Issue 8194 - Service slapd falldown in a search with client ldapsearch
Summary: Service slapd falldown in a search with client ldapsearch
Status: VERIFIED DUPLICATE of issue 8203
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: 2.4.41
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2015-07-09 14:10 UTC by richard.larrieu-manan@cgi.com
Modified: 2020-03-13 20:08 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description richard.larrieu-manan@cgi.com 2015-07-09 14:10:45 UTC
Full_Name: CGI - Richard Larrieu-Manan
Version: 2.4.41
OS: Red Hat 4.4.7-4
URL: ftp://ftp.openldap.org/incoming/CGI_20150709.core.33604.tgz
Submission from: (NULL) (195.6.127.108)


Hello,

When searching in the directory ldap 2.4.41 with ldapsearch client, 1 out of 4
ldap service falldown. So I have provided you a core dump
(ftp://ftp.openldap.org/incoming/CGI_20150709.core.33604.tgz) during the bug. In
2.4.38 version of the problem does not arise.

Thank you to consider this anomaly.
Comment 1 Howard Chu 2015-07-09 15:12:49 UTC
richard.larrieu-manan@cgi.com wrote:
> Full_Name: CGI - Richard Larrieu-Manan
> Version: 2.4.41
> OS: Red Hat 4.4.7-4
> URL: ftp://ftp.openldap.org/incoming/CGI_20150709.core.33604.tgz
> Submission from: (NULL) (195.6.127.108)
>
>
> Hello,
>
> When searching in the directory ldap 2.4.41 with ldapsearch client, 1 out of 4
> ldap service falldown. So I have provided you a core dump
> (ftp://ftp.openldap.org/incoming/CGI_20150709.core.33604.tgz) during the bug. In
> 2.4.38 version of the problem does not arise.

Thanks for the report but we cannot use your core file. Please send your slapd 
configuration and the stack trace from the core.

http://www.openldap.org/faq/data/cache/59.html

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 2 richard.larrieu-manan@cgi.com 2015-07-10 09:39:20 UTC
Hello,

Below the core dump logs :
Core was generated by `/opt/openldap/libexec/slapd -h ldap://0.0.0.0:389 ldapi://%2fvar%2frun%2fslapd%'.
Program terminated with signal 11, Segmentation fault.
#0  0x000000000049e251 in mdb_hasSubordinates (op=0x7f61a140d460, e=<value optimized out>, hasSubordinates=0x7f61a090e010) at operational.c:78
78                                           LDAP_SLIST_REMOVE( &op->o_extra, &moi->moi_oe, OpExtra, oe_next );
(gdb) bt
#0  0x000000000049e251 in mdb_hasSubordinates (op=0x7f61a140d460, e=<value optimized out>, hasSubordinates=0x7f61a090e010) at operational.c:78
#1  0x00000000004a08ac in mdb_search (op=0x7f61a140ea30, rs=<value optimized out>) at search.c:950
#2  0x0000000000000000 in ?? ()

Below slapd.conf file :
###################################################################################
###################################################################################
# Configuration commune

# Schema and objectClass definitions
include         /appli/ldap/conf/schema/core.schema
include         /appli/ldap/conf/schema/cosine.schema
include         /appli/ldap/conf/schema/nis.schema
include         /appli/ldap/conf/schema/inetorgperson.schema

# Schema de l annuaire defini dans le SDET des ENT
include         /appli/ldap/conf/schema/sdet.schema
include         /appli/ldap/conf/schema/ent.schema

# Where the pid file is put. The init.d script
# will not stop the server if you change this.
pidfile         /appli/ldap/tmp/slapd.pid

# List of arguments that were passed to the server
argsfile        /appli/ldap/tmp/slapd.args

# Read slapd.conf(5) for possible values
loglevel	stats sync
logfile         /appli/ldap/logs/sldap.log

# Where the dynamically loaded modules are stored
# No module is needed : there are statically loaded

ServerID	001

# The tool-threads parameter sets the actual amount of cpu's that is used for indexing.
tool-threads 3
threads 16
concurrency 16

#conn_max_pending 1000
#conn_max_pending_auth 10000

backend         mdb

###################################################################################
# Configuration du back-end 
###################################################################################
# Database ENT 
database        mdb

# The base of your directory in database #1
suffix          "dc=ent,dc=fr"
directory       /appli/ldap/data/slapd
rootdn          "cn=admin,ou=system,dc=ent,dc=fr"
rootpw		{MD5}XZkSIKB+Zet6uFQ0FpHKfQ==
password-hash   {MD5}

# Parametres MDB
maxreaders 126
mode 0600
# Should be more than enough...
searchstack 16
#32 Gb should be enough...
# Set to 32 Go
maxsize 161061273600
# default values
lastmod TRUE
maxderefdepth 15
readonly FALSE
sync_use_subentry FALSE

# At some point, to get some stats, it could be interested to turn this on
monitoring FALSE

# ecriture différée
dbnosync TRUE
# ecriture tous les 15 minutes
checkpoint 0 15

################################################################################
# Configuration INDEX
################################################################################

#Globaux
index	objectClass						eq
index	active							eq
index	ou							eq
index	cn,uid							eq
index	sn							pres,sub,eq
index	entryCSN,entryUUID 					eq
#Personnes
index	ENTPersonJointure					sub,eq
index	ENTPersonLogin						eq
index	mail							eq
index	snNormalise						pres,sub,eq
index	ENTPersonneDN						eq,pres
index	ENTPersonProfils					eq
index	ENTPersonAlias						eq
index	givenNameNormalise					sub,eq
index	ENTCodeActivationParent					eq
index	cnNormalise						pres,sub,eq
index	ENTAuxPersonInit					eq
index	ENTEleveStructRattachId					eq
index	ENTAuxPersonCompteAAF					eq
index	ENTAuxPersRelEleveEleve					eq
index	ENTPersonStructRattach					eq
index	ENTAuxOtherEtab						eq
index	ENTPersonCodePostal					eq
index	ENTCodeActivationEleve					eq
index	ENTAuxPersonDeleteDate					pres,eq
index	ENTEleveClasses						eq
index	ENTEleveMEF						eq
index	ENTGroupeAnnuaireFiliere				eq
index	userPassword						eq
#index	ENTPersonNomPatro					eq
index	givenName						pres,sub,eq
index   ENTEleveRelationValidee             			eq 

#Structures
index	ENTStructureJointure					eq
index	ENTPorteurCode						eq
index	ENTEtablissementStructRattachFctl			eq
index	ENTStructureNomCourant					pres,sub,eq
index   ENTStructureUAI						eq 
#Groupes
index	description						pres,sub,eq
index	descriptionNormalise					pres,sub,eq
index	ENTGroupeAnnuaireTitreNormalise				pres,sub,eq
index	member							pres,eq
index	owner							eq
index	ENTGroupeAdminLocal					eq
index	ENTProfilDN						pres,eq
index	ENTReferentielCode					eq
index	ENTGroupeAnnuaireFonction				pres,eq
index	ENTGroupeAnnuaireClasseId				eq
index	ENTGroupeAnnuaireType					eq
index	ENTGroupeAnnuaireMefId					eq
index	ENTGroupeAnnuaireFiliereId				eq
index	ENTDisciplineDN						eq
index	ENTGroupeAdminPere					eq
index	ENTFonctionDN						eq
index	ENTClasseDN						eq
index	ENTGroupeAnnuaireClasse					pres,eq
index	ENTAdminLocalEtab					eq
#Synchro portail
index   ENTSuiviSynchroEffectuee				eq 
# New AMEU 20130827
index   ENTGroupeAdminLienGroupeAnnuairePartenariat             eq
index   ENTPersonFonctions                                      eq
index   ENTGroupeAnnuaireGroupeEnseignement                     eq
index   ENTPersonNomPatro                                       pres,sub,eq
index   ENTStructureAcademie                                    eq
index   ENTStructureCommune                                     eq
index   ENTGroupeAdminLienGroupeAnnuaire                        eq
# New RLAR 20130904
index   ENTGroupeAnnuaireFonctionId                             eq
# New 20130914 à 20h00
index	ENTAuxPersonEtabAcces                                   eq
# New 20130917 à 17h38 confcall Serges Barbosa / Procèdure export de jeu de données
index   modifyTimestamp                                         eq

# TMA-8585 04/11/2013
index   ENTGroupeAnnuaireMef                                    eq
index   ENTCodeActivationCode                                   eq
index   ENTEleveParents                                         eq

#2.1.1RC4
index   ENTAdminLocalCreateur                                   eq


# Save the time that the entry gets modified, for database #1
lastmod         on

# The admin dn has full write access, everyone else
# can read everything.
access to *
        by * read

###############################################################################
# Configuration SYNCHRO
################################################################################

# MULTI MASTER EN SE SYNCHRONISANT AVEC LE LDAP02 TP #
syncrepl rid=201
	provider=ldap://ldapp02:389
	type=refreshAndPersist
	retry="5 5 300 +"
	searchbase="dc=ent,dc=fr"
	attrs="*,+"
	bindmethod=simple
	binddn="cn=admin,ou=system,dc=ent,dc=fr"
	credentials=jungle
	logbase="cn=delta-sync"
	logfilter="(&(objectClass=auditWriteObject)(reqResult=0))"
	syncdata=accesslog

mirrormode on

# Overlay configuration should be added after the database configuration
# Définition de l'overlay lié à la réplication maitre
overlay syncprov

syncprov-checkpoint 100 10
# Définition de l'overlay lié à la réplication maitre en delta-sync
overlay accesslog
logdb "cn=delta-sync"
logops writes
logsuccess TRUE
logpurge 3+00:00 1+00:00

################################################################################
# Configuration de l'accesslog
################################################################################
# Database delta-sync :
database mdb
suffix "cn=delta-sync"
directory /appli/ldap/data/cn=delta-sync
rootdn "cn=admin,ou=system,dc=ent,dc=fr"

#Some options to optimize acceslog :
index default,reqDN eq
index entryCSN,objectClass,reqEnd,reqResult,reqStart eq

#Parametres MDB
maxreaders 126
mode 0600
searchstack 16
# set to 10 Go
maxsize 21474836480
lastmod TRUE
maxderefdepth 15
readonly FALSE
dbnosync TRUE
checkpoint 0 15

overlay syncprov
syncprov-nopresent TRUE
syncprov-reloadhint TRUE


-----Message d'origine-----
De : Howard Chu [mailto:hyc@symas.com] 
Envoyé : jeudi 9 juillet 2015 17:13
À : LARRIEU-MANAN, Richard; openldap-its@OpenLDAP.org
Objet : Re: (ITS#8194) Service slapd falldown in a search with client ldapsearch

richard.larrieu-manan@cgi.com wrote:
> Full_Name: CGI - Richard Larrieu-Manan
> Version: 2.4.41
> OS: Red Hat 4.4.7-4
> URL: ftp://ftp.openldap.org/incoming/CGI_20150709.core.33604.tgz
> Submission from: (NULL) (195.6.127.108)
>
>
> Hello,
>
> When searching in the directory ldap 2.4.41 with ldapsearch client, 1 
> out of 4 ldap service falldown. So I have provided you a core dump
> (ftp://ftp.openldap.org/incoming/CGI_20150709.core.33604.tgz) during 
> the bug. In
> 2.4.38 version of the problem does not arise.

Thanks for the report but we cannot use your core file. Please send your slapd configuration and the stack trace from the core.

http://www.openldap.org/faq/data/cache/59.html

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 3 Michael Ströder 2015-07-10 10:35:05 UTC
Maybe I missed something but I can't which search requests are causing this.

Could you please also add some information about your ldapsearch commands?

Ciao, Michael.

Comment 4 richard.larrieu-manan@cgi.com 2015-07-10 10:38:37 UTC
Ok.

Here is the command line to do the research with the client ldapsearch :
/opt/openldap/bin/ldapsearch -xLLL -h ldapp02 -p 389 -D cn=admin,ou=system,dc=ent,dc=fr -b ou=supp,ou=personnes,ou=CRRA,dc=ent,dc=fr -w jungle dn | wc -l

After 1 or 2 search the slapd server goes.

Thx.

-----Message d'origine-----
De : Michael Ströder [mailto:michael@stroeder.com] 
Envoyé : vendredi 10 juillet 2015 12:35
À : LARRIEU-MANAN, Richard; openldap-its@OpenLDAP.org
Objet : Re: (ITS#8194) Service slapd falldown in a search with client ldapsearch

Maybe I missed something but I can't which search requests are causing this.

Could you please also add some information about your ldapsearch commands?

Ciao, Michael.

Comment 5 Brochard, Ludovic 2015-07-10 13:56:54 UTC
Hello, this is the full stacktrace :

(gdb) bt full
#0  0x000000000049e251 in mdb_hasSubordinates (op=0x7f61a140d460, e=<value optimized out>, hasSubordinates=0x7f61a090e010) at operational.c:78
        mdb = <value optimized out>
        rtxn = <value optimized out>
        opinfo = {moi_oe = {oe_next = {sle_next = 0x736}, oe_key = 0x7f6198001928}, moi_txn = 0x8, moi_ref = -1744825720, moi_flag = 97 'a'}
        moi = 0x7f6198102580
        rc = -1591225568
        __PRETTY_FUNCTION__ = "mdb_hasSubordinates"
#1  0x00000000004a08ac in mdb_search (op=0x7f61a140ea30, rs=<value optimized out>) at search.c:950
        scopeok = <value optimized out>
        edata = {mv_size = 8187, mv_data = 0x7f8c3becf122}
        mdb = <value optimized out>
        id = 140057293935856
        cursor = 8192
        nsubs = 140083711574752
        ncand = 140057139750272
        cscope = 0
        lastid = 848
        candidates = {18446744073709551615, 1, 1782086, 32, 0, 2703743192, 2703743424, 140057292297520, 18446744073709551615, 140057292298656, 0, 0, 2703743532, 140057292298520, 
          2703743191, 140057292298272, 100, 0, 1006117575, 2479, 0, 0, 140054588555264, 8589934592, 18446744073709551615, 140058883522559, 0, 140057292298520, 488177779, 0, 5297518, 
          2703742752, 0, 22980800, 11612489411057915259, 42949675439, 0, 4792042, 140057292298647, 8589934592, 18587776, 140057292298647, 206158430224, 140057292298648, 
          140057292297828, 0, 5405870, 22980656, 0, 2, 140057292298256, 15588644816, 2703742566, 0, 3760565282383844944, 140240277537486, 140240280580832, 140057292298223, 18587776, 
          140057292297744, 206158430224, 2, 140057292298352, 13890285858, 2703742662, 140054588555264, 3760565282383845040, 140057292297926, 140240280580832, 140057292298319, 
          18587776, 140057292297840, 206158430224, 140057292298336, 140057292298144, 140240277537486, 140057139751436, 140057139751436, 140240280582848, 7, 8187, 2, 140057292298512, 
          12884901888, 56288250156902, 140239272148992, 3760565282383845200, 140057292298086, 140240280580832, 140057292298479, 18587776, 140057292298000, 206158430224, 
          140057292298496, 140057292298304, 140054588555264, 140057292298229, 140239272148992, 2703742965, 140240277537486, 206158430224, 140057292298816, 140057292298624, 
          140057139751408, 56285546414181, 2, 140057292298704, 13891019459, 140057292298278, 140054588555264, 3760565282383845392, 140240277537486, 140240280580832, 140057292298671, 
          18587776, 140057292298192, 206158430224, 2, 140057292298800, 140240277537486, 208862173318, 140054588555264, 3760565282383845488, 140057292298374, 140240280580832, 2, 
          140057292298864, 15588644912, 208862173382, 140054588555264, 3760565282383845552, 140057292298438, 140240280580832, 140057292298831, 18587776, 140057292298352, 
          206158430224, 140057292298848, 140057292298656, 140054588555264, 56288250157397, 2, 140057292298992, 13891019459, 140057292298566, 140054588555264, 3760565282383845680, 
          140057292298566, 56286554845920, 140057292298959, 18587776, 140240278266563, 140057139751436, 140057139751436, 140240280582848, 7, 7877792, 19265264, 1099528470784, 
          281479288455169, 256, 0, 1, 2312, 0, 0, 0, 0, 0, 0, 0, 18891312, 19259392, 0, 0, 0, 0, 31, 19266208, 31, 19259520, 0, 0, 15461882265615, 2147483648000, 
          18446744069414584320, 0, 0, 0, 0, 5, 0, 0, 0, 0, 21931360, 0, 0, 0, 0...}
        iscopes = {0 <repeats 65536 times>}
        scopes = 0x7f61a090e010
        e = 0x7f6198000e48
        base = 0x29
        matched = 0x7f6198001250
        attrs = <value optimized out>
        mask = <value optimized out>
        stoptime = 140057139791073
        manageDSAit = <value optimized out>
        tentries = 1782086
        isc = {mt = 0x7f6198102c00, mc = 0x7f6198104880, id = 1664644, scopes = 0x7f61a090e010, numrdns = -1828720624, nscope = 32609, oscope = 1, rdns = {{bv_len = 2, 
              bv_val = 0xe <Address 0xe out of bounds>}, {bv_len = 140080506566769, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0} <repeats 144 times>, {bv_len = 140057139742992, 
              bv_val = 0x7f6198102420 "\b"}, {bv_len = 0, bv_val = 0x7f61a090e010 "m\335\r"}, {bv_len = 140057054801936, bv_val = 0x0}, {bv_len = 1, bv_val = 0x0}, {bv_len = 0, 
              bv_val = 0x0} <repeats 1898 times>}, nrdns = {{bv_len = 0, bv_val = 0xe <Address 0xe out of bounds>}, {bv_len = 140080506566754, bv_val = 0x0}, {bv_len = 0, 
              bv_val = 0x0} <repeats 1654 times>, {bv_len = 140057139751232, bv_val = 0x7f61a140c2c0 "\020 "}, {bv_len = 6, bv_val = 0x7f61a140c2d0 "\020 "}, {
              bv_len = 140240278266569, bv_val = 0x7f8c3be6f467 <Address 0x7f8c3be6f467 out of bounds>}, {bv_len = 140240278266570, bv_val = 0x1 <Address 0x1 out of bounds>}, {
              bv_len = 1, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {bv_len = 140057293930928, bv_val = 0x0}, {bv_len = 140240278266566, bv_val = 0x0}, {
              bv_len = 0, bv_val = 0x0}, {bv_len = 140057293931036, bv_val = 0x7f61a140c238 "\214E\020\230a\177"}, {bv_len = 0, bv_val = 0x7f61a140c258 "\"\361\354;\214\177"}, {
              bv_len = 0, bv_val = 0x0}, {bv_len = 0, bv_val = 0x7f8c3be9f95e <Address 0x7f8c3be9f95e out of bounds>}, {bv_len = 140057139751232, 
              bv_val = 0x7f61a140c3a0 "\260\304@\241a\177"}, {bv_len = 24, bv_val = 0x7f61a140c4b0 "\006"}, {bv_len = 5429895, 
              bv_val = 0x7f8c3be6f467 <Address 0x7f8c3be6f467 out of bounds>}, {bv_len = 5429896, bv_val = 0x1 <Address 0x1 out of bounds>}, {bv_len = 1, 
              bv_val = 0x7f61a140c188 "\026\302@\241a\177"}, {bv_len = 0, bv_val = 0x20 <Address 0x20 out of bounds>}, {bv_len = 0, bv_val = 0x0}, {bv_len = 140057293931152, 
              bv_val = 0xa000009af <Address 0xa000009af out of bounds>}, {bv_len = 5429869, bv_val = 0x0}, {bv_len = 140057293930883, bv_val = 0x0}, {bv_len = 140057293931260, 
              bv_val = 0x7f61a140c318 "\325m\352;\214\177"}, {bv_len = 0, bv_val = 0x7f61a140c338 "@)\020\230"}, {bv_len = 0, bv_val = 0x0}, {bv_len = 140240278266567, bv_val = 0x0}, 
            {bv_len = 0, bv_val = 0xb00000000 <Address 0xb00000000 out of bounds>}, {bv_len = 11619500786253299712, bv_val = 0x7f61a140be80 ""}, {bv_len = 18446744073709551615, 
              bv_val = 0x7f61a140c2f0 " "}, {bv_len = 0, bv_val = 0x0}, {bv_len = 0, bv_val = 0x7f61a140c268 ""}, {bv_len = 0, bv_val = 0x20 <Address 0x20 out of bounds>}, {
              bv_len = 0, bv_val = 0x0}, {bv_len = 11619500790548267008, bv_val = 0x10000009af <Address 0x10000009af out of bounds>}, {bv_len = 4, bv_val = 0x0}, {
              bv_len = 140057293931111, bv_val = 0x0}, {bv_len = 0, bv_val = 0x7f61a140c267 "4"}, {bv_len = 0, bv_val = 0x7f61a140c268 ""}, {bv_len = 120, bv_val = 0x0}, {
              bv_len = 5429892, bv_val = 0x0}, {bv_len = 0, bv_val = 0xb00000000 <Address 0xb00000000 out of bounds>}, {bv_len = 0, bv_val = 0x0} <repeats 34 times>, {bv_len = 0, 
              bv_val = 0x48eb4e "\320H\211\307\350qL\367\377H\205\333H\211\330u\267I\307\006"}, {bv_len = 0, bv_val = 0x0}, {bv_len = 4782288, 
              bv_val = 0x7f61a140c0e0 "\340\023.\001"}, {bv_len = 8589934592, bv_val = 0x7f61a140c14c ""}, {bv_len = 19796960, bv_val = 0x0}, {bv_len = 0, 
              bv_val = 0x7f61a140c370 "\v"}, {bv_len = 1, bv_val = 0x7f61a140c140 ""}, {bv_len = 0, bv_val = 0x0}, {bv_len = 0, 
              bv_val = 0x7f8c3bed02ce <Address 0x7f8c3bed02ce out of bounds>}, {bv_len = 0, bv_val = 0x13e15d0 "\004"}, {bv_len = 140080570355712, bv_val = 0x0}, {bv_len = 0, 
              bv_val = 0x2 <Address 0x2 out of bounds>}, {bv_len = 140057293931456, bv_val = 0x3013e15d0 <Address 0x3013e15d0 out of bounds>}, {bv_len = 2705375766, 
              bv_val = 0x7f6100000000 <Address 0x7f6100000000 out of bounds>}, {bv_len = 3760565282385478144, bv_val = 0x7f61a140c216 ""}, {bv_len = 140240280580832, 
              bv_val = 0x7f61a140c39f "\377\260\304@\241a\177"}, {bv_len = 18587776, bv_val = 0x7f61a140c1c0 "\360\302@\241a\177"}, {bv_len = 206158430224, 
              bv_val = 0x7f61a140c3b0 "\002"}, {bv_len = 140057293931248, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {
              bv_len = 140057293940192, bv_val = 0x48eb4e "\320H\211\307\350qL\367\377H\205\333H\211\330u\267I\307\006"}, {bv_len = 57393647976448, 
              bv_val = 0x7f67176f3fe8 <Address 0x7f67176f3fe8 out of bounds>}, {bv_len = 4778352, bv_val = 0x7f8c3bf822c3 <Address 0x7f8c3bf822c3 out of bounds>}, {
              bv_len = 140057139758476, bv_val = 0x7f619810458c ""}, {bv_len = 140240280582848, bv_val = 0x7 <Address 0x7 out of bounds>}, {bv_len = 8187, 
              bv_val = 0x7f8c3becf122 <Address 0x7f8c3becf122 out of bounds>}, {bv_len = 3746994889972260864, bv_val = 0x7f6100000000 <Address 0x7f6100000000 out of bounds>}, {
              bv_len = 140057293931333, bv_val = 0x7f8c00000000 <Address 0x7f8c00000000 out of bounds>}, {bv_len = 2705376069, 
              bv_val = 0x100000001 <Address 0x100000001 out of bounds>}, {bv_len = 206158430224, bv_val = 0x7f61a140c590 "\001"}, {bv_len = 140057293931728, 
              bv_val = 0x7f6198104570 ""}, {bv_len = 85, bv_val = 0x7f6198000020 ""}, {bv_len = 8208, bv_val = 0x7f6198106580 ""}, {bv_len = 8208, 
              bv_val = 0x7f8c3bea6a0e <Address 0x7f8c3bea6a0e out of bounds>}, {bv_len = 140057293931248, bv_val = 0x1ff4 <Address 0x1ff4 out of bounds>}, {bv_len = 140057138692128, 
              bv_val = 0x7f6198104580 ""}, {bv_len = 61, bv_val = 0x7f6198104570 ""}, {bv_len = 80, bv_val = 0x7f8c3bea6dd5 <Address 0x7f8c3bea6dd5 out of bounds>}, {
              bv_len = 140240280596096, bv_val = 0x8a <Address 0x8a out of bounds>}, {bv_len = 0, bv_val = 0x98102940 <Address 0x98102940 out of bounds>}, {bv_len = 140057293931616, 
              bv_val = 0xffffffff <Address 0xffffffff out of bounds>}, {bv_len = 11, bv_val = 0x98102940 <Address 0x98102940 out of bounds>}, {bv_len = 0, 
              bv_val = 0xffffffff <Address 0xffffffff out of bounds>}, {bv_len = 11, bv_val = 0x7f6198102940 "x"}, {bv_len = 21, 
              bv_val = 0xffffffff <Address 0xffffffff out of bounds>}, {bv_len = 11, bv_val = 0xffffffffffffffa8 <Address 0xffffffffffffffa8 out of bounds>}, {
              bv_len = 140057293931696, bv_val = 0x7f8c3bf0fead <Address 0x7f8c3bf0fead out of bounds>}, {bv_len = 4295032834, 
              bv_val = 0x52da6d "'reqReferral' DESC 'Referrals returned for request' SUP labeledURI )"}, {bv_len = 146028888098, 
              bv_val = 0x90000000f <Address 0x90000000f out of bounds>}, {bv_len = 493921239046, bv_val = 0xbd00000004 <Address 0xbd00000004 out of bounds>}, {bv_len = 1, 
              bv_val = 0x1c20 <Address 0x1c20 out of bounds>}, {bv_len = 18587776, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {
              bv_len = 0, bv_val = 0x0}, {bv_len = 140057139758464, bv_val = 0x0}, {bv_len = 0, bv_val = 0x3c <Address 0x3c out of bounds>}, {bv_len = 140057139758464, 
              bv_val = 0x559e786a <Address 0x559e786a out of bounds>}, {bv_len = 42, bv_val = 0x7f61a140e670 "\320\350@\241a\177"}, {bv_len = 140057138695424, 
              bv_val = 0xb <Address 0xb out of bounds>}, {bv_len = 140057138695424, bv_val = 0x7f6198000ca0 "9"}, {bv_len = 140057139751232, bv_val = 0x7f61a140cb90 "\020 "}, {
              bv_len = 6, bv_val = 0x7f61a140cba0 "\020 "}, {bv_len = 140240278266569, bv_val = 0x7f8c3be6f467 <Address 0x7f8c3be6f467 out of bounds>}, {bv_len = 140240278266570, 
              bv_val = 0x1 <Address 0x1 out of bounds>}, {bv_len = 1, bv_val = 0x0}, {bv_len = 0, bv_val = 0x0}, {bv_len = 48, 
              bv_val = 0x10ca2dc92 <Address 0x10ca2dc92 out of bounds>}, {bv_len = 140057293933184, bv_val = 0x7f61981045e0 ""}, {bv_len = 140240278266566, 
              bv_val = 0x7f61a140e5e0 "\200\240\033\001"}, {bv_len = 140057138695424, bv_val = 0x0}, {bv_len = 140057293933292, bv_val = 0x7f61a140cb08 "\226\313@\241a\177"}, {
              bv_len = 140057139751232, bv_val = 0x7f61a140cc40 "P\331@\241a\177"}, {bv_len = 6, bv_val = 0x7f61a140cc50 "8\331@\241a\177"}, {bv_len = 140240278266569, 
              bv_val = 0x7f8c3be6f467 <Address 0x7f8c3be6f467 out of bounds>}, {bv_len = 140240278266570, bv_val = 0x1 <Address 0x1 out of bounds>}, {bv_len = 1, 
              bv_val = 0x7f61a140cd80 " "}, {bv_len = 5307603, bv_val = 0x7f8c3be6f467 <Address 0x7f8c3be6f467 out of bounds>}, {bv_len = 5307604, 
              bv_val = 0x1 <Address 0x1 out of bounds>}, {bv_len = 140057293933360, bv_val = 0x7f61a140ca58 "\346\312@\241a\177"}, {bv_len = 140240278266566, 
              bv_val = 0x20 <Address 0x20 out of bounds>}, {bv_len = 0, bv_val = 0x0}, {bv_len = 140057293933468, bv_val = 0x7f61a140cbb8 "!VM"}, {bv_len = 5307579, 
              bv_val = 0x7f61a140cbd8 "\324\362E"}, {bv_len = 140057293933056, bv_val = 0x0}, {bv_len = 140057293933516, 
              bv_val = 0x7f8c3be9f95e <Address 0x7f8c3be9f95e out of bounds>}, {bv_len = 140057139751232, bv_val = 0x7f61a140cd20 "0\316@\241a\177"}, {bv_len = 59, 
              bv_val = 0x7f61a140ce30 "("}, {bv_len = 5309602, bv_val = 0x7f8c3be6f467 <Address 0x7f8c3be6f467 out of bounds>}, {bv_len = 5309603, 
              bv_val = 0x1 <Address 0x1 out of bounds>}, {bv_len = 1, bv_val = 0x7f61a140cb08 "\226\313@\241a\177"}, {bv_len = 0, 
              bv_val = 0x7f6100000020 <Address 0x7f6100000020 out of bounds>}, {bv_len = 0, bv_val = 0x0}, {bv_len = 140057293933584, 
              bv_val = 0xa000009af <Address 0xa000009af out of bounds>}, {bv_len = 5309560, bv_val = 0x20 <Address 0x20 out of bounds>}, {bv_len = 140057293933315, bv_val = 0x0}, {
              bv_len = 140057293933692, bv_val = 0x7f61a140cc98 "!VM"}, {bv_len = 0, bv_val = 0x7f61a140ccb8 "\324\362E"}, {bv_len = 140054588555264, bv_val = 0x0}, {
              bv_len = 140240278266567, bv_val = 0xffffffff <Address 0xffffffff out of bounds>}, {bv_len = 0, bv_val = 0xba140cb38 <Address 0xba140cb38 out of bounds>}, {
              bv_len = 115, bv_val = 0x7f61a140c800 ""}, {bv_len = 18446744073709551615, bv_val = 0x7f61a140cc70 " "}, {bv_len = 0, 
              bv_val = 0xb00000000 <Address 0xb00000000 out of bounds>}, {bv_len = 0, bv_val = 0x7f61a140cbe8 "\314\332E"}, {bv_len = 0, bv_val = 0x20 <Address 0x20 out of bounds>}, {
              bv_len = 0, bv_val = 0x0}, {bv_len = 0, bv_val = 0x9af <Address 0x9af out of bounds>}, {bv_len = 0, bv_val = 0x0}, {bv_len = 140054588555264, 
              bv_val = 0x200000000 <Address 0x200000000 out of bounds>}, {bv_len = 0, bv_val = 0x7f61ffffffff <Address 0x7f61ffffffff out of bounds>}, {bv_len = 0, 
              bv_val = 0x7f61a140cbe8 "\314\332E"}, {bv_len = 115, bv_val = 0x0}, {bv_len = 5309584, bv_val = 0x0}, {bv_len = 0, 
              bv_val = 0xb00000000 <Address 0xb00000000 out of bounds>}, {bv_len = 0, bv_val = 0x0} <repeats 12 times>, {bv_len = 24, bv_val = 0x7f61a140c940 ""}, {
              bv_len = 140057293932784, bv_val = 0x0}, {bv_len = 24, bv_val = 0x7f61a140c960 ""}, {bv_len = 140057293932816, bv_val = 0x0}, {bv_len = 140239876252752, bv_val = 0x0}, {
              bv_len = 0, bv_val = 0x0}, {bv_len = 2050, bv_val = 0x13 <Address 0x13 out of bounds>}...}}
        mci = 0x7f8c3bf822c3
        mcd = 0x3000000010
        opinfo = {moi_oe = {oe_next = {sle_next = 0x7f6198002068}, oe_key = 0x0}, moi_txn = 0x0, moi_ref = 0, moi_flag = 0 '\000'}
        moi = 0x100000001
        ltid = <value optimized out>
#2  0x0000000000000000 in ?? ()
No symbol table info available.

