This is the first testing call for OpenLDAP 2.4.52. Depending on the results, this may be the only testing call.
Generally, get the code for RE24:
Extract, configure, and build.
Execute the test suite (via make test) after it is built. Optionally, cd tests && make its to run through the regression suite.
Thanks!
OpenLDAP 2.4.52 Engineering Added libldap LDAP_OPT_X_TLS_REQUIRE_SAN option (ITS#9318) Added libldap OpenSSL support for multiple EECDH curves (ITS#9054) Added slapd OpenSSL support for multiple EECDH curves (ITS#9054) Fixed librewrite malloc/free corruption (ITS#9249) Fixed libldap hang when using UDP and server down (ITS#9328) Fixed slapd syncrepl rare deadlock due to network issues (ITS#9324) Fixed slapd syncrepl regression that could trigger an assert (ITS#9329)
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
On 8/27/20 1:06 AM, Quanah Gibson-Mount wrote:
This is the first testing call for OpenLDAP 2.4.52.
FWIW I have this in my slapd.conf:
TLSECName secp521r1
But with 2.4.52-releng slapd won't start anymore with this message:
TLS: could not set EC name `secp521r1'.
I guess this is caused by the changes made for ITS#9054. Is directive TLSECName obsolete now?
Ciao, Michael.
Michael Ströder wrote:
On 8/27/20 1:06 AM, Quanah Gibson-Mount wrote:
This is the first testing call for OpenLDAP 2.4.52.
FWIW I have this in my slapd.conf:
TLSECName secp521r1
But with 2.4.52-releng slapd won't start anymore with this message:
TLS: could not set EC name `secp521r1'.
I guess this is caused by the changes made for ITS#9054. Is directive TLSECName obsolete now?
Thanks for the report, no there was a typo in the latest patch. Fixed now in master, commit 536767798b
Ciao, Michael.
On Wed, 26 Aug 2020, Quanah Gibson-Mount wrote:
This is the first testing call for OpenLDAP 2.4.52.
On Red Hat Enterprise Linux Server release 7.8 (Maipo), with all the latest updates installed, "make its" fails like this:
Starting its9282 ...
running defines.sh This test tracks a case where a deleted entry gets resurrected. See https://bugs.openldap.org/show_bug.cgi?id=9282 for more information. Initializing server configuration for MMR1... slapadd: could not add entry dn="olcOverlay={0}syncprov,olcDatabase={1}mdb,cn=config" (line=914): Initializing server configuration for MMR2... slapadd: could not add entry dn="olcOverlay={0}syncprov,olcDatabase={1}mdb,cn=config" (line=914): Starting provider slapd on TCP/IP URI ldap://localhost:9011/ Using ldapsearch to check that provider slapd is running... Starting provider slapd on TCP/IP URI ldap://localhost:9012/ Using ldapsearch to check that provider slapd is running... Sleeping 15 seconds to allow stabilization... Populating database on provider... Waiting on databases to sync... No such object (32) Comparing entry on providers... ldapsearch on ldap://localhost:9012/ failed with error 32.
./data/regressions/its9282/its9282 failed (exit 32)
make[1]: *** [bdb-its-yes] Error 32 make[1]: Leaving directory `/home/jokke/ol/openldap-OPENLDAP_REL_ENG_2_4/tests' make: *** [regressions] Error 2
Best regards, Jokke Hämäläinen
--On Thursday, August 27, 2020 4:58 PM +0300 openldap-technical@kolttonen.fi wrote:
On Wed, 26 Aug 2020, Quanah Gibson-Mount wrote:
This is the first testing call for OpenLDAP 2.4.52.
On Red Hat Enterprise Linux Server release 7.8 (Maipo), with all the latest updates installed, "make its" fails like this:
Starting its9282 ...
ldapsearch on ldap://localhost:9012/ failed with error 32.
./data/regressions/its9282/its9282 failed (exit 32)
Thanks for the report! Will see if I can get this to reproduce as well.
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
--On Thursday, August 27, 2020 8:57 AM -0700 Quanah Gibson-Mount quanah@symas.com wrote:
> Starting its9282 ...
ldapsearch on ldap://localhost:9012/ failed with error 32.
> ./data/regressions/its9282/its9282 failed (exit 32)
Thanks for the report! Will see if I can get this to reproduce as well.
There was a typo in the regression script that made it only work with the mdb backend. This has been fixed, thanks again for the report!
Regards, Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com
openldap-technical@openldap.org