RE: (ITS#3490) glue overlay causes segfault

[Kevin.Spicer@bmrb.co.uk]

Here you go...

dn: cn=default,ou=policy,dc=domain,dc=com
objectClass: top
objectClass: device
objectClass: pwdPolicy
cn: default
pwdAttribute: 2.5.4.35
pwdCheckQuality: 1
pwdMaxAge: 0
pwdMinLength: 8

Not much to it really, actually the user I was binding as has a
different policy....

dn: cn=sysadmin,ou=policy,dc=domain,dc=com
objectClass: top
objectClass: device
objectClass: pwdPolicy
cn: sysadmin
pwdAttribute: 2.5.4.35
pwdLockoutDuration: 30
pwdInHistory: 8
pwdCheckQuality: 1
pwdExpireWarning: 864000
pwdMaxAge: 7776000
pwdMinLength: 8
pwdGraceLoginLimit: 20
pwdAllowUserChange: TRUE
pwdMaxFailure: 3
pwdFailureCountInterval: 120

It's probably also worth pointing out that after a previous discussion
with you I added NO-USER-MODIFICATION to the following attributes in
overlays/ppolicy.c 
pwdChangedTime, pwdGraceUseTime, pwdExpirationWarned, pwdHistory

-----Original Message-----
From: Howard Chu [mailto:hyc@symas.com] 
Sent: 16 January 2005 15:43
To: Spicer, Kevin (MBLEA it)
Cc: openldap-its@OpenLDAP.org
Subject: Re: (ITS#3490) glue overlay causes segfault

I think we also need to see your default password policy object.

Spicer, Kevin (MBLEA it) wrote:

>Okay, no problem.
>
>
>I've done a little more investigation and it seems to be related to the
>
>fact that I am also using the ppolicy module.  Certainly when I comment
>
>out the policy bits in the slapd.conf the segfault goes away.
>
>
>I compiled with 
>
>./configure  --prefix=/usr/local --enable-bdb --enable-ldbm
>
>--enable-crypt --with-threads --with-tls --without-kerberos
>
>--enable-wrappers --enable-modules -enable-ppolicy=mod
>
>
>A simplified version of my slapd.conf is attached (I've remove the
>
>sensitive info, acls and stuff relating to a local schema we added).
>
>
>If you need anything else, just ask!
>
>
>Thanks
>  
>


-- 
  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support




BMRB International 
http://www.bmrb.co.uk
+44 (0)20 8566 5000
_________________________________________________________________
This message (and any attachment) is intended only for the 
recipient and may contain confidential and/or privileged 
material.  If you have received this in error, please contact the 
sender and delete this message immediately.  Disclosure, copying 
or other action taken in respect of this email or in 
reliance on it is prohibited.  BMRB International Limited 
accepts no liability in relation to any personal emails, or 
content of any email which does not directly relate to our 
business.