You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@directory.apache.org by "Emmanuel Lecharny (JIRA)" <ji...@apache.org> on 2007/07/01 16:17:04 UTC

[jira] Updated: (DIRSERVER-907) Overflowing the stack with ACI

     [ https://issues.apache.org/jira/browse/DIRSERVER-907?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Emmanuel Lecharny updated DIRSERVER-907:
----------------------------------------

    Fix Version/s: 1.0.3

We should either try to reproduce and fix this bug, or if we can't reproduce it, close it.

Mark, any status ?

> Overflowing the stack with ACI
> ------------------------------
>
>                 Key: DIRSERVER-907
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-907
>             Project: Directory ApacheDS
>          Issue Type: Bug
>    Affects Versions: 1.0.1
>         Environment: Linux, Java 6
>            Reporter: Mark Swanson
>            Priority: Minor
>             Fix For: 1.0.3
>
>
> Hello,
> I enabled ACI and ldapsearch now puts the server into an infinite loop:
> ldapsearch -h rock -p 11389 -x -D "uid=70,dc=home2,dc=mark" -b "dc=home2,dc=mark" -v -W "objectClass=*"
> org.apache.directory.server.core.interceptor.InterceptorException: Unexpected exception. [Root exception is java.lang.StackOverflowError]
>     at org.apache.directory.server.core.interceptor.InterceptorChain.throwInterceptorException(InterceptorChain.java:1510)
>     at org.apache.directory.server.core.interceptor.InterceptorChain.access$700(InterceptorChain.java:52)
>     at org.apache.directory.server.core.interceptor.InterceptorChain$Entry$1.getMatchedName(InterceptorChain.java:1106)
>     at org.apache.directory.server.core.interceptor.BaseInterceptor.getMatchedName(BaseInterceptor.java:116)
>     at org.apache.directory.server.core.interceptor.InterceptorChain$Entry$1.getMatchedName(InterceptorChain.java:1098)
>     at org.apache.directory.server.core.interceptor.BaseInterceptor.getMatchedName(BaseInterceptor.java:116)
>     at org.apache.directory.server.core.interceptor.InterceptorChain$Entry$1.getMatchedName(InterceptorChain.java:1098)
> Configured with this:
> dn: cn=swAuthorizationRequirementsACISubentry,dc=home2,dc=mark
> changetype: add
> objectclass: top
> objectclass: subentry
> objectclass: accessControlSubentry
> cn: swAuthorizationRequirementsACISubentry
> subtreeSpecification: {}
> prescriptiveACI: {
>     identificationTag "directoryManagerFullAccessACI",
>     precedence 11,
>     authenticationLevel simple,
>     itemOrUserFirst userFirst:
>     {
>       userClasses
>       {
>         name { "uid=44,dc=home2,dc=mark" }
>       },
>       userPermissions {
>         {
>           protectedItems { entry, allUserAttributeTypesAndValues },
>           grantsAndDenials {
>             grantAdd, grantDiscloseOnError, grantRead,
>             grantRemove, grantBrowse, grantExport, grantImport,
>             grantModify, grantRename, grantReturnDN,
>             grantCompare, grantFilterMatch, grantInvoke
>           }
>         }
>       }
>     }
>   }
> prescriptiveACI: {
>     identificationTag "allUsersACI",
>     precedence 10,
>     authenticationLevel none,
>     itemOrUserFirst userFirst:
>     {
>       userClasses {
>         allUsers
>       },
>       userPermissions {
>         {
>           protectedItems { entry, allUserAttributeTypesAndValues },
>           grantsAndDenials { grantRead, grantBrowse, grantReturnDN,
>                              grantCompare, grantFilterMatch, grantDiscloseOnError }
>         },
>         {
>           protectedItems { attributeType { userPassword } },
>           grantsAndDenials { denyRead, denyCompare, denyFilterMatch }
>         }
>       }
>     }
>   } 

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Re: [jira] Updated: (DIRSERVER-907) Overflowing the stack with ACI

Posted by Mark Swanson <ma...@ScheduleWorld.com>.
Emmanuel Lecharny (JIRA) wrote:
>      [ https://issues.apache.org/jira/browse/DIRSERVER-907?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
> 
> Emmanuel Lecharny updated DIRSERVER-907:
> ----------------------------------------
> 
>     Fix Version/s: 1.0.3
> 
> We should either try to reproduce and fix this bug, or if we can't reproduce it, close it.
> 
> Mark, any status ?

No. Sorry, I'm not able to comment on this bug any more.

I'm having a hard time keeping up with ads emails - there are 331 unread 
in that folder atm.

Cheers.

-- 
http://www.ScheduleWorld.com/
Free Google Calendar synchronization with Outlook, Evolution,
cell phones, BlackBerry, PalmOS, Exchange, Mozilla, Thunderbird,
Pocket PC/Windows Mobile. Also sync tasks, notes and contacts!
WebDAV, vfreebusy, RSS, LDAP, iCalendar, iTIP, iMIP support.