Re: (ITS#7413) Some UTF-8 characters are wrongly recognized as identical in multi-valued attributes

2012-10-11 Thread hyc
) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7414) rwm: ldapmodify, slapd segmentation fault

2012-10-11 Thread hyc
, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7348) enhancement: check_password contrib module

2012-10-10 Thread hyc
guillaume.rou...@inria.fr wrote: Ping ? Can I have any kind of feedback ? As the ITS status says, it's on hold due to IPR concerns. Kurt can explain further. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#7400) Memberof and Syncrepl incompatibility

2012-10-09 Thread hyc
the group is deleted, it is never replicated and a stale memberOf entry stays with the user. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7367) [PATCH] MozNSS: update list of supported cipher suites

2012-10-03 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7367) [PATCH] MozNSS: update list of supported cipher suites

2012-10-02 Thread hyc
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7367) [PATCH] MozNSS: update list of supported cipher suites

2012-10-02 Thread hyc
of software that expects to use OpenSSL-style cipher suite names. libldap is certainly not the best place to put this translation. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#7400) Memberof and Syncrepl incompatibility

2012-10-01 Thread hyc
http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7367) [PATCH] MozNSS: update list of supported cipher suites

2012-10-01 Thread hyc
with or without attribution and/or other notice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7400) Memberof and Syncrepl incompatibility

2012-09-30 Thread hyc
if anyone has faced this issues (I did not see any ITS related to this), and has a workaround. Thanks, Arunkumar -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#7405) Improve refint documentation

2012-09-27 Thread hyc
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7385) back_mdb ENOSPC error returned from mdb_node_add incorrectly

2012-09-27 Thread hyc
failed: MDB_PAGE_FULL: Internal error - page has no more space (-30786) Thanks for your help, this is now fixed in master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#7399) ¡¾Syncrepl¡¿when consumer doing the syncrepl with the provider, reboot the consumer, the cusummer does not continue the task any more

2012-09-27 Thread hyc
schemachecking=off bindmethod=simple binddn=cn=syncuser,dc=example,dc=com credentials=secret -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#7384) Assert Crash in ppolicy_ctrls_cleanup

2012-09-27 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

(ITS#7403) back-ldap idassert always overrides

2012-09-26 Thread hyc
Full_Name: Howard Chu Version: RE24/master OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.19.96.255) Submitted by: hyc If an idassert-bind directive has been configured, idassert processing is always performed, even if a direct bind has occurred. In effect, back-ldap

(ITS#7404) back-ldap connection cache error

2012-09-26 Thread hyc
Full_Name: Howard Chu Version: RE24/master OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.19.96.255) Submitted by: hyc back-ldap resets the local DN of a connection after a Bind request, even if the Bind failed. Subsequent operations for that DN will reuse this connection

Re: (ITS#7404) back-ldap connection cache error

2012-09-26 Thread hyc
h...@openldap.org wrote: Full_Name: Howard Chu Version: RE24/master OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.19.96.255) Submitted by: hyc back-ldap resets the local DN of a connection after a Bind request, even if the Bind failed. Subsequent operations

Re: (ITS#7401) OpenLDAP 2.4.32 - deadlock issues

2012-09-25 Thread hyc
? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7393) slapd crash when changing an attribute name to an existing name

2012-09-21 Thread hyc
'MailHost' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7398) Retrieve LDAP server cert

2012-09-21 Thread hyc
over the LDAP client API. Opinions? And then what? I think it'd be straightforward for us to return a copy of it in DER binary format. What do clients need to do with it? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#7385) back_mdb ENOSPC error returned from mdb_node_add incorrectly

2012-09-18 Thread hyc
8bb10add2465eee34e79abeaa62011e3e234effb. Please pull RE24 again today and try again, it should all be working fine. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7388) [PATCH] MozNSS: ignore certdb 'sql:' prefix when checking directory existence

2012-09-14 Thread hyc
, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd

2012-09-14 Thread hyc
CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7390) slapschema crashes with rwm-rewriteMap slapd

2012-09-14 Thread hyc
? Is it required to reproduce the bug? Not required. Just a bunch of include foo.schema. Ciao, Michael. Fixed in git master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org

Re: (ITS#7391) mdb_db_open: database cn=accesslog cannot be opened, err 13. Restore from backup!

