openldap-devel

openldap-devel@openldap.org

2 participants
1419 discussions

Fwd: TLS init def ctx failed: -1
by Howard Chu 02 Jul '09

02 Jul '09

We need to either remove this document from the web site, or remove the part that tells how to create a self-signed server cert. Anyone deploying TLS with their own certs should be creating their own CA separately from their server certs. And telling folks to create cert files where the private key is included in the same file is utterly irresponsible. -------- Original Message -------- Subject: TLS init def ctx failed: -1 Date: Thu, 2 Jul 2009 12:39:21 +0200 From: François Mehault <Francois.Mehault(a)netplus.fr> To: openldap-technical(a)openldap.org <openldap-technical(a)openldap.org> Hi all I contact you because I don’t succeed to configure my OpenLDAP with TLS. First I create self signed certificate server.pem like I read on this page http://www.openldap.org/pub/ksoper/OpenLDAP_TLS.html#5.1.1 in /usr/local/etc/openldap/tls. |*openssl req -newkey rsa:1024 -x509 -nodes -out server.pem -keyout server.pem -days 365*| |* *| Then I add this line in slapd.conf : TLSCertificateFile /usr/local/etc/openldap/tls/server.pem TLSCertificateKeyFile /usr/local/etc/openldap/tls/server.pem TLSCACertificateFile /usr/local/etc/opendldap/tls/server.pem TLSVerifyClient never Then I restart slapd. /usr/local/etc/rc.d/slapd stop , start. And in my /var/log/debug.log I have Jul 2 12:18:39 labobe2 slapd[97816]: main: TLS init def ctx failed: -1 Jul 2 12:18:39 labobe2 slapd[97816]: slapd destroy: freeing system resources. Jul 2 12:18:39 labobe2 slapd[97816]: syncinfo_free: rid=001 Jul 2 12:18:39 labobe2 slapd[97816]: slapd stopped. I use FreeBSD 7. If someone can help me, I appreciate, thanks in advance Regards, François

2 1

RE24 testing call (2.4.17) round 3
by Quanah Gibson-Mount 02 Jul '09

02 Jul '09

Remaining known issues are now fixed. Please test with updated CVS of RE24. Thanks! --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

3 2

ITS and attachments
by Michael Ströder 02 Jul '09

02 Jul '09

HI! When posting an ITS together with testrun data I always put the ITS number in the archive's file name but I don't know the number before submitting the ITS. Therefore I wait until the generated ITS message to be received and then follow up with the URL to the testrun data. Would be much better if attachments (or at least URLs) could added to an issue after submission (like in Bugzilla) to avoid URL references to external resources. Ciao, Michael.

2 1

RE24 testing call (2.4.17) round 2
by Quanah Gibson-Mount 02 Jul '09

02 Jul '09

Please test RE24 and report any issues. All known regressions are now believed fixed. Thanks! --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

7 13

Re: commit: ldap/servers/slapd/overlays ppolicy.c
by Howard Chu 30 Jun '09

30 Jun '09

hyc(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd/overlays > > Modified Files: > ppolicy.c 1.125 -> 1.126 > > Log Message: > Fix check_password with {cleartext} passwords As I note in the added comment, the check_password interface kinda sucks here. Instead of making the external module malloc its error message string, we should have passed in a struct berval with a buffer and length(buffer) already set. I'd like to change this for 2.5, it will also simplify ITS#6082. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: commit: ldap/servers/slapd connection.c
by Howard Chu 28 Jun '09

28 Jun '09

hallvard(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd > > Modified Files: > connection.c 1.440 -> 1.441 > > Log Message: > Fix Debug format in last commit Oops. That was one of my private testing bits, not intended for commit. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Re: RE24 testing call (2.4.17) round 2
by Gavin Henry 28 Jun '09

28 Jun '09

I'm away all this week so will try remotely and report back. Cheers. On 27/06/2009, Quanah Gibson-Mount <quanah(a)zimbra.com> wrote: > Please test RE24 and report any issues. All known regressions are now > believed fixed. Thanks! > > --Quanah > > -- > > Quanah Gibson-Mount > Principal Software Engineer > Zimbra, Inc > -------------------- > Zimbra :: the leader in open source messaging and collaboration > -- Sent from my mobile device http://www.suretecsystems.com/services/openldap/ http://www.suretectelecom.com

1 0

Re: commit: ldap/servers/slapd/back-ldap back-ldap.h bind.c
by Howard Chu 22 Jun '09

22 Jun '09

quanah(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd/back-ldap > > Modified Files: > Tag: OPENLDAP_REL_ENG_2_4 > back-ldap.h 1.88.2.13 -> 1.88.2.14 > bind.c 1.162.2.21 -> 1.162.2.22 > > Log Message: > ITS#6167 This ITS is still Open/Incoming; was this commit really supposed to be released, or is the ITS just not up to date? > CVS Web URLs: > http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldap/ > http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldap/back-ldap.h > http://www.openldap.org/devel/cvsweb.cgi/servers/slapd/back-ldap/bind.c > > Changes are generally available on cvs.openldap.org (and CVSweb) > within 30 minutes of being committed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

2 1

RE24 testing call (2.4.17)
by Quanah Gibson-Mount 18 Jun '09

18 Jun '09

Please test RE24 as we prepare for 2.4.17. Thanks! --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

8 21

Re: commit: ldap/servers/slapd/overlays pcache.c
by Howard Chu 16 Jun '09

16 Jun '09

hyc(a)OpenLDAP.org wrote: > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd/overlays > > Modified Files: > pcache.c 1.168 -> 1.169 > > Log Message: > Partially revert 1.32; pcache must allow other callbacks to see its results Regarding the original reason for this change... It's clear that what we really want is for pcache to behave the same in the cached vs uncached case, wrt other overlays/callbacks. So wherever pcache takes control in the call stack for the uncached case, it should do the same in the cached case. What's not clear is how to do that in general. When "response-callback head" has been configured, it should just execute and leave the callback stack intact when answering from cache. When "tail" (the default) is in effect then it probably should bypass the stack. The above commit just leaves the stack intact; I'll fix it up now to depend on the response-callback setting. > * To: OpenLDAP Commit <openldap-commit2devel(a)OpenLDAP.org> > * Subject: Re: commit: ldap/servers/slapd/overlays pcache.c > * From: Pierangelo Masarati <ando(a)sys-net.it> > * Date: Tue, 24 Aug 2004 10:40:00 +0200 > ando(a)OpenLDAP.org wrote: > > > Update of /repo/OpenLDAP/pkg/ldap/servers/slapd/overlays > > > Modified Files: > pcache.c 1.31 -> 1.32 > > > Log Message: > - proxy cache erroneously returns the filtering attributes > and the objectClass right after caching, even if not requested, > while subsequent searches are fine; > > > I think this is a bug; it was also reflected in the test data, which has been > fixed accordingly > > - the response callback needs be apended at the end of the > callback list, otherwise the resulting entries are cached > > > I ran into this issue while developing an overlay that dynamically builds > entries; the raw entry was being cached instead of the completed one, > because pcache adds its callback only when required, while that of my > overlay is stacked by the overlay infrastructure. I think the "natural" > behavior of pcache is to cache the final result that is sent to the user. > I guess there might be applications where this is not true, so I made the > original behavior configurable by an (undocumented) directive. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-devel