openldap-bugs

openldap-bugs@openldap.org

20960 discussions

Re: (ITS#8111) Re-ordering schema attributeTypes crashes slapd
by hyc＠symas.com 23 Apr '15

23 Apr '15

zach(a)puppetlabs.com wrote: > Below is the attempted ldif modification. > > > dn: cn={5}puppet,cn=schema,cn=config > changetype: modify > replace: olcAttributeTypes For completeness' sake, so we can reproduce this, what was the original content of this schema? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8108) possible bug in slapcat(8)
by hyc＠symas.com 23 Apr '15

23 Apr '15

igor.shmukler(a)gmail.com wrote: > Full_Name: Igor Shmukler > Version: 2.4 > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (82.146.103.114) > > > I make a use of olcHidden. When set to true, olcHidden breaks slapcat. > $ sudo slapcat -n 0 > 5530b282 olcRootPW: value #0: <olcRootPW> can only be set when rootdn > is under suffix > 5530b282 config error processing olcDatabase={2}hdb,cn=config: > <olcRootPW> can only be set when rootdn is under suffix > slapcat: bad configuration file! > > Thanks for the report, fixed now in git master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8109) SEGFAULT mdb_cursor_del mdb_cursor_get(MDB_PREV)
by hyc＠symas.com 23 Apr '15

23 Apr '15

rouzier(a)gmail.com wrote: > Full_Name: James Rouzier > Version: LMDB mdb.master > OS: linux > URL: https://gist.github.com/rouzier/2d268a2f24e82e00f498 > Submission from: (NULL) (70.81.32.80) > > > When iterating with a cursor using MDB_PREV and deleting entries using > mdb_cursor_del. > It will crash when calling mdb_cursor_get after the last entry was deleted. > I am using the latest version of LMDB in git. Thanks for the report, fixed now in git. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8107) olcMemberOfDangling: error doesn't prevent adding nonexistent member to group
by ryan＠nardis.ca 23 Apr '15

23 Apr '15

Got it. ftp://ftp.openldap.org/incoming/20150422_rtandy_ITS-8107-don-t-shadow-rc.pa…

1 0

Re: (ITS#8107) olcMemberOfDangling: error doesn't prevent adding nonexistent member to group
by ryan＠nardis.ca 23 Apr '15

23 Apr '15

On Sat, Apr 18, 2015 at 10:47:57PM +0000, ryan(a)nardis.ca wrote: >Adding a new group containing a nonexistent member, or or a nonexistent >member to an existing group, triggers the following AddressSanitizer >splat. No error when adding a valid member, or with memberof disabled. That part turned out to be my fault, actually: > #0 0xebdb1e in lutil_strncopy /home/ryan/pkg/openldap/openldap/libraries/liblutil/utils.c:317:2 > #1 0xd10adb in mdb_dn2id /home/ryan/pkg/openldap/openldap/servers/slapd/back-mdb/dn2id.c:360:9 The nonexistent entry I was trying to add was outside the db suffix. Therefore nrlen in mdb_dn2id was wrong (in my specific case, negative) and things got worse from there. Testing with a nonexistent entry under the correct suffix, there are no complaints from AddressSanitizer. The buggy behaviour is still present, however: the member value is added despite returning a 'constraint violation' result.

1 0

(ITS#8113) Missing man page information for ldap_str2dn
by quanah＠openldap.org 23 Apr '15

23 Apr '15

Full_Name: Quanah Gibson-Mount Version: RE24 OS: NA URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.52.177) According to a code comment, ldap_explode_rdn is deprecated, and the replacement is ldap_str2dn However, there is no man page info for ldap_str2dn

1 0

Re: (ITS#8112) man pages suggest using deprecated fuctions
by quanah＠zimbra.com 23 Apr '15

23 Apr '15

--On Wednesday, April 22, 2015 11:33 PM +0000 quanah(a)openldap.org wrote: > Full_Name: Quanah Gibson-Mount > Version: RE24 > OS: NA > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (75.111.52.177) > > > ldap_get_dn(3) states that when using the ldap_explode_rdn function, > ldap_value_free can be used to free the results. However, > ldap_value_free is deprecated. According to *some* of the code, ldap_explode_rdn is actually deprecated: ldap_explode_rdn LDAP_P(( /* deprecated, ldap_str2rdn */ However, it is not wrapped in an ifdef for deprecated, nor is it listed as such in the manpage. --Quanah -- Quanah Gibson-Mount Platform Architect Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#8112) man pages suggest using deprecated fuctions
by quanah＠openldap.org 23 Apr '15

23 Apr '15

Full_Name: Quanah Gibson-Mount Version: RE24 OS: NA URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (75.111.52.177) ldap_get_dn(3) states that when using the ldap_explode_rdn function, ldap_value_free can be used to free the results. However, ldap_value_free is deprecated. Making things worse, it is suggested that the replacement for ldap_value_free is ldap_value_free_len. ldap_value_free_len expects a bval array, whereas ldap_explode_rdn returns a char* array. Finally, if you look at the actual OpenLDAP library code, what is done there is: vv = ldap_explode_rdn( values[ n ], 0 ); LDAP_VFREE( vv ); where: #define LDAP_VFREE(v) (ber_memvfree_x((void **)(v),NULL)) so NEITHER ldap_value_free NOR ldap_value_free_len are even used when using the ldap_explode_rdn function.

1 0

Re: (ITS#8111) Re-ordering schema attributeTypes crashes slapd
by zach＠puppetlabs.com 23 Apr '15

23 Apr '15

I should have noted that this is in a mutli master replication setup where all databases are being replicated, including cn=3Dconfig. --=20 Zach Leslie :: Puppet Labs

1 0

Re: (ITS#8111) Re-ordering schema attributeTypes crashes slapd
by zach＠puppetlabs.com 22 Apr '15

22 Apr '15

Below is the attempted ldif modification. dn: cn={5}puppet,cn=schema,cn=config changetype: modify replace: olcAttributeTypes olcAttributeTypes: {1}( 1.3.6.1.4.1.34380.556 NAME ('github' 'githubUsername') DESC 'github' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatc h SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {2}( 1.3.6.1.4.1.34380.558 NAME ('pronoun' 'preferredPronou n') DESC 'prefered gender pronoun' EQUALITY caseIgnoreMatch SUBSTR case IgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {3}( 1.3.6.1.4.1.34380.560 NAME 'skills' DESC 'skills, lang uages, specialties' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsM atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {4}( 1.3.6.1.4.1.34380.562 NAME 'onCall' DESC 'whether they are oncall or not that week' EQUALITY booleanMatch SYNTAX 1.3.6.1.4.1.14 66.115.121.1.7 ) olcAttributeTypes: {5}( 1.3.6.1.4.1.34380.563 NAME 'googleGroups' DESC 'email groups they are in' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsM atch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {6}( 1.3.6.1.4.1.34380.566 NAME 'projects' DESC 'ownership of projects' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {7}( 1.3.6.1.4.1.34380.569 NAME 'interestingFact' DESC 'int eresting fact from first all hands' EQUALITY caseIgnoreMatch SUBSTR caseI gnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {8}( 1.3.6.1.4.1.34380.570 NAME ('twitterHandle' 'twitter') DESC 'twitter handle' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstrin gsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {9}( 1.3.6.1.4.1.34380.571 NAME ('ircNickname' 'irc') DESC 'irc nickname' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {10}( 1.3.6.1.4.1.34380.572 NAME 'shirtSize' DESC 'shirtsiz e' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3 .6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {11}( 1.3.6.1.4.1.34380.573 NAME 'dietaryRestrictions' DE SC 'carnivore, omnivore, veg, vegan, glutenfree, soyfree, air free' EQUALIT Y caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.146 6.115.121.1.15 ) olcAttributeTypes: {12}( 1.3.6.1.4.1.34380.567 NAME 'steamAccount' DESC 'ste amaccount for games' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstrings Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {13}( 1.3.6.1.4.1.34380.801 NAME 'bribeMeWith' DESC 'thin gs I like' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SY NTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {14}( 1.3.6.1.4.1.34380.802 NAME 'languages' DESC 'what d o you speak' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {15}( 1.3.6.1.4.1.34380.574 NAME 'x-kvm-access' DESC 'kvm access level' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) olcAttributeTypes: {2}( 1.3.6.1.4.1.34380.557 NAME ('forge' 'forgeUsername') DESC 'forge' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) - -- Zach Leslie :: Puppet Labs

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs