slapd syncrepl failing using SASL
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| openldap (Ubuntu) |
Fix Released
|
High
|
James Page | ||
| Lucid |
Fix Released
|
High
|
James Page | ||
| Maverick |
Invalid
|
High
|
James Page | ||
Bug Description
SRU INFORMATION:
IMPACT:
Replication failure occurs after some time when using TLS/LDAPS with SASL/GSSAPI; this normally happens when under high throughput.
FIX:
Cherry picked from upstream commit:
http://
Very small change.
This issue has already been fixed in 2.4.24 (.25 in Oneiric) so impacts Lucid and Maverick (and potentially Natty). The upstream bug report contains commentary on the effectiveness of the fix.
http://
TEST CASE:
Two node test rig in ec2 has been setup; trying to find a re-producable test case however this is proving problematic as its hard to generate the required high throughput load that causes the issue.
REGRESSION POTENTIAL:
Bug fix provided by Chief Architect of the OpenLDAP project so should be trustworthy.
>>>>>>>
Original Bug Report:
Binary package hint: slapd
Replication fails after a while with
slapd[29003]: Entry reqStart=
send_search_entry: conn 17794 ber write failed.
conn=17794 fd=53 closed (connection lost on write)
Same deal with slapd 2.4.23 from maverick
Turns out to be OpenLDAP ITS#6639 and is fixed in the 2.4.24 release
http://
Applying the fix for this bug http://
fixes the issue
Could we have this applied and released in Ubuntu?
Related branches
- Dave Walker: Pending requested
-
Diff: 51 lines (+31/-0)3 files modifieddebian/changelog (+9/-0)
debian/patches/series (+1/-0)
debian/patches/set.sock.err.to.EAGAIN.on.partial.write.patch (+21/-0)
- Dave Walker: Pending requested
-
Diff: 51 lines (+31/-0)3 files modifieddebian/changelog (+9/-0)
debian/patches/series (+1/-0)
debian/patches/set.sock.err.to.EAGAIN.on.partial.write.patch (+21/-0)
| Serge (serge-de-souza) wrote | #1 |
| Serge (serge-de-souza) wrote | #2 |
| tags: | added: patch-accepted-upstream |
| Changed in openldap (Ubuntu Lucid): | |
| status: | New → Triaged |
| importance: | Undecided → High |
| Changed in openldap (Ubuntu Maverick): | |
| status: | New → Triaged |
| importance: | Undecided → High |
| Changed in openldap (Ubuntu Lucid): | |
| milestone: | none → ubuntu-10.04.3 |
| Changed in openldap (Ubuntu Maverick): | |
| milestone: | none → maverick-updates |
| Changed in openldap (Ubuntu): | |
| status: | New → In Progress |
| importance: | Undecided → Medium |
| assignee: | nobody → James Page (james-page) |
| Changed in openldap (Ubuntu Lucid): | |
| assignee: | nobody → James Page (james-page) |
| Changed in openldap (Ubuntu Maverick): | |
| assignee: | nobody → James Page (james-page) |
| Changed in openldap (Ubuntu): | |
| importance: | Medium → High |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| Clint Byrum (clint-fewbar) wrote | #3 |
| Changed in openldap (Ubuntu): | |
| status: | In Progress → Fix Released |
| emerson (emersonfisicaufs) wrote Re: [Bug 783836] Re: slapd syncrepl failing using SASL | #4 |
| Clint Byrum (clint-fewbar) wrote Please test proposed package | #5 |
| Changed in openldap (Ubuntu Lucid): | |
| status: | Triaged → Fix Committed |
| tags: | added: verification-needed |
| Changed in openldap (Ubuntu Maverick): | |
| status: | Triaged → Fix Committed |
| Clint Byrum (clint-fewbar) wrote | #6 |
| tags: |
added: verification-done removed: verification-needed |
| Clint Byrum (clint-fewbar) wrote | #8 |
| tags: |
added: verification-needed removed: verification-done |
| Launchpad Janitor (janitor) wrote | #9 |
| Changed in openldap (Ubuntu Lucid): | |
| status: | Fix Committed → Fix Released |
| tags: | added: testcase |
| JC Hulce (soaringsky) wrote | #10 |
| Changed in openldap (Ubuntu Maverick): | |
| status: | Fix Committed → Invalid |
Affects slapd 2.4.21 in Lucid