Greetings,
I am observing a rather strange issue in the following setup:
* 1 OpenLDAP master server (2.4.31)
* 4 OpenLDAP slave servers (2.4.40)
* The OpenLDAP slaves do forward any update attempt to the master using the chain overlay / proxyauthz (mainly to update the pwdFailureTime attribute for ppolicy)
If I try to shut the master down (for maintenance let's say), the slaves behave properly, then begin to deadlock one after each other after a few minutes (by deadlock I mean no log output anymore, and any ldapwhoami / ldapsearch request connects and then times out)
On the attached image, I monitored at the same time one of the slaves using collectd, to keep an eye on cn=monitor data (the period between 15:24:30 and 15:26:00 has been extrapolated by Grafana, no data is available at this time since cn=monitor access also deadlocks)
I can see that backload / pending threads and waiters seem to increase gradually until the server gets unresponsive.
I found nothing on the ML (except https://www.openldap.org/lists/openldap-technical/200912/msg00112.html) or searching for clues, Is this predictable behavior or and obvious misconfiguration, or it is an interesting occastion to dig a bit deeper ?
Thanks in advance,
Matthieu Cerda wrote:
I am observing a rather strange issue in the following setup:
- 1 OpenLDAP master server (2.4.31)
2.4.31 was released 2012-04-21 (over five years ago).
- 4 OpenLDAP slave servers (2.4.40)
2.4.40 was released 2014-09-20 (three years ago).
There have been so many fixes since then which may affect your configuration => you should upgrade.
Everything else is a waste of time, also for yourself.
Ciao, Michael.
Le 22/12/2017 à 14:39, Michael Ströder a écrit :
Matthieu Cerda wrote:
I am observing a rather strange issue in the following setup:
- 1 OpenLDAP master server (2.4.31)
2.4.31 was released 2012-04-21 (over five years ago).
- 4 OpenLDAP slave servers (2.4.40)
2.4.40 was released 2014-09-20 (three years ago).
There have been so many fixes since then which may affect your configuration => you should upgrade.
Everything else is a waste of time, also for yourself.
Ciao, Michael.
Fair point, I'll test with LTB project packages :) (wink Clément O.)
Thank you!
openldap-technical@openldap.org