June 2009 - openldap-bugs

(ITS#6174) Permanent high CPU Load with Multimaster

by Frank.Offermanns＠caseris.de

Full_Name: Frank Offermanns Version: 2.4.16 OS: Windows XP/Ubuntu 9.04 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (217.6.189.242) Hello everyone, I compiled the LDAP Version 2.4.16 from CVS at 16 June with MINGW/MSYS on Windows. I used the latest version because every previous 2.4.16 version had similar problems. I have two systems working together as multimasters. After a random time (less than a day) it can happen, that a core of a CPU uses 100 % CPU Load. Both System seems to be working correctly, but the High CPU Load slows down everything. No matter how long i wait, this core stays at 100 % CPU load. On another test a test write operation never returned and I also had the high CPU load. After i killed my test write process, the slapd.exe crashed. (The write procees was on a another PC) I also tested the original/downloadable 2.4.16 with a Windows Cygwin build and a Ubuntu build. But i had similar problems with each build. I have not tested the latest Version with Ubuntu or Cygwin. I tried to compile it with Ubuntu 9.04 to check if this problem is still OS independent but got this error when calling configure (CPPFLAGS=-D_GNU_SOURCE ./configure --enable-hdb=mod --enable-bdb=mod --enable-modules=yes --enable-syncprov=mod): "bash: ./configure: /bin/sh^M: bad interpreter: No such file or directory" Here is my slapd.conf which i converted with "slapdtest -f slapd.conf -F slapd" I am not interested in configuration replication. I know, that for security reasons i should not take the superuser for the replication, but i did this to simplify my tests. Personcaesar and ConfigObjects are selfdefined shemas. # # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. # ucdata-path ./ucdata include ./schema/core.schema include ./schema/cosine.schema include ./schema/Personcaesar.schema include ./schema/ConfigObjects.schema loglevel 0 # Define global ACLs to disable default read access. # Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. #referral ldap:/root.openldap.org pidfile ./run/slapd.pid argsfile ./run/slapd.args # Load dynamic backend modules: # modulepath ./libexec/openldap # moduleload back_bdb.la # moduleload back_ldap.la # moduleload back_ldbm.la # moduleload back_passwd.la # moduleload back_shell.la # Sample security restrictions # Require integrity protection (prevent hijacking) # Require 112-bit (3DES or better) encryption for updates # Require 63-bit encryption for simple bind # security ssf=1 update_ssf=112 simple_bind=64 # Sample access control policy: # Root DSE: allow anyone to read it # Subschema (sub)entry DSE: allow anyone to read it # Other DSEs: # Allow self write access # Allow authenticated users read access # Allow anonymous users to authenticate # Directives needed to implement policy: # access to dn.base="" by * read # access to dn.base="cn=Subschema" by * read # access to * # by self write # by users read # by anonymous auth access to * by dn.one="ou=Admins,o=caesar" write by * read ServerID 1 "ldap://CAS-WS090309.ub2.cae.local" ServerID 2 "ldap://franktestxp.ub2.cae.local" # # if no access controls are present, the default policy # allows anyone and everyone to read anything but restricts # updates to rootdn. (e.g., "access to * by * read") # # rootdn can always read and write EVERYTHING! ####################################################################### database config rootdn cn=config rootpw config ####################################################################### # BDB database definitions ####################################################################### database hdb cachesize 10000 idlcachesize 30000 suffix "" checkpoint 1024 5 rootdn "cn=Administrator,o=caesar" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw secret # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory "c:/all/data" dbconfig set_cachesize 0 400000000 1 dbconfig set_flags DB_LOG_AUTOREMOVE dbconfig set_lg_regionmax 1048576 dbconfig set_lg_max 10485760 dbconfig set_lg_bsize 2097152 # Indices to maintain index sn pres,eq index cn pres,eq,sub index MasterApp pres,eq index RightVoice pres,eq index DCOMServer pres,eq index ExtensionSMS pres,eq index ExtensionFax pres,eq,sub index ExtensionVoice pres,eq,sub index ExtensionCTI pres,eq index Deleted pres,eq index GUID pres,eq index CTIServerName pres,eq,sub index LastSyncUser pres,eq index ApplicationPhoneNr pres,eq,sub index NetDialLoginName pres,eq index email pres,eq index FullExtensionVoice pres,eq,sub index FullExtensionFax pres,eq,sub index FullExtensionSMS pres,eq index FullName pres,eq index PersonalID pres,eq index entryUUID eq index entryCSN eq index objectClass eq overlay syncprov syncprov-checkpoint 1000 60 syncprov-sessionlog 10000 syncrepl rid=001 provider="ldap://CAS-WS090309.ub2.cae.local" searchbase="o=caesar" type=refreshAndPersist retry="5 3 15 +" binddn="cn=Administrator,o=caesar" bindmethod=simple credentials="secret" syncrepl rid=002 provider="ldap://franktestxp.ub2.cae.local" searchbase="o=caesar" type=refreshAndPersist retry="5 3 15 +" binddn="cn=Administrator,o=caesar" bindmethod=simple credentials="secret" MirrorMode On sizelimit size.soft=100 size.hard=1000 size.prtotal=unlimited

13 years, 11 months

1
0
0 / 0

(ITS#6173) Error while making

by bipin.nair＠iflexsolutions.com

Full_Name: Bipin Version: OpenLDAP2.2.29 OS: AIX 5.3 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (203.127.116.93) Hi, While trying to install OpenLDAP 2.2.29 ,I getting the following error during the 'make' step. --------------------------------------------------------------------- Notes:- 1)I have installed OpenSSL 0.9.7 and Berkley DB 4.5.20 2)Also,the follwing variables are set CPPFLAGS LDFLAGS LIBPATH 3)THe follwoing commands were used as steps to install Openldap cd openldap-2.2.29 ./configure --enable-ldbm make depend make (During this step it fails) ------------------------------------------------------------------- acl.c:85: error: conflicting types for 'acl_get' /usr/include/sys/access.h:86: error: previous declaration of 'acl_get' was here make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 2. Stop. make: 1254-004 The error code from the last command is 2. Stop. Please help with this issue. Thanks.

13 years, 11 months

1
0
0 / 0

Re: (ITS#6094) test054 doesn't replicate an entry

by dieter＠dkluenter.de

Howard Chu <hyc(a)symas.com> writes: > dieter(a)dkluenter.de wrote: >> Full_Name: Dieter Kluenter >> Version: 2.4.16 >> OS: Linux x86_64 >> URL: http://dkluenter.de/download/dkluenter_test054.tgz >> Submission from: (NULL) (87.154.44.82) > >> test054 doesn't replicate the entry dn: ou=3DInformation Technolgy >> Devision,ou=3Dpeople,dc=3Dexample,dc=3Dcom >> A tar archive containing the files >> server1.flt, server2.flt, server1.log, server4.log >> can be downloaded from the below URL > > To aid in reproducing this problem, please provide specific details on > your platform: OS version, CPU architecture, and whether single core > or multi-core. CPU model # may be helpful for comparison purposes. OS: openSUSE-11.1 Hardware Class: cpu Arch: X86-64 Vendor: "AuthenticAMD" Model: 15.31.0 "AMD Athlon(tm) 64 Processor 3000+" Features: fpu,vme,de,pse,tsc,msr,pae,mce,cx8,apic,sep,mtrr,pge,mca,cmov,pat= ,pse36,clflush,mmx,fxsr,sse,sse2,syscall,nx,mmxext,fxsr_opt,lm,3dnowext,3dn= ow,up,rep_good,nopl,lahf_lm Clock: 1800 MHz BogoMips: 3604.50 Cache: 512 kb single core As only Micheal and me reported this problem, it might be openSUSE-11-1 specific.=20 -Dieter --=20 Dieter Kl=C3=BCnter | Systemberatung http://www.dpunkt.de/buecher/2104.html sip: +49.180.1555.7770535 GPG Key ID:8EF7B6C6 53=C2=B008'09,95"N 10=C2=B008'02,42"E

13 years, 11 months

1
0
0 / 0

Re: (ITS#6094) test054 doesn't replicate an entry

by hyc＠symas.com

dieter(a)dkluenter.de wrote: > Full_Name: Dieter Kluenter > Version: 2.4.16 > OS: Linux x86_64 > URL: http://dkluenter.de/download/dkluenter_test054.tgz > Submission from: (NULL) (87.154.44.82) > test054 doesn't replicate the entry dn: ou=Information Technolgy > Devision,ou=people,dc=example,dc=com > A tar archive containing the files > server1.flt, server2.flt, server1.log, server4.log > can be downloaded from the below URL To aid in reproducing this problem, please provide specific details on your platform: OS version, CPU architecture, and whether single core or multi-core. CPU model # may be helpful for comparison purposes. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

13 years, 11 months

1
0
0 / 0

Re: (ITS#6126) test054-syncreplication-parallel-load failed: producer and consumer databases differ

by hyc＠symas.com

michael(a)stroeder.com wrote: > I cannot reproduce it all the time. Can you add SYNC to your debug level and get the logs from one of these incidents? -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

13 years, 11 months

1
0
0 / 0

OpenLDAP 2.4.11 and bdb: malloc: Cannot allocate memory

by Florian Genaudet

Hi all, I've got a problem with OpenLdap since I'm trying to insert 1,5 Million of entries into LDAP. OpenLDAP crash with "bdb: malloc: Cannot allocate memory" when approximately 950 000 entries are inserted. My computer got 2GB of RAM and here is my slapd.conf : # This is the main slapd configuration file. See slapd.conf(5) for more > # info on the configuration options. > > ####################################################################### > # Global Directives: > > # Features to permit > #allow bind_v2 > > # Schema and objectClass definitions > > include /etc/ldap/schema/core.schema > include /etc/ldap/schema/cosine.schema > include /etc/ldap/schema/nis.schema > include /etc/ldap/schema/inetorgperson.schema > #include /etc/schema/samba.schema > include /etc/ldap/schema/bvs.schema > > # Where the pid file is put. The init.d script > # will not stop the server if you change this. > pidfile /var/run/slapd/slapd.pid > > # List of arguments that were passed to the server > argsfile /var/run/slapd/slapd.args > > # Read slapd.conf(5) for possible values > loglevel none > > # Where the dynamically loaded modules are stored > modulepath /usr/lib/ldap > moduleload back_bdb > moduleload syncprov > > # logout idle clients after 10 seconds > idletimeout 10 > > # The maximum number of entries that is returned for a search operation > sizelimit unlimited > > #Specify the maximum number of pending requests for an anonymous session > conn_max_pending_auth 300 > > # The tool-threads parameter sets the actual amount of cpu's that is used > # for indexing. > tool-threads 2 > > > ####################################################################### > # Specific Backend Directives for hdb: > # Backend specific directives apply to this backend until another > # 'backend' directive occurs > backend bdb > > ####################################################################### > # Specific Backend Directives for 'other': > # Backend specific directives apply to this backend until another > # 'backend' directive occurs > #backend <other> > > ####################################################################### > # Specific Directives for database #1, of type hdb: > # Database specific directives apply to this databasse until another > # 'database' directive occurs > database bdb > > dbnosync > # updates are allowed to remain pending > cachesize 1500000 > > index sn,givenName pres,eq > index ENTPersonJointure eq > > > #overlay syncprov > > #syncprov-checkpoint 100 10 > #syncprov-sessionlog 100 > > > # The base of your directory in database #1 > suffix "dc=bvs,dc=fr" > > # rootdn directive for specifying a superuser on the database. This is > needed > # for syncrepl. > rootdn "cn=Manager,ou=ENTPerson,dc=bvs,dc=fr" > rootpw collaba > > # Where the database file are physically stored for database #1 > directory /var/lib/ldap > > # The dbconfig settings are used to generate a DB_CONFIG file the first > # time slapd starts. They do NOT override existing an existing DB_CONFIG > # file. You should therefore change these settings in DB_CONFIG directly > # or remove DB_CONFIG and restart slapd for changes to take effect. > > # For the Debian package we use 2MB as default but be sure to update this > # value if you have plenty of RAM > dbconfig set_cachesize 0 1024000 0 > dbconfig set_flags DB_TXN_NOSYNC > > > # Sven Hartge reported that he had to set this value incredibly high > # to get slapd running at all. See http://bugs.debian.org/303057 for more > # information. > > # Number of objects that can be locked at the same time. > dbconfig set_lk_max_objects 1500 > # Number of locks (both requested and granted) > dbconfig set_lk_max_locks 1500 > # Number of lockers > dbconfig set_lk_max_lockers 1500 > > # Indexing options for database #1 > index objectClass eq > > # Save the time that the entry gets modified, for database #1 > lastmod off > > # Checkpoint the BerkeleyDB database periodically in case of system > # failure and to speed slapd shutdown. > checkpoint 512000 30 > > # Where to store the replica logs for database #1 > # replogfile /var/lib/ldap/replog > > # Basic ACL (deprecated in favour of ACLs in > /etc/openldap/slapd.access.conf) > #access to attr=userPassword > # by self write > # by anonymous auth > # by dn="uid=root,ou=People,dc=example,dc=com" write > # by * none > > # ACL for "Enseignant" profile only (=> can modify all "userPassword" of > its own College) > access to > dn.regex="^cn=(.*),ou=entperson,ou=(.*),ou=(.*),dc=bvs,dc=fr$" > attrs=givenName > by set.regex="user/entPersonProfils & > [cn=Enseignant_$2,ou=entgroup,ou=$2,ou=$3,dc=bvs,dc=fr]" write > by * read > > # ACL for "Administrateur" profile only (=> can modify all data of its own > College) > access to dn.regex="^(.*),ou=(.*),ou=(.*),dc=bvs,dc=fr$" > by set.regex="user/entPersonProfils & > [cn=Administrateur_$2,ou=entgroup,ou=$2,ou=$3,dc=bvs,dc=fr]" write > by * read > > # ACL for "Eleve" profile only (=> can modify only its own "userPassword") > access to attrs=entPersonDateNaissance > by self write > by * read > > access to * > by * read > > ####################################################################### > # Specific Directives for database #2, of type 'other' (can be hdb too): > # Database specific directives apply to this databasse until another > # 'database' directive occurs > #database <other> > > # The base of your directory for database #2 > #suffix "dc=debian,dc=org" > > What am I doing wrong ? Regards.

13 years, 11 months

2
1
0 / 0

Re: (ITS#6060) Admin guide doesn't describe converting from slapd.conf to cn=config

by hyc＠symas.com

Gavin Henry wrote: > > ----- hyc(a)symas.com wrote: > >> Gavin Henry wrote: >>> Thanks, I'll review and let you know. >>> >>> Gavin. >>> >> And while you're at it, please move the slapd config examples back to >> the end >> of the slapd config chapters where they originally came from. You can >> insert >> references like "for more detailed discussion of access controls go >> -there-" >> but the examples need to be in the config chapters. > > Do you mean like these: > > http://www.openldap.org/doc/admin23/slapdconf2.html#Configuration%20Example > http://www.openldap.org/doc/admin23/slapdconfig.html#Configuration%20File... Yes. > > What chapters have I stuck them in then? Will check and move them back. You moved them to Access Control. > Can't remember why I moved them at all. > > Thanks. > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

13 years, 11 months

1
0
0 / 0

Re: (ITS#6172) Crash with baseObject in back-sql

by masarati＠aero.polimi.it

openssl(a)mkarcher.dialup.fu-berlin.de wrote: > slapd gets terminated by libc with an "invalid free" error message when using > the baseObject configuration option (whether with or without file) at the time > of the first query. > > This is caused by freeing an entry using "free" that has been allocated using > "entry_dup". This does not match (any more?). Essentially what the code was > trying to to is to duplicate the sql_baseObject to bsi_e. The fix I suggest adds > a function "entry_dup_to" to slapd so that backends can do this operation > cleanly without having to create a temporary dynamic object there is no obvious > clean way to get rid of. I'd rather have a function that returns the entry struct to the pool without calling entry_clean(), to avoid as much as possible code duplication. In any case, good catch. Thanks, p.

13 years, 11 months

1
0
0 / 0

Re: (ITS#6060) Admin guide doesn't describe converting from slapd.conf to cn=config

by ghenry＠OpenLDAP.org

----- hyc(a)symas.com wrote: > Gavin Henry wrote: > > Thanks, I'll review and let you know. > > > > Gavin. > > > And while you're at it, please move the slapd config examples back to > the end > of the slapd config chapters where they originally came from. You can > insert > references like "for more detailed discussion of access controls go > -there-" > but the examples need to be in the config chapters. Do you mean like these: http://www.openldap.org/doc/admin23/slapdconf2.html#Configuration%20Example http://www.openldap.org/doc/admin23/slapdconfig.html#Configuration%20File... What chapters have I stuck them in then? Will check and move them back. Can't remember why I moved them at all. Thanks. -- Kind Regards, Gavin Henry. OpenLDAP Engineering Team. E ghenry(a)OpenLDAP.org Community developed LDAP software. http://www.openldap.org/project/

13 years, 11 months

1
0
0 / 0

(ITS#6172) Crash with baseObject in back-sql

by openssl＠mkarcher.dialup.fu-berlin.de

Full_Name: Michael Karcher Version: 2.4.11 OS: Debian Linux (squeeze) URL: ftp://ftp.openldap.org/incoming/Michael-Karcher-090614.diff.1 Submission from: (NULL) (87.123.80.3) slapd gets terminated by libc with an "invalid free" error message when using the baseObject configuration option (whether with or without file) at the time of the first query. This is caused by freeing an entry using "free" that has been allocated using "entry_dup". This does not match (any more?). Essentially what the code was trying to to is to duplicate the sql_baseObject to bsi_e. The fix I suggest adds a function "entry_dup_to" to slapd so that backends can do this operation cleanly without having to create a temporary dynamic object there is no obvious clean way to get rid of. I provide a patch to fix that problem. As it is mostly rearranging things, I don't think that patch is copyrightable.

13 years, 11 months

1
0
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs June 2009