Bug#722569: libsasl2-2: Apparent file descriptor leak

[Dominik Klein]

Package: libsasl2-2
Version: 2.1.25.dfsg1-6+deb7u1
Severity: important

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?

I am running an openldap with sasl on debian wheezy. Current package versions are:

ii  libsasl2-2:amd64                   2.1.25.dfsg1-6+deb7u1               amd64        Cyrus SASL - authentication abstraction library
ii  libsasl2-modules:amd64             2.1.25.dfsg1-6+deb7u1               amd64        Cyrus SASL - pluggable authentication modules
ii  libsasl2-modules-gssapi-mit:amd64  2.1.25.dfsg1-6+deb7u1               amd64        Cyrus SASL - pluggable authentication modules (GSSAPI)
ii  sasl2-bin                          2.1.25.dfsg1-6+deb7u1               amd64        Cyrus SASL - administration programs for SASL users database
ii  slapd                              2.4.31-1+nmu2                       amd64        OpenLDAP server (slapd)

slapd keeps running into "too many open files" errors every now and then since, apparently, some fds are not closed properly. I see a lot of lines like

slapd     11014 11072    openldap  491u      REG                9,1     4779   16925389 /var/tmp/ldap_109 (deleted)

in lsof|grep ldap output (notice the "deleted", which I believe indicates what I said above). I have more than 3000 of these after one hour of running slapd with around 200 connected clients.

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

Increasing ulimit -n obviously buys some time, but does not really help.

Talking on #openldap in freenode IRC, I was suggested looking into this patch, which apparently helped solve this problem for redhat:

https://github.com/PhantomX/slackbuilds/blob/master/cyrus-sasl/patches/cyrus-sasl-2.1.26-release-server_creds.patch

-- System Information:
Debian Release: 7.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages libsasl2-2 depends on:
ii  libc6              2.13-38
ii  libdb5.1           5.1.29-5
ii  multiarch-support  2.13-38

Versions of packages libsasl2-2 recommends:
ii  libsasl2-modules  2.1.25.dfsg1-6+deb7u1

libsasl2-2 suggests no packages.

-- no debconf information