https://bugs.openldap.org/show_bug.cgi?id=9504

          Issue ID: 9504
           Summary: Assertion failure after reconfiguring
                    olcDbIDAssertBind in slapd-ldap
           Product: OpenLDAP
           Version: 2.5
          Hardware: All
                OS: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: ---
         Component: backends
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

OpenLDAP crashes to following assert error:

slapd: bind.c:2657: ldap_back_proxy_authz_ctrl: Assertion `0' failed.

The crash can be reproduced by executing following sequence:

1. create proxy with OLC configuration
2. execute modify operation that changes olcDbIDAssertBind (replace or
delete&add)
   but do set mode=legacy as the value
3. execute ldapsearch as user that maps into idassert-bind
4. slapd crashes with the above error message

mode=legacy is the default and everything works after initial configuration (1) 
even without adding mode=legacy into the configuration, but when doing 
re-configuration using OLC (2) the default value does not seem to get
initialized 
correctly anymore.  This causes next LDAP operation (3) to fail after changing
the
configuration since the server crashes (4).

The assert in question is here, in the default branch when "mode" variable is
not
set at all:

https://git.openldap.org/openldap/openldap/-/blob/c9ee2ccd1c8aadaef9db907420afe3fb23dcd02f/servers/slapd/back-ldap/bind.c#L2656

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to