6:19 a.m.
This is expected to be the final testing call for 2.4.48, with an
anticipated release, depending on feedback, during the week of 2019/06/24.
Generally, get the code for RE24:
<http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs...
Configure & build.
Execute the test suite (via make test) after it is built. Optionally, cd
tests && make its to run through the regression suite.
Thanks!
OpenLDAP 2.4.48 Engineering
Added libldap OpenSSL Elliptic Curve support (ITS#7595)
Added libldap Expose OpenLDAP specific interfaces via openldap.h
(ITS#8671)
Added slapd-monitor support for slapd-mdb (ITS#7770)
Fixed liblber leaks (ITS#8727)
Fixed liblber with partial flush (ITS#8864)
Fixed libldap ASYNC TLS so it works (ITS#8957,ITS#8980)
Fixed libldap ASYNC connections with Solaris 10 (ITS#8968)
Fixed libldap with SASL_NOCANON=on and ldapi connections (ITS#7585)
Fixed libldap to use AI_ADDRCONFIG when available (ITS#7326)
Fixed libldap to be able to unset syncrepl TLS options (ITS#7042)
Fixed libldap race condition in ldap_int_initialize (ITS#7996,
ITS#8450)
Fixed libldap return code in ldap_create_assertion_control_value
(ITS#8674)
Fixed libldap to correctly disable IPv6 when configured to do so
(ITS#8754)
Fixed libldap to correctly close TLS connection (ITS#8755)
Fixed libldap_r handling of deprecated OpenSSL function (ITS#8353)
Fixed liblunicode case correspondance (ITS#8508)
Fixed slapd with an idletimeout of less than four seconds (ITS#8952)
Fixed slapd config parser variable for Windows64 (ITS#9012)
Fixed slapd syncrepl fallback handling with delta-syncrepl
(ITS#9015)
Fixed slapd telephoneNumberNormalize, cert DN validation (ITS#8999)
Fixed slapd syncrepl for relax with delta-syncrepl (ITS#8037)
Fixed slapd TLS settings on reconnection (ITS#8427)
Fixed slapd to restrict rootDN proxyauthz to its own databases
(ITS#9038)
Fixed slapo-accesslog with SLAP_MOD_SOFT modifications (ITS#8990)
Fixed slapd-ldap starttls connections timeout behavior (ITS#8963)
Fixed slapd-ldap TLS settings on reconnection (ITS#8427)
Fixed slapd-ldap segfault when entry result doesn't match filter
(ITS#8997)
Fixed slapd-meta conversion from slapd.conf to cn=config (ITS#8743)
Fixed slapd-meta TLS settings on reconnection (ITS#8427)
Fixed slapd-meta assertion when network interface goes down
(ITS#8841)
Fixed slapd-mdb fix bitshift integer overflow (ITS#8989)
Fixed slapd-mdb index cleanup with cn=config (ITS#8472)
Fixed slapo-accesslog possible assert with exops (ITS#8971)
Fixed slapo-chain to correctly reject multiple chaining URIs
(ITS#8637)
Fixed slapo-chain conversion from slapd.conf to cn=config (ITS#8799)
Fixed slapo-memberof conversion from slapd.conf to cn=config
(ITS#8663)
Fixed slapo-memberof for group name change to itself (ITS#9000)
Fixed slapo-ppolicy behavior when pwdInHistory is changed (ITS#8349)
Fixed slapo-rwm to not free original filter (ITS#8964)
Fixed slapo-syncprov contextCSN generation (ITS#9015)
Build Environment
Fixed slapd to only link to BDB libraries with static build
(ITS#8948)
Fixed libldap implicit declaration with LDAP_CONNECTIONLESS
(ITS#8794)
Documentation
General - Fixed minor typos (ITS#8764, ITS#8761)
admin24 - Miscellaneous updates promoting mdb and fixing
examples (ITS#9031)
slapd.access(5) - Note MDB is the primary backend (ITS#8881)
slapd.backends(5) - Note MDB is the recommended backend
(ITS#8771)
slapd-ldap(5) - Document starttls parameter (ITS#8693)
Contrib
Added slapo-lastbind capability to forward authTimestamp
updates (ITS#7721)
LMDB 0.9.24 Engineering
ITS#8969 Tweak mdb_page_split
ITS#8975 WIN32 fix writemap set_mapsize crash
ITS#9007 Fix loose pages in WRITEMAP
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
7:57 a.m.
