OpenLDAP
Up to top level
Build   Contrib   Development   Documentation   Historical   Incoming   Software Bugs   Software Enhancements   Web  

Logged in as guest

Viewing Incoming/8009
Full headers

From: michael@stroeder.com
Subject: SUBSTR caseIgnoreIA5SubstringsMatch for *Record in cosine schema
Compose comment
Download message
State:
0 replies:
10 followups: 1 2 3 4 5 6 7 8 9 10

Major security issue: yes  no

Notes:

Notification:


Date: Fri, 19 Dec 2014 10:06:54 +0000
From: michael@stroeder.com
To: openldap-its@OpenLDAP.org
Subject: SUBSTR caseIgnoreIA5SubstringsMatch for *Record in cosine schema
Full_Name: 
Version: HEAD
OS: 
URL: 
Submission from: (NULL) (79.219.126.25)


SUBSTR caseIgnoreIA5SubstringsMatch should be added to attributes *Record in
cosine schema files to be compatible to attributes defined in UNINETT's DNS
schema files.

Patch will follow.

Followup 1

Download message
Date: Fri, 19 Dec 2014 11:27:41 +0100
From: =?ISO-8859-1?Q?Michael_Str=F6der?= <michael@stroeder.com>
To: openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
This is a multi-part message in MIME format.
--------------040505080606070501000304
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit

Find attached a patch file for this.

I'd be glad if this could make it into 2.4.41.

I, Michael Str.der, hereby place the attached modifications to OpenLDAP
Software (and only these modifications) into the public domain. Hence, these
modifications may be freely used and/or redistributed for any purpose with or
without attribution and/or other notice.

--------------040505080606070501000304
Content-Type: text/x-patch;
 name="openldap-its-8009.patch"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
 filename="openldap-its-8009.patch"

diff --git a/servers/slapd/schema/cosine.ldif b/servers/slapd/schema/cosi=
ne.ldif
index d207111..d37a988 100644
--- a/servers/slapd/schema/cosine.ldif
+++ b/servers/slapd/schema/cosine.ldif
@@ -80,18 +80,24 @@ olcAttributeTypes: ( 0.9.2342.19200300.100.1.21 NAME =
'secretary' DESC 'RFC
  6.115.121.1.12 )
 olcAttributeTypes: ( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNT=
AX
   1.3.6.1.4.1.1466.115.121.1.39 )
-olcAttributeTypes: ( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY =
ca
- seIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY=
 c
- aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY=
 c
- aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY=
 c
- aseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALIT=
Y=20
- caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
-olcAttributeTypes: ( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUAL=
IT
- Y caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+olcAttributeTypes: ( 0.9.2342.19200300.100.1.26 NAME 'aRecord'=20
+ EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch=20
+ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+olcAttributeTypes: ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord'=20
+ EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch=20
+ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+olcAttributeTypes: ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord'=20
+ EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch=20
+ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+olcAttributeTypes: ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord'=20
+ EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch=20
+ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+olcAttributeTypes: ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord'=20
+ EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch=20
+ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
+olcAttributeTypes: ( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord'=20
+ EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch=20
+ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
 olcAttributeTypes: ( 0.9.2342.19200300.100.1.38 NAME 'associatedName' DE=
SC
   'RFC1274: DN of entry associated with domain' EQUALITY distinguishedNa=
meMatc
  h SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )
diff --git a/servers/slapd/schema/cosine.schema b/servers/slapd/schema/co=
sine.schema
index 8ea7090..6706525 100644
--- a/servers/slapd/schema/cosine.schema
+++ b/servers/slapd/schema/cosine.schema
@@ -477,12 +477,14 @@ attributetype ( 0.9.2342.19200300.100.1.22 NAME 'ot=
herMailbox'
 ## incorrect syntax?
 attributetype ( 0.9.2342.19200300.100.1.26 NAME 'aRecord'
 	EQUALITY caseIgnoreIA5Match
+	SUBSTR caseIgnoreIA5SubstringsMatch
 	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
=20
 ## missing from RFC1274
 ## incorrect syntax?
 attributetype ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord'
 	EQUALITY caseIgnoreIA5Match
+	SUBSTR caseIgnoreIA5SubstringsMatch
 	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
=20
 # 9.3.23.  MX Record
@@ -498,6 +500,7 @@ attributetype ( 0.9.2342.19200300.100.1.27 NAME 'mDRe=
cord'
 ## incorrect syntax!!
 attributetype ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord'
 	EQUALITY caseIgnoreIA5Match
+	SUBSTR caseIgnoreIA5SubstringsMatch
 	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
=20
 # 9.3.24.  NS Record
@@ -513,6 +516,7 @@ attributetype ( 0.9.2342.19200300.100.1.28 NAME 'mXRe=
cord'
 ## incorrect syntax!!
 attributetype ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord'
 	EQUALITY caseIgnoreIA5Match
+	SUBSTR caseIgnoreIA5SubstringsMatch
 	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
=20
 # 9.3.25.  SOA Record
@@ -528,6 +532,7 @@ attributetype ( 0.9.2342.19200300.100.1.29 NAME 'nSRe=
cord'
 ## incorrect syntax!!
 attributetype ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord'
 	EQUALITY caseIgnoreIA5Match
+	SUBSTR caseIgnoreIA5SubstringsMatch
 	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
=20
 # 9.3.26.  CNAME Record
@@ -543,6 +548,7 @@ attributetype ( 0.9.2342.19200300.100.1.30 NAME 'sOAR=
ecord'
 ## incorrect syntax!!
 attributetype ( 0.9

Message of length 5229 truncated


Followup 2

Download message
Date: Fri, 19 Dec 2014 11:37:27 +0100
From: =?ISO-8859-1?Q?Michael_Str=F6der?= <michael@stroeder.com>
To: openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
Hmmpf! ITS destroys formatting.

See also:

http://www.stroeder.com/temp/openldap-its-8009.patch



Followup 3

Download message
Date: Fri, 19 Dec 2014 11:52:36 +0100
From: =?windows-1252?Q?Michael_Str=F6der?= <michael@stroeder.com>
To: openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
This is a cryptographically signed message in MIME format.

--------------ms010702010502010600050002
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Another question in this context:

Wouldn't it make sense to keep the matchingRuleUse descriptions in sync?

Unfortunately they are in schema_prep.c. :-(

Or maybe slapd should automagically update matchingRuleUse according to
attribute type descriptions found in the subschema.

One could argue that APPLIES in matchingRuleUse is not well designed beca=
use
it references attribute types and instead of LDAP syntaxes.

Background:
I was wondering whether I could work around missing SUBSTR matching rules=
 in
web2ldap by looking at matchingRuleUse and auto-generate appropriate
extensible filters=85

Ciao, Michael.



--------------ms010702010502010600050002
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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Message of length 6851 truncated


Followup 4

Download message
Date: Fri, 19 Dec 2014 20:08:38 +0000
From: Howard Chu <hyc@symas.com>
To: michael@stroeder.com, openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for
 *Record in cosine schema
michael@stroeder.com wrote:
> Full_Name:
> Version: HEAD
> OS:
> URL:
> Submission from: (NULL) (79.219.126.25)
>
>
> SUBSTR caseIgnoreIA5SubstringsMatch should be added to attributes *Record
in
> cosine schema files to be compatible to attributes defined in UNINETT's DNS
> schema files.

I didn't know there was a new revision of the COSINE schema. Where was 
it published?

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/



Followup 5

Download message
Date: Fri, 19 Dec 2014 21:25:26 +0100
From: =?ISO-8859-1?Q?Michael_Str=F6der?= <michael@stroeder.com>
To: Howard Chu <hyc@symas.com>, openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
Howard Chu wrote:
> I didn't know there was a new revision of the COSINE schema. Where was it
> published?

There isn't a new version of the COSINE schema.

But the attributes defined in RFC 1274, which were not added to RFC 4524 [1],
are used in the usual DNS zone schema which defines object class 'dNSDomain2'.
The DNS zone schema defines more attributes for DNS RRs and all of them have a
SUBSTR matching rule defined.

If you reject this patch because you don't want to change a "standard" schema
the other possibility would be to completely hunk out these RFC 1274
declarations from cosine.(schema|ldif) to avoid collision with separate DNS
schema files adding them.

Ciao, Michael.

[1] http://tools.ietf.org/html/rfc4524#appendix-A.4



Followup 6

Download message
Date: Fri, 19 Dec 2014 14:13:12 -0800
From: Quanah Gibson-Mount <quanah@zimbra.com>
To: michael@stroeder.com, openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
--On Friday, December 19, 2014 8:25 PM +0000 michael@stroeder.com wrote:

> There isn't a new version of the COSINE schema.
>
> But the attributes defined in RFC 1274, which were not added to RFC 4524
> [1], are used in the usual DNS zone schema which defines object class
> 'dNSDomain2'. The DNS zone schema defines more attributes for DNS RRs and
> all of them have a SUBSTR matching rule defined.
>
> If you reject this patch because you don't want to change a "standard"
> schema the other possibility would be to completely hunk out these RFC
> 1274 declarations from cosine.(schema|ldif) to avoid collision with
> separate DNS schema files adding them.
>
> Ciao, Michael.
>
> [1] http://tools.ietf.org/html/rfc4524#appendix-A.4

This sounds like a 2.5 feature request then.  We can keep it in mind for 
that.

2.4 is for bugfixes and regressions only.

--Quanah


--

Quanah Gibson-Mount
Platform Architect
Zimbra, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration



Followup 7

Download message
Date: Fri, 19 Dec 2014 23:29:59 +0100
From: =?ISO-8859-1?Q?Michael_Str=F6der?= <michael@stroeder.com>
To: quanah@zimbra.com, openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
This is a cryptographically signed message in MIME format.

--------------ms040409080506030800020107
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

quanah@zimbra.com wrote:
> --On Friday, December 19, 2014 8:25 PM +0000 michael@stroeder.com wrote=
:
>=20
>> There isn't a new version of the COSINE schema.
>>
>> But the attributes defined in RFC 1274, which were not added to RFC 45=
24
>> [1], are used in the usual DNS zone schema which defines object class
>> 'dNSDomain2'. The DNS zone schema defines more attributes for DNS RRs =
and
>> all of them have a SUBSTR matching rule defined.
>>
>> If you reject this patch because you don't want to change a "standard"=

>> schema the other possibility would be to completely hunk out these RFC=

>> 1274 declarations from cosine.(schema|ldif) to avoid collision with
>> separate DNS schema files adding them.
>>
>> [1] http://tools.ietf.org/html/rfc4524#appendix-A.4
>=20
> This sounds like a 2.5 feature request then.  We can keep it in mind fo=
r=20
> that.
>=20
> 2.4 is for bugfixes and regressions only.

My patch would be trivial and without causing any harm.

Ciao, Michael.


--------------ms040409080506030800020107
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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Message of length 7313 truncated


Followup 8

Download message
Date: Fri, 19 Dec 2014 15:02:41 -0800
From: Quanah Gibson-Mount <quanah@zimbra.com>
To: =?UTF-8?Q?Michael_Str=C3=B6der?= <michael@stroeder.com>,
 openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
--On Friday, December 19, 2014 11:29 PM +0100 Michael Str=C3=B6der=20
<michael@stroeder.com> wrote:

>> 2.4 is for bugfixes and regressions only.

See above.


--

Quanah Gibson-Mount
Platform Architect
Zimbra, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration



Followup 9

Download message
Date: Sat, 20 Dec 2014 00:40:28 +0100
From: =?UTF-8?B?TWljaGFlbCBTdHLDtmRlcg==?= <michael@stroeder.com>
To: Quanah Gibson-Mount <quanah@zimbra.com>, openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
Quanah Gibson-Mount wrote:
> --On Friday, December 19, 2014 11:29 PM +0100 Michael Str..der
> <michael@stroeder.com> wrote:
> 
>>> 2.4 is for bugfixes and regressions only.
> 
> See above.

Well, I consider it to be a serious defect that the old *Record attribute type
descriptions defined in obsoleted RFC 1274 are still in cosine.(ldif|schema)
even though they are not in RFC 4524.

I also consider it to be a bug that aRecord and aAAARecord don't have the same
attribute type description.

Ciao, Michael.




Followup 10

Download message
Date: Sat, 20 Dec 2014 00:56:43 +0100
From: =?UTF-8?B?TWljaGFlbCBTdHLDtmRlcg==?= <michael@stroeder.com>
To: openldap-its@OpenLDAP.org
Subject: Re: (ITS#8009) SUBSTR caseIgnoreIA5SubstringsMatch for *Record in
 cosine schema
Michael Str..der wrote:
> Quanah Gibson-Mount wrote:
>> --On Friday, December 19, 2014 11:29 PM +0100 Michael Str..der
>> <michael@stroeder.com> wrote:
>>
>>>> 2.4 is for bugfixes and regressions only.
>>
>> See above.
> 
> Well, I consider it to be a serious defect that the old *Record attribute
type
> descriptions defined in obsoleted RFC 1274 are still in
cosine.(ldif|schema)
> even though they are not in RFC 4524.
> 
> I also consider it to be a bug that aRecord and aAAARecord don't have the
same
> attribute type description.

Hmm, this issue with cosine.(ldif|schema) is sitting in ITS since more than
four years:

ITS#6151 (slipped from my memory before filing this issue)

Ciao, Michael.


Up to top level
Build   Contrib   Development   Documentation   Historical   Incoming   Software Bugs   Software Enhancements   Web  

Logged in as guest


The OpenLDAP Issue Tracking System uses a hacked version of JitterBug

______________
© Copyright 2013, OpenLDAP Foundation, info@OpenLDAP.org