Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenVPN crash is LDAP server is unavailble #11

Closed
GoogleCodeExporter opened this issue Jun 21, 2015 · 5 comments
Closed

OpenVPN crash is LDAP server is unavailble #11

GoogleCodeExporter opened this issue Jun 21, 2015 · 5 comments

Comments

@GoogleCodeExporter
Copy link

What steps will reproduce the problem?
1. use auth-ldap with AD
2. take down the AD server
3. try to authenticate

What is the expected output? What do you see instead?
should retry, or fail to authenticate, instead openvpn crashes

What version of the product are you using? On what operating system?
Slackware-10, OpenVPN 2.0.9, authldap 2.0.3

Please provide any additional information below.

from the log :
Thu Nov  8 19:09:16 2007 us=812760 TLS Error: incoming packet 
authentication failed from xx.xx.xx.xx:28277
openvpn: sasl.c:262: ldap_parse_sasl_bind_result: Assertion `res != ((void 
*)0)' failed.

Original issue reported on code.google.com by msup...@gmail.com on 4 Feb 2009 at 7:21

@GoogleCodeExporter
Copy link
Author

Original comment by landon.j.fuller@gmail.com on 6 Feb 2009 at 7:14

  • Changed state: Accepted

@GoogleCodeExporter
Copy link
Author

finally found a workaround for this.

The problem is that any result <= 0 is an error, not only -1:

change line 206 in file ldap/TRLDAPConnection.m to the following:

if (ldap_result(ldapConn, msgid, 1, &timeout, &res) <= 0) {

Just a quick workaround, but it leaves openvpn server intact and running.

Original comment by reg9...@yahoo.de on 26 Oct 2009 at 4:49

@GoogleCodeExporter
Copy link
Author

Resolved in r1324

Original comment by landon.j.fuller@gmail.com on 25 Feb 2012 at 11:03

  • Changed state: Fixed

@GoogleCodeExporter
Copy link
Author

Issue 12 has been merged into this issue.

Original comment by landon.j.fuller@gmail.com on 25 Feb 2012 at 11:04

@trammell
Copy link

Does this change need to be applied to the second call to ldap_result() as well?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants