Description of problem: I can crash openldap fairly easily using nssldap. Sometimes it's immediate, sometimes I can get through 100's of queries (using the "id" command) before openldap segfaults. It looks like it always bombs in is_ad_subtype though. Version-Release number of selected component (if applicable): openldap-2.4.8-6.fc9.i386 nss_ldap-259-3.fc9.i386 How reproducible: always. Steps to Reproduce: 1. the openldap directory populated with about 1500 users (ou=People,..) and about 1500 groups (ou=groups,...) 2. setup system with authconfig to use ldap name lookups. 3. i have a script which calls "id <userid>" for all the users. Actual results: either immediately or eventually openldap segfaults. Expected results: no segfault. Additional info: i'll attach some more info...
Created attachment 311616 [details] backtrace of segfault
/etc/ldap.conf ================================= base dc=mine,dc=us timelimit 120 bind_timelimit 120 idle_timelimit 3600 nss_base_passwd ou=People,dc=mine,dc=us?one nss_base_shadow ou=People,dc=mine,dc=us?one nss_base_group ou=Group,dc=mine,dc=us?one nss_initgroups_ignoreusers root,ldap,named,avahi,haldaemon,dbus,radvd,tomcat,radiusd,news,mailman,nscd,gdm,polkituser uri ldap://ldapserver ssl no tls_cacertdir /etc/openldap/cacerts pam_password md5 ===================================================
Well, I built openldap-2.4.10-2 from rawhide and so far I've done a couple thousand queries with no segfaults. Possibly the internal bdb upgrade to 4.6 helps/fixes the problem.
I'd rather not rebase the internal bdb in middle of Fedora lifecycle, but I can try to update openldap to openldap-2.4.10, which should fix the issue. I created a test build for you at http://people.redhat.com/jsafrane/bugs/455073/, could you please give it a try? Let me know if it works for you.
Your right, that works. thanks.
openldap-2.4.10-1.fc9 has been submitted as an update for Fedora 9
openldap-2.4.10-1.fc9 has been pushed to the Fedora 9 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update openldap'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F9/FEDORA-2008-6653
openldap-2.4.10-1.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report.
This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component.