[Date Prev][Date Next]
Re: (ITS#6056) Samba4 breaks OpenLDAP over ldapi
On Tue, 2009-05-26 at 04:26 -0700, Howard Chu wrote:
> email@example.com wrote:
> > Full_Name: Andrew Bartlett
> > Version: CVS HEAD
> > OS: Fedora 10
> > URL: ftp://ftp.openldap.org/incoming/
> > Submission from: (NULL) (188.8.131.52)
> > Samba4's provision and 'make test' seems to create some internal situat=
> > OpenLDAP slapd where it will not accept any more connections over ldapi=
> > This is best seen by building Samba4, and running
> > TEST_LDAP=3Dyes OPENLDAP_ROOT=3D/usr/local make test
> > The slapd does not crash, but simply stops accepting new connections. =
> > currently then crashes due to some other bug (the LDAP backend not resp=
> > clearly untested code in Samba4).
> > It isn't a Samba4 client bug, as ldapsearch also fails to respond.
> > This seems very, very similar to ITS#5261
> Further testing with Andrew's kvm image shows the hang only occurs when C=
> SASL's libsasldb2.so plugin is present. I always remove that plugin from =
> installs, since I only use in-directory SASL secrets. That's probably why=
> wasn't seeing the reported behavior before.
> Also a note - it's still not clear we've been talking about the same thin=
> to this point. Even when the samba test suite hangs, I see that ldapsearc=
> still works fine against slapd. At any rate, currently all of the samba4 =
> pass for me.
Hmm. Using that KVM image, with the libsasldb moved aside (and with it
left in place), I still get errors. =20
However, there is an important difference: Where previously, once it
locked up nothing proceeded, now it proceeds - as if the failure is
temporary now. The error has changed too - instead of a failure to
connect, it is an inability to successfully read the rootDSE.=20
I agree, we might be jumping at different shadows here, but your patches
did fix something...
Authentication Developer, Samba Team http://samba.org
Samba Developer, Red Hat Inc.
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
-----END PGP SIGNATURE-----