Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 157263 - update to pure-ftpd 1.0.21-r1, broken ldap schema
Summary: update to pure-ftpd 1.0.21-r1, broken ldap schema
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Luca Longinotti (RETIRED)
URL:
Whiteboard:
Keywords:
: 180365 184896 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-12-05 13:49 UTC by Marc Arens
Modified: 2007-07-10 20:50 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marc Arens 2006-12-05 13:49:40 UTC
Portage 2.1.1-r2 (default-linux/x86/2006.1/desktop, gcc-4.1.1, glibc-2.4-r4, 2.6.17-gentoo-r8 i686)
=================================================================
System uname: 2.6.17-gentoo-r8 i686 AMD Athlon(tm) XP 2100+
Gentoo Base System version 1.12.6
Last Sync: Sun, 03 Dec 2006 20:00:09 +0000
ccache version 2.3 [disabled]
app-admin/eselect-compiler: [Not Present]
dev-java/java-config: 1.3.7, 2.0.30
dev-lang/python:     2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.60
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r4
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r2
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/splash /etc/terminfo /etc/texmf/web2c"
CXXFLAGS="-O2 -march=athlon-xp -fomit-frame-pointer -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig distlocks metadata-transfer parallel-fetch sandbox sfperms strict"
GENTOO_MIRRORS="ftp://pandemonium.tiscali.de/pub/gentoo/ http://pandemonium.tiscali.de/pub/gentoo/ ftp://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/ http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/"
LANG="en_US.UTF-8"
LC_ALL="en_US.UTF-8"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 3dnow X alsa apache2 berkdb bitmap-fonts bzip2 cairo cdr cli cracklib crypt cups dbus divx4linux dlloader doc dri dvd dvdr dvdread eds elibc_glibc emboss encode esd fam ffmpeg firefox flac foomaticdb fortran gdbm gif gpm gstreamer gtk gtk2 hal iconv input_devices_keyboard input_devices_mouse ipv6 isdnlog java jikes jpeg kernel_linux ldap libg++ mad mikmod mmx mp3 mpeg mysql ncurses nls nptl nptlonly offensive ogg opengl oss pam pcre perl pic png ppds pppd python qt3 qt4 quicktime readline reflection samba sdl session spell spl sse ssl tcpd tetex theora tiff truetype truetype-fonts type1-fonts udev unicode usb userland_GNU userlocales v4l video_cards_fbdev video_cards_nvidia video_cards_vesa vorbis win32codecs xml xml2 xorg xprint xv xvid zlib"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, LINGUAS, PORTAGE_RSYNC_EXTRA_OPTS


After updating my pure-ftpd to 
net-ftp/pure-ftpd-1.0.21-r1  USE="ldap mysql pam ssl -caps -charconv -noiplog -paranoidmsg -postgres (-selinux) -vchroot -xinetd"

i get this errormessage at ldap startup

* Starting ldap-server ...
/etc/openldap/schema/pureftpd.schema: line 46: Unexpected token before  SINGLE-VALUE )
AttributeTypeDescription = "(" whsp
  numericoid whsp      ; AttributeType identifier
  [ "NAME" qdescrs ]             ; name used in AttributeType
  [ "DESC" qdstring ]            ; description
  [ "OBSOLETE" whsp ]
  [ "SUP" woid ]                 ; derived from this other
                                   ; AttributeType
  [ "EQUALITY" woid ]            ; Matching Rule name
  [ "ORDERING" woid ]            ; Matching Rule name
  [ "SUBSTR" woid ]              ; Matching Rule name
  [ "SYNTAX" whsp noidlen whsp ] ; see section 4.3
  [ "SINGLE-VALUE" whsp ]        ; default multi-valued
  [ "COLLECTIVE" whsp ]          ; default not collective
  [ "NO-USER-MODIFICATION" whsp ]; default user modifiable
  [ "USAGE" whsp AttributeUsage ]; default userApplications
                                   ; userApplications
                                   ; directoryOperation
                                   ; distributedOperation
                                   ; dSAOperation
  whsp ")"                                                                         [ !! ]


after applying these changes

diff /etc/openldap/schema/pureftpd.schema.backup /etc/openldap/schema/pureftpd.schema
45,46c45,46
<         EQUALITY booleanMatch
< 	SYNTAX SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
---
>         EQUALITY caseIgnoreIA5Match 
> 	SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )

everything works again as it should.

Furthermore if you alreday have users set up in your ldapdb and FTPStatus is changed to
<         EQUALITY booleanMatch
< 	SYNTAX SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )

you risk inconsistencies in your ldap userdb

before the attribute FTPStatus could be of the state enabled or disabled
with the changes 
<         EQUALITY booleanMatch
< 	SYNTAX SYNTAX 1.3.6.1.4.1.1466.115.121.1.7 SINGLE-VALUE )
it may only be true or false

your user might not be able to login anylonger
Comment 1 Luca Longinotti (RETIRED) gentoo-dev 2007-05-17 15:08:53 UTC
I have no experience whatsoever with LDAP...
We only install upstreams LDAP schema, we don't ship any ourselves, so this you need to probably report upstream and tell them to fix the LDAP schema they ship.
Closing this, best regards, CHTEKK.
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2007-05-31 10:27:16 UTC
*** Bug 180365 has been marked as a duplicate of this bug. ***
Comment 3 Jakub Moc (RETIRED) gentoo-dev 2007-07-10 20:50:36 UTC
*** Bug 184896 has been marked as a duplicate of this bug. ***