Back to bug 1309964

Who When What Removed Added
Noriko Hosoi 2016-02-19 21:21:38 UTC Status NEW MODIFIED
Fixed In Version 389-ds-base-1.3.4.0-27.el7
errata-xmlrpc 2016-02-19 21:23:19 UTC Status MODIFIED ON_QA
Noriko Hosoi 2016-02-19 22:15:22 UTC Doc Text Cause: When psearch (persistent search) was launched with a bind user who needed access rights configured, the access rights were evaluated at the operation's launch time then it did not reset the access right object in the cache to point the initial pblock structure to the permanent one.

Consequence: The ACL plug-in rarely reevaluate the access log when a modification that could impact the existing access rights. It requires the pblock structure. Due to the missing the correct pblock, it crashed the server.

Fix: The initial pblock is reset to the permanent pblock in the access right object.

Result: No more crash in the psearch operation.
Sankar Ramalingam 2016-03-10 10:54:48 UTC Status ON_QA VERIFIED
CC sramling
Lenka Špačková 2016-03-18 08:15:55 UTC Doc Text Cause: When psearch (persistent search) was launched with a bind user who needed access rights configured, the access rights were evaluated at the operation's launch time then it did not reset the access right object in the cache to point the initial pblock structure to the permanent one.

Consequence: The ACL plug-in rarely reevaluate the access log when a modification that could impact the existing access rights. It requires the pblock structure. Due to the missing the correct pblock, it crashed the server.

Fix: The initial pblock is reset to the permanent pblock in the access right object.

Result: No more crash in the psearch operation.
When a persistent search (psearch) was launched by a bind user without sufficient permissions, the access permissions object in cache previously failed to reset to point the initial pblock structure to the permanent structure. As a consequence, the ACL plug-in could crash the server due to a missing pblock object. This update ensures that the initial pblock object is reset to the permanent pblock and prevents the server from crashing in this situation.
errata-xmlrpc 2016-03-31 00:27:12 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2016-03-31 22:04:44 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2016-03-31 18:04:44 UTC

Back to bug 1309964