I am running OpenLDAP 2.4.11 and I am getting an error when I attempt to modify, delete, or add to the directory with a credentialed user (has worked for the past few years perfectly). I did a debug-level report on the server and it's giving me with respect to my modify request, I am getting the following results:
bdb_modify: updated id=00013892 dn="mbiUniqueID=669103f11bb82ef68f6adbcf75216c1b,ou=people, dc=XXXXXX,dc=XXX " send_ldap_result: conn=1057 op=1 p=3 send_ldap_result: err=0 matched="" text="" => bdb_entry_get: ndn: "mbiUniqueID=669103f11bb82ef68f6adbcf75216c1b,ou=people, dc=XXXXXX,dc=XXX " => bdb_entry_get: oc: "(null)", at: "(null)" bdb_dn2entry("mbiUniqueID=669103f11bb82ef68f6adbcf75216c1b,ou=people, dc=XXXXXX,dc=XXX ") => bdb_entry_get: found entry: "mbiUniqueID=669103f11bb82ef68f6adbcf75216c1b,ou=people, dc=XXXXXX,dc=XXX " bdb_entry_get: rc=0 => test_filter PRESENT => access_allowed: search access to "mbiUniqueID=669103f11bb82ef68f6adbcf75216c1b,ou=people, dc=XXXXXX,dc=XXX " "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) <= test_filter 6 syncprov_matchops: sid 000 fscope 1 rc 6 ./slapd-PRODM1: line 227: 26203 File size limit exceeded$SLAPD_BIN -h "$SLAPD_SERVICES" $SLAPD_PARAMS slapd-PRODM1[26473]: [ALERT] slapd not running
Also, the service script in /etc/init.d is named slapd-PRODM1. The line number given in the second to last line of the error corresponds to the line where the start_slapd function (to start the service) is declared. The function is as follows:
start_slapd() { # Check if db_recover is required if [ $RECOVER_AT_STARTUP -eq 1 ] then db_recover else message "info" "[INFO] no db_recover done" fi
# Start message message "info" "Launching OpenLDAP..."
# File descriptor limit, only for root if [ `id -u` -eq 0 ] then ulimit -n $FD_LIMIT if [ $? -eq 0 ] then message "info" "[OK] file descriptor limit set to $FD_LIMIT" else message "warning" "[WARNING] Fail to set file descriptor limit to $FD_LIMIT, going to next step" fi else message "info" "[INFO] file descriptor limit not modified (require root privileges)" fi
# Parameters # if [ "$SLAPD_CONF" ] # then # SLAPD_PARAMS="$SLAPD_PARAMS -f $SLAPD_CONF" # fi # if [ "$SLAPDD_DIR" ] # then # SLAPD_PARAMS="$SLAPD_PARAMS -F $SLAPDD_DIR" # fi SLAPD_PARAMS="$SLAPD_PARAMS $SLAPD_CONF_LOAD"
if [ "$SLAPD_USER" -a `id -u` -eq 0 ] then SLAPD_PARAMS="$SLAPD_PARAMS -u $SLAPD_USER" fi
if [ "$SLAPD_GROUP" -a `id -u` -eq 0 ] then SLAPD_PARAMS="$SLAPD_PARAMS -g $SLAPD_GROUP" fi
# It's time to start slapd $SLAPD_BIN -h "$SLAPD_SERVICES" $SLAPD_PARAMS sleep 1
# Presence of PID file if [ ! -r $SLAPD_PID_FILE ] then message "alert" "[ALERT] no PID file for slapd" exit 1 fi
# Is slapd launched? PID=`cat $SLAPD_PID_FILE` if [ ! -e /proc/$PID ] then message "alert" "[ALERT] slapd not running" exit 1 else message "info" "[OK] OpenLDAP started on port $PORT" fi }
It should be noted that this machine has been working without problems for the past year or more, so I can only assume that the "File Size Limit Exceeded" error above relates to one of the Berkley DB files. Is this correct? Let me know if you have any thoughts. Thanks much!!!,
Andy Carlson Moody Bible Institute Identity Administrator | Information Systems 312-329-4385 www.moody.eduhttp://www.moody.edu
--On Wednesday, May 02, 2012 4:01 PM -0500 Andy Carlson andy.carlson@moody.edu wrote:
I am running OpenLDAP 2.4.11
Are you kidding me? That release doesn't even qualify as stable. You should upgrade to something sane ASAP.
You may want to check your BDB database resource usages via the db_stat command, you may have run out of locks, lockers, or lock tables if your disk isn't full.
--Quanah
--
Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration
Michael,
Here are the files in /var/dc=XXXXX,dc=XXX/
-rw------- 1 ldap ldap 24576 May 3 06:58 __db.001 -rw------- 1 ldap ldap 7225344 May 3 06:58 __db.002 -rw------- 1 ldap ldap 335552512 May 3 06:58 __db.003 -rw------- 1 ldap ldap 2359296 May 3 06:58 __db.004 -rw------- 1 ldap ldap 491520 May 3 06:58 __db.005 -rw------- 1 ldap ldap 32768 May 3 06:58 __db.006
Here are the files in /var/dc=XXXXX,dc=XXX/db/
-rw------- 1 ldap ldap 16977920 May 2 11:53 cn.bdb -rw------- 1 ldap ldap 27398144 May 2 11:53 dn2id.bdb -rw------- 1 ldap ldap 3252224 May 3 06:58 entryCSN.bdb -rw------- 1 ldap ldap 2564096 May 2 11:53 entryUUID.bdb -rw------- 1 ldap ldap 7647232 May 2 11:53 givenName.bdb -rw------- 1 ldap ldap 142426112 May 3 06:58 id2entry.bdb -rw------- 1 ldap ldap 7872512 May 2 11:53 mail.bdb -rw------- 1 ldap ldap 364544 May 2 11:53 mailHost.bdb -rw------- 1 ldap ldap 1691648 May 3 06:12 mailLocalAddress.bdb -rw------- 1 ldap ldap 897024 May 2 11:53 mbiAccountActivated.bdb -rw------- 1 ldap ldap 9646080 May 2 09:52 mbiExternalEmail.bdb -rw------- 1 ldap ldap 577536 May 2 11:53 mbiIDMSRole.bdb -rw------- 1 ldap ldap 36864 Mar 21 10:12 mbiInactiveEmail.bdb -rw------- 1 ldap ldap 688128 May 2 11:53 mbiNeedsSynced.bdb -rw------- 1 ldap ldap 9158656 May 2 11:53 mbiNetAccount.bdb -rw------- 1 ldap ldap 7938048 May 2 11:53 mbiNetID.bdb -rw------- 1 ldap ldap 1032192 May 2 11:53 mbiNetworkAccessPolicy.bdb -rw------- 1 ldap ldap 503808 May 2 09:52 mbiPSAcctLockOut.bdb -rw------- 1 ldap ldap 9543680 May 2 09:52 mbiPSEmail.bdb -rw------- 1 ldap ldap 17158144 May 2 09:52 mbiPSRole.bdb -rw------- 1 ldap ldap 471040 May 2 16:05 mbiPersonAffiliation.bdb -rw------- 1 ldap ldap 331776 May 2 09:52 mbiStudentCampus.bdb -rw------- 1 ldap ldap 339968 May 2 09:52 mbiStudentCareer.bdb -rw------- 1 ldap ldap 389120 May 2 09:52 mbiStudentProgram.bdb -rw------- 1 ldap ldap 1687552 May 1 15:19 mbiUniquenessHash.bdb -rw------- 1 ldap ldap 897024 May 2 11:53 mbiUserStatus.bdb -rw------- 1 ldap ldap 2359296 May 2 11:53 objectClass.bdb -rw------- 1 ldap ldap 8192 Mar 22 2010 sendmailMTAClassName.bdb -rw------- 1 ldap ldap 8192 Sep 28 2010 sendmailMTAClassValue.bdb -rw------- 1 ldap ldap 16384 Mar 22 2010 sendmailMTACluster.bdb -rw------- 1 ldap ldap 8192 May 1 14:43 sendmailMTAHost.bdb -rw------- 1 ldap ldap 20480 May 1 14:43 sendmailMTAKey.bdb -rw------- 1 ldap ldap 16384 May 1 14:43 sendmailMTAMapName.bdb -rw------- 1 ldap ldap 16384 May 1 14:43 sendmailMTAMapValue.bdb -rw------- 1 ldap ldap 8433664 May 2 11:53 sn.bdb
Not sure if it makes a difference, but this happens when I am modifying a non-indexed attribute. Thanks for you help!!!,
Andy Carlson Moody Bible Institute Identity Administrator | Information Systems 312-329-4385 www.moody.edu
-----Original Message----- From: openldap-technical-bounces@openldap.org [mailto:openldap-technical-bounces@openldap.org] On Behalf Of Michael Ströder Sent: Thursday, May 03, 2012 1:59 AM To: Andy Carlson Cc: openldap-technical@openldap.org Subject: Re: Slapd Error
Andy Carlson wrote:
I am running OpenLDAP 2.4.11
You should really upgrade.
./slapd-PRODM1: line 227: 26203 File size limit exceeded
This looks like a system limit.
How big are your database files?
Ciao, Michael.
openldap-technical@openldap.org