openldap-bugs

openldap-bugs@openldap.org

1 participants
21001 discussions

(ITS#7988) Reflected XSS vulnerability in www.openldap.org
by yann.cam＠gmail.com 26 Nov '14

26 Nov '14

Full_Name: Yann CAM Version: OS: URL: http://www.openldap.org/its/ Submission from: (NULL) (2a01:e34:edbf:a5d0:845:664b:ce80:cf7b) I'm contacting you to inform you about the presence of a Reflected XSS vulnerability on the www.openldap.org main domain. Through this vulnerability, an attacker could tamper with page rendering, redirect victims to fake OpenLdap pages, or capture users data. This reflected XSS is on GET "id" variable of the current "JitterBug" tracker, and is not properly sanitized before being used to his page. The JitterBug tracker project seems to be suspended (https://www.samba.org/cgi-bin/jitterbug/), this vulnerability isn't specific to your bug tracker. I just open a ticket to report this vulnerability to the samba-jitterbug maintainers (https://bugzilla.samba.org/show_bug.cgi?id=10967). Proof of Concept, tested with Firefox 33.1.1 (screenshot in attachment): http://www.openldap.org/its/index.cgi/Documentation?id=1337</TITLE><img src=x onerror="alert(/Reflected XSS - Yann CAM @ASAfety/)" /><TITLE>;selectid=1337 Screenshots available : http://www.asafety.fr/data/20141126-RXSS_openldap.org_synetis_001.png http://www.asafety.fr/data/20141126-RXSS_openldap.org_synetis_002.png Feel free to contact me for more information, Best regards, Yann CAM - Security Consultant @ASafety - Synetis - www.synetis.com

1 0

Re: (ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by leo＠yuriev.ru 26 Nov '14

26 Nov '14

--e89a8f8389d1c4af560508c7cb28 Content-Type: text/plain; charset=UTF-8 Just run a 'runme.sh' from attached tarball. Problem (coredump) usually is reproduced for 10-20 min. I will try 'git bisect'. Leonid. --e89a8f8389d1c4af560508c7cb28 Content-Type: application/x-gzip; name="its7987-testcase.tar.gz" Content-Disposition: attachment; filename="its7987-testcase.tar.gz" Content-Transfer-Encoding: base64 X-Attachment-Id: f_i2z2cx130 H4sIADIkdlQAA+0723LbyLF+Bb6iF5JWoE2CN1Gy6eUe2xI3q4pWUolyUluKSgUCQxIRLtwZUBLX 0kOS13xMkkpOzkOSb5D/KN0zAAleREmO7c3W4eyKwPT09PT09G1mYC/0Yst3vc6TT1dKWDY3N+hZ 3qqVsk9ZNmuVJ+XKRqVcK5drpfKTUrlUK5eeQOkT8jQqAxHbHOCJP1yMd1/7z7S4YR1cp+G7dl+P 2r9lTrzt20LUIeJdO/R+tGMvCidb4mgK1XUOZFV3nTooSnV4KxjfsWP7iPUj4cURH+o6DTbw3Ibt Bl6YT4dFSB0k6J5xbMeJBmE8psNZ3/ccOz93Ain2YprCC/o+azFnwL14mMxDcpQQ1wc4kUPEvYw4 Qq+GP6rxccyw6/L5Y08Ib+UR0iOSd0jv06x/ELnMcqLwp7T/8sYG2X+1Vq3V8Lm0/89YdFS0C8Z3 d+DV7s4rXQ88ziNOWgHHR2+beoSNvj0EMQydPo8u9PSl4PSYc96PvDCGcqkE5XELZ35kuz1qkTR+ 6jkuy90l8XKf1AXcZ//Vrdoo/le3ttD+y5Wl/X+eIq2WlAA4BlTpAzQyYs9lvPHq9c7OEQLiYZ9h sO1wJnqvQ/eQceGJWNc4i/mwYdTgmQGxF7BoEDfKJThnrG/73gVrGOU6/mfommA2d3ptWyBsKnJi qx3HXDSMp/lnWGl7oRuwuBe5DRWcFcgNG8acmI8dkH2XhbFn+6JB4VkjVnwv8OLGIJRP5iIH3o8z wJ9a+P8FhQ/CgBW8WGy9eL5lid6nGINsfKtWu8P+MdiXkvhPLmCzSvZfq24u7f9zlJUvimhdRbTM nq5/2zxqNlbN/qWb09/s7u/sHjVW3xHwpthjnBWEb/ddfef18euZJheTVX17723ruIktpmA/QBk2 crp+7vm+7ftQ+AFkdwhYIFOHgh24mxsF3wsHV/Dll9iKbgPTCB5AoQNPLbfdxd/4KgYn4kzXYyZi KFyBVYz6LCTbL4howB1WpNjldQecwW907foazK6HnfwoZIBv9WIRf620k4W5+YiCRZhT5IiIhvw4 7kwLQiVpYh99HRwcNvf3dl4fnh01986a+784q5xt5BIm2BVirv7PmO/Vd0qkN0VBEidh2K4LxO+c oZBIOprP7JAIoFQKbtJgZSZdKPTRN3tXjdEICGKh3fZxWYah7fjjOg0xriXJnUCI6wkJQmuIPWeS QCABKUbbbWdqPawplgL7nIHLcB4upNX06YVI1/fvlM3smvpem9vcY4Le/MBtF/HvjLhLaEi6he2H dJ0/qosrkqjyTTIFUj3eycCLT6f7Bueux6HQn+1sBrTdhGvoYojKNmN3MXAjUO2FGOKg3xFw9Pq7 DNaMaDoRhxAFhziJWd28BDfStf2DnaYyvxGXIabrZ6shBuR0AgkSTYDWYMz0qOHC5kV0/tMgsuMs jMUOZNnCSO6CIa6Tsa/HqNfdl+JaKeD1SBOvuwZ8BamnkA5Apprw9dQg2baJ8bwOnMCqeYkqeAlf ffUVGGOBGDkodHH7AacvIe4xFIBGYuPzxKYllDh80YDVMNNF0yjNaRikQ+gsyiVrlVslq1xfNc0y FXiG3XK5oiGREwFQqnS9yuWsVZ50vUqPyRln02v4+oGTxkE6Hv666MH0qQHDSfqj7fvDiSNpXdvd 3z0eOXAvPQPUteJAcBkQKIdCM0cH0Y4EvkWAzqqwalIKhx6Bjd1ZrrAaSjd9h4MrdBYwVvCxkZhB n9WiZcFFrny9cCiKC9n5rHTRwu8am12h6FgMNu+Kh3Nyacie/LGs7O22js9QCZ41zPuklcM0NRo4 vSxHmMjamJZact3p5+UHugGKSRP6HM7oc4j6DClGZQvbU4xS9UUpxTCUS+kgA51o4XzIM5CT8zoq MIEf1XE5R4NDyOLAFudQqdWszB8M+tiVOb0IjKdPnwJlYzHSrBsLlfFefsidjpUCAwG7Ysl6Q6FH ToSEdGPQuu8dbL/eq1FEKG9Wn29AQUAJChuL9aXy9WXEzxfrxpdKJVAd7uUX9SFNgOTyq0pF1+8T Qn+IW6VwPm0pCIWAcZLCnoNIo2y/P9R1JfnGxy7G3Yo7qZyLVG+sFaTZiVJQR7WbhMK3sErUMIPY 29vbSc+xodAev16CYGhXMS0qSQi2ozBmV/F2a18J+pMJQDeTBS29hDQJlvrzMkl1a2P4vJw4h+oj mSuEYPzaRhdDInUi2hLTubJlWQYF90tqwqeaCBSApmV8oOdYoG2OHT/a/2Ofe71usraFURTKulS5 RPpYEZQy1+XEZZ6FqxuFrniYLeiH3x9/e7B/1mpuH+zvtHCfImmgP3gUGczxnIHMINfr6zS/CkL6 tohRTsJ9hpW2k0uYhqRgzjE5+IeukMxiCuIBHnCc4cwxJJCbiEdk3fPyxALrpPnu+to6DqTEycD4 xvMZiCGKJADcKfUHsaCYOinnhfFE0z4Re87IAcyqnsyOpM619l4f7ixQlEIBhyTnfvLq9OZhCoGJ wWKCRZddFMOB7yekKZV4OPkZfZuYQh7SnAhbMpygGiZ6edg82m7uY1ZoKkpT+gpP5TF/EczphmdT Q+WMhCMFnaE7gfwBZJVTZEqhV5Xe4G7qePegjoKbnM3N2iHSXn03wcrNWus3oZHuAzvyfEE6FEwk Z5VOXZAI5bWKFmqeSPMIRx1N/NRnOP9JGfviTzfGPef/lVq1Mr7/K23S/d/mVmV5/vc5ygq82XkD b2znnM5t0kMleXENHXTi+gq0GIOxmpi1nExEXBbbni8A8SZ7RX16CAt7Hvc8IamA6EUD34X9g2No M8DMGSu423HpDAkxBw457ELfjnvo9lVN173Q8Qcu0zRl4zJ3SK2zKDBhCuwiGaCl3h+IL7zwkT18 nzmxd/GoXqEnHoOOPMUR7/bR0WBm94iOo5PMR/Rxh2GXR4NRH73vubRKmpakG+nhUFFSxlad9s8S ZS4Gtep+1J0lgkCFgi/ocHu05kJFqPKmHkeRX0iBGzpqjMs6KAr4DnWyb3PMDGKUiN5W6qlpGO51 0g3KG2RlJbCv6GZHK5e2qlsb5eeVDT0FabXq5vOt0otyRV9h4UXHt7tCu+Qe5iS4M8A/m+6+9Nmm MJINczqpFvC9DubDke0z4TCIooDyeOSeTEjNQNfFoNPxrjTNGF1U8SiK3XAa0r9EiNqjYEhyPY66 FvHhhBRTc3AZEsx8PALsBxw1vXcH0WeO1/EckJhe2AU6hoAIs0AuwBZocT8McAA3p2ghvzEfUiKE dDKQt293dwikr2Tu+GV5IQvuUWdaKjX05FCabYDn5ReVeQ0l2t2uSF/S+n5/+6h5uIfV23/e/g1u /377p9s/v//D7V/f//H97xHw/ne3/0LgX2//9P737/+oqv/Clr9Y4IZg0r2g44r8xLdFdMeYg9u/ wO2fkdrfkYqJ/f5h0RD/d/u/t3/L6fIeUCAJi13ZTnzHBSMAqVPm2hDkZWcGoK+4qMMB7nZwkhw2 Kvj/zyQrmHMo8NHHWBz/6Zu/zeT+D8HVGsb/SmVjaxn/P0fxgn7EY/XVXvJOyp0H5ZbRieQBfXdX vnA7dKMAtxIxx3qKj9u8PEQCreBBBY38l2F0GcoxIcmuaRecfnAnT3hwm3Kir2gnxviESB4PGXnY x/3ZaV6faSuP22Y7VhY1Vhc1bowbTx86Rb3biqM+zuEb2xeMItIhjyg60rzIU+pY8TOwLEYRHSP2 t3F714B3N7o67Wo5GMYRIKNpa/vgsHnWevvm+KjZxMjrnGPLaMWsPQSYOV13ZJBoDdoiIW6q4JGr 6xr6TaSurbvheh2k43tXuslPf5uRp8uI9SByBWKdaKaRiT4olxMj+6Wj7R/K/AUbjP7oDQVBDxxB fedonOYkVSwmQSUZHHsC7oQSXJ4AigwQThF8Q4fO7XJ2Ik7YoDuRIP/BM8JNuOewlPM5TEn6UzxU pniIKbGNPyETaoAMF7r2Si63+nQG15fhxlZeKJiC+Z08nCEz+Evj0/prXT9q2z5ITc2DUjikopE2 WbYjMwVUInlvRn3JRBUW9VZonPkMg4dEo6+BBpyOmxTWCXU6RbmU9RlshFBqwvNSnQW/yCGeZA1b MAORI0gNJd4tN1T1EyWy05My0Z3UHgsTicCOTRo1dyoZSmhbONKZMKk7rs/pBGIexlQlW6lCyXHp fZYQQeeSUg1TxCoZYpW5xCp3EatMEpsSK2a1chmkb7boQM00kCZzYX1NrEMcwZowYA3umjjJPycp syuH9VUMsOg8vUmfgFK+yDhP1loNwqjBNL7BjR8OE8s7QTUa6saawK2dYw8Ek6D7hpZRxESKuVwu mZ30mMd8wOYpM/6hwn8MZZZcYCofjzU6Bzhhc0LAX6CEc4/U9NIHavoinVPTvlvt7le0LIV5uqYo TFvbTO+5a5n0ZT5kRTFHMzkLootUNzs8Cj6DdirWFyronbZ8v4o+LBVY0ckRd1l8ppInufQmKVai slLOusYdJLwvL/xxS8GVMmFWkFTKmDJolz06SiHF5U5d6bJqlvkDvUp5cNvDKTal2DAqm8Z+BPKa zInCkE4y6GgnGoTSo6+5koYd05ENiYRq0lCI8jPlvXFPijyoCVhOL8LQZEq+E4vCdnTJanCJyRw9 MRJkVadtHnkmnqQoFhyx7sC3+ZDAoqjWSYCIAgZ9lakoHVFDJkmilKSkI+U3loZcFxqd+o4ZpQfu Ns1yPpteEcuZjMhKYiR1TWz0RPKAovBZmEwTyAV/vEko3I86jcQ7PmAaxABln3L0SSP9BsF0bIBK kcxA2Wg2WSVToD27JI4KdIX8dRlxN4FV/1AxT7E0yoo7CW/ydjOZRqLQWXNKIkBiVfRvd1CS4xMX rZ/8Sx6Cjk5d5IToiIcmJLuOzStINZvujbxQBietF4kYKcjm0mnGk6fMu6w96JrGMR8Sz+iL6BNm wDyl/q588+pdZZyvEIt5SNnKA5FW7sZPs326nvJs3/uRmem9eTbjyfSwUKRx5ET+GW2qyNATEr9q HrV2D/arCkugO1LHtFLw1sHh8dl+8/jXB0e/PDve/a558PY4D1WrlBBVn2Gf0RSm2FXuf3LFWgPH YUJ0Br4/lNNWzhg5JqeN059gPA9EUbGfSJt4/o/8vpT1xJCTjn92/GlPvzLp6knXAtsLZxRtrK1t W3jOtjwIN312wfxG2rLTfPP2F3lQYzbW10xbOLTFzpVfCIA1hU2XoDlVD1B4dpflxDomp2gznYB6 fV9YCwpol2vf1te+q6+11pHPkfrTtSUZtPr03ZKfF5g1rK7QPbpZomWSvqs8sU08lm9mbHOMT9gi UXIJauXhqNWHo248CDXxj4u5TZDG6Is5nkFfzPUM+mLOR+ipoC35IZM5kuZUvTpV3xjX08nPQCoz kOoMZExn0qmNvfRmCZ5CtSQddEZbykkoj4RFtzAWKo6IBW43I47utj6T/syYPSG6g6D/hZFQGoUz rY2yOn8pP12YiHNTBKfcCLb1sWpkZPrbiGxwJNKJanWyujGqjuQ5BahMA6rTgDGN6TAZeqLHXGRN eYWfyVnvsizLsizLsizLsizLsizLsizLsizLsizLsvz/K/8GiErmgABQAAA= --e89a8f8389d1c4af560508c7cb28--

1 0

(ITS#7987) SIGSEGV in LMDB while adding ldap-entries
by leo＠yuriev.ru 26 Nov '14

26 Nov '14

Full_Name: Leonid Yuriev Version: 2.4 git head (OPENLDAP_REL_ENG_2_4 branch) OS: Ubuntu 14.10 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (31.130.36.33) Multi-master cluster of 4 nodes. Testcase will be available shortly (config + script). Program terminated with signal 11, Segmentation fault. #0 0x00000000004a2e25 in mdb_cursor_put (mc=0x7f81f915c370, key=0x7f82177fd120, data=0x7f82177fd130, flags=32) at ./../../../libraries/liblmdb/mdb.c:6358 6358 nsize = IS_LEAF2(mc->mc_pg[mc->mc_top]) ? key->mv_size : mdb_leaf_size(env, key, rdata); (gdb) bt #0 0x00000000004a2e25 in mdb_cursor_put (mc=0x7f81f915c370, key=0x7f82177fd120, data=0x7f82177fd130, flags=32) at ./../../../libraries/liblmdb/mdb.c:6358 #1 0x00000000004a2b52 in mdb_cursor_put (mc=mc@entry=0x7f81f915c370, key=key@entry=0x7f82177fd120, data=data@entry=0x7f82177fd130, flags=flags@entry2%2) at ./../../../libraries/liblmdb/mdb.c:6471 #2 0x00000000004d3e58 in mdb_idl_insert_keys (be=<optimised out>, cursor=0x7f81f915c370, keys=<optimised out>, id=997543) at idl.c:534 #3 0x00000000004d5143 in indexer (op=0x7f81ed1356e0, txn=0x0, atname=0%0, vals=0x7f81f81026d0, id=997543, opid=1, mask=4, ad=<optimised out>, ai=<optimised out>, ai=<optimised out>) at index.c:219 #4 0x00000000004d5445 in index_at_values (op=0x7f81ed1356e0, txn=0x1b55110, type=0x194a270, tags=0x1943830, vals=0x7f81f81026d0, id=997543, opid=1, ad=<optimised out>) at index.c:337 #5 0x00000000004d59f9 in mdb_index_values (opid=<optimised out>, id=<optimised out>, vals=<optimised out>, desc=<optimised out>, txn=<optimised out>, op=<optimised out>) at index.c:386 #6 mdb_index_entry (op=0x0, txn=0x2C o opid=394252592, e=0x8) at index.c:558 #7 0x00000000004c9159 in mdb_add (op=0x7f81ed1356e0, rs=0x7f82177fda80) at add.c:359 #8 0x000000000048a346 in overlay_op_walk (op=op@entry=0x7f81ed1356e0, rs=0x7f82177fda80, which=op_add, oi=0x19a3730, on=0x0)t t backover.c:671 #9 0x000000000048a4b1 in over_op_func (op=0x7f81ed1356e0, rs=<optimised out>, which=<optimised out>) at backover.c:723 #10 0x000000000042a9b0 in fe_op_add (op=0x7f81ed1356e0, rs=0x7f82177fda80) at add.c:334 #11 0x000000000042b59f in do_add (op=0x7f81ed1356e0, rs=0x7f82177fda80) at add.c:194 #12 0x0000000000424624 in connection_operation (ctx=0x7f82177fdbd0, arg_v=0x7f81ed1356e0) at connection.c:1155 #13 0x0000000000424d3c in connection_read_thread (ctx=0x7f82177fdbd0, argv=0x13) at connection.c:1291 #14 0x00007f824def1cf2 in ldap_int_thread_pool_wrapper (xpool=0x1956090) at tpool.c:688 #15 0x00007f824dabc0a5 in start_thread () from /lib/x86_64-linux-gnu/libpthread.so.0 #16 0x00007f824d7e984d in clone () from /lib/x86_64-linux-gnu/libc.so.6 (gdb) p * mc $1 = {mc_next = 0x0, mc_backup = 0x0, mc_xcursor = 0x7f81f915c4f8, mc_txn = 0x1b55110, mc_dbi = 5, mc_db = 0x1b55288, mc_dbx = 0x1b52660, mc_dbflag = 0x1b57015 "\v\n\n", mc_snum = 0, mc_top = 0, mc_flags % 6 64, mc_pg = {0x0, 0x7f822f03f000, 0x7f822f287000, 0x308f, 0x2fb0, 0x2e37, 0x2d75, 0x2bbc, 0x2b76, 0x28eb, 0x25f4, 0x2582, 0x2439, 0x225f, 0x21d0, 0x1fdd, 0x1c89, 0x1b68, 0x1b00, 0x19db, 0x1323, 0xf00, 0x895, 0x223, 0x12b, 0x3cb, 0x32b, 0xe5, 0x0, 0x7f81f9006e63, 0x941, 0x7f81f80005b8}, mc_ki = {0, 0, 0, 0, 50336, 63765, 32641, 0, 50336, 63765, 32641, 0, 3, 0, 12849, 14641, 21032, 437, 0, 0, 9728, 437, 0, 0, 28691, 437, 0, 0, 3, 2, 65, 0}} (gdb) p mc->mc_top $2 = 0 (gdb) p mc->mc_pg $3 = {0x0, 0f8f822f03f000, 0x7f822f287000, 0x308f, 0x2fb0, 0x2e37, 0x2d75, 0x2bbc, 0x2b76, 0x28eb, 0x25f4, 0x2582, 0x2439, 0x225f, 0x21d0, 0x1fdd, 0x1c89, 0x1b68, 0x1b00, 0x19db, 0x1323, 0xf00, 0x895, 0x223, 0x12b, 0x3cb, 0x32b, 0xe5, 0x0, 0x7f81f9006e63, 0x941, 0x7f81f80005b8} (gdb) p mc->mc_pg[mc->mc_top] $4 = (MDB_page *) 0x0 git show commit 6b26910c5acbf141ff322d043b3301d0976a7913 Author: Quanah Gibson-Mount <quanah(a)openldap.org> Date: 2014-10-03 15:35:39 -0500 Silence compiler warning by adding explicit return 0 to ppolicy_db_destroy

1 0

(ITS#7986) -y option issue during read the password from a file
by shifeng.hu＠ericsson.com 21 Nov '14

21 Nov '14

Full_Name: Shifeng Hu Version: openldap2-2.4.26-0.26.1 OS: SUSE 11 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (195.235.15.200) Dear There Our server is using LDAP, but I found there was an issue when I use -y file option to set the password of LDAP User. the User password was defined in server system as 7 characters without any "\0" when I try to use ldapsearch or ldapmodify with the option -y to give the password I am for sure the password in file is exactly same with I set. And I did a capture for LDAP, I saw there is a \0 in the suffix of password, this means the tool adds an additional '\0' in the last. then I got the error output li%0 below ldap_bind: Invalid credentials (49) As I check the src in the file "libraries\liblutil\passfile.c" passwd->bv_len = nread; passwd->bv_val[nread] = '\0'; is this necessary for a \0 BR//shifeng Thanks!

1 0

Re: (ITS#7985) Recursive values
by andrew.findlay＠skills-1st.co.uk 19 Nov '14

19 Nov '14

On Tue, Nov 18, 2014 at 07:48:28PM +0000, michael(a)stroeder.com wrote: > > Same problems (recursion) with slapcat - > > In this case I rather suspect something's wrong with your LDAP management > client application. I'd check the slapd logs covering the period the entries > were created. Good point. The critical thing to note in the slapcat output is that the entryUUID values are all different. I had missed that first time around but it clearly indicates that those entries actually exist. Andrew -- ----------------------------------------------------------------------- | From Andrew Findlay, Skills 1st Ltd | | Consultant in large-scale systems, networks, and directory services | | http://www.skills-1st.co.uk/ +44 1628 782565 | -----------------------------------------------------------------------

1 0

Re: (ITS#7985) Recursive values
by michael＠stroeder.com 18 Nov '14

18 Nov '14

belykh.o(a)gmail.com wrote: > Same problems (recursion) with slapcat - In this case I rather suspect something's wrong with your LDAP management client application. I'd check the slapd logs covering the period the entries were created. Ciao, Michael.

1 0

Re: (ITS#7985) Recursive values
by belykh.o＠gmail.com 18 Nov '14

18 Nov '14

--f46d04428fb47234e2050826ed02 Content-Type: text/plain; charset=UTF-8 Database reindexing: no effect. Overlays: overlay syncprov Same problems (recursion) with slapcat - dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=2020,ou=phones ,ou=accounts,dc=... telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: ... structuralObjectClass: telephoneNumberAccount entryUUID: bc8a4014-0355-1034-8cad-1351d00c5bbd creatorsName: cn=ldroot,dc=... createTimestamp: 20141118100223Z entryCSN: 20141118100223.423286Z#000000#000#000000 modifiersName: cn=ldroot,dc=... modifyTimestamp: 20141118100223Z dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephone Number=2020,ou=phones,ou=accounts,dc=... telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: ... structuralObjectClass: telephoneNumberAccount entryUUID: bc8d2860-0355-1034-8cae-1351d00c5bbd creatorsName: cn=ldroot,dc=... createTimestamp: 20141118100223Z entryCSN: 20141118100223.442503Z#000000#000#000000 modifiersName: cn=ldroot,dc=... modifyTimestamp: 20141118100223Z dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephone Number=1000,telephoneNumber=2020,ou=phones,ou=accounts,dc=... telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: ... structuralObjectClass: telephoneNumberAccount entryUUID: bc914c06-0355-1034-8caf-1351d00c5bbd creatorsName: cn=ldroot,dc=... createTimestamp: 20141118100223Z entryCSN: 20141118100223.469632Z#000000#000#000000 modifiersName: cn=ldroot,dc=... modifyTimestamp: 20141118100223Z dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephone Number=1000,telephoneNumber=1000,telephoneNumber=2020,ou=phones,ou=accounts ,dc=... telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: ... structuralObjectClass: telephoneNumberAccount entryUUID: bc9429a8-0355-1034-8cb0-1351d00c5bbd creatorsName: cn=ldroot,dc=... createTimestamp: 20141118100223Z On 18 November 2014 17:47, <openldap-its(a)openldap.org> wrote: > > *** THIS IS AN AUTOMATICALLY GENERATED REPLY *** > > Thanks for your report to the OpenLDAP Issue Tracking System. Your > report has been assigned the tracking number ITS#7985. > > One of our support engineers will look at your report in due course. > Note that this may take some time because our support engineers > are volunteers. They only work on OpenLDAP when they have spare > time. > > If you need to provide additional information in regards to your > issue report, you may do so by replying to this message. Note that > any mail sent to openldap-its(a)openldap.org with (ITS#7985) > in the subject will automatically be attached to the issue report. > > mailto:openldap-its@openldap.org?subject=(ITS#7985) > > You may follow the progress of this report by loading the following > URL in a web browser: > http://www.OpenLDAP.org/its/index.cgi?findid=7985 > > Please remember to retain your issue tracking number (ITS#7985) > on any further messages you send to us regarding this report. If > you don't then you'll just waste our time and yours because we > won't be able to properly track the report. > > Please note that the Issue Tracking System is not intended to > be used to seek help in the proper use of OpenLDAP Software. > Such requests will be closed. > > OpenLDAP Software is user supported. > http://www.OpenLDAP.org/support/ > > -------------- > Copyright 1998-2007 The OpenLDAP Foundation, All Rights Reserved. > > --f46d04428fb47234e2050826ed02 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>Database reindexing: no effect.</div><div><br></div><= div>Overlays:</div><div>overlay syncprov</div><div><br></div><div>Same prob= lems (recursion) with slapcat -=C2=A0</div><div><br style=3D"color:rgb(0,0,= 0);font-family:Helvetica;font-size:medium;text-align:-webkit-auto"><div sty= le=3D"color:rgb(0,0,0);font-family:Helvetica;font-size:medium;text-align:-w= ebkit-auto"><div>dn: telephoneNumber=3D1000,telephoneNumber=3D1000,telephon= eNumber=3D2020,ou=3Dphones</div><div>=C2=A0,ou=3Daccounts,dc=3D...</div><di= v>telephoneNumber: 1000</div><div>telephoneNumberAccessCode: 8864</div><div= >objectClass: telephoneNumberAccount</div><div>userPassword:: ...</div><div= >structuralObjectClass: telephoneNumberAccount</div><div>entryUUID: bc8a401= 4-0355-1034-8cad-1351d00c5bbd</div><div>creatorsName: cn=3Dldroot,dc=3D...<= /div><div>createTimestamp: 20141118100223Z</div><div>entryCSN: 201411181002= 23.423286Z#000000#000#000000</div><div>modifiersName: cn=3Dldroot,dc=3D...<= /div><div>modifyTimestamp: 20141118100223Z</div><div><br></div><div>dn: tel= ephoneNumber=3D1000,telephoneNumber=3D1000,telephoneNumber=3D1000,telephone= </div><div>=C2=A0Number=3D2020,ou=3Dphones,ou=3Daccounts,dc=3D...</div><div= >telephoneNumber: 1000</div><div>telephoneNumberAccessCode: 8864</div><div>= objectClass: telephoneNumberAccount</div><div>userPassword:: ...</div><div>= structuralObjectClass: telephoneNumberAccount</div><div>entryUUID: bc8d2860= -0355-1034-8cae-1351d00c5bbd</div><div>creatorsName: cn=3Dldroot,dc=3D...</= div><div>createTimestamp: 20141118100223Z</div><div>entryCSN: 2014111810022= 3.442503Z#000000#000#000000</div><div>modifiersName: cn=3Dldroot,dc=3D...</= div><div>modifyTimestamp: 20141118100223Z</div><div><br></div><div>dn: tele= phoneNumber=3D1000,telephoneNumber=3D1000,telephoneNumber=3D1000,telephone<= /div><div>=C2=A0Number=3D1000,telephoneNumber=3D2020,ou=3Dphones,ou=3Daccou= nts,dc=3D...</div><div>telephoneNumber: 1000</div><div>telephoneNumberAcces= sCode: 8864</div><div>objectClass: telephoneNumberAccount</div><div>userPas= sword:: ...</div><div>structuralObjectClass: telephoneNumberAccount</div><d= iv>entryUUID: bc914c06-0355-1034-8caf-1351d00c5bbd</div><div>creatorsName: = cn=3Dldroot,dc=3D...</div><div>createTimestamp: 20141118100223Z</div><div>e= ntryCSN: 20141118100223.469632Z#000000#000#000000</div><div>modifiersName: = cn=3Dldroot,dc=3D...</div><div>modifyTimestamp: 20141118100223Z</div><div><= br></div><div>dn: telephoneNumber=3D1000,telephoneNumber=3D1000,telephoneNu= mber=3D1000,telephone</div><div>=C2=A0Number=3D1000,telephoneNumber=3D1000,= telephoneNumber=3D2020,ou=3Dphones,ou=3Daccounts</div><div>=C2=A0,dc=3D...<= /div><div>telephoneNumber: 1000</div><div>telephoneNumberAccessCode: 8864</= div><div>objectClass: telephoneNumberAccount</div><div>userPassword:: ...</= div><div>structuralObjectClass: telephoneNumberAccount</div><div>entryUUID:= bc9429a8-0355-1034-8cb0-1351d00c5bbd</div><div>creatorsName: cn=3Dldroot,d= c=3D...</div><div>createTimestamp: 20141118100223Z</div><div><br></div></di= v></div></div><div class=3D"gmail_extra"><br><div class=3D"gmail_quote">On = 18 November 2014 17:47, <span dir=3D"ltr"><<a href=3D"mailto:openldap-i= ts(a)openldap.org" target=3D"_blank">openldap-its(a)openldap.org</a>></span>= wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor= der-left:1px #ccc solid;padding-left:1ex"><br> *** THIS IS AN AUTOMATICALLY GENERATED REPLY ***<br> <br> Thanks for your report to the OpenLDAP Issue Tracking System.=C2=A0 Your<br= > report has been assigned the tracking number ITS#7985.<br> <br> One of our support engineers will look at your report in due course.<br> Note that this may take some time because our support engineers<br> are volunteers.=C2=A0 They only work on OpenLDAP when they have spare<br> time.<br> <br> If you need to provide additional information in regards to your<br> issue report, you may do so by replying to this message.=C2=A0 Note that<br= > any mail sent to <a href=3D"mailto:openldap-its@openldap.org">openldap-its@= openldap.org</a> with (ITS#7985)<br> in the subject will automatically be attached to the issue report.<br> <br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 mailto:<a href=3D"mailto:openldap-its@openldap.= org">openldap-its(a)openldap.org</a>?subject=3D(ITS#7985)<br> <br> You may follow the progress of this report by loading the following<br> URL in a web browser:<br> =C2=A0 =C2=A0 <a href=3D"http://www.OpenLDAP.org/its/index.cgi?findid=3D798= 5" target=3D"_blank">http://www.OpenLDAP.org/its/index.cgi?findid=3D7985</a= ><br> <br> Please remember to retain your issue tracking number (ITS#7985)<br> on any further messages you send to us regarding this report.=C2=A0 If<br> you don't then you'll just waste our time and yours because we<br> won't be able to properly track the report.<br> <br> Please note that the Issue Tracking System is not intended to<br> be used to seek help in the proper use of OpenLDAP Software.<br> Such requests will be closed.<br> <br> OpenLDAP Software is user supported.<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 <a href=3D"http://www.OpenLDAP.org/support/" ta= rget=3D"_blank">http://www.OpenLDAP.org/support/</a><br> <br> --------------<br> Copyright 1998-2007 The OpenLDAP Foundation, All Rights Reserved.<br> <br> </blockquote></div><br></div> --f46d04428fb47234e2050826ed02--

1 0

Re: (ITS#7985) Recursive values
by michael＠stroeder.com 18 Nov '14

18 Nov '14

belykh.o(a)gmail.com wrote: > Error details: request returns recursive values on some leaves. What does the slapcat output look like? Also which overlays are configured? slapo-rwm? Ciao, Michael.

1 0

Re: (ITS#7985) Recursive values
by andrew.findlay＠skills-1st.co.uk 18 Nov '14

18 Nov '14

On Tue, Nov 18, 2014 at 11:47:10AM +0000, belykh.o(a)gmail.com wrote: > Error details: request returns recursive values on some leaves. Some sensitive > values replaced with '…' Please check: That is certainly an odd one. You are going to have to supply a lot more information before the developers will consider this a usable bug report, but before getting into that I suggest you stop the server and use slapindex to re-build all the indexes. If you have been modifying the configuration after loading data it is possible that the index data is inconsistent. Andrew -- ----------------------------------------------------------------------- | From Andrew Findlay, Skills 1st Ltd | | Consultant in large-scale systems, networks, and directory services | | http://www.skills-1st.co.uk/ +44 1628 782565 | -----------------------------------------------------------------------

1 0

(ITS#7985) Recursive values
by belykh.o＠gmail.com 18 Nov '14

18 Nov '14

Full_Name: Oleg Belykh Version: 2.4.40 OS: FreeBSD URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.99.40.12) We are testing latest OpenLDAP 2.4.40 with mdb (FreeBSD 10) with our custom schema and structure. Error details: request returns recursive values on some leaves. Some sensitive values replaced with 'âŠ' Please check: custom schema: # Telephone Attributes attributetype ( 1.3.6.1.4.1.4203.666.6273.2.1 NAME 'telephoneNumberAccessCode' DESC 'Access code for telephoneNumber services' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) attributetype ( 1.3.6.1.4.1.4203.666.6273.2.2 NAME 'faxDeliveryMailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} ) attributetype ( 1.3.6.1.4.1.4203.666.6273.2.3 NAME 'voiceDeliveryMailbox' DESC 'Voice Mailbox' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) attributetype ( 1.3.6.1.4.1.4203.666.6273.2.4 NAME 'phoneGroupName' DESC 'Telephone Group Name'D0D EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 ) objectclass ( 1.3.6.1.4.1.4203.666.6273.2.100 NAME 'telephoneNumberAccount' DESC 'Telephone account' SUP top STRUCTURAL MUST ( telephoneNumber ) MAY ( userPassword $ telephoneNumberAccessCode $ macAddress $ faxDeliveryMailbox ) ) ldapsearch results: root@sw:/lib/ldap # ldapsearch -H 'ldapi://%2fvar%2frun%2fopenldap%2fldapi/' -W -b 'dc=âŠ' -D 'cn=ldroot,dc=âŠ' Enter LDAP Password: # extended LDIF # # LDAPv3 # base <dc=âŠ> with scope subtree # filter: (objectclass=*) # requesting: ALL # # âŠ dn: dc=âŠ objectClass: dcObject objectClass: organization objectClass: top dc: ... o: ... # accounts, âŠ dn: ou=accounts,dc=âŠ objectClass: top objectClass: organizationalUnit ou: accounts # persons, accounts, âŠ dn: ou=persons,ou=accounts,dc=âŠ objectClass: organizationalUnit ou: persons # kerberos, accounts, âŠ dn: ou=kerberos,ou=accounts,dc=âŠ objectClass: organizaonalalUnit ou: kerberos # mails, accounts, âŠ dn: ou=mails,ou=accounts,dc=âŠ objectClass: organizationalUnit ou: mails # phones, accounts, âŠ dn: ou=phones,ou=accounts,dc=âŠ objectClass: organizationalUnit ou: phones # groups, âŠ dn: ou=groups,dc=âŠ objectClass: top objectClass: organizationalUnit ou: groups # userGroups, groups, âŠ dn: ou=userGroups,ou=groups,dc=âŠ objectClass: organizationalUnit ou: usergroups # phoneGroups, groups, âŠ dn: ou=phoneGroups,ou=groups,dc>2E2Š objectClass: organizationalUnit ou: phonegroups # computers, âŠ dn: ou=computers,dc=âŠ objectClass: top objectClass: organizationalUnit ou: computers # services, âŠ dn: ou=services,dc=âŠ objectClass: top objectClass: organizationalUnit ou: services # manager, accounts, âŠ dn: uid=manager,ou=accounts,dc=âŠ objectClass: account objectClass: simpleSecurityObject uid: manager userPassword:: ... # freeswitch, accounts, âŠ dn: uid=freeswitch,ou=accounts,dc=âŠ objectClass: account objectClass: simpleSecurityObject uid: freeswitch userPassword:: ... # admins, userGroups, groups, âŠ dn: cn=admins,ou=userGroups,ou=groups,dc=âŠ objectClass: posixGroup cn: admins gidNumber: 10000 description: Group account memberUid: ... # users, userGroups, groups, âŠ dn: cn=users,ou=userGroups,ou=groups,dc=âŠ objectClass: posixGroup cn: users gidNumber: 10001 description: Group account # ..., persons, accounts, âŠ dn: uid=...,ou=persons,ou=accounts,dc=2%2Š objectClass: posixAccount objectClass: top objectClass: inetOrgPerson gidNumber: 10000 givenName: ... initials: v sn: .. displayName: ... uid: ... homeDirectory: /dev/null loginShell: /bin/sh cn: ... uidNumber: 20107 userPassword:: ... telephoneNumber: 2020 ( !!!! ) # 1000, phones, accounts, âŠ dn: telephoneNumber=1000,ou=phones,ou=accounts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 2020, phones, accounts, âŠ dn: telephoneNumber=2020,ou=phones,ou=accounts,dc=âŠ telephoneNumber: 2020 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 2020, phones, accounts, âŠ dn: telephoneNumber=1000,telephonumumber=2020,ou=phones,ou=accounts,dc=... telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 2020, phones, accounts, âŠ dn: telephoneNumber=1000,telephoneNumber=0000,telephoneNumber=2020,ou=phones,o u=accounts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 1000, 2020, phones, accounts, âŠ dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu mber=2020,ou=phones,ou=accounts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 1000, 1000, 2020, phones, accounts, â080Š dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu mber=1000,telephoneNumber=2020,ou=phones,ou=accounts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 1000% 1 1000, 1000, 2020, phones, accounts, âŠ dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu mber=1000,telephoneNumber=1000,telephoneNumber=2020,ou=phones,ou=accounts,dc=... telephoneNumber: 1000 telephoneNumberAccessCode:86864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 1000, 1000, 1000, 1000, 2020, phones, accounts, âŠ dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=2020,ou=p hones,ou=accounts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 1000, 1000, 1000, 1000, 1000, 2020, phones, accounts, âŠ dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,tele phoneNumber=2020,ou=phones,ou=accounts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 64%0 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000, 2020, phones, accounts, time. kz dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,tele phoneNumber=1000,telephoneNumber=2020,ou=phones,ou=accounts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000, 2020, phones, accounts, âŠ dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,tele phoneNumber=1000,telephoneNumber=1000,telephoneNumber=2020,ou=phones,ou=accou nts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. # 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000, 1000!01000, 2020, phones, acc ounts, âŠ dn: telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNu mber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,tele phoneNumber=1000,telephoneNumber=1000,telephoneNumber=1000,telephoneNumber=20 20,ou=phones,ou=accounts,dc=âŠ telephoneNumber: 1000 telephoneNumberAccessCode: 8864 objectClass: telephoneNumberAccount userPassword:: âŠ. if you need screenshots from some ldap management utils, please mail me.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs