Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ADBDEV-5039: Do not treat interruption of LDAP requests by signals as an auth error. #899

Merged
merged 3 commits into from
Apr 18, 2024

Conversation

RekGRpth
Copy link
Member

@RekGRpth RekGRpth commented Mar 25, 2024

Do not treat interruption of LDAP requests by signals as an auth error.

When authorizing via ldap, the ldap_simple_bind_s function may return an error.
This occurs when an internal call to the ldap_int_poll utility function is
interrupted by a signal. The openldap library can handle this properly using the
LDAP_OPT_RESTART option. Setting this option to LDAP_OPT_ON causes the select()
system call to be restarted when interrupted by a signal. The default value is
LDAP_OPT_OFF. This patch sets the value to LDAP_OPT_ON (also it requires
explicitly specifying the -llber library to build) after ldap is initialized.

Tests are not provided because they require a separate LDAP container and the
error is not reproducible in a stable manner.

@BenderArenadata
Copy link

@BenderArenadata
Copy link

Failed job Build for ppc64le: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1199934

@RekGRpth
Copy link
Member Author

bender build

@BenderArenadata
Copy link

Failed job Build for ppc64le: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1200021

@BenderArenadata
Copy link

@BenderArenadata
Copy link

Allure report https://allure.adsw.io/launch/67349

@RekGRpth RekGRpth changed the title ADBDEV-5039: fix ldap ADBDEV-5039: Interruption of LDAP requests by signals shouldn't be treated as auth error Mar 25, 2024
@BenderArenadata
Copy link

Failed job Resource group isolation tests on x86_64: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1200179

@BenderArenadata
Copy link

Failed job Regression tests with ORCA on x86_64: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1200172

@BenderArenadata
Copy link

Failed job Resource group isolation tests on ppc64le: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1200180

@RekGRpth RekGRpth marked this pull request as ready for review March 25, 2024 13:14
@whitehawk
Copy link

Summary 'Interruption of LDAP requests by signals shouldn't be treated as auth error' looks violating wiki checklist for patch description, item 2.2 (summary should be in Imperative Mood).

Following wiki I guess it should be smth like "Do not treat interruption of LDAP requests by signals as auth error" or similar.

@whitehawk
Copy link

In the PR description there is no explanation why no tests were added. Refer to wiki checklist for patch description, item 3.1.

@RekGRpth RekGRpth changed the title ADBDEV-5039: Interruption of LDAP requests by signals shouldn't be treated as auth error ADBDEV-5039: Do not treat interruption of LDAP requests by signals as an auth error. Apr 3, 2024
@RekGRpth
Copy link
Member Author

RekGRpth commented Apr 3, 2024

Summary 'Interruption of LDAP requests by signals shouldn't be treated as auth error' looks violating wiki checklist for patch description, item 2.2 (summary should be in Imperative Mood).

Following wiki I guess it should be smth like "Do not treat interruption of LDAP requests by signals as auth error" or similar.

updated

In the PR description there is no explanation why no tests were added. Refer to wiki checklist for patch description, item 3.1.

added

whitehawk
whitehawk previously approved these changes Apr 3, 2024
dnskvlnk
dnskvlnk previously approved these changes Apr 7, 2024
@BenderArenadata
Copy link

Allure report https://allure.adsw.io/launch/68656

@BenderArenadata
Copy link

Failed job Resource group isolation tests on x86_64: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1261006

@BenderArenadata
Copy link

Failed job Resource group isolation tests on ppc64le: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1261007

When authorizing via ldap, the ldap_simple_bind_s function may return an error.
This occurs when an internal call to the ldap_int_poll utility function is
interrupted by a signal. The openldap library can handle this properly using the
LDAP_OPT_RESTART option. Setting this option to LDAP_OPT_ON causes the select()
system call to be restarted when interrupted by a signal. The default value is
LDAP_OPT_OFF. This patch sets the value to LDAP_OPT_ON (also it requires
explicitly specifying the -llber library to build) after ldap is initialized.

Tests are not provided because they require a separate LDAP container and the
error is not reproducible in a stable manner.
@BenderArenadata
Copy link

Allure report https://allure.adsw.io/launch/68728

@BenderArenadata
Copy link

Allure report https://allure.adsw.io/launch/68736

@BenderArenadata
Copy link

Failed job Resource group isolation tests on x86_64: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1267217

@BenderArenadata
Copy link

Failed job Resource group isolation tests on ppc64le: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1267218

@swork12
Copy link

swork12 commented Apr 18, 2024

bender build

@BenderArenadata
Copy link

Allure report https://allure.adsw.io/launch/69397

@BenderArenadata
Copy link

Failed job Resource group isolation tests on x86_64: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1302730

@BenderArenadata
Copy link

Failed job Resource group isolation tests on ppc64le: https://gitlab.adsw.io/arenadata/github_mirroring/gpdb/-/jobs/1302731

@andr-sokolov andr-sokolov merged commit edacbaf into adb-6.x-dev Apr 18, 2024
5 checks passed
@andr-sokolov andr-sokolov deleted the ADBDEV-5039 branch April 18, 2024 11:40
@Stolb27 Stolb27 mentioned this pull request May 24, 2024
silent-observer added a commit that referenced this pull request Jul 30, 2024
…r (port changes from #899)

When authorizing via ldap, the ldap_simple_bind_s function may return an error.
This occurs when an internal call to the ldap_int_poll utility function is
interrupted by a signal. The openldap library can handle this properly using the
LDAP_OPT_RESTART option. Setting this option to LDAP_OPT_ON causes the select()
system call to be restarted when interrupted by a signal. The default value is
LDAP_OPT_OFF. This patch sets the value to LDAP_OPT_ON (also it requires
explicitly specifying the -llber library to build) after ldap is initialized.

Tests are not provided because they require a separate LDAP container and the
error is not reproducible in a stable manner.

Co-authored-by: Georgy Shelkovy <g.shelkovy@arenadata.io>
silent-observer added a commit that referenced this pull request Jul 30, 2024
…r (port changes from #899)

When authorizing via ldap, the ldap_simple_bind_s function may return an error.
This occurs when an internal call to the ldap_int_poll utility function is
interrupted by a signal. The openldap library can handle this properly using the
LDAP_OPT_RESTART option. Setting this option to LDAP_OPT_ON causes the select()
system call to be restarted when interrupted by a signal. The default value is
LDAP_OPT_OFF. This patch sets the value to LDAP_OPT_ON (also it requires
explicitly specifying the -llber library to build) after ldap is initialized.

Tests are not provided because they require a separate LDAP container and the
error is not reproducible in a stable manner.

Co-authored-by: Georgy Shelkovy <g.shelkovy@arenadata.io>
silent-observer pushed a commit that referenced this pull request Jul 30, 2024
…r. (#899)

When authorizing via LDAP, the ldap_simple_bind_s function may return an error.
This occurs when an internal call to the ldap_int_poll utility function is
interrupted by a signal. The openldap library can handle this properly using the
LDAP_OPT_RESTART option. Setting this option to LDAP_OPT_ON causes the select()
system call to be restarted when interrupted by a signal. The default value is
LDAP_OPT_OFF. This patch sets the value to LDAP_OPT_ON (also it requires
explicitly specifying the -llber library to build) after ldap is initialized.

Tests are not provided because they require a separate LDAP container and the
error is not reproducible in a stable manner.

(cherry picked from commit edacbaf)
silent-observer pushed a commit that referenced this pull request Jul 31, 2024
…r. (#899)

When authorizing via LDAP, the ldap_simple_bind_s function may return an error.
This occurs when an internal call to the ldap_int_poll utility function is
interrupted by a signal. The openldap library can handle this properly using the
LDAP_OPT_RESTART option. Setting this option to LDAP_OPT_ON causes the select()
system call to be restarted when interrupted by a signal. The default value is
LDAP_OPT_OFF. This patch sets the value to LDAP_OPT_ON (also it requires
explicitly specifying the -llber library to build) after ldap is initialized.

Tests are not provided because they require a separate LDAP container and the
error is not reproducible in a stable manner.

Changes for 7.2.0: Fix error reporting to match the surrounding code.

(cherry picked from commit edacbaf)
silent-observer pushed a commit that referenced this pull request Jul 31, 2024
…r. (#899)

When authorizing via LDAP, the ldap_simple_bind_s function may return an error.
This occurs when an internal call to the ldap_int_poll utility function is
interrupted by a signal. The openldap library can handle this properly using the
LDAP_OPT_RESTART option. Setting this option to LDAP_OPT_ON causes the select()
system call to be restarted when interrupted by a signal. The default value is
LDAP_OPT_OFF. This patch sets the value to LDAP_OPT_ON (also it requires
explicitly specifying the -llber library to build) after ldap is initialized.

Tests are not provided because they require a separate LDAP container and the
error is not reproducible in a stable manner.

Changes for 7.2.0: Fix error reporting to match the surrounding code.

(cherry picked from commit edacbaf)
Stolb27 pushed a commit that referenced this pull request Aug 2, 2024
…r. (#899)

When authorizing via LDAP, the ldap_simple_bind_s function may return an error.
This occurs when an internal call to the ldap_int_poll utility function is
interrupted by a signal. The openldap library can handle this properly using the
LDAP_OPT_RESTART option. Setting this option to LDAP_OPT_ON causes the select()
system call to be restarted when interrupted by a signal. The default value is
LDAP_OPT_OFF. This patch sets the value to LDAP_OPT_ON (also it requires
explicitly specifying the -llber library to build) after ldap is initialized.

Tests are not provided because they require a separate LDAP container and the
error is not reproducible in a stable manner.

Changes for 7.2.0: Fix error reporting to match the surrounding code.

(cherry picked from commit edacbaf)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants