OpenLDAP module fails to load

[Alan DeKok]

On Oct 8, 2021, at 8:45 AM, Antonio Torres <antorres at redhat.com> wrote:
> I tried that during my debug process. However it results in a
> segmentation fault, since apparently the pool for the instance is
> NULL. Segfaults in this line:
> https://github.com/FreeRADIUS/freeradius-server/blob/c6f15c7ee66dc0473ef45e76ab299fd9a4e044cd/src/modules/rlm_ldap/ldap.c#L720

  Ah, yes.  The pool isn't set up yet.  The solution is more complex, then.

  What *should* happen is that the LDAP library returns a "partially open" connection.  i.e. a connection which is partially bound, but which still needs to read/write more data.  It looks like instead it returns *no* connection.

  Which puts FreeRADIUS into a bit of a problem.  If every operation (a) doesn't return any handle, and (b) returns "retry", then there's simply no way to say "continue connecting on partially open handle".  And nothing will ever work.

  The short term solution is to just set "start=0" in the "pool" configuration of the LDAP module.  *And* also set the retry parameter to "true".  Along with some other changes (attached), that might work.

  If that helps, I can push the patch over.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: ldap.patch
Type: application/octet-stream
Size: 1252 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20211008/952fb88b/attachment.obj>