openldap-bugs

openldap-bugs@openldap.org

1 participants
20969 discussions

[Bug 8802] ldappasswd ppolicy
by openldap-its＠openldap.org 24 Mar '20

24 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=8802 --- Comment #2 from Ryan Tandy <ryan(a)openldap.org> --- I don't understand what's going on here. Why do we see "replace pwdChangedTime" and "add pwdHistory" twice for a single "replace userPassword"? I'm testing exactly the same version as the reporter and those only occur once each for me. I think this is an invalid configuration, with ppolicy configured _twice_ on the database. If I do this invalid config: overlay ppolicy ppolicy_default cn=ppolicy,dc=example,dc=com overlay ppolicy ppolicy_default cn=ppolicy,dc=example,dc=com then I get that same result: 5e7abb2b mdb_modify_internal: replace userPassword 5e7abb2b mdb_modify_internal: replace pwdChangedTime 5e7abb2b mdb_modify_internal: add pwdHistory 5e7abb2b mdb_modify_internal: replace pwdChangedTime 5e7abb2b mdb_modify_internal: add pwdHistory 5e7abb2b mdb_modify_internal: 20 modify/add: pwdHistory: value #0 already exists 5e7abb2b mdb_modify: modify failed (20) Mats, can you please confirm this was a configuration error and we can close it? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9195] New: Poor error messaging for TLS connect/accept with GnuTLS
by openldap-its＠openldap.org 24 Mar '20

24 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=9195 Bug ID: 9195 Summary: Poor error messaging for TLS connect/accept with GnuTLS Product: OpenLDAP Version: 2.4.49 Hardware: All OS: All Status: UNCONFIRMED Severity: normal Priority: --- Component: libraries Assignee: bugs(a)openldap.org Reporter: ryan(a)openldap.org Target Milestone: --- When doing something like: ./clients/tools/ldapsearch -H ldap://171.67.218.153 -ZZ -x With OpenSSL we get: ldap_start_tls: Connect error (-11) additional info: TLS: hostname does not match CN in peer certificate With GnuTLS we just get: ldap_start_tls: Connect error (-11) additional info: (unknown error code) We can do better. My thoughts right now are: 1. stash the verify status in the session; 2. return a specific value to indicate verify failed; 3. have tlsg_session_errmsg recognize that value and print the detailed verification status. GnuTLS 3.5 added GNUTLS_E_CERTIFICATE_VERIFICATION_ERROR, but I don't think it's worth bumping our required version for that alone. For the time being (i.e. 2.5) I'd like to keep 3.3 and maybe even 3.2 supported... -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 8683] SLAPD_META_CLIENT_PR hidden behind LDAP_DEVEL
by openldap-its＠openldap.org 24 Mar '20

24 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=8683 --- Comment #3 from Quanah Gibson-Mount <quanah(a)openldap.org> --- Commits: • 71d4e47e by Quanah Gibson-Mount at 2020-03-24T17:03:29+00:00 ITS#8683 - Delete client-pr information from slapd-meta(5) for RE24 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 8683] SLAPD_META_CLIENT_PR hidden behind LDAP_DEVEL
by openldap-its＠openldap.org 24 Mar '20

24 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=8683 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 8683] SLAPD_META_CLIENT_PR hidden behind LDAP_DEVEL
by openldap-its＠openldap.org 24 Mar '20

24 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=8683 --- Comment #2 from Quanah Gibson-Mount <quanah(a)openldap.org> --- https://git.openldap.org/openldap/openldap/-/merge_requests/2 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9160] Out-of-memory handling issues
by openldap-its＠openldap.org 24 Mar '20

24 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=9160 Ondřej Kuzník <ondra(a)mistotebe.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |TEST --- Comment #3 from Ondřej Kuzník <ondra(a)mistotebe.net> --- In master since 47e0e3fdb59d8be9cc44e814ba03684d352916a6 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 6035] slapd requires restart after modifying olcAuthzRegexp
by openldap-its＠openldap.org 23 Mar '20

23 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=6035 --- Comment #9 from Ryan Tandy <ryan(a)openldap.org> --- Merge request: https://git.openldap.org/openldap/openldap/-/merge_requests/1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9179] back-ldap SASL proxy authorization
by openldap-its＠openldap.org 23 Mar '20

23 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=9179 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.5.0 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9176] libldap support for TLSv1.3 Encrypted SNI
by openldap-its＠openldap.org 23 Mar '20

23 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=9176 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.5.0 Keywords| |OL_2_5_REQ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 9165] Paged search results on FreeBSD exceed static buffer
by openldap-its＠openldap.org 23 Mar '20

23 Mar '20

https://bugs.openldap.org/show_bug.cgi?id=9165 Quanah Gibson-Mount <quanah(a)openldap.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.5.0 Keywords| |OL_2_5_REQ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs