Date: Fri, 26 Sep 2008 21:33:56 -0700 (PDT) From: "Eugene M. Kim" <gene@nttmcl.com> To: FreeBSD-gnats-submit@FreeBSD.org Subject: ports/127675: [patch] net/nss_ldap version 259, with fix for pw_{change, expire} overflow Message-ID: <200809270433.m8R4XuLO020815@doughboy.nttmcl.com> Resent-Message-ID: <200809270440.m8R4e0nN008414@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 127675 >Category: ports >Synopsis: [patch] net/nss_ldap version 259, with fix for pw_{change,expire} overflow >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: update >Submitter-Id: current-users >Arrival-Date: Sat Sep 27 04:40:00 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Eugene M. Kim <gene@nttmcl.com> >Release: FreeBSD 6.2-STABLE i386 >Organization: NTT Multimedia Communications Laboratories, Inc. >Environment: System: FreeBSD doughboy.nttmcl.com 6.2-STABLE FreeBSD 6.2-STABLE #7: Fri Sep 21 12:22:16 PDT 2007 gene@bbq.nttmcl.com:/home/FreeBSD/build/RELENG_6/obj/home/FreeBSD/build/RELENG_6/src/sys/DOUGHBOY i386 >Description: Attached is the updated port for net/nss_ldap version 259. This port also includes a fix for pw_{change,expire} overflow/wraparound bug, which is triggered when shadowMax LDAP attribute set to 99999, a conventional "password never expires" value. With the fix, when the calculated value of pw_{change,expire} exceeds the range of time_t, the value is reset to 0, effectively meaning "(password or account) never expires". This makes sense because the system clock (of type time_t) will wrap around before ever reaching the calculated value. The port was tested with OpenLDAP 2.3. >How-To-Repeat: >Fix: Replace the net/nss_ldap directory with the contents of the tarball below: begin 644 nss_ldap-1.259.tar.bz2 M0EIH.3%!629362_:$:X`%MQ_\/^P`,!______^___O_OW_J4````A`0`2&`5 M+WGOO;?7OIOO1IVZJ]WM\^>=WMGW?>WO"GKK;U4[M!R95K[E?=GU]V^GN.[) M8@5W;IZUW=MEGW>Y"!+PDD0"9)M3&FDT--&35/4_4TQE)ZGIIJ,FC:1ZGJ/2 M,GHT3:3:30T>H,B`$R"9-1IHIIZ0-M)!IH#30/4&@`:````#()I-30*,GLJ' MDF&IIH:`#:@T!H`T`````"32B1-33)DF3">@C)B:--'J-`:`#0&@``&@`"*0 M@)B)DQ)C13TR9,J?JGZ:H_2GI/4]0:;*>H#(`-!Z@R>H&@D2$`(!&%3QE-38 M5/33U39,4T-J:#30T`]0:#)H`!V]*1[4AW5U?JO1^[>S&6\B#YR8>5I##F3) M`-90",X%.KM+.P["?;?:"F2E.*R]&HA2$%@2,P[`D%2#!C'#2(F"=DXI,X(E M)R"Q11C1Q/$NO`8@^*Z'"W5*FM*Q=(7U&VVVJJ*DG)RX=`5(N("I:&!8M1@0 MLE(E-,G@RE)I5-!\XT5SJ!^YP]']WY_1\%7G%[`,Y)\8]IA#A@$,UYH.[CX> M*6'WS2*K/>EMPJ10;3GTBIY$O)G<$[WW:#K-GH:WAKA-;4#V8PLT%%P(*@Q; M:HT)A*&,U^SQ<*R\J&_5U[?I[LPM-KU.".<SO5U4*FV-@Z""L<C+-#1%R-EX MPX(YW5KX>^G8W._'(!F(F8!+PH/C-,N7BA6Z-+U/7T6*U_2]3.EY`VV-IF_Z M+N_L/>?;K>]WLYYFV5C$+^V)N/M,YH=>>$AA%B@IM!+P%/2IQPI[4.XD*30& MI^%P&6<FS)OGXE#<9%DUA`G:\PU9,64M*UHA@>3<YRIA64&W"<8`:BJ[^LIT MBA#&K.NY1ICE$E)DK;YM=S]',8)!VD0*,072=5T>!8:H#>R=V3N/JBH!#ZZC M;&D%8-LW4/5WN9L-</I0U8-&IT'1RY'D#IG?O4D;_T<%5$8"P`X^8D]MB^$" MH*E'#DP^#OG$W&W&]^EX1=]!L6"YKW32Q.+A6JKQ%+F0=[`Q3KL,W$-AW<]Y M=Z+*3)CP.4$DOV2OFL0:Q+)&^.)<XW>+'-2.K%?9N3:Q(5?N8(4\QL$*C.J' M,QGQ(@D3I"N(DO,J6IS5W?'64F8W$"92UD!JVOIV]6_?5S6+KS/<BG@13I^F M+3T28?ACGCX',S,ZB,^;5L[[;_#I$'&DB_\)P)!A.T[73ID5ZW5'3T;!:JQ[ MNSR5MHN,BP&N*9F9F2@6";:.!11%5BBC11ODT>EO;^UZDVM9GT75+ES85_H, MF=6;QV=]NG`6"NUM.(9))@\\)T@TFPO32Z_P9AN7QYFZ@MUQRD%!?)C1BU6' M8IQV)Z13RI82UW(L5L`MG)HRZ9BKM$J6PC0>6DY`<^'/*3,)*#.7/VK81@.R MUE#YW1@FSG&B"=(S\0=1(&ARB8A3$<GBJ^%Z.KHX%]YU&Y.?BI,D-+34<9FK M"H)-*+L\A6Z-&Z7B0WOQH_F5M*HMU;\`0XP"&T&,U%D0($>AD](8A(AB&7#? MM^@PS&[B<IW(>?USQ$Q6OID.<.YL))WP?XV'3YE#.0JCDL/8$/4>48[F##UH M$#F].YJ^2CECCA+3VG@>S<RAYW^<6^X#S,A8L>]@SPYB'$FFPCO+-?&PV!$D M(]2-9=@)(.2\B1%DA"C*-=D>8=R@0EBA`TS"S5Y...#J7XJ`X5_IZVF_=49* M7NLW4::9^\-)>;AW0\BHVPH@4/X-\,*P-@%<%:S^A:C>OFK]]M[%SA=N^3%& MA.]0H40Q\2O-+$@:H3.&$!66%C"\.G-T'E:&#:&M#=CBT:>$!(;LGOR=/!." M)*Q@P7AD(<-98@PI!@:]Y=F_\,+QS0S3)`YH&0.WTNBU5>=,6(B)Q*+2]+P\ M3)VI1+U:E\4Y#[:L&;DLK1V+$T+SAI29R@8`6<!V$IA99M7`BZ5=.R=(UY>- MR]2$&N>3H\?CW'-DYGQD<2AHE6Q/6*GP[*$>`&(G!]895]J#J'?>=DF9T.AF M'M0M/(<-`L=K&]3PJSM*M?1$AQ'!8RJ`QTG`-H3$QFQ.5='"Y5!A"#`<UR>M M@R3&@<5B;4GD,U#AK"(%3/RL[Z+#$*H@*8["!4A*KJ!1N`PB&-,">!91VYB5 M6'4C@SN2XZMLU#OH&VZ92J.L3TDZ*U9L/W1$6$V^!P;;>9O/Y38X=PQ;-DJM M67ORSD&\PWXZA<);IQ`RV$>AG(JJ*(K.4I>HO0:00'#3IU:BL[P@@3NLHUD= MUR*W#"*_(I^U2%2SB8Y?%S>WR^-S>WK]]I4(&0PRN3I%7(](N7$NY)=&MQ*7 M"JI`929FV@D1S@4#NCL7*E;P<G[7=>1(=(+,3DSC>.