Your message dated Thu, 14 Jun 2018 19:17:38 +0000
with message-id <e1ftxky-0004wb...@fasolo.debian.org>
and subject line Bug#864719: fixed in openldap 2.4.40+dfsg-1+deb8u4
has caused the Debian Bug report #864719,
regarding slapd: fails to configure when olcSuffix contains a backslash-escaped
umlaut
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
864719: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864719
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: slapd
Version: 2.4.31-2+deb7u3
Severity: serious
Justification: fails to configure
With recent security updates being available in Debian oldstable
(soon to be oldoldstable, but hey!), the package fails to upgrade
because it fails to configure if the olcSuffix contains a nōn-ASCII
character (and a space, but I don’t think that is it).
I will be filtering the name of our client as follows, believing
that the problem will still appear.
olcSuffix: o=Kundenname M\c3\bcumlaut,c=de
No, I did not invent this…
With “set -x” in slapd.postinst (and reverting the default /bin/sh
to bash to be sure it’s not an mksh problem) I get:
root@prodname-dollarcustomer:~ # dpkg -a --configure
Setting up slapd (2.4.31-2+deb7u3) ...
+ . /usr/share/debconf/confmodule
++ '[' '!' '' ']'
++ PERL_DL_NONLAZY=1
++ export PERL_DL_NONLAZY
++ '[' '' ']'
++ exec /usr/share/debconf/frontend /var/lib/dpkg/info/slapd.postinst configure
2.4.31-2+deb7u3
+ . /usr/share/debconf/confmodule
++ '[' '!' 1 ']'
++ '[' -z '' ']'
++ exec
++ '[' '' ']'
++ exec
++ DEBCONF_REDIR=1
++ export DEBCONF_REDIR
+ MODE=configure
+ OLD_VERSION=2.4.31-2+deb7u3
+ '[' -f /etc/default/slapd ']'
+ . /etc/default/slapd
++ SLAPD_CONF=
++ SLAPD_USER=openldap
++ SLAPD_GROUP=openldap
++ SLAPD_PIDFILE=
++ SLAPD_SERVICES='ldap:/// ldapi:///'
++ SLAPD_SENTINEL_FILE=/etc/ldap/noslapd
++ SLAPD_OPTIONS=
+ '[' -z '' ']'
+ '[' -f /etc/ldap/slapd.conf ']'
+ SLAPD_CONF=/etc/ldap/slapd.d
+ '[' configure = configure ']'
+ '[' openldap = openldap ']'
+ create_new_user
++ getent group openldap
+ '[' -z openldap:x:112: ']'
++ getent passwd openldap
+ '[' -z 'openldap:x:106:112:OpenLDAP Server
Account,,,:/var/lib/ldap:/bin/false' ']'
+ is_initial_configuration configure 2.4.31-2+deb7u3
+ '[' configure = configure ']'
+ '[' -z 2.4.31-2+deb7u3 ']'
+ '[' configure = reconfigure ']'
+ '[' '' ']'
+ '[' configure = configure ']'
+ '[' '!' -e /etc/ldap/slapd.d ']'
+ return 1
+ postinst_upgrade_configuration
++ database_dumping_destdir
++ local dir
++ db_get slapd/dump_database_destdir
++ _db_cmd 'GET slapd/dump_database_destdir'
++ _db_internal_IFS='
'
++ IFS=' '
++ printf '%s\n' 'GET slapd/dump_database_destdir'
++ IFS='
'
++ IFS='
'
++ read -r _db_internal_line
++ RET=/var/backups/slapd-VERSION
++ case ${_db_internal_line%%[ ]*} in
++ return 0
+++ sed -e s/VERSION/2.4.31-2+deb7u3/
+++ echo /var/backups/slapd-VERSION
++ dir=/var/backups/slapd-2.4.31-2+deb7u3
++ mkdir -p -m 700 /var/backups/slapd-2.4.31-2+deb7u3
++ echo /var/backups/slapd-2.4.31-2+deb7u3
+ echo -n ' Backing up /etc/ldap/slapd.d in
/var/backups/slapd-2.4.31-2+deb7u3... '
Backing up /etc/ldap/slapd.d in /var/backups/slapd-2.4.31-2+deb7u3... +
backup_config_once
+ local backupdir
+ '[' -z '' ']'
++ database_dumping_destdir
++ local dir
++ db_get slapd/dump_database_destdir
++ _db_cmd 'GET slapd/dump_database_destdir'
++ _db_internal_IFS='
'
++ IFS=' '
++ printf '%s\n' 'GET slapd/dump_database_destdir'
++ IFS='
'
++ IFS='
'
++ read -r _db_internal_line
++ RET=/var/backups/slapd-VERSION
++ case ${_db_internal_line%%[ ]*} in
++ return 0
+++ sed -e s/VERSION/2.4.31-2+deb7u3/
+++ echo /var/backups/slapd-VERSION
++ dir=/var/backups/slapd-2.4.31-2+deb7u3
++ mkdir -p -m 700 /var/backups/slapd-2.4.31-2+deb7u3
++ echo /var/backups/slapd-2.4.31-2+deb7u3
+ backupdir=/var/backups/slapd-2.4.31-2+deb7u3
+ '[' -e /etc/ldap/slapd.d ']'
+ cp -a /etc/ldap/slapd.d /var/backups/slapd-2.4.31-2+deb7u3
+ FLAG_CONFIG_BACKED_UP=yes
+ echo done.
done.
+ database_format_changed
+ dpkg --compare-versions 2.4.31-2+deb7u3 lt-nl 2.4.25-2
+ return 1
+ migrate_to_slapd_d_style
+ previous_version_older 2.4.23-3
+ dpkg --compare-versions 2.4.31-2+deb7u3 lt-nl 2.4.23-3
+ return 1
+ previous_version_older 2.4.23-5
+ dpkg --compare-versions 2.4.31-2+deb7u3 lt-nl 2.4.23-5
+ return 1
+ configure_v2_protocol_support
+ local new_conf
+ db_get slapd/allow_ldap_v2
+ _db_cmd 'GET slapd/allow_ldap_v2'
+ _db_internal_IFS='
'
+ IFS=' '
+ printf '%s\n' 'GET slapd/allow_ldap_v2'
+ IFS='
'
+ IFS='
'
+ read -r _db_internal_line
+ RET=false
+ case ${_db_internal_line%%[ ]*} in
+ return 0
+ '[' false '!=' true ']'
+ return 0
+ update_databases_permissions
+ read suffix
+ get_suffix
+ '[' -f /etc/ldap/slapd.d ']'
+ cut -d: -f 2
+ grep -h olcSuffix '/etc/ldap/slapd.d/cn=config/olcDatabase={-1}frontend.ldif'
'/etc/ldap/slapd.d/cn=config/olcDatabase={0}config.ldif'
'/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif'
++ get_directory 'o=Kundenname Mc3bcumlaut,c=de'
++ '[' -d /etc/ldap/slapd.d ']'
++ grep -q 'o=Kundenname Mc3bcumlaut,c=de'
++ get_suffix
++ '[' -f /etc/ldap/slapd.d ']'
++ cut -d: -f 2
++ grep -h olcSuffix
'/etc/ldap/slapd.d/cn=config/olcDatabase={-1}frontend.ldif'
'/etc/ldap/slapd.d/cn=config/olcDatabase={0}config.ldif'
'/etc/ldap/slapd.d/cn=config/olcDatabase={1}hdb.ldif'
++ '[' -f /etc/ldap/slapd.d ']'
++ return 1
+ dbdir=
dpkg: error processing slapd (--configure):
subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
slapd
-- System Information:
Debian Release: 7.11
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-0.bpo.4-amd64 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages slapd depends on:
ii adduser 3.113+nmu3
ii coreutils 8.13-3.5
ii debconf [debconf-2.0] 1.5.49
ii libc6 2.13-38+deb7u11
ii libdb5.1 5.1.29-5
ii libgcrypt11 1.5.0-5+deb7u5
ii libgnutls26 2.12.20-8+deb7u5
ii libldap-2.4-2 2.4.31-2+deb7u3
ii libltdl7 2.4.2-1.1
ii libodbc1 2.2.14p2-5
ii libperl5.14 5.14.2-21+deb7u5
ii libsasl2-2 2.1.25.dfsg1-6+deb7u1
ii libslp1 1.2.1-9+deb7u1
ii libwrap0 7.6.q-24
ii lsb-base 4.1+Debian8+deb7u1
