Mailing List Archive

slapd wrong dn quoting (was: how to enable verbose logging for failed)
Hi,

On Thu, May 17, 2012 at 01:05:30PM +0400, Igor Zinovik wrote:
> 2012/5/17 Jake Smith <jsmith@argotec.com>:
> >
> > ----- Original Message -----
> >> From: "Andrew Beekhof" <andrew@beekhof.net>
> >> To: "The Pacemaker cluster resource manager" <pacemaker@oss.clusterlabs.org>
> >> Sent: Tuesday, May 15, 2012 7:59:47 PM
> >> Subject: Re: [Pacemaker] how to enable verbose logging for failed
> >>
> >> On Tue, May 15, 2012 at 9:27 PM, Igor Zinovik
> >> <zinovik.igor@gmail.com> wrote:
> >> > 2012/5/14 Andrew Beekhof <andrew@beekhof.net>:
> >> >> On Sat, May 12, 2012 at 11:41 PM, Igor Zinovik
> >> >> <zinovik.igor@gmail.com> wrote:
> >> >>>  Hello.
> >> >>>
> >
> > A little late to the party but...
> >
> > Where are you getting the slapd RA from? And/or what version of it?
>
> I first tried this one:
> https://raw.github.com/jhohm/resource-agents/master/heartbeat/slapd
> then i tried another one:
> https://raw.github.com/ClusterLabs/resource-agents/master/heartbeat/slapd
>
> But both of them does not work.
>
> Why? Here is the answer:
> lets look at line 434
> ...
> options="$options -D '$bind_dn' -w '$password'"
>
> Quotes are the problem. ldapsearch does not strip them and it uses as bind_dn
> string with quotes chars, that is why my slapd is not starting. It
> does not accept
> wrong dn.

That seems to pass an invalid dn.

> I applied following patch and thing start working:
> --- slapd.orig 2012-05-17 12:53:33.000000000 +0400
> +++ slapd 2012-05-17 12:51:27.424645326 +0400
> @@ -431,7 +431,7 @@ slapd_monitor()
> options="-LLL -s base -x"
>
> if [ -n "$bind_dn" ]; then
> - options="$options -D '$bind_dn' -w '$password'"
> + options="$options -D $bind_dn -w $password"
> fi
>
> [ -z "$1" ] && err_option=""
>
>
> I did not came to this solution by myself, guys from
> openldap-techinal@ helped me:
> http://www.openldap.org/lists/openldap-technical/201205/msg00118.html

Tomo-san, how did this work before? I suppose that it did :)

Thanks,

Dejan

P.S. Moving the discussion to linux-ha-dev.

> Kudos to Buchan Milne for solution.
>
> So... can devs put proposed change to the master branch?
>
> > What OS?
>
> Read first message, please. I use OpenSUSE 12.1 on both nodes.
>
> > I had a small bit of trouble when I first tried it - I since got a small
> > patch applied to the RA and it runs nicely in my cluster.
>
> _______________________________________________
> Pacemaker mailing list: Pacemaker@oss.clusterlabs.org
> http://oss.clusterlabs.org/mailman/listinfo/pacemaker
>
> Project Home: http://www.clusterlabs.org
> Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> Bugs: http://bugs.clusterlabs.org
_______________________________________________________
Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
Home Page: http://linux-ha.org/
Re: slapd wrong dn quoting (was: how to enable verbose logging for failed) [ In reply to ]
Hi

> > - options="$options -D '$bind_dn' -w '$password'"
> > + options="$options -D $bind_dn -w $password"
> > fi
> >
> > [ -z "$1" ] && err_option=""
> >
> >
> > I did not came to this solution by myself, guys from
> > openldap-techinal@ helped me:
> > http://www.openldap.org/lists/openldap-technical/201205/msg00118.html
>
> Tomo-san, how did this work before? I suppose that it did :)
>
My environment uses slapd2.3.43 on RHEL5.6.
However, I was able to confirm the same phenomenon in my environment.

I think that I should confirm it in Jeroen.
Probably I think Jeroen to have used Debian.

Regards,
Tomo

On Fri, 18 May 2012 17:37:59 +0200
Dejan Muhamedagic <dejanmm@fastmail.fm> wrote:

> Hi,
>
> On Thu, May 17, 2012 at 01:05:30PM +0400, Igor Zinovik wrote:
> > 2012/5/17 Jake Smith <jsmith@argotec.com>:
> > >
> > > ----- Original Message -----
> > >> From: "Andrew Beekhof" <andrew@beekhof.net>
> > >> To: "The Pacemaker cluster resource manager" <pacemaker@oss.clusterlabs.org>
> > >> Sent: Tuesday, May 15, 2012 7:59:47 PM
> > >> Subject: Re: [Pacemaker] how to enable verbose logging for failed
> > >>
> > >> On Tue, May 15, 2012 at 9:27 PM, Igor Zinovik
> > >> <zinovik.igor@gmail.com> wrote:
> > >> > 2012/5/14 Andrew Beekhof <andrew@beekhof.net>:
> > >> >> On Sat, May 12, 2012 at 11:41 PM, Igor Zinovik
> > >> >> <zinovik.igor@gmail.com> wrote:
> > >> >>> ?Hello.
> > >> >>>
> > >
> > > A little late to the party but...
> > >
> > > Where are you getting the slapd RA from? And/or what version of it?
> >
> > I first tried this one:
> > https://raw.github.com/jhohm/resource-agents/master/heartbeat/slapd
> > then i tried another one:
> > https://raw.github.com/ClusterLabs/resource-agents/master/heartbeat/slapd
> >
> > But both of them does not work.
> >
> > Why? Here is the answer:
> > lets look at line 434
> > ...
> > options="$options -D '$bind_dn' -w '$password'"
> >
> > Quotes are the problem. ldapsearch does not strip them and it uses as bind_dn
> > string with quotes chars, that is why my slapd is not starting. It
> > does not accept
> > wrong dn.
>
> That seems to pass an invalid dn.
>
> > I applied following patch and thing start working:
> > --- slapd.orig 2012-05-17 12:53:33.000000000 +0400
> > +++ slapd 2012-05-17 12:51:27.424645326 +0400
> > @@ -431,7 +431,7 @@ slapd_monitor()
> > options="-LLL -s base -x"
> >
> > if [ -n "$bind_dn" ]; then
> > - options="$options -D '$bind_dn' -w '$password'"
> > + options="$options -D $bind_dn -w $password"
> > fi
> >
> > [ -z "$1" ] && err_option=""
> >
> >
> > I did not came to this solution by myself, guys from
> > openldap-techinal@ helped me:
> > http://www.openldap.org/lists/openldap-technical/201205/msg00118.html
>
> Tomo-san, how did this work before? I suppose that it did :)
>
> Thanks,
>
> Dejan
>
> P.S. Moving the discussion to linux-ha-dev.
>
> > Kudos to Buchan Milne for solution.
> >
> > So... can devs put proposed change to the master branch?
> >
> > > What OS?
> >
> > Read first message, please. I use OpenSUSE 12.1 on both nodes.
> >
> > > I had a small bit of trouble when I first tried it - I since got a small
> > > patch applied to the RA and it runs nicely in my cluster.
> >
> > _______________________________________________
> > Pacemaker mailing list: Pacemaker@oss.clusterlabs.org
> > http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> >
> > Project Home: http://www.clusterlabs.org
> > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> > Bugs: http://bugs.clusterlabs.org
> _______________________________________________________
> Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
> http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
> Home Page: http://linux-ha.org/

--
Tomoya Nozawa

_______________________________________________________
Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
Home Page: http://linux-ha.org/
Re: slapd wrong dn quoting (was: how to enable verbose logging for failed) [ In reply to ]
Hi

I received this indication and made below pull request.
<https://github.com/ClusterLabs/resource-agents/pull/95>

Oneself and jeroen did not use this parameter.
I confirmed that the space carried without a problem by this correction.

Many Thanks!!
Tomo.

On Fri, 18 May 2012 17:37:59 +0200
Dejan Muhamedagic <dejanmm@fastmail.fm> wrote:

> Hi,
>
> On Thu, May 17, 2012 at 01:05:30PM +0400, Igor Zinovik wrote:
> > 2012/5/17 Jake Smith <jsmith@argotec.com>:
> > >
> > > ----- Original Message -----
> > >> From: "Andrew Beekhof" <andrew@beekhof.net>
> > >> To: "The Pacemaker cluster resource manager" <pacemaker@oss.clusterlabs.org>
> > >> Sent: Tuesday, May 15, 2012 7:59:47 PM
> > >> Subject: Re: [Pacemaker] how to enable verbose logging for failed
> > >>
> > >> On Tue, May 15, 2012 at 9:27 PM, Igor Zinovik
> > >> <zinovik.igor@gmail.com> wrote:
> > >> > 2012/5/14 Andrew Beekhof <andrew@beekhof.net>:
> > >> >> On Sat, May 12, 2012 at 11:41 PM, Igor Zinovik
> > >> >> <zinovik.igor@gmail.com> wrote:
> > >> >>> ?Hello.
> > >> >>>
> > >
> > > A little late to the party but...
> > >
> > > Where are you getting the slapd RA from? And/or what version of it?
> >
> > I first tried this one:
> > https://raw.github.com/jhohm/resource-agents/master/heartbeat/slapd
> > then i tried another one:
> > https://raw.github.com/ClusterLabs/resource-agents/master/heartbeat/slapd
> >
> > But both of them does not work.
> >
> > Why? Here is the answer:
> > lets look at line 434
> > ...
> > options="$options -D '$bind_dn' -w '$password'"
> >
> > Quotes are the problem. ldapsearch does not strip them and it uses as bind_dn
> > string with quotes chars, that is why my slapd is not starting. It
> > does not accept
> > wrong dn.
>
> That seems to pass an invalid dn.
>
> > I applied following patch and thing start working:
> > --- slapd.orig 2012-05-17 12:53:33.000000000 +0400
> > +++ slapd 2012-05-17 12:51:27.424645326 +0400
> > @@ -431,7 +431,7 @@ slapd_monitor()
> > options="-LLL -s base -x"
> >
> > if [ -n "$bind_dn" ]; then
> > - options="$options -D '$bind_dn' -w '$password'"
> > + options="$options -D $bind_dn -w $password"
> > fi
> >
> > [ -z "$1" ] && err_option=""
> >
> >
> > I did not came to this solution by myself, guys from
> > openldap-techinal@ helped me:
> > http://www.openldap.org/lists/openldap-technical/201205/msg00118.html
>
> Tomo-san, how did this work before? I suppose that it did :)
>
> Thanks,
>
> Dejan
>
> P.S. Moving the discussion to linux-ha-dev.
>
> > Kudos to Buchan Milne for solution.
> >
> > So... can devs put proposed change to the master branch?
> >
> > > What OS?
> >
> > Read first message, please. I use OpenSUSE 12.1 on both nodes.
> >
> > > I had a small bit of trouble when I first tried it - I since got a small
> > > patch applied to the RA and it runs nicely in my cluster.
> >
> > _______________________________________________
> > Pacemaker mailing list: Pacemaker@oss.clusterlabs.org
> > http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> >
> > Project Home: http://www.clusterlabs.org
> > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> > Bugs: http://bugs.clusterlabs.org
> _______________________________________________________
> Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
> http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
> Home Page: http://linux-ha.org/

--
Tomoya Nozawa

_______________________________________________________
Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
Home Page: http://linux-ha.org/
Re: slapd wrong dn quoting (was: how to enable verbose logging for failed) [ In reply to ]
Hi Tomo-san,

On Tue, May 22, 2012 at 06:43:38PM +0900, nozawatm@intellilink.co.jp wrote:
> Hi
>
> I received this indication and made below pull request.
> <https://github.com/ClusterLabs/resource-agents/pull/95>
>
> Oneself and jeroen did not use this parameter.
> I confirmed that the space carried without a problem by this correction.

Merged.

Cheers,

Dejan

> Many Thanks!!
> Tomo.
>
> On Fri, 18 May 2012 17:37:59 +0200
> Dejan Muhamedagic <dejanmm@fastmail.fm> wrote:
>
> > Hi,
> >
> > On Thu, May 17, 2012 at 01:05:30PM +0400, Igor Zinovik wrote:
> > > 2012/5/17 Jake Smith <jsmith@argotec.com>:
> > > >
> > > > ----- Original Message -----
> > > >> From: "Andrew Beekhof" <andrew@beekhof.net>
> > > >> To: "The Pacemaker cluster resource manager" <pacemaker@oss.clusterlabs.org>
> > > >> Sent: Tuesday, May 15, 2012 7:59:47 PM
> > > >> Subject: Re: [Pacemaker] how to enable verbose logging for failed
> > > >>
> > > >> On Tue, May 15, 2012 at 9:27 PM, Igor Zinovik
> > > >> <zinovik.igor@gmail.com> wrote:
> > > >> > 2012/5/14 Andrew Beekhof <andrew@beekhof.net>:
> > > >> >> On Sat, May 12, 2012 at 11:41 PM, Igor Zinovik
> > > >> >> <zinovik.igor@gmail.com> wrote:
> > > >> >>> ?Hello.
> > > >> >>>
> > > >
> > > > A little late to the party but...
> > > >
> > > > Where are you getting the slapd RA from? And/or what version of it?
> > >
> > > I first tried this one:
> > > https://raw.github.com/jhohm/resource-agents/master/heartbeat/slapd
> > > then i tried another one:
> > > https://raw.github.com/ClusterLabs/resource-agents/master/heartbeat/slapd
> > >
> > > But both of them does not work.
> > >
> > > Why? Here is the answer:
> > > lets look at line 434
> > > ...
> > > options="$options -D '$bind_dn' -w '$password'"
> > >
> > > Quotes are the problem. ldapsearch does not strip them and it uses as bind_dn
> > > string with quotes chars, that is why my slapd is not starting. It
> > > does not accept
> > > wrong dn.
> >
> > That seems to pass an invalid dn.
> >
> > > I applied following patch and thing start working:
> > > --- slapd.orig 2012-05-17 12:53:33.000000000 +0400
> > > +++ slapd 2012-05-17 12:51:27.424645326 +0400
> > > @@ -431,7 +431,7 @@ slapd_monitor()
> > > options="-LLL -s base -x"
> > >
> > > if [ -n "$bind_dn" ]; then
> > > - options="$options -D '$bind_dn' -w '$password'"
> > > + options="$options -D $bind_dn -w $password"
> > > fi
> > >
> > > [ -z "$1" ] && err_option=""
> > >
> > >
> > > I did not came to this solution by myself, guys from
> > > openldap-techinal@ helped me:
> > > http://www.openldap.org/lists/openldap-technical/201205/msg00118.html
> >
> > Tomo-san, how did this work before? I suppose that it did :)
> >
> > Thanks,
> >
> > Dejan
> >
> > P.S. Moving the discussion to linux-ha-dev.
> >
> > > Kudos to Buchan Milne for solution.
> > >
> > > So... can devs put proposed change to the master branch?
> > >
> > > > What OS?
> > >
> > > Read first message, please. I use OpenSUSE 12.1 on both nodes.
> > >
> > > > I had a small bit of trouble when I first tried it - I since got a small
> > > > patch applied to the RA and it runs nicely in my cluster.
> > >
> > > _______________________________________________
> > > Pacemaker mailing list: Pacemaker@oss.clusterlabs.org
> > > http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> > >
> > > Project Home: http://www.clusterlabs.org
> > > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> > > Bugs: http://bugs.clusterlabs.org
> > _______________________________________________________
> > Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
> > http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
> > Home Page: http://linux-ha.org/
>
> --
> Tomoya Nozawa
>
> _______________________________________________________
> Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
> http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
> Home Page: http://linux-ha.org/
_______________________________________________________
Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
Home Page: http://linux-ha.org/
Re: slapd wrong dn quoting (was: how to enable verbose logging for failed) [ In reply to ]
Hi dejan,

Thank you for applying.

Regards,
Tomo

On Tue, 22 May 2012 11:57:27 +0200
Dejan Muhamedagic <dejan@suse.de> wrote:

> Hi Tomo-san,
>
> On Tue, May 22, 2012 at 06:43:38PM +0900, nozawatm@intellilink.co.jp wrote:
> > Hi
> >
> > I received this indication and made below pull request.
> > <https://github.com/ClusterLabs/resource-agents/pull/95>
> >
> > Oneself and jeroen did not use this parameter.
> > I confirmed that the space carried without a problem by this correction.
>
> Merged.
>
> Cheers,
>
> Dejan
>
> > Many Thanks!!
> > Tomo.
> >
> > On Fri, 18 May 2012 17:37:59 +0200
> > Dejan Muhamedagic <dejanmm@fastmail.fm> wrote:
> >
> > > Hi,
> > >
> > > On Thu, May 17, 2012 at 01:05:30PM +0400, Igor Zinovik wrote:
> > > > 2012/5/17 Jake Smith <jsmith@argotec.com>:
> > > > >
> > > > > ----- Original Message -----
> > > > >> From: "Andrew Beekhof" <andrew@beekhof.net>
> > > > >> To: "The Pacemaker cluster resource manager" <pacemaker@oss.clusterlabs.org>
> > > > >> Sent: Tuesday, May 15, 2012 7:59:47 PM
> > > > >> Subject: Re: [Pacemaker] how to enable verbose logging for failed
> > > > >>
> > > > >> On Tue, May 15, 2012 at 9:27 PM, Igor Zinovik
> > > > >> <zinovik.igor@gmail.com> wrote:
> > > > >> > 2012/5/14 Andrew Beekhof <andrew@beekhof.net>:
> > > > >> >> On Sat, May 12, 2012 at 11:41 PM, Igor Zinovik
> > > > >> >> <zinovik.igor@gmail.com> wrote:
> > > > >> >>> ?Hello.
> > > > >> >>>
> > > > >
> > > > > A little late to the party but...
> > > > >
> > > > > Where are you getting the slapd RA from? And/or what version of it?
> > > >
> > > > I first tried this one:
> > > > https://raw.github.com/jhohm/resource-agents/master/heartbeat/slapd
> > > > then i tried another one:
> > > > https://raw.github.com/ClusterLabs/resource-agents/master/heartbeat/slapd
> > > >
> > > > But both of them does not work.
> > > >
> > > > Why? Here is the answer:
> > > > lets look at line 434
> > > > ...
> > > > options="$options -D '$bind_dn' -w '$password'"
> > > >
> > > > Quotes are the problem. ldapsearch does not strip them and it uses as bind_dn
> > > > string with quotes chars, that is why my slapd is not starting. It
> > > > does not accept
> > > > wrong dn.
> > >
> > > That seems to pass an invalid dn.
> > >
> > > > I applied following patch and thing start working:
> > > > --- slapd.orig 2012-05-17 12:53:33.000000000 +0400
> > > > +++ slapd 2012-05-17 12:51:27.424645326 +0400
> > > > @@ -431,7 +431,7 @@ slapd_monitor()
> > > > options="-LLL -s base -x"
> > > >
> > > > if [ -n "$bind_dn" ]; then
> > > > - options="$options -D '$bind_dn' -w '$password'"
> > > > + options="$options -D $bind_dn -w $password"
> > > > fi
> > > >
> > > > [ -z "$1" ] && err_option=""
> > > >
> > > >
> > > > I did not came to this solution by myself, guys from
> > > > openldap-techinal@ helped me:
> > > > http://www.openldap.org/lists/openldap-technical/201205/msg00118.html
> > >
> > > Tomo-san, how did this work before? I suppose that it did :)
> > >
> > > Thanks,
> > >
> > > Dejan
> > >
> > > P.S. Moving the discussion to linux-ha-dev.
> > >
> > > > Kudos to Buchan Milne for solution.
> > > >
> > > > So... can devs put proposed change to the master branch?
> > > >
> > > > > What OS?
> > > >
> > > > Read first message, please. I use OpenSUSE 12.1 on both nodes.
> > > >
> > > > > I had a small bit of trouble when I first tried it - I since got a small
> > > > > patch applied to the RA and it runs nicely in my cluster.
> > > >
> > > > _______________________________________________
> > > > Pacemaker mailing list: Pacemaker@oss.clusterlabs.org
> > > > http://oss.clusterlabs.org/mailman/listinfo/pacemaker
> > > >
> > > > Project Home: http://www.clusterlabs.org
> > > > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf
> > > > Bugs: http://bugs.clusterlabs.org
> > > _______________________________________________________
> > > Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
> > > http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
> > > Home Page: http://linux-ha.org/
> >
> > --
> > Tomoya Nozawa
> >
> > _______________________________________________________
> > Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
> > http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
> > Home Page: http://linux-ha.org/
> _______________________________________________________
> Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
> http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
> Home Page: http://linux-ha.org/

--
Tomoya Nozawa

_______________________________________________________
Linux-HA-Dev: Linux-HA-Dev@lists.linux-ha.org
http://lists.linux-ha.org/mailman/listinfo/linux-ha-dev
Home Page: http://linux-ha.org/