Crash with SEGV after compacting
by Niklas Schmatloch
Hi
My organisation is using a replicated 389-dirsrv. Lately, it has been crashing
each time after compacting.
It is replicable on our instances by lowering the compactdb-interval to
trigger the compacting:
dsconf -D "cn=Directory Manager" ldap://127.0.0.1 -w 'PASSWORD_HERE' backend config set --compactdb-interval 300
This is the log:
[03/Aug/2022:16:06:38.552781605 +0200] - NOTICE - checkpoint_threadmain - Compacting DB start: userRoot
[03/Aug/2022:16:06:38.752592692 +0200] - NOTICE - bdb_db_compact_one_db - compactdb: compact userRoot - 8 pages freed
[03/Aug/2022:16:06:44.172233009 +0200] - NOTICE - bdb_db_compact_one_db - compactdb: compact userRoot - 888 pages freed
[03/Aug/2022:16:06:44.179315345 +0200] - NOTICE - checkpoint_threadmain - Compacting DB start: changelog
[03/Aug/2022:16:13:18.020881527 +0200] - NOTICE - bdb_db_compact_one_db - compactdb: compact changelog - 458 pages freed
dirsrv(a)auth-alpha.service: Main process exited, code=killed, status=11/SEGV
dirsrv(a)auth-alpha.service: Failed with result 'signal'.
dirsrv(a)auth-alpha.service: Consumed 2d 6h 22min 1.122s CPU time.
The first steps are done very quickly, but the step before the 458 pages of the
retro-changelog are freed, takes several minutes. In this time the dirsrv writes
more than 10 G and reads more than 7 G (according to iotop).
After this line is printed the dirsrv crashes within seconds.
What I also noticed is, that even though it said it freed a lot of pages the
retro-changelog does not seem to change in size.
The file `/var/lib/dirsrv/slapd-auth-alpha/db/changelog/id2entry.db` is 7.2 G
before and after the compacting.
Debian 11.4
389-ds-base/stable,now 1.4.4.11-2 amd64
Does someone have an idea how to debug / fix this?
Thanks
1 month, 1 week
Announcing 389 Directory Server 2.1.7
by Mark Reynolds
389 Directory Server 2.1.7
The 389 Directory Server team is proud to announce 389-ds-base version 2.1.7
Fedora packages are available on Fedora 36
https://koji.fedoraproject.org/koji/taskinfo?taskID=96589528
<https://koji.fedoraproject.org/koji/taskinfo?taskID=96589528>
https://bodhi.fedoraproject.org/updates/FEDORA-2023-89f10e5c31
<https://bodhi.fedoraproject.org/updates/FEDORA-2023-89f10e5c31> - Bodhi
The new packages and versions are:
* 389-ds-base-2.1.7-1
Source tarballs are available for download at Download
389-ds-base Source
<https://github.com/389ds/389-ds-base/archive/389-ds-base-2.1.7.tar.gz>
Highlights in 2.1.7
* Bug fixes & enhancements
Installation and Upgrade
See Download
<https://directory.fedoraproject.org/docs/389ds/download.html> for
information about setting up your yum repositories.
To install the server use *dnf install 389-ds-base*
To install the Cockpit UI plugin use *dnf install cockpit-389-ds*
After rpm install completes, run *dscreate interactive*
For upgrades, simply install the package. There are no further
steps required.
There are no upgrade steps besides installing the new rpms
See Install_Guide
<https://directory.fedoraproject.org/docs/389ds/howto/howto-install-389.html>
for more information about the initial installation and setup
See Source
<https://directory.fedoraproject.org/docs/389ds/development/source.html>
for information about source tarballs and SCM (git) access.
Feedback
We are very interested in your feedback!
Please provide feedback and comments to the 389-users mailing list:
https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject...
If you find a bug, or would like to see a new feature, file it in our
GitHub project: https://github.com/389ds/389-ds-base
* Bump version to 2.1.7
* Issue 5607, 5351, 5611 - UI/CLI - fix various issues
* Issue 5608 - UI - need to replace some “const” with “let”
* Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
* Issue 5602 - UI - browser crash when trying to modify read-only variable
* Issue 5581 - UI - Support cockpit dark theme
* Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
* Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
* Fix latest npm audit failures
* Issue 5599 - CI - webui tests randomly fail
* Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
* Issue 5526 - RFE - Improve saslauthd migration options (#5528)
* Issue 5588 - Fix CI tests
* Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
* Issue 5521 - UI - Update plugins for new split PAM and LDAP pass
thru auth
* Issue 5236 - UI add specialized group edit modal
* Issue 5278 - CLI - dsidm asks for the old password on password reset
* Issue 5531 - CI - use universal_lines in capture_output
* Issue 5505 - Fix compiler warning (#5506)
* Issue 3615 - CLI - prevent virtual attribute indexing
* Issue 5413 - Allow mutliple MemberOf fixup tasks with
different bases/filters
* Issue 5561 - Nightly tests are failing
* Issue 5521 - RFE - split pass through auth cli
* Issue 5521 - BUG - Pam PTA multiple issues
* Issue 5544 - Increase default task TTL
* Issue 5541 - Fix typo in |lib389.cli_conf.backend._get_backend| (#5542)
* Issue 5539 - Make logger’s parameter name unified (#5540)
* Issue 5534 - Fix a rebase typo (#5537)
* Issue 5534 - Add copyright text to the repository files
--
Directory Server Development Team
4 months
Announcing 389 Directory Server 2.3.2
by Mark Reynolds
389 Directory Server 2.3.2
The 389 Directory Server team is proud to announce 389-ds-base version 2.3.2
Fedora packages are available on Rawhide (f38)
Rawhide:
https://koji.fedoraproject.org/koji/taskinfo?taskID=96566979
<https://koji.fedoraproject.org/koji/taskinfo?taskID=96566979>
The new packages and versions are:
* 389-ds-base-2.3.2-1
Source tarballs are available for download at Download
389-ds-base Source
<https://github.com/389ds/389-ds-base/archive/389-ds-base-2.3.2.tar.gz>
Highlights in 2.3.2
* Enhancements, and Bug fixes
Installation and Upgrade
See Download
<https://directory.fedoraproject.org/docs/389ds/download.html> for
information about setting up your yum repositories.
To install the server use *dnf install 389-ds-base*
To install the Cockpit UI plugin use *dnf install cockpit-389-ds*
After rpm install completes, run *dscreate interactive*
For upgrades, simply install the package. There are no further
steps required.
There are no upgrade steps besides installing the new rpms
See Install_Guide
<https://directory.fedoraproject.org/docs/389ds/howto/howto-install-389.html>
for more information about the initial installation and setup
See Source
<https://directory.fedoraproject.org/docs/389ds/development/source.html>
for information about source tarballs and SCM (git) access.
Feedback
We are very interested in your feedback!
Please provide feedback and comments to the 389-users mailing list:
https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject...
If you find a bug, or would like to see a new feature, file it in our
GitHub project: https://github.com/389ds/389-ds-base
* Bump version to 2.3.2
* Issue 5547 - automember plugin improvements
* Issue 5607, 5351, 5611 - UI/CLI - fix various issues
* Issue 5610 - Build failure on Debian
* Issue 5608 - UI - need to replace some “const” with “let”
* Issue 5560 - dscreate run by non superuser set defaults requiring
superuser privilege (#5579)
* Issue 3604 - Create a private key/CSR with dsconf/Cockpit (#5584)
* Issue 5605 - Adding a slapi_log_backtrace function in libslapd (#5606)
* Issue 5602 - UI - browser crash when trying to modify read-only variable
* Issue 5581 - UI - Support cockpit dark theme
* Issue 5593 - CLI - dsidm account subtree-status fails with TypeError
* Issue 5591 - BUG - Segfault in cl5configtrim with invalid confi (#5592)
* Fix latest npm audit failures
* Issue 5599 - CI - webui tests randomly fail
* Issue 5348 - RFE - CLI - add functionality to do bulk updates to entries
* Issue 5588 - Fix CI tests
* Issue 5585 - lib389 password policy DN handling is incorrect (#5587)
* Issue 5521 - UI - Update plugins for new split PAM and LDAP pass
thru auth
* Bump json5 from 2.2.1 to 2.2.3 in /src/cockpit/389-console
* Issue 5236 - UI add specialized group edit modal
* Issue 5550 - dsconf monitor crashes with Error math domain error (#5553)
* Issue 5278 - CLI - dsidm asks for the old password on password reset
* Issue 5531 - CI - use universal_lines in capture_output
* Issue 5425 - CLI - add confirmation arg when deleting backend
* Issue 5558 - non-root instance fails to start on creation (#5559)
* Issue 5545 - A random crash in import over lmdb (#5546)
* Issue 3615 - CLI - prevent virtual attribute indexing
* Update specfile and rust crates
* Issue 5413 - Allow multiple MemberOf fixup tasks with
different bases/filters
* Issue 5554 - Add more tests to security_basic_test suite (#5555)
* Issue 5561 - Nightly tests are failing
* Issue 5521 - RFE - split pass through auth cli
* Issue 5521 - BUG - Pam PTA multiple issues
* Issue 5544 - Increase default task TTL
* Issue 5526 - RFE - Improve saslauthd migration options (#5528)
* Issue 5539 - Make logger’s parameter name unified (#5540)
* Issue 5541 - Fix typo in lib389.cli_conf.backend._get_backend (#5542)
* Issue 3729 - (cont) RFE Extend log of operations statistics in
access log (#5538)
* Issue 5534 - Fix a rebase typo (#5537)
* Issue 5534 - Add copyright text to the repository files
--
Directory Server Development Team
4 months
Use dsconf to set nsslapd-lookthroughlimit
by Julian Kippels
Hi,
I am looking for a way to set nsslapd-lookthroughlimit from
cn=config,cn=ldbm database,cn=plugins,cn=config using dsconf. So far I
have only found the way to stop the server and edit dse.ldif or maybe
using ldapmodify.
Is there a way to do this using dsconf?
Thanks
Julian
4 months, 2 weeks
