c0ad918 Ticket 48862 - At startup DES to AES password conversion causes timeout in start script

Authored and Committed by mreynolds 3 years ago
    Ticket 48862 - At startup DES to AES password conversion causes timeout in start script
    
    Bug Description:  At server start all the backends are searches for entries that contain
                      DES password attributes as defined in the plugin.  These are typically
                      unindexed searches, and if there is a very large backend this can cause
                      the server startup to timeout.
    
    Fix Description:  At startup only check "cn=config" for entries with DES password attributes.
                      A new "conversion" task has been created that can be run after startup
                      to search all backends(if a suffix is not specified), or specific backends.
    
                          dn: cn=convertPasswords, cn=des2aes,cn=tasks,cn=config
                          objectclass: top
                          objectclass: extensibleObject
                          suffix: dc=example,dc=com
                          suffix: dc=other,dc=suffix
    
                      Another bug was discovered in pw_rever_encode() in pw.c where a "for" loop
                      counter was accidentially reused by a second "for" loop.  This could lead
                      to an infinite loop/hang.
    
                      Updated the CI test to perform the conversion task.
    
    https://fedorahosted.org/389/ticket/48862
    
    Reviewed by: nhosoi(Thanks!)
    
    (cherry picked from commit 11f55f3dd2a2c44ddf7b5be54273401add13b1bc)
    
        
file modified
+53 -142
file modified
+2 -2
file modified
+345 -1