%,/%%BJ,-C-1TY6)B& MD\,6<#2]F?2RY#1RV2NR5U13&!OE=L:^NCZX&8G&3)QM2#>V`^+G&J+,7M&9 M0(4$ZVK!T7/8.Q>%>.HG(6!U?R^_8%@B.2899<M8&&HVCA:?%L5G$NVZN9W- M^R!L8MBJ@=R]E<Y,FYJ2]"42<0BF^Y`@,3G0LX2:S$Y(&($DA>:+&:NI/1^; M;K@9;!*8L/-ND(QOT+G!L..S&UE#-`YB,4#GM3/&3G6%FSI,KD&[0_RP2R^, M15!,-FI`92,HA+=T85DU'1(E5D%IA$TLF*HH-9DJX)8Q8\*JM<J)7H?<US$H MK"D<JT;Q<E]IH9/"X8#&I?$V;3%1)`TI/3,V#1Q\&_O,[KXL]X'F:9QLMH*U M<U9]2EKQ3KP/,1%,PO;QVH,R@D++H4*B*%!=HV(0]IY[Q8#D4]+2^*F?QV?I MO85U-5&51=*E(54!0:2)LX(7D:7BN3]GWO7*T.7\'&&5"ZV0M`#",K.;ULG, M`I0N&4Q/9^.L:^E_!^&%+`^JA`:_B+(`/43HAF0VO4^<K(CHUH?"WG8OI?#2 MB%J3=D9XG5BZ%"A[U#JL#S(E+Q*5A_GT#_AR7F%LM20EKA(PTWF`G/\K[[]* MVN>3:%921L'H)+1;YUL7SXH+E&F2(.;2`IUA.F80T1(RY_=*T?3*K,\9LC(- MR2-T3:*8,U25X\K)-#2J_2-EZ:T8#'#3EK]\I4U\J.4SWU\HQ`6J`-V2PC') MLL>,'R`)1&BZJP@3Y(%2#@!*X;*X6Q#>+;:"9Q++:*TK&%O#8!AI81>=CX=_ M[[A;_'.JAB%,4I&W=A,2JN$N;:)HUF(Y@H,QX!*%.<B?+NWG.;QK+Q"S&0NV MO1E/(W,D=L%FDT"9N6\:OY3D*E628T3W>CT[\J\^.I;19K]M8I;6*O(4UNQP M,3&:78UP-]4KK3@)K<O'HS)HGR[<V&R+<(\.;?<==M:%+)(8OS:7N@S#-U#9 M6![2MV2%.N!0*H>D5(XSZM\Y6)(HRVHU[!H4Q%8*IP+1*,"R5K*A/J2)`&!, M4T/IUIZ9<`1A4]2R(3(43A&`Z+J*D-*)7Q#&TA4T=17/6.:.W^R@1%`A:!A; MBC$AK:6[=VU,V6&M3(KT`983,.-6*)>VG`K!+<(EB(88QA.#7MMS%BD*`+$R MOA8H"N*89Q[!S*ED;V\FAVY!;*:R.IL+0,8*A9HN].20SG1BBUH=F2B;YGM2 M9`E<$23J4YV34.+D+*9(3GD84:%NQHJ30G`K`9FNA#]=AB-LH!U-CS1B<!%E M\;;G14)PX\/#F&:O`Z)SQ#'K"]&QNL;A&NK,A5SP[O,ODB@@V?C]AZ_NK(V: M+94*"UF9,F;*+(795J1RDPG9!#1Q+(*!=.LBJ`?A)"A6!01`9#R0$06C.%I8 M(L*5+ERA1118HHJBBP44VP]DAZL+#T=X_G-PB>`M;4PP_;5K>:C1AAA@8(&% MAAAAAK0$N8#J$3U='SRED*YR!N+GN[O%O4[NEMTTSG-ME*42B)1JT*4HDBDV MMAAAA<5"8%"%#[EQ]3!21:W'KL_+0]4@[:B26X$%&%\Y-V/#*=V36'8^15&L M\K"=@R`#'06,:RHMDGY!?QYD:M<+6>_,/64-D0`B0L"\O:SHGT<B3=8D@1;% M*@6`T2-@DW`L+<N#!L2X>BRY3I)4$3!8"!ZX;^"A83-&3*+0T(<"`%&N<=0) M4([W?W9HC4'SV*=]V%E3#YIM`:E]YI^?VUQ6<W]DHR-;NAHE!VJ'*ED009H6 M(%#,DS5SN(1&EQYLA2,<S3#7;T/$KZB9NRTZ@"^+2;&>Y$#9S)BD,!L"LH0N MLV"F=B`STYE8(DI)H@TW/[*5!$&!BLBYKE@DM[>%,J.43ACQR)@8ZAJYS00U MI<2:N/=,<OGZO6-H@?P05Z!RV"X7JYT#,U!.W5Q:!=6IMQ^#GO+,VS?9%`*Z M@*Q>!#TGNO;GM(KT:BN:,<,XD2B7=J.NUPG)5'9I,,\=%EH@@)7!E+MI+`Q# M"05#-#16YV!07U?-Y/<NH97G$68N&VVVBA/,*!L:"4VVY[8S.O5=-$(YY5V$ M16=&!5:PKE1*5H+6M^84!S5!*EH+^O?9Z;ZAY`C-O5WB.P87WWPI$QALD.IN MBB(B,1$;2B(B(BK!!MES):C&;@+`\:F_#+D=$D<'N];(?,>9B3@FN@YW=\K/ M/+T!OSOBY3SR%OV%=_,<^L3%"`ZF#.*[TM3)2Q`:!1OK"202F!"!5H/DG;(E M@ZV._KD1!A]E''6VL*])!Y&9)[4I/$(.SV>F5OF]'\?/;>=6ONSM5!=W@+NJ MJ4Q'4;'8,3"Q7,MUJHNQ6FV2"R7'.J8A=B5U[F'<4$3]TK5M0(9I.#C'8$B( M;J406#;*P$0J42(A3(&38?)L)N<@YXB*J,A-J=O)CL:@/-FS)VE'`#110H3E M3LSERS;G5`=1/;$!$BP^*1N:/."G`R&E\;2"P%G'!C%_'W0/+4.#S'AB+K8> M`0,8VVQC)V>UO6!\^/A)^J!E%';EZD<UP7K:)@:CVX0$!-BV%W?$!;#!02J1 M0LW;3L?;9J$,-0TAOO37>#,QI#!!@VV/G&3V>)AYT)V'<>2##J6"T]!9!K01 M7NS@C+>A\=E$NJF@I/:M21)R%Q$PY!HO.Q9C)9U'7.BPWM]W;*BE:RH"SH9F MTT5@I%4Q`K+L^EN,(C:#1!0Z@Q:1@194@>6!,<&C+A9JV,3L1-<ML!]W6&!Q MJ<B2\(8$`+,3YKA"EBA,),`$SBG9P1Y6&L4V)H@>5I0WYX4=1=%1-#&"9(0A MD1A0N*BU77A6M%@-/X;\Z"PEI-":0E-8T7.`W88F=7/1$16V,VGI1CG'KD*! MA<@-6!>Y0)0P/V8S#1?'#RZFZ:$(IZQPG>","#1/2%;`7$J4U[=.1!8<S#(N MT5B$6CT20JF![D&&%W;\G_+M]?;1VV4A'JH7P>?3L[Z)!K-)SI'`1Q8-#3&) MIK<T+HD!@0F`81+8!1Z#(%!Z?.W)UIU88;G$7'OV#"KP#P1I5Y\M/>$,7DPP M(5LR$A&9!V&:031,7";-3.C4`[,P'\H\I'<DB7>/RP:UBT@#40L\_LLJMX7: M3A@CMJ*XKH#-K']C:ZD0.*RPW0%C!E%DD-FU49%(',,P-)-0=AF-W+)^[!6( MDPNF1X!IR/FB<(UE@:B2\T[;D;LA;X7XB2E\UO!G@RZ&QO<_K02E3!3JF`88 M95&0G0X"3"<;P9C`I`=XZTTH99I"&B!HA=`:30N28)4EE$Q-+C%"G)VL]`P& M)4)U,I80STX"Y1*;8LE9:;<`6S.5*%.%]*JS)4%(H]7'7M=.='`")!.HOF;" M-0U(V(9`MGK4]V:=01`2++!76Q!"7(7J,C#XJR9"&[JA04BIB"DX5'5&9HSP MHA8DPW]PM.F.`B>C_-FAJX(7B4=RS"N<H[*#P:Y>3MFN$DFZ,05I]IQ[GK+: MRN7)'D6>>>[I=;S**NHUC$QA5!Y$J-"8_-F#(YFX#I(#5BWS,YDN@\=*L[D" MH56H2""0\;-3B*2"@ZE/CR+RX8[,4T"Q*8IR+T@PYR`4*92BA?$,(D0G0C`` M?,(W%.N=21G,&BR3]<R8K43@$HTBX)B\K*4"BJ!I&^%TI!R*3DJZ3O:07)A( M:"""`("$H*O';<]1%*0718JHN0!15`$)+K(@E4B<;;Z&8@%@E@7A.<U*HF+U ML&A'2-=YB2$"[1!=!6T@(5-^CQE/CH:AKPLMC*!U2P,?)R<AD8C[$YICITF( MP=1O(!OYS2*431XM551,WB]+A@0(3@Y,B.?/KOO%,4#H1;_.!/RI6KR$6J&[ M'Q[3=/("SL24.T?9"#,A"I\ZD;^P,3X(>DG;6CL2YF:B'KJ*B>PF\4HDKT'. M0!"#0#`#_R1W64H$*XJ03F8$@+#@<C,<87S&0F-!8Q+/4:&XZ1;`\L(>4M2P M,Y$/"RQ!.T-\.F$B)*G6B1^3>^2;AS1JGEFCT<721I(]T]CJ>#WL43($O_%W ))%.%"0+]H1K@ ` end >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200809270433.m8R4XuLO020815>