https://bugs.openldap.org/show_bug.cgi?id=9816
Issue ID: 9816 Summary: slapcat cordeumps during mdb subtree dump with -s Product: OpenLDAP Version: 2.5.11 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: slapd Assignee: bugs@openldap.org Reporter: khoffmann@united-internet.de Target Milestone: ---
Created attachment 887 --> https://bugs.openldap.org/attachment.cgi?id=887&action=edit gdb backtrace of slapcat run
When trying to use slapcat in combination with -b and -s in order to create a LDIF backup of a mdb subtree, slapd crashes with a coredump (please see the attached snippet with gdb output from a reproduced test tree). The problem was reporducible with different mdb databases / suffixes and only appears with option -s.
The same dump with -H 'ldap:///ou=users,o=company,c=de??sub?' instead of -s ou=users,o=company,c=de works perfectly fine, as long as the "attrs part" is empty in the ldap-uri. Also using slapcat with -b only (for a full database dump) works fine as well.
I'm aware of the fact that -s option is marked as DEPRECATED - I'm not sure if you are going to fix this bug or if you rather take the change to remove the option completely from future major versions.
Please let me also know if it's expected behaviour that the -H option doesn't work whenever the attribute part isn't empty and if I should contribute to a documentation update for this edge case.
Best regards, Kris
https://bugs.openldap.org/show_bug.cgi?id=9816
Howard Chu hyc@openldap.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.7.0 Keywords|needs_review |
--- Comment #1 from Howard Chu hyc@openldap.org --- The -s option has been documented as deprecated since 2010, so we will simply remove this option in a future release. Since the -H option already works there is no action to be taken at this time.
The documentation for -H says "use dn, scope and filter from URI to only handle matching entries" so specifying attrs is clearly not documented and not supported.
https://bugs.openldap.org/show_bug.cgi?id=9816
--- Comment #2 from Quanah Gibson-Mount quanah@openldap.org --- Should we remove the -a option at the same time, as it is also deprecated?
https://bugs.openldap.org/show_bug.cgi?id=9816
--- Comment #3 from Kristian Hoffmann khoffmann@united-internet.de --- Removing the -s option is totally fine for me. I just wanted to make sure this issue is addressed in any form. If the option doesn't work for (default) mdb backends and code for back-hdb has been removed already in 2.5+, it might be a good time for final removal of this option, too.
Thank you for your enduring work on openLDAP over all the years and for providing a piece of fast and rock-solid software.
-
openldap-its＠openldap.org