On 6/21/19 3:19 PM, Quanah Gibson-Mount wrote:
This is expected to be the final testing call for 2.4.48, with an
anticipated release, depending on feedback, during the week of 2019/06/24.
make test worked just fine.
revision ee4538080
openSUSE Tumbleweed x86_64
gcc 9.1.1
Ciao, Michael.
2:56 p.m.
--On Friday, June 21, 2019 7:19 AM -0700 Quanah Gibson-Mount
<quanah(a)symas.com> wrote:
This is expected to be the final testing call for 2.4.48, with an
anticipated release, depending on feedback, during the week of 2019/06/24.
ITS#7585 needs a further fix for FreeBSD12, working on it.
--Quanah
3:06 p.m.
--On Friday, June 21, 2019 3:56 PM -0700 Quanah Gibson-Mount
<quanah(a)symas.com> wrote:
--On Friday, June 21, 2019 7:19 AM -0700 Quanah Gibson-Mount
<quanah(a)symas.com> wrote:
> This is expected to be the final testing call for 2.4.48, with an
> anticipated release, depending on feedback, during the week of
> 2019/06/24.
ITS#7585 needs a further fix for FreeBSD12, working on it.
Proposed patch, not sure if it should come before or after the #ifdef
HAVE_CYRUS_SASL:
diff --git a/libraries/libldap/cyrus.c b/libraries/libldap/cyrus.c
index f292527de..4d90120e6 100644
--- a/libraries/libldap/cyrus.c
+++ b/libraries/libldap/cyrus.c
@@ -29,6 +29,10 @@
#include <limits.h>
#endif
+#if !defined(HOST_NAME_MAX) && defined(_POSIX_HOST_NAME_MAX)
+#define HOST_NAME_MAX _POSIX_HOST_NAME_MAX
+#endif
+
#include "ldap-int.h"
#ifdef HAVE_CYRUS_SASL
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
1:24 a.m.
On 6/21/19 4:57 PM, Michael Ströder wrote:
On 6/21/19 3:19 PM, Quanah Gibson-Mount wrote:
> This is expected to be the final testing call for 2.4.48, with an
> anticipated release, depending on feedback, during the week of 2019/06/24.
make test worked just fine.
revision ee4538080
openSUSE Tumbleweed x86_64
gcc 9.1.1
Furthermore I've generated RPM packages of this snapshot [1] and did
some short tests with Æ-DIR which uses a combination of many different
overlays. For now it seems to work just fine.
And thanks for adding ITS#7770. That's really useful.
[1]
https://build.opensuse.org/package/show/home:stroeder:branches:home:stroe...
Ciao, Michael.
1:08 p.m.
--On Saturday, June 22, 2019 11:24 AM +0200 Michael Ströder
<michael(a)stroeder.com> wrote:
Furthermore I've generated RPM packages of this snapshot [1] and
did
some short tests with Æ-DIR which uses a combination of many different
overlays. For now it seems to work just fine.
Thanks for the extended testing Michael!
Would you be able to do some loops of test050 and see if you can reproduce
the issue I just reported?
Thanks,
Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
11:33 p.m.
Am Freitag, den 21.06.2019, 06:19 -0700 schrieb Quanah Gibson-Mount:
This is expected to be the final testing call for 2.4.48, with an
anticipated release, depending on feedback, during the week of 2019/06/24.
Generally, get the code for RE24:
<http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs...
Configure & build.
Compiled sussessfully on CentOS7 x86_64. make test failed.
>>>> Starting test065-proxyauthz for mdb...
Starting
master slapd on TCP/IP port 9011...
Using ldapsearch to check that master slapd is running...
Using ldapadd to populate the master directory...
Starting proxy cache on TCP/IP port 9012...
Using ldapsearch to check that proxy slapd is running...
Making queries on the proxy cache...
Query 1: cn=James A Jones 1,ou=Alumni
Association,ou=People,dc=example,dc=com
Refresh failed
[...]
Armin.
9:10 a.m.
Le 21/06/2019 à 15:19, Quanah Gibson-Mount a écrit :
This is expected to be the final testing call for 2.4.48, with an
anticipated release, depending on feedback, during the week of
2019/06/24.
Generally, get the code for RE24:
<http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs...
Configure & build.
Build done on CentOS 7 and RHEL 8, without issues.
I'll try to run the tests tomorrow.
--
Clément Oudot | Identity Solutions Manager
clement.oudot(a)worteks.com
Worteks | https://www.worteks.com
5:18 a.m.
Le 24/06/2019 à 18:10, Clément OUDOT a écrit :
Le 21/06/2019 à 15:19, Quanah Gibson-Mount a écrit :
> This is expected to be the final testing call for 2.4.48, with an
> anticipated release, depending on feedback, during the week of
> 2019/06/24.
>
> Generally, get the code for RE24:
>
>
<http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs...
>
>
> Configure & build.
Build done on CentOS 7 and RHEL 8, without issues.
I'll try to run the tests tomorrow.
Hello,
make test: success on CentOS7 and RHEL8
make its: success and RHEL8, failure on CentOS7:Modifying
ldap://localhost:9013/ entry cn=Elmer_Fudd,ou=People,dc=example,dc=com
with value Fudd iteration 17596 of 20000
./data/regressions/its8752/its8752 : ligne 505 : 1970
Abandon $SLAPD -f $MYCONF -h $MYURI -d $LVL $TIMING >>
$MYLOG 2>&1
./data/regressions/its8752/its8752 : ligne 505 : 2005
Abandon $SLAPD -f $MYCONF -h $MYURI -d $LVL $TIMING >>
$MYLOG 2>&1
ldapmodify failed (255)
./data/regressions/its8752/its8752: ligne 456 : kill: (2005) - Aucun
processus de ce type
./data/regressions/its8752/its8752: ligne 456 : kill: (1970) - Aucun
processus de ce type
>>>> ./data/regressions/its8752/its8752 failed (exit 1)
make[1]: *** [bdb-its-yes] Erreur 1
make[1] : on quitte le répertoire «
/home/clement/build/BUILD/openldap-2.4.48/tests »
make: *** [regressions] Erreur 2
--
Clément Oudot | Identity Solutions Manager
clement.oudot(a)worteks.com
Worteks | https://www.worteks.com
5:24 a.m.
Le 25/06/2019 à 14:18, Clément OUDOT a écrit :
Le 24/06/2019 à 18:10, Clément OUDOT a écrit :
> Le 21/06/2019 à 15:19, Quanah Gibson-Mount a écrit :
>> This is expected to be the final testing call for 2.4.48, with an
>> anticipated release, depending on feedback, during the week of
>> 2019/06/24.
>>
>> Generally, get the code for RE24:
>>
>>
<http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs...
>>
>>
>> Configure & build.
> Build done on CentOS 7 and RHEL 8, without issues.
>
>
> I'll try to run the tests tomorrow.
>
Hello,
make test: success on CentOS7 and RHEL8
make its: success and RHEL8, failure on CentOS7
Sorry, the failure was linked to a full disk, I am running the tests
again, but all should work.
--
Clément Oudot | Identity Solutions Manager
clement.oudot(a)worteks.com
Worteks | https://www.worteks.com
6:43 a.m.
New subject: libldap 2.4.48 compability (was: RE24 testing call)
On 6/22/19 10:08 PM, Quanah Gibson-Mount wrote:
--On Saturday, June 22, 2019 11:24 AM +0200 Michael Ströder
<michael(a)stroeder.com> wrote:
> Furthermore I've generated RPM packages of this snapshot [1] and did
> some short tests with Æ-DIR which uses a combination of many different
> overlays. For now it seems to work just fine.
Thanks for the extended testing Michael!
For my understanding: Does 2.4.48 require applications linked to libldap
to be rebuilt or is it ABI compatible?
In most of my tests I can use 2.4.48 as binary drop-in replacement for
2.4.47. For this to work I've patched away the "releng" suffix. [1]
But dhcpd (using LDAP as backend) refuses to correctly start when using
libldap 2.4.48. It says "Can't contact LDAP server" although the server
is reachable. Looking at its strace output and slapd syslog dhcpd does
not even try connecting to slapd. After reinstalling libldap 2.4.47
everything works again.
It's not a big deal because in this packaged environment everything gets
rebuilt anyway if OpenLDAP upgrade is pushed. But I want to make sure I
fully understand everything and there's no issue left e.g. by
introducing openldap.h.
Ciao, Michael.
[1]
https://build.opensuse.org/package/view_file/home:stroeder:branches:home:...
7:10 a.m.
New subject: libldap 2.4.48 compability (was: RE24 testing call)
Michael Ströder wrote:
On 6/22/19 10:08 PM, Quanah Gibson-Mount wrote:
> --On Saturday, June 22, 2019 11:24 AM +0200 Michael Ströder
> <michael(a)stroeder.com> wrote:
>
>> Furthermore I've generated RPM packages of this snapshot [1] and did
>> some short tests with Æ-DIR which uses a combination of many different
>> overlays. For now it seems to work just fine.
>
> Thanks for the extended testing Michael!
For my understanding: Does 2.4.48 require applications linked to libldap
to be rebuilt or is it ABI compatible?
There should be no ABI changes.
In most of my tests I can use 2.4.48 as binary drop-in replacement for
2.4.47. For this to work I've patched away the "releng" suffix. [1]
But dhcpd (using LDAP as backend) refuses to correctly start when using
libldap 2.4.48. It says "Can't contact LDAP server" although the server
is reachable. Looking at its strace output and slapd syslog dhcpd does
not even try connecting to slapd. After reinstalling libldap 2.4.47
everything works again.
It's not a big deal because in this packaged environment everything gets
rebuilt anyway if OpenLDAP upgrade is pushed. But I want to make sure I
fully understand everything and there's no issue left e.g. by
introducing openldap.h.
Ciao, Michael.
[1]
https://build.opensuse.org/package/view_file/home:stroeder:branches:home:...
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
7:16 a.m.
New subject: libldap 2.4.48 compability (was: RE24 testing call)
On 6/25/19 4:10 PM, Howard Chu wrote:
Michael Ströder wrote:
> For my understanding: Does 2.4.48 require applications linked to libldap
> to be rebuilt or is it ABI compatible?
There should be no ABI changes.
Thanks for the confirmation.
> But dhcpd (using LDAP as backend) refuses to correctly start when
using
> libldap 2.4.48. It says "Can't contact LDAP server" although the
server
> is reachable. Looking at its strace output and slapd syslog dhcpd does
> not even try connecting to slapd. After reinstalling libldap 2.4.47
> everything works again.
Any idea how I could find out what's going wrong? dhcpd seems to
dynamically link libldap 2.4.48 but fails to properly use it.
Ciao, Michael.
7:27 a.m.
Quanah Gibson-Mount wrote:
--On Friday, June 21, 2019 3:56 PM -0700 Quanah Gibson-Mount
<quanah(a)symas.com> wrote:
> --On Friday, June 21, 2019 7:19 AM -0700 Quanah Gibson-Mount
> <quanah(a)symas.com> wrote:
>
>> This is expected to be the final testing call for 2.4.48, with an
>> anticipated release, depending on feedback, during the week of
>> 2019/06/24.
>
> ITS#7585 needs a further fix for FreeBSD12, working on it.
Proposed patch, not sure if it should come before or after the #ifdef HAVE_CYRUS_SASL:
Might as well put it after, but it makes very little difference.
diff --git a/libraries/libldap/cyrus.c b/libraries/libldap/cyrus.c
index f292527de..4d90120e6 100644
--- a/libraries/libldap/cyrus.c
+++ b/libraries/libldap/cyrus.c
@@ -29,6 +29,10 @@
#include <limits.h>
#endif
+#if !defined(HOST_NAME_MAX) && defined(_POSIX_HOST_NAME_MAX)
+#define HOST_NAME_MAX _POSIX_HOST_NAME_MAX
+#endif
+
#include "ldap-int.h"
#ifdef HAVE_CYRUS_SASL
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
8:07 a.m.
Le 25/06/2019 à 14:24, Clément OUDOT a écrit :
Le 25/06/2019 à 14:18, Clément OUDOT a écrit :
> Le 24/06/2019 à 18:10, Clément OUDOT a écrit :
>> Le 21/06/2019 à 15:19, Quanah Gibson-Mount a écrit :
>>> This is expected to be the final testing call for 2.4.48, with an
>>> anticipated release, depending on feedback, during the week of
>>> 2019/06/24.
>>>
>>> Generally, get the code for RE24:
>>>
>>>
<http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=snapshot;h=refs...
>>>
>>>
>>> Configure & build.
>> Build done on CentOS 7 and RHEL 8, without issues.
>>
>>
>> I'll try to run the tests tomorrow.
>>
> Hello,
>
> make test: success on CentOS7 and RHEL8
>
> make its: success and RHEL8, failure on CentOS7
Sorry, the failure was linked to a full disk, I am running the tests
again, but all should work.
I confirm, "make its" works on CentOS 7.
--
Clément Oudot | Identity Solutions Manager
clement.oudot(a)worteks.com
Worteks | https://www.worteks.com
8:21 a.m.
New subject: libldap 2.4.48 compability (was: RE24 testing call)
--On Tuesday, June 25, 2019 5:16 PM +0200 Michael Ströder
<michael(a)stroeder.com> wrote:
Any idea how I could find out what's going wrong? dhcpd seems to
dynamically link libldap 2.4.48 but fails to properly use it.
Can you step through it with something like gdb? Looking at the CHANGES
file, I don't see anything obvious, unless you disabled IPv6 during
compilation and its trying to use an IPv6 address (ITS#8754) or
AI_ADDRCONFIG does odd things on your system (ITS#7326).
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
8:30 a.m.
--On Monday, June 24, 2019 9:33 AM +0200 Armin Tüting
<Armin.Tueting(a)tueting-online.com> wrote:
>>>>> Starting test065-proxyauthz for mdb...
Starting master slapd on TCP/IP port 9011...
Using ldapsearch to check that master slapd is running...
Using ldapadd to populate the master directory...
Starting proxy cache on TCP/IP port 9012...
Using ldapsearch to check that proxy slapd is running...
Making queries on the proxy cache...
Query 1: cn=James A Jones 1,ou=Alumni
Association,ou=People,dc=example,dc=com
Refresh failed
Hi Armin,
Thanks for the report, I'm testing to see if I can reproduce this result.
Regards,
Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
3:24 p.m.
--On Tuesday, June 25, 2019 9:30 AM -0700 Quanah Gibson-Mount
<quanah(a)symas.com> wrote:
--On Monday, June 24, 2019 9:33 AM +0200 Armin Tüting
<Armin.Tueting(a)tueting-online.com> wrote:
>>>>>> Starting test065-proxyauthz for mdb...
> Starting master slapd on TCP/IP port 9011...
> Using ldapsearch to check that master slapd is running...
> Using ldapadd to populate the master directory...
> Starting proxy cache on TCP/IP port 9012...
> Using ldapsearch to check that proxy slapd is running...
> Making queries on the proxy cache...
> Query 1: cn=James A Jones 1,ou=Alumni
> Association,ou=People,dc=example,dc=com
> Refresh failed
Hi Armin,
Thanks for the report, I'm testing to see if I can reproduce this result.
I've run the test 2,000 times with zero failures. If you still have the
testrun directory available from this failed run, it may be worthwhile to
examine the slapd log file, etc, to see what it reported.
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>
5:06 p.m.
Am Dienstag, den 25.06.2019, 15:24 -0700 schrieb Quanah Gibson-Mount:
[...]
I've run the test 2,000 times with zero failures. If you still
have the
testrun directory available from this failed run, it may be worthwhile to
examine the slapd log file, etc, to see what it reported.
The issue has gone for
various reason... Reboot... Re-Compile...
All good for 'make test' on CentOS7...
Armin.
1555
days inactive
1560
days old
18 comments
5 participants
participants (5)
-
Armin Tüting -
Clément OUDOT -
Howard Chu -
Michael Ströder -
Quanah Gibson-Mount