2012-09-14 Thread hyc
-daten-2012-09-14T20:20:09.ldif.bz2: ok -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7385) back_mdb ENOSPC error returned from mdb_node_add incorrectly

2012-09-12 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

(ITS#7386) back-mdb slapindex grows DB without bound

2012-09-12 Thread hyc
Full_Name: Howard Chu Version: 2.4.32 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.19.96.255) Submitted by: hyc mdb_tool_entry_next() keeps a read-only cursor open, which prevents free pages from being reclaimed. Fix coming shortly.

Re: (ITS#7383) slapd startup issue with mdb

2012-09-11 Thread hyc
that you're indexing too much, but there's not enough information here to judge. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7382) slapadd segfaults (during freeing resources)

2012-09-09 Thread hyc
= 140733193388033 slapd_pid_file_unlink = 0 slapd_args_file_unlink = 0 firstopt = 1 __PRETTY_FUNCTION__ = main -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: (ITS#7364) mdb: clean up POSIX semaphores on environment close.

2012-09-03 Thread hyc
that SysV semaphore support is actually more widespread than POSIX semaphores. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7378) Slapd hangs on bdb write lock

2012-09-03 Thread hyc
://ftp.openldap.org/incoming/nikolai-dbstat-120902.txt -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7364) mdb: clean up POSIX semaphores on environment close.

2012-09-03 Thread hyc
reminded that there is no defined behavior for SysV semaphores in threads, they are only speciried for inter-process synchronization. So forget that... -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: (ITS#7378) Slapd hangs on bdb write lock

2012-09-03 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7378) Slapd hangs on bdb write lock

2012-09-03 Thread hyc
-120902.txt The full db_stat output is located at: ftp://ftp.openldap.org/incoming/nikolai-dbstat-120902.txt -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project

Re: (ITS#7377) Poor libmdb error handling

2012-09-01 Thread hyc
, at least. (Hyc, that moves cleanup out of mdb_env_setup_locks(). Any preference for using ~25 exit points 'return ErrCode() or rc' vs. ~25 'goto failure label' which does the same?) In general I prefer that functions have only one exit point, so multiple gotos is preferable. Maybe add a flag

Re: (ITS#7363) libmdb should use POSIX semaphores on non-apple BSD systems too.

2012-08-29 Thread hyc
creation/init failed...) -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7364) mdb: clean up POSIX semaphores on environment close.

2012-08-28 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7371) slapd locks up at shutdown in SSL threads

2012-08-27 Thread hyc
locked up on startup, not shutdown. Clearly an OpenSSL issue, not an OpenLDAP bug. This ITS should be closed and the issue reported to the OpenSSL project. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect

Re: (ITS#7364) mdb: clean up POSIX semaphores on environment close.

2012-08-23 Thread hyc
succeeds, it removes the semaphores. Patch has been tested on a BSD system. WIN32 has not been tested. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7365) Server is unwilling to perform

2012-08-23 Thread hyc
. Closing this ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7359) [PATCH] MozNSS: prefer unlocked slot when getting private key

2012-08-22 Thread hyc
that doesn't rely on the optimizer to kill redundancies, to minimize the difference between debug versions and deployed/optimized versions. These are facts, not opinions. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#7363) libmdb should use POSIX semaphores on non-apple BSD systems too.

2012-08-22 Thread hyc
for the patch, applied. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7350) aclparse.c acl_unparse() attrval empty DN

2012-08-22 Thread hyc
. Thanks for the report, fixed in master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7364) mdb: clean up POSIX semaphores on environment close.

2012-08-22 Thread hyc
has not been tested. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

(ITS#7361) alock is broken on Windows

2012-08-21 Thread hyc
Full_Name: Howard Chu Version: 2.4.32 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (76.94.188.8) Submitted by: hyc alock assumes (wrongly) that it can always read from a locked region. That's true for POSIX advisory locks, but Windows locks are mandatory. I.e., attempting

Re: (ITS#7352) openldap not supporting CAMELLIA ciphers

2012-08-21 Thread hyc
--- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE Handshake is failing with all camellia ciphers. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#7357) Pass-through radius auth. with RFC2865

2012-08-21 Thread hyc
or a NAS-Identifier but the current version use MUST instead. A patch for this is now in git master, please test. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org

