New subject: [Issue 10286] ldap_pvt_gettime may result in "not new enough csn" problems in multi-thread case.

18 Nov 2024


      https://bugs.openldap.org/show_bug.cgi?id=10286
Issue ID: 10286
           Summary: ldap_pvt_gettime may result in "not new enough csn"
                    problems in multi-thread case.
           Product: OpenLDAP
           Version: 2.6.6
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: libraries
          Assignee: bugs@openldap.org
          Reporter: 971748261@qq.com
  Target Milestone: ---
Created attachment 1041
  --> https://bugs.openldap.org/attachment.cgi?id=1041&action=edit
the log of adding two entry which shows the time sequence.
I used openldap as krb5's database, and openldap was deploymented in
mirrormode.
I tried to add kerberos principals via kadmin.local -q "addprinc -randkey
principal.
slapd log showed that the entry of kadmin/admin was added earlier than the
entry of ossuser. But the csn of kadmin/admin was greater than ossuser.
In this case, when the two entry began to sync to the other slapd server,
ossuser was ignored because of "csn not new enough"
-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 10286] New: ldap_pvt_gettime may result in "not new enough csn" problems in multi-thread case.