https://bugs.openldap.org/show_bug.cgi?id=7468
--- Comment #2 from Ondřej Kuzník ondra@mistotebe.net --- I have been able to reproduce this in master with the following config (no rwm involved):
database relay suffix "ou=People,dc=example,dc=com" relay "dc=example,dc=com"
database mdb suffix "dc=example,dc=com" rootdn "dc=example,dc=com" rootpw OBFUSCATED directory ./db3
overlay ppolicy ppolicy_default "cn=default,dc=example,dc=com" ppolicy_use_lockout ppolicy_hash_cleartext
back-mdb hits a null pointer:
0x0000000000535161 in mdb_env_pick_meta (env=0x78f420) at ./../../../libraries/liblmdb/mdb.c:3944 3944 return metas[ metas[0]->mm_txnid < metas[1]->mm_txnid ]; (gdb) bt #0 0x0000000000535161 in mdb_env_pick_meta (env=0x78f420) at ./../../../libraries/liblmdb/mdb.c:3944 #1 0x000000000052feae in mdb_txn_renew0 (txn=0x7fffb6cef010) at ./../../../libraries/liblmdb/mdb.c:2688 #2 0x0000000000530914 in mdb_txn_begin (env=0x78f420, parent=0x0, flags=131072, ret=0x7fffe8004290) at ./../../../libraries/liblmdb/mdb.c:2910 #3 0x00000000005afe53 in mdb_opinfo_get (op=Bind request = {...}, mdb=0x78f1b0, rdonly=1, moip=0x7ffff61cad68) at id2entry.c:778 #4 0x00000000005af5d6 in mdb_entry_get (op=Bind request = {...}, ndn=0x7fffe8002bf8, oc=NULL, at=NULL, rw=0, ent=0x7ffff61cb388) at id2entry.c:607 #5 0x00000000004fd377 in overlay_entry_get_ov (op=Bind request = {...}, dn=0x7fffe8002bf8, oc=NULL, ad=NULL, rw=0, e=0x7ffff61cb388, on=0x0) at backover.c:378 #6 0x00000000004ffd36 in over_entry_get_rw (op=Bind request = {...}, dn=0x7fffe8002bf8, oc=NULL, ad=NULL, rw=0, e=0x7ffff61cb388) at backover.c:412 #7 0x0000000000466d6b in be_entry_get_rw (op=Bind request = {...}, ndn=0x7fffe8002bf8, oc=NULL, at=NULL, rw=0, e=0x7ffff61cb388) at backend.c:1443 #8 0x00007ffff791d0e3 in ppolicy_bind_response (op=Bind request = {...}, rs=0x7ffff61cb9f8) at ppolicy.c:1424 #9 0x000000000046d8d6 in slap_response_play (op=Bind request = {...}, rs=0x7ffff61cb9f8) at result.c:567 #10 0x000000000046948d in send_ldap_response (op=Bind request = {...}, rs=0x7ffff61cb9f8) at result.c:642 #11 0x000000000046a33e in slap_send_ldap_result (op=Bind request = {...}, rs=0x7ffff61cb9f8) at result.c:918 #12 0x000000000047f666 in fe_op_bind_success (op=Bind request = {...}, rs=0x7ffff61cb9f8) at bind.c:552 #13 0x000000000047f26c in fe_op_bind (op=Bind request = {...}, rs=0x7ffff61cb9f8) at bind.c:386 #14 0x000000000047e8ab in do_bind (op=Bind request = {...}, rs=0x7ffff61cb9f8) at bind.c:206 #15 0x00000000004528b7 in connection_operation (ctx=0x7ffff61cbb78, arg_v=0x7fffe8002bb0) at connection.c:1163 #16 0x0000000000450a90 in connection_read_thread (ctx=0x7ffff61cbb78, argv=0xc) at connection.c:1314 #17 0x00007ffff7fb01fe in ldap_int_thread_pool_wrapper (xpool=0x7266c0) at tpool.c:1051 (gdb) p metas[0] $1 = (MDB_meta * const) 0x0