At Thu, 28 Apr 2011 18:05:43 GMT, mslby@deshaw.com wrote:
My company uses OpenLDAP 2.4.25 with Berkeley DB 4.8.30 compiled on Solaris 10 x86 using Sun Studio. OpenLDAP is used as the backend for generic naming services (passwd, group, netgroup etc?) as well as holding mail routing and some custom data. We have master and slave servers and are using syncrepl refresh and persist.
Are you using Solaris nss_ldap and ldap_cachemgr(1M) on your Solaris 10 with OpenLDAP slapd? If so, Solaris libldap.so breaks your slapd process as the following scenario:
(1) slapd calls some name service functions, e.g. getpwnam(3C). (2) Solaris nss_ldap (/usr/lib/nss_ldap.so.1) is loaded. (3) Solaris libldap.so (/usr/lib/libldap.so.5) is loaded. (4) Solaris libldap.so overrides ldap_*() and ber_*() functions in slapd (or OpenLDAP libldap_r.so and liblber.so). (5) OpenLDAP calls ldap_*() and ber_*() functions that are belong to Solaris libldap.so, not OpenLDAP's one.
See also:
http://www.openldap.org/lists/openldap-technical/200902/msg00000.html https://bugzilla.mozilla.org/show_bug.cgi?id=292127 http://bugzilla.padl.com/show_bug.cgi?id=203