smbk5pwd: ldappassword hangs

[Frank Van Damme <frank.vandamme@gmail.com>]

Hi list,

I installed and configured the smbk5pwd overlay as described on
http://student.physik.uni-mainz.de/~reiffert/smbk5pwd.html#smbk5pwd.
This succeeded, the module is loaded etc. But an unwelcome side effect
is that password changes don't function anymore. With the
overlay/module disabled, there is no problem; if I enable it, the
"ldappasswd" command hangs. I marked where I hit Ctrl-C on the hanging
ldappasswd command.

This is the slapd log...
daemon: activity on 1 descriptor
daemon: activity on:
slap_listener_activate(7):
daemon: epoll: listen=7 busy
>>> slap_listener(ldap://127.0.0.1/)
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=9 active_threads=0 tvp=zero
daemon: epoll: listen=10 active_threads=0 tvp=zero
daemon: listen=7, new connection on 15
daemon: added 15r (active) listener=(nil)
conn=1 fd=15 ACCEPT from IP=127.0.0.1:37250 (IP=127.0.0.1:389)
daemon: activity on 2 descriptors
daemon: activity on: 15r
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=9 active_threads=0 tvp=zero
daemon: epoll: listen=10 active_threads=0 tvp=zero
daemon: activity on 1 descriptor
daemon: activity on: 15r
daemon: read active on 15
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=9 active_threads=0 tvp=zero
daemon: epoll: listen=10 active_threads=0 tvp=zero
connection_get(15)
connection_get(15): got connid=1
connection_read(15): checking for input on id=1
ber_get_next
ldap_read: want=8, got=8
 0000:  30 43 02 01 01 60 3e 02                            0C...`>.
ldap_read: want=61, got=61
 0000:  01 03 04 2f 75 69 64 3d  74 72 79 6f 75 74 2c 6f   .../uid=tryout,o
 0010:  75 3d 50 65 6f 70 6c 65  2c 64 63 3d 6f 74 65 63   u=People,dc=otec
 0020:  2c 64 63 3d 76 75 62 2c  64 63 3d 61 63 2c 64 63   ,dc=vub,dc=ac,dc
 0030:  3d 62 65 80 08 4d 68 43  30 47 6a 4d 4a            =be..MhC0GjMJ
ber_get_next: tag 0x30 len 67 contents:
ber_dump: buf=0x824c518 ptr=0x824c518 end=0x824c55b len=67
 0000:  02 01 01 60 3e 02 01 03  04 2f 75 69 64 3d 74 72   ...`>..../uid=tr
 0010:  79 6f 75 74 2c 6f 75 3d  50 65 6f 70 6c 65 2c 64   yout,ou=People,d
 0020:  63 3d 6f 74 65 63 2c 64  63 3d 76 75 62 2c 64 63   c=otec,dc=vub,dc
 0030:  3d 61 63 2c 64 63 3d 62  65 80 08 4d 68 43 30 47   =ac,dc=be..MhC0G
 0040:  6a 4d 4a                                           jMJ
ber_get_next
ldap_read: want=8 error=Resource temporarily unavailable
conn=1 op=0 do_bind
ber_scanf fmt ({imt) ber:
ber_dump: buf=0x824c518 ptr=0x824c51b end=0x824c55b len=64
 0000:  60 3e 02 01 03 04 2f 75  69 64 3d 74 72 79 6f 75   `>..../uid=tryou
 0010:  74 2c 6f 75 3d 50 65 6f  70 6c 65 2c 64 63 3d 6f   t,ou=People,dc=o
 0020:  74 65 63 2c 64 63 3d 76  75 62 2c 64 63 3d 61 63   tec,dc=vub,dc=ac
 0030:  2c 64 63 3d 62 65 80 08  4d 68 43 30 47 6a 4d 4a   ,dc=be..MhC0GjMJ
ber_scanf fmt (m}) ber:
ber_dump: buf=0x824c518 ptr=0x824c551 end=0x824c55b len=10
 0000:  00 08 4d 68 43 30 47 6a  4d 4a                     ..MhC0GjMJ
>>> dnPrettyNormal: <uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be>
=> ldap_bv2dn(uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be,0)
<= ldap_bv2dn(uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=tryout,ou=people,dc=otec,dc=vub,dc=ac,dc=be)=0
<<< dnPrettyNormal: <uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be>,
<uid=tryout,ou=people,dc=otec,dc=vub,dc=ac,dc=be>
daemon: activity on 1 descriptor
conn=1 op=0 BIND dn="uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be" method=128
do_bind: version=3
dn="uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be" method=128
==> hdb_bind: dn: uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be
bdb_dn2entry("uid=tryout,ou=people,dc=otec,dc=vub,dc=ac,dc=be")
=> hdb_dn2id("ou=people,dc=otec,dc=vub,dc=ac,dc=be")
<= hdb_dn2id: got id=0x4
=> hdb_dn2id("uid=tryout,ou=people,dc=otec,dc=vub,dc=ac,dc=be")
<= hdb_dn2id: got id=0x22
entry_decode: ""
<= entry_decode()
=> access_allowed: auth access to
"uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be" "userPassword"
requested
=> acl_get: [1] attr userPassword
=> slap_access_allowed: result not in cache (userPassword)
=> acl_mask: access to entry
"uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be", attr "userPassword"
requested
=> acl_mask: to value by "", (=0)
<= check a_dn_pat: cn=admin,dc=otec,dc=vub,dc=ac,dc=be
<= check a_dn_pat: anonymous
<= acl_mask: [2] applying auth(=xd) (stop)
<= acl_mask: [2] mask: auth(=xd)
=> slap_access_allowed: auth access granted by auth(=xd)
=> access_allowed: auth access granted by auth(=xd)
conn=1 op=0 BIND dn="uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be"
mech=SIMPLE ssf=0
do_bind: v3 bind: "uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be" to
"uid=tryout,ou=People,dc=otec,dc=vub,dc=ac,dc=be"
send_ldap_result: conn=1 op=0 p=3
send_ldap_result: err=0 matched="" text=""
send_ldap_response: msgid=1 tag=97 err=0
ber_flush2: 14 bytes to sd 15
 0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00         0....a........
ldap_write: want=14, written=14
 0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00         0....a........
conn=1 op=0 RESULT tag=97 err=0 text=
daemon: activity on:
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=9 active_threads=0 tvp=zero
daemon: epoll: listen=10 active_threads=0 tvp=zero
daemon: activity on 1 descriptor
daemon: activity on: 15r
daemon: read active on 15
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=9 active_threads=0 tvp=zero
daemon: epoll: listen=10 active_threads=0 tvp=zero
connection_get(15)
connection_get(15): got connid=1
connection_read(15): checking for input on id=1
ber_get_next
ldap_read: want=8, got=8
 0000:  30 1e 02 01 02 77 19 80                            0....w..
ldap_read: want=24, got=24
 0000:  17 31 2e 33 2e 36 2e 31  2e 34 2e 31 2e 34 32 30   .1.3.6.1.4.1.420
 0010:  33 2e 31 2e 31 31 2e 31                            3.1.11.1
ber_get_next: tag 0x30 len 30 contents:
ber_dump: buf=0x824d060 ptr=0x824d060 end=0x824d07e len=30
 0000:  02 01 02 77 19 80 17 31  2e 33 2e 36 2e 31 2e 34   ...w...1.3.6.1.4
 0010:  2e 31 2e 34 32 30 33 2e  31 2e 31 31 2e 31         .1.4203.1.11.1
ber_get_next
ldap_read: want=8 error=Resource temporarily unavailable
conn=1 op=1 do_extended
ber_scanf fmt ({m) ber:
ber_dump: buf=0x824d060 ptr=0x824d063 end=0x824d07e len=27
 0000:  77 19 80 17 31 2e 33 2e  36 2e 31 2e 34 2e 31 2e   w...1.3.6.1.4.1.
 0010:  34 32 30 33 2e 31 2e 31  31 2e 31                  4203.1.11.1
conn=1 op=1 EXT oid=1.3.6.1.4.1.4203.1.11.1
daemon: activity on 1 descriptor
daemon: activity on:
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=9 active_threads=0 tvp=zero
daemon: epoll: listen=10 active_threads=0 tvp=zero

CTRL-C

daemon: activity on 1 descriptor
daemon: activity on: 15r
daemon: read active on 15
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=9 active_threads=0 tvp=zero
daemon: epoll: listen=10 active_threads=0 tvp=zero
connection_get(15)
connection_get(15): got connid=1
connection_read(15): checking for input on id=1
ber_get_next
ldap_read: want=8, got=0

ber_get_next on fd 15 failed errno=0 (Success)
connection_read(15): input error=-2 id=1, closing.
connection_closing: readying conn=1 sd=15 for close
connection_close: conn=1 sd=15
daemon: activity on 1 descriptor
daemon: removing 15
daemon: activity on:
conn=1 fd=15 closed (connection lost)
daemon: epoll: listen=7 active_threads=0 tvp=zero
daemon: epoll: listen=8 active_threads=0 tvp=zero
daemon: epoll: listen=9 active_threads=0 tvp=zero
daemon: epoll: listen=10 active_threads=0 tvp=zero



-- 
Frank Van Damme
A: Because it destroys the flow of the conversation.
Q: Why is it bad?
A: No, it's bad.
Q: Should I top post in replies to mailing lists or on Usenet?