Tuesday, June 6, 2023

[389-users] Re: Unable to establish replication with STARTTLS

Could it be a programming error in 389-ds-base?

After all, the error message we're getting is:

[06/Jun/2023:14:41:05.346079522 +0200] - ERR - slapi_ldap_bind - Could not send bind request for id [cn=replication manager,cn=config] authentication mechanism [SIMPLE]: error -1 (Can't contact LDAP server), system error -5987 (Invalid function argument.), network error 0 (Unknown error, host "consumer.mydomain.example:636")

which contains "system error -5987 (Invalid function argument.)". That log seems to be created by slapi_ldap_bind in file:

https://github.com/389ds/389-ds-base/blob/c6b2236c39e248005fa5ccd3aecdc0d47b183fa8/ldap/servers/slapd/ldaputil.c#L897

which is called by

https://github.com/389ds/389-ds-base/blob/c6b2236c39e248005fa5ccd3aecdc0d47b183fa8/ldap/servers/plugins/replication/repl5_connection.c#LL1891C10-L1891C25

So could it be that there is a bug in this call (or in the slapi_ldap_bind implementation itself). Apparently, slapi_ldap_bind seems to be also only called by the replication, chainingdb and dna plugins, so maybe that is the reason why the error doesn't occur anywhere else.

Kind regards
Jakob
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue

No comments:

Post a Comment