[Date Prev][Date Next] [Chronological] [Thread] [Top]
2.2.13 crashes with ch_realloc of 2455080002 bytes failed

To: openldap-software@OpenLDAP.org
Subject: 2.2.13 crashes with ch_realloc of 2455080002 bytes failed
From: Janis Pinkis <jpinkis@lanet.lv>
Date: Thu, 17 Jun 2004 16:52:23 +0300
User-agent: Internet Messaging Program (IMP) 3.2.2

Hi!

It happened, when i was making a massive data import, with ldapadd and in
paralel rstarted a consumer server. Both hosts are runnig RHEL3 and
openldap-2.2.13.

Here are my master and replica conf files:

[root@abele-r root]# cat /usr/local/etc/openldap/master.conf
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.23.2.7 2003/03/24 03:54:12
kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema
include         /usr/local/etc/openldap/schema/solaris.schema
include         /usr/local/etc/openldap/schema/samba.schema
include         /usr/local/etc/openldap/schema/horde.schema
#include         /usr/local/etc/openldap/schema/eduorg.schema
#include        /usr/local/etc/openldap/schema/eduperson.schema
include         /usr/local/etc/openldap/schema/edu.schema
include         /usr/local/etc/openldap/schema/misc.schema
#include         /usr/local/etc/openldap/schema/pkiCA.schema
 
schemacheck on
sizelimit 65535
allow bind_v2
# Define global ACLs to disable default read access.
 
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral       ldap://root.openldap.org
 
pidfile         /usr/local/var/run/slapd.pid
argsfile        /usr/local/var/run/slapd.args
 
# Load dynamic backend modules:
# modulepath    /usr/local/libexec/openldap
# moduleload    back_bdb.la
# moduleload    back_ldap.la
# moduleload    back_ldbm.la
# moduleload    back_passwd.la
# moduleload    back_shell.la
 
# Sample security restrictions
#
#   Disallow clear text exchange of passwords
# disallow bind_simple_unprotected
#
#       Require integrity protection (prevent hijacking)
#       Require 112-bit (3DES or better) encryption for updates
#       Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64
 
# Sample access control policy:
#       Root DSE: allow anyone to read it
#       Subschema (sub)entry DSE: allow anyone to read it
#       Other DSEs:
#               Allow self write access
#               Allow authenticated users read access
#               Allow anonymous users to authenticate
#       Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to attr=userpassword
#        by self write
#        by anonymous auth
#        by * none
# access to *
#       by self write
#       by * read
#
# if no access controls are present, the default policy is:
#       Allow read by all
#
# rootdn can always write!
 
#
# TLS Stuff
#
#TLSCACertificateFile   /usr/local/etc/openldap/cert/cacert.pem
#TLSCertificateFile     /usr/local/etc/openldap/cert/abele.pem
#TLSCertificateKeyFile  /usr/local/etc/openldap/cert/abele.key
#TLSCipherSuite         ALL
 
#######################################################################
# dbd database definitions
#######################################################################
database        bdb
suffix          "dc=lu,dc=lv"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootdn          "cn=root,dc=lu,dc=lv"
rootpw          XXXX
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /usr/local/var/openldap-data
cachesize 32000
#
# Set transactional checkpoint.
#
checkpoint 512 720
sessionlog 1 2048
#
# Authentication
#
sasl-regexp
  uid=(.*),ou=People,dc=lu,dc=lv
  ldap://abele.lanet.lv??sub?(mail=$1)
#
# Authentication
#
password-hash   {CRYPT}
include /usr/local/etc/openldap/access.conf
# Indices to maintain
index   cn,sn,givenName,o,ou,mail,telephoneNumber,uid,displayName pres,eq,sub
index   mailLocalAddress,mailRoutingAddress pres,eq
index
eduPersonAffiliation,eduPersonPrimaryAffiliation,eduPersonNickname,eduPersonPrincipalName
pres,eq
index eduPersonOrgUnitDN,eduPersonPrimaryOrgUnitDN eq
index   objectClass     eq
index homeDirectory     eq
index sambaSID,uidNumber,gidNumber,sambaPrimaryGroupSID,memberUid eq

