Viewing Build/7236
Full headers

Major security issue: yes  no

Notes:

Notification:

Date: Sat, 07 Apr 2012 10:21:06 +0000
From: h.b.furuseth@usit.uio.no
To: openldap-its@OpenLDAP.org
Subject: new test030-relay failure in old code

Full_Name: Hallvard B Furuseth
Version: 2.4.10->latest RE24
OS: Linux x86_64
URL: http://folk.uio.no/hbf/testrun.test030.ldif.tgz
Submission from: (NULL) (195.1.106.125)
Submitted by: hallvard


./run -b <bdb/hdb/mdb/ldif> test030-relay
all fail in openldap-2.4.10 and current RE24 (I did not test earlier).

It always fails on my laptop, but succeeds on my older workstation.
Both have
  Red Hat Enterprise Linux Workstation release 6.2 (Santiago)
  gcc version 4.4.6 20110731 (Red Hat 4.4.6-3) (GCC) 
Also it succeeds on a host with RHEL 5.8; gcc 4.1.2.

OpenLDAP confiruation:
./configure (--disable-backends) --enable-relay --enable-ldap --enable-rwm

Output, slapcat output and testrun directory enclosed.

Followup 1

Date: Sat, 07 Apr 2012 08:24:53 -0700
From: Howard Chu <hyc@symas.com>
To: h.b.furuseth@usit.uio.no
CC: openldap-its@openldap.org
Subject: Re: (ITS#7236) new test030-relay failure in old code

h.b.furuseth@usit.uio.no wrote:
> Full_Name: Hallvard B Furuseth
> Version: 2.4.10->latest RE24
> OS: Linux x86_64
> URL: http://folk.uio.no/hbf/testrun.test030.ldif.tgz
> Submission from: (NULL) (195.1.106.125)
> Submitted by: hallvard
>
>
> ./run -b<bdb/hdb/mdb/ldif>  test030-relay
> all fail in openldap-2.4.10 and current RE24 (I did not test earlier).
>
> It always fails on my laptop, but succeeds on my older workstation.
> Both have
>    Red Hat Enterprise Linux Workstation release 6.2 (Santiago)
>    gcc version 4.4.6 20110731 (Red Hat 4.4.6-3) (GCC)
> Also it succeeds on a host with RHEL 5.8; gcc 4.1.2.
>
> OpenLDAP confiruation:
> ./configure (--disable-backends) --enable-relay --enable-ldap --enable-rwm
>
> Output, slapcat output and testrun directory enclosed.

Seems to have something to do with IPv6 support and whether there's a listener 
on ::1 port 9012. Here's your slapd.1.log at the point of divergence:

ldap_chase_v3referral: msgid 3, url 
"ldap://localhost:9012/ou=Referrals,o=Beispiel,c=DE??sub"
ldap_send_server_request
ldap_new_connection 0 1 1
ldap_int_open_connection
ldap_connect_to_host: TCP localhost:9012
ldap_new_socket: 16
ldap_prepare_socket: 16
ldap_connect_to_host: Trying ::1 9012
ldap_pvt_connect: fd: 16 tm: -1 async: 0
anonymous rebind via ldap_sasl_bind("")
ldap_sasl_bind
ldap_send_initial_request
ldap_send_server_request
ber_scanf fmt ({it) ber:
ber_scanf fmt ({i) ber:
ber_flush2: 14 bytes to sd 16
ldap_result ld 0x7fd9a0002120 msgid 5
wait4msg ld 0x7fd9a0002120 msgid 5 (timeout 100000 usec)
wait4msg continue ld 0x7fd9a0002120 msgid 5 all 1
** ld 0x7fd9a0002120 Connections:
* host: localhost  port: 9012
   refcnt: 2  status: Connected
   last used: Fri Apr  6 22:32:52 2012
   rebind in progress
     queue is empty


Here's mine, from a successful run:

ldap_chase_v3referral: msgid 3, url 
"ldap://localhost:9012/ou=Referrals,o=Beispiel,c=DE??sub"
ldap_send_server_request
ldap_new_connection 0 1 1
ldap_int_open_connection
ldap_connect_to_host: TCP localhost:9012
ldap_new_socket: 16
ldap_prepare_socket: 16
ldap_connect_to_host: Trying 127.0.0.1:9012
ldap_pvt_connect: fd: 16 tm: -1 async: 0
ldap_close_socket: 16
ldap_err2string
Unable to chase referral 
"ldap://localhost:9012/ou=Referrals,o=Beispiel,c=DE??sub" (-1: Can't contact 
LDAP server)
ber_scanf fmt ({v) ber:
ber_scanf fmt (}) ber:
ldap_msgfree
ldap_url_parse_ext(ldap://localhost:9012/ou=Referrals,o=Beispiel,c=DE??sub)
4f805943 ==> rewrite_context_apply [depth=1]
string='ou=Referrals,o=Beispiel,c=DE'
4f805943 ==> rewrite_context_apply [depth=1] res={0,'NULL'}
4f805943 [rw] referralDN: "ou=Referrals,o=Beispiel,c=DE" -> 
"ou=Referrals,o=Beispiel,c=DE"
4f805943 => send_search_reference: dn="(null)"
ber_flush2: 64 bytes to sd 9
4f805943 <= send_search_reference

I believe your test environment is corrupted; you had a server listening on 
9012 when no such server should have been present.

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Followup 2

Date: Sat, 07 Apr 2012 19:53:25 +0200
From: Hallvard Breien Furuseth <h.b.furuseth@usit.uio.no>
To: <openldap-its@openldap.org>
Subject: Re: (ITS#7236) new test030-relay failure in old code

 On Sat, 7 Apr 2012 15:25:34 GMT, hyc@symas.com wrote:
> you had a server listening on 9012 when no such server should
> have been present.

 Some test scripts hard-code default values that can be configured
 differently in scripts/defines.sh.  In this case, $SLAPD_BASEPORT.
 I'll look into that later.

 Hallvard