https://bugs.openldap.org/show_bug.cgi?id=10091

          Issue ID: 10091
           Summary: slapd segfaults when the dynlist overlay is applied on
                    the frontend db (with `<memberOf-ad>@<static-oc>`
                    parameters)
           Product: OpenLDAP
           Version: 2.6.6
          Hardware: x86_64
                OS: Linux
            Status: UNCONFIRMED
          Keywords: needs_review
          Severity: normal
          Priority: ---
         Component: overlays
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: ---

Created attachment 974
  --> https://bugs.openldap.org/attachment.cgi?id=974&action=edit
Full stacktrace of the segfault

Dear OpenLDAP Development-Team,

first of all, thank You for Your continued efforts to provide this great
software!

I've run into a segfault when trying to apply the dynlist overlay to the
frontend db. As I'm running Alpine Linux (based on musl libc), I've verified
that this segfault also occurs under GLIBC-based distros. Furthermore, I've
trimmed my config down to the bare minimum to provide a replicable setting.

This segfault only occurs when I'm trying to use the full `dynlist-attrset`
configuration (including the  `+<memberOf-ad>@<static-oc>` parameters). If I
only supply the `<group-oc> <URL-ad> <member-ad>` parts of the configruation,
the segfault does not occur. And the segfault does not happen on startup, but
when connecting to the running `slapd` instance.

The version I'm running:
> @(#) $OpenLDAP: slapd 2.6.6 (Aug  7 2023 12:57:03) $

My `slapd.conf` (the same segfault occures through a `cn=config` setup):
> moduleload dynlist
> 
> include /etc/openldap/schema/core.schema
> 
> overlay dynlist
> dynlist-attrset labeledURIObject labeledURI member+memberOf@groupOfNames
> 
> database ldif
> directory /tmp
> suffix "dc=example,dc=com"

I've attached a complete stacktrace of the segfault, which is traced back to
`dynlist.c:2057`. If I can provide any other means of debugging (e.g. a
coredump) or help in locating the root of this issue, I'd be happy to!

If this issue is known or the dynlist overlay does not support this
functionality on the frontend db, I'm sorry for the noise; but as far as I've
been able to verify, there is no mention of such a limitation within the
`slapo-dynlist` manpage (which does mention the possibility to apply the
dynlist overlay to the frontend db), nor did I find an issue regarding exactly
this error.

Again, thank You for Your efforts and
kind regards,
Philip Schildkamp

-- 
You are receiving this mail because:
You are on the CC list for the issue.

Reply via email to