Re: (ITS#6724) Feature request: support for PKCS11 pin input callback in public TLS api

2010-11-26 Thread hyc
library. Probably a good idea. Feel free to submit a patch for review. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6703) Patch - Mozilla NSS - reject non-file key and cert files

2010-11-15 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6703) Patch - Mozilla NSS - reject non-file key and cert files

2010-11-15 Thread hyc
Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6698) Please add BDB 5.x support for SLAPD

2010-11-11 Thread hyc
versions 5.x as well. (For now we are using 5.1) Thanx. Added to configure script in HEAD. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6701) Update to man8 slappasswd: English usage

2010-11-11 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6702) slappasswd prompts missing

2010-11-11 Thread hyc
a replacement in the OpenLDAP code is used instead. The OpenLDAP code is now fixed in HEAD. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6683) DDS fails with expired branches

2010-11-09 Thread hyc
entryExpireTimestamp: 20101024113626Z If I change all timestamps to distinct values then expiration of complete branches works as expected. Thanks, Petteri -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#6696) back-sql and pagedResultsControl can be extremely heavy due to no LIMIT

2010-11-09 Thread hyc
paging. A configurable option might be best.) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6690) ldap_result LDAP_TIMEOUT

2010-11-02 Thread hyc
==LDAP_TIMEOUT The return code from ldap_result is not return an LDAP success code. There is no bug here, this ITS will be closed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#6689) Patch - Mozilla NSS - support cert database prefix

2010-10-29 Thread hyc
and/or redistributed for any purpose with or without attribution and/or other notice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6686) VLV overlay fails to handle multiple search operations per LDAP connection

2010-10-27 Thread hyc
to protect the slapd from getting overloaded by too many such requests. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6684) Patch for autogroup overlay

2010-10-25 Thread hyc
://www.openldap.org/devel/contributing.html and provide a suitable IPR notice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6682) tests/scripts/test060-mt-hot not executable

2010-10-23 Thread hyc
./run test060 run: test060 not found (or not executable) Sorry, looks like I should've checked this on initial commit. Will have to let Kurt fix it. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#6625) draft-zeilenga-ldap-c-api-concurrency support

2010-10-22 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6673) ldap_unbind() hangs on unreachable LDAP server when using TLS

2010-10-16 Thread hyc
CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6673) ldap_unbind() hangs on unreachable LDAP server when using TLS

2010-10-14 Thread hyc
. But GnuTLS has enough flaws in general that I wouldn't claim it ever does anything right or as expected. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6672) OpenLDAP LDAP_R_COMPILE cleanup (LDAP_MUTEX_LOCK/LDAP_MUTEX_UNLOCK)

2010-10-13 Thread hyc
, to release this work under the following terms. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6673) ldap_unbind() hangs on unreachable LDAP server when using TLS

2010-10-13 Thread hyc
, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6673) ldap_unbind() hangs on unreachable LDAP server when using TLS

2010-10-13 Thread hyc
block for 2*MSL before getting any further. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6625) draft-zeilenga-ldap-c-api-concurrency support

2010-10-13 Thread hyc
you for your consideration, Doug. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6668) MemberOf Overlay

2010-10-11 Thread hyc
Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6664) Server control forwarding in back_meta and back_ldap

2010-10-08 Thread hyc
back-ldap's option to process the WhoAmI exop...) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6666) Feature Request: Triggers implementation

2010-10-07 Thread hyc
Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6666) Feature Request: Triggers implementation

2010-10-06 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6660) paged result searches fail to deallocate memory until slapd shutdown

2010-09-30 Thread hyc
to. cn=monitor shows that the entry cache grows far beyond its configured size. Still looking into a proper fix. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org

Re: (ITS#6639) syncrepl failing using SASL/GSSAPI

2010-09-12 Thread hyc
for the confirmation. I'll commit a final fix to HEAD shortly. Thanks again for your help. Bill -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6646) back-hdb dncache disregarded in some searches

2010-09-10 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6639) syncrepl failing using SASL/GSSAPI

2010-09-10 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6645) Yet Another LDIF Wrap Patch

2010-09-09 Thread hyc
just used if ( wrap len wrap ) instead of a word-size-dependent magic. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6641) Syncrepl failure with 'overlay unique'

2010-09-07 Thread hyc
-responsive until the refresh completes. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6641) Syncrepl failure with 'overlay unique'

2010-09-07 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6637) valgrind issues in SSL code

2010-08-30 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6629) send_search_entry() does not clear controls

2010-08-25 Thread hyc
was two-fold - to provide thread-local memory that needs no locking, and also to provide local memory that needs no housekeeping/explicit frees. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: (ITS#6621) Compile time error in daemon.c 1.446

2010-08-12 Thread hyc
/* !HAVE_WINSOCK */ Nice catch, thanks. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6621) Compile time error in daemon.c 1.446

2010-08-12 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6621) Compile time error in daemon.c 1.446

2010-08-12 Thread hyc
, a Niagara might actually show more than a 1% gain from the multi-listener patch. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6621) Compile time error in daemon.c 1.446

2010-08-12 Thread hyc
tested it against select on Solaris recently? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6610) Client receives SIGPIPE when connected via ldapi with TLS

2010-07-29 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6607) forwarded bind failure messages cause success

2010-07-28 Thread hyc
, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6531) Modify updateref to generate referrals on the backend

2010-07-28 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6598) EXOP to return number of children of a (sub)tree

2010-07-21 Thread hyc
it. In either case, the server still needs to iterate over all entries internally, and the result has to take ACLs and entry disclosure into account. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: (ITS#6598) EXOP to return number of children of a (sub)tree

2010-07-21 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6590) slaptest ignores slapd.conf's dbconfig statement during conversion into cn=config

2010-07-21 Thread hyc
,dc=example,dc=com olcRootPW:: c2VjcmV0 olcSyncUseSubentry: FALSE olcMonitoring: TRUE olcDbDirectory: /home/hyc/OD/hobj/tests/testrun/db.1.a olcDbCacheSize: 1000 olcDbCheckpoint: 1024 5 olcDbConfig: {0}set_lg_bsize 2097152 olcDbNoSync: FALSE olcDbDirtyRead: FALSE olcDbIDLcacheSize: 0 olcDbIndex

Re: (ITS#6595) Patch - Mozilla NSS - delay token auth until needed

2010-07-21 Thread hyc
be freely used and/or redistributed for any purpose with or without attribution and/or other notice. Committed to HEAD. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#6585) close is called from dap_unbind_s with fd = -1

2010-07-21 Thread hyc
] ldap_unbind_s(0x100149520, 0x1001471d0, 0x100149520, 0xfff2, 0x0, 0x100117728), at 0x7d26a55c ... ... Thanks in Advance, Asif Iqbal Desai -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#6589) Patch - Mozilla NSS - support use of self signed CA certs as server certs

2010-07-14 Thread hyc
and/or redistributed for any purpose with or without attribution and/or other notice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6589) Patch - Mozilla NSS - support use of self signed CA certs as server certs

2010-07-14 Thread hyc
the BasicConstraints, KeyUsage, and/or NetscapeCertType already been checked successfully? Yes. This check occurs in the cert chain processing, which is done last. OK. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#6589) Patch - Mozilla NSS - support use of self signed CA certs as server certs

2010-07-14 Thread hyc
already been checked successfully? Yes. This check occurs in the cert chain processing, which is done last. OK. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#6587) lconn_refcnt is not thread-safe

2010-07-10 Thread hyc
*/ if ( lc-lconn_refcnt= 1 ) { #ifdef LDAP_R_COMPILE ldap_pvt_thread_mutex_lock(ld-ld_req_mutex ); #endif ldap_free_connection( ld, lc, 0, 1 ); -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#6575) Feature Request: ldapsearch ldif export without wrap

2010-06-18 Thread hyc
row when the dn is too long. This is a duplicate of ITS#4269, #6149, and probably a few others. Closing. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6548) Many connection_read(): no connection! warnings when using ldapi:/// and a bind DN (no external authentication)

2010-06-13 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6567) Enable GSSAPI support and expose ldap_gssadpi_bind_s

2010-06-01 Thread hyc
be configured with arbitrary Bind mechanisms, you would have re-implemented SASL. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6568) patch: Memory leak in connectionless

2010-06-01 Thread hyc
/OpenLDAP/scott-salley-100601-fix-connectionless-memory-leak.patch closes memory leaks associated with using connectionless mode. Thanks for the patch, applied to HEAD. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#6569) patch: Set ld_errno on error.

2010-06-01 Thread hyc
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6536) Autogroup overlay enhancement

2010-06-01 Thread hyc
http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6554) OpenLDAP + TLS multiple server certificates

2010-05-21 Thread hyc
will be closed. Use the -software mailing list. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6555) Syncprov (refreshAndPersist) loses deletes

2010-05-21 Thread hyc
phase will naturally have an entryCSN greater than mincsn and still be queued. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6555) Syncprov (refreshAndPersist) loses deletes

2010-05-21 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6549) test043 hasSubordinates attribute inconsistencies

2010-05-17 Thread hyc
entries do exist on the consumer. -Matt -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6550) Patch for smbk5pwd slapd overlay to include shadowLastChange

2010-05-15 Thread hyc
. Well, you're the OpenLDAP boss and free to refuse anything you want. But personally I don't understand your strong objections. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#6550) Patch for smbk5pwd slapd overlay to include shadowLastChange

2010-05-14 Thread hyc
for KDC/LDAP and Samba-Posix/LDAP. Ultimately both Kerberos and Samba will just be using LDAP ppolicy. But yes, the build dependencies are still annoying. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#6550) Patch for smbk5pwd slapd overlay to include shadowLastChange

2010-05-14 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6542) Segmentation Fault if config file (ldif) got changed

2010-05-01 Thread hyc
if you hand-edited the data files in a back-bdb database too. And no, we will not add code to protect from such misuse. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#6535) OpenLDAP fails to build with back-ndb enabled

2010-04-26 Thread hyc
CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6531) Modify updateref to generate referrals on the backend

2010-04-24 Thread hyc
the behavior of updateref to answer referrals on the backend. This would allow one to use updateref to automatically chase referrals for individual backends, instead of it being all or nothing. Here is the tail end of the channel conversation: hyc when you configure an updateref on a backend

Re: ITS#6055

2010-04-20 Thread hyc
to add new features independent of the rest of the release cycle. Items in the main slapd/overlays are more constrained to bugfixes-only within a release cycle.) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#6472) Syncrepl : loop problem with moddn on a new node

2010-04-17 Thread hyc
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6524) gnutls cipher spec is unclear

2010-04-16 Thread hyc
-cli \-l + gnutls\-cli \-l .fi +.RE .TP .B TLS_RANDFILEfilename Specifies the file to obtain random bits from when /dev/[u]random is -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#6469) push replication entryCSN of database suffix out of sync

2010-04-14 Thread hyc
in the past for updatedn writes? If we filled in missing opattrs, then we should continue to do so. So it should be a special case for contextCSN mods. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: (ITS#6474) test004 (hdb) crashes when slapd is compiled with -D_FORTIFY_SOURCE=2

2010-04-13 Thread hyc
Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6515) A lot of dead links on main page of OpenLDAP man.

2010-04-12 Thread hyc
- should be (redirect, but futher, IMHO, will be dead, try http://pen.iana.org/pen/PenApplication.page) Thanks. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org

Re: (ITS#6517) undefined references to ldif_*

2010-04-12 Thread hyc
, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6517) undefined references to ldif_*

2010-04-12 Thread hyc
CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6432) PATCH: MozNSS crypto (tls_m.c) - support InitContext, improved PEM support

2010-04-11 Thread hyc
on this. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6483) [PATCH] Properly use #elif

2010-04-11 Thread hyc
. Autoconf HAVE_xx macros must be defined to 1 to actually be used, some scripts may also define them to 0. The current test is correct. Closing this ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: (ITS#6503) syncrepl provider sends entryUUIDs of all LDAP records to consumer when consumer slapd is started

2010-04-11 Thread hyc
they require the most work to find otherwise. Recording adds is just a shortcut since the original behavior works as designed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#6512) configure error - BerkeleyDB 5.0 problem?

2010-04-09 Thread hyc
, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6510) GSSAPI rebind proc will cause mutex deadlock

2010-04-08 Thread hyc
to send a referral in response to a Bind request. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6510) GSSAPI rebind proc will cause mutex deadlock

2010-04-08 Thread hyc
on a referral simply means performing a Bind against some other server. It does nothing for the authentication state of the session on the original server. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#6504) Corrupted control value when using pagedresults with subordinate *ldap* database

2010-04-01 Thread hyc
, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6504) Corrupted control value when using pagedresults with subordinate *ldap* database

2010-04-01 Thread hyc
Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6503) syncrepl provider sends entryUUIDs of all LDAP records to consumer when consumer slapd is started

2010-03-31 Thread hyc
of your configuration, we can't say if this difference in behavior is a bug or a config error. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6502) Build failure tls_g.c

2010-03-30 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6501) DBTzeros in bdb/hdb

2010-03-30 Thread hyc
db_rw = DB_LOCK_READ; + DBTzero(lockobj ); lockobj.data = dn-bv_val; lockobj.size = dn-bv_len; -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#6487) Nssov pam_authz authorizedUserService

2010-03-22 Thread hyc
probably be in a separate patch. Regards, Kean This patch was rejected. The functionality it offered was already provided by the slapd ACL engine. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#6495) nssov patch to better emulate pam_ldap behaviour

2010-03-22 Thread hyc
attribute functionality is deprecated. I have no desire to make it even vaguely appear to be useful. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6495) nssov patch to better emulate pam_ldap behaviour

2010-03-22 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6487) Nssov pam_authz authorizedUserService

2010-03-22 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6486) OpenLDAP Admin Guide Backends Documentation

2010-03-05 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6433) patch for the sha2 module: hash methods for passwords generation

2010-03-03 Thread hyc
http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6485) nssov pam_authz fixes

2010-03-03 Thread hyc
/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6469) push replication entryCSN of database suffix out of sync

2010-02-03 Thread hyc
attributes in its updates. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

(ITS#6467) syncrepl enhancements

2010-02-02 Thread hyc
Full_Name: Howard Chu Version: 2.5 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (76.94.188.212) Submitted by: hyc Syncrepl refreshes can be very expensive without a sessionlog, and the syncprov sessionlog is inadequate because it's in-memory only, and doesn't survive

Re: (ITS#6469) push replication entryCSN of database suffix out of sync

2010-02-02 Thread hyc
doesn't happen until after the suffix entry already exists. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6466) certificateListValidate rejects valid X.509 CRLs (but not RFC-compliant)

2010-01-31 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6466) certificateListValidate rejects valid X.509 CRLs (but not RFC-compliant)

2010-01-30 Thread hyc
/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6464) Buffer overflow

2010-01-30 Thread hyc
a stack trace from this crash. Be sure to compile with debug symbols enabled and no optimization, otherwise we won't be able to track anything down. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: (ITS#6460) SASL EXTERNAL fails with long certificate serial numbers

2010-01-24 Thread hyc
was obtained thru a TLS handshake, we assume it has already been validated by the TLS library. Further validation is not needed. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#6439) rootDSE access method question

2010-01-05 Thread hyc
to do? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#6437) sl_malloc issues

2010-01-04 Thread hyc
have kept a lot of excess memory lying around so I dropped that. So right, currently the slab size doesn't change. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org

<    8   9   10   11   12   13   14   15   16   17   >