VError: Parser error for undefined:undefined: options.value must be a Buffer or Object #956
Comments
|
Please provide a minimal reproducible example (MRE). Doing so will help us diagnose your issue. It should be the bare minimum code needed to trigger the issue, and easily runnable without any changes or extra code. Please review the integration tests, e.g. issue-940.test.js, for examples of good MREs. You may use a GitHub repository to host the code if it is too much to fit in a code block (or two). |
|
As far I can tell it is just nslcd doing its core job of authenticating a user against the LDAP socket. But works with ldapjs 3.0.2 .. broken with 3.05... I'm going to test 3.0.3 and 3.0.4 hoping it helps to narrow down the issue. |
|
works with ldaps 3.0.2, breaks with ldapjs 3.0.3 I dont know exactly how to make a MRE that involves a bit more complicated setup with nslcd, but IMHO it really happens as soon nslcd tries to bind |
|
An MRE would include:
|
|
I recommend using Wireshark to inspect the conversation between your client and server to determine what message is being sent that causes the crash. |
|
I'm working on a server instance and the mathcing nslcd config file. |
|
|
Please review my original response to this thread. Needing to setup extra services and user accounts is not viable. |
|
Hmm nslcd really should be a wire compatible target IMO it is the LDAP
client on Unix. Anyway if you really need it I can record the crosstalk on
the socket and replay it in a mockup client. Will come.
…On Thu, Nov 23, 2023, 17:42 James Sumners ***@***.***> wrote:
Please review my original response to this thread. Needing to setup extra
services and user accounts is not viable.
—
Reply to this email directly, view it on GitHub
<#956 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AADY6LYIPVUIFN7VDQ34N3LYF54HXAVCNFSM6AAAAAA7XQMC7GVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQMRUG4YTCOJTGU>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>
|
|
There you go. A selfcontained and much simpler MWE, as I found out I dont need any of LDAP implementation (at least once I sniffed out the nslcd bind operation, to create it I had to answer to it search operation fitst) This is all needed: import fs from 'node:fs/promises';
import net from 'node:net';
import util from 'node:util';
import ldap from 'ldapjs';
const server = ldap.createServer( );
const listen = util.promisify( server.listen.bind( server ) );
await fs.rm( '/tmp/mwe-socket', { force: true } );
await listen( '/tmp/mwe-socket' );
const client = net.createConnection( { path: '/tmp/mwe-socket' } );
client.write( Buffer.from( '3046020101602202010304157569643d626f622c6f753d6d77652c64633d636f6d8006666f6f626172a01d301b0419312e332e362e312e342e312e34322e322e32372e382e352e31', 'hex' ) );
client.write( Buffer.from( '3081b80201036381b2040d6f753d6d77652c64633d636f6d0a01020a0100020100020100010100a02aa31c040b6f626a656374436c617373040d736861646f774163636f756e74a30a04037569640403626f623066040a736861646f77466c61670409736861646f774d61780409736861646f774d696e0410736861646f774c6173744368616e67650403756964040c736861646f77457870697265040e736861646f77496e616374697665040d736861646f775761726e696e673006020104500103', 'hex' ) );expected behavior of this code.. hang (as the server will keep listening on the socket and the client socket stays open) |
|
It's quite difficult to translate these hex strings back to human readable LDAP messages, and it's just more effort than I am willing to put in. Can you please provide a trace file of the full LDAP conversation those two Just looking at the hex dumps in a hex editor, it looks like something has:
|
|
I didnt use wireshark before, I hacked together a middleman-listener. Anyway I also changed the code to run over TCP and appended a wirshark dump. FYI: The middleman-listener looked like this: import fs from 'node:fs/promises';
import net from 'node:net';
import util from 'node:util';
function handler( client )
{
console.log( 'GOT SOCKET' );
const server = net.createConnection( { path: 'socket' } );
client.on( 'data', ( data ) => {
console.log( 'C', data.toString('hex') );
server.write( data );
} );
client.on( 'end', ( ) => {
server.end( );
} );
server.on( 'data', ( data ) => {
console.log( 'S', data.toString('hex') );
client.write( data );
} );
server.on( 'end', ( ) => {
client.end( );
} );
};
const server = net.createServer( handler ) ;
const listen = util.promisify( server.listen.bind( server ) );
process.umask( 0 );
await fs.rm( '/var/run/slapd/ldapi', { force: true } );
await listen( '/var/run/slapd/ldapi' );
process.umask( 0x022 );
console.log( 'cross listening' );And the complete crosstalk looks like this. This dump allowed me to use the Buffer writes in the MWE above to create the playback that can realibly crash ldapjs. I mean this should really be the ideal scenario for debugging. As you see on the second connection the server doesnt get even to answer, thats why I considered it all that is necessary. The first connection is the search query and the ldapjs reply (delivering the requested entry). Also interestingly while working on this I discovered on ubuntu (mantic) things work as expected, the crash happens only on debian (bookworm). I hope this is now really all you could ask for. |
|
This is the minimal reproduction: 'use strict'
const ldapjs = require('ldapjs')
let client
const server = ldapjs.createServer()
server.bind('ou=example', (req, res, next) => {
res.end()
return next()
})
server.listen(1666, '127.0.0.1', serverListenCB())
function serverListenCB() {
client = ldapjs.createClient({ url: 'ldap://127.0.0.1:1666/' })
const ppControl = new ldapjs.PasswordPolicyControl()
client.bind('cn=foo,ou=example', 'secret', ppControl, (err) => {
client.unbind(server.close.bind(server))
})
}A pull request to address it is welcome. |
|
So after all this you push it back to me? Sorry this is getting ridicolous, I'm going to work on dropping this library.. this is practically unmainted if I have to do it all in the end myself, and you just waisted my time. seesh. |
|
Lines 13 to 19 in 6ceef13 No one is required to give you free support. I worked quite diligently to guide you toward finding the cause, and will provide guidance in solving it. Those who are affected by some issue, and need it resolved, will see a resolution much quicker by their own involvement and effort. Otherwise, it will get resolved whenever someone with interest and time decides to take it on. You're welcome to use whatever software you like. Threats will not induce any different outcome here. |
|
You were not helping me in guiding in anyway.. if I need to fix it myself say right from the start instead of demanding a MRE. And I invested time to make you a MRE. But you didnt like it. So I made you another one, one you literally just would have needed to run to see where the parser of your lib messed up. But you don't like that MRE, you wanted it exactly the way you like it. So I made you another one.. and then finally you say OK it's a bug I have to fix it. Id that is the outcome say so from the start providing you with MREs to your liking is not "guidance". If I need to fix it myself say so from the start instead of keeping me busy for 2 days for your MREs. I could reproduce it from start. I obviously cannot work with you. BTW it is a bug most likely you introduced. Also do to your strange decision to have sublibraries with ^ syntax past ldapjs version are not easily reproduceable. As after 3.0.3 it always installed the latest sublibs. And it is a bug with the most important LDAP client there is, so normally and other OpenSource software would be concerned. Heck I even contributed to this lib in the past. Sorry your way handling people is unacceptable. Seeing joyen the homepage I thought this would be a serious library, but it's handled not. |
|
Whether or not you agree:
It does not matter who introduced any issue.
If no one was concerned, the issue would have been closed as "won't fix."
We do not have any affiliation with Joyent. This project is maintained by a community of volunteers. And without them, this library would not be usable by any current version of Node.js. You are still welcome to contribute a fix for this issue. Otherwise, it will remain open until someone with time and motivation takes it on. |
Then you absolutely have to remove the logo from the ldapjs homepage. And you still fail to realize the issue is pestering me mutliple times about MRE.. without telling me in front, if I have to fix it myself.. this is absolutely inacceptable behaviour. |
Hello, my ldapjs implemented LDAP server crashed with following backtrace
As I just got notified by a recently installed crash&restart notifier I cannot yet reproduce this at will.
At least what I can tell from the log it does not relate to any of my code yet and is triggered purely by some Ldap client on the ldap socket before any of mine provided LDAP server handles gets notified.
Any ideas?
PS: "ldapjs": "^3.0.6",
The text was updated successfully, but these errors were encountered: