Bug 3492 - ldapadd crashes remote slapd (2.1.25)
Summary: ldapadd crashes remote slapd (2.1.25)
Status: CLOSED FIXED
Alias: None
Product: Sisyphus
Classification: Development
Component: openldap-servers (show other bugs)
Version: unstable
Hardware: all Linux
: P2 major
Assignee: Serge A. Volkov
QA Contact: qa-sisyphus
URL:
Keywords:
Depends on: 3527
Blocks:
  Show dependency tree
 
Reported: 2004-01-14 20:46 MSK by Michael Shigorin
Modified: 2005-08-30 02:31 MSD (History)
8 users (show)

See Also:


Attachments
sample ldif (352 bytes, text/plain)
2004-01-14 20:51 MSK, Michael Shigorin
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Shigorin 2004-01-14 20:46:17 MSK
trickster is workstation, alpha is (ldap) server

trickster:~> ldapadd -f test.ldif -h alpha
SASL/DIGEST-MD5 authentication started
Please enter your password: 
ldap_sasl_interactive_bind_s: Can't contact LDAP server (81)
trickster:~> ssh alpha /sbin/service slapd status
slapd is dead, but stale PID file exists

this is simply remote DoS requiring no additional resources but access to the
port slapd listens to :-(

before I hit <Enter> for the password request (don't know it), slapd is alive;
just then it dies.

manipulating LDAP data with gq or phpldapadmin just goes fine.

openldap-servers-2.1.25-alt1
Comment 1 Michael Shigorin 2004-01-14 20:51:20 MSK
Created attachment 331 [details]
sample ldif
Comment 2 Michael Shigorin 2004-01-15 00:42:32 MSK
will try to change from bdb to ldbm tomorrow and see.....

Comment 3 Michael Shigorin 2004-01-20 15:29:41 MSK
похоже, проблема в том, что libsasl2 собрана с libdb4.0, а openldap -- с 4.1.
Comment 4 Serge A. Volkov 2004-02-24 10:13:51 MSK
Fixed in 2.1.26-alt1
Comment 5 Igor Muratov 2004-02-27 18:41:04 MSK
openldap-2.1.26-alt3

Проблема повторяется.
Comment 6 Serge A. Volkov 2004-03-15 13:44:36 MSK
Fixed in 2.1.27

I load to Sisyphus this package soon.
Comment 7 Michael Shigorin 2004-03-25 19:48:30 MSK
apparently works
Comment 8 Michael Shigorin 2005-08-30 02:21:47 MSD
closing
Comment 9 Michael Shigorin 2005-08-30 02:31:58 MSD
closing