threerings / openvpn-auth-ldap

Implements username/password authentication via LDAP for OpenVPN 2.x.
Other
135 stars 63 forks source link

OpenVPN crash is LDAP server is unavailble #11

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. use auth-ldap with AD
2. take down the AD server
3. try to authenticate

What is the expected output? What do you see instead?
should retry, or fail to authenticate, instead openvpn crashes

What version of the product are you using? On what operating system?
Slackware-10, OpenVPN 2.0.9, authldap 2.0.3

Please provide any additional information below.

from the log :
Thu Nov  8 19:09:16 2007 us=812760 TLS Error: incoming packet 
authentication failed from xx.xx.xx.xx:28277
openvpn: sasl.c:262: ldap_parse_sasl_bind_result: Assertion `res != ((void 
*)0)' failed.

Original issue reported on code.google.com by msup...@gmail.com on 4 Feb 2009 at 7:21

GoogleCodeExporter commented 9 years ago

Original comment by landon.j.fuller@gmail.com on 6 Feb 2009 at 7:14

GoogleCodeExporter commented 9 years ago
finally found a workaround for this.

The problem is that any result <= 0 is an error, not only -1:

change line 206 in file ldap/TRLDAPConnection.m to the following:

if (ldap_result(ldapConn, msgid, 1, &timeout, &res) <= 0) {

Just a quick workaround, but it leaves openvpn server intact and running.

Original comment by reg9...@yahoo.de on 26 Oct 2009 at 4:49

GoogleCodeExporter commented 9 years ago
Resolved in r1324

Original comment by landon.j.fuller@gmail.com on 25 Feb 2012 at 11:03

GoogleCodeExporter commented 9 years ago
Issue 12 has been merged into this issue.

Original comment by landon.j.fuller@gmail.com on 25 Feb 2012 at 11:04

trammell commented 8 years ago

Does this change need to be applied to the second call to ldap_result() as well?