[Bug 277053] [NEW] appamor prevents slapd.d to write cn=config

2008-10-02 Thread Daniel Paufler
Public bug reported:

the appamor file for slapd prevents slapd to write to /etc/slapd.d when
slapd used with cn=config backend.

a line in /etc/apparmor.d/usr.sbin.slapd is missing to allow writes to the 
cn=config backend
{{{
  # the databases and logs
  /etc/sldapd.d/* rw,
}}}

I think, you relly should fix it

Distributor ID: Ubuntu
Description:Ubuntu 8.04.1
Release:8.04
Codename:   hardy

slapd:
  Installed: 2.4.9-0ubuntu0.8.04.1
  Candidate: 2.4.9-0ubuntu0.8.04.1
  Version table:
 *** 2.4.9-0ubuntu0.8.04.1 0
500 http://aptproxy.rz.intern hardy-updates/main Packages
500 http://aptproxy.rz.intern hardy-security/main Packages
100 /var/lib/dpkg/status
 2.4.7-6ubuntu3 0
500 http://aptproxy.rz.intern hardy/main Packages

apparmor:
  Installed: 2.1+1075-0ubuntu9.1
  Candidate: 2.1+1075-0ubuntu9.1
  Version table:
 *** 2.1+1075-0ubuntu9.1 0
500 http://aptproxy.rz.intern hardy-updates/main Packages
100 /var/lib/dpkg/status
 2.1+1075-0ubuntu9 0
500 http://aptproxy.rz.intern hardy/main Packages

** Affects: openldap (Ubuntu)
 Importance: Undecided
 Status: New


** Tags: apparmor ldap slapd

-- 
appamor prevents slapd.d to write cn=config
https://bugs.launchpad.net/bugs/277053
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 277053] Re: appamor prevents slapd.d to write cn=config

2008-10-02 Thread Daniel Paufler
** Description changed:

  the appamor file for slapd prevents slapd to write to /etc/slapd.d when
  slapd used with cn=config backend.
  
  a line in /etc/apparmor.d/usr.sbin.slapd is missing to allow writes to the 
cn=config backend
  {{{
# the databases and logs
-   /etc/sldapd.d/* rw,
+   /etc/sldapd.d/** rw,
  }}}
  
  I think, you relly should fix it
  
  Distributor ID: Ubuntu
  Description:Ubuntu 8.04.1
  Release:8.04
  Codename:   hardy
  
  slapd:
Installed: 2.4.9-0ubuntu0.8.04.1
Candidate: 2.4.9-0ubuntu0.8.04.1
Version table:
   *** 2.4.9-0ubuntu0.8.04.1 0
  500 http://aptproxy.rz.intern hardy-updates/main Packages
  500 http://aptproxy.rz.intern hardy-security/main Packages
  100 /var/lib/dpkg/status
   2.4.7-6ubuntu3 0
  500 http://aptproxy.rz.intern hardy/main Packages
  
  apparmor:
Installed: 2.1+1075-0ubuntu9.1
Candidate: 2.1+1075-0ubuntu9.1
Version table:
   *** 2.1+1075-0ubuntu9.1 0
  500 http://aptproxy.rz.intern hardy-updates/main Packages
  100 /var/lib/dpkg/status
   2.1+1075-0ubuntu9 0
  500 http://aptproxy.rz.intern hardy/main Packages

-- 
appamor prevents slapd.d to write cn=config
https://bugs.launchpad.net/bugs/277053
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 227344] [NEW] bind-dlz und ldap api

2008-05-06 Thread Daniel Paufler
Public bug reported:

Binary package hint: bind9

I was running bind 9.4.1-P1-3 with DLZ and openldap 2.3.35-1 with ubuntu
7.10 (gutsy)

Now i updated to bind 9.4.2 and openldap 2.4.7. My previous config
stopped working with lookup query must specify a search base error.

It seems, that it caused by the ldap API change regarding % sign.

I emailed with the bind-dlz guys. They changed their configuration to
not use % but $. I applied the patch, dpkg-build the package again
and it is working. Can you please put the patch to your binary package
and give out e new version for hardy.

--

--- bind-9.4.2/contrib/dlz/drivers/sdlz_helper.c.orig
+++ bind-9.4.2/contrib/dlz/drivers/sdlz_helper.c
@@ -166,12 +166,12 @@
ISC_LIST_APPEND(*tql, tseg, link);
 
/*
-* split string at the first %. set query segment to
+* split string at the first $. set query segment to
 * left portion
 */
tseg-sql = isc_mem_strdup(mctx,
   isc_string_separate(right_str,
-  %));
+  $));
if (tseg-sql == NULL) {
/* no memory, clean everything up. */
result = ISC_R_NOMEMORY;


-


My System:
No LSB modules are available.
Distributor ID: Ubuntu
Description:Ubuntu 8.04
Release:8.04
Codename:   hardy

bind9:
  Installed: 1:9.4.2-10
  Candidate: 1:9.4.2-10
  Version table:
 1:9.4.2-10 0
500 http://de.archive.ubuntu.com hardy/main Packages
 *** 1:9.4.2-10 0
100 /var/lib/dpkg/status

slapd:
  Installed: 2.4.7-6ubuntu3
  Candidate: 2.4.7-6ubuntu3
  Version table:
 *** 2.4.7-6ubuntu3 0
500 http://de.archive.ubuntu.com hardy/main Packages
100 /var/lib/dpkg/status

libldap-2.4-2:
  Installed: 2.4.7-6ubuntu3
  Candidate: 2.4.7-6ubuntu3
  Version table:
 *** 2.4.7-6ubuntu3 0
500 http://de.archive.ubuntu.com hardy/main Packages
100 /var/lib/dpkg/status

** Affects: bind9 (Ubuntu)
 Importance: Undecided
 Status: New

-- 
bind-dlz und ldap api
https://bugs.launchpad.net/bugs/227344
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 227344] Re: bind-dlz und ldap api

2008-05-06 Thread Daniel Paufler
See email thread at
http://comments.gmane.org/gmane.network.dns.bind9.dlz/1901

-- 
bind-dlz und ldap api
https://bugs.launchpad.net/bugs/227344
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to bind9 in ubuntu.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs