[Bug 436712] New: openldap2-client-2.3.37-20.6 update broken

newer
[Bug 412006] New: acroread fails...

bugzilla_noreply＠novell.com

18 Oct 2008 18 Oct '08

06:34

https://bugzilla.novell.com/show_bug.cgi?id=436712 Summary: openldap2-client-2.3.37-20.6 update broken Product: openSUSE 10.3 Version: Final Platform: Other OS/Version: Linux Status: NEW Severity: Critical Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: Felix.Buenemann@gmx.de QAContact: qa@suse.de CC: Felix.Buenemann@gmx.de Found By: --- Since installing the openldap2-client-2.3.37-20.6 security update, all request to an active directory using ldapsearch fail, although data is returned, with the error: ldap_result: Can't contact LDAP server (-1) Before the update the same queries worked fine. It seems the response is truncated to slightly below 1024 bytes and the above error is returned. Example commandline: ldapsearch -x -LLL -b dc=nctn,dc=local -D cn=qmail,cn=users,dc=nctn,dc=local -w 'password' -h 10.30.40.2 -p 389 '(&(objectCategory=Person)(objectClass=User)(displayName=*))' displayName Received output: ---snip--- dn: CN=Administrator,CN=Users,DC=nctn,DC=local displayName: Administrator dn: CN=IUSR_SRV12010,CN=Users,DC=nctn,DC=local displayName: Internetgastkonto dn: CN=IWAM_SRV12010,CN=Users,DC=nctn,DC=local displayName: IIS-Prozesskonto starten dn: CN=SUPPORT_388945a0,CN=Users,DC=nctn,DC=local displayName: CN=Microsoft Corporation,L=Redmond,S=Washington,C=US dn: CN=ASPNET,CN=Users,DC=nctn,DC=local displayName: ASP.NET Machine Account dn: CN=SystemMailbox{98F2B077-93E7-48B8-A03A-A516BFE9FBEE},CN=Microsoft Exchan ge System Objects,DC=nctn,DC=local displayName: SystemMailbox{98F2B077-93E7-48B8-A03A-A516BFE9FBEE} dn: CN=Andreas Sievert,OU=user,OU=nctn,DC=nctn,DC=local displayName: Andreas Sievert [netconsult] dn: CN=Lara Sievert,OU=user,OU=nctn,DC=nctn,DC=local displayName: Lara Sievert dn: CN=Juliane Mauermann,OU=user,OU=nctn,DC=nctn,DC=local displayName: Juliane Mauermann [fishingcompany] dn: CN=spamoperator,OU=user,OU=nctn,DC=nctn,DC=local displayName: spamoperator ldap_result: Can't contact LDAP server (-1) ---snip--- Returned: 981 Bytes/30 lines Should return: 1406 Bytes/46 lines -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by thread

bugzilla_noreply＠novell.com

18 Oct 18 Oct

06:36

New subject: [Bug 436712] openldap2-client-2.3.37-20.6 update broken

https://bugzilla.novell.com/show_bug.cgi?id=436712 User Felix.Buenemann@gmx.de added comment https://bugzilla.novell.com/show_bug.cgi?id=436712#c1 --- Comment #1 from Felix Bünemann 2008-10-18 00:36:29 MDT --- System is OpenSUSE 10.3 x86_64 running on Dual Opteron 64, 4GB mem. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

06:54

New subject: [Bug 436712] openldap2-client-2.3.37-20.6 update broken

https://bugzilla.novell.com/show_bug.cgi?id=436712 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |maint-coord@suse.de, security-team@suse.de AssignedTo|bnc-team-screening@forge.provo.novell.com |rhafer@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

07:19

New subject: [Bug 436712] openldap2-client-2.3.37-20.6 update broken

https://bugzilla.novell.com/show_bug.cgi?id=436712 User Felix.Buenemann@gmx.de added comment https://bugzilla.novell.com/show_bug.cgi?id=436712#c2 --- Comment #2 from Felix Bünemann 2008-10-18 01:19:05 MDT --- Backing out the patch liblber-length-decoding.dif fixes things, so the bug is in the changes made by that patch. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

07:42

New subject: [Bug 436712] openldap2-client-2.3.37-20.6 update broken

https://bugzilla.novell.com/show_bug.cgi?id=436712 User Felix.Buenemann@gmx.de added comment https://bugzilla.novell.com/show_bug.cgi?id=436712#c3 --- Comment #3 from Felix Bünemann 2008-10-18 01:42:52 MDT --- The buggy code fragment is in the patch to ibraries/libldap/result.c: ---snip--- @@ -474,10 +476,10 @@ nextresp3: "ber_get_next failed.\n", 0, 0, 0 ); #endif #ifdef EWOULDBLOCK - if ( sock_errno() == EWOULDBLOCK ) return LDAP_MSG_X_KEEP_LOOKING; + if ( err == EWOULDBLOCK ) return LDAP_MSG_X_KEEP_LOOKING; #endif #ifdef EAGAIN - if ( sock_errno() == EAGAIN ) return LDAP_MSG_X_KEEP_LOOKING; + if ( err == EAGAIN ) return LDAP_MSG_X_KEEP_LOOKING; #endif ld->ld_errno = LDAP_SERVER_DOWN; return -1; ---snip--- I think there is a missing line to initialize err above #ifdef EWOULDBLOCK: err = sock_errno(); I have only read the patch and not the full source, so please check if that's the right place to initialize err. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

07:52

New subject: [Bug 436712] openldap2-client-2.3.37-20.6 update broken

https://bugzilla.novell.com/show_bug.cgi?id=436712 User Felix.Buenemann@gmx.de added comment https://bugzilla.novell.com/show_bug.cgi?id=436712#c4 --- Comment #4 from Felix Bünemann 2008-10-18 01:52:17 MDT --- Now running openldap2-client-2.3.37-20.6 with the following change to liblber-length-decoding.dif and it is working fine so far: ---snip--- @@ -474,10 +476,11 @@ nextresp3: "ber_get_next failed.\n", 0, 0, 0 ); #endif + err = sock_errno(); #ifdef EWOULDBLOCK - if ( sock_errno() == EWOULDBLOCK ) return LDAP_MSG_X_KEEP_LOOKING; + if ( err == EWOULDBLOCK ) return LDAP_MSG_X_KEEP_LOOKING; #endif #ifdef EAGAIN - if ( sock_errno() == EAGAIN ) return LDAP_MSG_X_KEEP_LOOKING; + if ( err == EAGAIN ) return LDAP_MSG_X_KEEP_LOOKING; #endif ld->ld_errno = LDAP_SERVER_DOWN; return -1; ---snip--- -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

20 Oct 20 Oct

07:06

New subject: [Bug 436712] openldap2-client-2.3.37-20.6 update broken

https://bugzilla.novell.com/show_bug.cgi?id=436712 Ralf Haferkamp changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED Found By|--- |Community User Priority|P5 - None |P2 - High -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

09:35

New subject: [Bug 436712] openldap2-client-2.3.37-20.6 update broken

https://bugzilla.novell.com/show_bug.cgi?id=436712 User werner.flamme@ufz.de added comment https://bugzilla.novell.com/show_bug.cgi?id=436712#c6 Werner Flamme changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |werner.flamme@ufz.de --- Comment #6 from Werner Flamme 2008-10-20 03:35:32 MDT --- My unqualified addition: the openldap2-client connects nicely to the LDAP server when f. e. "getent passwd" is entered. When using LDAP as pam authentication source, I get the auth log full of "pam_ldap: ldap_search_s Can't contact LDAP server" - the host line in /etc/ldap.conf contains 3 of them, entered by IP address, not by name. Going back to the original version fixes the problem immediately (/etc/ldap.conf unchanged). I cannot do any tests since the only combination of LDAP and oS 10.3 is our NX server, and normally there are several folks online :-( Regards, Werner -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

09:47

New subject: [Bug 436712] openldap2-client-2.3.37-20.6 update broken

https://bugzilla.novell.com/show_bug.cgi?id=436712 User rhafer@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=436712#c7 --- Comment #7 from Ralf Haferkamp 2008-10-20 03:47:47 MDT --- Created an attachment (id=246497) --> (https://bugzilla.novell.com/attachment.cgi?id=246497) Updated fix Yes, the problem is not limited to AD Server. It's a generic bug that was introduced by our backport from OpenLDAP CVS :(. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.