reassign 428468 slapd 2.3.30-5 thanks >>>>> "Roland" == Roland Gruber <[EMAIL PROTECTED]> writes: Roland> there were always some user reports about LDAP server Roland> crashes when using TLS. Usually this was caused by buggy Roland> OpenSSL installations. But in this case the server does Roland> not crash or maybe only a single thread.
Yes, I am beginning to think more and more that this is a bug in slapd. Possible a security bug that can allow denial of service attacks, although I haven't worked out yet how to crash the server on demand. For the record: * If I change ldap-account-manager to use ldapi:/// it encounters the same problem. * gdb of gq reports ldap_search_ext_s is returning LDAP_SERVER_DOWN: Breakpoint 3, formlist_from_entry (error_context=74, server=0x80ca830, dn=0x828e768, ocvalues_only=0) at formfill.c:187 187 LDAPControl *ctrls[2] = { NULL, NULL } ; (gdb) n 195 c.ldctl_oid = LDAP_CONTROL_MANAGEDSAIT; (gdb) 196 c.ldctl_value.bv_val = NULL; (gdb) 197 c.ldctl_value.bv_len = 0; (gdb) 198 c.ldctl_iscritical = 1; (gdb) 203 rc = ldap_search_ext_s(ld, (gdb) 215 if(rc == LDAP_NOT_SUPPORTED) { (gdb) 220 if (rc == LDAP_SERVER_DOWN) { (gdb) 221 server->server_down++; (gdb) 330 close_connection(server, FALSE); (gdb) 331 set_normalcursor(); (gdb) 334 } (gdb) n The server was *not* down at the time. -- Brian May <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]