389-devel January 2009

389-devel@lists.fedoraproject.org

6 participants
26 discussions

[Fedora-directory-devel] Please review: Bug 431681 - Fix java detection on Windows XP
by Rich Megginson 30 Jan '09

30 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=431681 Resolves: bug 431681 Bug Description: Fix java detection on Windows XP Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: Just use "java -version" to test for the presence of java Platforms tested: Windows 2003 server Flag Day: no Doc impact: no https://bugzilla.redhat.com/show_bug.cgi?id=431681#c4

1 0

[Fedora-directory-devel] Please review: Bug 430364 - setup-ds-admin.pl does not correctly set the admin server ip address
by Rich Megginson 29 Jan '09

29 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=430364 Resolves: bug 430364 Bug Description: setup-ds-admin.pl does not correctly set the admin server ip address Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: If the admin server advertises its IP address in its cn=config nsServerAddress, the console will attempt to use the address instead of hostname (which will break https, btw). If the address is set to 0.0.0.0, clients cannot use this, so must fall back on the hostname. Platforms tested: RHEL5 Flag Day: no Doc impact: no https://bugzilla.redhat.com/attachment.cgi?id=330404&action=diff

1 0

[Fedora-directory-devel] Please review: Bug 482909 - server seg fault if doing SSLCLIENTAUTH without being an ssl server
by Rich Megginson 28 Jan '09

28 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=482909 Resolves: bug 482909 Bug Description: server seg fault if doing SSLCLIENTAUTH without being an ssl server Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: When I changed the code to allow the DS to be an SSL client without having to be an SSL server, I missed the svrcore setup for EXTERNAL (ssl client auth). The fix is to check to see if svrcore has been set up, and initialize it if not, before attempting to use it. Platforms tested: RHEL5 Flag Day: no Doc impact: no https://bugzilla.redhat.com/attachment.cgi?id=330282&action=diff

1 0

[Fedora-directory-devel] Please Review: (430364) setup-ds-admin.pl does not correctly set the admin server ip address
by Nathan Kinder 27 Jan '09

27 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=430364 Resolves: bug 430364 Bug Description: When the IP address for the admin server to listen on is specified in the inf file, it is not used in the config DS or in the console.conf config file. Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: The first issue is that an error was being returned by the config CGI when attempting to set the IP address in console.conf, but the AdminServer.pm code was not detecting this error. This caused the install to not error out reporting that there was a problem with the IP address. The second issue is that the validation of the IP address in the config CGI was too strict. To validate the IP address, we were getting the hostname of the system, doing a reverse lookup to get the addresses associated with that hostname, then checking if any of those addresses matched the one form the .inf file. If the requested address is assigned to a different hostname, this validation will fail. The fix is to simply try to bind the address to a socket to see if the address is valid. We don't need to care what hostname it is associated with, we just need to know that the address is assigned to the system. The third issue is that the template file for the "o=NetscapeRoot" entry was missing a replace macro for the "nsServerAddress" attribute. The fix just adds the macro and maps it to the ServerIpAddress .inf directive. Platforms tested: F9 Flag Day: no Doc impact: no https://bugzilla.redhat.com/attachment.cgi?id=330174&action=diff

1 0

[Fedora-directory-devel] Please review: Bug 479253 - Configuring Server to Server GSSAPI over SSL - Need better Error Message
by Rich Megginson 27 Jan '09

27 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=479253 Resolves: bug 479253 Bug Description: Configuring Server to Server GSSAPI over SSL - Need better Error Message Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: If the user attempts to set the bind mech to GSSAPI, and a secure transport is being used, the server will return LDAP_UNWILLING_TO_PERFORM and provide a useful error message. Same if GSSAPI is being used and the user attempts to use a secure transport. Platforms tested: RHEL5 Flag Day: no Doc impact: no https://bugzilla.redhat.com/attachment.cgi?id=330144&action=diff

1 0

[Fedora-directory-devel] Please review: Bug 481223 - Removing Group Member in ADS and Send and Recieve Updates Crashes the Directory Server
by Rich Megginson 26 Jan '09

26 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=481223 Resolves: bug 481223 Bug Description: Removing Group Member in ADS and Send and Receive Updates Crashes the Directory Server Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: I broke this with my earlier fix about sending mods to AD. There are calls which reset the raw entry from AD before the call to mod_already_made. The fix is to only retrieve the raw entry just before we use it, after it may have been reset. I also found a memory leak in the mod init with valueset function I added for the prior fix. Platforms tested: RHEL5 Flag Day: no Doc impact: no https://bugzilla.redhat.com/attachment.cgi?id=329993&action=diff

1 0

[Fedora-directory-devel] Please review: Bug 481176 - Null Point Exception Attempting to Install CA Certifcate
by Rich Megginson 23 Jan '09

23 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=481176 Resolves: bug 481176 Bug Description: Null Point Exception Attempting to Install CA Certifcate Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: The problem is that the certificate is not recognized by NSS as a CA certificate because it is missing some flags and the basic constraint extension for CAs. The wizard code wrongly assumed that any certificate being installed in this context is a CA cert. I changed the code to handle other types of certs. However, this doesn't fix the problem where the CA cert shows up under Server Certs instead of CA Certs, because only "real" CA certs with the proper settings will show up under the CA Certs list. Platforms tested: RHEL5 Flag Day: no Doc impact: no https://bugzilla.redhat.com/attachment.cgi?id=329744&action=diff

1 0

[Fedora-directory-devel] Gentoo and Admin Server
by Mario Fetka 21 Jan '09

21 Jan '09

Hallo, the problem could be gentoo specific so i am asking on the devel list. some infos on the system: apr-utils are build against mozldap (not openldap) so also apache is build against mozldap the dirsrv-admin initscript is only a modified apache intiscript (no LD_PRELOAD ) the error i am facing is: cat /var/log/dirsrv/admin-serv/error [Wed Jan 21 16:14:45 2009] [crit] do_admserv_post_config(): unable to create AdmldapInfo Configuration Failed [Wed Jan 21 16:20:48 2009] [crit] do_admserv_post_config(): unable to create AdmldapInfo Configuration Failed thx in av Mario

1 0

[Fedora-directory-devel] Please Review: (480384) online schema update fails with SUP
by Nathan Kinder 19 Jan '09

19 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=480384 Resolves: bug 480384 Bug Description: If you attempt to add a new attribute to the schema over LDAP, the server will not find the parent attribute if you use an alias to refer to it in the attribute definition. Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: The fix is to check if the parent attribute name used in the new definition matches any aliases when looking for the parent. Platforms tested: F9 x86_64 Flag Day: no Doc impact: no https://bugzilla.redhat.com/attachment.cgi?id=329398&action=diff

1 0

[Fedora-directory-devel] Please Review: (474945) Adding duplicate schema over LDAP triggers assertion in attrsyntax
by Nathan Kinder 19 Jan '09

19 Jan '09

https://bugzilla.redhat.com/show_bug.cgi?id=474945 Resolves: bug 474945 Bug Description: An assertion is triggered when adding a duplicate attribute to the schema over LDAP in a debug build. Reviewed by: ??? Files: see diff Branch: HEAD Fix Description: We were calling attr_syntax_delete() on a syntax that we fetched using attr_syntax_get_by_name_locking_optional(). You are supposed to use attr_syntax_return() when you are finished with a syntax that you fetch in this way, which will take care of freeing it if it is required. There was already code that was doing the proper thing, so the call to attr_syntax_delete() can simply be removed. Platforms tested: RHEL5 Flag Day: no Doc impact: no https://bugzilla.redhat.com/attachment.cgi?id=329387&action=diff

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-devel January 2009