Re: (ITS#6056) Samba4 breaks OpenLDAP over ldapi

[abartlet@samba.org]

--=-0SnOgocYLpYqWd2pGoMe
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Tue, 2009-05-26 at 04:26 -0700, Howard Chu wrote:
> abartlet@samba.org wrote:
> > Full_Name: Andrew Bartlett
> > Version: CVS HEAD
> > OS: Fedora 10
> > URL: ftp://ftp.openldap.org/incoming/
> > Submission from: (NULL) (59.167.251.137)
> >
> >
> > Samba4's provision and 'make test' seems to create some internal situat=
ion in
> > OpenLDAP slapd where it will not accept any more connections over ldapi=
:///
> >
> > This is best seen by building Samba4, and running
> >
> > TEST_LDAP=3Dyes OPENLDAP_ROOT=3D/usr/local make test
> >
> > The slapd does not crash, but simply stops accepting new connections.  =
Samba4
> > currently then crashes due to some other bug (the LDAP backend not resp=
onding is
> > clearly untested code in Samba4).
> >
> > It isn't a Samba4 client bug, as ldapsearch also fails to respond.
> >
> > This seems very, very similar to ITS#5261
>=20
> Further testing with Andrew's kvm image shows the hang only occurs when C=
yrus=20
> SASL's libsasldb2.so plugin is present. I always remove that plugin from =
my=20
> installs, since I only use in-directory SASL secrets. That's probably why=
 I=20
> wasn't seeing the reported behavior before.
>=20
> Also a note - it's still not clear we've been talking about the same thin=
g up=20
> to this point. Even when the samba test suite hangs, I see that ldapsearc=
h=20
> still works fine against slapd. At any rate, currently all of the samba4 =
tests=20
> pass for me.

Hmm.  Using that KVM image, with the libsasldb moved aside (and with it
left in place), I still get errors. =20

However, there is an important difference:  Where previously, once it
locked up nothing proceeded, now it proceeds - as if the failure is
temporary now.  The error has changed too - instead of a failure to
connect, it is an inability to successfully read the rootDSE.=20

I agree, we might be jumping at different shadows here, but your patches
did fix something...

Andrew Bartlett

--=20
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.

--=-0SnOgocYLpYqWd2pGoMe
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQBKHeuvz4A8Wyi0NrsRAoaGAJ9olpo9+ni006pt9kK5CkXJObYNCQCgorgP
DswBOLRtdrlhFHibmX4XrC4=
=bjw6
-----END PGP SIGNATURE-----

--=-0SnOgocYLpYqWd2pGoMe--