openldap-bugs

openldap-bugs@openldap.org

1 participants
20960 discussions

(ITS#7834) MDB_MULTIPLE can insert multiple keys
by h.b.furuseth＠usit.uio.no 12 Apr '14

12 Apr '14

Full_Name: Hallvard B Furuseth Version: LMDB 0.9.11 OS: Linux x86_64 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (81.191.45.35) Submitted by: hallvard mdb_cursor_put(,new key, multiple data items, MDB_MULTIPLE) inserts several identical keys as well as multiple data items. Broken since 0.9.10 by 4c8f57615c5ca7b014c038e59c1045182e74f5ad. OpenLDAP is not affected, since it no longer uses MDB_MULTIPLE. Root cause: mdb_cursor_put() does not reset the 'insert' flag when looping through MDB_MULTIPLE. Recently it uses that flag to decode whether to delete the old key before re-inserting it. Also MDB_MULTIPLE breaks MDB_db.md_entries so mdb_stat() reports the wrong number of entries. This was always so. The 'insert' flag also affects cursor tracking. I have not checked how. Fix: Reset 'insert' before looping, and move setting C_INITIALIZED at 'done:' before that again. This should make MDB_MULTIPLE behave like a sequence of put()s, except it does not repeat spill/touch.

1 0

Re: (ITS#7832) Proposing ppolicy extended module for OpenLDAP
by hyc＠symas.com 10 Apr '14

10 Apr '14

dcoutadeur(a)linagora.com wrote: > Full_Name: David Coutadeur > Version: 2.4.39 > OS: Debian wheezy 64 > URL: http://62.210.236.82/incoming/ppm-1.0.tar.gz > Submission from: (NULL) (92.103.166.6) > > > > Hi, > > I am proposing this module extending password policy for integration into > contrib/slapd-modules. (see URL attached) > > I get inspired by the ltb check password module, but I finally rewrote > everything from scratch to better include new functionnalities. > > You can consider this as a replacement for ITS Incoming/7412 > > The code has been tested a little, and a work has been done to make the code > cleaner, but do not hesitate for any suggestion or remark. I took a brief look at it. The config file syntax seems a bit awkward, how do you distinguish a new class name from an existing reserved keyword? I'd like to hear other people's opinion on the actual checks being performed. > David > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: (ITS#7833) ldap client configuration issue
by hyc＠symas.com 10 Apr '14

10 Apr '14

prabhs(a)gmail.com wrote: > Full_Name: prabhakar > Version: 4.3 > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (59.161.164.4) > > > When root file system is full, we are observing that ldap client file is getting > deleted. LDAP authentication failing, again we need to reconfigure the ldap > client. There is no such OpenLDAP version 4.3. > > Is there any way to overcome this issue. > > libsldap: Status: 2 Mesg: Unable to load configuration > '/var/ldap/ldap_client_file' (''). There is no such OpenLDAP component named libsldap. It appears you're not using OpenLDAP software at all. We're not the right people to help you. This ITS will be closed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7833) ldap client configuration issue
by prabhs＠gmail.com 10 Apr '14

10 Apr '14

Full_Name: prabhakar Version: 4.3 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (59.161.164.4) When root file system is full, we are observing that ldap client file is getting deleted. LDAP authentication failing, again we need to reconfigure the ldap client. Is there any way to overcome this issue. libsldap: Status: 2 Mesg: Unable to load configuration '/var/ldap/ldap_client_file' ('').

1 0

Re: (ITS#7500) libldap starttls crashes if invalid GnuTLS cipher suite string
by quanah＠zimbra.com 09 Apr '14

09 Apr '14

--On April 9, 2014 at 1:55:26 AM +0000 ryan(a)nardis.ca wrote: > Hi, > > This ITS says "fixed in master" and appears to be in 2.5 as well. > However 2.4 seems to still be affected. Is this fix a candidate for 2.4? It will be in 2.4.40 and is now in RE24. Thanks for catching that. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#7500) libldap starttls crashes if invalid GnuTLS cipher suite string
by ryan＠nardis.ca 09 Apr '14

09 Apr '14

Hi, This ITS says "fixed in master" and appears to be in 2.5 as well. However 2.4 seems to still be affected. Is this fix a candidate for 2.4? thanks, Ryan

1 0

(ITS#7412)
by dcoutadeur＠linagora.com 04 Apr '14

04 Apr '14

Hi, Can you consider this alternative to replace ltb-check-password module into the contrib overlays ? (ITS#7832) Proposing ppolicy extended module for OpenLDAP http://www.openldap.org/its/index.cgi?findid=7832 Thank you in advance. David

1 0

(ITS#7832) Proposing ppolicy extended module for OpenLDAP
by dcoutadeur＠linagora.com 04 Apr '14

04 Apr '14

Full_Name: David Coutadeur Version: 2.4.39 OS: Debian wheezy 64 URL: http://62.210.236.82/incoming/ppm-1.0.tar.gz Submission from: (NULL) (92.103.166.6) Hi, I am proposing this module extending password policy for integration into contrib/slapd-modules. (see URL attached) I get inspired by the ltb check password module, but I finally rewrote everything from scratch to better include new functionnalities. You can consider this as a replacement for ITS Incoming/7412 The code has been tested a little, and a work has been done to make the code cleaner, but do not hesitate for any suggestion or remark. David

1 0

(ITS#7831) Double Free in autogroup.c
by mwarren＠symas.com 04 Apr '14

04 Apr '14

Full_Name: Mark Warren Version: 2.4.38 OS: Ubuntu 12.04.4 LTS URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (12.70.80.130) A double-free has been located in contrib/slapd-modules/autogroup/autogroup.c Lines: 1208 and 1215 Proposed solution: Remove Line 1215 diff --git a/contrib/slapd-modules/autogroup/autogroup.c b/contrib/slapd-modules/autogroup/autogroup.c index a977561..5bafe2f 100644 --- a/contrib/slapd-modules/autogroup/autogroup.c +++ b/contrib/slapd-modules/autogroup/autogroup.c @@ -1212,7 +1212,6 @@ autogroup_response( Operation *op, SlapReply *rs ) autogroup_add_group( op, agi, group_agd, NULL, &op->o_req_ndn, 1, 1); - overlay_entry_release_ov( op, e, 0, on ); ldap_pvt_thread_mutex_unlock( &agi->agi_mutex ); return SLAP_CB_CONTINUE; }

1 0

Re: (ITS#7412) check_password contrib module
by hyc＠symas.com 04 Apr '14

04 Apr '14

clem.oudot(a)gmail.com wrote: > Full_Name: Clément OUDOT > Version: > OS: GNU/Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (88.173.78.196) > > > As said by Guillaume Rousse in ITS#7348 ( > http://www.openldap.org/its/index.cgi/Incoming?id=7348;selectid=7348#themesg), I > would like to contribute the check_password module to OpenLDAP. > diff --git a/contrib/slapd-modules/check-password/README b/contrib/slapd-= > modules/check-password/README > new file mode 100644 > index 0000000..10191c2 > --- /dev/null > +++ b/contrib/slapd-modules/check-password/README > @@ -0,0 +1,146 @@ > + > +check_password.c - OpenLDAP pwdChecker library > + > +2007-06-06 Michael Steinmann <msl(a)calivia.com> > +2008-01-30 Pierre-Yves Bonnetain <py.bonnetain(a)ba-cst.com> > +2009 Clement Oudot <clem.oudot(a)gmail.com> - LTB-project > +2009 Jerome HUET - LTB-project > The attached patch file is derived from OpenLDAP Software. All of the > modifications to OpenLDAP Software represented in the following patch(es) were > developed by Clément OUDOT clem.oudot(a)gmail.com. I have not assigned rights > and/or interest in this work to any party. Something is not clear here. Your README clearly lists 3 other authors' names, yet your rights statement claims that you are the sole author. I don't see how we can safely touch this contribution with such ambiguous provenance. > > I, Clément OUDOT, hereby place the following modifications to OpenLDAP Software > (and only these modifications) into the public domain. Hence, these > modifications may be freely used and/or redistributed for any purpose with or > without attribution and/or other notice. > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs