->sr_state.sids is null. Reproduce by sending control with invalid "sid=" value. That might be any 2.3 client, or there may be something else whacked here. Client configured refreshAndPersist. I added a check for negative return value to the check for negative rid. Result is "err=2 nentries=0 text=Sync control : cookie parsing error", ... "do_search: get_ctrls failed", which I assume is good. At least, it doesn't crash.

1 0

Re: (ITS#4975) --without-tls is broken
by hyc＠symas.com 21 May '07

21 May '07

hyc(a)symas.com wrote: > ando(a)sys-net.it wrote: >>> I haven't kept track of the TLS changes though, so I don't know if just >>> moving #ifdefs around is the right fix. >> As far as I understood it, the rationale of those changes was to be able >> to handle, and significantly parse certificates, independently of any TLS >> capability (including when no TLS is available). If you find a >> combination of #ifdef's that gives this, then it should be the right one. > > Your understanding is correct. I can sort this out if you haven't already. > -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#4965) slapd stops if access to cn=monitor is restricted
by ando＠sys-net.it 21 May '07

21 May '07

ali.pouya(a)free.fr wrote: > Hi Pierangelo; > I tested with HEAD (checked out on Sunday Mai 20) but the problem is > the same : To configure the Monitor database I have to grant read acces > to *. Can you post your slapd.conf? Thanks, p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

1 0

Re: (ITS#4965) slapd stops if access to cn=monitor is restricted
by ali.pouya＠free.fr 21 May '07

21 May '07

Hi Pierangelo; I tested with HEAD (checked out on Sunday Mai 20) but the problem is the same : To configure the Monitor database I have to grant read acces to *. I confirm that I do not have a default rootdn for Monitor. Best Regards Ali

1 0

Re: (ITS#4976) memory corruption in test008-concurrency
by hyc＠symas.com 21 May '07

21 May '07

h.b.furuseth(a)usit.uio.no wrote: > Full_Name: Hallvard B Furuseth > Version: HEAD, RE23 > OS: Linux > URL: > Submission from: (NULL) (129.240.202.105) > Submitted by: hallvard > > > Slapd sometimes crashes with memory corruption in test008-concurrency. Try using ElectricFence, with my pthread patches. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs