openldap-bugs

openldap-bugs@openldap.org

1 participants
20960 discussions

(ITS#8031) suffixmassage does not seem to be working with olc configuration
by fmgre-01＠yahoo.fr 21 Jan '15

21 Jan '15

Full_Name: fred aka gnafou Version: 2.4.31 OS: debian 7 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (194.167.193.57) Hello I am trying to configure a meta database ; it seems that the uri ( described in the doc ) is called olcDbUri in the olc configuration ; and i cannot find the olc keyword for suffixmassage Thanks Fred

1 0

Re: (ITS#7145) cn=Connection 0, cn=Connections, cn=Monitor received twice
by hyc＠symas.com 21 Jan '15

21 Jan '15

varkoly(a)suse.com wrote: > Hallo, > > I've the same issue on SLES11-SP3. openLDAP version 2.4.26 > Was this issue fixed already? No, there was never any information provided on how to reproduce it. But 2.4.26 is quite old, do you still see this occurring using 2.4.40? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7145) cn=Connection 0, cn=Connections, cn=Monitor received twice
by varkoly＠suse.com 21 Jan '15

21 Jan '15

Hallo, I've the same issue on SLES11-SP3. openLDAP version 2.4.26 Kernel 3.0.101-0.15-default sles11-sp3-krb5-master:~ # ldapsearch -Y EXTERNAL -H ldapi:// -b cn=Connections,cn=Monitor -s sub '(cn=Connection 0)' SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 # extended LDIF # # LDAPv3 # base <cn=Connections,cn=Monitor> with scope subtree # filter: (cn=Connection 0) # requesting: ALL # # Connection 0, Connections, Monitor dn: cn=Connection 0,cn=Connections,cn=Monitor objectClass: monitorConnection cn: Connection 0 # Connection 0, Connections, Monitor dn: cn=Connection 0,cn=Connections,cn=Monitor objectClass: monitorConnection cn: Connection 0 # search result search: 2 result: 0 Success # numResponses: 3 # numEntries: 2 Was this issue fixed already? -- Peter Varkoly Sr. Developer SUSE Linux Enterprise Applications SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany

1 0

Re: (ITS#8030) How to find the LDAP User last logon time
by michael＠stroeder.com 21 Jan '15

21 Jan '15

Please note that the issue tracker is not for support requests. Usage questions should be sent to the openldap-technical mailing list where more people are subscribed who can answer and learn as well. raj.chinnu81(a)gmail.com wrote: > I am searching the option to find out the last logon time for LDAP user with > much no positive findings, > > I found that using 'lastbind overly' we can find the user last login time, if > yes > Please help me with the procedure to get this work. Yes, slapo-lastbind is the way to go. Please re-post on openldap-technical mailing list. Ciao, Michael.

1 0

(ITS#8030) How to find the LDAP User last logon time
by raj.chinnu81＠gmail.com 21 Jan '15

21 Jan '15

Full_Name: rajagopal Version: -2.4.39-3.el7 OS: RHEL7 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (119.225.42.74) Hi, I am searching the option to find out the last logon time for LDAP user with much no positive findings, I found that using 'lastbind overly' we can find the user last login time, if yes Please help me with the procedure to get this work. Thanks & Regards Raj

1 0

(ITS#8029) How to find the LDAP User last logon time
by raj.chinnu81＠gmail.com 21 Jan '15

21 Jan '15

1 0

Re: (ITS#8026) net-nds/openldap - powerpc-apple-darwin9-gcc: Undefined symbols for architecture ppc: "_slapi_pblock_set"
by hyc＠symas.com 21 Jan '15

21 Jan '15

daniel.ibnzayd(a)inquisitor.com wrote: > Full_Name: Daniel Ibn Zayd > Version: 2.4.38-r2 > OS: PPC > URL: https://bugs.gentoo.org/show_bug.cgi?id=536306 > Submission from: (NULL) (166.84.1.2) > > > Both of the latest builds marked stable for ppc (openldap-2.4.35-r1 and > openldap-2.4.38-r2) error out when they get to the libaddrdnvalues-plugin: > > * Building contrib-module: addrdnvalues plugin > Undefined symbols for architecture ppc: > "_slapi_pblock_set", referenced from: > _addrdnvalues_preop_init in cclXT5Cy.o > "_slapi_log_error", referenced from: > _addrdnvalues_preop_init in cclXT5Cy.o > _addrdnvalues_preop_add in cclXT5Cy.o > "_slapi_pblock_get", referenced from: > _addrdnvalues_preop_add in cclXT5Cy.o > "_slapi_entry_add_rdn_values", referenced from: > _addrdnvalues_preop_add in cclXT5Cy.o > "_slapi_send_ldap_result", referencefrfrom: > _addrdnvalues_preop_add in cclXT5Cy.o > "_ldap_err2string", referenced from: > _addrdnvalues_preop_add in cclXT5Cy.o > ld: symbol(s) not found for architecture ppc > > I've researched the plug-in and its components searching for possible fixes but > have not turned up anything. Any clues here are greatly appreciated. Appears to be a bug in gentoo's build rules for this plugin. The OpenLDAP Project doesn't supply build rules for this plugin, so there's nothing for us to fix here. Closing this ITS. Note that the function of this particular plugin was superseded long ago, there's no reason to even build it. > PS: This is a Gentoo Prefix set up I am working with. > > https://bugs.gentoo.org/show_bug.cgi?id=536306 > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#8028) NULL pointer dereference in ldap_new_connection()
by hyc＠symas.com 21 Jan '15

21 Jan '15

rohanskurane(a)gmail.com wrote: > Full_Name: Rohan Kurane > Version: 2.4.40 > OS: BSD 7.2 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (64.80.217.3) > > > In ldap_new_connection() in request.c, while setting up a connection to the LDAP > server, there is a possibility of dereferencing a NULL pointer in > lc->locnn_server Fixed in git master. Please don't send HTML emails, they're particularly unreadable with embedded code like this. > > if ( connect ) { > LDAPURLDesc **srvp, *srv = NULL; > > async % LDADAP_BOOL_GET( &ld->ld_options, LDAP_BOOL_CONNECT_ASYNC ); > > for ( srvp = srvlist; *srvp != NULL; srvp = &(*srvp)->lud_next ) { > int rc; > > rc = ldap_int_open_connection( ld, lc, *srvp, async ); > if ( rc != -1 ) { > srv = *srvp; > > 9%9 if ( ld->ld_urllist_proc && ( !async || rc != -2 ) ) { > ld->ld_urllist_proc( ld, srvlist, srvp, ld->ld_urllist_params ); > } > > break; > } > } > > if ( srv == NULL ) { > if ( !use_ldsb ) { > ber_sockbuf_free( lc->lconn_sb ); > %%D > LDAP_FREE( (char *)lc ); > ld->ld_errno = LDAP_SERVER_DOWN; > return( NULL ); > } > > lc->lconn_server = ldap_url_dup( srv ); > } > > ldap_url_dup() does a bunch of malloc's to set up lc->lconn_server. If any of > those malloc's fail, it returns NULL. The code does not check for a NULL > lconn_server pointer and tries to reference lud_exts. That can cause a > segmentation fault. > > if ( connect ) { > #ifdef HAVE_TLS > if ( lc->lconn_server->lud_exts ) { > int rc, ext = find_tls_ext( lc->lconn_server ); > if ( ext ) { > LDAPConn *savedefconn; > > Even thou this should not happen, is this a known issue and are there any plans > to fix the openldap library ? > > Thank you > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#8028) NULL pointer dereference in ldap_new_connection()
by rohanskurane＠gmail.com 21 Jan '15

21 Jan '15

Full_Name: Rohan Kurane Version: 2.4.40 OS: BSD 7.2 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (64.80.217.3) In ldap_new_connection() in request.c, while setting up a connection to the LDAP server, there is a possibility of dereferencing a NULL pointer in lc->locnn_server if ( connect ) { LDAPURLDesc **srvp, *srv = NULL; async % LDADAP_BOOL_GET( &ld->ld_options, LDAP_BOOL_CONNECT_ASYNC ); for ( srvp = srvlist; *srvp != NULL; srvp = &(*srvp)->lud_next ) { int rc; rc = ldap_int_open_connection( ld, lc, *srvp, async ); if ( rc != -1 ) { srv = *srvp; 9%9 if ( ld->ld_urllist_proc && ( !async || rc != -2 ) ) { ld->ld_urllist_proc( ld, srvlist, srvp, ld->ld_urllist_params ); } break; } } if ( srv == NULL ) { if ( !use_ldsb ) { ber_sockbuf_free( lc->lconn_sb ); %%D LDAP_FREE( (char *)lc ); ld->ld_errno = LDAP_SERVER_DOWN; return( NULL ); } lc->lconn_server = ldap_url_dup( srv ); } ldap_url_dup() does a bunch of malloc's to set up lc->lconn_server. If any of those malloc's fail, it returns NULL. The code does not check for a NULL lconn_server pointer and tries to reference lud_exts. That can cause a segmentation fault. if ( connect ) { #ifdef HAVE_TLS if ( lc->lconn_server->lud_exts ) { int rc, ext = find_tls_ext( lc->lconn_server ); if ( ext ) { LDAPConn *savedefconn; Even thou this should not happen, is this a known issue and are there any plans to fix the openldap library ? Thank you

1 0

Re: (ITS#8027) ldapsearch -E deref=member: crashes slapd
by hyc＠symas.com 19 Jan '15

19 Jan '15

ryan(a)nardis.ca wrote: > Full_Name: Ryan Tandy > Version: master (7df548d), RE24 (2b14bbc) > OS: Debian unstable > URL: > Submission from: (NULL) (142.32.208.227) > > > If you use the deref control but leave the list of requested attributes empty, > slapd crashes. > > ldapsearch [...] -E deref=member: > The ldapsearch manpage implies this probably isn't valid, but it still accepted > it. (FWIW, I tried it just to see whether it would return all attributes or > none.) I couldn't tell from draft-ldap-deref-00 whether an empty attr list is > considered a valid request. > Patched in master to reject a request with an empty attr list. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs