openldap-devel

openldap-devel@openldap.org

1418 discussions

OpenLDAP BoF session at FOSDEM?
by Michael Ströder 17 Jan '20

17 Jan '20

HI! Is anyone of the OpenLDAP devs around at FOSDEM this year? Would it make sense to apply for a BoF session room to discuss things face-to-face? Ciao, Michael.

3 2

2.4 commit review
by Quanah Gibson-Mount 12 Jan '20

12 Jan '20

A few commits stacking up, so would like to review them for inclusion in an eventual 2.4.49. I think all of the following look good for RE24, but wanted to confirm specifically on (a) the GnuTLS changes, (b) the cleaner error handling during connection setup, and (c) the Totp changes. OpenLDAP: ITS#9067 fix syntax evaluation of preferredDeliveryMethod ITS#8753 Set minimum GnuTLS version to 3.2.2 ITS#9071 Document "tls none" for back-ldap ITS#9069 Do not call gnutls_global_set_mutex() ITS#9077 slapo-unique Let the loop finish ITS#9095 insert missing commit at end of slapindex processing ITS#9091 drop attr mappings added in an aborted txn ITS#9100 relax domainScope check for absent value ITS#9112 cleaner error handling during connection setup Contrib: Totp: ITS#9055 Introduce a combined password scheme TotP: ITS#9055 Accept previous token LMDB: ITS#9068 fix backslash escaping Thanks, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

5 9

ldap0 does not work with RE24
by Michael Ströder 03 Jan '20

03 Jan '20

HI! It seems I'm experiencing a regression when running tests of python-ldap0 with current RE24 which does not fail with 2.4.48: test016_cancel (__main__.Test00_LDAPObject) ... munmap_chunk(): invalid pointer ERROR There was this change for ITS#9124. So I guess it's causing this regression. Could someone look into this? Ciao, Michael.

2 5

dynlist enhancements, ITS#9121
by Howard Chu 18 Dec '19

18 Dec '19

There's some ambiguities that still need to be resolved, around the memberOf functionality. The dynlist code only adds memberOf values for dynamic groups. It doesn't do anything about static group memberships. This implies that you still need to use the memberOf overlay too, if you want to also support static groups. The dynlist overlay doesn't define the memberOf attribute schema. Something else needs to do that, either loading it as user-defined schema, or relying on the memberof overlay to already be initialized. This seems like a messy loose end to leave dangling, but not sure what a better approach would be. Suggestions? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

4 10

Re: 2.4 commit review
by Hugh McMaster 24 Nov '19

24 Nov '19

Hi Quanah, On Sat, 2 Nov 2019 at 03:32, Quanah Gibson-Mount wrote: > > A few commits stacking up, so would like to review them for inclusion in an > eventual 2.4.49. Any chance that ITS#8996 could be included? Back in April, you said pkg-config support would need to wait for a 2.5 release [1], but given the pace of development, that could still be months or years away. Thanks, Hugh [1] http://www.openldap.org/lists/openldap-devel/201904/msg00012.html

3 9

Session tracking control
by Howard Chu 05 Nov '19

05 Nov '19

It looks like we currently parse this control, but only to allow logging its contents, and nothing more. Seems like it would be useful to carry the parsed info along with the o_authz struct, and make it usable in the ACL engine. This would allow setting ACLs that can distinguish between different applications acting on behalf of a given user (or service). Any security downside to this? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

2 1

Curious "missing parent" check in mdb_idscopes(), how may this occur?
by Konstantin Andreev 30 Oct '19

30 Oct '19

Hi, I am contemplating the mdb search mechanics, and puzzled by "missing parent" check in mdb_idscopes(): | /* If we didn't advance, some parent is missing */ | if ( id == prev ) | return MDB_NOTFOUND; where "id" and "prev" are parent and child ids that come from the same "UP" ( child -> parent ) record of "dn2id" table. Here is a source code approximation for easier reading: | MDB_val key = { sizeof(ID), & id }, data; | mdb_cursor_get( "dn2id", key, data, MDB_SET ); | // reading last sizeof(ID) bytes of data.mv_data | ID prev = *(ID *)(data.mv_data + data.mv_size - sizeof(ID)); IIUC, there is no records in "dn2id" where parent and child ids are the same. There is no by construction, except "super-root", where both ids are zeros, but zero id doesn't follow this execution path. So, how may [id == prev] occur? Could you, please, explain? The check came from 5a08b661 and 437f21b commits (ITS#7705,#7800 fix ...), I have read both, but they haven't helped either. Regard, Konstantin.

2 2

Please review 2.5 plan (non-development items)
by Ondřej Kuzník 24 Sep '19

24 Sep '19

Hi, I've prepared a plan what the project wants to achieve as part of the 2.5 stream apart from core OpenLDAP development that I intend to send to -technical for wider discussion and as a call for participation. It has been suggested to me that people might want to comment/propose changes to it so attaching a draft here. Please let me know what you think or if you agree in broad terms it is fit to be circulated more widely. Thanks, -- Ondřej Kuzník Senior Software Engineer Symas Corporation http://www.symas.com Packaged, certified, and supported LDAP solutions powered by OpenLDAP

6 7

STRERROR(e) vs AC_STRERROR_R(e,b,l)
by Ryan Tandy 16 Sep '19

16 Sep '19

I'm working on adding debug logging for GnuTLS errors. I'd like to add a strerror() inside tlsg_getfile() as part of this. First question: I found STRERROR(e) and AC_STRERROR_R(e,b,l). It looks like AC_STRERROR_R should be preferred for new code. Is that correct? Second question: I noticed that STRERROR(e) triggers deprecation warnings on my system: .../libraries/libldap/os-ip.c:248: warning: `sys_errlist' is deprecated; use `strerror' or `strerror_r' instead .../libraries/libldap/os-ip.c:248: warning: `sys_nerr' is deprecated; use `strerror' or `strerror_r' instead Is replacing occurrences of STRERROR with AC_STRERROR_R a worthwhile cleanup? (cf. 62da0b673, ba749eb79, bfd09a16a) Are there cases where AC_STRERROR_R would be inappropriate? (where the non-threadsafe strerror() fallback would be totally unacceptable?) Thanks.

1 0

git://git.openldap.org down?
by Michael Ströder 21 Aug '19

21 Aug '19

HI! It seems that git://git.openldap.org is not reachable since yesterday. Ciao, Michael.

2 1

← Newer
1
...
5
6
7
8
9
10
11
...
142
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-devel