-----Message d'origine-----
De : LARRIEU-MANAN, Richard 
Envoyé : vendredi 10 juillet 2015 11:39
À : Howard Chu; openldap-its@OpenLDAP.org
Cc : Brochard, Ludovic; VASSAUX, Pascal
Objet : RE: (ITS#8194) Service slapd falldown in a search with client ldapsearch

Hello,

Below the core dump logs :
Core was generated by `/opt/openldap/libexec/slapd -h ldap://0.0.0.0:389 ldapi://%2fvar%2frun%2fslapd%'.
Program terminated with signal 11, Segmentation fault.
#0  0x000000000049e251 in mdb_hasSubordinates (op=0x7f61a140d460, e=<value optimized out>, hasSubordinates=0x7f61a090e010) at operational.c:78
78                                           LDAP_SLIST_REMOVE( &op->o_extra, &moi->moi_oe, OpExtra, oe_next );
(gdb) bt
#0  0x000000000049e251 in mdb_hasSubordinates (op=0x7f61a140d460, e=<value optimized out>, hasSubordinates=0x7f61a090e010) at operational.c:78
#1  0x00000000004a08ac in mdb_search (op=0x7f61a140ea30, rs=<value optimized out>) at search.c:950
#2  0x0000000000000000 in ?? ()

Below slapd.conf file :
###################################################################################
###################################################################################
# Configuration commune

# Schema and objectClass definitions
include         /appli/ldap/conf/schema/core.schema
include         /appli/ldap/conf/schema/cosine.schema
include         /appli/ldap/conf/schema/nis.schema
include         /appli/ldap/conf/schema/inetorgperson.schema

# Schema de l annuaire defini dans le SDET des ENT
include         /appli/ldap/conf/schema/sdet.schema
include         /appli/ldap/conf/schema/ent.schema

# Where the pid file is put. The init.d script # will not stop the server if you change this.
pidfile         /appli/ldap/tmp/slapd.pid

# List of arguments that were passed to the server
argsfile        /appli/ldap/tmp/slapd.args

# Read slapd.conf(5) for possible values
loglevel	stats sync
logfile         /appli/ldap/logs/sldap.log

# Where the dynamically loaded modules are stored # No module is needed : there are statically loaded

ServerID	001

# The tool-threads parameter sets the actual amount of cpu's that is used for indexing.
tool-threads 3
threads 16
concurrency 16

#conn_max_pending 1000
#conn_max_pending_auth 10000

backend         mdb

###################################################################################
# Configuration du back-end
###################################################################################
# Database ENT 
database        mdb

# The base of your directory in database #1
suffix          "dc=ent,dc=fr"
directory       /appli/ldap/data/slapd
rootdn          "cn=admin,ou=system,dc=ent,dc=fr"
rootpw		{MD5}XZkSIKB+Zet6uFQ0FpHKfQ==
password-hash   {MD5}

# Parametres MDB
maxreaders 126
mode 0600
# Should be more than enough...
searchstack 16
#32 Gb should be enough...
# Set to 32 Go
maxsize 161061273600
# default values
lastmod TRUE
maxderefdepth 15
readonly FALSE
sync_use_subentry FALSE

# At some point, to get some stats, it could be interested to turn this on monitoring FALSE

# ecriture différée
dbnosync TRUE
# ecriture tous les 15 minutes
checkpoint 0 15

################################################################################
# Configuration INDEX
################################################################################

#Globaux
index	objectClass						eq
index	active							eq
index	ou							eq
index	cn,uid							eq
index	sn							pres,sub,eq
index	entryCSN,entryUUID 					eq
#Personnes
index	ENTPersonJointure					sub,eq
index	ENTPersonLogin						eq
index	mail							eq
index	snNormalise						pres,sub,eq
index	ENTPersonneDN						eq,pres
index	ENTPersonProfils					eq
index	ENTPersonAlias						eq
index	givenNameNormalise					sub,eq
index	ENTCodeActivationParent					eq
index	cnNormalise						pres,sub,eq
index	ENTAuxPersonInit					eq
index	ENTEleveStructRattachId					eq
index	ENTAuxPersonCompteAAF					eq
index	ENTAuxPersRelEleveEleve					eq
index	ENTPersonStructRattach					eq
index	ENTAuxOtherEtab						eq
index	ENTPersonCodePostal					eq
index	ENTCodeActivationEleve					eq
index	ENTAuxPersonDeleteDate					pres,eq
index	ENTEleveClasses						eq
index	ENTEleveMEF						eq
index	ENTGroupeAnnuaireFiliere				eq
index	userPassword						eq
#index	ENTPersonNomPatro					eq
index	givenName						pres,sub,eq
index   ENTEleveRelationValidee             			eq 

#Structures
index	ENTStructureJointure					eq
index	ENTPorteurCode						eq
index	ENTEtablissementStructRattachFctl			eq
index	ENTStructureNomCourant					pres,sub,eq
index   ENTStructureUAI						eq 
#Groupes
index	description						pres,sub,eq
index	descriptionNormalise					pres,sub,eq
index	ENTGroupeAnnuaireTitreNormalise				pres,sub,eq
index	member							pres,eq
index	owner							eq
index	ENTGroupeAdminLocal					eq
index	ENTProfilDN						pres,eq
index	ENTReferentielCode					eq
index	ENTGroupeAnnuaireFonction				pres,eq
index	ENTGroupeAnnuaireClasseId				eq
index	ENTGroupeAnnuaireType					eq
index	ENTGroupeAnnuaireMefId					eq
index	ENTGroupeAnnuaireFiliereId				eq
index	ENTDisciplineDN						eq
index	ENTGroupeAdminPere					eq
index	ENTFonctionDN						eq
index	ENTClasseDN						eq
index	ENTGroupeAnnuaireClasse					pres,eq
index	ENTAdminLocalEtab					eq
#Synchro portail
index   ENTSuiviSynchroEffectuee				eq 
# New AMEU 20130827
index   ENTGroupeAdminLienGroupeAnnuairePartenariat             eq
index   ENTPersonFonctions                                      eq
index   ENTGroupeAnnuaireGroupeEnseignement                     eq
index   ENTPersonNomPatro                                       pres,sub,eq
index   ENTStructureAcademie                                    eq
index   ENTStructureCommune                                     eq
index   ENTGroupeAdminLienGroupeAnnuaire                        eq
# New RLAR 20130904
index   ENTGroupeAnnuaireFonctionId                             eq
# New 20130914 à 20h00
index	ENTAuxPersonEtabAcces                                   eq
# New 20130917 à 17h38 confcall Serges Barbosa / Procèdure export de jeu de données
index   modifyTimestamp                                         eq

