Hello,
This looks suspiciously like two bugs:
1. slapd crashing.
2. brokenness in old version of libldap2 that looks like it is
fixed in the latest version of the library used by ldapsearch.
I attached a message I posted to my local Linux mailing list on the subject.
What is the status of libdap2-dev in Debian? Any chance of a more
recent version?
I have a vague feeling there were problems compiling it against the
GNU TLS libraries. Is this still the case?
--- Begin Message ---
>>>>> "Brian" == Brian May <[EMAIL PROTECTED]> writes:
Brian> This might be worth investigating more.
Finally can reproduce the problem with ldapsearch, I built the old
package by hand:
[EMAIL
PROTECTED]:~/tmp/debian/other/openldap2-2.1.30/debian/build/clients/tools$
ldapsearch -H ldaps://sam.in.vpac.org/ -x > /dev/null
[EMAIL
PROTECTED]:~/tmp/debian/other/openldap2-2.1.30/debian/build/clients/tools$
./ldapsearch -H ldaps://sam.in.vpac.org/ -x > /dev/null
ldap_result: Can't contact LDAP server (81)
[EMAIL
PROTECTED]:~/tmp/debian/other/openldap2-2.1.30/debian/build/clients/tools$
./ldapsearch -H ldap://sam.in.vpac.org/ -x > /dev/null
[EMAIL
PROTECTED]:~/tmp/debian/other/openldap2-2.1.30/debian/build/clients/tools$
The first execution is the latest version, it works.
The third is the old binary without ssl - it works too.
The second is the old binary with ssl - it doesn't work. It crashes
before it displays one of the problem records.
>From memory the openldap Debian maintainers were unable to get the
latest openldap to compile against the GNU TLS libraries, so they used
openssl instead.
However this introduced potential licensing issues for third party
applications that use LDAP, so Debian continues to use the old version
for libldap2-dev until the issue can be resolved.
--
Brian May <[EMAIL PROTECTED]>
--- End Message ---
--
Brian May <[EMAIL PROTECTED]>