Your message dated Wed, 20 Apr 2005 19:47:31 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#303243: fixed in openldap2.2 2.2.23-3
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 5 Apr 2005 15:27:18 +0000
>From [EMAIL PROTECTED] Tue Apr 05 08:27:17 2005
Return-path: <[EMAIL PROTECTED]>
Received: from smtpq2.home.nl [213.51.128.197]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DIpxV-00059E-00; Tue, 05 Apr 2005 08:27:17 -0700
Received: from [213.51.128.136] (port=38505 helo=smtp5.home.nl)
by smtpq2.home.nl with esmtp (Exim 4.30)
id 1DIpxU-0006pD-3a
for [EMAIL PROTECTED]; Tue, 05 Apr 2005 17:27:16 +0200
Received: from cc203504-a.zwoll1.ov.home.nl ([217.122.200.151]:58847
helo=moonshine.dnsalias.org)
by smtp5.home.nl with esmtp (Exim 4.30)
id 1DIpxS-0003kv-Sb; Tue, 05 Apr 2005 17:27:14 +0200
Received: from localhost ([127.0.0.1]:45077)
by moonshine.dnsalias.org with esmtp (Exim 4.50)
id 1DIpxS-0004H7-Bs; Tue, 05 Apr 2005 17:27:14 +0200
Received: from moonshine.dnsalias.org ([127.0.0.1])
by localhost (moonshine.dnsalias.org [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 16004-02; Tue, 5 Apr 2005 17:27:06 +0200 (CEST)
Received: from arjan by moonshine.dnsalias.org with local (Exim 4.50)
id 1DIpxK-0004H0-NW; Tue, 05 Apr 2005 17:27:06 +0200
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Arjan Oosting <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: slapd: failed upgrade to latest version in sid
X-Mailer: reportbug 3.9
Date: Tue, 05 Apr 2005 17:27:06 +0200
Message-Id: <[EMAIL PROTECTED]>
X-Virus-Scanned: by amavisd-new-20030616-p10 (Debian) at moonshine.dnsalias.org
X-AtHome-MailScanner-Information: Neem contact op met [EMAIL PROTECTED] voor
meer informatie
X-AtHome-MailScanner: Found to be clean
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Package: slapd
Version: 2.2.23-1
Severity: important
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
I upgraded my slapd installation a couple days ago to the latest version in
unstable, but the upgrade script failed. The upgrade script rewrote my
slapd.conf config file and changed the access specifications. Then i dumped my
database to /var/backup/slapd-VERSION. After that it tried to load the database
again, but it failed because the slapd.conf file got corrupted. It seems
that the upgrade-script creates lines like:
access to attrs=userPassword by dn.regex="cn=admin,dc=arriesoft,dc=nl" write
by anonymous auth by self write by * none # NT Password
That is everything on one line with to comment on the next line appended, which
slapcat doesn't seem to understand. After changing the layout back to the
original layout (see below), I did a dpkg --configure --pending, but this failed
because the maintainer script isn't idempotent and tried to dump the database
again to /var/backup/slapd-VERSION, but couldn't do that because there was
already a database present there from the first try to upgrade slapd.
access to attrs=userPassword
by dn.regex="cn=admin,dc=arriesoft,dc=nl" write
by anonymous auth
by self write
by * none
# NT Password
So it seems the upgrade script is severly broken, which can result in big
problems
(I have my user accounts in ldap, and couldn't login in anymore. Luckely i
could
login as root locally, but if i had not had physical access to the machine i
would
have been out of luck).
Greetings Arjan Oosting.
p.s. It seems that slapd is now linked with openssl in stead of gnutls? Are the
GPL problems with linking to openssl solved? Linking with openssl broke my samba
installation (samba linked with gnutls, user accounts in ldap) though :( , but
I will investigate that further and send another bugreport.
