Full_Name: Andrew Graham Version: 2.4.10 OS: SLES 10 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (194.169.32.250)

The quarantine function in back-meta will permanently disable a target if a query is received while the quarantine has been imposed.

To reproduce, use the config file below. Send a query and the quarantine will be set. Send another query within 20 seconds and the quarantine will not lift without restarting slapd.

---- slapd.conf ----

include /usr/local/openldap/etc/openldap/schema/core.schema include /usr/local/openldap/etc/openldap/schema/cosine.schema include /usr/local/openldap/etc/openldap/schema/inetorgperson.schema

pidfile /usr/local/openldap/var/run/slapd.pid argsfile /usr/local/openldap/var/run/slapd.args

database meta

suffix dc=example,dc=com

uri ldap://afakeaddress/dc=target,dc=example,dc=com

quarantine 20,+