[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    Re: OpenLDAP module fails to load
From:       Antonio Torres <antorres () redhat ! com>
Date:       2021-10-13 11:34:19
Message-ID: CAOjkFaND+QESh-JQwtWEDfWO9fCsSu8=fGQ-evbNi17S44HeAw () mail ! gmail ! com
[Download RAW message or body]

On Fri, Oct 8, 2021 at 3:00 PM Alan DeKok <aland@deployingradius.com> wrote:
> The short term solution is to just set "start=0" in the "pool" configuration of the \
> LDAP module.  *And* also set the retry parameter to "true".  Along with some other \
> changes (attached), that might work.

That worked. I have created a PR with the changes:
https://github.com/FreeRADIUS/freeradius-server/pull/4266

On Fri, Oct 8, 2021 at 3:00 PM Alan DeKok <aland@deployingradius.com> wrote:
> 
> On Oct 8, 2021, at 8:45 AM, Antonio Torres <antorres@redhat.com> wrote:
> > I tried that during my debug process. However it results in a
> > segmentation fault, since apparently the pool for the instance is
> > NULL. Segfaults in this line:
> > https://github.com/FreeRADIUS/freeradius-server/blob/c6f15c7ee66dc0473ef45e76ab299fd9a4e044cd/src/modules/rlm_ldap/ldap.c#L720
> > 
> 
> Ah, yes.  The pool isn't set up yet.  The solution is more complex, then.
> 
> What *should* happen is that the LDAP library returns a "partially open" \
> connection.  i.e. a connection which is partially bound, but which still needs to \
> read/write more data.  It looks like instead it returns *no* connection. 
> Which puts FreeRADIUS into a bit of a problem.  If every operation (a) doesn't \
> return any handle, and (b) returns "retry", then there's simply no way to say \
> "continue connecting on partially open handle".  And nothing will ever work. 
> The short term solution is to just set "start=0" in the "pool" configuration of the \
> LDAP module.  *And* also set the retry parameter to "true".  Along with some other \
> changes (attached), that might work. 
> If that helps, I can push the patch over.
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]