Bug#1107395: OpenLDAP: slapd 2.5.13+dfsg-5 service frequently stops during everyday use

[chandler]

Package: slapd
Version: 2.5.13+dfsg-5
Severity: important
X-Debbugs-Cc: chandler at genome.arizona.edu

Dear Maintainer,
	Since upgrading slapd from 2.5.13+dfsg-2~bpo11+1 on April 29, 2025, it frequently yet randomly stops gracefully.  It's as if I ran `systemctl stop slapd` myself, and I have 
to run `systemctl start slapd` myself to fix it.  Sometimes it will stop several times a day, or it may last several days before stopping.
	It sounds exactly the same as what Jose 
described in #688797, although he claims the problem went away when 
upgrading to mdb, which we're already using.  This was never an issue with 2.5.13+dfsg-2~bpo11+1, which we had been using for over a year since I checked /var/log/apt/history, which 
has a year of apt history, and 
there were no other mentions of slapd.  Like Jose, I've had to create a systemd timer that runs a slapd-checker.service every few seconds to start slapd.service if needed, otherwise 
all kinds of weird things start happening in our networks without ldap working.
	There's nothing out of the ordinary shown in the syslog or journal or slapd.log (which is what "-l local0" is used for).  I'm curious what "slapd/invalid_config: true" means 
in the debconf info below.  Other than that, what more can be checked?
Thanks,
Chandler


-- System Information:
Debian Release: 12.10
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 'stable'), (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 'testing'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-34-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages slapd depends on:
ii  adduser                     3.134
ii  coreutils                   9.1-1
ii  debconf [debconf-2.0]       1.5.82
ii  init-system-helpers         1.65.2
ii  libargon2-1                 0~20171227-0.3+deb12u1
ii  libc6                       2.36-9+deb12u10
ii  libcrypt1                   1:4.4.33-2
ii  libldap-2.5-0               2.5.13+dfsg-5
ii  libltdl7                    2.4.7-7~deb12u1
ii  libodbc2                    2.3.11-2+deb12u1
ii  libperl5.36                 5.36.0-7+deb12u2
ii  libsasl2-2                  2.1.28+dfsg-10
ii  libwrap0                    7.6.q-32
ii  lsb-base                    11.6
ii  perl [libmime-base64-perl]  5.36.0-7+deb12u2
ii  psmisc                      23.6-1
ii  sysvinit-utils [lsb-base]   3.06-4

Versions of packages slapd recommends:
ii  ldap-utils  2.5.13+dfsg-5

Versions of packages slapd suggests:
ii  libsasl2-modules                                             2.1.28+dfsg-10
pn  libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimd  <none>
    al

-- Configuration Files:
/etc/default/slapd changed:
SLAPD_CONF=
SLAPD_USER="openldap"
SLAPD_GROUP="openldap"
SLAPD_PIDFILE=
SLAPD_SERVICES="ldap:/// ldapi:/// ldaps:///"
SLAPD_SENTINEL_FILE=/etc/ldap/noslapd
SLAPD_OPTIONS="-l local0"


-- debconf information:
  shared/organization: Genome.Arizona.EDU
  slapd/password_mismatch:
* slapd/postinst_error:
  slapd/purge_database: false
  slapd/domain: Genome.Arizona.EDU
  slapd/dump_database_destdir: /var/backups/slapd-VERSION
* slapd/no_configuration: true
  slapd/unsafe_selfwrite_acl:
  slapd/dump_database: when needed
  slapd/move_old_database: true
  slapd/ppolicy_schema_needs_update: abort installation
  slapd/upgrade_slapcat_failure:
  slapd/invalid_config: true