LDAP server unavailable: SERVER_DOWN
Marcel Bischoff
marcel at herrbischoff.com
Wed Jan 10 16:50:10 CET 2018
I have been able to pull the kernel messages from the logwatch output,
didn't think of this before. Maybe it helps in homing in on the cause. I
couldn't spot something obvious though. Maybe AppArmor does something
undesirable? I remember running into issues with it years ago in another
context.
I will uninstall it tonight, reboot the server and report on my progress
(or lack thereof).
Thanks again for bearing with me!
--------------------- Kernel Begin ------------------------
1 Time(s): #2
1 Time(s): #3
1 Time(s): 1 disabled
1 Time(s): 2 disabled
1 Time(s): 3 disabled
1 Time(s): 4 disabled
1 Time(s): 5 disabled
1 Time(s): 6 disabled
1 Time(s): 7 disabled
1 Time(s): ACPI: 1 ACPI AML tables successfully acquired and loaded
1 Time(s): ACPI: Added _OSI(Module Device)
1 Time(s): ACPI: Added _OSI(Processor Aggregator Device)
1 Time(s): ACPI: Added _OSI(Processor Device)
1 Time(s): ACPI: Early table checksum verification disabled
1 Time(s): ACPI: IRQ11 used by override.
1 Time(s): ACPI: IRQ5 used by override.
1 Time(s): ACPI: IRQ9 used by override.
1 Time(s): ACPI: Interpreter enabled
1 Time(s): ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11
1 Time(s): ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
1 Time(s): ACPI: Power Button [PWRF]
1 Time(s): ACPI: Using IOAPIC for interrupt routing
1 Time(s): ACPI: bus type PCI registered
1 Time(s): ACPI: bus type USB registered
1 Time(s): AES CTR mode by8 optimization enabled
1 Time(s): AMD AuthenticAMD
1 Time(s): AVX version of gcm_enc/dec engaged.
1 Time(s): AppArmor: AppArmor Filesystem Enabled
1 Time(s): AppArmor: AppArmor initialized
1 Time(s): AppArmor: AppArmor sha1 policy hashing enabled
1 Time(s): Booting paravirtualized kernel on KVM
1 Time(s): Btrfs loaded, crc32c=crc32c-intel
1 Time(s): Build-time adjustment of leaf fanout to 64.
1 Time(s): Built 1 zonelists in Node order, mobility grouping on. Total pages: 4128613
1 Time(s): Calgary: Unable to locate Rio Grande table in EBDA - bailing!
1 Time(s): Calgary: detecting Calgary via BIOS EBDA area
1 Time(s): Calibrating delay loop (skipped) preset value.. 4199.99 BogoMIPS (lpj=8399992)
1 Time(s): Centaur CentaurHauls
1 Time(s): DMA zone: 21 pages reserved
1 Time(s): DMA zone: 64 pages used for memmap
1 Time(s): DMA32 zone: 12224 pages used for memmap
1 Time(s): Device empty
1 Time(s): EDD information not available.
1 Time(s): EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null)
1 Time(s): EXT4-fs (sda1): re-mounted. Opts: discard
1 Time(s): Early memory node ranges
1 Time(s): Freeing SMP alternatives memory: 32K
1 Time(s): Freeing unused kernel memory: 1156K
1 Time(s): Freeing unused kernel memory: 2228K
1 Time(s): Freeing unused kernel memory: 268K
1 Time(s): GHES: HEST is not enabled!
1 Time(s): Hierarchical RCU implementation.
1 Time(s): Hypervisor detected: KVM
1 Time(s): Initialise system trusted keyrings
1 Time(s): Intel GenuineIntel
1 Time(s): KERNEL supported cpus:
1 Time(s): KVM setup async PF for cpu 1
1 Time(s): KVM setup async PF for cpu 2
1 Time(s): KVM setup async PF for cpu 3
1 Time(s): Key type asymmetric registered
1 Time(s): Key type big_key registered
1 Time(s): Key type dns_resolver registered
1 Time(s): Key type encrypted registered
1 Time(s): Key type trusted registered
1 Time(s): MTRR default type: write-back
1 Time(s): MTRR fixed ranges enabled:
1 Time(s): MTRR variable ranges enabled:
1 Time(s): Magic number: 2:724:141
1 Time(s): Mount-cache hash table entries: 32768 (order: 6, 262144 bytes)
1 Time(s): Mountpoint-cache hash table entries: 32768 (order: 6, 262144 bytes)
1 Time(s): Movable zone start for each node
1 Time(s): NET: Registered protocol family 1
1 Time(s): NET: Registered protocol family 16
1 Time(s): NET: Registered protocol family 17
1 Time(s): NET: Registered protocol family 2
1 Time(s): NR_IRQS:524544 nr_irqs:456 16
1 Time(s): NX (Execute Disable) protection: active
1 Time(s): NetLabel: domain hash size = 128
1 Time(s): NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
1 Time(s): NetLabel: unlabeled traffic allowed by default
1 Time(s): NetLabel: Initializing
1 Time(s): No NUMA configuration found
1 Time(s): Normal zone: 53248 pages used for memmap
1 Time(s): PCCT header not found.
1 Time(s): PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
1 Time(s): PCI: Using ACPI for IRQ routing
1 Time(s): PCI: Using configuration type 1 for base access
1 Time(s): PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
1 Time(s): PCI: pci_cache_line_size set to 64 bytes
1 Time(s): PM: Hibernation image not present or could not be loaded.
1 Time(s): PPP generic driver version 2.4.2
1 Time(s): Performance Events: unsupported p6 CPU model 42 no PMU driver, software events only.
1 Time(s): Policy zone: Normal
2 Time(s): Process accounting resumed
1 Time(s): RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=4.
1 Time(s): RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=4
1 Time(s): SCSI subsystem initialized
1 Time(s): SMBIOS 2.8 present.
1 Time(s): Scanning 1 areas for low memory corruption
1 Time(s): Security Framework initialized
1 Time(s): Segment Routing with IPv6
1 Time(s): Switched APIC routing to physical x2apic.
1 Time(s): TSC deadline timer enabled
1 Time(s): UDP hash table entries: 8192 (order: 6, 262144 bytes)
1 Time(s): UDP-Lite hash table entries: 8192 (order: 6, 262144 bytes)
1 Time(s): Unpacking initramfs...
1 Time(s): Using ACPI (MADT) for SMP configuration information
1 Time(s): Write protecting the kernel read-only data: 14336k
1 Time(s): Yama: becoming mindful.
1 Time(s): Zone ranges:
1 Time(s): acpi device:12: hash matches
1 Time(s): acpiphp: Slot [11] registered
1 Time(s): acpiphp: Slot [12] registered
1 Time(s): acpiphp: Slot [13] registered
1 Time(s): acpiphp: Slot [14] registered
1 Time(s): acpiphp: Slot [15] registered
1 Time(s): acpiphp: Slot [16] registered
1 Time(s): acpiphp: Slot [17] registered
1 Time(s): acpiphp: Slot [18] registered
1 Time(s): acpiphp: Slot [19] registered
1 Time(s): acpiphp: Slot [21] registered
1 Time(s): acpiphp: Slot [22] registered
1 Time(s): acpiphp: Slot [23] registered
1 Time(s): acpiphp: Slot [24] registered
1 Time(s): acpiphp: Slot [25] registered
1 Time(s): acpiphp: Slot [26] registered
1 Time(s): acpiphp: Slot [27] registered
1 Time(s): acpiphp: Slot [28] registered
1 Time(s): acpiphp: Slot [29] registered
1 Time(s): acpiphp: Slot [31] registered
1 Time(s): acpiphp: Slot [3] registered
1 Time(s): acpiphp: Slot [4] registered
1 Time(s): acpiphp: Slot [5] registered
1 Time(s): acpiphp: Slot [6] registered
1 Time(s): acpiphp: Slot [7] registered
1 Time(s): acpiphp: Slot [8] registered
1 Time(s): acpiphp: Slot [9] registered
1 Time(s): async_tx: api initialized (async)
1 Time(s): audit: initializing netlink subsys (disabled)
1 Time(s): clocksource: Switched to clocksource kvm-clock
1 Time(s): cpuidle: using governor ladder
1 Time(s): cpuidle: using governor menu
1 Time(s): devtmpfs: initialized
1 Time(s): ehci-pci: EHCI PCI platform driver
1 Time(s): ehci-platform: EHCI generic platform driver
1 Time(s): evm: security.SMACK64
1 Time(s): evm: security.SMACK64EXEC
1 Time(s): evm: security.SMACK64MMAP
1 Time(s): evm: security.SMACK64TRANSMUTE
1 Time(s): evm: security.capability
1 Time(s): evm: security.ima
1 Time(s): evm: security.selinux
1 Time(s): ftrace: allocating 34227 entries in 134 pages
1 Time(s): fuse init (API version 7.26)
1 Time(s): hidraw: raw HID events driver (C) Jiri Kosina
1 Time(s): hpet clockevent registered
1 Time(s): i2c /dev entries driver
1 Time(s): ima: No TPM chip found, activating TPM-bypass! (rc=-19)
1 Time(s): intel_idle: does not run on family 6 model 42
1 Time(s): io scheduler cfq registered
1 Time(s): io scheduler deadline registered
1 Time(s): io scheduler noop registered (default)
1 Time(s): ledtrig-cpu: registered to indicate activity on CPUs
1 Time(s): libphy: Fixed MDIO Bus: probed
1 Time(s): loop: module loaded
1 Time(s): mousedev: PS/2 mouse device common for all mice
1 Time(s): ohci-pci: OHCI PCI platform driver
1 Time(s): ohci-platform: OHCI generic platform driver
1 Time(s): ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
1 Time(s): pinctrl core: initialized pinctrl subsystem
1 Time(s): pnp: PnP ACPI init
1 Time(s): pnp: PnP ACPI: found 5 devices
1 Time(s): ppdev: user-space parallel port driver
1 Time(s): raid6: .... xor() 6424 MB/s, rmw enabled
1 Time(s): raid6: sse2x1 gen() 6723 MB/s
1 Time(s): raid6: sse2x1 xor() 5185 MB/s
1 Time(s): raid6: sse2x2 gen() 8399 MB/s
1 Time(s): raid6: sse2x2 xor() 5585 MB/s
1 Time(s): raid6: sse2x4 gen() 9942 MB/s
1 Time(s): raid6: sse2x4 xor() 6424 MB/s
1 Time(s): raid6: using algorithm sse2x4 gen() 9942 MB/s
1 Time(s): raid6: using ssse3x2 recovery algorithm
1 Time(s): random: crng init done
1 Time(s): random: fast init done
8 Time(s): random: systemd-udevd: uninitialized urandom read (16 bytes read)
2 Time(s): random: udevadm: uninitialized urandom read (16 bytes read)
1 Time(s): registered taskstats version 1
1 Time(s): scsi host1: ata_piix
1 Time(s): scsi host2: Virtio SCSI HBA
1 Time(s): sda: sda1
1 Time(s): setup_percpu: NR_CPUS:8192 nr_cpumask_bits:4 nr_cpu_ids:4 nr_node_ids:1
1 Time(s): smp: Bringing up secondary CPUs ...
1 Time(s): smp: Brought up 1 node, 4 CPUs
1 Time(s): smpboot: Max logical packages: 1
1 Time(s): smpboot: Total of 4 processors activated (16799.98 BogoMIPS)
1 Time(s): tun: Universal TUN/TAP device driver, 1.6
1 Time(s): uhci_hcd: USB Universal Host Controller Interface driver
1 Time(s): usb 1-1: Manufacturer: QEMU
1 Time(s): usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=5
1 Time(s): usb 1-1: Product: QEMU USB Tablet
1 Time(s): usb 1-1: SerialNumber: 42
1 Time(s): usb 1-1: new full-speed USB device number 2 using uhci_hcd
1 Time(s): usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
1 Time(s): usb usb1: Product: UHCI Host Controller
1 Time(s): usbcore: registered new device driver usb
1 Time(s): usbcore: registered new interface driver hub
1 Time(s): usbcore: registered new interface driver usbfs
1 Time(s): usbcore: registered new interface driver usbhid
1 Time(s): usbhid: USB HID core driver
1 Time(s): vgaarb: loaded
1 Time(s): x2apic enabled
1 Time(s): x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256
1 Time(s): x86/mm: Checked W+X mappings: passed, no W+X pages found.
1 Time(s): x86/mm: Memory block size: 128MB
1 Time(s): x86: Booting SMP configuration:
1 Time(s): xor: automatically using best checksumming function avx
1 Time(s): zbud: loaded
1 Time(s): zswap: loaded using pool lzo/zbud
---------------------- Kernel End -------------------------
On 18/01/10, Marcel Bischoff wrote:
>On 18/01/10, Skale, Franz wrote:
>>06:21 is the lograotation, so no problem. Same by me.
>
>A bit reassuring but still: shouldn't the service cleanly restart
>instead of barfing "Disorderly Shutdown"?
>
>>What strucks me is, that it seems that ns-slapd as to reallocate
>>memory.
>>How much memory does your server have ?
>>send free -m
>
>$ free -m
> total used free shared buff/cache available
>Mem: 16045 1304 13096 56 1644 14371
>Swap: 0 0 0
>
>No problem I can see there.
>
>>Do you have selinux enabled !
>>If so, disable it by adding selinux=0 to /etc/default/grub and rerun
>>update-grub.
>
>No, not enabled.
>
>>Send the kernel version: uname -a
>
>Linux mx.example.com 4.10.0-42-generic #46~16.04.1-Ubuntu SMP Mon Dec 4
>15:57:59 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
>
>>How much open file handles to your system allow per process ?
>>send: ulimit -a
>
>$ ulimit -a
>Maximum size of core files created (kB, -c) 0
>Maximum size of a process’s data segment (kB, -d) unlimited
>Maximum size of files created by the shell (kB, -f) unlimited
>Maximum size that may be locked into memory (kB, -l) 64
>Maximum resident set size (kB, -m) unlimited
>Maximum number of open file descriptors (-n) 1024
>Maximum stack size (kB, -s) 8192
>Maximum amount of cpu time in seconds (seconds, -t) unlimited
>Maximum number of processes available to a single user (-u) 64015
>Maximum amount of virtual memory available to the shell (kB, -v) unlimited
>
>>send dmesg: (is there a segfault).
>
>The whole dmesg output is spammed by ufw and contains no useful
>information whatsoever.
>
>>It really could be, that you have a failing memory module:
>>send dmidecode
>
>I don't think this is likely as this is a virtual server.
>
>$ dmidecode
># dmidecode 3.0
>Getting SMBIOS data from sysfs.
>SMBIOS 2.8 present.
>10 structures occupying 408 bytes.
>Table at 0x000F68A0.
>
>Handle 0x0000, DMI type 0, 24 bytes
>BIOS Information
> Vendor: SeaBIOS
> Version: 1.10.2
> Release Date: 04/01/2014
> Address: 0xE8000
> Runtime Size: 96 kB
> ROM Size: 64 kB
> Characteristics:
> BIOS characteristics not supported
> Targeted content distribution is supported
> BIOS Revision: 0.0
>
>Handle 0x0100, DMI type 1, 27 bytes
>System Information
> Manufacturer: Hetzner
> Product Name: vServer
> Version: 2
> Serial Number: Not Specified
> UUID: A8236400-D36B-0135-FE8F-10BF48D7F2C6
> Wake-up Type: Power Switch
> SKU Number: a8236400-d36b-0135-fe8f-10bf48d7f2c6
> Family: Not Specified
>
>Handle 0x0300, DMI type 3, 21 bytes
>Chassis Information
> Manufacturer: QEMU
> Type: Other
> Lock: Not Present
> Version: pc-i440fx-2.10
> Serial Number: Not Specified
> Asset Tag: Not Specified
> Boot-up State: Safe
> Power Supply State: Safe
> Thermal State: Safe
> Security Status: Unknown
> OEM Information: 0x00000000
> Height: Unspecified
> Number Of Power Cords: Unspecified
> Contained Elements: 0
>
>Handle 0x0400, DMI type 4, 42 bytes
>Processor Information
> Socket Designation: CPU 0
> Type: Central Processor
> Family: Other
> Manufacturer: QEMU
> ID: A1 06 02 00 FF FB 8B 07
> Version: pc-i440fx-2.10
> Voltage: Unknown
> External Clock: Unknown
> Max Speed: 2000 MHz
> Current Speed: 2000 MHz
> Status: Populated, Enabled
> Upgrade: Other
> L1 Cache Handle: Not Provided
> L2 Cache Handle: Not Provided
> L3 Cache Handle: Not Provided
> Serial Number: Not Specified
> Asset Tag: Not Specified
> Part Number: Not Specified
> Core Count: 4
> Core Enabled: 4
> Thread Count: 1
> Characteristics: None
>
>Handle 0x1000, DMI type 16, 23 bytes
>Physical Memory Array
> Location: Other
> Use: System Memory
> Error Correction Type: Multi-bit ECC
> Maximum Capacity: 16 GB
> Error Information Handle: Not Provided
> Number Of Devices: 1
>
>Handle 0x1100, DMI type 17, 40 bytes
>Memory Device
> Array Handle: 0x1000
> Error Information Handle: Not Provided
> Total Width: Unknown
> Data Width: Unknown
> Size: 16384 MB
> Form Factor: DIMM
> Set: None
> Locator: DIMM 0
> Bank Locator: Not Specified
> Type: RAM
> Type Detail: Other
> Speed: Unknown
> Manufacturer: QEMU
> Serial Number: Not Specified
> Asset Tag: Not Specified
> Part Number: Not Specified
> Rank: Unknown
> Configured Clock Speed: Unknown
> Minimum Voltage: Unknown
> Maximum Voltage: Unknown
> Configured Voltage: Unknown
>
>Handle 0x1300, DMI type 19, 31 bytes
>Memory Array Mapped Address
> Starting Address: 0x00000000000
> Ending Address: 0x000BFFFFFFF
> Range Size: 3 GB
> Physical Array Handle: 0x1000
> Partition Width: 1
>
>Handle 0x1301, DMI type 19, 31 bytes
>Memory Array Mapped Address
> Starting Address: 0x00100000000
> Ending Address: 0x0043FFFFFFF
> Range Size: 13 GB
> Physical Array Handle: 0x1000
> Partition Width: 1
>
>Handle 0x2000, DMI type 32, 11 bytes
>System Boot Information
> Status: No errors detected
>
>Handle 0x7F00, DMI type 127, 4 bytes
>End Of Table
>
>>Did you update your kernel days ago, if so, you sure ran into a buggy
>>kernel 4.9.65.
>>I built a 4.9.75 PTI enabled kernel which i send you to test.
>
>4.10.0-42-generic
>
>>Office 365 would be a bad and expensive choice.
>
>I agree. I'd very much like to avoid it but when Kolab turn out to have
>issues with the current setup, I doubt I'll get another shot.
>
>Best,
>Marcel
More information about the users
mailing list