I recently upgraded OpenLDAP 2.4.26 to 2.4.28. When I did that, a separate server running apache 2.2 and php 5 started to hang every 10-15 minutes. It freezes to the point that it no longer accepts requests.
This apache server is using a wildcard cert for https and uses php5-ldap which depends on libgnutls26 and libldap2.4-2. I am currently investigating further, but was wondering if the changes to MozNSS or GNUTls in 2.4.27 (ITS #7051, 6980, 6998, 7001, 7002, 7022, 7034 & 7006) may be interfering with apache. I don't think OpenLDAP is the cause, I am leaning towards an apache/php configuration error but the problem only occurs when I use 2.4.28. OpenLDAP 2.4.26 operates normally and is stable across the board. Any ideas?
ldapsearch -H ldaps://ldap.my.com works fine, no errors with connecting or searching.
On 01/12/2012 03:55 PM, Kyle Smith wrote:
I recently upgraded OpenLDAP 2.4.26 to 2.4.28. When I did that, a separate server running apache 2.2 and php 5 started to hang every 10-15 minutes. It freezes to the point that it no longer accepts requests.
This apache server is using a wildcard cert for https and uses php5-ldap which depends on libgnutls26 and libldap2.4-2. I am currently investigating further, but was wondering if the changes to MozNSS or GNUTls in 2.4.27 (ITS #7051, 6980, 6998, 7001, 7002, 7022, 7034& 7006) may be interfering with apache.
What platform? If not RHEL/Fedora, it is not using MozNSS unless you are explicitly building with it.
I don't think OpenLDAP is the cause, I am leaning towards an apache/php configuration error but the problem only occurs when I use 2.4.28. OpenLDAP 2.4.26 operates normally and is stable across the board. Any ideas?
ldapsearch -H ldaps://ldap.my.com works fine, no errors with connecting or searching.
On Thu, Jan 12, 2012 at 6:33 PM, Rich Megginson rich.megginson@gmail.com wrote:
On 01/12/2012 03:55 PM, Kyle Smith wrote:
I recently upgraded OpenLDAP 2.4.26 to 2.4.28. When I did that, a separate server running apache 2.2 and php 5 started to hang every 10-15 minutes. It freezes to the point that it no longer accepts requests.
This apache server is using a wildcard cert for https and uses php5-ldap which depends on libgnutls26 and libldap2.4-2. I am currently investigating further, but was wondering if the changes to MozNSS or GNUTls in 2.4.27 (ITS #7051, 6980, 6998, 7001, 7002, 7022, 7034& 7006) may be interfering with apache.
What platform? If not RHEL/Fedora, it is not using MozNSS unless you are explicitly building with it.
It is on an Ubuntu 10.04.03 LTS using default packages as far as I know. I configure OpenLDAP with this command: ./configure --enable-crypt --with-tls --enable-ppolicy --enable-accesslog --enable-auditlog --enable-monitor
I don't think OpenLDAP is the cause, I am leaning towards an apache/php configuration error but the problem only occurs when I use 2.4.28. OpenLDAP 2.4.26 operates normally and is stable across the board. Any ideas?
ldapsearch -H ldaps://ldap.my.com works fine, no errors with connecting or searching.
openldap-technical@openldap.org
-
Kyle Smith -
Rich Megginson