Re: (ITS#7359) [PATCH] MozNSS: prefer unlocked slot when getting private key

2012-08-21 Thread hyc
Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7358) Patch to fix Visual Studio build broken by 2.4.32

2012-08-21 Thread hyc
with Microsoft compilers. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7340) Regression in slapo-constraint

2012-08-20 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7172) SEGFAULT in openldap-2.4.28 2.4.29

2012-08-15 Thread hyc
) at syncprov.c:378 378 rc = m1-mt_op-o_req_ndn.bv_len - m2-mt_op-o_req_ndn.bv_len; Thank you for the help, David Coutadeur -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: (ITS#7349) openldap not supporting CAMELLIA ciphers

2012-08-09 Thread hyc
IS NOT supported Compression: NONE Expansion: NONE Handshake is failing with all camellia ciphers. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7346) ACL processing: additive privs (using control continue)

2012-08-05 Thread hyc
. There are no following clauses that match the subject in this case, so the implicit by * none at the end of every ACL clause is applied. Closing this ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#7344) [PATCH] Add initial testsuit for slapo-constraint

2012-08-02 Thread hyc
attribution and/or other notice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7342) Password modify EXOP requires a DN

2012-08-02 Thread hyc
CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7342) Password modify EXOP requires a DN

2012-08-01 Thread hyc
NOT change the user password. Clearly it is allowed for a server to reject identities if it doesn't recognize them. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org

(ITS#7337) libmdb can corrupt when reaching maxsize

2012-07-26 Thread hyc
Full_Name: Howard Chu Version: HEAD/RE24 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.19.97.21) Submitted by: hyc Already fixed by commit 234cd9dfb54ef2f7f83963d95b6eb8e9735bb372 If the DB maxsize was reached while pruning consumed records from the free list inside

(ITS#7339) back-mdb aborts with online index additions

2012-07-26 Thread hyc
Full_Name: Howard Chu Version: HEAD/RE24 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.19.97.21) Submitted by: hyc Already fixed in d1a7fa267bdb9e2ba87db44034ce83a75084 If new databases are added (such as when adding a new index via cn=config) they may cause

Re: (ITS#7335) Error in slapo-refint man page

2012-07-25 Thread hyc
of the schema are present here, so anyone looking for this information should already know to look there. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7332) Patch to build using Microsoft Visual Studio

2012-07-23 Thread hyc
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7325) Panic issue with slapd-perl

2012-07-19 Thread hyc
://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7325) Panic issue with slapd-perl

2012-07-19 Thread hyc
then, and not an OpenLDAP software issue. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

ITS#6262 regression

2012-07-10 Thread hyc
it's possible for us to generate non-unique CSNs. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: ITS#7317

2012-07-03 Thread hyc
http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: ITS#7317

2012-06-26 Thread hyc
it. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7308) [PATCH] contrib/slapd-modules: Add missing missing Makefiles

2012-06-26 Thread hyc
and update README for that. Thanks for the patches, applied to master. This also seems to obsolete ITS#6883. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7168) [PATCH] Fix count constraint when using multiple modifications

2012-06-25 Thread hyc
Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7293) [PATCH] Add missing function declarations and make some functions static

2012-06-23 Thread hyc
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7299) Memory leaks when using ldapmodify to add members to groupOfNames objectclass

2012-06-18 Thread hyc
and neither one shows any leak. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7310) unable to perform ldapadd for rootdb (empty)

2012-06-15 Thread hyc
Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7299) Memory leaks when using ldapmodify to add members to groupOfNames objectclass

2012-06-15 Thread hyc
get no permission to access this URL. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7299) Memory leaks when using ldapmodify to add members to groupOfNames objectclass

2012-06-15 Thread hyc
Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7301) Improve DNS SRV support in OpenLDAP

2012-06-12 Thread hyc
is not a good idea, the published SRV priorities and weights must not be ignored. priorities/weights are already the subject of ITS#7027. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

(ITS#7303) bdb/hdb search checks aliases unnecessarily

2012-06-12 Thread hyc
Full_Name: Howard Chu Version: HEAD/RE24 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.19.96.193) Submitted by: hyc If a search request has derefSearching set in the alias deref option, the search_aliases() function walks thru a (potentially) large number of entries

Re: (ITS#7292) Memory leak with MMR + delta syncrepl

2012-06-08 Thread hyc
http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7289) Mozilla NSS: cipher suite selection by name may be ignored

2012-06-07 Thread hyc
tim.strobell@nrl.navy.mil wrote: Forgot to add that this bug is (was) masked by ITS#7285. Thanks for the patch, committed to master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: (ITS#7168) [PATCH] Fix count constraint when using multiple modifications

2012-06-07 Thread hyc
these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#7285) Mozilla NSS: default cipher suite always selected

2012-06-05 Thread hyc
] } tlsm_parse_ciphers returns 0 on success; the else path is always followed and overrides the previous cipher suite selection. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http

Re: (ITS#7287) [PATCH] MozNSS: do not overwrite error in tlsm_verify_cert

2012-06-05 Thread hyc
for any purpose with or without attribution and/or other notice. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7286) Malformed search filter to back-ldap/slapo-rwm crashes slapd

2012-06-05 Thread hyc
Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7284) [PATCH] slappasswd: Add support loading a dynamically loadable module

2012-05-31 Thread hyc
password hash module (e.g., slapd-sha2). Thanks, added to master. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7279) Apparently mdb approx index generation failure for mdb_add for syncrepl consumer

2012-05-30 Thread hyc
. The two nodes are running in mirrormode, and I'm not sure if that makes a difference. The config is invalid; you have used the same RIDs multiple times. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief

Re: (ITS#7283) Usage of private headers make building out-of-tree extensions painful

2012-05-30 Thread hyc
references to it. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7270) Double free in ldap_int_initialize

2012-05-30 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7271) Don't clobber SASL_NOCANON in clients/tools/common.c

2012-05-30 Thread hyc
, it would be sufficient to just check for nocanon != 0 before calling ldap_set_option. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7276) [PATCH] MozNSS: allow CA certdb together with PEM CA bundle file

2012-05-30 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7271) Don't clobber SASL_NOCANON in clients/tools/common.c

2012-05-30 Thread hyc
. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7278) [PATCH] SHA-2: Add support salted SHA-2 password hashes

2012-05-29 Thread hyc
it. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7278) [PATCH] SHA-2: Add support salted SHA-2 password hashes

2012-05-29 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7278) [PATCH] SHA-2: Add support salted SHA-2 password hashes

2012-05-29 Thread hyc
a rootpw in the slapd config. That's the only reason this tool exists and it is the only valid use case. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7278) [PATCH] SHA-2: Add support salted SHA-2 password hashes

2012-05-29 Thread hyc
since SHA-2 support can be dynamically loaded. Don't fix what isn't broken. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7274) delta-syncrepl MMR infinite loop

2012-05-29 Thread hyc
CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7280) accesslog write to subentry of log database

2012-05-27 Thread hyc
this ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7277) Slapadd segfaults if binddn contains ou or dc statements

2012-05-20 Thread hyc
any schema to define the ou or dc attributes. The error message from slapadd is correct. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7267) [PATCH] Make slapd-sha2 portable

2012-05-08 Thread hyc
to preserve comments than to delete them, you should have changed the C++ comments to regular C comments. I'll tweak this and commit. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP

Re: (ITS#7255) back-mdb hangs during mdb_tool_entry_modify

2012-05-02 Thread hyc
://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7249) slapd segfault with memberof overlay on frontend db

2012-04-27 Thread hyc
. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/ --080305040400020709070605 Content-Type: text/plain; charset=UTF-8; name=dif.txt Content-Transfer-Encoding: 7bit Content-Disposition: attachment

Re: (ITS#7253) Error returned when sss control used with a non ordered attribute, even if the control is not critical

2012-04-20 Thread hyc
clarification of Criticality supersede the text of RFC2891? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

Re: (ITS#7240) [PATCH] MozNSS: skip hostname check if peer certificate was not requested

2012-04-18 Thread hyc
and therefore we should use global options. Not sure what is expected, but I think that changing this might break some applications. My fix is safer.) Jan -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc

Re: (ITS#7240) [PATCH] MozNSS: skip hostname check if peer certificate was not requested

2012-04-18 Thread hyc
Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

<    4   5   6   7   8   9   10   11   12   13   >