Package: slapd
Version: 2.1.30-3
Severity: critical
Justification: causes serious data loss
When the slapd package is installed, it writes an /etc/ldap/slapd.conf
file automatically, based on user input.
By default this uses the bdb backend. Without a "checkpoint" directive
in the configuration file, the bdb database never checkpoints, which
means that if the system fails without shutting slapd down cleanly all
changes made are lost.
This happened to me several times because of power issues in our
facility, which was immensely frustrating :)
If the bdb backend is used, there should always be a checkpoint entry.
Versions of packages slapd depends on:
ii coreutils [fileutils] 5.0.91-2 The GNU core utilities
ii debconf 1.4.29 Debian configuration management sy
ii fileutils 5.0.91-2 The GNU file management utilities
ii libc6 2.3.2.ds1-13 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-16 Berkeley v4.2 Database Libraries [
ii libgcrypt11 1.2.0-4 LGPL Crypto library - runtime libr
ii libgnutls11 1.0.16-3 GNU TLS library - runtime library
ii libgpg-error0 0.7-1 library for common error values an
ii libiodbc2 3.51.2-2 iODBC Driver Manager
ii libldap2 2.1.30-3 OpenLDAP libraries
ii libltdl3 1.5.6-1 A system independent dlopen wrappe
ii libsasl2 2.1.18-4.1 Authentication abstraction library
ii libslp1 1.0.11-7 OpenSLP libraries
ii libwrap0 7.6.dbs-4 Wietse Venema's TCP wrappers libra
ii perl [libmime-base64-perl] 5.8.3-3 Larry Wall's Practical Extraction
ii psmisc 21.4-1 Utilities that use the proc filesy
ii zlib1g 1:1.2.1-5 compression library - runtime
Message-Id: <email address hidden>
Date: Thu, 23 Sep 2004 09:36:17 +0100
From: Doug Winter <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: slapd: checkpoint directive missed from bdb backend
Package: slapd
Version: 2.1.30-3
Severity: critical
Justification: causes serious data loss
When the slapd package is installed, it writes an /etc/ldap/ slapd.conf
file automatically, based on user input.
By default this uses the bdb backend. Without a "checkpoint" directive
in the configuration file, the bdb database never checkpoints, which
means that if the system fails without shutting slapd down cleanly all
changes made are lost.
This happened to me several times because of power issues in our
facility, which was immensely frustrating :)
If the bdb backend is used, there should always be a checkpoint entry.
Cheers,
Doug.
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (900, 'testing'), (300, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.7-1-k7-smp
Locale: LANG=en_GB, LC_CTYPE=en_GB
Versions of packages slapd depends on: base64- perl] 5.8.3-3 Larry Wall's Practical Extraction
ii coreutils [fileutils] 5.0.91-2 The GNU core utilities
ii debconf 1.4.29 Debian configuration management sy
ii fileutils 5.0.91-2 The GNU file management utilities
ii libc6 2.3.2.ds1-13 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-16 Berkeley v4.2 Database Libraries [
ii libgcrypt11 1.2.0-4 LGPL Crypto library - runtime libr
ii libgnutls11 1.0.16-3 GNU TLS library - runtime library
ii libgpg-error0 0.7-1 library for common error values an
ii libiodbc2 3.51.2-2 iODBC Driver Manager
ii libldap2 2.1.30-3 OpenLDAP libraries
ii libltdl3 1.5.6-1 A system independent dlopen wrappe
ii libsasl2 2.1.18-4.1 Authentication abstraction library
ii libslp1 1.0.11-7 OpenSLP libraries
ii libwrap0 7.6.dbs-4 Wietse Venema's TCP wrappers libra
ii perl [libmime-
ii psmisc 21.4-1 Utilities that use the proc filesy
ii zlib1g 1:1.2.1-5 compression library - runtime
-- debconf information: password_ mismatch: fix_directory: true invalid_ config: true organization: ICP Europe PLC upgrade_ slapcat_ failure: upgrade_ slapadd_ failure: ldap_v2: false no_configuratio n: false move_old_ database: true suffix_ change: false slave_databases _require_ updateref: autoconf_ modules: true purge_database: false
slapd/
slapd/
slapd/
* shared/
slapd/
slapd/
slapd/backend: BDB
* slapd/allow_
slapd/
slapd/
slapd/
slapd/
slapd/
slapd/
slapd/admin:
* slapd/domain: icpeurope.net