ii multiarch-support 2.13-38+deb7u11
ii perl [libmime-base64-perl] 5.14.2-21+deb7u5
ii psmisc 22.19-1+deb7u1
Versions of packages slapd recommends:
pn libsasl2-modules <none>
Versions of packages slapd suggests:
ii ldap-utils 2.4.31-2+deb7u3
-- debconf information:
slapd/internal/generated_adminpw: (password omitted)
* slapd/password2: (password omitted)
slapd/internal/adminpw: (password omitted)
* slapd/password1: (password omitted)
slapd/allow_ldap_v2: false
slapd/password_mismatch:
slapd/invalid_config: true
shared/organization: lan.tarent.de
slapd/upgrade_slapcat_failure:
slapd/unsafe_selfwrite_acl:
* slapd/no_configuration: true
slapd/move_old_database: true
slapd/dump_database_destdir: /var/backups/slapd-VERSION
slapd/purge_database: false
slapd/domain: lan.tarent.de
slapd/backend: HDB
slapd/dump_database: when needed
--- End Message ---
--- Begin Message ---
Source: openldap
Source-Version: 2.4.40+dfsg-1+deb8u4
We believe that the bug you reported is fixed in the latest version of
openldap, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 864...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ryan Tandy <r...@nardis.ca> (supplier of updated openldap package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 05 Jun 2018 20:16:25 -0700
Source: openldap
Binary: slapd slapd-smbk5pwd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg
libldap2-dev slapd-dbg
Architecture: source
Version: 2.4.40+dfsg-1+deb8u4
Distribution: jessie
Urgency: medium
Maintainer: Debian OpenLDAP Maintainers
<pkg-openldap-de...@lists.alioth.debian.org>
Changed-By: Ryan Tandy <r...@nardis.ca>
Description:
ldap-utils - OpenLDAP utilities
libldap-2.4-2 - OpenLDAP libraries
libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
libldap2-dev - OpenLDAP development libraries
slapd - OpenLDAP server (slapd)
slapd-dbg - Debugging information for the OpenLDAP server (slapd)
slapd-smbk5pwd - Keeps Samba and Kerberos passwords in sync within slapd.
Closes: 860947 864719
Changes:
openldap (2.4.40+dfsg-1+deb8u4) jessie; urgency=medium
.
* Fix upgrade failure when olcSuffix contains a backslash. (Closes: #864719)
* Import upstream patches to fix memory corruption caused by calling
sasl_client_init() multiple times and possibly concurrently.
(ITS#8648) (Closes: #860947)
Checksums-Sha1:
6fe2beecba9121da8362cea5a80f3b739e0448fd 2856 openldap_2.4.40+dfsg-1+deb8u4.dsc
18aaf8e3e31328426883b1e2652be6671aeb04ab 181350
openldap_2.4.40+dfsg-1+deb8u4.diff.gz
Checksums-Sha256:
adb061ec11d3ec69644919ff7a35ae451c30a0891c269fe00b5043649083bcba 2856
openldap_2.4.40+dfsg-1+deb8u4.dsc
dffbdc8a502302724d3b2faf1c08a0383daf41cc690ffac47516813048b7d372 181350
openldap_2.4.40+dfsg-1+deb8u4.diff.gz
Files:
201f5b8c6b1c5d603b02fa50f8003061 2856 net optional
openldap_2.4.40+dfsg-1+deb8u4.dsc
1baa4caa8bdb3d02154037f1980cade7 181350 net optional
openldap_2.4.40+dfsg-1+deb8u4.diff.gz
-----BEGIN PGP SIGNATURE-----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=fDlm
-----END PGP SIGNATURE-----
--- End Message ---
