[Date Prev][Date Next] [Chronological] [Thread] [Top]
Re: (ITS#7905) rwm_attrs: Assertion failed

To: openldap-its@OpenLDAP.org
Subject: Re: (ITS#7905) rwm_attrs: Assertion failed
From: andreas.schoe@gfz-potsdam.de
Date: Fri, 25 Jul 2014 10:34:59 GMT
Auto-submitted: auto-generated (OpenLDAP-ITS)
--Apple-Mail=_C218ED3F-A76E-4570-8833-063C70827424
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252

Hello,

you could reproduce it on a Single instance with the following ldif =
file:

ldapadd -h localhost -D "cn=3Dldapadmin,ou=3Dconf,dc=3Dexample,dc=3Dde" =
-w 'test' -f ldif.ldif
<ldif.ldif>
dn: dc=3Dexample,dc=3Dde
dc: example
objectClass: top
objectClass: organization
objectClass: dcObject
o: EXAMPLE

dn: ou=3DPeople,dc=3Dexample,dc=3Dde
objectClass: top
objectClass: organizationalUnit
ou: People

dn: uid=3Dandi,ou=3DPeople,dc=3Dexample,dc=3Dde
uid: andi
uidNumber: 12
gidNumber: 20
homeDirectory: /home/andi
loginShell: /bin/tcsh
objectClass: exPassword
objectClass: top
objectClass: posixAccount
objectClass: person
sn: Schoe
cn: Andreas Schoe
gfzNisPassword: {CRYPT}i.hBxh9rngIPE
<ldif>

schema for Attribute:
{0}( 1.3.6.1.4.1.25398.511 NAME 'nisPassword' DESC 'Password for NIS' =
EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 =
X-ORIGIN 'user defined' )
{0}( 1.3.6.1.4.1.25398.500 NAME 'exPassword' DESC 'additional attributes =
for accounts' SUP top AUXILIARY MAY ( nisPassword  ) X-ORIGIN 'user =
defined=91 )

rwm config:
olcRwmMap: {0}attribute gfzNisPassword userPassword

ldapsearch -h rzc37 -D "uid=3Dandi,ou=3DPeople,dc=3Dexample,dc=3Dde" -w =
'te' -b "dc=3Dexample,dc=3Dde" -x -LLL '(uid=3Dandi)'=20
Still the same Error: slapd: rwm.c:1286: rwm_attrs: Assertion =
`(*ap)->a_nvals =3D=3D (*ap)->a_vals' failed.

that worked:
ldapsearch -h localhost -D "uid=3Dandi,ou=3DPeople,dc=3Dexample,dc=3Dde" =
-w 'te' -b "dc=3Dexample,dc=3Dde" -x -LLL '(uid=3Dandi)' cn

best regards
andreas

Am 24.07.2014 um 21:35 schrieb andreas.schoe@gfz-potsdam.de:

> Full_Name: Andreas Schoe
> Version: 2.4.39
> OS: linux/gentoo
> URL:=20
> Submission from: (NULL) (139.17.31.83)
>=20
>=20
> First I want to use a proxy to authenticate against another password =
attribute
> but with a proxy I can not "map" the userPassword Attirbute for bind =
operation.
> For search operations it worked. I recognized, that write operations =
can rewrite
> the userpassword attribute. I setup two ldap servers one Master and =
one Slave.
> On the Slave I use first refreshOnly and than refreshAndPersists. The =
issue are
> still the same for Syncrepl as refreshOnly and refreshAndPersists. On =
the Slave
> I also use the RWM Overlay to override the userPassword attribute.=20
>=20
> example for syncrepl:
> {0}rid=3D001 provider=3Dldaps://ldap.example.de/ tls_reqcert=3Dnever =
binddn=3D""
> bindmethod=3Dsimple credentials=3D searchbase=3D=84dc=3Dexample,dc=3Dde"=

> filter=3D"(|(ou=3DPeople)(uid=3Dandi))" =
attrs=3D=84sn,cn,mail,uid,nisPassword,+"
> schemachecking=3Doff type=3DrefreshOnly interval=3D00:00:01:00 =
retry=3D"1 1 100 +"
> timeout=3D1
>=20
> rwm config:
> {0}attribute nisPassword userPassword
>=20
> That works fine, I can bind against the Slave with the nisPassword =
from the
> Master, but when I try a ldapsearch with requesting all attributes the =
server
> crashes. Same with "ldapsearch (uid=3Dandi) userpassword nispassword"
> "ldapsearch (uid=3Dandi) cn sn" worked
>=20
> After crashing the server restarts when nisPassword on Master isn=B4t =
changed.
> After changing nisPassword on the Master the Server won=B4t start.
>=20
> The Error is:
> slapd: rwm.c:1286: rwm_attrs: Assertion `(*ap)->a_nvals =3D=3D =
(*ap)->a_vals'
> failed.
>=20
> tried with hdb and bdb backend and schemacking=3Don, every time the =
same Error
>=20
> try the same with other attributes
> syncrepl:attrs=3D=84sn,mail,uid,nisPassword,+"
> rwm config
> {0}attribute sn cn
>=20
> "ldapsearch (uid=3Dandi) sn" worked
>=20


--Apple-Mail=_C218ED3F-A76E-4570-8833-063C70827424
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_C218ED3F-A76E-4570-8833-063C70827424--
Prev by Date: Re: (ITS#7789) Unreliable mdb_env_set_mapsize()
Next by Date: Re: (ITS#7789) Unreliable mdb_env_set_mapsize()
Index(es):
- Chronological
- Thread