openldap-devel

openldap-devel@openldap.org

1416 discussions

RE23 testing
by Quanah Gibson-Mount 13 Jul '08

13 Jul '08

Please test RE23. It has been tagged for 2.3.43, and considered ready for release unless something showstopping is reported. Latest change was to fix ppolicy (ITS#5569). --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

4 3

No tests using rwm-rewriteEngine?
by Gavin Henry 12 Jul '08

12 Jul '08

Hi All, I'm trying to provide an example config for slapo-rwm and not use the man page. The only tests I can find that mention rwm are: test028-idassert test030-relay test039-glue-ldap-concurrency test047-ldap Should there be a test for this? -- Kind Regards, Gavin Henry. Managing Director. T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry(a)suretecsystems.com Open Source. Open Solutions(tm). http://www.suretecsystems.com/ Suretec Systems is a limited company registered in Scotland. Registered number: SC258005. Registered office: 13 Whiteley Well Place, Inverurie, Aberdeenshire, AB51 4FP.

2 1

RE23 testing
by Quanah Gibson-Mount 11 Jul '08

11 Jul '08

Please test RE23, thanks! Only minor fixes plus the security fix. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

6 8

Re: RE23 testing
by Gavin Henry 07 Jul '08

07 Jul '08

Fine on Fedora i386/x86_64/ and the same on Ubuntu and Debian Etch (same archs). -- http://www.suretecsystems.com/services/openldap/

1 0

RE24
by Howard Chu 05 Jul '08

05 Jul '08

I think it's time to prepare for 2.4.11, there are some critical bug fixes now in HEAD that should be released ASAP. After that, we really should go through and close out all the old / partially fixed ITSes. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

4 3

Re: commit: ldap/libraries/liblber io.c
by Hallvard B Furuseth 02 Jul '08

02 Jul '08

hyc(a)OpenLDAP.org writes: > Modified Files: > io.c 1.120 -> 1.121 > ITS#5580 fix length decoding, verified with PROTOS Keep the sock_errset() if returning LBER_DEFAULT and sblen < 0? And maybe the variable used like i in the changed code must be ber_slen_t instead of int, I'm a bit too tired to check now. The remaining use of i as int looks OK. -- Hallvard

2 9

Compile warning using additonal CFLAGS '-Wshadow -Wpointer-arith -Wcast-qual -W'
by John Smith 30 Jun '08

30 Jun '08

i, Ive just downloaded and compiled openldap-2.4.10, but when I add the CFLAGS '-Wshadow -Wpointer-arith -Wcast-qual -W' I get the following warnings that may require further investigation of an developer : - declaration of 'foo' shadows a global declaration - cast discards qualifiers from pointer target type - missing initializer - signed and unsigned type in conditional expression - comparison between signed and unsigned - comparison of unsigned expression >= 0 is always true - comparison of unsigned expression < 0 is always false - declaration of 'foo' shadows a previous local - `foo' is deprecated; use `foobar' or `foo_r' instead - Perhaps this warrants some investigation by the developers ? Ive attached the complete build log for the full details. Regards, John Smith.

2 1

[BUG,PATCH] slapd unable to import CRL using GnuTLS backend
by arno＠natisbad.org 24 Jun '08

24 Jun '08

Hi, When openldap is linked with gnutls for TLS support, a file containing CRL in PEM format can be provided (in slapd.conf, using TLSCRLFile parameter). The following code in ldap_int_tls_init_ctx() (librairies/libldap/tls.c) prevents the daemon to start when the option is used: if ( lo->ldo_tls_crlfile ) { rc = gnutls_certificate_set_x509_crl_file( ((tls_ctx*) lo->ldo_tls_ctx)->cred, crlfile, GNUTLS_X509_FMT_PEM ); if ( rc < 0 ) goto error_exit; } because gnutls_certificate_set_x509_crl_file() returns the number of CRL files that have been imported which is stored in rc and returned later in the function. Caller expects 0, otherwise it reports an error, the value of rc (below, with 3 CRL in the file) and slapd fails to start: .... main TLS init def ctx failed: 3 The patch below is for 2.4.10, but should apply against all versions (it applies fine against current Debian version available under Unstable). Tell me if you have issues. I recompiled the Debian version with the patch applied and it works as expected. Cheers, a+

3 2

test suite data
by Howard Chu 18 Jun '08

18 Jun '08

I'm currently trying to run "make test" with back-ndb and most of the comparisons fail even though the backend is behaving correctly. 1) back-ndb always fills in all objectclasses in the objectclass chain, while the test.ldif files omit most of the superior classes. 2) back-ndb always returns attributes in the order they were defined in their corresponding objectclass definition, instead of preserving whatever order they were submitted in. Any thoughts on how to address this? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

4 8

managing OpenLDAP / back-config
by Ralf Haferkamp 17 Jun '08

17 Jun '08

With the great features that back-config provides to configure OpenLDAP servers at runtime it seems logical to start thinking about providing tools that could help to leverage those features. Currently to manage an OpenLDAP server through back-config you have the option to use either a generic LDAP Browser (JXplorer, Apache LDAP Studio, web2ldap), the OpenLDAP command line tools (ldapsearch, ldapmodify, ...) or homegrown software using one of the available LDAP APIs. I think it would be helpful to have some more sophisticated management tools (Commandline and/or GUI). In order to get there I think it could be helpful to create an API dedicated to provide an easy way to access the OpenLDAP configuration (databases, overlays, schema, access control, ...). This API could then be used to create different flavors of management tools. I have not yet spend too much time thinking about the design of such an API. Neither about the programming language that I'd use to implement something like this (Python, C, C++, ?). I first like to get a feeling how others think about this and if anybody is interested in collaborating on such an API. So please feel free to reply with your comments and suggestions :) -- regards, Ralf

7 24

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-devel