[Pkg-openldap-devel] Bug#541292: slapd: Upgrade to 2.4.17-1 fails if migrationtools have been used.

[Mike Castle]

Package: slapd
Version: 2.4.17-1
Severity: important


This bug is about 2.4.17-1, which I no longer have installed.  I had to downgrade back to 2.4.11-1 for the time being.

When I originally migrated to LDAP some time ago, I made use of migrationtools to move /etc files into LDAP.  Specifically, I ran /usr/share/migrationtools/migrate_all_online.sh.

This has survived numerous slapd upgrades until I tried to do 2.4.17-1 which failed with:

Installing new version of config file /etc/default/slapd ...
  Backing up /etc/ldap/slapd.conf in /var/backups/slapd-2.4.11-1... done.
  Moving old database directories to /var/backups:
  - directory dc=mrc,dc=home... done.
  Loading from /var/backups/slapd-2.4.11-1:
  - directory dc=mrc,dc=home... failed.

Loading the database from the LDIF dump failed with the following
error while running slapadd:
    str2entry: entry -1 has invalid DN "cn=echo+ipServiceProtocol=tcp+ipServiceProtocol=udp,ou=Services,dc=mrc,dc=home"
    slapadd: could not parse entry (line=1673)
dpkg: error processing slapd (--configure):
 subprocess installed post-installation script returned error exit status 1


The stanza in the ldif file reads:
dn: cn=echo+ipServiceProtocol=tcp+ipServiceProtocol=udp,ou=Services,dc=mrc,dc=
 home
objectClass: ipService
objectClass: top
ipServicePort: 7
ipServiceProtocol: udp
ipServiceProtocol: tcp
cn: echo
structuralObjectClass: ipService
entryUUID: 0a564566-b013-102b-82f8-250058e72771
creatorsName: cn=admin,dc=mrc,dc=home
createTimestamp: 20070616050609Z
entryCSN: 20070616050609.000000Z#000079#000#000000
modifiersName: cn=admin,dc=mrc,dc=home
modifyTimestamp: 20070616050609Z



In building several openldap versions by hand and running slapadd with a custom config file, it appears that this was introduced with 2.4.15.

I don't know LDAP well enough to know if this was a regression or a tightening down to be more inline with specs.  If the latter, then migrationtools should probably be fixed.  This may be related to ITS#5959 (though that's just a guess).

I'm not sure how to proceed, but I imagine I will change the cn= to be `echo'.


At the very least, by now having this bug filed, hopefully this particular error condition will now show up on searches.



-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages slapd depends on:
ii  adduser                   3.110          add and remove users and groups
ii  coreutils                 7.4-2          The GNU core utilities
ii  debconf [debconf-2.0]     1.5.27         Debian configuration management sy
ii  libc6                     2.9-23         GNU C Library: Shared libraries
ii  libdb4.2                  4.2.52+dfsg-5  Berkeley v4.2 Database Libraries [
ii  libgnutls26               2.6.6-1        the GNU TLS library - runtime libr
hi  libldap-2.4-2             2.4.11-1       OpenLDAP libraries
ii  libltdl3                  1.5.26-4       A system independent dlopen wrappe
ii  libperl5.10               5.10.0-24      Shared Perl library
ii  libsasl2-2                2.1.23.dfsg1-1 Cyrus SASL - authentication abstra
ii  libslp1                   1.2.1-7.6      OpenSLP libraries
ii  libwrap0                  7.6.q-18       Wietse Venema's TCP wrappers libra
ii  perl [libmime-base64-perl 5.10.0-24      Larry Wall's Practical Extraction 
ii  psmisc                    22.8-1         utilities that use the proc file s
ii  unixodbc                  2.2.11-16+b1   ODBC tools libraries

Versions of packages slapd recommends:
ii  libsasl2-modules          2.1.23.dfsg1-1 Cyrus SASL - pluggable authenticat

Versions of packages slapd suggests:
hi  ldap-utils                    2.4.11-1   OpenLDAP utilities

-- debconf information:
  slapd/password_mismatch:
  slapd/tlsciphersuite:
* slapd/invalid_config: true
* shared/organization: dc=mrc,dc=home
  slapd/upgrade_slapcat_failure:
  slapd/slurpd_obsolete:
* slapd/backend: HDB
  slapd/dump_database: when needed
* slapd/allow_ldap_v2: false
* slapd/no_configuration: false
  slapd/move_old_database: true
  slapd/suffix_change: false
  slapd/dump_database_destdir: /var/backups/slapd-VERSION
* slapd/purge_database: true
* slapd/domain: mrc.home