[Date Prev][Date Next] [Chronological] [Thread] [Top]

Fwd: RE: (ITS#7577) hdb and mdb derefere aliases differently

Fix verified.

-------- Original Message --------
Subject: RE: (ITS#7577) hdb and mdb derefere aliases differently
Date: Wed, 12 Jun 2013 09:49:16 +0000
From: <Juergen.Sprenger@swisscom.com>
To: <hyc@symas.com>

I've checked with openldap-HEAD-95241fa.tar.gz, and it looks very good now. 
Identical results and very good performance.

Looks like the cause was Gentoo ebuild. Done everything manually and no 
problems anymore.

Juergen Sprenger

-----Original Message-----
From: Howard Chu [mailto:hyc@symas.com]
Sent: Thursday, June 06, 2013 8:05 PM
To: Sprenger Jürgen, ITS-OUS-OP-IFM-MIR-UCH
Subject: Re: (ITS#7577) hdb and mdb derefere aliases differently

Juergen.Sprenger@swisscom.com wrote:
> File is transferred, name is mdb-test-juergen.tar.gz

I've tested your data+config using both git master and RE24 and both give 
identical results for mdb and hdb. Seems something is wrong in your build.
>
> Juergen Sprenger
>
> -----Original Message-----
> From: Howard Chu [mailto:hyc@symas.com]
> Sent: Wednesday, June 05, 2013 5:24 PM
> To: Sprenger Jürgen, ITS-OUS-OP-IFM-MIR-UCH
> Subject: Re: (ITS#7577) hdb and mdb derefere aliases differently
>
> Juergen.Sprenger@swisscom.com wrote:
>> Please use this public  key:
>
> OK, you should be able to ssh/scp to juergen@ada.openldap.org now.
>>
>> ssh-dss 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!
  C!
>   Q5MKlfAI87
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+kLFaC5QaGex
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+QU
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+9enlA3N7W4w
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+7g
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+oqUDTaGa5Yv
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+y4
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+jNA==
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+dsa-key-200
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+71
> 2IcWxBAngy9by2ZwpHcCWjKibUTn+EaBz6TKoeKOFaeJU5g2DwalLnTe01+012
>>
>> Juergen Sprenger
>>
>> -----Original Message-----
>> From: Howard Chu [mailto:hyc@symas.com]
>> Sent: Thursday, May 30, 2013 3:03 PM
>> To: Sprenger Jürgen, ITS-OUS-OP-IFM-MIR-UCH
>> Subject: Re: (ITS#7577) hdb and mdb derefere aliases differently
>>
>> Juergen.Sprenger@swisscom.com wrote:
>>> Sorry, company mail gateway removed the attached file.
>>>
>>> Where can I upload the mentioned archive?
>>
>> Send me an SSH public key and I'll set up an account on ada.openldap.org for you.
>>
>>>
>>> Juergen Sprenger
>>>
>>> -----Original Message-----
>>> From: Howard Chu [mailto:hyc@symas.com]
>>> Sent: Wednesday, May 29, 2013 4:22 PM
>>> To: Sprenger Jürgen, ITS-OUS-OP-IFM-MIR-UCH
>>> Subject: Re: (ITS#7577) hdb and mdb derefere aliases differently
>>>
>>> Juergen.Sprenger@swisscom.com wrote:
>>>> The following file(s) has been removed because it violated the Swisscom security policy:
>>>>
>>>> ldap-hdb.sh
>>>> ldap-mdb.sh
>>>>
>>>>
>>>> Sorry, still can't get it working.
>>>>
>>>> Attached You will find my setup as a tarfile:
>>>
>>> There was no attachment on your email.
>>>>
>>>> mdb-test/ root/mdbtest.ldif	# testdata
>>>> mdb-test/ root/ldap-hdb.sh	# script to switch config to hdb
>>>> mdb-test/ root/ldap-mdb.sh	# script to switch config to mdb
>>>>
>>>> mdb-test/etc/openldap/	# complete directory, but keys and certs removed
>>>> mdb-test/etc/openldap/slapd.conf.hdb	# slapd.conf using Berkeley DB
>>>> mdb-test/etc/openldap/slapd.conf.mdb	# slapd.conf using mdb
>>>>
>>>> mdb-test/etc/ldap.conf
>>>> mdb-test/etc/ldap.conf.sudo link to
>>>> mdb-test/etc/openldap/ldap.conf.sudo
