[Bug 1185908] [NEW] slapd: slapcat output truncated every now and then

2013-05-30 Thread Ryan Tandy
Public bug reported: Debian #673038 was fixed in wheezy but the fix has never been merged to Ubuntu. I verified the existence of this bug in precise, quantal, raring, and saucy using more or less the procedure from http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=673038#111: # apt-get install lda

[Bug 1185908] Re: slapd: slapcat output truncated every now and then

2013-05-30 Thread Ryan Tandy
** Description changed: Debian #673038 was fixed in wheezy but the fix has never been merged to Ubuntu. I verified the existence of this bug in precise, quantal, raring, and saucy using more or less the procedure from http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=673038#111: # apt-

[Bug 1185908] Re: slapd: slapcat output truncated every now and then

2013-05-30 Thread Ryan Tandy
Tried to propose a branch. New to this UDD thing, please give me hints if I've done some part incorrectly. Tested the fix on saucy amd64. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bug

[Bug 1185908] Re: slapd: slapcat output truncated every now and then

2013-06-03 Thread Ryan Tandy
Thanks James. Added SRU info in the description, will propose SRU merges as I have time to prepare and test them... ** Description changed: + SRU justification: + + [Impact] + + The slapd tools (slapcat, slapadd, et al) don't retry after failing to + acquire a BDB read lock, and on a busy LDAP

[Bug 1185908] Re: slapd: slapcat output truncated every now and then

2013-06-04 Thread Ryan Tandy
** Patch added: "raring debdiff, tested on amd64" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1185908/+attachment/3694556/+files/openldap_2.4.31-1ubuntu2.1.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap

[Bug 1185908] Re: slapd: slapcat output truncated every now and then

2013-06-04 Thread Ryan Tandy
** Patch added: "precise debdiff, tested on amd64" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1185908/+attachment/3694554/+files/openldap_2.4.28-1.1ubuntu4.3.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openl

[Bug 1185908] Re: slapd: slapcat output truncated every now and then

2013-06-04 Thread Ryan Tandy
Note to sponsors/SRU team: the impact of this bug is limited to slapd only and I really don't expect people to be running LDAP servers on quantal or raring: therefore I think it's most important to fix this in precise, less so for those others. ** Tags added: patch precise quantal raring -- You

[Bug 1185908] Re: slapd: slapcat output truncated every now and then

2013-06-04 Thread Ryan Tandy
** Patch added: "quantal debdiff, tested on amd64" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1185908/+attachment/3694555/+files/openldap_2.4.31-1ubuntu2.1.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openlda

[Bug 1185908] Re: slapd: slapcat output truncated every now and then

2013-06-21 Thread Ryan Tandy
Hi, (I'm allowed to verify my own bugs, right?) Verified on precise and raring, i386 and amd64. ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu.

[Bug 594777] Re: slapd run level link name to high when using krb5-kdc

2013-06-21 Thread Ryan Tandy
*** This bug is a duplicate of bug 652433 *** https://bugs.launchpad.net/bugs/652433 ** This bug has been marked a duplicate of bug 652433 Init script dependency error: krb5-kdc starts before slapd -- You received this bug notification because you are a member of Ubuntu Server Team, which

[Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-06-25 Thread Ryan Tandy
Apologies for the inconvenience. Attaching fixed (and tested) patches. ** Patch added: "utopic patch v2" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1392018/+attachment/4420526/+files/openldap_2.4.31-1%2Bnmu2ubuntu11.2.debdiff -- You received this bug notification because you are

[Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-06-25 Thread Ryan Tandy
** Patch added: "vivid patch v2" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1392018/+attachment/4420527/+files/openldap_2.4.31-1%2Bnmu2ubuntu12.2.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubunt

[Bug 1033096] Re: request to have sha2 module in contrib included in package

2015-06-25 Thread Ryan Tandy
The slapd package in wily now provides the pw-sha2 module. ** Changed in: openldap (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1033

[Bug 667597] Re: conf.d directory not a configuration directory

2015-06-25 Thread Ryan Tandy
** Bug watch added: Debian Bug tracker #626911 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626911 ** Also affects: openldap (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626911 Importance: Unknown Status: Unknown -- You received this bug notification because

[Bug 680358] Re: ldapadd -W with -w password parameter causes assertion failure

2015-06-25 Thread Ryan Tandy
This was reported upstream as ITS#6849, and fixed in OpenLDAP 2.4.25. ** Changed in: openldap (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.ne

[Bug 1471370] Re: package slapd 2.4.31-1+nmu2ubuntu8.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2015-07-06 Thread Ryan Tandy
The dpkg terminal output unfortunately doesn't show why slapd failed to start. Please check /var/log/syslog for the relevant slapd output. You mentioned you installed Samba-4. If you are running Samba's AD DC, that would probably bind the LDAP port (389/tcp), which would prevent slapd from startin

Re: [Bug 1471370] Re: package slapd 2.4.31-1+nmu2ubuntu8.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2015-07-06 Thread Ryan Tandy
On Tue, Jul 07, 2015 at 03:26:30AM -, Adhi Dazz wrote: >I've reinstall samba4 from apt-get method (backward to Samba Version >4.1.6-Ubuntu), and the problem fixed. OK, and what do you have running on port 389 right now, samba or slapd? (one way to find this: sudo netstat -lntp | grep -w 389)

Re: [Bug 1471370] Re: package slapd 2.4.31-1+nmu2ubuntu8.1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2015-07-06 Thread Ryan Tandy
On Tue, Jul 07, 2015 at 04:25:57AM -, Adhi Dazz wrote: >this is the result of port 389 ># sudo netstat -lntp | grep -w 389 >tcp    0  0 0.0.0.0:389 0.0.0.0:*   LISTEN  > 1219/samba  >tcp6   0  0 :::389  :::*    LIST

[Bug 1471831] Re: Requesting a package for 2.4.41

2015-07-08 Thread Ryan Tandy
** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rtandy) ** Changed in: openldap (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu.

[Bug 1474097] Re: package libldap-2.4-2 (not installed) failed to install/upgrade: cannot copy extracted data for './usr/lib/x86_64-linux-gnu/liblber-2.4.so.2.8.3' to '/usr/lib/x86_64-linux-gnu/liblbe

2015-07-13 Thread Ryan Tandy
Based on the dpkg log: dpkg-deb (alfolyamat): decompressing archive member: lzma error: compressed data is corrupt it sounds like the package you downloaded was incomplete, or got corrupted somehow. Please delete the downloaded packages: sudo apt-get clean and try the installation again. ** Ch

[Bug 1471831] Re: Requesting a package for 2.4.41

2015-07-23 Thread Ryan Tandy
** Changed in: openldap (Ubuntu) Status: Confirmed => In Progress -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1471831 Title: Requesting a package for 2.4.41 To manage notifi

[Bug 1472639] Re: apparmor profile denied for kerberos: /run/.heim_org.h5l.kcm-socket

2015-07-24 Thread Ryan Tandy
Hi Kartik, To help me reproduce and verify this, can you describe your setup where slapd stores its credentials in the KCM? I'm asking because I do see these denials, but they don't appear to affect operation with a keytab, and I haven't been able to get slapd to work without a keytab. I'm guessi

[Bug 1471831] RFS: openldap/2.4.41+dfsg-1ubuntu1

2015-07-24 Thread Ryan Tandy
Hi sponsors, Please review the attached merge of openldap from Debian unstable. Thanks in advance. ** Attachment added: "openldap_2.4.41+dfsg-1ubuntu1_source.changes" https://bugs.launchpad.net/bugs/1471831/+attachment/4433779/+files/openldap_2.4.41%2Bdfsg-1ubuntu1_source.changes ** Attach

[Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-07-28 Thread Ryan Tandy
With slapd from vivid-updates: # dpkg-query -W slapd slapd 2.4.31-1+nmu2ubuntu12.1 # ldapwhoami -H ldapi:// -QY EXTERNAL ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) With slapd from vivid-proposed: # dpkg-query -W slapd slapd 2.4.31-1+nmu2ubuntu12.2 # ldapwhoami -H ldapi:// -

[Bug 1479512] Re: package libldap-2.4-2:i386 2.4.31-1+nmu2ubuntu12.2 failed to install/upgrade: package libldap-2.4-2:i386 is already installed and configured

2015-07-29 Thread Ryan Tandy
Thanks for the report. I guess apt has gotten confused since you had to reboot in the middle of the upgrade. I don't know that there's anything I can do about it from openldap's end, though. ** Package changed: openldap (Ubuntu) => apt (Ubuntu) -- You received this bug notification because you a

[Bug 1489071] Re: slapd expose server filestructure when issue lpadsearch with special query

2015-08-26 Thread Ryan Tandy
Please read https://help.ubuntu.com/community/ShellGlobbing to understand how your shell interprets the * character. ** Changed in: openldap (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openlda

[Bug 1495339] Re: package slapd 2.4.31-1+nmu2ubuntu12.2 failed to install/upgrade: el subproceso instalado el script post-installation devolvió el código de salida de error 1

2015-09-14 Thread Ryan Tandy
Thanks for the bug report. The dpkg log says: Configurando slapd (2.4.31-1+nmu2ubuntu12.2) ... Creating new user openldap... done. Creating initial configuration... done. Creating LDAP directory... done. insserv: warning: script 'K01centrify-kcm' missing LSB tags and overrides insserv: scri

[Bug 1501047] Re: package libldap-2.4-2:i386 2.4.31-1+nmu2ubuntu8.1 failed to install/upgrade: vereistenproblemen - blijft ongeconfigureerd

2015-09-29 Thread Ryan Tandy
Hi, It does not look like an openldap bug to me: dpkg: error processing package libgcrypt11:i386 (--configure): package is in a very bad inconsistent state; you should reinstall it before attempting configuration dpkg: dependency problems prevent configuration of libldap-2.4-2:i386: libldap-2.

[Bug 1108252] Re: package slapd 2.4.28-1.1ubuntu4.2 failed to install/upgrade: ErrorMessage: el subproceso instalado el script post-installation devolvió el código de salida de error 1

2015-12-26 Thread Ryan Tandy
*** This bug is a duplicate of bug 112631 *** https://bugs.launchpad.net/bugs/112631 ** This bug is no longer a duplicate of bug 1011227 package slapd 2.4.28-1.1ubuntu4 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1 ** Th

[Bug 1011227] Re: package slapd 2.4.28-1.1ubuntu4 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2015-12-26 Thread Ryan Tandy
*** This bug is a duplicate of bug 112631 *** https://bugs.launchpad.net/bugs/112631 ** This bug has been marked a duplicate of bug 112631 slapd failed to install/upgrade: database (dc=xxx,dc=xxx,dc=xx) not configured to hold "dc=nodomain" -- You received this bug notification because yo

[Bug 112631] Re: slapd failed to install/upgrade: database (dc=xxx, dc=xxx, dc=xx) not configured to hold "dc=nodomain"

2015-12-26 Thread Ryan Tandy
** Summary changed: - [apport] package slapd failed to install/upgrade: + slapd failed to install/upgrade: database (dc=xxx,dc=xxx,dc=xx) not configured to hold "dc=nodomain" ** Bug watch added: Debian Bug tracker #546368 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546368 ** Also affec

[Bug 391420] Re: slapd failed to install/upgrade: slapadd: line 1: database (dc=xxx, dc=xxx, dc=xx) not configured to hold "dc=nodomain"

2015-12-26 Thread Ryan Tandy
*** This bug is a duplicate of bug 112631 *** https://bugs.launchpad.net/bugs/112631 ** This bug has been marked a duplicate of bug 112631 [apport] package slapd failed to install/upgrade: -- You received this bug notification because you are a member of Ubuntu Server Team, which is subsc

[Bug 896737] Re: package slapd 2.4.21-0ubuntu5.6 failed to install/upgrade:

2015-12-26 Thread Ryan Tandy
*** This bug is a duplicate of bug 112631 *** https://bugs.launchpad.net/bugs/112631 Thanks dino99, but this one is still relevant and does need to be fixed. We should keep it open. ** Changed in: openldap (Ubuntu) Status: Invalid => Confirmed ** Bug watch added: Debian Bug tracker #5

[Bug 571752] Re: slapd upgrades don't add frontend ACLs for base="" and cn=subschema

2015-12-26 Thread Ryan Tandy
Fixed in natty and later, looks like. openldap (2.4.23-5) unstable; urgency=high [...] * debian/slapd.scripts-common, debian/slapd.postinst: on upgrade from versions <= 2.4.23-4, explicitly grant access to cn=Subschema, which otherwise is blocked by our added olcAccess settings. Closes:

[Bug 990751] Re: package slapd 2.4.28-1.1ubuntu4 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2015-12-26 Thread Ryan Tandy
*** This bug is a duplicate of bug 112631 *** https://bugs.launchpad.net/bugs/112631 ** This bug has been marked a duplicate of bug 112631 slapd failed to install/upgrade: database (dc=xxx,dc=xxx,dc=xx) not configured to hold "dc=nodomain" -- You received this bug notification because yo

[Bug 989243] Re: package slapd 2.4.28-1.1ubuntu4 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2015-12-26 Thread Ryan Tandy
*** This bug is a duplicate of bug 112631 *** https://bugs.launchpad.net/bugs/112631 ** This bug has been marked a duplicate of bug 112631 slapd failed to install/upgrade: database (dc=xxx,dc=xxx,dc=xx) not configured to hold "dc=nodomain" -- You received this bug notification because yo

[Bug 862520] Re: package slapd 2.4.23-6ubuntu6 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2015-12-26 Thread Ryan Tandy
caused by: Preparing to replace slapd 2.4.21-0ubuntu5.5 (using .../slapd_2.4.23-6ubuntu6_amd64.deb) ... Dumping to /var/backups/slapd-2.4.21-0ubuntu5.5: Unpacking replacement slapd ... Would need a copy of the config before the upgrade in order to determine why the database was not listed for

[Bug 840513] Re: package slapd 2.4.23-6ubuntu6 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2015-12-26 Thread Ryan Tandy
*** This bug is a duplicate of bug 862520 *** https://bugs.launchpad.net/bugs/862520 >From the upgrade log: Setting up slapd (2.4.23-6ubuntu6) ... Backing up /etc/ldap/slapd.d in /var/backups/slapd-2.4.21-0ubuntu5.4... done. Moving old database directories to /var/backups: Loading from

[Bug 990892] Re: package slapd 2.4.28-1.1ubuntu4 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2015-12-26 Thread Ryan Tandy
There isn't enough information (would need debconf info) to say for sure, but this is most likely caused by slapd/domain ending with a dot, or otherwise causing olcSuffix to end up containing an unacceptable character. The former case has been fixed in wily and later. ** Changed in: openldap (Ubun

[Bug 988688] Re: slapd failed to upgrade: no databases were backed up

2015-12-26 Thread Ryan Tandy
*** This bug is a duplicate of bug 862520 *** https://bugs.launchpad.net/bugs/862520 ** Summary changed: - package slapd 2.4.21-0ubuntu5.7 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 + slapd failed to upgrade: no databases were backed

[Bug 1532648] [NEW] Please merge openldap 2.4.42+dfsg-2 (main) from Debian testing (main)

2016-01-10 Thread Ryan Tandy
Public bug reported: Please merge openldap 2.4.42+dfsg-2 (main) from Debian testing (main) ** Affects: openldap (Ubuntu) Importance: Undecided Assignee: Ryan Tandy (rtandy) Status: In Progress ** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rta

[Bug 1532648] proposed merged package

2016-01-10 Thread Ryan Tandy
/+files/openldap_2.4.42+dfsg-2ubuntu1.debian.tar.xz ** Changed in: openldap (Ubuntu) Assignee: Ryan Tandy (rtandy) => (unassigned) ** Changed in: openldap (Ubuntu) Status: In Progress => Confirmed -- You received this bug notification because you are a member

[Bug 1536301] Re: package libldap-2.4-2 2.4.41+dfsg-1ubuntu3 [modified: usr/share/doc/libldap-2.4-2/changelog.Debian.gz] failed to install/upgrade: trying to overwrite shared '/usr/share/doc/libldap-2

2016-01-25 Thread Ryan Tandy
Sounds like a case of multi-arch skew. If I'm reading correctly, you had libldap-2.4-2 2.4.41+dfsg-1ubuntu2 installed for both i386 and amd64; but then you tried to upgrade to -1ubuntu3 on i386 only. Updating your system should resolve this, I think. ** Changed in: openldap (Ubuntu) Status

[Bug 1537762] Re: syncrepl does not work when using tls

2016-01-25 Thread Ryan Tandy
Hi Ian, I found https://stathers.net/2016/01/14/thawte-premium-ssl- md5-gnutls.html but it would be surprising if that broke syncrepl but not ldapsearch. Still, worth checking if you haven't already. (ldapsearch and syncrepl are using the same CA certificate, right?) Is there any interesting outp

[Bug 1537762] Re: syncrepl does not work when using tls

2016-01-25 Thread Ryan Tandy
Please also have a look at https://bugs.launchpad.net/ubuntu/+source/gnutls26/+bug/1534230 (thanks to sarnold for the pointer) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1537762

[Bug 874339] Re: package slapd 2.4.23-6ubuntu6 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2016-01-25 Thread Ryan Tandy
*** This bug is a duplicate of bug 1040177 *** https://bugs.launchpad.net/bugs/1040177 ** This bug has been marked a duplicate of bug 1040177 slapd install fails when requesting to 'Omit OpenLDAP server configuration" -- You received this bug notification because you are a member of Ubunt

[Bug 694707] Re: database doesn't get purged during purge

2016-01-25 Thread Ryan Tandy
There is a debconf question about purge: Template: slapd/purge_database Type: boolean Default: false Description: Do you want the database to be removed when slapd is purged? Note that false is the default. Was it changed to true before purging? ** Changed in: openldap (Ubuntu) Status: Co

[Bug 1550437] Re: [BUG] Unable to install: dependency problem

2016-02-26 Thread Ryan Tandy
Hi Michal, Thanks for the report. Can I ask you to provide some more information? The output from the following commands would be very helpful: lsb_release -a uname -a apt-cache policy apt-get -y install slapd apt-get -y -o Debug::pkgProblemResolver=1 install slapd ** Changed in: openldap (U

[Bug 1550437] Re: [BUG] Unable to install: dependency problem

2016-02-26 Thread Ryan Tandy
> Investigating (0) slapd [i386] 2.4.40-4 ~ ~ ubuntu14.04.1 c42.ppa1> (net) This package (slapd 2.4.40-4~ubuntu14.04.1~c42.ppa1) is not part of Ubuntu. It comes from one of the PPAs you have installed: https://launchpad.net/~dirk-computer42/+archive/ubuntu/c42-backport This is either a problem w

Re: [Bug 1550437] Re: [BUG] Unable to install: dependency problem

2016-02-26 Thread Ryan Tandy
On Fri, Feb 26, 2016 at 07:56:59PM -, Michal Dziczkowski wrote: >I don't have the mantioned PPA in my repositories, so how could I >install slapd from it? The 'apt-cache policy' output you posted does include it. > 500 http://ppa.launchpad.net/dirk-computer42/c42-backport/ubuntu/ trusts / >

[Bug 1559775] Re: package slapd 2.4.42+dfsg-2ubuntu3 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2016-03-20 Thread Ryan Tandy
from DpkgTerminalLog: Setting up slapd (2.4.42+dfsg-2ubuntu3) ... Backing up /etc/ldap/slapd.d in /var/backups/slapd-2.4.31-1+nmu2ubuntu8.2... done. Moving old database directories to /var/backups: Backup path /var/backups/dc=nodomain-2.4.31-1+nmu2ubuntu8.2.ldapdb exists. Giving up... The

[Bug 1410195] Re: Ctrl+Alt+F7 bypasses the light-locker lock-screen under XFCE

2015-01-16 Thread Ryan Tandy
Might be related to bug 781737. pam-ldap/nss-ldap dropping privileges is, AFAIK, caused by libgcrypt (bug 423252). If this is the same bug, then the pending openldap merge (bug 1395098) will resolve it, as gcrypt will no longer be used. But switching to nss-pam-ldapd is a good recommendation anyway

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2015-02-06 Thread Ryan Tandy
Hi, We are going to do another Debian upload to fix two bugs described here: http://www.openwall.com/lists/oss-security/2015/02/06/3 I'll rebase this merge on top of that once it's finalized. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscrib

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2015-02-21 Thread Ryan Tandy
) Assignee: Ryan Tandy (rtandy) => (unassigned) ** Changed in: openldap (Ubuntu) Status: In Progress => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1395098

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2015-02-21 Thread Ryan Tandy
** Attachment added: "openldap_2.4.40-4ubuntu1.dsc" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1395098/+attachment/4324360/+files/openldap_2.4.40-4ubuntu1.dsc -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug repo

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2015-02-21 Thread Ryan Tandy
** Patch added: "openldap_2.4.40-4ubuntu1.diff.gz" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1395098/+attachment/4324361/+files/openldap_2.4.40-4ubuntu1.diff.gz -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug r

[Bug 1395098] Re: Please merge openldap 2.4.40-4 (main) from Debian unstable (main)

2015-03-16 Thread Ryan Tandy
Unsubscribed sponsors for now. Needs rebasing again for Ubuntu changes, and there will probably be another Debian upload too. I'll try again for W. ** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rtandy) ** Changed in: openldap (Ubuntu) Status: Confirm

[Bug 1433666] Re: openldap won't install, aborts w/ double free each run

2015-03-18 Thread Ryan Tandy
*** This bug is a duplicate of bug 1103353 *** https://bugs.launchpad.net/bugs/1103353 Hi, thanks for the report. This is already a known bug and fixed upstream in newer versions, so marking as a duplicate. ** This bug has been marked a duplicate of bug 1103353 Invalid GnuTLS cipher suite

[Bug 1103353] Re: Invalid GnuTLS cipher suite strings causes libldap to crash

2015-03-18 Thread Ryan Tandy
The fixed version is not in Ubuntu yet. This crash only happens on invalid configurations, though; slapd will still refuse to start on such a configuration. Fix your configuration to be correct, and you won't see the crash any more. -- You received this bug notification because you are a member o

Re: [Bug 1103353] Re: Invalid GnuTLS cipher suite strings causes libldap to crash

2015-03-18 Thread Ryan Tandy
On Wed, Mar 18, 2015 at 06:40:06PM -, Jouko Orava wrote: >rtandy, this is not specific to slapd, but affects all applications that >use libldap2 and gnutls. Apologies for the lack of context. You're completely correct, but the message I was replying to was about slapd specifically: he had jus

[Bug 1436558] Re: package libldap-2.4-2 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: Versuch, gemeinsam benutztes »/etc/ldap/ldap.conf« zu überschreiben, welches verschieden von anderen Instanzen d

2015-03-25 Thread Ryan Tandy
Thanks for the report. I guess this is caused by https://bugs.debian.org/330695 which is not fixed yet. :/ Easy to reproduce by installing libldap-2.4-2:amd64, removing (but not purging) it, and then trying to install :i386. Klaus: in this case a workaround is probably to purge the old packages (

[Bug 1393306] Re: slapd: nssov does not work with lib{nss, pam}-ldapd 0.9.x

2015-04-17 Thread Ryan Tandy
Patches were accepted upstream, will be fixed in 2.4.41. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1393306 Title: slapd: nssov does not work with lib{nss,pam}-ldapd 0.9.x To

