openldap-bugs

openldap-bugs@openldap.org

1 participants
20996 discussions

[Issue 9179] back-ldap SASL proxy authorization
by openldap-its＠openldap.org 01 Feb '21

01 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9179 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Keywords|reviewed | Resolution|--- |TEST --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 20ec1289 by Ondřej Kuzník at 2021-02-01T14:22:45+00:00 ITS#9179 Always use effective identity when proxying • 4a02ae13 by Ondřej Kuzník at 2021-02-01T16:04:52+00:00 ITS#6518 When using proxyauthz, replace existing control -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8541] test062 periodically core dumps
by openldap-its＠openldap.org 01 Feb '21

01 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=8541 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.4.53 |2.5.1 Keywords|OL_2_5_REQ, reviewed | --- Comment #7 from Quanah Gibson-Mount <quanah(a)openldap.org> --- commit 0da38889e1c224e310d3039db7791fcc69fee6e5 Author: Howard Chu <hyc(a)openldap.org> Date: Sun Jan 31 15:21:55 2021 +0000 ITS#8541 fix data race in syncprov removal -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 9447] New: Defining MDB_DEBUG has no effect
by openldap-its＠openldap.org 01 Feb '21

01 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9447 Issue ID: 9447 Summary: Defining MDB_DEBUG has no effect Product: LMDB Version: unspecified Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: liblmdb Assignee: bugs(a)openldap.org Reporter: Per.Mildner(a)ri.se Target Milestone: --- I tried to compile mdb.c with -DMDB_DEBUG=2 to get some debug output, but nothing was written. Looking at mdb.c it looks as if the code block that sets the mdb_debug static flag should be moved to above the line that does txn->mt_txnid++; (since mt_txnid is unsigned and mdb_debug_start starts out as zero and is never changed, so txn->mt_txnid+1 would never be zero unless it wraps around or is initialized to (size_t)-1 somewhere). Moving the code block does indeed cause a lot of debug messages to be written. This is lmdb 5b75edb6337b28669c1370bc33442e272e72f91a but looking at the git history it looks as if the code has been the same since mdb_debug was introduced so perhaps the code never worked. The code at https://git.openldap.org/openldap/openldap/-/blob/master/libraries/liblmdb/… looks like: txn->mt_txnid++; #if MDB_DEBUG if (txn->mt_txnid == mdb_debug_start) mdb_debug = 1; #endif (I am new to the code and to lmdb so apologies if I missed something obvious.) -- You are receiving this mail because: You are on the CC list for the issue.

1 3

[Bug 9205] New: Openldap 2.4.49 with overlays syncrepl+ppolicy+chain+ldap
by openldap-its＠openldap.org 01 Feb '21

01 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9205 Bug ID: 9205 Summary: Openldap 2.4.49 with overlays syncrepl+ppolicy+chain+ldap Product: OpenLDAP Version: 2.4.49 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: overlays Assignee: bugs(a)openldap.org Reporter: frederic.poisson(a)admin.gmessaging.net Target Milestone: --- Created attachment 700 --> https://bugs.openldap.org/attachment.cgi?id=700&action=edit test script copied from test022-ppolicy and modified to show the trouble Hello, I'm doing a OpenLDAP test with a master/slave replication configuration including ppolicy overlay. I would like to enable password change from the slave replica with chain overlay, in order to validate the ppolicy olcPPolicyForwardUpdates attribute to TRUE. I'm using LDAPS from slave to master with SASL External authentication with client certificate. The client certificate correspond to a user DN entry with "manage" rights on the master server (the same used for the replication). This user DN has authzTo attribute in order to match the correct PROXYAUTHZ request from its dn to user DN. All of this configuration works on replica when i do first a failed authentication (err=49) on replica. The pwdFailureTime value is updated on the DN entry from replica to slave normally. I'm also able to do after some self entry update on some attribute such as password or others from replica to master. But the weird behavior is that i need to run first an failed authentication, otherwise if i try to change attribute on the slave server, it respond an err=80 "Error: ldap_back_is_proxy_authz returned 0, misconfigured URI?". The only way to retrieve correct behavior is to restart slapd, and redo one failed authentication first. It seems that the chain overlay do not connect the master server at startup. I've done a modification of test script test022-ppolicy to test022-policy-chain which use the same LDIF source and show the problem of modification on the consumer not "relayed" to the supplier if a fail operation is not done before. Regards -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Issue 9179] back-ldap SASL proxy authorization
by openldap-its＠openldap.org 01 Feb '21

01 Feb '21

https://bugs.openldap.org/show_bug.cgi?id=9179 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |frederic.poisson(a)admin.gmes | |saging.net --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- *** Issue 9205 has been marked as a duplicate of this issue. *** -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8541] test062 periodically core dumps
by openldap-its＠openldap.org 31 Jan '21

31 Jan '21

https://bugs.openldap.org/show_bug.cgi?id=8541 Howard Chu <hyc(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|CONFIRMED |RESOLVED --- Comment #6 from Howard Chu <hyc(a)openldap.org> --- fix in master -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 7766] Account unlocked in slave after two modifications on a master (overlay ppolicy)
by openldap-its＠openldap.org 28 Jan '21

28 Jan '21

https://bugs.openldap.org/show_bug.cgi?id=7766 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Keywords|OL_2_5_REQ, replication, | |reviewed | Status|UNCONFIRMED |RESOLVED --- Comment #11 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 84db7cb2 by Ondřej Kuzník at 2021-01-28T20:59:17+00:00 ITS#7766 Include all relevant attributes in diff -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8580] force openssl use the server side cipher preference
by openldap-its＠openldap.org 28 Jan '21

28 Jan '21

https://bugs.openldap.org/show_bug.cgi?id=8580 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|UNCONFIRMED |RESOLVED Keywords|has_patch, OL_2_5_REQ, | |reviewed | --- Comment #4 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 61f61904 by Quanah Gibson-Mount at 2021-01-28T20:22:50+00:00 ITS#8580 - Explicitly honor the server side cipher suite preference -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8662] Update mdb_load to safely load back-mdb databases
by openldap-its＠openldap.org 28 Jan '21

28 Jan '21

https://bugs.openldap.org/show_bug.cgi?id=8662 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|OL_2_5_REQ, reviewed | -- You are receiving this mail because: You are on the CC list for the issue.

1 0

[Issue 8662] Update mdb_load to safely load back-mdb databases
by openldap-its＠openldap.org 28 Jan '21

28 Jan '21

https://bugs.openldap.org/show_bug.cgi?id=8662 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|slapd |liblmdb Product|OpenLDAP |LMDB Version|unspecified |0.9.26 Target Milestone|2.5.1 |0.9.27 --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- trunk: Commits: • 7796aaeb by Howard Chu at 2021-01-28T18:26:41+00:00 ITS#8662 Add -a append option to mdb_load To allow reloading of custom-sorted DBs from mdb_dump • bedc82a2 by Howard Chu at 2021-01-28T18:28:32+00:00 ITS#8662 -- You are receiving this mail because: You are on the CC list for the issue.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs