From 0703a575b4e337e7ce41860956bd339c12cd44ea Mon Sep 17 00:00:00 2001

From: Thierry Bordaz <tbordaz@redhat.com>

Date: Tue, 20 Jun 2017 18:22:33 +0200

Subject: [PATCH] NULL LDAP context in call to ldap_search_ext_s during search

    KDC crashes on quite random interval while trying to reach LDAP

    https://pagure.io/freeipa/issue/7017

Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

---

 daemons/ipa-kdb/ipa_kdb.c | 6 ++++++

 1 file changed, 6 insertions(+)

diff --git a/daemons/ipa-kdb/ipa_kdb.c b/daemons/ipa-kdb/ipa_kdb.c

index 050bfc90cef1bce4c932f54bb6050438c60ca79f..c0f1e276ca32ecb318add3a0d36f57acc3d17d51 100644

--- a/daemons/ipa-kdb/ipa_kdb.c

+++ b/daemons/ipa-kdb/ipa_kdb.c

@@ -465,6 +465,12 @@ int ipadb_get_connection(struct ipadb_context *ipactx)

     ret = ipadb_reinit_mspac(ipactx, false);

     if (ret && ret != ENOENT) {

         /* TODO: log that there is an issue with adtrust settings */

+        if (ipactx->lcontext == NULL) {

+            /* for some reason ldap connection was reset in ipadb_reinit_mspac

+             * and is no longer established => failure of ipadb_get_connection

+             */

+            goto done;

+        }

     }

     ret = 0;

-- 

2.9.4