https://bugs.openldap.org/show_bug.cgi?id=10525
Issue ID: 10525 Summary: back-ldap accepts multiple tls_cert values in olcDbACLBind Product: OpenLDAP Version: 2.6.13 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: backends Assignee: bugs@openldap.org Reporter: quanah@openldap.org Target Milestone: ---
In examining my slapd configuration, I found it had:
olcDBACLBind: bindmethod=sasl sasl_mech=external tls_cert=/path/to/home/directory/cert tls_cert=/path/to/real/cert <rest of tls configuration>
Fortunately it took the second value, so the connections worked, but I would expect this to generate an error
https://bugs.openldap.org/show_bug.cgi?id=10525
Howard Chu hyc@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Ever confirmed|0 |1 Status|UNCONFIRMED |IN_PROGRESS
--- Comment #1 from Howard Chu hyc@openldap.org --- https://git.openldap.org/openldap/openldap/-/merge_requests/895
It wasn't checking for a previous value, so that would get leaked as well.
https://bugs.openldap.org/show_bug.cgi?id=10525
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Assignee|bugs@openldap.org |hyc@openldap.org Target Milestone|--- |2.6.14 Keywords|needs_review |
https://bugs.openldap.org/show_bug.cgi?id=10525
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |TEST Status|IN_PROGRESS |RESOLVED
--- Comment #2 from Quanah Gibson-Mount quanah@openldap.org --- master:
• 894d0cf5 by Howard Chu at 2026-06-26T14:58:10+01:00 ITS#10525 slapd: report errors from bindconf_parse
• 267492a4 by Ondřej Kuzník at 2026-06-26T14:58:17+01:00 ITS#10525 lloadd: report errors from bindconf_parse
RE27:
• 99d2c42d by Howard Chu at 2026-06-30T14:24:11+00:00 ITS#10525 slapd: report errors from bindconf_parse
• 331d837c by Ondřej Kuzník at 2026-06-30T14:24:16+00:00 ITS#10525 lloadd: report errors from bindconf_parse
RE26:
• c9635f17 by Howard Chu at 2026-06-30T14:24:30+00:00 ITS#10525 slapd: report errors from bindconf_parse
• 5ac77296 by Ondřej Kuzník at 2026-06-30T14:24:34+00:00 ITS#10525 lloadd: report errors from bindconf_parse
https://bugs.openldap.org/show_bug.cgi?id=10525
Quanah Gibson-Mount quanah@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|TEST |FIXED Status|RESOLVED |VERIFIED
-
openldap-its＠openldap.org