- -- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11.5-1-moonshine
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=ISO-8859-15)
Versions of packages slapd depends on:
ii coreutils [fileutils] 5.2.1-2 The GNU core utilities
ii debconf 1.4.47 Debian configuration management sy
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-18 Berkeley v4.2 Database Libraries [
ii libiodbc2 3.52.2-3 iODBC Driver Manager
ii libldap-2.2-7 2.2.23-1 OpenLDAP libraries
ii libltdl3 1.5.6-6 A system independent dlopen wrappe
ii libperl5.8 5.8.4-8 Shared Perl library
ii libsasl2 2.1.19-1.5 Authentication abstraction library
ii libslp1 1.0.11a-2 OpenSLP libraries
ii libssl0.9.7 0.9.7e-3 SSL shared libraries
ii libwrap0 7.6.dbs-8 Wietse Venema's TCP wrappers libra
ii perl [libmime-base64-perl] 5.8.4-8 Larry Wall's Practical Extraction
ii psmisc 21.6-1 Utilities that use the proc filesy
- -- debconf information:
slapd/fix_directory: true
shared/organization:
slapd/upgrade_slapcat_failure:
slapd/backend: BDB
* slapd/allow_ldap_v2: false
* slapd/no_configuration: true
slapd/move_old_database: true
slapd/suffix_change: false
slapd/slave_databases_require_updateref:
* slapd/dump_database_destdir: /var/backups/slapd-VERSION
slapd/autoconf_modules: true
slapd/domain:
slapd/password_mismatch:
slapd/invalid_config: true
slapd/upgrade_slapadd_failure:
* slapd/dump_database: when needed
slapd/purge_database: false
slapd/admin:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCUq5KUALvsZYuOJARAqc5AJ4o8C2n/q0+eL4UrP4+L9tf+osG2ACdGB7S
kEke/u4DJGaJo6bA0ItCNG0=
=11xf
-----END PGP SIGNATURE-----
---------------------------------------
Received: (at 303243-close) by bugs.debian.org; 20 Apr 2005 23:56:44 +0000
>From [EMAIL PROTECTED] Wed Apr 20 16:56:44 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DOP3k-0005Kn-00; Wed, 20 Apr 2005 16:56:44 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DOOup-0006Q3-00; Wed, 20 Apr 2005 19:47:31 -0400
From: Torsten Landschoff <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#303243: fixed in openldap2.2 2.2.23-3
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Wed, 20 Apr 2005 19:47:31 -0400
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 2
Source: openldap2.2
Source-Version: 2.2.23-3
We believe that the bug you reported is fixed in the latest version of
openldap2.2, which is due to be installed in the Debian FTP archive:
ldap-utils_2.2.23-3_i386.deb
to pool/main/o/openldap2.2/ldap-utils_2.2.23-3_i386.deb
libldap-2.2-7_2.2.23-3_i386.deb
to pool/main/o/openldap2.2/libldap-2.2-7_2.2.23-3_i386.deb
openldap2.2_2.2.23-3.diff.gz
to pool/main/o/openldap2.2/openldap2.2_2.2.23-3.diff.gz
openldap2.2_2.2.23-3.dsc
to pool/main/o/openldap2.2/openldap2.2_2.2.23-3.dsc
slapd_2.2.23-3_i386.deb
to pool/main/o/openldap2.2/slapd_2.2.23-3_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Torsten Landschoff <[EMAIL PROTECTED]> (supplier of updated openldap2.2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 21 Apr 2005 01:29:57 +0200
Source: openldap2.2
Binary: slapd ldap-utils libldap-2.2-7
Architecture: source i386
Version: 2.2.23-3
Distribution: unstable
Urgency: low
Maintainer: Torsten Landschoff <[EMAIL PROTECTED]>
Changed-By: Torsten Landschoff <[EMAIL PROTECTED]>
Description:
ldap-utils - OpenLDAP utilities
libldap-2.2-7 - OpenLDAP libraries
slapd - OpenLDAP server (slapd)
Closes: 265860 303243 304339 304549 304840
Changes:
openldap2.2 (2.2.23-3) unstable; urgency=low
.
Steve Langasek <[EMAIL PROTECTED]>
* libraries/libldap_r/Makefile.in: Code that uses pthreads *must* be
linked with -pthread, even if it's a library; without this, the
libldap_r library ends up with dangling unversioned reference to
pthread_create() which gets resolved to a wrong version that causes
segfaults on 64-bit platforms. Closes: #304549.
* debian/rules: error out on build if an installed library has
undefined symbols; future-proofing against a repeat of #304549.
* debian/slapd.postinst: don't dump and reload directories unless we
know we're upgrading from an incompatible version! Closes: #304840.
* debian/slapd.scripts-common: don't use merge_logical_lines for
functions that will be writing back to the config; the code is not
as pretty now, but the output is much less ugly. Closes: #303243.
* debian/slapd.examples, debian/slapd.scripts-common,
debian/slapd.links, debian/move_files: install DB_CONFIG in
/usr/share/slapd/ instead of /usr/share/doc/slapd/examples/; this
simplifies the code, and ensures users who don't install
/usr/share/doc aren't penalized. Create links for the DB_CONFIG and
slapd.confg templates to /usr/share/doc/slapd/examples, since these
are worthwhile examples as well.
* Updated maintainer scripts to keep DB_CONFIG for LDAP databases over
upgrades (closes: #265860).
* Move slappasswd to the slapd package, since it's now a symlink and
isn't actually useful without the slapd binary (closes: #304339).
Files:
7c942ffec1c8d65ba0658fd26f7fa515 999 net optional openldap2.2_2.2.23-3.dsc
62b2bcb60d20dbbbbd01ed58994fccc8 478104 net optional
openldap2.2_2.2.23-3.diff.gz
f242a20d7673b377d8bb8d93d6ab0960 797980 net optional slapd_2.2.23-3_i386.deb
d223b5b37666dcdb1ea8ca3e0de21c71 117314 net optional
ldap-utils_2.2.23-3_i386.deb
46c7ac17ee7b4a24ea75941f8c8b859f 240602 libs important
libldap-2.2-7_2.2.23-3_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
iD8DBQFCZugMdQgHtVUb5EcRAn14AJ4sbnxkvFoI/mQ4eHkWMi12APMAdQCffLLw
4Yidij2MCYjkXe1Up9trAC0=
=xn9A
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
