Debian Bug report logs - #635931
slapd fails to install due to configuration error

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Atanas Atanasov <thenasko@gmail.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: slapd fails to install due to configuration error

Date: Fri, 29 Jul 2011 12:19:40 -0400

Package: slapd
Version: 2.4.23-7.2
Severity: normal

Installing slapd 2.4.23-7.2 fails during configuration:

nasko@chow:~$ sudo apt-get purge slapd
[sudo] password for nasko:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be REMOVED:
 slapd*
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
1 not fully installed or removed.
After this operation, 3,916 kB disk space will be freed.
Do you want to continue [Y/n]?
(Reading database ... 204379 files and directories currently installed.)
Removing slapd ...
Stopping OpenLDAP: slapd.
Purging configuration files for slapd ...
Removing slapd configuration... done.
Processing triggers for man-db ...
nasko@chow:~$ sudo apt-get install slapd
Reading package lists... Done
Building dependency tree
Reading state information... Done
Suggested packages:
 ldap-utils
The following NEW packages will be installed:
 slapd
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/1,495 kB of archives.
After this operation, 3,916 kB of additional disk space will be used.
Preconfiguring packages ...
Selecting previously deselected package slapd.
(Reading database ... 204138 files and directories currently installed.)
Unpacking slapd (from .../slapd_2.4.23-7.2_i386.deb) ...
Processing triggers for man-db ...
Setting up slapd (2.4.23-7.2) ...
Usage: slappasswd [options]
 -c format     crypt(3) salt format
 -g            generate random password
 -h hash       password scheme
 -n            omit trailing newline
 -s secret     new password
 -u            generate RFC2307 values (default)
 -v            increase verbosity
 -T file       read file for new password
 Creating initial configuration... Loading the initial configuration
from the ldif file () failed with
the following error while running slapadd:
  str2entry: invalid value for attributeType olcRootPW #0 (syntax
1.3.6.1.4.1.1466.115.121.1.15)
  slapadd: could not parse entry (line=1052)
dpkg: error processing slapd (--configure):
 subprocess installed post-installation script returned error exit status 1
configured to not write apport reports
                                    Errors were encountered while processing:
 slapd
E: Sub-process /usr/bin/dpkg returned an error code (1)



-- System Information:
Debian Release: 6.0.2
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages slapd depends on:
ii  adduser                3.112+nmu2        add and remove users and groups
ii  coreutils              8.5-1             GNU core utilities
ii  debconf [debconf-2.0]  1.5.36.1          Debian configuration management sy
ii  libc6                  2.11.2-10         Embedded GNU C Library: Shared lib
ii  libdb4.8               4.8.30-2          Berkeley v4.8 Database Libraries [
ii  libgnutls26            2.8.6-1           the GNU TLS library - runtime libr
ii  libldap-2.4-2          2.4.23-7.2        OpenLDAP libraries
ii  libltdl7               2.2.6b-2          A system independent dlopen wrappe
ii  libperl5.10            5.10.1-17squeeze2 shared Perl library
ii  libsasl2-2             2.1.23.dfsg1-7    Cyrus SASL - authentication abstra
ii  libslp1                1.2.1-7.8         OpenSLP libraries
ii  libwrap0               7.6.q-19          Wietse Venema's TCP wrappers libra
ii  lsb-base               3.2-23.2squeeze1  Linux Standard Base 3.2 init scrip
ii  perl [libmime-base64-p 5.10.1-17squeeze2 Larry Wall's Practical Extraction 
ii  psmisc                 22.11-1           utilities that use the proc file s
ii  unixodbc               2.2.14p2-1        ODBC tools libraries

Versions of packages slapd recommends:
ii  libsasl2-modules          2.1.23.dfsg1-7 Cyrus SASL - pluggable authenticat

Versions of packages slapd suggests:
pn  ldap-utils                    <none>     (no description available)

Message #10 received at 635931@bugs.debian.org (full text, mbox, reply):

From: Paul de Laat <p.delaat@sotiria.nl>

To: 635931@bugs.debian.org

Subject: Bug occured with complex password

Date: Thu, 01 Sep 2011 13:30:43 +0200

I run in to the same problem. When I used a complex (17 characters,
capital en normal letters, with spaces and an exclamation mark) password
the problem occured. But when I used a simpel password it installed just
richt.

With kind regards,
Paul de Laat

Message #15 received at 635931@bugs.debian.org (full text, mbox, reply):

From: Nicolai Ehemann <en@enlightened.de>

To: 635931@bugs.debian.org

Subject: Patch for bug #635931

Date: Tue, 22 Nov 2011 11:26:32 +0100

[Message part 1 (text/plain, inline)]

Hello,

the problem occurs when the ldap password is to contain special
characters (such as spaces, but other characters should fail, too).

It boils down to a simple missing quoting of the input paramter to the
slappasswd command in debian/slapd.scripts-common.

Attached is a patch that fixes the problem.

Yours, Nico

[slappasswd.patch (text/plain, attachment)]

Message #22 received at 635931-close@bugs.debian.org (full text, mbox, reply):

From: Steve Langasek <vorlon@debian.org>

To: 635931-close@bugs.debian.org

Subject: Bug#635931: fixed in openldap 2.4.28-1

Date: Thu, 05 Jan 2012 17:33:13 +0000

Source: openldap
Source-Version: 2.4.28-1

We believe that the bug you reported is fixed in the latest version of
openldap, which is due to be installed in the Debian FTP archive:

ldap-utils_2.4.28-1_amd64.deb
  to main/o/openldap/ldap-utils_2.4.28-1_amd64.deb
libldap-2.4-2-dbg_2.4.28-1_amd64.deb
  to main/o/openldap/libldap-2.4-2-dbg_2.4.28-1_amd64.deb
libldap-2.4-2_2.4.28-1_amd64.deb
  to main/o/openldap/libldap-2.4-2_2.4.28-1_amd64.deb
libldap2-dev_2.4.28-1_amd64.deb
  to main/o/openldap/libldap2-dev_2.4.28-1_amd64.deb
openldap_2.4.28-1.diff.gz
  to main/o/openldap/openldap_2.4.28-1.diff.gz
openldap_2.4.28-1.dsc
  to main/o/openldap/openldap_2.4.28-1.dsc
openldap_2.4.28.orig.tar.gz
  to main/o/openldap/openldap_2.4.28.orig.tar.gz
slapd-dbg_2.4.28-1_amd64.deb
  to main/o/openldap/slapd-dbg_2.4.28-1_amd64.deb
slapd-smbk5pwd_2.4.28-1_amd64.deb
  to main/o/openldap/slapd-smbk5pwd_2.4.28-1_amd64.deb
slapd_2.4.28-1_amd64.deb
  to main/o/openldap/slapd_2.4.28-1_amd64.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 635931@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Steve Langasek <vorlon@debian.org> (supplier of updated openldap package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 05 Jan 2012 06:07:11 +0000
Source: openldap
Binary: slapd slapd-smbk5pwd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg
Architecture: source amd64
Version: 2.4.28-1
Distribution: unstable
Urgency: low
Maintainer: Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org>
Changed-By: Steve Langasek <vorlon@debian.org>
Description: 
 ldap-utils - OpenLDAP utilities
 libldap-2.4-2 - OpenLDAP libraries
 libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries
 libldap2-dev - OpenLDAP development libraries
 slapd      - OpenLDAP server (slapd)
 slapd-dbg  - Debugging information for the OpenLDAP server (slapd)
 slapd-smbk5pwd - Keeps Samba and Kerberos passwords in sync within slapd.
Closes: 608815 635931 644985 647610 651333 651400 651598
Changes: 
 openldap (2.4.28-1) unstable; urgency=low
 .
   * New upstream release.
     - Fixes CVE-2011-4079.  Closes: #647610.
     - Fixes support for proxy authorization with SASL-GSSAPI.
       Closes: #608815.
     - Drop patch service-operational-before-detach, which came from upstream.
     - Drop patch fix-its6898-locking-issue, included upstream.
     - Refresh other patches as needed.
   * debian/slapd.scripts-common: quote the argument to slappasswd, to cope
     with shell characters in the string.  Thanks to Nicolai Ehemann
     <en@englightened.de> for the patch.  Closes: #635931.
   * Install ldif.h in libldap2-dev, now that it's been blessed upstream.
     Closes: #644985.
   * debian/patches/no-bdb-ABI-second-guessing: don't force an exact match on
     the upstream version of libdb; this is redundant with our packaging
     system, and causes spurious errors when there's a non-ABI-breaking
     BDB upstream release.  Closes: #651333.
   * Build-conflict with the ancient autoconf2.13, which is incompatible with
     dh-autoreconf.  (Maybe dh-autoreconf itself should conflict with it?)
     Closes: #651598.
 .
   [ Updated debconf translations ]
   * Dutch, thanks to Jeroen Schot <schot@A-Eskwadraat.nl>.  Closes: #651400.
Checksums-Sha1: 
 30a4c11d36afca9859c59330c3ea5dc752662943 2719 openldap_2.4.28-1.dsc
 c1345e4cabea83912d511b77bd227c120e29834b 4714012 openldap_2.4.28.orig.tar.gz
 28f00e0fd0dbb232fd88f261988ce05524dc6139 158480 openldap_2.4.28-1.diff.gz
 3f9b1326387d1957301ebd028c4b3bd2ed03448b 1755882 slapd_2.4.28-1_amd64.deb
 49c46c173023645be8c309f6066fcccebd39f6c1 78270 slapd-smbk5pwd_2.4.28-1_amd64.deb
 3ef6b3673b6810eafe0b2d7d7b22c6c2101588e8 340042 ldap-utils_2.4.28-1_amd64.deb
 dc6dded58a84feaf25a37c0ba8bfbd09d5d62a2c 240234 libldap-2.4-2_2.4.28-1_amd64.deb
 3b7a81924a02831f64ad267a2a88317e17959dbf 368762 libldap-2.4-2-dbg_2.4.28-1_amd64.deb
 8aee0acd03b96569fcbbde15e01c456572b767c0 560062 libldap2-dev_2.4.28-1_amd64.deb
 b330bc304bcb93d6678b2701f036376312246c36 4695744 slapd-dbg_2.4.28-1_amd64.deb
Checksums-Sha256: 
 e3f661e663908b7e27ff3ef5d7cb12c8cd0d44a885d8750e882c0779485d4893 2719 openldap_2.4.28-1.dsc
 1fcc10fc22d9ffff7940df76135a4a349ea4c6d1ec212e4542493a500e85448a 4714012 openldap_2.4.28.orig.tar.gz
 14d0dcb380feb15e80df96e0f309597515ab94f3cfa3f8d3a2a1e1c9b34f0ef9 158480 openldap_2.4.28-1.diff.gz
 5e58fc527e5c9df3549c2900ac05a5a7fd14ad7b4517683a56923845e2c7e56f 1755882 slapd_2.4.28-1_amd64.deb
 31a0abc0c21328feb8f8cb4636e3d8a0ae9b3df2ca535ed289733107f8acd886 78270 slapd-smbk5pwd_2.4.28-1_amd64.deb
 519de5d2512dc285b7092f7172394ab32f2665b917aaa45b35cffe2580c9a21f 340042 ldap-utils_2.4.28-1_amd64.deb
 f79adae577d540918e93c469dea8fa4eaac7055c3b6c48e93d7cd1e3a8636ca0 240234 libldap-2.4-2_2.4.28-1_amd64.deb
 35dcd73efe2ca950de02406f1ec19d67e60ecab0702bd2b99cffceb1e22311f1 368762 libldap-2.4-2-dbg_2.4.28-1_amd64.deb
 5ceca48123076afac34acfda65e93cfc8d6a43ee2ec1b9948354d0a56a9927fb 560062 libldap2-dev_2.4.28-1_amd64.deb
 74b505085af6407cf1326d96503c755562c5329cd17bd15b664cfe370319ad48 4695744 slapd-dbg_2.4.28-1_amd64.deb
Files: 
 c240481c682486520bff8f7954e2d4c4 2719 net optional openldap_2.4.28-1.dsc
 3812086464b9145342733f9ea735ea66 4714012 net optional openldap_2.4.28.orig.tar.gz
 dca617a9bac3736f30b72f89afcc6533 158480 net optional openldap_2.4.28-1.diff.gz
 20842c9b48544695d413a0e6ef1eba48 1755882 net optional slapd_2.4.28-1_amd64.deb
 34565fa4b22d8cf1ef235ea2d015e39e 78270 net extra slapd-smbk5pwd_2.4.28-1_amd64.deb
 036642a187220b4bdfc22f67e942311a 340042 net optional ldap-utils_2.4.28-1_amd64.deb
 ebf3c4ad3d084410db0bd68b99d43758 240234 libs standard libldap-2.4-2_2.4.28-1_amd64.deb
 44e0721f4278b342e437d7e1226362d9 368762 debug extra libldap-2.4-2-dbg_2.4.28-1_amd64.deb
 c6dbeb8717aaf683d7048c411e0d4b4c 560062 libdevel extra libldap2-dev_2.4.28-1_amd64.deb
 487b51587f271630df289c2d20ea1572 4695744 debug extra slapd-dbg_2.4.28-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=MpE4
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.