This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
Generally, get the code for RE24:
Configure & build.
Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite.
Thanks!
OpenLDAP 2.4.48 Engineering Added libldap OpenSSL Elliptic Curve support (ITS#7595) Added libldap Expose OpenLDAP specific interfaces via openldap.h (ITS#8671) Added slapd-monitor support for slapd-mdb (ITS#7770) Fixed liblber leaks (ITS#8727) Fixed liblber with partial flush (ITS#8864) Fixed libldap ASYNC TLS so it works (ITS#8957,ITS#8980) Fixed libldap ASYNC connections with Solaris 10 (ITS#8968) Fixed libldap with SASL_NOCANON=on and ldapi connections (ITS#7585) Fixed libldap to use AI_ADDRCONFIG when available (ITS#7326) Fixed libldap to be able to unset syncrepl TLS options (ITS#7042) Fixed libldap race condition in ldap_int_initialize (ITS#7996, ITS#8450) Fixed libldap return code in ldap_create_assertion_control_value (ITS#8674) Fixed libldap to correctly disable IPv6 when configured to do so (ITS#8754) Fixed libldap to correctly close TLS connection (ITS#8755) Fixed libldap_r handling of deprecated OpenSSL function (ITS#8353) Fixed liblunicode case correspondance (ITS#8508) Fixed slapd with an idletimeout of less than four seconds (ITS#8952) Fixed slapd config parser variable for Windows64 (ITS#9012) Fixed slapd syncrepl fallback handling with delta-syncrepl (ITS#9015) Fixed slapd telephoneNumberNormalize, cert DN validation (ITS#8999) Fixed slapd syncrepl for relax with delta-syncrepl (ITS#8037) Fixed slapd TLS settings on reconnection (ITS#8427) Fixed slapd to restrict rootDN proxyauthz to its own databases (ITS#9038) Fixed slapo-accesslog with SLAP_MOD_SOFT modifications (ITS#8990) Fixed slapd-ldap starttls connections timeout behavior (ITS#8963) Fixed slapd-ldap TLS settings on reconnection (ITS#8427) Fixed slapd-ldap segfault when entry result doesn't match filter (ITS#8997) Fixed slapd-meta conversion from slapd.conf to cn=config (ITS#8743) Fixed slapd-meta TLS settings on reconnection (ITS#8427) Fixed slapd-meta assertion when network interface goes down (ITS#8841) Fixed slapd-mdb fix bitshift integer overflow (ITS#8989) Fixed slapd-mdb index cleanup with cn=config (ITS#8472) Fixed slapo-accesslog possible assert with exops (ITS#8971) Fixed slapo-chain to correctly reject multiple chaining URIs (ITS#8637) Fixed slapo-chain conversion from slapd.conf to cn=config (ITS#8799) Fixed slapo-memberof conversion from slapd.conf to cn=config (ITS#8663) Fixed slapo-memberof for group name change to itself (ITS#9000) Fixed slapo-ppolicy behavior when pwdInHistory is changed (ITS#8349) Fixed slapo-rwm to not free original filter (ITS#8964) Fixed slapo-syncprov contextCSN generation (ITS#9015) Build Environment Fixed slapd to only link to BDB libraries with static build (ITS#8948) Fixed libldap implicit declaration with LDAP_CONNECTIONLESS (ITS#8794) Documentation General - Fixed minor typos (ITS#8764, ITS#8761) admin24 - Miscellaneous updates promoting mdb and fixing examples (ITS#9031) slapd.access(5) - Note MDB is the primary backend (ITS#8881) slapd.backends(5) - Note MDB is the recommended backend (ITS#8771) slapd-ldap(5) - Document starttls parameter (ITS#8693) Contrib Added slapo-lastbind capability to forward authTimestamp updates (ITS#7721)
LMDB 0.9.24 Engineering ITS#8969 Tweak mdb_page_split ITS#8975 WIN32 fix writemap set_mapsize crash ITS#9007 Fix loose pages in WRITEMAP
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
On 6/21/19 3:19 PM, Quanah Gibson-Mount wrote:
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
make test worked just fine.
revision ee4538080 openSUSE Tumbleweed x86_64 gcc 9.1.1
Ciao, Michael.
On 6/21/19 4:57 PM, Michael Ströder wrote:
On 6/21/19 3:19 PM, Quanah Gibson-Mount wrote:
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
make test worked just fine.
revision ee4538080 openSUSE Tumbleweed x86_64 gcc 9.1.1
Furthermore I've generated RPM packages of this snapshot [1] and did some short tests with Æ-DIR which uses a combination of many different overlays. For now it seems to work just fine.
And thanks for adding ITS#7770. That's really useful.
[1] https://build.opensuse.org/package/show/home:stroeder:branches:home:stroeder...
Ciao, Michael.
--On Saturday, June 22, 2019 11:24 AM +0200 Michael Ströder michael@stroeder.com wrote:
Furthermore I've generated RPM packages of this snapshot [1] and did some short tests with Æ-DIR which uses a combination of many different overlays. For now it seems to work just fine.
Thanks for the extended testing Michael!
Would you be able to do some loops of test050 and see if you can reproduce the issue I just reported?
Thanks, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
On 6/22/19 10:08 PM, Quanah Gibson-Mount wrote:
--On Saturday, June 22, 2019 11:24 AM +0200 Michael Ströder michael@stroeder.com wrote:
Furthermore I've generated RPM packages of this snapshot [1] and did some short tests with Æ-DIR which uses a combination of many different overlays. For now it seems to work just fine.
Thanks for the extended testing Michael!
For my understanding: Does 2.4.48 require applications linked to libldap to be rebuilt or is it ABI compatible?
In most of my tests I can use 2.4.48 as binary drop-in replacement for 2.4.47. For this to work I've patched away the "releng" suffix. [1]
But dhcpd (using LDAP as backend) refuses to correctly start when using libldap 2.4.48. It says "Can't contact LDAP server" although the server is reachable. Looking at its strace output and slapd syslog dhcpd does not even try connecting to slapd. After reinstalling libldap 2.4.47 everything works again.
It's not a big deal because in this packaged environment everything gets rebuilt anyway if OpenLDAP upgrade is pushed. But I want to make sure I fully understand everything and there's no issue left e.g. by introducing openldap.h.
Ciao, Michael.
[1] https://build.opensuse.org/package/view_file/home:stroeder:branches:home:str...
Michael Ströder wrote:
On 6/22/19 10:08 PM, Quanah Gibson-Mount wrote:
--On Saturday, June 22, 2019 11:24 AM +0200 Michael Ströder michael@stroeder.com wrote:
Furthermore I've generated RPM packages of this snapshot [1] and did some short tests with Æ-DIR which uses a combination of many different overlays. For now it seems to work just fine.
Thanks for the extended testing Michael!
For my understanding: Does 2.4.48 require applications linked to libldap to be rebuilt or is it ABI compatible?
There should be no ABI changes.
In most of my tests I can use 2.4.48 as binary drop-in replacement for 2.4.47. For this to work I've patched away the "releng" suffix. [1]
But dhcpd (using LDAP as backend) refuses to correctly start when using libldap 2.4.48. It says "Can't contact LDAP server" although the server is reachable. Looking at its strace output and slapd syslog dhcpd does not even try connecting to slapd. After reinstalling libldap 2.4.47 everything works again.
It's not a big deal because in this packaged environment everything gets rebuilt anyway if OpenLDAP upgrade is pushed. But I want to make sure I fully understand everything and there's no issue left e.g. by introducing openldap.h.
Ciao, Michael.
[1] https://build.opensuse.org/package/view_file/home:stroeder:branches:home:str...
On 6/25/19 4:10 PM, Howard Chu wrote:
Michael Ströder wrote:
For my understanding: Does 2.4.48 require applications linked to libldap to be rebuilt or is it ABI compatible?
There should be no ABI changes.
Thanks for the confirmation.
But dhcpd (using LDAP as backend) refuses to correctly start when using libldap 2.4.48. It says "Can't contact LDAP server" although the server is reachable. Looking at its strace output and slapd syslog dhcpd does not even try connecting to slapd. After reinstalling libldap 2.4.47 everything works again.
Any idea how I could find out what's going wrong? dhcpd seems to dynamically link libldap 2.4.48 but fails to properly use it.
Ciao, Michael.
--On Tuesday, June 25, 2019 5:16 PM +0200 Michael Ströder michael@stroeder.com wrote:
Any idea how I could find out what's going wrong? dhcpd seems to dynamically link libldap 2.4.48 but fails to properly use it.
Can you step through it with something like gdb? Looking at the CHANGES file, I don't see anything obvious, unless you disabled IPv6 during compilation and its trying to use an IPv6 address (ITS#8754) or AI_ADDRCONFIG does odd things on your system (ITS#7326).
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
--On Friday, June 21, 2019 7:19 AM -0700 Quanah Gibson-Mount quanah@symas.com wrote:
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
ITS#7585 needs a further fix for FreeBSD12, working on it.
--Quanah
--On Friday, June 21, 2019 3:56 PM -0700 Quanah Gibson-Mount quanah@symas.com wrote:
--On Friday, June 21, 2019 7:19 AM -0700 Quanah Gibson-Mount quanah@symas.com wrote:
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
ITS#7585 needs a further fix for FreeBSD12, working on it.
Proposed patch, not sure if it should come before or after the #ifdef HAVE_CYRUS_SASL:
diff --git a/libraries/libldap/cyrus.c b/libraries/libldap/cyrus.c index f292527de..4d90120e6 100644 --- a/libraries/libldap/cyrus.c +++ b/libraries/libldap/cyrus.c @@ -29,6 +29,10 @@ #include <limits.h> #endif
+#if !defined(HOST_NAME_MAX) && defined(_POSIX_HOST_NAME_MAX) +#define HOST_NAME_MAX _POSIX_HOST_NAME_MAX +#endif + #include "ldap-int.h"
#ifdef HAVE_CYRUS_SASL
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
Quanah Gibson-Mount wrote:
--On Friday, June 21, 2019 3:56 PM -0700 Quanah Gibson-Mount quanah@symas.com wrote:
--On Friday, June 21, 2019 7:19 AM -0700 Quanah Gibson-Mount quanah@symas.com wrote:
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
ITS#7585 needs a further fix for FreeBSD12, working on it.
Proposed patch, not sure if it should come before or after the #ifdef HAVE_CYRUS_SASL:
Might as well put it after, but it makes very little difference.
diff --git a/libraries/libldap/cyrus.c b/libraries/libldap/cyrus.c index f292527de..4d90120e6 100644 --- a/libraries/libldap/cyrus.c +++ b/libraries/libldap/cyrus.c @@ -29,6 +29,10 @@ #include <limits.h> #endif
+#if !defined(HOST_NAME_MAX) && defined(_POSIX_HOST_NAME_MAX) +#define HOST_NAME_MAX _POSIX_HOST_NAME_MAX +#endif
#include "ldap-int.h"
#ifdef HAVE_CYRUS_SASL
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
Am Freitag, den 21.06.2019, 06:19 -0700 schrieb Quanah Gibson-Mount:
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
Generally, get the code for RE24:
Configure & build.
Compiled sussessfully on CentOS7 x86_64. make test failed.
Starting test065-proxyauthz for mdb...
Starting master slapd on TCP/IP port 9011... Using ldapsearch to check that master slapd is running... Using ldapadd to populate the master directory... Starting proxy cache on TCP/IP port 9012... Using ldapsearch to check that proxy slapd is running... Making queries on the proxy cache... Query 1: cn=James A Jones 1,ou=Alumni Association,ou=People,dc=example,dc=com Refresh failed
[...]
Armin.
--On Monday, June 24, 2019 9:33 AM +0200 Armin Tüting Armin.Tueting@tueting-online.com wrote:
Starting test065-proxyauthz for mdb...
Starting master slapd on TCP/IP port 9011... Using ldapsearch to check that master slapd is running... Using ldapadd to populate the master directory... Starting proxy cache on TCP/IP port 9012... Using ldapsearch to check that proxy slapd is running... Making queries on the proxy cache... Query 1: cn=James A Jones 1,ou=Alumni Association,ou=People,dc=example,dc=com Refresh failed
Hi Armin,
Thanks for the report, I'm testing to see if I can reproduce this result.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
--On Tuesday, June 25, 2019 9:30 AM -0700 Quanah Gibson-Mount quanah@symas.com wrote:
--On Monday, June 24, 2019 9:33 AM +0200 Armin Tüting Armin.Tueting@tueting-online.com wrote:
> Starting test065-proxyauthz for mdb...
Starting master slapd on TCP/IP port 9011... Using ldapsearch to check that master slapd is running... Using ldapadd to populate the master directory... Starting proxy cache on TCP/IP port 9012... Using ldapsearch to check that proxy slapd is running... Making queries on the proxy cache... Query 1: cn=James A Jones 1,ou=Alumni Association,ou=People,dc=example,dc=com Refresh failed
Hi Armin,
Thanks for the report, I'm testing to see if I can reproduce this result.
I've run the test 2,000 times with zero failures. If you still have the testrun directory available from this failed run, it may be worthwhile to examine the slapd log file, etc, to see what it reported.
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
Am Dienstag, den 25.06.2019, 15:24 -0700 schrieb Quanah Gibson-Mount:
[...]
I've run the test 2,000 times with zero failures. If you still have the testrun directory available from this failed run, it may be worthwhile to examine the slapd log file, etc, to see what it reported.
The issue has gone for various reason... Reboot... Re-Compile... All good for 'make test' on CentOS7...
Armin.
Le 21/06/2019 à 15:19, Quanah Gibson-Mount a écrit :
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
Generally, get the code for RE24:
Configure & build.
Build done on CentOS 7 and RHEL 8, without issues.
I'll try to run the tests tomorrow.
Le 24/06/2019 à 18:10, Clément OUDOT a écrit :
Le 21/06/2019 à 15:19, Quanah Gibson-Mount a écrit :
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
Generally, get the code for RE24:
Configure & build.
Build done on CentOS 7 and RHEL 8, without issues.
I'll try to run the tests tomorrow.
Hello,
make test: success on CentOS7 and RHEL8
make its: success and RHEL8, failure on CentOS7:Modifying ldap://localhost:9013/ entry cn=Elmer_Fudd,ou=People,dc=example,dc=com with value Fudd iteration 17596 of 20000 ./data/regressions/its8752/its8752 : ligne 505 : 1970 Abandon $SLAPD -f $MYCONF -h $MYURI -d $LVL $TIMING >> $MYLOG 2>&1 ./data/regressions/its8752/its8752 : ligne 505 : 2005 Abandon $SLAPD -f $MYCONF -h $MYURI -d $LVL $TIMING >> $MYLOG 2>&1 ldapmodify failed (255) ./data/regressions/its8752/its8752: ligne 456 : kill: (2005) - Aucun processus de ce type ./data/regressions/its8752/its8752: ligne 456 : kill: (1970) - Aucun processus de ce type
./data/regressions/its8752/its8752 failed (exit 1)
make[1]: *** [bdb-its-yes] Erreur 1 make[1] : on quitte le répertoire « /home/clement/build/BUILD/openldap-2.4.48/tests » make: *** [regressions] Erreur 2
Le 25/06/2019 à 14:18, Clément OUDOT a écrit :
Le 24/06/2019 à 18:10, Clément OUDOT a écrit :
Le 21/06/2019 à 15:19, Quanah Gibson-Mount a écrit :
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
Generally, get the code for RE24:
Configure & build.
Build done on CentOS 7 and RHEL 8, without issues.
I'll try to run the tests tomorrow.
Hello,
make test: success on CentOS7 and RHEL8
make its: success and RHEL8, failure on CentOS7
Sorry, the failure was linked to a full disk, I am running the tests again, but all should work.
Le 25/06/2019 à 14:24, Clément OUDOT a écrit :
Le 25/06/2019 à 14:18, Clément OUDOT a écrit :
Le 24/06/2019 à 18:10, Clément OUDOT a écrit :
Le 21/06/2019 à 15:19, Quanah Gibson-Mount a écrit :
This is expected to be the final testing call for 2.4.48, with an anticipated release, depending on feedback, during the week of 2019/06/24.
Generally, get the code for RE24:
Configure & build.
Build done on CentOS 7 and RHEL 8, without issues.
I'll try to run the tests tomorrow.
Hello,
make test: success on CentOS7 and RHEL8
make its: success and RHEL8, failure on CentOS7
Sorry, the failure was linked to a full disk, I am running the tests again, but all should work.
I confirm, "make its" works on CentOS 7.
-
Armin Tüting -
Clément OUDOT -
Howard Chu -
Michael Ströder -
Quanah Gibson-Mount