Re: (ITS#5520) infinite recursion in syncrepl overlay

[hyc@symas.com]

jeff@jeffrodriguez.com wrote:
> Full_Name: Jeff Rodriguez
> Version: 2.3.30
> OS: Debian etch
> URL: ftp://ftp.openldap.org/incoming/jeff-rodriguez-080520.tgz
> Submission from: (NULL) (208.48.140.97)
>
>
> syncprov seems to be causing a segfault when importing kerberos entries.
>
> slapd.conf, LDIFs, heimdal kerberos schema, and logs included. These are live
> files I was used to generate the segfault. It's also reproducible with the conf
> and ldif files customized to the environment. Commenting out syncprov and
> related lines in the conf eliminates the segfault.
>
> 1. stop slapd
> 2. wipe out current database
> 3. slapadd schema.ldif and chown the database to openldap user and group
> 4. start slapd with: /usr/sbin/slapd -g openldap -u openldap -d 1 -h "ldap:///
> ldapi:///"
> 5. add ldif entries live: ldapadd -H ldapi:///var/run/ldapi -D
> cn=admin,o=example -w CHANGE_THIS_PASSWORD -f bugged.ldif
> 6. segfault
>
> uname -a:
> Linux ds1.phx2 2.6.18-6-xen-amd64 #1 SMP Sun Feb 10 18:02:52 UTC 2008 x86_64
> GNU/Linux

Your slapd.conf is incorrect. Please re-read the slapo-syncprov(5) manpage; 
syncprov must be instantiated over a specific database. You have it configured 
in the global section, not on a specific database. This ITS will be closed.
-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/