389-users October 2021

389-users@lists.fedoraproject.org

9 participants
14 discussions

Lock table is out of available lock entries
by Kees Bakker 18 Oct '21

18 Oct '21

Hi, When my dirsrv was trying to compact the databases I was getting this error [07/Aug/2021:23:59:02.715984489 +0200] - NOTICE - bdb_compact - Compacting databases ... [07/Aug/2021:23:59:02.765932397 +0200] - NOTICE - bdb_compact - Compacting DB start: userRoot [07/Aug/2021:23:59:03.518175414 +0200] - NOTICE - bdb_compact - compactdb: compact userRoot - 417 pages freed [07/Aug/2021:23:59:03.576427786 +0200] - NOTICE - bdb_compact - Compacting DB start: ipaca [07/Aug/2021:23:59:03.659941533 +0200] - NOTICE - bdb_compact - compactdb: compact ipaca - 419 pages freed [07/Aug/2021:23:59:03.718445310 +0200] - NOTICE - bdb_compact - Compacting DB start: changelog [08/Aug/2021:00:00:40.807571334 +0200] - NOTICE - NSMMReplicationPlugin - changelog program - cl5CompactDBs - compacting replication changelogs... [08/Aug/2021:00:00:54.309357211 +0200] - ERR - libdb - BDB2055 Lock table is out of available lock entries [08/Aug/2021:00:00:54.726504736 +0200] - ERR - bdb_compact - compactdb: failed to compact changelog; db error - 12 Cannot allocate memory [08/Aug/2021:00:00:54.801571421 +0200] - ERR - libdb - BDB2055 Lock table is out of available lock entries [08/Aug/2021:00:00:54.876618702 +0200] - ERR - NSMMReplicationPlugin - changelog program - cl5CompactDBs - Failed to compact a797bb0b-be1d11eb-88c0b677-613aa2ad; db error - 12 Cannot allocate memory [08/Aug/2021:00:00:57.253006449 +0200] - NOTICE - bdb_compact - Compacting databases finished. There are about 402k entries in cn=changelog. I have a few questions 1) is it normal to have so many entries in cn=changelog? On another replica I have almost 3M entries Isn't this cleaned up? 2) the number of locks is 50000 (there are two config items). Should I increase that number? If so, increase to what? 3) is there maybe something else going on, causing the exhaustion of the locks? -- Kees Bakker

4 21

389 1.4.x Change Log Config
by Sean Weldon 13 Oct '21

13 Oct '21

Hello, Can someone tell me where the change log config has moved in 1.4.x+? Looking at https://directory.fedoraproject.org/docs/389ds/design/integrate-changelog-d… , I understand it's now part of the back end and can be configured in the 'replica object', but where exactly is that? Is that somewhere in the cn=config tree or is that in the root suffix (example: C=US)? Thanks Sean

2 1

syntax passwd policy trivial words restrictions issues
by Ghiurea, Isabella 13 Oct '21

13 Oct '21

Hi List, We are testing a new passwd syntax policy in ldap we have only cfg password length to 8 char and according to this RH Doc bellow there are some exceptions( aka "trivial words" and uid, cn, givenName which can not be used ) when a user tries to update his passwd , for example if the new passwd contains more than 3 char from his uid the ldapasswd cmd will fail . Exemple : Uid=6712 For new Passwd :cheese671cheese >> will fail But for passwd: cheese67cheese will work . I need to understand if we need other passwd attributes to cfg or why this char min limitation and how to solve this issue? Our uid can be from 4 char lenhgt to 14 char length. Here is in ldap ldif: nsslapd-pwpolicy-inherit-global: on nsslapd-pwpolicy-local: off passwordTrackUpdateTime: on passwordCheckSyntax: on passwordminlenghth: 8 passwordMinCategories: 1 And RH DS doc : https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/h… 9.6.2.7. Password Syntax Checking Password syntax checking enforces rules for password strings, so that any password has to meet or exceed certain criteria. All password syntax checking can be applied globally, per subtree, or per user. Password syntax checking is set in the passwordCheckSyntax attribute. The default password syntax requires a minimum password length of eight characters and that no trivial words are used in the password. A trivial word is any value stored in the uid, cn, sn, givenName, ou, or mailattributes of the user's entry. Thank you Isabella

2 1

ldapsearch filters
by Ghiurea, Isabella 07 Oct '21

07 Oct '21

Dear List, What ldapsearch options/ filters I need to use to find all the multiple uid /cn's entries associated to one single email address in my DS with > 5k entries? ( I do not know the email address or uids values) Thank you

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users October 2021