[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#4321) test032 output comparison fails



yes, I noticed it as well; apparently I started testing on three machines
right before Kurt committed that fix to re23.  Apparently the chain
overlay is doing some anonymous proxyauths (anon2anon).  It should just do
nothing. I'll look at it.

p.

> Pierangelo Masarati wrote:
>> On Tue, 2006-01-10 at 03:48 +0000, hyc@OpenLDAP.org wrote:
>>
>>> Full_Name: Howard Chu
>>> Version: HEAD
>>> OS: Linux 2.6
>>> URL: ftp://ftp.openldap.org/incoming/
>>> Submission from: (NULL) (24.126.120.178)
>>> Submitted by: hyc
>>>
>>>
>>> Am I missing a data file update?
>>>
>>
>> running just fine here, HEAD/re23.
>>
>> p.
>>
> I just rebuilt 2.3.15 and 2.3.16 for comparison, it's fine there but
> fails in current HEAD/RE23. Diffing slapd.2.log shows that current code
> is complaining about anonymous proxyAuthZ:
>
> @@ -1908,64 +1903,13 @@
>  ber_scanf fmt (b) ber:
>  ber_scanf fmt (m) ber:
>  => get_ctrls: oid="2.16.840.1.113730.3.4.18" (critical)
> -parseProxyAuthz: conn 1 authzid="dn:"
> -slap_sasl_getdn: conn 1 id=dn: [len=3]
> ->>> dnNormalize: <>
> -<<< dnNormalize: <>
> -==>slap_sasl2dn: converting SASL name  to a DN
> -slap_authz_regexp: converting SASL name
> -<==slap_sasl2dn: Converted SASL name to <nothing>
> -parseProxyAuthz: conn=1 "(NULL)"
> -==>slap_sasl_authorized: can (null) become (null)?
> -<== slap_sasl_authorized: return 0
> -conn=1 op=1 PROXYAUTHZ dn=""
> -<= get_ctrls: n=1 rc=0 err=""
> -    attrs:
>   ....
> +<= get_ctrls: n=1 rc=47 err="anonymous proxyAuthz not allowed"
>  send_ldap_result: conn=1 op=1 p=3
> -send_ldap_result: err=0 matched="" text=""
> -send_ldap_response: msgid=2 tag=101 err=0
> -ber_flush: 14 bytes to sd 11
> -conn=1 op=1 SEARCH RESULT tag=101 err=0 nentries=4 text=
> +send_ldap_result: err=47 matched="" text="anonymous proxyAuthz not
> allowed"
> +send_ldap_response: msgid=2 tag=101 err=47
> +ber_flush: 46 bytes to sd 11
> +conn=1 op=1 SEARCH RESULT tag=101 err=47 nentries=0 text=anonymous
> proxyAuthz not allowed
> +do_search: get_ctrls failed
>
> --
>   -- Howard Chu
>   Chief Architect, Symas Corp.  http://www.symas.com
>   Director, Highland Sun        http://highlandsun.com/hyc
>   OpenLDAP Core Team            http://www.openldap.org/project/
>
>




Ing. Pierangelo Masarati
Responsabile Open Solution
OpenLDAP Core Team

SysNet s.n.c.
Via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
------------------------------------------
Office:   +39.02.23998309          
Mobile:   +39.333.4963172
Email:    pierangelo.masarati@sys-net.it
------------------------------------------