>>>>
>>>> Juergen Sprenger
>>>>
>>>> -----Original Message-----
>>>> From: Howard Chu [mailto:hyc@symas.com]
>>>> Sent: Friday, May 17, 2013 6:24 PM
>>>> To: Sprenger Jürgen, ITS-OUS-OP-IFM-MIR-UCH
>>>> Subject: Re: (ITS#7577) hdb and mdb derefere aliases differently
>>>>
>>>> Juergen.Sprenger@swisscom.com wrote:
>>>>> Checked out 201ddbe3e4d8eb39830b96eefa559900952bc022, compiled, installed.
>>>>>
>>>>> # md5sum openldap-2.4.35/servers/slapd/back-mdb/search.c
>>>>> 30f4e29eb7b4d0348f0e7ef100d0ba63
>>>>> openldap-2.4.35/servers/slapd/back-mdb/search.c
>>>>>
>>>>> But I still get different results:
>>>>
>>>> OK, try once more, commit a8c1438688f74081257d2aaba4e12814b9c8668f
>>>>
>>>>>
>>>>> ## mdb ##
>>>>> # ldapsearch -xLLL -b ou=account,dc=its,dc=scom -s sub -D cn=itsAgent,ou=customerAgent,dc=scom -w ****** '(&(objectClass=posixAccount)(uid=tgdspju1))'
>>>>> (result is empty)
>>>>>
>>>>> May 17 14:30:54 openldap-dev slapd[21001]: conn=1007 fd=13 ACCEPT
>>>>> from
>>>>> IP=127.0.0.1:36262 (IP=0.0.0.0:389) May 17 14:30:54 openldap-dev
>>>>> slapd[21001]: conn=1007 op=0 BIND
>>>>> dn="cn=itsAgent,ou=customerAgent,dc=scom" method=128 May 17
>>>>> 14:30:54 openldap-dev slapd[21001]: conn=1007 op=0 BIND dn="cn=itsAgent,ou=customerAgent,dc=scom" mech=SIMPLE ssf=0 May 17 14:30:54 openldap-dev slapd[21001]: conn=1007 op=0 RESULT tag=97 err=0 text= May 17 14:30:54 openldap-dev slapd[21001]: conn=1007 op=1 SRCH base="ou=account,dc=its,dc=scom" scope=2 deref=3 filter="(&(objectClass=posixAccount)(uid=tgdspju1))"
>>>>> May 17 14:30:57 openldap-dev slapd[21001]: conn=1007 op=1 SEARCH
>>>>> RESULT tag=101 err=0 nentries=0 text= May 17 14:30:57 openldap-dev
>>>>> slapd[21001]: conn=1007 op=2 UNBIND May 17 14:30:57 openldap-dev
>>>>> slapd[21001]: conn=1007 fd=13 closed
>>>>>
>>>>> ## hdb ##
>>>>> # ldapsearch -xLLL -b ou=account,dc=its,dc=scom -s sub -D cn=itsAgent,ou=customerAgent,dc=scom -w ****** '(&(objectClass=posixAccount)(uid=tgdspju1))'
>>>>> dn: uid=tgdspju1,ou=Person,dc=its,dc=scom
>>>>> ...
>>>>>
>>>>> May 17 14:33:06 openldap-dev slapd[21089]: conn=1001 fd=13 ACCEPT
>>>>> from
>>>>> IP=127.0.0.1:36267 (IP=0.0.0.0:389) May 17 14:33:06 openldap-dev
>>>>> slapd[21089]: conn=1001 op=0 BIND
>>>>> dn="cn=itsAgent,ou=customerAgent,dc=scom" method=128 May 17
>>>>> 14:33:06 openldap-dev slapd[21089]: conn=1001 op=0 BIND dn="cn=itsAgent,ou=customerAgent,dc=scom" mech=SIMPLE ssf=0 May 17 14:33:06 openldap-dev slapd[21089]: conn=1001 op=0 RESULT tag=97 err=0 text= May 17 14:33:06 openldap-dev slapd[21089]: conn=1001 op=1 SRCH base="ou=account,dc=its,dc=scom" scope=2 deref=3 filter="(&(objectClass=posixAccount)(uid=tgdspju1))"
>>>>> May 17 14:33:07 openldap-dev slapd[21089]: conn=1001 op=1 SEARCH
>>>>> RESULT tag=101 err=0 nentries=1 text= May 17 14:33:07 openldap-dev
>>>>> slapd[21089]: conn=1001 op=2 UNBIND May 17 14:33:07 openldap-dev
>>>>> slapd[21089]: conn=1001 fd=13 closed
>>>>>
>>>>> Juergen Sprenger
>>>>>
>>>>> -----Original Message-----
>>>>> From: Howard Chu [mailto:hyc@symas.com]
>>>>> Sent: Friday, May 17, 2013 1:34 PM
>>>>> To: Sprenger Jürgen, ITS-OUS-OP-IFM-MIR-UCH;
>>>>> openldap-its@openldap.org
>>>>> Subject: Re: (ITS#7577) hdb and mdb derefere aliases differently
>>>>>
>>>>> Juergen.Sprenger@swisscom.com wrote:
>>>>>> tried the fix fb537d747c6fd43e08986e99b1fe7781660feaf3
>>>>>
>>>>> There was a followup commit also needed.
>>>>> 201ddbe3e4d8eb39830b96eefa559900952bc022
>>>>>
>>>>> Just get the latest.
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>


-- 
    -- Howard Chu
    CTO, Symas Corp.           http://www.symas.com
    Director, Highland Sun     http://highlandsun.com/hyc/
    Chief Architect, OpenLDAP  http://www.openldap.org/project/