[Pkg-openldap-devel] Bug#803197: libldap built against GNUTLS breaks SOGo

[Robert McQueen]

Package: libldap-2.4-2
Version: 2.4.40+dfsg-1

Hi there,

Since upgrading to Jessie I ran into a bug in the SOGo groupware where 
it goes into an infinite loop after connecting to my LDAP server over TLS.

This bug doesn't happen if I downgrade libldap to 2.4.31-2, or if you 
configure SOGo to connect to LDAP without TLS, which are both detailed 
on the upstream bug:
  http://www.sogo.nu/bugs/view.php?id=3211

Inverse (upstream developers of SOGo groupware) have investigated and 
found that it seems like initialising TLS in LDAP is closing an 
unrelated file descriptor used internally for SOGo's event handling:
  http://www.sogo.nu/bugs/view.php?id=3211#c9021

Seeing as downgrading libldap seems to fix the bug it suggests a 
regression or side-effect from some changes between Wheezy and Jessie.

I'm not sure what the best next step is - I wonder if Ludovic (CC'd) or 
someone at Inverse would be able to create a standalone 
test/reproduction program so somebody could bisect and find a libldap 
change that exposes the bug, or if someone familiar with the code could 
review changes to the TLS code in libldap to see what has changed from 
2.4.31 to 2.4.40 that might explain it?

Let me know how I can help.

Thanks,
Rob