Back to bug 1302823
| Who | When | What | Removed | Added |
|---|---|---|---|---|
| Noriko Hosoi | 2016-02-09 00:03:43 UTC | CC | aheverle | |
| Status | NEW | ASSIGNED | ||
| Noriko Hosoi | 2016-02-10 21:26:41 UTC | Status | ASSIGNED | POST |
| Viktor Ashirov | 2016-02-15 07:40:03 UTC | Priority | unspecified | medium |
| Severity | unspecified | medium | ||
| Eugene Keck | 2016-02-18 16:52:43 UTC | Priority | medium | urgent |
| CC | ekeck | |||
| Hardware | Unspecified | All | ||
| OS | Unspecified | Linux | ||
| Severity | medium | urgent | ||
| Jan Kurik | 2016-02-19 06:05:42 UTC | Blocks | 1309964 | |
| Jan Kurik | 2016-02-19 06:06:11 UTC | Keywords | ZStream | |
| Noriko Hosoi | 2016-02-19 22:15:48 UTC | Doc Text | Cause: When psearch (persistent search) was launched with a bind user who needed access rights configured, the access rights were evaluated at the operation's launch time then it did not reset the access right object in the cache to point the initial pblock structure to the permanent one. Consequence: The ACL plug-in rarely reevaluate the access log when a modification that could impact the existing access rights. It requires the pblock structure. Due to the missing the correct pblock, it crashed the server. Fix: The initial pblock is reset to the permanent pblock in the access right object. Result: No more crash in the psearch operation. |
|
| Sat6QE Jenkins | 2016-03-28 20:15:54 UTC | Status | POST | MODIFIED |
| Mike McCune | 2016-03-28 23:13:32 UTC | Status | MODIFIED | POST |
| Noriko Hosoi | 2016-05-04 19:46:15 UTC | Status | POST | MODIFIED |
| Fixed In Version | 389-ds-base-1.3.5.2-1.el7 | |||
| errata-xmlrpc | 2016-05-04 20:08:29 UTC | Status | MODIFIED | ON_QA |
| Punit Kundal | 2016-07-25 08:10:06 UTC | Status | ON_QA | VERIFIED |
| CC | pkundal | |||
| Petr Bokoc | 2016-07-26 14:38:22 UTC | CC | pbokoc | |
| Doc Text | Cause: When psearch (persistent search) was launched with a bind user who needed access rights configured, the access rights were evaluated at the operation's launch time then it did not reset the access right object in the cache to point the initial pblock structure to the permanent one. Consequence: The ACL plug-in rarely reevaluate the access log when a modification that could impact the existing access rights. It requires the pblock structure. Due to the missing the correct pblock, it crashed the server. Fix: The initial pblock is reset to the permanent pblock in the access right object. Result: No more crash in the psearch operation. | When a persistent search (psearch) was launched by a bind user without sufficient permissions, the access permissions object in cache previously failed to reset to point the initial pblock structure to the permanent structure. As a consequence, the ACL plug-in could crash the server due to a missing pblock object. This update ensures that the initial pblock object is reset to the permanent pblock and prevents the server from crashing in this situation. | ||
| Petr Bokoc | 2016-07-27 15:20:08 UTC | Doc Text | When a persistent search (psearch) was launched by a bind user without sufficient permissions, the access permissions object in cache previously failed to reset to point the initial pblock structure to the permanent structure. As a consequence, the ACL plug-in could crash the server due to a missing pblock object. This update ensures that the initial pblock object is reset to the permanent pblock and prevents the server from crashing in this situation. | ACL plug-in no longer crashes due to missing `pblock` object When a persistent search ("psearch") was launched by a "bind" user without sufficient permissions, the access permissions object in cache failed to reset to point the initial `pblock` structure to the permanent structure. As a consequence, the ACL plug-in could crash the server due to a missing `pblock` object. This update ensures that the initial object is reset to the permanent structure, and Directory Server no longer crashes in this situation. |
| Petr Bokoc | 2016-07-27 15:20:29 UTC | Docs Contact | pbokoc | |
| Petr Bokoc | 2016-08-19 13:08:32 UTC | Doc Text | ACL plug-in no longer crashes due to missing `pblock` object When a persistent search ("psearch") was launched by a "bind" user without sufficient permissions, the access permissions object in cache failed to reset to point the initial `pblock` structure to the permanent structure. As a consequence, the ACL plug-in could crash the server due to a missing `pblock` object. This update ensures that the initial object is reset to the permanent structure, and Directory Server no longer crashes in this situation. | ACL plug-in no longer crashes due to missing `pblock` object When a persistent search ("psearch") was launched by a "bind" user without sufficient permissions, the access permissions object in cache failed to reset to point the initial `pblock` structure to the permanent structure. As a consequence, the access control list (ACL) plug-in could crash the server due to a missing `pblock` object. This update ensures that the initial object is reset to the permanent structure, and Directory Server no longer crashes in this situation. |
| Lenka Špačková | 2016-10-31 15:45:54 UTC | Doc Text | ACL plug-in no longer crashes due to missing `pblock` object When a persistent search ("psearch") was launched by a "bind" user without sufficient permissions, the access permissions object in cache failed to reset to point the initial `pblock` structure to the permanent structure. As a consequence, the access control list (ACL) plug-in could crash the server due to a missing `pblock` object. This update ensures that the initial object is reset to the permanent structure, and Directory Server no longer crashes in this situation. | ACL plug-in no longer crashes due to missing `pblock` object When a persistent search (psearch) was launched by a "bind" user without sufficient permissions, the access permissions object in cache failed to reset to point the initial `pblock` structure to the permanent structure. As a consequence, the access control list (ACL) plug-in could crash the server due to a missing `pblock` object. This update ensures that the initial object is reset to the permanent structure, and Directory Server no longer crashes in this situation. |
| errata-xmlrpc | 2016-11-02 12:24:24 UTC | Status | VERIFIED | RELEASE_PENDING |
| errata-xmlrpc | 2016-11-03 20:39:01 UTC | Status | RELEASE_PENDING | CLOSED |
| Resolution | --- | ERRATA | ||
| Last Closed | 2016-11-03 16:39:01 UTC | |||
| Simon Pichugin | 2020-09-13 21:39:27 UTC | Link ID | Github 389ds/389-ds-base/issues/1776 |
Back to bug 1302823