pkg/39500: OpenLDAP server doesn't work with DB 4.7.*

[tron%zhadum.org.uk@localhost]

>Number:         39500
>Category:       pkg
>Synopsis:       OpenLDAP server doesn't work with DB 4.7.*
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Sep 07 22:30:00 +0000 2008
>Originator:     Matthias Scheler
>Release:        NetBSD 4.0_STABLE pkgsrc HEAD from 2008-09-07
>Organization:
Matthias Scheler                                  http://zhadum.org.uk/
>Environment:
System: NetBSD colwyn.zhadum.org.uk 4.0_STABLE NetBSD 4.0_STABLE (COLWYN) #1: 
Sun Aug 24 07:37:23 BST 2008 
tron%colwyn.zhadum.org.uk@localhost:/src/sys/compile/COLWYN i386
Architecture: i386
Machine: i386
>Description:
I've got the latest versions of the "db4" and "openldap-server" package
installed on my system:

db4-4.7.25.1        Berkeley DB version 4 from Oracle
openldap-server-2.4.11nb1 Lightweight Directory Access Protocol server suite

This combination doesn't work unfortunately. The "slapd" server starts up
but fails to handle requests which try to modify the repository. I don't
know whether it can handle queries properly because I had to rebuilt the
repository from scratch as DB 4.7.* is refusing to read a database
created by DB 4.6.*.

Here is output produced by "slapd -d 1 ...". It starts when "ldapmodify"
tries to connect:

slap_listener_activate(7): 
>>> slap_listener(ldap:///)
connection_get(12): got connid=1
connection_read(12): checking for input on id=1
ber_get_next
ber_get_next: tag 0x30 len 58 contents:
ber_get_next
conn=1 op=0 do_bind
ber_scanf fmt ({imt) ber:
ber_scanf fmt (m}) ber:
>>> dnPrettyNormal: <cn=root,dc=zhadum,dc=org,dc=uk>
<<< dnPrettyNormal: <cn=root,dc=zhadum,dc=org,dc=uk>, 
<cn=root,dc=zhadum,dc=org,dc=uk>
do_bind: version=3 dn="cn=root,dc=zhadum,dc=org,dc=uk" method=128
do_bind: v3 bind: "cn=root,dc=zhadum,dc=org,dc=uk" to 
"cn=root,dc=zhadum,dc=org,dc=uk"
send_ldap_result: conn=1 op=0 p=3
send_ldap_response: msgid=1 tag=97 err=0
ber_flush2: 14 bytes to sd 12
connection_get(12): got connid=1
connection_read(12): checking for input on id=1
ber_get_next
ber_get_next: tag 0x30 len 125 contents:
ber_get_next
conn=1 op=1 do_modify
ber_scanf fmt ({m) ber:
ber_scanf fmt ({e{m[W]}}) ber:
ber_scanf fmt ({e{m[W]}}) ber:
ber_scanf fmt ({e{m[W]}}) ber:
>>> dnPrettyNormal: <dc=zhadum,dc=org,dc=uk>
<<< dnPrettyNormal: <dc=zhadum,dc=org,dc=uk>, <dc=zhadum,dc=org,dc=uk>
bdb_dn2entry("dc=zhadum,dc=org,dc=uk")
bdb_dn2entry("dc=zhadum,dc=org,dc=uk")
bdb_modify_internal: 0x00000001: dc=zhadum,dc=org,dc=uk
oc_check_required entry (dc=zhadum,dc=org,dc=uk), objectClass "dcObject"
oc_check_required entry (dc=zhadum,dc=org,dc=uk), objectClass 
"organizationalUnit"
oc_check_allowed type "structuralObjectClass"
oc_check_allowed type "entryUUID"
oc_check_allowed type "creatorsName"
oc_check_allowed type "createTimestamp"
oc_check_allowed type "dc"
oc_check_allowed type "objectClass"
oc_check_allowed type "ou"
oc_check_allowed type "entryCSN"
oc_check_allowed type "modifiersName"
oc_check_allowed type "modifyTimestamp"
=> key_change(ADD,1)
<= key_change 0
=> key_change(ADD,1)
<= key_change 0
=> key_change(ADD,1)
<= key_change 0
=> entry_encode(0x00000001): dc=zhadum,dc=org,dc=uk
bdb_modify: updated id=00000001 dn="dc=zhadum,dc=org,dc=uk"
send_ldap_result: conn=1 op=1 p=3
send_ldap_response: msgid=2 tag=103 err=0
ber_flush2: 14 bytes to sd 12
connection_get(12): got connid=1
connection_read(12): checking for input on id=1
ber_get_next
ber_get_next: tag 0x30 len 92 contents:
ber_get_next
conn=1 op=2 do_add
ber_scanf fmt ({m) ber:
ber_scanf fmt ({m{W}}) ber:
ber_scanf fmt ({m{W}}) ber:
ber_scanf fmt (}) ber:
>>> dnPrettyNormal: <ou=users,dc=zhadum,dc=org,dc=uk>
<<< dnPrettyNormal: <ou=users,dc=zhadum,dc=org,dc=uk>, 
<ou=users,dc=zhadum,dc=org,dc=uk>
bdb_dn2entry("ou=users,dc=zhadum,dc=org,dc=uk")
=> bdb_dn2id("ou=users,dc=zhadum,dc=org,dc=uk")

The server process hangs afterwards. It can only be killed by "kill -9".

>How-To-Repeat:
1.) Upgrade the "db4" and "openldap-server" packages to their latest version.
2.) Try to modify the LDAP directory with "ldapmodify".

>Fix:
Not known.