[Pkg-openldap-devel] Bug#412977: slapd segfaults with certain ACL's

[Harry Jede]

tags 412977

Hi Henry,
hi Steve

> I test the latest egroupware trunk on Etch. When I apply the suggested
> > acl_addressbook.conf 
> to slapd.conf slapd segfaults (as do slapadd and possibly other 
> slapd-tools) 

> $ slapd -g openldap -u openldap  -d 16383
[...]
> line 21 (access to
> dn.regex="cn=([^,]+),ou=personal,ou=contacts,o=([^,]+),dc=iww-test,
> dc=local$" attrs=entry, at inetOrgPerson,
> @mozillaAbPersonAlpha, 
> @evolutionPerson by 
> > dn.regex="uid=$1,ou=accounts,o=$2,dc=iww-test,dc=local" 
> write by users none)    
> Segmentation fault
[...]
> My slapd.conf:

> allow bind_v2

> include         /etc/ldap/schema/core.schema
> include         /etc/ldap/schema/cosine.schema
> include         /etc/ldap/schema/rfc2307bis.schema
> include         /etc/ldap/schema/inetorgperson.schema

> pidfile         /var/run/slapd/slapd.pid
[...]

> IMHO slapd shouldn't crash like this, no matter how ill-configured
> the ACL's maybe. 

Yes, that is the normal case. But you are referencing the objectclasses 
@mozillaAbPersonAlpha and @evolutionPerson in your ACL and you have not 
loaded them via an include statement.

So this is not a software bug, it is fault of the user.


This bug should be closed.


-- 

Gruss
	Harry Jede