[Bug 594840] Re: Many "connection_read(): no connection!" warnings from OpenLDAP server when using ldapi:/// and a bind DN (no external authentication)

2014-06-02 Thread Ryan Tandy
Hi Aleksey, It's normal for slapd to emit that message if a client disconnects without unbinding. If you turn slapd's loglevel up a bit, say to "stats", you should see enough information preceding that message to tell whether that's the case. If you see that message even though every client did a

[Bug 1333163] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-06-23 Thread Ryan Tandy
Hi Torkil, The error message from the upgrade is really unusual: slapadd: line 1: cannot add entry with empty dn="" Did your previous database actually contain an entry with an empty dn? Does the dump that was created during the upgrade actually correspond to the previous state of your data

Re: [Bug 1333163] Re: package slapd 2.4.31-1+nmu2ubuntu8 failed to install/upgrade: ErrorMessage: subprocess installed post-installation script returned error exit status 1

2014-06-24 Thread Ryan Tandy
On 24/06/14 03:11 AM, Torkil Svensgaard wrote: > I noticed that the two topmost entries in the file had empty dn > fields. OK, so that part at least is confirmed. Can you do "sudo -u openldap slapcat > /tmp/db.ldif" and see whether that file has those entries? e.g. "grep '^dn: $' /tmp/db.ldif"

[Bug 652433] Re: Init script dependency error: krb5-kdc starts before slapd

2011-08-17 Thread Ryan Tandy
I have noticed that the slapd init script terminates before slapd is actually ready to accept connections, and I think that is the problem you're having too. In my scripts that stop/start slapd I always have to insert a 'sleep 1' before I can do any LDAP operations. I've also noticed that on a su

[Bug 828237] Re: slapd forks and exits before it is listening, creating a race between listening and any dependent services

2011-08-18 Thread Ryan Tandy
Thanks for the tip about it having been fixed already. The patch from oneiric applies cleanly to the lucid version so I have added it to my local package. It seems to work fine. I guess the issue isn't severe enough to merit SRUing? -- You received this bug notification because you are a membe

[Bug 652433] Re: Init script dependency error: krb5-kdc starts before slapd

2011-08-18 Thread Ryan Tandy
Thanks Clint for following up on that. I added the service-operational- before-detach patch from oneiric to my slapd and from initial testing it looks like it works as advertised. With that change (and the init scripts re-ordered) my kdc is now starting properly even on fast machines. -- You re

[Bug 1047262] Re: race condition on startup between samba and cups

2013-09-26 Thread Ryan Tandy
I tried the reload-smbd job on Precise but it doesn't work. The job is definitely started after cups but the queues still aren't there. Works fine in Quantal. Running 'start smbd; start cups; reload smbd' while the system is running does work, and adding a 'sleep 1' to reload.smbd.conf also works,

[Bug 1347954] Re: build slapd-sha2 module for strong passwords

2014-07-23 Thread Ryan Tandy
** Bug watch added: Debian Bug tracker #746727 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746727 ** Also affects: openldap (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746727 Importance: Unknown Status: Unknown -- You received this bug notification because

[Bug 1347954] Re: build slapd-sha2 module for strong passwords

2014-07-23 Thread Ryan Tandy
This is pending for the Debian package and will eventually get merged into Ubuntu. If you use cn=config, note that setting olcPasswordHash to a scheme provided by a module will prevent slapd from starting, since cn=module is processed later; this is unfixed upstream. Until pw-sha2 lands, you may w

Re: [Bug 1348259] [NEW] Openldap config modify tls error

2014-07-24 Thread Ryan Tandy
On Thu, Jul 24, 2014 at 9:24 AM, Danny Hernandez wrote: > ldap_modify: Other (e.g., implementation specific) error (80) > additional info: Error: parse_syncrepl_line: unable to parse > "bindmethod=simplebinddn=cn=admin,dc=example,dc=com" Typo? Needs a space between 'bindmethod=simple' an

[Bug 1359425] Re: ldif_read_file: checksum error on - NO MNAUL EDITING

2014-08-20 Thread Ryan Tandy
Not an OpenLDAP bug. > Aug 21 00:41:33 mpi1 slapd[13499]: ldif_read_file: checksum error on > "/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif" Webmin has modified it. File a bug against Webmin. (Reproduced with the latest version of Webmin.) > Aug 21 00:41:33 mpi1 slapd[13499]: config err

[Bug 322944] Re: slapd upgrade fails: chown: cannot access `olcDbDirectory\nolcDbDirectory': No such file or directory

2014-08-27 Thread Ryan Tandy
Hi Peder, Can you please try the patch from Debian bug #723957: https://bugs.debian.org/cgi- bin/bugreport.cgi?msg=10;filename=fix-723957.debdiff;att=1;bug=723957 (apply it to slapd.postinst) and see whether it resolves the problem for you? If it still fails, I'd appreciate a dump of your confi

[Bug 1362481] Re: openldap upgrade fails. chwon of olcDbDirectory, /var/lib/ldap not empty and missing backup of suffix

2014-08-28 Thread Ryan Tandy
Thanks for the report. At a glance, this appears like a more detailed duplicate of your comment on bug 322944; is that right, or is it a separate bug? Either way, if it's possible for you to provide a copy of your configuration that fails (with sensitive details/passwords removed), or steps to cons

[Bug 322944] Re: slapd upgrade fails: chown: cannot access `olcDbDirectory\nolcDbDirectory': No such file or directory

2014-08-28 Thread Ryan Tandy
The reporter's case is fixed in quantal and later by this change: http://anonscm.debian.org/cgit/pkg- openldap/openldap.git/commit/debian/slapd.scripts- common?id=c8d1f619c8e151704508b671a7c801d9863e183e and Mark Powell's case, if I've understood it correctly, is fixed in natty and later by this

[Bug 1362481] Re: openldap upgrade fails. chwon of olcDbDirectory, /var/lib/ldap not empty and missing backup of suffix

2014-08-28 Thread Ryan Tandy
son to move forward on that. Probably it would be most robust to use slap{cat,add} -nN instead of -b $suffix; at least that would have the least chance for ambiguity. ** Changed in: openldap (Ubuntu) Status: New => In Progress ** Changed in: openldap (Ubuntu) Assignee: (unassigned) =&

[Bug 1362481] Re: openldap upgrade fails. chwon of olcDbDirectory, /var/lib/ldap not empty and missing backup of suffix

2014-08-28 Thread Ryan Tandy
** Bug watch added: Debian Bug tracker #759596 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759596 ** Also affects: openldap (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759596 Importance: Unknown Status: Unknown -- You received this bug notification because

[Bug 632051] Re: Improve slapd postinst error message in case database directory can't be determined for a given LDAP suffix

2014-08-29 Thread Ryan Tandy
** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rtandy) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/632051 Title: Improve slapd postinst er

[Bug 571498] Re: slapd.postinst should put all backed-up items together in one place under /var/backups

2014-08-29 Thread Ryan Tandy
** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rtandy) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/571498 Title: slapd.postinst should put

[Bug 450645] Re: error during slapd configuration: chown: cannot access `olcDbDirectory\nolcDbDirectory'

2014-08-29 Thread Ryan Tandy
In quantal and later, the grep invocation was adjusted to only check *.ldif: http://anonscm.debian.org/cgit/pkg- openldap/openldap.git/commit/debian/slapd.scripts- common?id=c8d1f619c8e151704508b671a7c801d9863e183e Therefore, setting to Fix Released. There may be other causes that result in a si

[Bug 571481] Re: when slapd upgrade fails, later upgrade attempts overwrite saved backups of pre-upgrade configuration files

2014-08-29 Thread Ryan Tandy
** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rtandy) ** Bug watch added: Debian Bug tracker #757550 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757550 ** Also affects: openldap (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=757

[Bug 1362481] Re: openldap upgrade fails. chwon of olcDbDirectory, /var/lib/ldap not empty and missing backup of suffix

2014-08-29 Thread Ryan Tandy
Thanks for the links. Several of those actually describe things I was already planning to work on. Good to have the bug #s for proper tracking and closing. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs

[Bug 1103353] Re: Invalid GnuTLS cipher suite strings causes libldap to crash

2014-09-02 Thread Ryan Tandy
** Also affects: openldap (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=640384 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.n

[Bug 1033096] Re: request to have sha2 module in contrib included in package

2014-09-02 Thread Ryan Tandy
** Bug watch added: Debian Bug tracker #746727 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746727 ** Also affects: openldap (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746727 Importance: Unknown Status: Unknown -- You received this bug notification because

[Bug 1347954] Re: build slapd-sha2 module for strong passwords

2014-09-02 Thread Ryan Tandy
*** This bug is a duplicate of bug 1033096 *** https://bugs.launchpad.net/bugs/1033096 ** This bug has been marked a duplicate of bug 1033096 request to have sha2 module in contrib included in package -- You received this bug notification because you are a member of Ubuntu Server Team, wh

[Bug 676503] Re: slapd 2.4.21 memory leak in syncprov

2014-09-02 Thread Ryan Tandy
ITS#6459 is fixed in maverick (2.4.23) and later. Setting to Fix Released. ** Changed in: openldap (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launc

Re: [Bug 1376548] [NEW] service slapd stop fails

2014-10-02 Thread Ryan Tandy
Hi Paul, Thanks for the report. On Wed, Oct 1, 2014 at 8:03 PM, Paul Bickerstaff wrote: > In "Ubuntu 14.04.1 LTS" amd64 with slapd package version > "2.4.31-1+nmu2ubuntu8", "OpenLDAP server (slapd)", executing the > following standard service command fails to have effect. Is there any output fr

[Bug 1026057] Re: Segfault when setting bad olcTLSCipherSuite

2014-10-02 Thread Ryan Tandy
*** This bug is a duplicate of bug 1103353 *** https://bugs.launchpad.net/bugs/1103353 ** This bug has been marked a duplicate of bug 1103353 Invalid GnuTLS cipher suite strings causes libldap to crash -- You received this bug notification because you are a member of Ubuntu Server Team, w

[Bug 1376548] Re: service slapd stop fails

2014-10-03 Thread Ryan Tandy
On Fri, Oct 3, 2014 at 5:32 AM, Paul Bickerstaff wrote: > Experimentation showed that --exec was failing and it was because > /proc/$(pidof slapd)/exe could not be read ("Permission denied" to > root). > > It has occurred to me belatedly that this is because I'm running slapd > inside a docker con

[Bug 1003854] Re: Database upgrade/migration fails with nested db directories (lucid to precise)

2014-10-22 Thread Ryan Tandy
Fixed in Debian in 2.4.40-1. ** Changed in: openldap (Debian) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/1003854 Title: Database u

[Bug 576957] Re: passwd crashed when the password is changed through pam_ldap

2014-10-26 Thread Ryan Tandy
Hi, Nikita Borzykh (sample-n) wrote on 2010-06-11: > Workaround from debian libldap This change was included upstream in OpenLDAP 2.4.10, which entered Ubuntu in Intrepid. Therefore, setting to Fix Released. ** Changed in: openldap (Ubuntu) Status: Fix Committed => Fix Released -- You r

[Bug 368044] Re: slapd crash when using SQL backend

2014-10-26 Thread Ryan Tandy
Hi, This appears to be the same as ITS#6172 upstream, fixed in 2.4.18, so Karmic and later. Therefore, marking Fix Released. ** Changed in: openldap (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is sub

[Bug 1386194] Re: openLDAP creates persistent connections into universisty LDAP- this is unwanted by university administrators

2014-10-27 Thread Ryan Tandy
Hi, Thank you for reporting this and helping to make Ubuntu better. Peter Fodrek wrote: > cat /etc/ldap.conf This is the configuration file for libnss-ldap, which is not part of OpenLDAP. If you need assistance with configuring libnss-ldap or libpam- ldap, I suggest contacting the support channe

[Bug 1393306] [NEW] slapd: nssov does not work with lib{nss, pam}-ldapd 0.9.x

2014-11-16 Thread Ryan Tandy
o carry on with it I'm happy to provide my WIP. ** Affects: openldap (Ubuntu) Importance: Undecided Assignee: Ryan Tandy (rtandy) Status: In Progress ** Tags: utopic vivid ** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rtandy) ** Changed in

[Bug 1394764] Re: package slapd 2.4.21-0ubuntu5.6 failed to install/upgrade: ErrorMessage: subprocess new pre-installation script returned error exit status 1

2014-11-20 Thread Ryan Tandy
The relevant part from VarLogDistupgradeApttermlog.gz: Stopping OpenLDAP: slapd. Dumping to /var/backups/slapd-2.4.21-0ubuntu5.6: - directory dc=ens,dc=org,dc=lu... 546e5ed5 slap_sasl_init: auxprop add plugin failed slapcat: slap_init failed! failed. This looks like bug 990742, which was re

[Bug 1359799] Re: /etc/init.d/nbd-server doesn't reload.

2014-12-15 Thread Ryan Tandy
Looks like this is fixed in https://launchpad.net/ubuntu/+source/nbd/1:3.8-2 which is in Vivid. http://bazaar.launchpad.net/~ubuntu- branches/ubuntu/vivid/nbd/vivid/revision/52#debian/nbd-server.init.d Marking Fix Released. ** Changed in: nbd (Ubuntu) Status: Confirmed => Fix Released --

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2014-12-20 Thread Ryan Tandy
** Changed in: openldap (Ubuntu) Status: Confirmed => In Progress ** Changed in: openldap (Ubuntu) Assignee: (unassigned) => Ryan Tandy (rtandy) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2014-12-22 Thread Ryan Tandy
Hello server team, hello sponsors, Please consider reviewing and sponsoring the attached openldap merge. Build/test results: https://launchpad.net/~rtandy/+archive/ubuntu/lp1395098 I would be happy to answer questions or address any comments. Thank you! ** Patch added: "debdiff from debian tes

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2014-12-22 Thread Ryan Tandy
** Attachment added: "openldap_2.4.40-3ubuntu1_source.changes" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1395098/+attachment/4285935/+files/openldap_2.4.40-3ubuntu1_source.changes ** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Serv

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2014-12-22 Thread Ryan Tandy
** Patch added: "openldap_2.4.40-3ubuntu1.diff.gz" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1395098/+attachment/4285934/+files/openldap_2.4.40-3ubuntu1.diff.gz -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug r

[Bug 1395098] Re: [Utopic] OpenLDAP version is outdated

2014-12-22 Thread Ryan Tandy
** Attachment added: "openldap_2.4.40-3ubuntu1.dsc" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1395098/+attachment/4285933/+files/openldap_2.4.40-3ubuntu1.dsc -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug repo

<    1   2