[Bug 783836] Re: slapd syncrepl failing using SASL

[James Page]

** Description changed:

+ SRU INFORMATION:
+ 
+ IMPACT:
+ Replication failure occurs after some time when using TLS/LDAPS with SASL/GSSAPI; this normally happens when under high throughput.
+ 
+ FIX:
+ Cherry picked from upstream commit:
+   http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=f32f1a45d4e4f3259e33cedc3571c27787add409
+ 
+ Very small change.
+ 
+ This issue has already been fixed in 2.4.24 (in Natty) so impacts Lucid and Maverick.  The upstream bug report contains commentary on the effectiveness of the fix.
+   http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6639
+ 
+ TEST CASE:
+ Two node test rig in ec2 has been setup; trying to find a re-producable test case.
+ 
+ REGRESSION POTENTIAL:
+ 
+ 
+ 
+ >>>>>>>>>>>>>>>>>>>>>>>>>>.
+ 
+ Original Bug Report:
+ 
  Binary package hint: slapd
  
  Replication fails after a while with
  
  slapd[29003]: Entry reqStart=20110516160335.000018Z,cn=accesslog CSN
  20110513192902.055251Z#000000#000#000000 older or equal to ctx
  20110513192902.055251Z#000000#000#000000
  
  send_search_entry: conn 17794  ber write failed.
  conn=17794 fd=53 closed (connection lost on write)
  
  Same deal with slapd 2.4.23 from maverick
  
  Turns out to be OpenLDAP ITS#6639 and is fixed in the 2.4.24 release
  http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6639
  
  Applying the fix for this bug http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=f32f1a45d4e4f3259e33cedc3571c27787add409
  fixes the issue
  
  Could we have this applied and released in Ubuntu?

** Description changed:

  SRU INFORMATION:
  
  IMPACT:
  Replication failure occurs after some time when using TLS/LDAPS with SASL/GSSAPI; this normally happens when under high throughput.
  
  FIX:
  Cherry picked from upstream commit:
-   http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=f32f1a45d4e4f3259e33cedc3571c27787add409
+   http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=f32f1a45d4e4f3259e33cedc3571c27787add409
  
  Very small change.
  
  This issue has already been fixed in 2.4.24 (in Natty) so impacts Lucid and Maverick.  The upstream bug report contains commentary on the effectiveness of the fix.
-   http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6639
+   http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6639
  
  TEST CASE:
  Two node test rig in ec2 has been setup; trying to find a re-producable test case.
  
  REGRESSION POTENTIAL:
- 
- 
+ Bug fix provided by Chief Architect of the OpenLDAP project so should be trustworthy.
  
  >>>>>>>>>>>>>>>>>>>>>>>>>>.
  
  Original Bug Report:
  
  Binary package hint: slapd
  
  Replication fails after a while with
  
  slapd[29003]: Entry reqStart=20110516160335.000018Z,cn=accesslog CSN
  20110513192902.055251Z#000000#000#000000 older or equal to ctx
  20110513192902.055251Z#000000#000#000000
  
  send_search_entry: conn 17794  ber write failed.
  conn=17794 fd=53 closed (connection lost on write)
  
  Same deal with slapd 2.4.23 from maverick
  
  Turns out to be OpenLDAP ITS#6639 and is fixed in the 2.4.24 release
  http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6639
  
  Applying the fix for this bug http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=f32f1a45d4e4f3259e33cedc3571c27787add409
  fixes the issue
  
  Could we have this applied and released in Ubuntu?

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in Ubuntu.
https://bugs.launchpad.net/bugs/783836

Title:
  slapd syncrepl failing using SASL