Viewing Incoming/7408
Full headers

Major security issue: yes  no

Notes:
invalid
Notification:

Date: Sat, 29 Sep 2012 06:40:16 +0000
From: pohboon.lee@asia.xchanging.com
To: openldap-its@OpenLDAP.org
Subject: SECURITY: OpenLDAP multimaster out of sync

Full_Name: Lee Poh Boon
Version: 2.4.23-20.el6.x86_64
OS: RHEL 6 x64
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (203.158.29.45)


Hi,

I have setup 2 servers running on OpenLDAP multimaster. The server is very
active on id creation and querying. After run for some time. One of the server
(eg. server A) with new id created will not sync to the other server which is
server B. From the server B I can see the new id create will sync to server A.
Because of one of the server syncrepl stop working, we facing user have
intermittent can not login. This also apply for the user who change their
password. After the user change their password they can not login using the new
password. They still can login with old password and also facing intermittent
login issue. I am still looking for the fix from every were. Hope you can help
on this.

Thank you.

regards,
pblee

Followup 1

Date: Sat, 29 Sep 2012 18:48:54 -0700
From: Quanah Gibson-Mount <quanah@zimbra.com>
To: pohboon.lee@asia.xchanging.com, openldap-its@openldap.org
Subject: Re: (ITS#7408) SECURITY: OpenLDAP multimaster out of sync

--On Saturday, September 29, 2012 6:40 AM +0000 
pohboon.lee@asia.xchanging.com wrote:

> Full_Name: Lee Poh Boon
> Version: 2.4.23-20.el6.x86_64

Use a current OpenLDAP release.  This ITS will be closed.

--Quanah

--

Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration

Followup 2

Date: Sun, 30 Sep 2012 08:15:50 -0700
From: Howard Chu <hyc@highlandsun.com>
To: pohboon.lee@asia.xchanging.com
CC: openldap-its@openldap.org
Subject: Re: (ITS#7408) SECURITY: OpenLDAP multimaster out of sync

pohboon.lee@asia.xchanging.com wrote:
> Full_Name: Lee Poh Boon
> Version: 2.4.23-20.el6.x86_64
> OS: RHEL 6 x64
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (203.158.29.45)
>
>
> Hi,
>
> I have setup 2 servers running on OpenLDAP multimaster. The server is very
> active on id creation and querying. After run for some time. One of the
server
> (eg. server A) with new id created will not sync to the other server which
is
> server B. From the server B I can see the new id create will sync to server
A.
> Because of one of the server syncrepl stop working, we facing user have
> intermittent can not login. This also apply for the user who change their
> password. After the user change their password they can not login using the
new
> password. They still can login with old password and also facing
intermittent
> login issue. I am still looking for the fix from every were. Hope you can
help
> on this.

The release you're running is over 2 years old. I suggest you update to a 
current release (2.4.32 is latest). This ITS will be closed.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/