{"action":"created","issue":{"url":"https://api.github.com/repos/privacyidea/privacyidea/issues/912","repository_url":"https://api.github.com/repos/privacyidea/privacyidea","labels_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/912/labels{/name}","comments_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/912/comments","events_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/912/events","html_url":"https://github.com/privacyidea/privacyidea/issues/912","id":291551814,"number":912,"title":"Problematic ldap3 / pyasn1 version combinations","user":{"login":"fredreichbier","id":28243,"avatar_url":"https://avatars2.githubusercontent.com/u/28243?v=4","gravatar_id":"","url":"https://api.github.com/users/fredreichbier","html_url":"https://github.com/fredreichbier","followers_url":"https://api.github.com/users/fredreichbier/followers","following_url":"https://api.github.com/users/fredreichbier/following{/other_user}","gists_url":"https://api.github.com/users/fredreichbier/gists{/gist_id}","starred_url":"https://api.github.com/users/fredreichbier/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fredreichbier/subscriptions","organizations_url":"https://api.github.com/users/fredreichbier/orgs","repos_url":"https://api.github.com/users/fredreichbier/repos","events_url":"https://api.github.com/users/fredreichbier/events{/privacy}","received_events_url":"https://api.github.com/users/fredreichbier/received_events","type":"User","site_admin":false},"labels":[{"id":400747524,"url":"https://api.github.com/repos/privacyidea/privacyidea/labels/Topic:LDAP","name":"Topic:LDAP","color":"fef2c0","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-01-25T12:23:00Z","updated_at":"2018-02-24T09:28:24Z","closed_at":null,"author_association":"MEMBER","body":"This is an issue to keep track of problematic combinations of ldap3 / pyasn1 versions. See #887, #911.\r\n\r\nFunctionality I check for each combination:\r\n* STARTTLS\r\n* Complete user info on /validate/check\r\n* Size Limit < number of users\r\n\r\nEverything tested on a62fd9b3d0555b43cf31be3c4092a549fd73f724\r\n\r\n| | pyasn 0.1.9 | pyasn 0.4.2 |\r\n| --- | --- | --- \r\n| ldap3 2.1.1| ok | STARTTLS fails (#885)\r\n| ldap3 2.3 | Empty user list (#887) | Empty user list (#887)\r\n| ldap3 2.4 | Empty user list (#887), Empty user info (#911) | Empty user list (#887), Empty user info (#911)\r\n| ldap3 2.4.1 | Empty user list (#887), **Error on /validate/check and resolver error** in token list (#911) | Empty user list (#887), **Error on /validate/check and resolver error** in token list (#911)\r\n\r\nCombinations in current 2.21.4 packages:\r\n* ``pip install privacyidea``:\r\n```\r\nldap3==2.1.1\r\nprivacyIDEA==2.21.4\r\npyasn1==0.4.2\r\n```\r\n* CentOS:\r\n```\r\nldap3==2.3\r\nprivacyIDEA==2.21.4\r\npyasn1==0.4.2\r\n```\r\n* Ubuntu (Launchpad):\r\n```\r\nldap3==2.1.1\r\nprivacyIDEA==2.21.4\r\npyasn1==0.1.9\r\n```"},"comment":{"url":"https://api.github.com/repos/privacyidea/privacyidea/issues/comments/368214872","html_url":"https://github.com/privacyidea/privacyidea/issues/912#issuecomment-368214872","issue_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/912","id":368214872,"user":{"login":"fredreichbier","id":28243,"avatar_url":"https://avatars2.githubusercontent.com/u/28243?v=4","gravatar_id":"","url":"https://api.github.com/users/fredreichbier","html_url":"https://github.com/fredreichbier","followers_url":"https://api.github.com/users/fredreichbier/followers","following_url":"https://api.github.com/users/fredreichbier/following{/other_user}","gists_url":"https://api.github.com/users/fredreichbier/gists{/gist_id}","starred_url":"https://api.github.com/users/fredreichbier/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fredreichbier/subscriptions","organizations_url":"https://api.github.com/users/fredreichbier/orgs","repos_url":"https://api.github.com/users/fredreichbier/repos","events_url":"https://api.github.com/users/fredreichbier/events{/privacy}","received_events_url":"https://api.github.com/users/fredreichbier/received_events","type":"User","site_admin":false},"created_at":"2018-02-24T09:28:24Z","updated_at":"2018-02-24T09:28:24Z","author_association":"MEMBER","body":"According to the table above, ldap==2.1.1+pyasn1==0.1.9 is the only combination which currently works well. However, according to the [pyasn1 changelog](https://github.com/etingof/pyasn1/blob/6910ce9/CHANGES.rst), there were at least 3 security fixes since 0.1.9, so we should definitely try to integrate the latest pyasn1. I'll look into this."}}
{"actor":{"display_login":"fredreichbier"}}