[Date Prev][Date Next] [Chronological] [Thread] [Top]

2.2.3beta crashes in backend_group() (ITS#2880)



Full_Name: Stefan Metzmacher
Version: 2.2.3beta
OS: SuSE linux 9.0
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (80.141.110.207)


I have tried SuSE-9.0 with
db-4.2.50
openldap-2.2.3beta

and
db-4.2.52
openldap-2.2.3beta

the problem was fixed when I replace the follwong acl:

access to attr=userPassword,lmPassword,ntPassword
    by self write
    by group/myGroupAccount/member="gidNumber=991,ou=Groups,o=MYDOM" write
    by group/myGroupAccount/member="gidNumber=992,ou=Groups,o=MYDOM" write
    by * auth

access to attr=*
    by group/myGroupAccount/member="gidNumber=991,ou=Groups,o=MYDOM" write
    by group/myGroupAccount/member="gidNumber=992,ou=Groups,o=MYDOM" write
    by * read

into:

access to attr=userPassword,lmPassword,ntPassword
    by self write
    by group/myGroupAccount/member.regex="gidNumber=991,ou=Groups,o=MYDOM"
write
    by group/myGroupAccount/member.regex="gidNumber=992,ou=Groups,o=MYDOM"
write
    by * auth

access to attr=*
    by group/myGroupAccount/member.regex="gidNumber=991,ou=Groups,o=MYDOM"
write
    by group/myGroupAccount/member.regex="gidNumber=992,ou=Groups,o=MYDOM"
write
    by * read


after reading slapd.access(5) I think it should be
    group/myGroupAccount/member.exact="...

but without this all slapd should not get a segfault...
slapd should handle this right or it should not start and give an error message

How can I compile slapd with debug symbols, so that I can provide a usefull
backtrace?

I'll also try OPENLDAP_REL_ENG_2_2 the next days and see if the problem is still
there

metze