and
[root@abele-r root]# cat /usr/local/etc/openldap/replica.conf
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.23.2.7 2003/03/24 03:54:12
kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema
include         /usr/local/etc/openldap/schema/solaris.schema
include         /usr/local/etc/openldap/schema/samba.schema
include         /usr/local/etc/openldap/schema/horde.schema
#include         /usr/local/etc/openldap/schema/eduorg.schema
#include        /usr/local/etc/openldap/schema/eduperson.schema
include         /usr/local/etc/openldap/schema/edu.schema
include         /usr/local/etc/openldap/schema/misc.schema
#include         /usr/local/etc/openldap/schema/pkiCA.schema
 
schemacheck on
sizelimit 65535
allow bind_v2
# Define global ACLs to disable default read access.
 
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral       ldap://root.openldap.org
 
pidfile         /usr/local/var/run/slapd.pid
argsfile        /usr/local/var/run/slapd.args
 
# Load dynamic backend modules:
# modulepath    /usr/local/libexec/openldap
# moduleload    back_bdb.la
# moduleload    back_ldap.la
# moduleload    back_ldbm.la
# moduleload    back_passwd.la
# moduleload    back_shell.la
 
# Sample security restrictions
#
#   Disallow clear text exchange of passwords
# disallow bind_simple_unprotected
#
#       Require integrity protection (prevent hijacking)
#       Require 112-bit (3DES or better) encryption for updates
#       Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64
 
# Sample access control policy:
#       Root DSE: allow anyone to read it
#       Subschema (sub)entry DSE: allow anyone to read it
#       Other DSEs:
#               Allow self write access
#               Allow authenticated users read access
#               Allow anonymous users to authenticate
#       Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to attr=userpassword
#        by self write
#        by anonymous auth
#        by * none
# access to *
#       by self write
#       by * read
#
# if no access controls are present, the default policy is:
#       Allow read by all
#
# rootdn can always write!
 
#
# TLS Stuff
#
#TLSCACertificateFile   /usr/local/etc/openldap/cert/cacert.pem
#TLSCertificateFile     /usr/local/etc/openldap/cert/abele.pem
#TLSCertificateKeyFile  /usr/local/etc/openldap/cert/abele.key
#TLSCipherSuite         ALL
 
#######################################################################
# dbd database definitions
#######################################################################
 
database        bdb
readonly        on
suffix          "dc=lu,dc=lv"
rootdn          "cn=root,dc=lu,dc=lv"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          XXXX
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /usr/local/var/openldap-data
cachesize 32000
#
# Authentication
#
password-hash   {CRYPT}
 
# Indices to maintain
index   cn,sn,givenName,o,ou,mail,telephoneNumber,uid,displayName pres,eq,sub
index   mailLocalAddress,mailRoutingAddress pres,eq
index
eduPersonAffiliation,eduPersonPrimaryAffiliation,eduPersonNickname,eduPersonPrincipalName
pres,eq
index eduPersonOrgUnitDN,eduPersonPrimaryOrgUnitDN eq
index   objectClass     eq
index homeDirectory     eq
index sambaSID,uidNumber,gidNumber,sambaPrimaryGroupSID,memberUid eq
index entryUUID eq
 
include /usr/local/etc/openldap/access.conf
syncrepl rid=2
   provider=ldap://abele-t.lanet.lv:389
   type=refreshAndPersist
   interval=00:00:01:00
   schemachecking=on
   searchbase="dc=lu,dc=lv"
   scope=sub
   updatedn="cn=root,dc=lu,dc=lv"
   bindmethod=simple
   binddn="cn=root,dc=lu,dc=lv"
   credentials="XXX"
updateref ldap://abele-t.lanet.lv

Regards
J.Pinkis
Follow-Ups:
- Re: 2.2.13 crashes with ch_realloc of 2455080002 bytes failed
  - From: Quanah Gibson-Mount <quanah@stanford.edu>
Prev by Date: Re: Turning off clear text - how 2 get tls only communications?
Next by Date: Re: How to install openldap 2.2.13 on MAC OS X?
Index(es):
- Chronological
- Thread