[Pkg-openldap-devel] Bug#419222: after a while slapd hangs

Sat Apr 14 12:43:27 UTC 2007

Package: slapd
Version: 2.3.30-5
Severity: important

I use slapd in production environment with 167 entrys.
The running environment is in a vmware-server 1.0.1.

I use slapd with tls to authenticate users.

After some weeks, days or even hours slapd suddenly stops working. It hangs
and the servers load grows.

I use it with hdb backend.

There is a cut of the relevant log:

Apr 14 12:10:01 v-belso-1 slapd[16844]: conn=3305 fd=84 ACCEPT from IP=10.1.3.4:48156 (IP=0.0.0.0:636)
Apr 14 12:10:01 v-belso-1 slapd[16844]: conn=3305 fd=84 TLS established tls_ssf=168 ssf=168
Apr 14 12:10:01 v-belso-1 /USR/SBIN/CRON[7760]: (root) CMD (/usr/local/sbin/check_prg.sh)
Apr 14 12:10:31 v-belso-1 slapd[16844]: connection_input: conn=3305 deferring operation: binding
Apr 14 12:11:05 v-belso-1 slapd[16844]: conn=3306 fd=85 ACCEPT from IP=10.1.3.13:53815 (IP=0.0.0.0:636)
Apr 14 12:11:05 v-belso-1 slapd[16844]: conn=3306 fd=85 TLS established tls_ssf=128 ssf=128
Apr 14 12:11:51 v-belso-1 slapd[16844]: conn=3307 fd=86 ACCEPT from IP=127.0.0.1:3219 (IP=0.0.0.0:389)
Apr 14 12:12:00 v-belso-1 slapd[16844]: conn=3308 fd=87 ACCEPT from IP=10.1.3.4:48158 (IP=0.0.0.0:636)
Apr 14 12:12:00 v-belso-1 slapd[16844]: conn=3308 fd=87 TLS established tls_ssf=168 ssf=168

/etc/init.d/slapd stop:
Apr 14 12:12:03 v-belso-1 slapd[16844]: daemon: shutdown requested and initiated.
Apr 14 12:12:03 v-belso-1 slapd[16844]: conn=6 fd=14 closed (slapd shutdown)
Apr 14 12:12:03 v-belso-1 slapd[16844]: conn=7 fd=20 closed (slapd shutdown)
Apr 14 12:12:03 v-belso-1 slapd[16844]: conn=854 fd=21 closed (slapd shutdown)
Apr 14 12:12:03 v-belso-1 slapd[16844]: conn=2548 fd=25 closed (slapd shutdown)
Apr 14 12:12:03 v-belso-1 slapd[16844]: conn=3130 fd=26 closed (slapd shutdown)
Apr 14 12:12:03 v-belso-1 slapd[16844]: conn=3133 fd=28 closed (slapd shutdown)
Apr 14 12:12:03 v-belso-1 slapd[16844]: conn=374 fd=34 closed (slapd shutdown)
Apr 14 12:12:03 v-belso-1 slapd[16844]: conn=966 fd=36 closed (slapd shutdown)
Apr 14 12:12:03 v-belso-1 slapd[16844]: slapd shutdown: waiting for 89 threads to terminate

/etc/init.d/slapd start:
Apr 14 12:12:13 v-belso-1 slapd[8026]: @(#) $OpenLDAP: slapd 2.3.30 (Mar  9 2007 05:43:02) $    root at windlord:/tmp/buildd/openldap2.3-2.3.30/debian/build/servers/slapd
Apr 14 12:12:13 v-belso-1 slapd[8026]: /etc/ldap/slapd.conf: line 122: rootdn is always granted unlimited privileges.
Apr 14 12:12:13 v-belso-1 slapd[8026]: /etc/ldap/slapd.conf: line 133: rootdn is always granted unlimited privileges.
Apr 14 12:12:13 v-belso-1 slapd[8026]: /etc/ldap/slapd.conf: line 144: rootdn is always granted unlimited privileges.
Apr 14 12:12:13 v-belso-1 slapd[8026]: /etc/ldap/slapd.conf: line 156: rootdn is always granted unlimited privileges.
Apr 14 12:12:13 v-belso-1 slapd[8026]: /etc/ldap/slapd.conf: line 168: rootdn is always granted unlimited privileges.
Apr 14 12:12:13 v-belso-1 slapd[8026]: /etc/ldap/slapd.conf: line 179: rootdn is always granted unlimited privileges.
Apr 14 12:12:13 v-belso-1 slapd[8027]: bdb_db_open: unclean shutdown detected; attempting recovery.
Apr 14 12:12:14 v-belso-1 slapd[8027]: slapd starting
Apr 14 12:12:15 v-belso-1 slapd[8027]: conn=0 fd=14 ACCEPT from IP=127.0.0.1:3220 (IP=0.0.0.0:389)
Apr 14 12:12:15 v-belso-1 slapd[8027]: conn=0 op=0 BIND dn="" method=128
Apr 14 12:12:15 v-belso-1 slapd[8027]: conn=0 op=0 RESULT tag=97 err=0 text=
Apr 14 12:12:15 v-belso-1 slapd[8027]: conn=0 op=1 SRCH base="" scope=2 deref=0
filter="(objectClass=*)"
Apr 14 12:12:15 v-belso-1 slapd[8027]: conn=0 op=1 SEARCH RESULT tag=101 err=32
nentries=0 text=
Apr 14 12:12:15 v-belso-1 slapd[8027]: conn=0 op=2 UNBIND
Apr 14 12:12:15 v-belso-1 slapd[8027]: conn=0 fd=14 closed
Apr 14 12:12:28 v-belso-1 slapd[8027]: conn=1 fd=14 ACCEPT from IP=127.0.0.1:1337 (IP=0.0.0.0:636)
Apr 14 12:12:28 v-belso-1 slapd[8027]: conn=1 fd=14 TLS established tls_ssf=256
ssf=256
Apr 14 12:12:28 v-belso-1 slapd[8027]: conn=1 op=0 BIND dn="" method=128

Once it caused a db corruption.

-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-686
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages slapd depends on:
ii  adduser                   3.102          Add and remove users and groups
ii  coreutils                 5.97-5.3       The GNU core utilities
ii  debconf [debconf-2.0]     1.5.11         Debian configuration management sy
ii  libc6                     2.3.6.ds1-13   GNU C Library: Shared libraries
ii  libdb4.2                  4.2.52+dfsg-2  Berkeley v4.2 Database Libraries [
ii  libiodbc2                 3.52.4-5       iODBC Driver Manager
ii  libldap-2.3-0             2.3.30-5       OpenLDAP libraries
ii  libltdl3                  1.5.22-4       A system independent dlopen wrappe
ii  libperl5.8                5.8.8-7        Shared Perl library
ii  libsasl2-2                2.1.22.dfsg1-8 Authentication abstraction library
ii  libslp1                   1.2.1-6.2      OpenSLP libraries
ii  libssl0.9.8               0.9.8c-4       SSL shared libraries
ii  libwrap0                  7.6.dbs-13     Wietse Venema's TCP wrappers libra
ii  perl [libmime-base64-perl 5.8.8-7        Larry Wall's Practical Extraction 
ii  psmisc                    22.3-1         Utilities that use the proc filesy

Versions of packages slapd recommends:
pn  libsasl2-modules              <none>     (no description available)

-- debconf information excluded