# TMA-8585 04/11/2013
index   ENTGroupeAnnuaireMef                                    eq
index   ENTCodeActivationCode                                   eq
index   ENTEleveParents                                         eq

#2.1.1RC4
index   ENTAdminLocalCreateur                                   eq


# Save the time that the entry gets modified, for database #1
lastmod         on

# The admin dn has full write access, everyone else # can read everything.
access to *
        by * read

###############################################################################
# Configuration SYNCHRO
################################################################################

# MULTI MASTER EN SE SYNCHRONISANT AVEC LE LDAP02 TP # syncrepl rid=201
	provider=ldap://ldapp02:389
	type=refreshAndPersist
	retry="5 5 300 +"
	searchbase="dc=ent,dc=fr"
	attrs="*,+"
	bindmethod=simple
	binddn="cn=admin,ou=system,dc=ent,dc=fr"
	credentials=jungle
	logbase="cn=delta-sync"
	logfilter="(&(objectClass=auditWriteObject)(reqResult=0))"
	syncdata=accesslog

mirrormode on

# Overlay configuration should be added after the database configuration # Définition de l'overlay lié à la réplication maitre overlay syncprov

syncprov-checkpoint 100 10
# Définition de l'overlay lié à la réplication maitre en delta-sync overlay accesslog logdb "cn=delta-sync"
logops writes
logsuccess TRUE
logpurge 3+00:00 1+00:00

################################################################################
# Configuration de l’accesslog
################################################################################
# Database delta-sync :
database mdb
suffix "cn=delta-sync"
directory /appli/ldap/data/cn=delta-sync rootdn "cn=admin,ou=system,dc=ent,dc=fr"

#Some options to optimize acceslog :
index default,reqDN eq
index entryCSN,objectClass,reqEnd,reqResult,reqStart eq

#Parametres MDB
maxreaders 126
mode 0600
searchstack 16
# set to 10 Go
maxsize 21474836480
lastmod TRUE
maxderefdepth 15
readonly FALSE
dbnosync TRUE
checkpoint 0 15

overlay syncprov
syncprov-nopresent TRUE
syncprov-reloadhint TRUE


-----Message d'origine-----
De : Howard Chu [mailto:hyc@symas.com]
Envoyé : jeudi 9 juillet 2015 17:13
À : LARRIEU-MANAN, Richard; openldap-its@OpenLDAP.org Objet : Re: (ITS#8194) Service slapd falldown in a search with client ldapsearch

richard.larrieu-manan@cgi.com wrote:
> Full_Name: CGI - Richard Larrieu-Manan
> Version: 2.4.41
> OS: Red Hat 4.4.7-4
> URL: ftp://ftp.openldap.org/incoming/CGI_20150709.core.33604.tgz
> Submission from: (NULL) (195.6.127.108)
>
>
> Hello,
>
> When searching in the directory ldap 2.4.41 with ldapsearch client, 1 
> out of 4 ldap service falldown. So I have provided you a core dump
> (ftp://ftp.openldap.org/incoming/CGI_20150709.core.33604.tgz) during 
> the bug. In
> 2.4.38 version of the problem does not arise.


Thanks for the report but we cannot use your core file. Please send your slapd configuration and the stack trace from the core.

http://www.openldap.org/faq/data/cache/59.html

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/
Comment 6 Howard Chu 2015-10-25 09:38:20 UTC
richard.larrieu-manan@cgi.com wrote:
> Ok.
>
> Here is the command line to do the research with the client ldapsearch :
> /opt/openldap/bin/ldapsearch -xLLL -h ldapp02 -p 389 -D cn=3Dadmin,ou=3Dsys=
> tem,dc=3Dent,dc=3Dfr -b ou=3Dsupp,ou=3Dpersonnes,ou=3DCRRA,dc=3Dent,dc=3Dfr=
>   -w jungle dn | wc -l
>
> After 1 or 2 search the slapd server goes.

I believe this was fixed as ITS#8203 in 2.4.42. Please try that and followup 
again, thanks.
>
> Thx.
>
> -----Message d'origine-----
> De=A0: Michael Str=F6der [mailto:michael@stroeder.com]=20
> Envoy=E9=A0: vendredi 10 juillet 2015 12:35
> =C0=A0: LARRIEU-MANAN, Richard; openldap-its@OpenLDAP.org
> Objet=A0: Re: (ITS#8194) Service slapd falldown in a search with client lda=
> psearch
>
> Maybe I missed something but I can't which search requests are causing this=
> .
>
> Could you please also add some information about your ldapsearch commands?
>
> Ciao, Michael.
>
>
>
>


-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 7 Quanah Gibson-Mount 2020-03-13 20:08:47 UTC

*** This issue has been marked as a duplicate of issue 8203 ***