[Bug 1446809] Re: denial of service via an LDAP search query with attrsOnly set to true (CVE-2012-1164)

2015-05-05 Thread Ryan Tandy
** Bug watch added: Debian Bug tracker #663644 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663644 ** Also affects: openldap (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663644 Importance: Unknown Status: Unknown -- You received this bug notification because

[Bug 1452087] Re: slapd [or its init script] does not create necessary directory for nssov socket and fails to start

2015-05-05 Thread Ryan Tandy
IIRC slapd does try to create the directory, but it's already switched users by that point, so doesn't have sufficient privileges. http://bazaar.launchpad.net/~ubuntu- branches/ubuntu/vivid/openldap/vivid/view/head:/contrib/slapd- modules/nssov/nssov.c#L808 I don't know whether the overlay has a

[Bug 1452087] Re: slapd [or its init script] does not create necessary directory for nssov socket and fails to start

2015-05-07 Thread Ryan Tandy
Thinking about it again, an upstream fix for this is unlikely. slapd changes users before it even starts loading its config, so there probably isn't any way for nssov to mkdir as root. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to ope

Re: [Bug 1446809] Re: [SRU] denial of service via an LDAP search query with attrsOnly set to true (CVE-2012-1164)

2015-05-19 Thread Ryan Tandy
Hello, On Tue, May 19, 2015 at 07:25:06PM -, Felipe Reyes wrote: >Here I'm attaching a new version of the patch for precise that includes >fixes for CVE-2012-1164, CVE-2013-4449 and CVE-2015-1545 The precise debdiff adds d/p/0001-ITS-7723-fix-reference-counting.patch which is the same as CVE

[Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-05-25 Thread Ryan Tandy
** Tags added: apparmor -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1392018 Title: apparmor stops /var/run/ldapi from being read causing ldap to fail To manage notifications ab

[Bug 1441761] Re: package slapd 2.4.31-1+nmu2ubuntu8 [modified: usr/sbin/slapd usr/share/slapd/DB_CONFIG] failed to install/upgrade: subprocess installed post-installation script returned error exit s

2015-05-25 Thread Ryan Tandy
Hello, Your dpkg log says: Loading the initial configuration from the ldif file () failed with the following error while running slapadd: slapadd: dn="cn=module{0},cn=config" (line=1034): (65) unrecognized objectClass 'olcModuleList' That object class is hard-coded in slapd (in servers/slap

[Bug 1452087] Re: slapd [or its init script] does not create necessary directory for nssov socket and fails to start

2015-05-25 Thread Ryan Tandy
** Changed in: openldap (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1452087 Title: slapd [or its init script] does not create necessary

[Bug 1314859] Re: segfault in slapd when using ldapadd

2015-05-25 Thread Ryan Tandy
Hello, I can't reproduce this bug in precise. I added an entry with slapadd: # slapadd << eof dn: uid=a,ou=b,dc=example,dc=com objectClass: account ^D Error, entries missing! entry 3: ou=b,dc=example,dc=com then started slapd, then tried to add the parent entry: # ldapadd -x -D cn=admin,dc=e

[Bug 1309768] Re: package slapd 2.4.28-1.1ubuntu4.4 failed to install/upgrade: ErrorMessage: subprocess new pre-installation script returned error exit status 1

2015-05-25 Thread Ryan Tandy
Hello, This appears to have been related to the smbkrb5pwd overlay (which I would note is not packaged in Ubuntu): Preparing to replace slapd 2.4.28-1.1ubuntu4.4 (using .../slapd_2.4.31-1+nmu2ubuntu8_amd64.deb) ... * Stopping OpenLDAP slapd ...done. Dumping to /var/backups/slapd-2.4.28-1.1

[Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-05-25 Thread Ryan Tandy
** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rtandy) ** Changed in: openldap (Ubuntu) Status: Confirmed => In Progress -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu.

[Bug 1309454] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: il sottoprocesso installato script di post-installation ha restituito lo stato di errore 1

2015-05-25 Thread Ryan Tandy
Hello, The log says: Configurazione di slapd (2.4.31-1+nmu2ubuntu8)... Backing up /etc/ldap/slapd.d in /var/backups/slapd-2.4.31-1+nmu2ubuntu3... done. Moving old database directories to /var/backups: - directory dc=nodomain... done. Loading from /var/backups/slapd-2.4.31-1+nmu2ubuntu3:

[Bug 833818] Re: default DIT suffix should be definable by user (debconf/preseed)

2015-05-25 Thread Ryan Tandy
Hello Peter, I don't have a natty chroot any more, but as far back as precise, preseeding slapd/domain does set the suffix of the default DIT, and there is a debconf prompt for it too, at medium priority. Marking the bug fixed, but please correct me if you meant something different. ** Changed i

