Issue 8244 - back-ldap entry_get is wrong
Summary: back-ldap entry_get is wrong
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-09-14 04:41 UTC by Howard Chu
Modified: 2015-11-30 18:21 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this issue.
Description Howard Chu 2015-09-14 04:41:57 UTC 
Full_Name: Howard Chu
Version: 2.4
OS: 
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (78.155.236.74)
Submitted by: hyc


The be_entry_get() entry point is only used for internal operations, not
client-initiated operations. Currently it propagates client-provided controls
through, but they don't belong there.

If be_entry_get is invoked due to an ACL evaluation, and the original client
operation was a syncrepl search, and the remote server honors the syncrepl
control, then this query may hang because ldap_back_entry_get() doesn't expect
to handle any Intermediate responses. Worse, if the control requested
RefreshAndPersist, then additional responses may pile up on the session as the
remote server sends persist updates.
Comment 1 Howard Chu 2015-09-14 04:43:58 UTC 
changed notes
changed state Open to Test
moved from Incoming to Software Bugs
Comment 2 Quanah Gibson-Mount 2015-09-21 21:30:22 UTC 
changed notes
changed state Test to Release
Comment 3 OpenLDAP project 2015-11-30 18:21:26 UTC 
fixed in master
fixed in RE25
fixed in RE24
Comment 4 Quanah Gibson-Mount 2015-11-30 18:21:26 UTC 
changed notes
changed state Release to Closed