openldap-technical

openldap-technical@openldap.org

13 participants
9906 discussions

Re: memberOf overlay issues with 2.4.44 + ITS 8432 patch
by Quanah Gibson-Mount 29 Dec '16

29 Dec '16

--On Wednesday, December 28, 2016 4:44 PM -0800 "Paul B. Henson" <henson(a)acm.org> wrote: > On Wed, Dec 28, 2016 at 09:53:23AM -0800, Quanah Gibson-Mount wrote: > >> I'm going to see if I can create a test that reproduces the issue. >> I've been working on expanding the test suite so we can ensure we >> avoid regressions etc. > > Cool, thanks. Let me know if there's anything I can do to help. I'm able to reproduce the problem with my test script, so I think things are set from here. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

2 1

Re: memberOf overlay issues with 2.4.44 + ITS 8432 patch
by Quanah Gibson-Mount 28 Dec '16

28 Dec '16

--On Thursday, December 22, 2016 6:12 PM -0800 "Paul B. Henson" <henson(a)acm.org> wrote: >> Probably worth adding to ITS#8444. > > Ok, will do. Although it seems there's been no response to that ticket > for six months :(? Anything else I can provide to help debug this? > Unfortunately it doesn't seem to be a straight "always happens" bug, I > didn't see it all in my dev environment under a test load, it only > popped up in production under a full load. I'm going to see if I can create a test that reproduces the issue. I've been working on expanding the test suite so we can ensure we avoid regressions etc. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

2 1

Re: 2.4.44 segfault in modify_add_values
by Quanah Gibson-Mount 28 Dec '16

28 Dec '16

--On Sunday, December 25, 2016 8:19 AM -0800 "Paul B. Henson" <henson(a)acm.org> wrote: > Woke up this morning to an unwanted Christmas present :(, one of my ldap > servers had crashed with a segfault: > I restarted it and it synced right back up from the failover master and > seems to be ok now. Does this pop out as anything known and possibly > resolved in head? Thanks... Doesn't ring a bell, and unfortunately it looks like your binaries are stripped, so the backtrace doesn't contain useful information. :( --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

2 1

Re: Bulk change user's attribute
by Quanah Gibson-Mount 28 Dec '16

28 Dec '16

--On Friday, December 23, 2016 11:39 AM +0000 Bruno Miguel Martins <bruno.miguel.martins(a)iten.pt> wrote: > > > Hello guys, > > > > I am running slapd 2.3.30 and I need to bulk modify one LDAP attribute > (sambaHomePath) for all of my users, like: > > > > Current value = \\oldserver\username > > New value = \\newserver\username > > > > Can this be done? Basically I need a partial change of that attribute – > "oldserver" which is variable, changed with "newserver" which is > fixed. Other than the fact that 2.3.30 is ancient and unsupported... You should be able to do this, yes. You could use a scripting module such as Net::LDAP in Perl. If it is possible to do a substring query on the attribute in question, you could use a filter of "(attr=*oldserver*)" to get a set of entries back, and then iterate over them and do the update in the script. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

1 0

cant create child entrys
by robert k Wild 28 Dec '16

28 Dec '16

hi all, i cant create child entrys apart from OU and OR, why is this? i have installed openldap on a centos 7 vm and also phpldapadmin to manage the ldap server i imagine this is an openldap issue and not a php ldap admin issue https://s28.postimg.org/l5zb58h4t/Capture.png -- Regards, Robert K Wild.

2 2

2.4.44 segfault in modify_add_values
by Paul B. Henson 25 Dec '16

25 Dec '16

Woke up this morning to an unwanted Christmas present :(, one of my ldap servers had crashed with a segfault: Core was generated by `/usr/lib64/openldap/slapd -u ldap -g ldap -h ldaps:// ldap://'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x0000000000485c61 in modify_add_values () [Current thread is 1 (Thread 0x7f50727fd700 (LWP 15556))] (gdb) where #0 0x0000000000485c61 in modify_add_values () #1 0x00007f526dfccd0c in mdb_modify_internal () from /usr/lib64/openldap/openldap/back_mdb.so #2 0x00007f526dfce134 in mdb_modify () from /usr/lib64/openldap/openldap/back_mdb.so #3 0x000000000049c2ea in overlay_op_walk () #4 0x000000000049c441 in ?? () #5 0x000000000048d938 in ?? () #6 0x00000000004915d7 in ?? () #7 0x0000000000495793 in ?? () #8 0x0000000000433037 in ?? () #9 0x00007f5272c83a32 in ?? () from /usr/lib64/libldap_r-2.4.so.2 #10 0x00007f52722ce494 in start_thread () from /lib64/libpthread.so.0 #11 0x00007f52719c6edd in clone () from /lib64/libc.so.6 The last bit in the log was an update, then it ended: Dec 25 03:31:03 fosse slapd[3333]: conn=561646 op=3 MOD dn="uid=aapriest,ou=user,dc=csupomona,dc=edu " Dec 25 03:31:03 fosse slapd[3333]: conn=561646 op=3 MOD attr=csupomonaEduPersonExpiration When I saw the alert on my phone when I woke up I assumed it would have something to do with the memberOf overlay issues I was already looking into but this seems different. I restarted it and it synced right back up from the failover master and seems to be ok now. Does this pop out as anything known and possibly resolved in head? Thanks...

1 0

LDAP User can't login can su to with root account
by Frank Yu 24 Dec '16

24 Dec '16

Hi All, I have setup a LDAP service on host A, and configure ldap client on host B. when I tried to login host B with user which already added in LDAP server, it report error even through I enter right passwd shanzhi.yu(a)10.10.10.101's password: debug3: send packet: type 50 debug2: we sent a password packet, wait for reply debug3: receive packet: type 51 debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password Permission denied, please try again. shanzhi.yu(a)10.10.10.101's password: debug3: send packet: type 50 debug2: we sent a password packet, wait for reply debug3: receive packet: type 51 debug1: Authentications that can continue: publickey,gssapi-keyex,gssapi-with-mic,password Permission denied, please try again. shanzhi.yu(a)10.10.10.101's password:" and, I can su to user shanzhi.yu on host B [root@ host B ~]# su shanzhi.yu [shanzhi.yu@ host B root]$ cd [shanzhi.yu@ host B ~]$ What's the problem? any config should I do? Thanks -- Regards Frank Yu

2 4

Bulk change user's attribute
by Bruno Miguel Martins 23 Dec '16

23 Dec '16

Hello guys, I am running slapd 2.3.30 and I need to bulk modify one LDAP attribute (sambaHomePath) for all of my users, like: Current value = \\oldserver\username<file://oldserver/username> New value = \\newserver\username<file://newserver/username> Can this be done? Basically I need a partial change of that attribute - "oldserver" which is variable, changed with "newserver" which is fixed. Thank you! [cid:image002.png@01D25D11.3775A610] BRUNO MIGUEL MARTINS | System Engineer +351 926 845 866 www.iten.pt<http://www.iten.pt>

1 0

help with ACL
by Alberto Aldrigo 23 Dec '16

23 Dec '16

1 0

Re: memberOf overlay issues with 2.4.44 + ITS 8432 patch
by Quanah Gibson-Mount 22 Dec '16

22 Dec '16

----- Original Message ----- > From: "Paul B. Henson" <henson(a)acm.org> > To: openldap-technical(a)openldap.org > Sent: Wednesday, December 21, 2016 6:56:30 PM > Subject: memberOf overlay issues with 2.4.44 + ITS 8432 patch > So far, I've only seem this behavior for group membership removals. Adds > don't seem to cause a problem, nor do create/delete of groups or users > as far as I can tell. > > Any thoughts on what's going on here? It's not causing any failures yes, > as removing members multiple times results in the same end state and the > multiple replication seems to have a fairly low upper bound. But it > would be nice to fix it :). Looks like a bug with the memberOf overlay when it is instantiated in a delta-syncrepl environment, based on this statement from the memberOf man page: The memberof overlay may be used with any backend that provides full read-write functionality, but it is mainly intended for use with local storage backends. The maintenance operations it performs are internal to the server on which the overlay is configured and are never replicated. Replica servers should be configured with their own instances of the memberOf overlay if it is desired to maintain these memberOf attributes on the replicas. Probably worth adding to ITS#8444. --Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical