Re: OpenLDAP 2.4.45 possible denial of service vulnerability?

[Quanah Gibson-Mount <quanah@symas.com>]

--On Wednesday, February 06, 2019 2:42 PM +0100 Geert Hendrickx 
<geert@hendrickx.be> wrote:

> On Wed, Jan 30, 2019 at 06:53:02 -0800, Quanah Gibson-Mount wrote:
> > A tool-threads setting > 2 is ignored with back-mdb.
>
>
> Interesting, it seems this is not docmented?

I documented it for Zimbra at 
<https://wiki.zimbra.com/wiki/OpenLDAP_Tuning_Keys_8.0>

It probably should be noted in slapd.conf(5)/slapd-config(5) man pages. 
With back-mdb, any setting above 2 is simply converted to 2.  This was due 
to the fact that extensive testing I did several years back found that the 
greater the number of tools threads (past 2), the slower the import.

--Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>