Full_Name: VALDEMAR PAVESI
Version: 2.4.40
OS: 3.10.0-514.26.2.el7.x86_64
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (131.228.48.70)


hello,

during add an delete there is a memory leak.

fsuseradd CESNAT4 -G _nokfsuipmgroot -p Gok9zt0Fy4FZYWhW/fGHLseWjPj/Dgv1
fsuserdel  -r remove CESNAT4

there is a success for both commands.

+++++++++++++++++++++++++++++++++++++++

memory keep increasing...

Every 5.0s: ps -p 29064 o vsz,rss                                               
                                                                   Wed Mar 21
02:34:22 2018

   VSZ   RSS
831368 83980

+++++++++++++++++++++++++++++++++

Every 5.0s: ps -p 29064 o vsz,rss                                               
                                                                   Wed Mar 21
02:36:12 2018

   VSZ   RSS
831368 83984
+++++++++++++++++++++++++++++++++

got 1000 times memory leaked:


0x00007fc8000f8f70 libc-2.17.so __malloc()+0
0x00007fc8017cf2b5 liblber-2.4.so ber_memalloc_x()+53
0x00007fc8017cf5de liblber-2.4.so ber_dupbv_x()+62
0x00007fc801ea1c23 slapd
0x00007fc801ea2172 slapd attrs_dup()+66
0x00007fc801ea551b slapd entry_dup2()+75
0x00007fc7fc6f1403 syncprov-2.4.so
0x00007fc7fc6f20c2 syncprov-2.4.so
0x00007fc801ea91f3 slapd
0x00007fc801ea97b0 slapd
0x00007fc801eaa342 slapd slap_send_ldap_result()+114
0x00007fc801f1807d slapd bdb_modify()+1325
0x00007fc801f07926 slapd overlay_op_walk()+134
0x00007fc801f07a94 slapd
0x00007fc801efe7bf slapd
0x00007fc801f008eb slapd
0x00007fc801e999a1 slapd
0x00007fc8019e9fba libldap_r-2.4.so
0x00007fc800caddc5 libpthread-2.17.so start_thread()+197
0x00007fc80017076d libc-2.17.so __clone()+109

+++++++++++++++++++++++++++++++++


if keep running both commands,  there is one time that  we will get this error:


# fsuseradd CESNAT -G _nokfsuipmgroot -p Gok9zt0Fy4FZYWhW/fGHLseWjPj/Dgv1
invalid parameter: CESNAT already exists. use -g option to assign user to
CESNAT

# fsuserdel -r remove CESNAT
Username CESNAT does not exist in LDAP.

# fsuseradd CESNAT -G _nokfsuipmgroot -p Gok9zt0Fy4FZYWhW/fGHLseWjPj/Dgv1
invalid parameter: CESNAT already exists. use -g option to assign user to
CESNAT

# fsuserdel -r remove CESNAT
Username CESNAT does not exist in LDAP.

# fsuserdel -r remove CESNAT
Username CESNAT does not exist in LDAP.

# fsuseradd CESNAT -G _nokfsuipmgroot -p Gok9zt0Fy4FZYWhW/fGHLseWjPj/Dgv1
invalid parameter: CESNAT already exists. use -g option to assign user to
CESNAT

+++++++++++++++++++++++++++++++++++++++++


[root@santos-santoscmm-necc0 ~]# more /opt/aaa/ldap/conf/ldap.conf
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.7 2001/09/27 20:00:31
kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#

include         /opt/aaa/ldap/schema/fsAll.schema

#schemacheck off

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral       ldap://root.openldap.org

pidfile /var/run/slapd/slapd.pid
#argsfile /var/run/openldap/slapd.args

# Load dynamic backend modules:
# modulepath    /usr/local/libexec/openldap
# moduleload    back_ldap.la
# moduleload    back_ldbm.la
# moduleload    back_passwd.la
# moduleload    back_shell.la

# Define global ACLs to disable default read access.
include /opt/aaa/ldap/conf/security.conf

allows bind_v2

# Log level here doesn't really have any effect since the service is started
with -d option
loglevel 256
logfile /var/log/ldap/ldap.log

# Set the max size of primary thread pool
threads 20



#######################################################################
# ldbm database definitions
#######################################################################
sizelimit unlimited


# main database #######################################################
database    bdb
suffix      ""
rootdn      "fsClusterId=ClusterRoot"
rootpw          {CRYPT}$6$cKyVbTD/bEiX$DOOeUCXHkmOTdlbRq0n.hGzgv7rhD2MG4.hAt8s.8Gqr73gUKw7swD2xR7zvidcfpvbkVjOkruY4BM9UprSFH/
password-hash {CRYPT}
password-crypt-salt-format "$6$%.12s"
checkpoint  1024 60
directory   /var/lib/ldap/aaa
index       objectClass,entryCSN,entryUUID eq
index           uid,uidNumber,gidNumber,fssecAssignedGroupRoleRef,memberUid eq
moduleload /usr/lib64/openldap/ppolicy.la

overlay ppolicy

ppolicy_default "fsFragmentId=Policy,fsFragmentId=Configurations,fsFragmentId=Security,fsClusterId=ClusterRoot"


#overlay glue

#cachesize 30000


TLSCertificateFile local.local
security ssf=128
TLSCipherSuite HIGH:TLS_RSA_WITH_AES_128_CBC_SHA:TLS_RSA_WITH_AES_256_CBC_SHA:-SSLv2:-SSLv3
TLSCACertificatePath    /etc/openldap/internal_certs
TLSVerifyClient never
include /opt/nokia/aaa/ldap/conf/sync.conf
#


+++++++++++++++++++++++++++++++++++++++++


regards!
Valdemar