OpenLDAP's UB minefield

2021-12-20 Thread openldap-technical
Someone recently wrote on openldap-bugs: > The kernel recently got bitten using the same pattern of unaligned > short pointers through casts. GCC produced code which corrupted > initramfs during unpacking. > > See https://gcc.gnu.org/bugzilla/show_bug.cgi?id=3D100363. > OpenLDAP should fix that c

Re: OpenLDAP 2.5 Release Candidate Testing (OpenLDAP 2.5.4)

2021-04-22 Thread openldap-technical
Hello, On Thu, 22 Apr 2021, Quanah Gibson-Mount wrote: > Execute the test suite (via make test) after it is built. Optionally, > cd tests && make its to run through the regression suite. On RHEL8 and Fedora 33, ./configure && make && make test stops with the same failure: > Starting

Re: OpenLDAP 2.5.2 Beta binary builds for testing

2021-03-01 Thread openldap-technical
On Sun, 28 Feb 2021, Quanah Gibson-Mount wrote: > This is ITS#9483, thanks. For now, install the openssl development package > and you'll be able to proceed. Confirmed. After doing "yum install openssl-devel", all openldap-2.5.2beta tests passed on RHEL8. best regards, Jokke H.

Re: OpenLDAP 2.5.2 Beta binary builds for testing

2021-02-28 Thread openldap-technical
On Fri, 26 Feb 2021, Quanah Gibson-Mount wrote: > Symas is pleased to provide binary builds of the OpenLDAP 2.5.2 beta On RHEL8, I did: ./configure && make && make test and got a failure: cd tests && make test make[1]: Entering directory '/home/jokke/ol/openldap-2.5.2beta/tests' make[2]: En

Re: OpenLDAP 2.5.0 ALPHA released

2020-10-15 Thread openldap-technical
Hello, On Wed, 14 Oct 2020, Quanah Gibson-Mount wrote: > The first alpha release for the OpenLDAP 2.5 series released today, "make test" and "cd tests && make its" completed without errors on both RHEL8 and Fedora 32. best regards, Jokke H.

Re: Antw: [EXT] Re: RE24 testing call #1 (OpenLDAP 2.4.54)

2020-10-05 Thread openldap-technical
On Mon, 5 Oct 2020, Ulrich Windl wrote: > Interestingly, I see the same default here for SLES12, but I also see > (guessing it could be relevant): > net.ipv4.tcp_wmem = 409616384 4194304 Same here on RHEL8. best regards, Jokke H.

Re: RE24 testing call #1 (OpenLDAP 2.4.54)

2020-10-03 Thread openldap-technical
Hello, On Fri, 2 Oct 2020, Quanah Gibson-Mount wrote: > > > --On Friday, October 2, 2020 7:28 PM +0100 Howard Chu wrote: > > > Note that this test depends on a socket buffer filling up and causing a > > slapd thread to go into a write wait, to even function. It may simply be > > that the de

Re: RE24 testing call #1 (OpenLDAP 2.4.54)

2020-10-02 Thread openldap-technical
On Thu, 1 Oct 2020, Quanah Gibson-Mount wrote: > Optionally, cd tests && make its to run through the regression suite. Second run of "make its" on RHEL8. It seems to me that bdb succeeded this time, but now it is hdb that failed its9338: > Starting its9338 ... running defines.sh This test c

Re: RE24 testing call #1 (OpenLDAP 2.4.54)

2020-10-02 Thread openldap-technical
Hello, On Thu, 1 Oct 2020, Quanah Gibson-Mount wrote: > Optionally, cd tests && make its to run through the regression suite. On RHEL7, both the test suite and the regression suite completed without errors. However, on RHEL8, "make its" fails: > Starting its9338 ... running defines.sh T

Re: Segfault upgrading to OpenLDAP 2.5.52 from 2.4.50 with curse form the past

2020-09-07 Thread openldap-technical
Hello, On Mon, 7 Sep 2020, Quanah Gibson-Mount wrote: > This segfault is due to a problem with the fix for ITS#9282 that went into the > OpenLDAP 2.4.51 and OpenLDAP 2.4.52 releases. This is fixed in the 2.4.53 > release (released today). Quanah, is it possible to release 2.4.53 RPMs for RHEL

Re: RE24 testing call #2 (OpenLDAP 2.4.52)

2020-08-28 Thread openldap-technical
On Thu, 27 Aug 2020, Quanah Gibson-Mount wrote: > This is the second testing call for OpenLDAP 2.4.52. RHEL 7.8, fully updated, spits out dozens of "ldap_sasl_bind_s: Invalid credentials (49)" failures, but the test still claims success: Starting test008-concurrency for bdb... [...] PID=

Re: RE24 testing call #1 (OpenLDAP 2.4.52)

2020-08-27 Thread openldap-technical
On Wed, 26 Aug 2020, Quanah Gibson-Mount wrote: > This is the first testing call for OpenLDAP 2.4.52. On Red Hat Enterprise Linux Server release 7.8 (Maipo), with all the latest updates installed, "make its" fails like this: > Starting its9282 ... running defines.sh This test tracks a cas

Re: RE24 testing call #1 (OpenLDAP 2.4.51, LMDB 0.9.26)

2020-07-29 Thread openldap-technical
On Wed, 29 Jul 2020, Quanah Gibson-Mount wrote: > Can you confirm for me which backends it fails on? > > I.e., does it fail for: > > ./run -b bdb test060 > > ./run -b hdb test060 Both fail. > ./run -b mdb test060 This test was successful. Best regards, Jokke Hämäläinen

Re: RE24 testing call #1 (OpenLDAP 2.4.51, LMDB 0.9.26)

2020-07-28 Thread openldap-technical
On Mon, 27 Jul 2020, Quanah Gibson-Mount wrote: > What is the virtualization software and version? VMware ESXi 6.5.0 build-16207673 Best regards, Jokke Hämäläinen

Re: RE24 testing call #1 (OpenLDAP 2.4.51, LMDB 0.9.26)

2020-07-26 Thread openldap-technical
On Sat, 25 Jul 2020, Quanah Gibson-Mount wrote: > Ok thanks. I did that as well on my centos 8.2 box and ran it through 100 > loops with BDB as the backend and no luck reproducing. Are you able to > reproduce it? 100% able to reproduce, 4 failures with 4 attempts. My virtual machine has only on

Re: RE24 testing call #1 (OpenLDAP 2.4.51, LMDB 0.9.26)

2020-07-25 Thread openldap-technical
Hi, On Fri, 24 Jul 2020, Quanah Gibson-Mount wrote: > Thanks for the report. Can you provide your configure options? I'd like to > try and reproduce. I did simply: ./configure && make && make test Best regards, Jokke Hämäläinen

Re: RE24 testing call #1 (OpenLDAP 2.4.51, LMDB 0.9.26)

2020-07-24 Thread openldap-technical
Hello, On Thu, 23 Jul 2020, Quanah Gibson-Mount wrote: > Subject correction -- 2.4.51. ;) "make test" crashes on Red Hat Enterprise Linux release 8.2 (Ootpa): Testing random mt-hot r/w search: 10 read threads 10 write threads 5 conns (5 x 100) loops... ./progs/slapd-mtread -H ldap://localhost

Re: RE24 testing call #2 (2.4.49) LMDB RE0.9 testing call (0.9.25)

2020-01-28 Thread openldap-technical
Hello, On Tue, 28 Jan 2020, Quanah Gibson-Mount wrote: > Optionally, cd tests && make its to run through the regression suite. The following happened on Fedora Linux 31: > Starting its8521 ... running defines.sh This test tracks a case where a consumer fails to replicate from the prov

BDB to LMDB migration and Linux kernel parameters

2019-08-21 Thread openldap-technical
Hello! OpenLDAP Admin Guide says: [LMDB] supports indexing like the BDB backends, but it uses no caching and requires no tuning to deliver maximum search performance. We are planning migration from deprecated BerkeleyDB to recommended LMDB. Our OpenLDAP runs on RHEL7. Since the LMDB use

Re: Spurious Start TLS failed errors on proxyed bind OpenLDAP 2.4.40

2019-01-24 Thread openldap-technical
Hello again, On Tue, 22 Jan 2019, openldap-techni...@kolttonen.fi wrote: > By the way, I am wondering here about the correctness of parameter > > li->li_timeout[ SLAP_OP_EXTENDED ] > > slap.h has: > > /* > * Operation indices > */ > typedef enum { > SLAP_OP_BIND = 0, > S

Re: Spurious Start TLS failed errors on proxyed bind OpenLDAP 2.4.40

2019-01-22 Thread openldap-technical
Hello, On Thu, 17 Jan 2019, Howard Chu wrote: > These aren't spurious - your TLS library has genuinely failed to start a > session. Which TLS library are you using? What OS are you running on? > The most common cause for periodic failures is running out of entropy > for the PRNG. Could it

OpenLDAP thread-safety nowadays

2018-11-13 Thread openldap-technical
Hello, I am new to OpenLDAP and I was wondering whether the OpenLDAP client C API is thread-safe. I found this old thread: https://www.openldap.org/lists/openldap-software/200606/msg00252.html Does anyone know whether there is still a need for separate libldap_r or is the default libra

Re: (ITS#7777) Filtering on modifyTimestamp is slower with index

2014-01-09 Thread openldap-technical
This is a cryptographically signed message in MIME format. --ms03050501010402040608 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable The ITS is not for support requests. You should post things like this on = the openldap-technical mailing

rewriting (invalid) bindDN ?

2010-05-10 Thread g-openldap-technical-list
Hi list, I've just set up a ldap proxy on witch I wish users may bind with their cn instead of dn. Some reading let me say it's possible - slapo-rwm (5) - http://blogs.turmzimmer.net/2008/06/26#ldap-3 - http://www.openldap.org/lists/openldap-software/201004/msg00065.html and some more I run s