Bug#1107395: OpenLDAP: slapd 2.5.13+dfsg-5 service frequently stops during everyday use

Chandler Chandler at genome.arizona.edu
Sat Jun 14 02:11:22 BST 2025


On Sat, 7 Jun 2025 08:57:24 -0700 Ryan Tandy <ryan at nardis.ca> wrote:
> I guess you were running bullseye-backports previously and have now
> upgraded to bookworm, is that correct?

Yes sir!

> Between 2.5.13+dfsg-2 and -5 there are no code changes except for one
> fix to the sha2 password module.

> >otherwise all kinds of weird things start happening in our networks
> >without ldap working.
> That sounds like an understatement.

How unlike me, I apologize!

> >There's nothing out of the ordinary shown in the syslog or journal or
> >slapd.log (which is what "-l local0" is used for).
> Could you please share some of these logs?

Only if you insist.

> >Other than that, what more can be checked? 
> Good question. I think the important thing is to determine whether the
> events are initiated by slapd itself, or by something external telling
> systemd to stop it. I'm not a systemd expert and don't know the best way
> to figure that out, but I'd be looking at the journal, comparing logs
> with one of your events vs an explicit 'systemctl stop',

I'm no expert either but I did check all that beforehand and didn't
notice *a thing*.  My next best guess at that point was some sort of
malicious query that silently shut down the server, since I often saw
the same user making the last queries before the service stopped.  After
a while, that randomized though, so my conspiracy theory was in shambles.

Sooo, I downgraded back to version 2.5.13+dfsg-2~bpo11+1 shortly after
your message and, wouldn't you know, it's been steadily running since
then, over 6 days now and a new record...


-- 
The University of Arizona block 'A' logo.
	
*Chandler Sobel-Sorenson*  B.Sci.  he/him/his
Sr. Scientific Analyst & Systems Administrator
Arizona Genomics Institute
The School of Plant Sciences—Research
THE UNIVERSITY OF ARIZONA
Thomas W. Keating Bioresearch Bldg. #240
1657 E. Helen St. Rm. #200A24
Tucson, Az 85721
Office/Mobile/Text: 520-626-9589 <tel:+15206269589>
chandler at genome.arizona.edu  |  scar at arizona.edu
*www.genome.arizona.edu* <https://www.genome.arizona.edu/>
*Socials:*   	Me:  	Me LinkedIn
<https://www.linkedin.com/in/chandler-sobel-sorenson/> 	 *|*  	AGI: 
AGI LinkedIn
<https://www.linkedin.com/company/arizona-genomics-institute> 	 • 
Twitter/X logo <https://twitter.com/UAPacbioServCen> 	 *|*  	UA:  	UA
Facebook <https://facebook.com/uarizona> 	 •  	UA LinkedIn
<https://www.linkedin.com/school/the-university-of-arizona> 	 •  	UA
Twitter/X <https://x.com/uarizona> 	 •  	UA Instagram
<https://www.instagram.com/uarizona>

Land Acknowledgment
<https://www.arizona.edu/university-arizona-land-acknowledgment>

	Integrity, Compassion, Exploration, Adaptation, Inclusion,
Determination <https://www.arizona.edu/purpose-mission-values>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250613/38e5f133/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mR8Vv0b7HOO90Dhx.png
Type: image/png
Size: 5778 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250613/38e5f133/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: qXCeLtlGDP85dhIq.png
Type: image/png
Size: 389 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250613/38e5f133/attachment-0007.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: KPzy7ru4N6JrGIMt.png
Type: image/png
Size: 430 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250613/38e5f133/attachment-0008.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: twBGrQVEpcSENu3K.png
Type: image/png
Size: 356 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250613/38e5f133/attachment-0009.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 05ukep6I2yWlTPd5.png
Type: image/png
Size: 370 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250613/38e5f133/attachment-0010.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 07R4NVB6CE1jtzcE.png
Type: image/png
Size: 19777 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-openldap-devel/attachments/20250613/38e5f133/attachment-0011.png>


More information about the Pkg-openldap-devel mailing list