Viewing Software Bugs/4591
Full headers

Major security issue: yes  no

Notes:
partially addressed by fix to ITS#4594
Notification:

Date: Wed, 14 Jun 2006 12:06:58 GMT
From: ando@sys-net.it
To: openldap-its@OpenLDAP.org
Subject: back-meta does not propagate response controls

Full_Name: Pierangelo Masarati
Version: HEAD
OS: irrelevant
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (81.72.89.40)
Submitted by: ando


In most cases, all response payload (matched, referrals) is ignored when calling
ldap_parse_result(); only in searches matched and referrals are handled.

p.

Followup 1

Date: Mon, 15 Jan 2007 12:45:43 +0100
From: Pierangelo Masarati <ando@sys-net.it>
To: openldap-its@OpenLDAP.org
Subject: Re: (ITS#4591) back-meta does not propagate response controls

ando@sys-net.it wrote:

> In most cases, all response payload (matched, referrals) is ignored when
calling
> ldap_parse_result(); only in searches matched and referrals are handled.

For most operations this should now be fixed, since response passes thru 
   meta_back_op_result(), which takes care of controls.  However, in 
case of searches, handling this issue may be problematic, as different 
targets may return different, possibly overlapping or incompatible 
controls in response, so ignoring them might be safe.  A minimal, 
forgiving approach could be to record response controls, and, in case 
only one target returned any, use them; otherwise, either ignore them or 
complain somehow.

p.