[Bug 242313] Re: TLS_CACERTDIR not supported in gnutls

2015-05-25 Thread Ryan Tandy
It looks like very recent GnuTLS releases (>= 3.3.6) may have finally added the API needed to make this possible: https://www.happyassassin.net/2015/01/12/a-note-about-ssltls-trusted- certificate-stores-and-platforms/ http://gnutls.org/manual/html_node/X509-certificate-API.html#index- gnutls_005f

[Bug 1395098] Re: Please merge openldap 2.4.40-4 (main) from Debian unstable (main)

2015-05-25 Thread Ryan Tandy
** Patch added: "debdiff | filterdiff -i '*/debian/*'" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1395098/+attachment/4404462/+files/openldap_2.4.31-1%2Bnmu2ubuntu12_2.4.40%2Bdfsg-1ubuntu1.debian.debdiff ** Changed in: openldap (Ubuntu) Assignee

[Bug 1395098] Re: Please merge openldap 2.4.40-4 (main) from Debian unstable (main)

2015-05-25 Thread Ryan Tandy
Hello sponsors, hello server team, (OK, let's try this again...) Here is an updated rebase of openldap on to current Debian unstable. A test build can be seen in my PPA: https://launchpad.net/~rtandy/+archive/ubuntu/lp1395098 orig.tar.gz can be downloaded from there too: https://launchpad.net/~

[Bug 1395098] Re: Please merge openldap 2.4.40-4 (main) from Debian unstable (main)

2015-05-25 Thread Ryan Tandy
** Attachment added: "openldap_2.4.40+dfsg-1ubuntu1.dsc" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1395098/+attachment/4404460/+files/openldap_2.4.40%2Bdfsg-1ubuntu1.dsc -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 1395098] Re: Please merge openldap 2.4.40-4 (main) from Debian unstable (main)

2015-05-25 Thread Ryan Tandy
** Patch added: "openldap_2.4.40+dfsg-1ubuntu1.diff.gz" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1395098/+attachment/4404461/+files/openldap_2.4.40%2Bdfsg-1ubuntu1.diff.gz -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed

[Bug 1395098] Re: Please merge openldap 2.4.40-4 (main) from Debian unstable (main)

2015-05-25 Thread Ryan Tandy
oh, for crying out loud. I added "* Enable the mdb backend again on ppc64el ...", but didn't drop " * Disable mdb backend ..." from the "Remaining changes" section... :) leaving it alone for now, anyway, in case a reviewer spots something else I need to fix. -- You received this bug notificatio

[Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-05-25 Thread Ryan Tandy
Based on reading apparmor code and changes, it sounds like changing 'w' to 'rw' actually is the correct fix (f.ex. [1]). My proposed merge (bug 1395098) includes that change. This should probably be SRUed to U and V after getting fixed in the development release. Considering that ldapi is our defa

[Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-05-29 Thread Ryan Tandy
** Patch added: "vivid patch" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1392018/+attachment/4406776/+files/openldap_2.4.31-1%2Bnmu2ubuntu12.2.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu.

[Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-05-29 Thread Ryan Tandy
** Description changed: - There is a bug in slapd that triggers the profile of apparmor of slapd. + [Impact] - When installing a clean ubuntu 14.10 server and installing slapd with : - apt-get install slapd ldap-utils - configure it with : - dpkg-reconfigure slapd - with ldap address of ldapi:/

Re: [Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-06-01 Thread Ryan Tandy
On Tue, Jun 02, 2015 at 01:36:04AM -, Massé wrote: >Hello! I have a problem with the vivid patch > >sudo patch -p1 < ../openldap_2.4.31-1+nmu2ubuntu12.debdiff >bash: ../openldap_2.4.31-1+nmu2ubuntu12.debdiff: Aucun fichier ou dossier de >ce type That's not a problem with the patch. That's bas

Re: [Bug 1392018] Re: apparmor stops /var/run/ldapi from being read causing ldap to fail

2015-06-17 Thread Ryan Tandy
On Wed, Jun 17, 2015 at 07:28:44AM -, Moritz wrote: >I try to apply the vivid patch, but don't seem to have openldap >installed, only slapd – is that the same? openldap is the source package. slapd is one of the binary packages built from it. http://packages.ubuntu.com/source/vivid/openldap

[Bug 1304446] Re: git is removed when apt-get remove libldap-2.4-2

2014-04-08 Thread Ryan Tandy
libldap-2.4-2 is a system library, required by a lot of applications and other libraries. I don't think this would be considered a bug. Why do you want to remove it? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. ht

[Bug 1304069] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-04-08 Thread Ryan Tandy
The relevant part of the upgrade log: Setting up slapd (2.4.31-1+nmu2ubuntu8) ... Backing up /etc/ldap/slapd.d in /var/backups/slapd-2.4.31-1+nmu2ubuntu3... done. Moving old database directories to /var/backups: - directory dc=ec,dc=oceanit,dc=com... done. Loading from /var/backups/slapd-

[Bug 1040177] Re: slapd install fails when requesting to 'Omit OpenLDAP server configuration"

2014-04-08 Thread Ryan Tandy
** Bug watch added: Debian Bug tracker #709472 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709472 ** Also affects: openldap (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709472 Importance: Unknown Status: Unknown -- You received this bug notification because

[Bug 1103353] Re: Invalid GnuTLS cipher suite strings causes libldap to crash

2014-04-08 Thread Ryan Tandy
Fix committed upstream, will be released in 2.4.40. http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commit;h=7350a52adacb5f258925b14d2bc5136c8f4ddd9b -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https:/

[Bug 1304069] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-04-27 Thread Ryan Tandy
Hi Rod, Did yours also fail with "Directory /var/lib/ldap for dc=example,dc=com not empty, aborting.", like Frank's did? What's left in /var/lib/ldap after that failed upgrade? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap i

[Bug 1304069] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-04-28 Thread Ryan Tandy
Hi Rod, As Frank's upgrade failure was related to the message I quoted, if you didn't see that then chances are you have a different bug. Can you search the log files in /var/log/dist-upgrade for "Setting up slapd" and post the messages after that, like in my quote above? That will tell us which p

Re: [Bug 1304069] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-04-28 Thread Ryan Tandy
Hi Rod, Not sure about the fontconfig warnings, but I assume they're to do with your configuration as I don't see such warnings using the default setup. As far as openldap: On Mon, Apr 28, 2014 at 9:21 AM, rod wrote: > Setting up slapd (2.4.31-1+nmu2ubuntu3) ... > Fontconfig warning: "/etc/font

Re: [Bug 1304069] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-04-28 Thread Ryan Tandy
On Mon, Apr 28, 2014 at 10:13 AM, rod wrote: > Thought my settings were default anyway. How can I find out? I'm not sure, but I think debsums might be able to tell you. > Any way to make sure the upgrade succeeded? I repeatedly did get an > error message + subsequent failure to report. Try the

Re: [Bug 1304069] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-04-28 Thread Ryan Tandy
On Mon, Apr 28, 2014 at 1:14 PM, rod wrote: >Backup path > /var/backups/dc=georchestra,dc=org-2.4.31-1+nmu2ubuntu3.ldapdb exists. > Giving up... That's a leftover from a previous failed upgrade, when your existing database was backed up but it failed before restoring it. Better keep it safe.

Re: [Bug 1304069] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-04-29 Thread Ryan Tandy
On Tue, Apr 29, 2014 at 7:14 AM, rod wrote: > Hi Ryan, > > Sorry I missed your email. > > Things were blocking and I really had to move forward. > I therefore opted for an fresh install. > Everything went well, obviously. > > But this means that we'll probably never know the origin of the problem

[Bug 1003854] Re: Database upgrade/migration fails with nested db directories (lucid to precise)

2014-05-04 Thread Ryan Tandy
Did anyone ever forward this to Debian? The patch seems reasonable to me. I don't know of any situation where bdb/hdb/mdb create subdirectories under /var/lib/ldap, only files. I've committed this to the pkg-openldap Git repository. Thanks for the patch! ** Also affects: openldap (Debian) Imp

[Bug 1316124] Re: Actual Ubuntu Slapd totaly useless for "serious" use

2014-05-05 Thread Ryan Tandy
There's an open request (for a long time) for a backport in Debian: http://bugs.debian.org/685748 A backport should address the question of DB format upgrades when going from release to release. The technique currently used, checking the version of the package being upgraded, will fail if a newer

[Bug 594840] Re: Many "connection_read(): no connection!" warnings from OpenLDAP server when using ldapi:/// and a bind DN (no external authentication)

2014-05-16 Thread Ryan Tandy
Hi, as per the upstream changelog ITS#6548/#7092 were fixed upstream in 2.4.27, so Fix Released in precise and newer. thanks, Ryan ** Bug watch added: Debian Bug tracker #643970 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=643970 ** Changed in: openldap (Debian) Importance: Undecided

[Bug 1304069] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-05-19 Thread Ryan Tandy
Hi Christopher, The error message you reported: olcDbDirectory: value #0: invalid path: No such file or directory is also not the same one this bug is about, and your message doesn't include enough information to tell what caused it. Would you please file a separate bug report about that? Make s

Re: [Bug 908112] Re: #110992 still happens (modules are not loaded)

2014-05-29 Thread Ryan Tandy
On Thu, May 29, 2014 at 7:56 AM, Jason N <908...@bugs.launchpad.net> wrote: > I don't see a version anywhere close to 4.0.17 available to me on 12.04 LTS. Jörg has recently uploaded ipmitool 1.8.14 and foomatic-filters 4.0.17 to Debian, so I guess that's a typo. Jörg, if you are reading this: ple

  1   2   >