Re: Spurious Start TLS failed errors on proxyed bind OpenLDAP 2.4.40

[Brian Reichert <reichert@numachi.com>]

On Tue, Jan 22, 2019 at 03:10:04PM +0200, Janne Peltonen wrote:
> RHEL 7, and slapd seems to be linked to the Mozilla nss libraries.
> 
> I called them "spurious" because there doesn't seem to be any correlation
> between the errors and any external events. But I have to admit I do not
> understand what kind of activity might cause entropy to be low; I somehow
> thought it would be a simple case of "more entropy used than the pool has" and
> then it would be simply caused by too much activity. But these errors seem to
> come sometimes when the server is more loaded and sometimes when it is less
> loaded and I haven't found any way to make them more probable. Or less.

Perhaps unrelated, but at $JOB we had to explore using /dev/urandom vs
/dev/random on out CentOS 6 servers:

  https://unix.stackexchange.com/a/324210

> 
> --Janne / Helsinki Uni
> 

-- 
Brian Reichert				<reichert@numachi.com>
BSD admin/developer at large