{"action":"created","issue":{"url":"https://api.github.com/repos/SSSD/sssd/issues/67","repository_url":"https://api.github.com/repos/SSSD/sssd","labels_url":"https://api.github.com/repos/SSSD/sssd/issues/67/labels{/name}","comments_url":"https://api.github.com/repos/SSSD/sssd/issues/67/comments","events_url":"https://api.github.com/repos/SSSD/sssd/issues/67/events","html_url":"https://github.com/SSSD/sssd/pull/67","id":185438003,"number":67,"title":"UTIL: Unset O_NONBLOCK for ldap connection","user":{"login":"lslebodn","id":8050776,"avatar_url":"https://avatars.githubusercontent.com/u/8050776?v=3","gravatar_id":"","url":"https://api.github.com/users/lslebodn","html_url":"https://github.com/lslebodn","followers_url":"https://api.github.com/users/lslebodn/followers","following_url":"https://api.github.com/users/lslebodn/following{/other_user}","gists_url":"https://api.github.com/users/lslebodn/gists{/gist_id}","starred_url":"https://api.github.com/users/lslebodn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lslebodn/subscriptions","organizations_url":"https://api.github.com/users/lslebodn/orgs","repos_url":"https://api.github.com/users/lslebodn/repos","events_url":"https://api.github.com/users/lslebodn/events{/privacy}","received_events_url":"https://api.github.com/users/lslebodn/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-10-26T16:02:48Z","updated_at":"2016-10-27T08:43:07Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/SSSD/sssd/pulls/67","html_url":"https://github.com/SSSD/sssd/pull/67","diff_url":"https://github.com/SSSD/sssd/pull/67.diff","patch_url":"https://github.com/SSSD/sssd/pull/67.patch"},"body":"Before the commit 75e66c388862a4ba05afe0791c5503226395bad0,\r\nthe flag O_NONBLOCK was set only for the connect syscall\r\nin request sssd_async_connect_send -> sssd_async_connect_send.\r\nSuch change was done for secrets provider.\r\n\r\nHowever, if ldap is compiled with gnutls it caused problems with\r\nstart_tls and ldaps.\r\n\r\n  OpenLDAP Server log:\r\n  5810cf2f connection_get(23): got connid=1042\r\n  5810cf2f connection_read(23): checking for input on id=1042\r\n  TLS: error: accept - force handshake failure: errno 11 - moznss error -12234\r\n  TLS: can't accept: TLS error -12234:SSL received an unexpected Application Data record..\r\n  5810cf2f connection_read(23): TLS accept failure error=-1 id=1042, closing\r\n  5810cf2f connection_close: conn=1042 sd=23\r\n\r\n  sssd domain log:\r\n  [simple_bind_send] (0x0100): Executing simple bind as: uid=user1,dc=example,dc=com\r\n  [simple_bind_send] (0x2000): ldap simple bind sent, msgid = 2\r\n  [sdap_op_add] (0x2000): New operation 2 timeout 6\r\n  [sdap_process_result] (0x2000): Trace: sh[0x151c240], connected[1], ops[0x1515700], ldap[0x1511bd0]\r\n  [sdap_process_result] (0x2000): Trace: end of ldap_result list\r\n  [sdap_process_result] (0x2000): Trace: sh[0x151c240], connected[1], ops[0x1515700], ldap[0x1511bd0]\r\n  [sdap_process_result] (0x0040): ldap_result error: [Can't contact LDAP server]\r\n  [sdap_handle_release] (0x2000): Trace: sh[0x151c240], connected[1], ops[0x1515700], ldap[0x1511bd0], destructor_lock[0], release_memory[0]\r\n  [remove_connection_callback] (0x4000): Successfully removed connection callback.\r\n  [sdap_op_destructor] (0x1000): Abandoning operation 2\r\n  [dp_req_done] (0x0400): DP Request [PAM Authenticate #3]: Request handler finished [0]: Success\r\n  [_dp_req_recv] (0x0400): DP Request [PAM Authenticate #3]: Receiving request data.\r\n  [dp_req_destructor] (0x0400): DP Request [PAM Authenticate #3]: Request removed.\r\n  [dp_req_destructor] (0x0400): Number of active DP request: 0\r\n  [dp_method_enabled] (0x0400): Target selinux is not configured\r\n  [dp_pam_reply] (0x1000): DP Request [PAM Authenticate #3]: Sending result [4][LDAP]\r\n\r\nResolves:\r\nhttps://fedorahosted.org/sssd/ticket/3189"},"comment":{"url":"https://api.github.com/repos/SSSD/sssd/issues/comments/256582670","html_url":"https://github.com/SSSD/sssd/pull/67#issuecomment-256582670","issue_url":"https://api.github.com/repos/SSSD/sssd/issues/67","id":256582670,"user":{"login":"sumit-bose","id":15247317,"avatar_url":"https://avatars.githubusercontent.com/u/15247317?v=3","gravatar_id":"","url":"https://api.github.com/users/sumit-bose","html_url":"https://github.com/sumit-bose","followers_url":"https://api.github.com/users/sumit-bose/followers","following_url":"https://api.github.com/users/sumit-bose/following{/other_user}","gists_url":"https://api.github.com/users/sumit-bose/gists{/gist_id}","starred_url":"https://api.github.com/users/sumit-bose/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sumit-bose/subscriptions","organizations_url":"https://api.github.com/users/sumit-bose/orgs","repos_url":"https://api.github.com/users/sumit-bose/repos","events_url":"https://api.github.com/users/sumit-bose/events{/privacy}","received_events_url":"https://api.github.com/users/sumit-bose/received_events","type":"User","site_admin":false},"created_at":"2016-10-27T08:43:07Z","updated_at":"2016-10-27T08:43:07Z","body":"Thank you for digging into this and finding the connection to gnutls. Do you think this is an issue which should be solved in OpenLDAP or gnutls as well, or is it really the responsibility of the caller to make sure O_NONBLOCK is not set? If yes, is this documented?\r\n"}}
{"actor":{"display_login":"sumit-bose"}}