OpenVPN crash is LDAP server is unavailble #11

Closed
GoogleCodeExporter opened this Issue Jun 21, 2015 · 5 comments

Comments

Projects
None yet
2 participants
@GoogleCodeExporter
What steps will reproduce the problem?
1. use auth-ldap with AD
2. take down the AD server
3. try to authenticate

What is the expected output? What do you see instead?
should retry, or fail to authenticate, instead openvpn crashes

What version of the product are you using? On what operating system?
Slackware-10, OpenVPN 2.0.9, authldap 2.0.3

Please provide any additional information below.

from the log :
Thu Nov  8 19:09:16 2007 us=812760 TLS Error: incoming packet 
authentication failed from xx.xx.xx.xx:28277
openvpn: sasl.c:262: ldap_parse_sasl_bind_result: Assertion `res != ((void 
*)0)' failed.

Original issue reported on code.google.com by msup...@gmail.com on 4 Feb 2009 at 7:21

@GoogleCodeExporter

This comment has been minimized.

Show comment
Hide comment
@GoogleCodeExporter

GoogleCodeExporter Jun 21, 2015

Original comment by landon.j.fuller@gmail.com on 6 Feb 2009 at 7:14

  • Changed state: Accepted

Original comment by landon.j.fuller@gmail.com on 6 Feb 2009 at 7:14

  • Changed state: Accepted
@GoogleCodeExporter

This comment has been minimized.

Show comment
Hide comment
@GoogleCodeExporter

GoogleCodeExporter Jun 21, 2015

finally found a workaround for this.

The problem is that any result <= 0 is an error, not only -1:

change line 206 in file ldap/TRLDAPConnection.m to the following:

if (ldap_result(ldapConn, msgid, 1, &timeout, &res) <= 0) {

Just a quick workaround, but it leaves openvpn server intact and running.

Original comment by reg9...@yahoo.de on 26 Oct 2009 at 4:49

finally found a workaround for this.

The problem is that any result <= 0 is an error, not only -1:

change line 206 in file ldap/TRLDAPConnection.m to the following:

if (ldap_result(ldapConn, msgid, 1, &timeout, &res) <= 0) {

Just a quick workaround, but it leaves openvpn server intact and running.

Original comment by reg9...@yahoo.de on 26 Oct 2009 at 4:49

@GoogleCodeExporter

This comment has been minimized.

Show comment
Hide comment
@GoogleCodeExporter

GoogleCodeExporter Jun 21, 2015

Resolved in r1324

Original comment by landon.j.fuller@gmail.com on 25 Feb 2012 at 11:03

  • Changed state: Fixed
Resolved in r1324

Original comment by landon.j.fuller@gmail.com on 25 Feb 2012 at 11:03

  • Changed state: Fixed
@GoogleCodeExporter

This comment has been minimized.

Show comment
Hide comment
@GoogleCodeExporter

GoogleCodeExporter Jun 21, 2015

Issue 12 has been merged into this issue.

Original comment by landon.j.fuller@gmail.com on 25 Feb 2012 at 11:04

Issue 12 has been merged into this issue.

Original comment by landon.j.fuller@gmail.com on 25 Feb 2012 at 11:04

@trammell

This comment has been minimized.

Show comment
Hide comment
@trammell

trammell Oct 27, 2015

Does this change need to be applied to the second call to ldap_result() as well?

Does this change need to be applied to the second call to ldap_result() as well?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment