389-devel June 2010

389-devel@lists.fedoraproject.org

6 participants
12 discussions

Please review: fix coverity Defect Type: Memory - corruptions issues
by Rich Megginson 01 Jul '10

01 Jul '10

https://bugzilla.redhat.com/show_bug.cgi?id=609590 - main bug - 10 different patches attached https://bugzilla.redhat.com/show_bug.cgi?id=602530 - split off from main bug https://bugzilla.redhat.com/show_bug.cgi?id=602531 - split off from main bug

1 0

Please review: [Bug 578296] Attribute type entrydn needs to be added when subtree rename switch is on.
by Noriko Hosoi 25 Jun '10

25 Jun '10

https://bugzilla.redhat.com/show_bug.cgi?id=578296 https://bugzilla.redhat.com/attachment.cgi?id=426726&action=diff https://bugzilla.redhat.com/attachment.cgi?id=426726&action=edit Files: ldap/servers/slapd/back-ldbm/back-ldbm.h ldap/servers/slapd/back-ldbm/id2entry.c ldap/servers/slapd/back-ldbm/index.c ldap/servers/slapd/back-ldbm/ldbm_search.c ldap/servers/slapd/back-ldbm/proto-back-ldbm.h Description: Attribute type entrydn needs to be added when subtree rename switch is on. Also, it should be allowed to use entrydn in the filter. Change Description: 1) ldbm_back_next_search_entry_ext (ldbm_search.c) When getting an entry from ID using id2entry_ext, pass a flag ID2ENTRY_ADD_ENTRYDN to add entrydn to the entry. 2) id2entry_ext (id2entry.c) Added id2entry_ext to handle the flag ID2ENTRY_ADD_ENTRYDN. If ID2ENTRY_ADD_ENTRYDN is set in the flags variable and entryrdn switch is enabled, entrydn is added to the entry. 3) index_read_ext (index.c) If entryrdn switch is on and the attribute type is entrydn and the search type is equality, then call entryrdn_index_read to get the ID directly. Thanks, --noriko

1 0

Please review: Bug 606545 - core schema should include numSubordinates
by Endi Sukma Dewata 22 Jun '10

22 Jun '10

Hi, Please review the patch for this bug: https://bugzilla.redhat.com/show_bug.cgi?id=606545 Patch: https://bugzilla.redhat.com/attachment.cgi?id=425801&action=edit https://bugzilla.redhat.com/attachment.cgi?id=425801&action=diff Thanks! -- Endi S. Dewata

1 0

SELinux errors with 389-ds-base-1.2.6-0.5.rc1
by Rob Crittenden 16 Jun '10

16 Jun '10

In IPA v2 I'm getting the following SELinux AVCs from ns-slapd: type=AVC msg=audit(1276693069.494:16808): avc: denied { getattr } for pid=16334 comm="ns-slapd" path="/var/tmp/ldap_496" dev=sda1 ino=180255 scontext=unconfined_u:system_r:dirsrv_t:s0 tcontext=unconfined_u:object_r:initrc_tmp_t:s0 tclass=file type=AVC msg=audit(1276693069.494:16809): avc: denied { unlink } for pid=16334 comm="ns-slapd" name="ldap_496" dev=sda1 ino=180255 scontext=unconfined_u:system_r:dirsrv_t:s0 tcontext=unconfined_u:object_r:initrc_tmp_t:s0 tclass=file I'm seeing a related error in my Apache logs: [Wed Jun 16 08:57:49 2010] [error] ACIError: Insufficient access: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Cannot create replay cache file /var/tmp/ldap_496: File exists) Invalid credentials The context is we create an ldapi connection during Apache startup. We use GSSAPI and a keytab to authenticate. At this point I'm not sure if this is an issue with 389-ds or IPA. I've got the latest selinux-polixy installed: selinux-policy-3.6.32-116 rob

2 1

AUTO: Michael Smedeus is out of the office (returning Sun 07/11/2010)
by Michael Smedeus 16 Jun '10

16 Jun '10

I am out of the office from Sun 06/13/2010 until Sun 07/11/2010. Tillbaka 11/7 /Micke Note: This is an automated response to your message "[389-devel] Please Review: (604263) Memory leak when extop password change is rejected" sent on 15/6/10 22:36:56. This is the only notification you will receive while this person is away.

1 0

Please Review: (604263) Memory leak when extop password change is rejected
by Nathan Kinder 16 Jun '10

16 Jun '10

https://bugzilla.redhat.com/show_bug.cgi?id=604263 https://bugzilla.redhat.com/attachment.cgi?id=424306&action=diff https://bugzilla.redhat.com/attachment.cgi?id=424306&action=edit

1 0

Please review: more openldap porting work
by Rich Megginson 09 Jun '10

09 Jun '10

These patches are to allow ds to use openldap with NSS and LDIF support in Fedora rawhide (note that there are still some changes required to enable NSS and LDIF support in rawhide). 1) pass the NSS certdir as LDAP_OPT_X_TLS_CACERTDIR and other additions to the TLS/SSL code 2) use the openldap LDIF api - created a wrapper function around both the mozldap and openldap code to make the rest of the server and plugin code cleaner 3) many of our scripts use ldapsearch and ldapmodify and simple bind - when using the openldap versions of these tools, we have to pass -x to use simple bind 4) replace the missing proxy auth control functions 5) fix some of our ldap client tools which used deprecated APIs http://rmeggins.fedorapeople.org/patches/0001-openldap-ldap_url_parse_ext-i… http://rmeggins.fedorapeople.org/patches/0002-fix-memleak-in-ldbm_config_re… http://rmeggins.fedorapeople.org/patches/0003-Add-x-option-to-ldap-tools-wh… http://rmeggins.fedorapeople.org/patches/0004-openldap-add-support-for-miss… http://rmeggins.fedorapeople.org/patches/0005-port-client-tools-to-use-open… http://rmeggins.fedorapeople.org/patches/0006-use-the-mozldap-versions-of-t…

2 1

Please review: [Bug 574101] MODRDN request never returns - possible deadlock
by Noriko Hosoi 09 Jun '10

09 Jun '10

https://bugzilla.redhat.com/show_bug.cgi?id=574101 https://bugzilla.redhat.com/attachment.cgi?id=422349&action=diff https://bugzilla.redhat.com/attachment.cgi?id=422349&action=edit File: ldap/servers/slapd/back-ldbm/ldbm_modrdn.c Description: To create the ID list for child entries of to-be-renamed entry, an inappropriate function (idl_append) was used. The function expects the passed IDs are sorted. If not sorted, idl_insert should be used instead.

1 0

Please Review: (601865) Add missing man pages (adminserver)
by Nathan Kinder 09 Jun '10

09 Jun '10

https://bugzilla.redhat.com/show_bug.cgi?id=601865 https://bugzilla.redhat.com/attachment.cgi?id=422329&action=diff https://bugzilla.redhat.com/attachment.cgi?id=422329&action=edit

1 0

Please Review: (601433) Add man pages for start-dirsrv and associated commands
by Nathan Kinder 08 Jun '10

08 Jun '10

https://bugzilla.redhat.com/show_bug.cgi?id=601433 https://bugzilla.redhat.com/attachment.cgi?id=422261&action=diff https://bugzilla.redhat.com/attachment.cgi?id=422261&action=edit

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-devel June 2010