Bug 34203 – IPv6 support for ldap/acl/read/ips

Bug 34203 - IPv6 support for ldap/acl/read/ips


Summary:	IPv6 support for ldap/acl/read/ips

Status:	RESOLVED WONTFIX

Product:	UCS
Classification:	Unclassified
Component:	LDAP
Version:	UCS 4.2
Hardware:	All Linux

Importance:	P5 enhancement (vote)
Target Milestone:	---
Assigned To:	UCS maintainers
QA Contact:

URL:
Keywords:

Duplicates:	31726 (view as bug list)
Depends on:	30959 31093
Blocks:
	Show dependency tree / graph

Reported:	2014-02-26 14:26 CET by Philipp Hahn
Modified:	2020-07-03 20:56 CEST (History)
CC List:	4 users (show)

See Also:	34075
What kind of report is it?:	Development Internal
What type of bug is this?:	---
Who will be affected by this bug?:	---
How will those affected feel about the bug?:	---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	IPv6
Max CVSS v3 score:

Flags:	hahn: Patch_Available+

Attachments
Add anonymous read from IPv6 addresses [UNTESTED] (3.79 KB, patch) 2014-02-26 14:26 CET, Philipp Hahn	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Philipp Hahn

2014-02-26 14:26:00 CET

Created attachment 5807 [details]
Add anonymous read from IPv6 addresses [UNTESTED]

+++ This bug was initially created as a clone of Bug #30959 comment 19+++
> please remove ::1 from " in
> univention-ox-framework/debian/univention-ox-framework.postinst 
> 
> and
> 
> set ox/cfg/authplugin.properties/LDAP_HOST to 127.0.0.1 as default

FYI: this was done since UCRV "ldap/acl/read/ips" does not support IPv6; it generates "peername.ip=127.0.0.1", which for IPv6 must be "peername.ipv6=::1" (see "man 5 slapd.access" → /peernamestyle/)


Either /etc/univention/templates/files/etc/ldap/slapd.conf.d/[67]0univention-ldap-server_acl-{slave,master-end} needs to distinguish between IPv4 and IPv6 addresses in "ldap/acl/read/ips" and generate the correct statements on its own, or a second UCRV needs to be introduces for IPv6-only addresses.

Comment 1 Arvid Requate

2014-02-26 14:29:40 CET

*** Bug 31726 has been marked as a duplicate of this bug. ***

Comment 2 Stefan Gohmann

2017-06-16 20:38:22 CEST

This issue has been filed against UCS 3. UCS 3 is out of the normal maintenance and many UCS components have vastly changed in UCS 4.

If this issue is still valid, please change the version to a newer UCS version otherwise this issue will be automatically closed in the next weeks.

Comment 3 Ingo Steuwer

2020-07-03 20:56:00 CEST

This issue has been filed against UCS 4.2.

UCS 4.2 is out of maintenance and many UCS components have changed in later releases. Thus, this issue is now being closed.

If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen it and update the UCS version. In this case please provide detailed information on how this issue is affecting you.