[Issue 9438] Add remoteauth overlay to core

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=9438

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|--- |2.5.2
   Keywords||OL_2_5_REQ

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 9438] New: Add remoteauth overlay to core

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=9438

  Issue ID: 9438
   Summary: Add remoteauth overlay to core
   Product: OpenLDAP
   Version: 2.5
  Hardware: All
OS: All
Status: UNCONFIRMED
  Severity: normal
  Priority: ---
 Component: overlays
  Assignee: b...@openldap.org
  Reporter: qua...@openldap.org
  Target Milestone: ---

Symas will contribute its remoteauth overlay for OpenLDAP 2.5 as a core overlay

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 9437] Add OTP module to core

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=9437

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Keywords||OL_2_5_REQ
   Target Milestone|--- |2.5.2

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 9437] New: Add OTP module to core

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=9437

  Issue ID: 9437
   Summary: Add OTP module to core
   Product: OpenLDAP
   Version: 2.5
  Hardware: All
OS: All
Status: UNCONFIRMED
  Severity: normal
  Priority: ---
 Component: overlays
  Assignee: b...@openldap.org
  Reporter: qua...@openldap.org
  Target Milestone: ---

Symas will contribute its OTP module for OpenLDAP 2.5 as a core overlay

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 9436] New: OpenSSL 3.0: libldap uses depreciated functions

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=9436

  Issue ID: 9436
   Summary: OpenSSL 3.0: libldap uses depreciated functions
   Product: OpenLDAP
   Version: 2.5
  Hardware: All
OS: All
Status: UNCONFIRMED
  Severity: normal
  Priority: ---
 Component: libraries
  Assignee: b...@openldap.org
  Reporter: qua...@openldap.org
  Target Milestone: ---

OpenLDAP master fails to build against OpenSSL 3.0 alpha when "no-deprecated"
is specified.

Currently hitting these errors:

./.libs/libldap.so: undefined reference to `SSL_get_peer_certificate'
./.libs/libldap.so: undefined reference to `PEM_read_bio_DHparams'
./.libs/libldap.so: undefined reference to `ERR_get_error_line'
./.libs/libldap.so: undefined reference to `DH_free'
./.libs/libldap.so: undefined reference to `SSL_CTX_set_tmp_dh'

Notes:

SSL_get_peer_certificate is SSL_get1_peer_certificate in 3.0.0

SSL_CTX_set_tmp_dh should be replaced as follows:

#  define SSL_CTX_set_tmp_dh(ctx,dh) \
SSL_CTX_ctrl(ctx,SSL_CTRL_SET_TMP_DH,0,(char *)(dh))


Have to dig deeper for:

PEM_read_bio_DHparams
ERR_get_error_line
DH_free

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 9436] OpenSSL 3.0: libldap uses depreciated functions

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=9436

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Keywords||OL_2_5_REQ
   Target Milestone|--- |2.5.3

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8589] cn=config replication plus DB replication can break replication

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8589

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |2.5.3
   Assignee|b...@openldap.org   |h...@openldap.org

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8577] Accesslog overlay hangs slapd depending on module loading order

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8577

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |2.5.3
   Assignee|b...@openldap.org   |h...@openldap.org

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8458] syncrepl ppolicy with LDIF backend fails

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8458

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |2.5.3

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8458] syncrepl ppolicy with LDIF backend fails

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8458

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Assignee|b...@openldap.org   |h...@openldap.org

--- Comment #3 from Quanah Gibson-Mount  ---
howard to investigate

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8440] syncrepl improvements for delta-sync mmr

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8440

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Assignee|b...@openldap.org   |on...@mistotebe.net

--- Comment #1 from Quanah Gibson-Mount  ---
Ondrej to investigate

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8227] syncprov should use more threads

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8227

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |2.5.3

--- Comment #3 from Quanah Gibson-Mount  ---
Revisit after beta

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8125] MMR throws away valid changes causing drift

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8125

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Keywords|OL_2_5_REQ, replication |
 Status|CONFIRMED   |RESOLVED
 Resolution|--- |FIXED

--- Comment #20 from Quanah Gibson-Mount  ---
Believed fixed by recent MMR work.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 7766] Account unlocked in slave after two modifications on a master (overlay ppolicy)

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=7766

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Assignee|b...@openldap.org   |on...@mistotebe.net

--- Comment #9 from Quanah Gibson-Mount  ---
Ondrej to investigate.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8149] nssov loginStatus doesn't play well with replication

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8149

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Keywords|OL_2_5_REQ  |
   Target Milestone|2.5.1   |2.6.0

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 7439] crash in rwm when tree is syncrepl synced and database ldap with rwm inside same tree

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=7439

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Assignee|b...@openldap.org   |on...@mistotebe.net

--- Comment #2 from Quanah Gibson-Mount  ---
Ondrej to investigate

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 7258] slapo-rwm: Possible suffixmassage and syncrepl bug

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=7258

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |---
 Status|UNCONFIRMED |RESOLVED
   Keywords|replication |
 Resolution|--- |WONTFIX

--- Comment #3 from Quanah Gibson-Mount  ---
Closing won't fix.  No example ever provided, no one else has reported this
issue.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 7237] Crash abandoning freed/unused operation

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=7237

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|--- |2.5.1
   Assignee|b...@openldap.org   |qua...@openldap.org

--- Comment #3 from Quanah Gibson-Mount  ---
Will see if I can reproduce in a test loop, may have been since fixed.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 6531] Modify updateref to generate referrals on the backend

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=6531

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |2.5.3

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 6942] updateref config is inadequate

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=6942

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |2.5.3

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 7102] slapd segfaults on slapo-dds refresh with syncprov enabled

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=7102

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.6.0   |2.5.1
   Assignee|b...@openldap.org   |h...@openldap.org

--- Comment #3 from Quanah Gibson-Mount  ---
may already be fixed, howard to investigate

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 6518] Slapd-ldap proxy between replica and mirror

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=6518

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Severity|normal  |enhancement
   Target Milestone|2.5.1   |2.6.0

--- Comment #4 from Quanah Gibson-Mount  ---
Requires development of distributed procedures, feature request.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 6406] back-ldif fails test043-delta-syncrepl

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=6406

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Keywords|replication |OL_2_5_REQ
   Assignee|b...@openldap.org   |qua...@openldap.org

--- Comment #6 from Quanah Gibson-Mount  ---
Need to document in slapo-accesslog(5) man page that the backend used to store
the database needs to support an ordered return of results.  back-ldif does not
support this.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 6268] multi-master sync replication ldap_add error code 68 bug

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=6268

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |---
 Status|UNCONFIRMED |RESOLVED
   Keywords|replication |
 Resolution|--- |FIXED

--- Comment #6 from Quanah Gibson-Mount  ---
Likely fixed by recent work, may also have been tied to a BDB specific bug.

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 6138] Bad Cancel/Abandon/"internal abandon"/Syncprov interactions

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=6138

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Target Milestone|2.5.1   |2.6.0
   Keywords|OL_2_5_REQ  |

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 7748] rare failure of test058

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=7748

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Keywords|replication |
 Resolution|--- |WONTFIX
 Status|UNCONFIRMED |RESOLVED

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 5973] Syncrepl can update more than one csn value

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=5973

Quanah Gibson-Mount  changed:

   What|Removed |Added

 Status|UNCONFIRMED |RESOLVED
 Resolution|--- |WONTFIX
   Keywords|replication |

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 6097] MMR problems with deletes

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=6097

Quanah Gibson-Mount  changed:

   What|Removed |Added

   Keywords|OL_2_5_REQ  |
   Target Milestone|2.5.1   |2.6.0

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 8307] startup failed with DDS enabled

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=8307

--- Comment #10 from Quanah Gibson-Mount  ---
trunk:

commit eefe12366c5c6de25a9a7067000b443d76043725
Author: Howard Chu 
Date:   Wed Jan 13 16:35:43 2021 +

ITS#8307 fix slapo-accesslog: noop if logDB isn't open yet

Add be_flag for DB OPEN status

commit 85b68aa5e221397081249fe5efe7330a6d738ecf
Author: Howard Chu 
Date:   Wed Jan 13 16:39:24 2021 +

ITS#8307 slapo-dds: mark internal searches as do_not_cache


commit 9d440e3d2829258b803a2e663343c05341945446
Author: Howard Chu 
Date:   Wed Jan 13 16:58:42 2021 +

ITS#8307 slapo-accesslog additional check

-- 
You are receiving this mail because:
You are on the CC list for the issue.

[Issue 9435] New: LDAP Servers locked up and unresponsive

2021-01-14 Thread openldap-its
https://bugs.openldap.org/show_bug.cgi?id=9435

  Issue ID: 9435
   Summary: LDAP Servers locked up and unresponsive
   Product: OpenLDAP
   Version: 2.4.56
  Hardware: x86_64
OS: Linux
Status: UNCONFIRMED
  Severity: normal
  Priority: ---
 Component: slapd
  Assignee: b...@openldap.org
  Reporter: tsu...@sekisui.com
  Target Milestone: ---

Setup:

I have six OpenLDAP servers running, replicating in mirrormode and using
slapd-perl.

Problem:

On rare occasions servers will lock up and be unresponsive. 

Workaround:

Restart the slapd process will resolve this problem. 

Observations:
- Checking with gdb, lock occurs when binding.
- I don't know how to reproduce this reliably and how to fix.

slapd.conf setting (excerpt): 
...
databaseperl
suffix  "secret"
perlModulePath  secret
perlModule   secret
perlModuleConfig logfile secret
...
overlay syncprov
serverID1
syncreplrid=001
...
mirrormode  on

GDB:
(gdb) bt
#0  0x7f6a3ed9370a in pthread_join () from /lib64/libpthread.so.0
#1  0x005c7ce2 in ldap_pvt_thread_join ()
#2  0x0045f7aa in slapd_daemon ()
#3  0x0043cc45 in main ()

(gdb) thread apply all bt
Thread 17 (Thread 0x7f69fb7eb700 (LWP 945)):
#0  0x7f6a3ed9b2ad in __lll_lock_wait () from /lib64/libpthread.so.0
#1  0x7f6a3ed94bfd in pthread_mutex_lock () from /lib64/libpthread.so.0
#2  0x005c7df4 in ldap_pvt_thread_mutex_lock ()
#3  0x005a1ef5 in perl_back_bind ()
#4  0x0048b367 in fe_op_bind ()
#5  0x0048aa25 in do_bind ()
#6  0x0046295b in ?? ()
#7  0x00462ef7 in ?? ()
#8  0x005c684d in ?? ()
#9  0x7f6a3ed9240b in start_thread () from /lib64/libpthread.so.0
#10 0x7f6a3d443e7f in clone () from /lib64/libc.so.6

Please let me know if you have any other information you need.

-- 
You are receiving this mail because:
You are on the CC list for the issue.