IO17538: ibmslapd may crash when searching as local admin group member

Tivoli Directory Server, Version 6.2.0.27-ISS-ITDS-IF0027
Tivoli Directory Server, Version 6.2.0.29-ISS-ITDS-IF0029
Tivoli Directory Server, Version 6.2.0.30-ISS-ITDS-IF0030

APAR status

• Closed as program error.

Error description

• ibmslapd may crash when searching as a local admin group member.
  The thread dump shows the following call stack:
  
  Thread 1 (Thread 0x7f737ffff700 (LWP 24087)):
  #0  0x00007f73ab950f0e in isEntryReplObject () from
  /opt/ibm/ldap/V6.2/lib64/libback-rdbm.so
  #1  0x00007f73ab907ef9 in CheckGATId () from
  /opt/ibm/ldap/V6.2/lib64/libback-rdbm.so
  #2  0x00007f73ab8a859d in CheckAttrAccess () from
  /opt/ibm/ldap/V6.2/lib64/libback-rdbm.so
  #3  0x00007f73ab8acedc in GetRestrictedAttribute () from
  /opt/ibm/ldap/V6.2/lib64/libback-rdbm.so
  #4  0x00007f73ab8c2983 in get_entryCheckSumOp(entry*,
  accessrequestinfo*, allOpStruct*) () from
  /opt/ibm/ldap/V6.2/lib64/libback-rdbm.so
  #5  0x00007f73ab902918 in level_search_cache(_RDBMRequest*,
  char*, filter*, char*, char**, int, int, int, int, long, char**,
  int, int, unsigned int, _LDAPControl*, int) ()    from
  /opt/ibm/ldap/V6.2/lib64/libback-rdbm.so
  #6  0x00007f73ab87382d in rdbm_back_search () from
  /opt/ibm/ldap/V6.2/lib64/libback-rdbm.so
  #7  0x0000000000468756 in do_search ()
  #8  0x000000000042e893 in
  ConnMgr::connection_operation(Connection*, Operation*) ()
  #9  0x0000000000488eb7 in Worker::Run() ()
  #10 0x000000000046c1c2 in Thr::_doRun(void*) ()
  #11 0x00000039ea4077f1 in start_thread () from
  /lib64/libpthread.so.0
  #12 0x00000039ea0e5ccd in clone () from /lib64/libc.so.6
  

Local fix

• After the start of the server, first search as administrator
  cn=root. The subsequent searches as local admin group member
  will work fine.
  

Problem summary

• After the start of the server, first search as administrator
  cn=root used a code path that did not set a field in a data
  structure used to determine if the entry in question was an
  replication object. The code fix was to set the appropriate
  data structure field.
  

Problem conclusion

• The fix for this APAR will be contained in the following
  maintenance packages:
  | interim fix | 6.2.0.27-ISS-ITDS-IF0027 |
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  IO17597 IO17598

Fix information

• Fixed component name

  IBM TIV DIR SER

• Fixed component ID

  5724J3960

Applicable component levels

• R620 PSY

     UP