Public bug reported:

pam_ldap.so ignores the value of bind_timelimit from /etc/ldap.conf for
some bind operations.  Rather it is hard coded to 10 seconds. From
pam_ldap.c:

2180 #endif /* HAVE_LDAP_SASL_BIND && LDAP_SASL_SIMPLE */
2181 
2182   timeout.tv_sec = 10;
2183   timeout.tv_usec = 0;
2184   rc = ldap_result (session->ld, msgid, FALSE, &timeout, &result);
2185   if (rc == -1 || rc == 0)

The line 2182 should instead be:

2182   timeout.tv_sec = session->conf->bind_timelimit;

ProblemType: Bug
DistroRelease: Ubuntu 24.04
Package: libpam-ldap 186-4.1ubuntu1
ProcVersionSignature: Ubuntu 6.14.0-27.27~24.04.1-generic 6.14.6
Uname: Linux 6.14.0-27-generic x86_64
ApportVersion: 2.28.1-0ubuntu3.8
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: ubuntu:GNOME
Date: Thu Aug  7 13:42:57 2025
InstallationDate: Installed on 2025-08-06 (1 days ago)
InstallationMedia: Ubuntu 24.04.2 LTS "Noble Numbat" - Release amd64 (20250215)
ProcEnviron:
 LANG=en_US.UTF-8
 PATH=(custom, no user)
 SHELL=/bin/bash
 TERM=xterm-256color
SourcePackage: libpam-ldap
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: libpam-ldap (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug noble

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2119983

Title:
  pam_ldap has hard-coded 10s timeout on bind

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libpam-ldap/+bug/2119983/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to