Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread Quanah Gibson-Mount




--On Friday, April 23, 2021 12:31 PM -0700 Scott Classen  
wrote:



Is it possible to specify an alternate openssl?

The default openssl that is distributed with CentOS7 is 1.0.2 which is
too old. I have installed 1.1.1g from the epel repository so I have these
packages available:

openssl.x86_64  1:1.0.2k-21.el7_9
@updates  openssl-devel.x86_641:1.0.2k-21.el7_9
@updates  openssl-libs.x86_64 1:1.0.2k-21.el7_9
@updates  openssl11.x86_641:1.1.1g-3.el7
@epel openssl11-devel.x86_64  1:1.1.1g-3.el7
@epel openssl11-libs.x86_64   1:1.1.1g-3.el7
@epel


But I'm not sure how to specify this during configure.


What path is the alternate OpenSSL installed into? I'd suggest uninstalling 
openssl-devel.x86_64 so it's not picked up, and then ensure your build 
flags are set appropriately.


For example, assuming openssl11 was installed into /usr/local:

LD_FLAGS=-L/usr/local/lib -Wl,-rpath,/usr/local/lib
CPP_FLAGS=-I/usr/local/include

etc

Regards,
Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:



Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread Scott Classen
Is it possible to specify an alternate openssl?

The default openssl that is distributed with CentOS7 is 1.0.2 which is too old. 
I have installed 1.1.1g from the epel repository so I have these packages 
available:

openssl.x86_64  1:1.0.2k-21.el7_9  @updates 
openssl-devel.x86_641:1.0.2k-21.el7_9  @updates 
openssl-libs.x86_64 1:1.0.2k-21.el7_9  @updates 
openssl11.x86_641:1.1.1g-3.el7 @epel
openssl11-devel.x86_64  1:1.1.1g-3.el7 @epel
openssl11-libs.x86_64   1:1.1.1g-3.el7 @epel   


But I’m not sure how to specify this during configure.

Thanks,
Scott


> On Apr 22, 2021, at 9:56 AM, Quanah Gibson-Mount  wrote:
> 
> This is a testing call for OpenLDAP 2.5 Release Candidate (OpenLDAP 2.5.4) 
> Depending on the results, this may be the only testing call.
> 
> Generally, get the code for RE25:
> 
> 
> 
> Extract, configure, and build.
> 
> Execute the test suite (via make test) after it is built.  Optionally, cd 
> tests && make its to run through the regression suite.
> 
> Note that there are new features in 2.5, so please examine the options 
> available with configure carefully.  Some examples:
> 
> The new load balancer, which can either be built as a module for slapd 
> (--enable-balancer=mod) or as a standalone server (--enable-balancer=yes)
> 
> The libargon2 password module (--enable-argon2).
> 
> Systemd notification support (--with-systemd=yes).
> 
> 
> Thanks!
> 
> Regards,
> Quanah
> 
> --
> 
> Quanah Gibson-Mount
> Product Architect
> Symas Corporation
> Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
> 


Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread Quanah Gibson-Mount




--On Friday, April 23, 2021 9:05 AM -0700 Quanah Gibson-Mount 
 wrote:





Starting test043-delta-syncrepl for mdb...


I was able to reproduce this one, thanks. ITS#9534.

Regards,
Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:



Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread Quanah Gibson-Mount




--On Friday, April 23, 2021 2:35 PM +0200 Ondřej Kuzník 
 wrote:



On Fri, Apr 23, 2021 at 10:44:35AM +0200, Dieter Klünter wrote:

There is a broken symlink in tests/testdata/homedir/skel/directory/
which points to it self.


Which is part of the test, the problem was an copy-paste error at the
beginning of the script that should have noticed the overlay was not
available. That's fixed now in master (commit defa618405) and will be
part of 2.5.4 when Quanah gets a chance to include it.

Thanks for testing things and if you get a chance to test with the fix
and further, much appreciated.


Fixed in RE25 now.

--Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:



Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread Quanah Gibson-Mount




--On Friday, April 23, 2021 4:51 PM +0200 "A. Schulze" 
 wrote:





Am 22.04.21 um 18:56 schrieb Quanah Gibson-Mount:


Execute the test suite (via make test) after it is built.  Optionally,
cd tests && make its to run through the regression suite.


./configure say "--enable-mdbenable mdb database backend
no|yes|mod [yes]"

so I took the default and don't pass it to confiure at all.


What was the exact configure command used?


/usr/bin/make -C . test
make[1]: Entering directory '/<>'
cd tests && /usr/bin/make test
make[2]: Entering directory '/<>/tests'
make[3]: Entering directory '/<>/tests'
run configure with --enable-mdb to run MDB tests
make[3]: Leaving directory '/<>/tests'
make[3]: Entering directory '/<>/tests'
Initiating LDAP tests for the Load Balancer...
No suitable default database backend configured


run again with '--enable-mdb=yes' solved that problem but "make test"
still fail

...

Starting test043-delta-syncrepl for mdb...

running defines.sh
Starting provider slapd on TCP/IP port 9011...
Using ldapsearch to check that provider slapd is running...
Using ldapadd to create the context prefix entries in the provider...
Starting consumer slapd on TCP/IP port 9012...
Using ldapsearch to check that consumer slapd is running...
Using ldapadd to populate the provider directory...
Waiting 7 seconds for syncrepl to receive changes...
Stopping the provider, sleeping 10 seconds and restarting it...
Using ldapsearch to check that provider slapd is running...
Using ldapmodify to modify provider directory...
Waiting 7 seconds for syncrepl to receive changes...
Using ldapsearch to read all the entries from the provider...
Using ldapsearch to read all the entries from the consumer...
Filtering provider results...
Filtering consumer results...
Comparing retrieved entries from provider and consumer...
test failed - provider and consumer databases differ

test043-delta-syncrepl failed for mdb after 29 seconds


Possibly a timing issue, without more details it's not possible to know.

--Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:



Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread A. Schulze



Am 22.04.21 um 18:56 schrieb Quanah Gibson-Mount:

> Execute the test suite (via make test) after it is built.  Optionally, cd 
> tests && make its to run through the regression suite.

./configure say "--enable-mdbenable mdb database backend no|yes|mod 
[yes]"

so I took the default and don't pass it to confiure at all.

but 

/usr/bin/make -C . test
make[1]: Entering directory '/<>'
cd tests && /usr/bin/make test
make[2]: Entering directory '/<>/tests'
make[3]: Entering directory '/<>/tests'
run configure with --enable-mdb to run MDB tests
make[3]: Leaving directory '/<>/tests'
make[3]: Entering directory '/<>/tests'
Initiating LDAP tests for the Load Balancer...
No suitable default database backend configured


run again with '--enable-mdb=yes' solved that problem but "make test" still fail

...
> Starting test043-delta-syncrepl for mdb...
running defines.sh
Starting provider slapd on TCP/IP port 9011...
Using ldapsearch to check that provider slapd is running...
Using ldapadd to create the context prefix entries in the provider...
Starting consumer slapd on TCP/IP port 9012...
Using ldapsearch to check that consumer slapd is running...
Using ldapadd to populate the provider directory...
Waiting 7 seconds for syncrepl to receive changes...
Stopping the provider, sleeping 10 seconds and restarting it...
Using ldapsearch to check that provider slapd is running...
Using ldapmodify to modify provider directory...
Waiting 7 seconds for syncrepl to receive changes...
Using ldapsearch to read all the entries from the provider...
Using ldapsearch to read all the entries from the consumer...
Filtering provider results...
Filtering consumer results...
Comparing retrieved entries from provider and consumer...
test failed - provider and consumer databases differ
> test043-delta-syncrepl failed for mdb after 29 seconds
(exit 1)
make[3]: *** [Makefile:301: mdb-yes] Error 1
make[3]: Leaving directory '/<>/tests'
make[2]: *** [Makefile:287: test] Error 2
make[2]: Leaving directory '/<>/tests'
make[1]: *** [Makefile:299: test] Error 2
make[1]: Leaving directory '/<>'


Andreas

> 
> Note that there are new features in 2.5, so please examine the options 
> available with configure carefully.  Some examples:
> 
> The new load balancer, which can either be built as a module for slapd 
> (--enable-balancer=mod) or as a standalone server (--enable-balancer=yes)
> 
> The libargon2 password module (--enable-argon2).
> 
> Systemd notification support (--with-systemd=yes).
> 
> 
> Thanks!
> 
> Regards,
> Quanah
> 
> -- 
> 
> Quanah Gibson-Mount
> Product Architect
> Symas Corporation
> Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
> 


Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread Ondřej Kuzník
On Fri, Apr 23, 2021 at 10:44:35AM +0200, Dieter Klünter wrote:
> There is a broken symlink in tests/testdata/homedir/skel/directory/ 
> which points to it self.

Which is part of the test, the problem was an copy-paste error at the
beginning of the script that should have noticed the overlay was not
available. That's fixed now in master (commit defa618405) and will be
part of 2.5.4 when Quanah gets a chance to include it.

Thanks for testing things and if you get a chance to test with the fix
and further, much appreciated.

Regards,

-- 
Ondřej Kuzník
Senior Software Engineer
Symas Corporation   http://www.symas.com
Packaged, certified, and supported LDAP solutions powered by OpenLDAP


Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread Dieter Klünter
Am Fri, 23 Apr 2021 10:20:28 +0200
schrieb Dieter Klünter :

> Am Thu, 22 Apr 2021 09:56:42 -0700
> schrieb Quanah Gibson-Mount :
> 
> > This is a testing call for OpenLDAP 2.5 Release Candidate (OpenLDAP
> > 2.5.4) Depending on the results, this may be the only testing call.
> > 
> > Generally, get the code for RE25:
> > 
> > 
> > 
> > Extract, configure, and build.
> > 
> > Execute the test suite (via make test) after it is built.
> > Optionally, cd tests && make its to run through the regression
> > suite.
> > 
> > Note that there are new features in 2.5, so please examine the
> > options available with configure carefully.  Some examples:
> > 
> > The new load balancer, which can either be built as a module for
> > slapd (--enable-balancer=mod) or as a standalone server
> > (--enable-balancer=yes)
> > 
> > The libargon2 password module (--enable-argon2).
> > 
> > Systemd notification support (--with-systemd=yes).  
> 
> 
>  Starting test085-homedir for mdb...  
> running defines.sh
> Running slapadd to build slapd database...
> slapadd: bad configuration file!
> slapadd failed (1)!
> make[2]: *** [Makefile:301: mdb-yes] Fehler 1
> make[2]: Verzeichnis
> „/home/dieter/work/openldap-OPENLDAP_REL_ENG_2_5/tests“ wird verlassen
> make[1]: *** [Makefile:287: test] Fehler 2 make[1]: Verzeichnis
> „/home/dieter/work/openldap-OPENLDAP_REL_ENG_2_5/tests“ wird verlassen
> make: *** [Makefile:299: test] Fehler 2

There is a broken symlink in tests/testdata/homedir/skel/directory/ 
which points to it self.

-Dieter

-- 
Dieter Klünter | Systemberatung
http://sys4.de
GPG Key ID: E9ED159B
53°37'09,95"N
10°08'02,42"E


Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-23 Thread Dieter Klünter
Am Thu, 22 Apr 2021 09:56:42 -0700
schrieb Quanah Gibson-Mount :

> This is a testing call for OpenLDAP 2.5 Release Candidate (OpenLDAP
> 2.5.4) Depending on the results, this may be the only testing call.
> 
> Generally, get the code for RE25:
> 
> 
> 
> Extract, configure, and build.
> 
> Execute the test suite (via make test) after it is built.
> Optionally, cd tests && make its to run through the regression suite.
> 
> Note that there are new features in 2.5, so please examine the
> options available with configure carefully.  Some examples:
> 
> The new load balancer, which can either be built as a module for
> slapd (--enable-balancer=mod) or as a standalone server
> (--enable-balancer=yes)
> 
> The libargon2 password module (--enable-argon2).
> 
> Systemd notification support (--with-systemd=yes).


 Starting test085-homedir for mdb...
running defines.sh
Running slapadd to build slapd database...
slapadd: bad configuration file!
slapadd failed (1)!
make[2]: *** [Makefile:301: mdb-yes] Fehler 1
make[2]: Verzeichnis
„/home/dieter/work/openldap-OPENLDAP_REL_ENG_2_5/tests“ wird verlassen
make[1]: *** [Makefile:287: test] Fehler 2 make[1]: Verzeichnis
„/home/dieter/work/openldap-OPENLDAP_REL_ENG_2_5/tests“ wird verlassen
make: *** [Makefile:299: test] Fehler 2

-Dieter

-- 
Dieter Klünter | Systemberatung
http://sys4.de
GPG Key ID: E9ED159B
53°37'09,95"N
10°08'02,42"E