RE: ITS#5822 slapd goes into sleeping mode
by h.b.furuseth＠usit.uio.no
egarciab(a)alcatel-lucent.com writes:
> Did you see anytime a similar problem of slapd sleeping mode?
Slapd does not have a "sleeping mode", but there have been bugs with the
locking code. E.g. a function takes a lock but in the case of some rare
error return it forgets to release it. Then the next attempt to use
that resource (e.g. a locked entry, or a locked database) will hang.
I see you use "database oci". This was never part of OpenLDAP as far as
I know. <google oci site:openldap.org> shows the code was submitted.
I don't know the slapd SQL code and haven't checked if the code was
rejected because of some problem, or merged into back-sql, or something
else. If you browse these messages, maybe that'll turn up your problem.
--
Hallvard
14 years, 6 months
Re: (ITS#5823) clients/tools don't honor ldap.conf defaults
by ando＠sys-net.it
h.b.furuseth(a)usit.uio.no wrote:
> Pierangelo Masarati writes:
>> -ZZ should be deprecated, and -Z should simply and strictly require
>> StartTLS.
>
> Good point. Except then people who are used to new clients will
> make insecure connections when using old clients. Maybe -Z should
> be an error instead...
Mine was a generic criticism, not a suggestion for this specific case.
> What I'd really really like to do is throw away all the options,
> rename the programs, and start over. This time with the same option
> names in ldap tools, slap tools, and slapd itself. Goes with the
> someday-in-the-future library rewrite, I suppose.
:) p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
14 years, 6 months
Re: (ITS#5823) clients/tools don't honor ldap.conf defaults
by h.b.furuseth＠usit.uio.no
Pierangelo Masarati writes:
> -ZZ should be deprecated, and -Z should simply and strictly require
> StartTLS.
Good point. Except then people who are used to new clients will
make insecure connections when using old clients. Maybe -Z should
be an error instead...
What I'd really really like to do is throw away all the options,
rename the programs, and start over. This time with the same option
names in ldap tools, slap tools, and slapd itself. Goes with the
someday-in-the-future library rewrite, I suppose.
--
Hallvard
14 years, 6 months
Re: ITS#5822 slapd goes into sleeping mode
by ando＠sys-net.it
GARCIA BARRERA, Eduardo (Eduardo) wrote:
> Ok, I can fully understand your point.
>
> Anyway, from your expert point of view on openldap, and understanding
> that this is an obsolete version of slapd, I would like only two things
> that you probably know without consuming much time from your side.
It's not a matter of consuming my time. We're all condemned to consume
all of our time sooner or later. It's a matter of consuming it on
something we consider worth it, and enjoy it in the meanwhile. One of
the pleasures of working at free software is that nobody can really tell
you what to work at :)
> Did you see anytime a similar problem of slapd sleeping mode?
Slapd has no "sleeping mode" (would it make any sense?) Do the logs
show anything relevant *before* slapd becomes unresponsive?
You mentioned that attaching the process with gdb is not an option,
since it's operating in a very critical environment. However, I believe
you wouldn't make things any worse when it's no longer responding anyway.
> Did you think if there is any solaris patches that could fix similar
> problems?
Not a solaris expert, sorry.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
14 years, 6 months
RE: ITS#5822 slapd goes into sleeping mode
by egarciab＠alcatel-lucent.com
Ok, I can fully understand your point.
Anyway, from your expert point of view on openldap, and understanding
that this is an obsolete version of slapd, I would like only two things
that you probably know without consuming much time from your side.
Did you see anytime a similar problem of slapd sleeping mode?
Did you think if there is any solaris patches that could fix similar
problems?
Thanks a lot for your time and effort Pierlangelo,
Eduardo
-----Original Message-----
From: Pierangelo Masarati [mailto:ando@sys-net.it]
Sent: viernes, 21 de noviembre de 2008 12:11
To: GARCIA BARRERA, Eduardo (Eduardo)
Cc: openldap-its(a)openldap.org
Subject: Re: ITS#5822 slapd goes into sleeping mode
GARCIA BARRERA, Eduardo (Eduardo) wrote:
> Pierlangelo,
>
> First of all, thanks for your quick answer. I just read carefully the
> instructions on "how to report a bug", and I will try my best to
> gather it.
>
> Anyway, I got a question for you. Since the slapd process does not
> crash but keeps in a sleeping mode, and due to this machine is working
> in a very critical enviroment for our customer, is it needed to run
> gdb tool?
>
> Besides, the problem happens in a random way, so we could run those
> commands when the slapd is sleeping and does not answer. When this
> happens, the ldapsearch command is not answered.
>
> Platform: SunOS MVICBDS01D05 5.9 Generic_118558-35 sun4u sparc
> SUNW,Sun-Fire-15000
>
> In this machine is also running oracle version 9.2.0.8 .
>
>
> The slapd.conf file is attached to this email.
One issue is that you should clarify what version you're using. If
you're really using a OpenLDAP 2.1 release, then it's probably not worth
the effort of tracing the issue: that release became historic in early
2004. No one will ever spend time finding a bug in it, or even
backporting fixes to known bugs (unless very well rewarded, I guess).
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
14 years, 6 months
Re: ITS#5822 slapd goes into sleeping mode
by ando＠sys-net.it
GARCIA BARRERA, Eduardo (Eduardo) wrote:
> Pierlangelo,
>
> First of all, thanks for your quick answer. I just read carefully the
> instructions on "how to report a bug", and I will try my best to gather
> it.
>
> Anyway, I got a question for you. Since the slapd process does not
> crash but keeps in a sleeping mode, and due to this machine is working
> in a very critical enviroment for our customer, is it needed to run gdb
> tool?
>
> Besides, the problem happens in a random way, so we could run those
> commands when the slapd is sleeping and does not answer. When this
> happens, the ldapsearch command is not answered.
>
> Platform: SunOS MVICBDS01D05 5.9 Generic_118558-35 sun4u sparc
> SUNW,Sun-Fire-15000
>
> In this machine is also running oracle version 9.2.0.8 .
>
>
> The slapd.conf file is attached to this email.
One issue is that you should clarify what version you're using. If
you're really using a OpenLDAP 2.1 release, then it's probably not worth
the effort of tracing the issue: that release became historic in early
2004. No one will ever spend time finding a bug in it, or even
backporting fixes to known bugs (unless very well rewarded, I guess).
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
14 years, 6 months
RE: ITS#5822 slapd goes into sleeping mode
by egarciab＠alcatel-lucent.com
This is a multi-part message in MIME format.
------_=_NextPart_001_01C94BC8.DD31A533
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
Pierlangelo,
First of all, thanks for your quick answer. I just read carefully the
instructions on "how to report a bug", and I will try my best to gather
it.
Anyway, I got a question for you. Since the slapd process does not
crash but keeps in a sleeping mode, and due to this machine is working
in a very critical enviroment for our customer, is it needed to run gdb
tool?=20
Besides, the problem happens in a random way, so we could run those
commands when the slapd is sleeping and does not answer. When this
happens, the ldapsearch command is not answered.
Platform: SunOS MVICBDS01D05 5.9 Generic_118558-35 sun4u sparc
SUNW,Sun-Fire-15000
In this machine is also running oracle version 9.2.0.8 .
The slapd.conf file is attached to this email.
Thanks a lot in advance
Regards
Eduardo
-----Original Message-----
From: Pierangelo Masarati [mailto:ando@sys-net.it]=20
Sent: jueves, 20 de noviembre de 2008 16:57
To: GARCIA BARRERA, Eduardo (Eduardo)
Cc: openldap-its(a)openldap.org
Subject: Re: ITS#5822 slapd goes into sleeping mode
There exists no OpenLDAP 2.1 b102. There exists a 2.1 branch, which was
obsoleted few years ago. Even if there existed one, you don't provide
enough info that could help debugging your issue.
Please see <http://www.openldap.org/faq/data/cache/56.html> for details
about how to report an issue.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
------_=_NextPart_001_01C94BC8.DD31A533
Content-Type: application/octet-stream;
name="slapd.conf"
Content-Transfer-Encoding: base64
Content-Description: slapd.conf
Content-Disposition: attachment;
filename="slapd.conf"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------_=_NextPart_001_01C94BC8.DD31A533--
14 years, 6 months
Re: (ITS#5823) clients/tools don't honor ldap.conf defaults
by ando＠sys-net.it
h.b.furuseth(a)usit.uio.no wrote:
> hyc(a)OpenLDAP.org writes:
>> I suggest that we use option==1 for on, and option>1 for off, to
>> minimize the impact of the change. (E.g., to explicitly turn off
>> referrals, use ldapsearch -CC.)
>
> That conflicts with today's -ZZ, which seems a bad option to
> create confusion about.
-ZZ should be deprecated, and -Z should simply and strictly require
StartTLS. The concept itself of having StartTLS optional (without
notice of whether it succeeded or not!) sounds extremely bogus to me.
In all the clients I develop, I never provide such alternative, either
on or off.
p.
Ing. Pierangelo Masarati
OpenLDAP Core Team
SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office: +39 02 23998309
Mobile: +39 333 4963172
Fax: +39 0382 476497
Email: ando(a)sys-net.it
-----------------------------------
14 years, 6 months
(ITS#5824) #if/#elif issues in thread #includes
by h.b.furuseth＠usit.uio.no
Full_Name: Hallvard B Furuseth
Version: HEAD, RE24
OS: Linux
URL:
Submission from: (NULL) (129.240.6.233)
Submitted by: hallvard
This ldap_pvt_thread.h snippet is invalid:
#define LDAP_PVT_THREAD_STACK_SIZE ( 1 * 1024 * 1024 * sizeof(void *) )
#elif LDAP_PVT_THREAD_STACK_SIZE == 0
The standard is worded so that the #elif expression is evaluated even
when the preceding #if was true - so the sizeof(void*) causes a syntax
error in the preprocessor.
Noticed by Debian when compiling with the upcoming gcc 4.4:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505421
This ldap_int_thread.h snippet:
#elif defined( HAVE_CTHREAD_H
# include <cthreads.h>
lacks a ')' and should test HAVE_CTHREAD*S*_H.
14 years, 6 months
Re: (ITS#5823) clients/tools don't honor ldap.conf defaults
by hyc＠symas.com
Hallvard B Furuseth wrote:
> hyc(a)OpenLDAP.org writes:
>> I suggest that we use option==1 for on, and option>1 for off, to
>> minimize the impact of the change. (E.g., to explicitly turn off
>> referrals, use ldapsearch -CC.)
>
> That conflicts with today's -ZZ, which seems a bad option to
> create confusion about. Also with ldapsearch -L[L[L]].
>
> Another variant is -C = on and +C = off. Backwards, but it's
> not our fault that Unix chose "-" for "on":-) Unless +foo
> means something special on Windows command lines?
>
This may not be a big deal after all. The only options affected are -C and -N,
and -C is essentially useless now. (And is undocumented.) So perhaps this can
be mostly ignored, and we just need a workable approach for -N and any future
boolean options.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/
14 years, 6 months
