Cyrus + LDAP = death by 13
Guus Leeuw jr.
guus.leeuw at guusleeuwit.com
Mon Mar 12 13:59:37 EST 2007
Distro: RedHat FC6
Uname -a: Linux jupiter 2.6.19-1.2911.6.4.fc6 #1 SMP Sat Feb 24 14:03:48 EST
2007 x86_64 x86_64 x86_64 GNU/Linux
Arch: Intel, DELL PowerEdge SC1430, Dual Core, 2 GiB.
> -----Original Message-----
> From: Roland Felnhofer [mailto:roland.felnhofer at chello.at]
> Sent: 12 March 2007 12:58
> To: k.gavrilenko at arhont.com
> Cc: guus.leeuw at guusleeuwit.com; info-cyrus at lists.andrew.cmu.edu
> Subject: Re: Cyrus + LDAP = death by 13
>
> Hi Kos,
>
> maybe I found the underlaying problem!!!
>
> # Connection policy:
> # persist: DSA connections are kept open (default)
> # oneshot: DSA connections destroyed after request
> +nss_connect_policy oneshot
> -#nss_connect_policy persist
>
> I set 'nss_connect_policy' to oneshot and Cyrus IMAP starts without
> problems (so far - I'll run further test) !!!
>
> I saw in the ldap.log that if I did a 'ls -all' over a directory the
> ldap
> chat terminated (successfully - but nonetheless) with the following
> lines_
>
> Mar 12 13:34:50 roka2 slapd[2942]: conn=449 op=4 SEARCH RESULT tag=101
> err=0 nentries=1 text=
> Mar 12 13:34:50 roka2 slapd[2942]: conn=449 fd=42 closed (connection
> lost)
>
> I changed to and the chat ended with the following lines:
> Mar 12 13:52:50 roka2 slapd[2942]: conn=511 op=1 SEARCH RESULT tag=101
> err=0 nentries=1 text=
> Mar 12 13:52:50 roka2 slapd[2942]: conn=511 op=2 UNBIND
> Mar 12 13:52:50 roka2 slapd[2942]: conn=511 fd=42 closed
>
>
> Where when I did a ldapsearch uid=whateveraccount it terminated with
> the
> following lines:
>
> Mar 12 13:55:53 roka2 slapd[2942]: conn=521 op=1 SEARCH RESULT tag=101
> err=0 nentries=1 text=
> Mar 12 13:55:53 roka2 slapd[2942]: conn=521 op=2 UNBIND
> Mar 12 13:55:53 roka2 slapd[2942]: conn=521 fd=44 closed
>
>
> I was irritated by 'closed (connection lost)'. 'Connection lost' does
> not
> look like a clean termination of a communication.
>
> Best regards
> Roland
>
>
> Some more nss_ldap testing results.
>
> nss_ldap-255 NOT working
> nss_ldap-254 NOT working
> nss_ldap-253 NOT working
> nss_ldap-252 NOT working
> nss_ldap-251 NOT working
> nss_ldap-250 NOT working
> nss_ldap-249 NOT working
> nss_ldap-248 NOT working
> nss_ldap-247 - not tested -
> nss_ldap-246 NOT working (SuSE source RPM)
> nss_ldap-245 !! could not find source !!
> nss_ldap-244 WORKING
> nss_ldap-243 - not tested -
> nss_ldap-242 - not tested -
> nss_ldap-241 - not tested -
> nss_ldap-240 WORKING
>
>
>
> Guus, can you say what distro you using and what architecture you've
> compiled it for? Since I have no problem on amd64, but on x86 it
> exists.
>
>
> yours,
> kos
>
>
> Respectfully,
> Konstantin V. Gavrilenko
>
> Managing Director
> Arhont Ltd - Information Security
>
> web: http://www.arhont.com
> http://www.wi-foo.com
> e-mail: k.gavrilenko at arhont.com
>
> tel: +44 (0) 870 44 31337
> fax: +44 (0) 117 969 0141
>
> PGP: Key ID - 0xE81824F4
> PGP: Server - keyserver.pgp.com
>
>
> Guus Leeuw jr. wrote:
>
>
>
>
> --
> No virus found in this incoming message.
> Checked by AVG.
> Version: 7.5.447 / Virus Database: 268.18.8/718 - Release Date:
> 11/03/2007 09:27
>
--
No virus found in this outgoing message.
Checked by AVG.
Version: 7.5.447 / Virus Database: 268.18.8/718 - Release Date: 11/03/2007
09:27
More information about the Info-cyrus
mailing list