[Date Prev][Date Next]
(ITS#3657) HDB DoS - client can hang slapd server by moving an entry
Full_Name: Andrea Ciancone
Submission from: (NULL) (220.127.116.11)
By moving an entry under itself, using ldap_modrdn2, slapd completely hangs.
The only solution is to kill -9 slapd.
As an example, by moving:
cn=foo,cn=bar into cn=agor,cn=foo,cn=bar
slapd stops answering queries. I've tryed it several times,
and I can sistematically reproduce the problem. I use
Net::LDAP from CPAN, and run something like:
$ldap->moddn("cn=foo,cn=bar", newrdn => "cn=agor",
deleteoldrdn => 1, newsuperior => "cn=foo,cn=bar");
Any client having write access to any slapd server
using HDB can completely make the server unusable.
It is even necessary to run db_recover every time