[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#6056) Samba4 breaks OpenLDAP over ldapi

Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Tue, 2009-05-26 at 04:26 -0700, Howard Chu wrote:
> abartlet@samba.org wrote:
> > Full_Name: Andrew Bartlett
> > Version: CVS HEAD
> > OS: Fedora 10
> > URL: ftp://ftp.openldap.org/incoming/
> > Submission from: (NULL) (
> >
> >
> > Samba4's provision and 'make test' seems to create some internal situat=
ion in
> > OpenLDAP slapd where it will not accept any more connections over ldapi=
> >
> > This is best seen by building Samba4, and running
> >
> > TEST_LDAP=3Dyes OPENLDAP_ROOT=3D/usr/local make test
> >
> > The slapd does not crash, but simply stops accepting new connections.  =
> > currently then crashes due to some other bug (the LDAP backend not resp=
onding is
> > clearly untested code in Samba4).
> >
> > It isn't a Samba4 client bug, as ldapsearch also fails to respond.
> >
> > This seems very, very similar to ITS#5261
> Further testing with Andrew's kvm image shows the hang only occurs when C=
> SASL's libsasldb2.so plugin is present. I always remove that plugin from =
> installs, since I only use in-directory SASL secrets. That's probably why=
> wasn't seeing the reported behavior before.
> Also a note - it's still not clear we've been talking about the same thin=
g up=20
> to this point. Even when the samba test suite hangs, I see that ldapsearc=
> still works fine against slapd. At any rate, currently all of the samba4 =
> pass for me.

Hmm.  Using that KVM image, with the libsasldb moved aside (and with it
left in place), I still get errors. =20

However, there is an important difference:  Where previously, once it
locked up nothing proceeded, now it proceeds - as if the failure is
temporary now.  The error has changed too - instead of a failure to
connect, it is an inability to successfully read the rootDSE.=20

I agree, we might be jumping at different shadows here, but your patches
did fix something...

Andrew Bartlett

Andrew Bartlett
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.

Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

Version: GnuPG v1.4.9 (GNU/Linux)