LDAP server unavailable: SERVER_DOWN

Skale, Franz i.bin at dah.am
Thu Jan 11 08:13:35 CET 2018


Hi Marcel,
i now checked my ldap server and also found some messages regarding the 
ACL Plugin:
Jan 10 22:32:54 localhost ns-slapd[98615]: 
[10/Jan/2018:22:32:54.579885565 +0100] connection - conn=2940 fd=284 
Attempt to release connection that is not acquire
Jan 10 22:32:54 localhost ns-slapd[98615]: 
[10/Jan/2018:22:32:54.585434274 +0100] connection - conn=4470 fd=188 
Attempt to release connection that is not acquire
Jan 10 23:50:07 localhost ns-slapd[98615]: 
[10/Jan/2018:23:50:07.863504579 +0100] NSACLPlugin - acl_access_allowed: 
Resetting aclpb_pblock 0x7fa3a3fe6a60 to pblo
Jan 11 00:07:34 localhost ns-slapd[98615]: 
[11/Jan/2018:00:07:34.557315481 +0100] NSACLPlugin - acl_access_allowed: 
Resetting aclpb_pblock 0x7fa3a9ff2a60 to pblo
Jan 11 03:12:32 localhost ns-slapd[98615]: 
[11/Jan/2018:03:12:32.383353274 +0100] NSACLPlugin - acl_access_allowed: 
Resetting aclpb_pblock 0x7fa3aeffca60 to pblo
Jan 11 06:47:56 localhost ns-slapd[98615]: 
[11/Jan/2018:06:47:56.284946442 +0100] NSACLPlugin - acl_access_allowed: 
Resetting aclpb_pblock 0x7fa3a7feea60 to pblo
Jan 11 06:48:00 localhost ns-slapd[98615]: 
[11/Jan/2018:06:48:00.364639406 +0100] NSACLPlugin - acl_access_allowed: 
Resetting aclpb_pblock 0x7fa3ae7fba60 to pblo
Jan 11 07:53:34 localhost ns-slapd[98615]: 
[11/Jan/2018:07:53:34.001520691 +0100] NSACLPlugin - acl_access_allowed: 
Resetting aclpb_pblock 0x7fa3a17e1a60 to pblo
Jan 11 07:58:34 localhost ns-slapd[98615]: 
[11/Jan/2018:07:58:34.641383768 +0100] connection - conn=3240 fd=278 
Attempt to release connection that is not acquire
Jan 11 07:58:34 localhost ns-slapd[98615]: 
[11/Jan/2018:07:58:34.646688065 +0100] connection - conn=0 fd=0 Attempt 
to release connection that is not acquired
But i have no unordered shutdown mentioned anywhere in the logs.
I also found out, that rasing the filelimit level doesn't work for the 
dirsrv service.
Instead i raised it in the defaults config files:
/etc/default/dirsrv:
ulimit -n 65535
/etc/default/dirsrv at mailserver:
ulimit -n 65535
/etc/default/dirsrv.systemd:
# uncomment this line to raise the file descriptor limit
LimitNOFILE=65535
If your dirsrv shutdown unordered i personall think you have a problem 
with either the host kernel or the guest kernel.
dirsrv is multithreaded and creates a thread for every connection 
leaving alone filepointers it opens on demand.
So even on my testserver with no user created it consumes 200 
filepointers after starting.

Rgds.
Franz
Am 2018-01-10 22:05, schrieb Marcel Bischoff:
> Hi Franz,
> 
> so much for trying to remove AppArmor:
> 
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> The following packages were automatically installed and are no longer 
> required:
>  389-admin 389-admin-console 389-console 389-ds 389-ds-base
> 389-ds-base-libs 389-ds-console 389-ds-console-doc 389-dsgw
> amavisd-new aspell aspell-en augeas-lenses chwala
>  clamav clamav-base clamav-daemon clamav-freshclam clamdscan
> cyrus-imapd dictionaries-common emacsen-common erlang-base
> erlang-crypto erlang-eimap erlang-goldrush erlang-lager
>  erlang-lager-syslog erlang-syntax-tools fontconfig guam irony
> kolab-cli kolab-conf kolab-freebusy kolab-imap kolab-ldap kolab-mta
> kolab-saslauthd kolab-schema kolab-server
>  kolab-syncroton kolab-webadmin kolab-xml ldap-utils libadminutil-data
> libadminutil0 libapache2-mod-nss libapache2-mod-php
> libapache2-mod-php7.0 libapparmor-perl libaspell15
>  libaudio2 libaugeas0 libauthen-sasl-perl libavahi-client3
> libavahi-common-data libavahi-common3 libberkeleydb-perl
> libcalendaring libcgi-fast-perl libcgi-pm-perl libclamav7
>  libconvert-binhex-perl libconvert-tnef-perl libconvert-uulib-perl
> libcrypt-openssl-bignum-perl libcrypt-openssl-rsa-perl libcups2
> libdigest-hmac-perl libds-admin-serv0
>  libencode-locale-perl libevent-core-2.0-5 libfcgi-perl libgd3
> libhtml-parser-perl libhtml-tagset-perl libhtml-template-perl
> libhttp-date-perl libhttp-message-perl libical1a
>  libidm-console-framework-java libio-html-perl libio-multiplex-perl
> libio-socket-inet6-perl libio-socket-ssl-perl libio-stringy-perl
> libjansson4 libjbig0 libjpeg-turbo8
>  libjpeg8 libjss-java libkolab2 libkolabxml1v5 liblcms2-2 libldap-java
> libllvm3.6v5 liblwp-mediatypes-perl libmail-dkim-perl libmail-spf-perl
> libmailtools-perl libmcrypt4
>  libmime-tools-perl libmng2 libmozilla-ldap-perl libmozldap-0d
> libnet-cidr-perl libnet-dns-perl libnet-ip-perl libnet-libidn-perl
> libnet-server-perl libnet-smtp-ssl-perl
>  libnet-ssleay-perl libnetaddr-ip-perl libnss3-tools
> libperl4-corelibs-perl libqt4-dbus libqt4-declarative libqt4-network
> libqt4-script libqt4-sql libqt4-sql-mysql libqt4-xml
>  libqt4-xmlpatterns libqtcore4 libqtdbus4 libqtgui4 libsctp1
> libsocket-getaddrinfo-perl libsocket6-perl libtiff5
> libunix-syslog-perl liburi-perl libvpx3 libxerces-c3.1
>  libxslt1.1 libzend-framework-php libzephyr4 mozldap-tools
> mysql-client mysql-client-5.7 mysql-client-core-5.7
> mysql-server-core-5.7 pax php php-auth-sasl php-cli php-common
>  php-curl php-gd php-http-request2 php-intl php-kolab php-kolabformat
> php-ldap php-mail php-mail-mime php-mail-mimedecode php-mbstring
> php-mcrypt php-mdb2
>  php-mdb2-driver-mysql php-monolog php-mysql php-net-idna2
> php-net-ldap2 php-net-ldap3 php-net-sieve php-net-smtp php-net-socket
> php-net-url2 php-pear php-pspell php-psr-log
>  php-sabre-dav-2.1 php-sabre-event php-sabre-http-3
> php-sabre-vobject-3 php-xml php7.0 php7.0-cli php7.0-common
> php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-json
>  php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-opcache
> php7.0-pspell php7.0-readline php7.0-xml pykolab python-augeas
> python-cheetah python-dateutil
>  python-gnupg python-icalendar python-kolab python-kolabformat
> python-ldap python-pkg-resources python-pyasn1 python-pyasn1-modules
> python-pymysql python-six python-sqlalchemy
>  python-sqlalchemy-ext python-tz python-tzlocal qdbus qt-at-spi
> qtchooser qtcore4-l10n re2c roundcubemail roundcubemail-core
> roundcubemail-plugin-acl
>  roundcubemail-plugin-archive roundcubemail-plugin-calendar
> roundcubemail-plugin-contextmenu
> roundcubemail-plugin-filesystem-attachments
> roundcubemail-plugin-jqueryui
>  roundcubemail-plugin-kolab-activesync
> roundcubemail-plugin-kolab-addressbook roundcubemail-plugin-kolab-auth
> roundcubemail-plugin-kolab-config
>  roundcubemail-plugin-kolab-delegation
> roundcubemail-plugin-kolab-files roundcubemail-plugin-kolab-folders
> roundcubemail-plugin-kolab-notes roundcubemail-plugin-kolab-tags
>  roundcubemail-plugin-libcalendaring roundcubemail-plugin-libkolab
> roundcubemail-plugin-managesieve roundcubemail-plugin-newmail-notifier
> roundcubemail-plugin-odfviewer
>  roundcubemail-plugin-password roundcubemail-plugin-pdfviewer
> roundcubemail-plugin-redundant-attachments
> roundcubemail-plugin-tasklist roundcubemail-plugin-zipdownload
>  roundcubemail-plugins-kolab roundcubemail-skin-chameleon sa-compile
> smarty3 spamassassin spamc wallace zend-framework zend-framework-bin
> Use 'apt autoremove' to remove them.
> The following packages will be REMOVED:
>  apparmor kolab kolab-webclient mysql-server mysql-server-5.7
> 0 upgraded, 0 newly installed, 5 to remove and 0 not upgraded.
> After this operation, 50.2 MB disk space will be freed.
> Do you want to continue? [Y/n]
> 
> Which amounts to basically... everything.
> 
> At least apparmor_status lets me know:
> 
> apparmor module is loaded.
> 0 profiles are loaded.
> 0 profiles are in enforce mode.
> 0 profiles are in complain mode.
> 0 processes have profiles defined.
> 0 processes are in enforce mode.
> 0 processes are in complain mode.
> 0 processes are unconfined but have a profile defined.
> 
> So that should be alright I guess.
> 
> I have raised the limits and will monitor the outcome. Hopefully things
> will quiet down now.
> 
> Best,
> Marcel
> 
> On 18/01/10, Skale, Franz wrote:
>> Hi Marcel,
>> I would deactivate apparmor.
>> Also i find that your ulimit -a output is wrong.
>> You should raise the open files to 65k depending how much users you
>> have.
>> 1024 is too small i guess.
>> Consider this as a starting point:
>> http://directory.fedoraproject.org/docs/389ds/FAQ/performance-tuning.html#linux
>> Since you've a KVM guest, do you use PV or HVM ?
>> Did you install a PTI kernel on the host ?
>> If so, you should use a PTI kernel in the guest too.
>> Jan  7 18:10:46 localhost kernel: [    0.000000] Kernel/User page
>> tables isolation: enabled e.g (using 4.9.75).
>> Just a thought.
>> 
>> 
>> Rgds.
>> Franz
>> 
>> 
>> Am 2018-01-10 16:50, schrieb Marcel Bischoff:
>>> I have been able to pull the kernel messages from the logwatch 
>>> output,
>>> didn't think of this before. Maybe it helps in homing in on the
>>> cause. I
>>> couldn't spot something obvious though. Maybe AppArmor does something
>>> undesirable? I remember running into issues with it years ago in
>>> another
>>> context.
>>> 
>>> I will uninstall it tonight, reboot the server and report on my
>>> progress
>>> (or lack thereof).
>>> 
>>> Thanks again for bearing with me!
>>> 
>>> --------------------- Kernel Begin ------------------------
>>> 
>>> 
>>> 1 Time(s): #2
>>> 1 Time(s): #3
>>> 1 Time(s): 1 disabled
>>> 1 Time(s): 2 disabled
>>> 1 Time(s): 3 disabled
>>> 1 Time(s): 4 disabled
>>> 1 Time(s): 5 disabled
>>> 1 Time(s): 6 disabled
>>> 1 Time(s): 7 disabled
>>> 1 Time(s): ACPI: 1 ACPI AML tables successfully acquired and loaded
>>> 1 Time(s): ACPI: Added _OSI(Module Device)
>>> 1 Time(s): ACPI: Added _OSI(Processor Aggregator Device)
>>> 1 Time(s): ACPI: Added _OSI(Processor Device)
>>> 1 Time(s): ACPI: Early table checksum verification disabled
>>> 1 Time(s): ACPI: IRQ11 used by override.
>>> 1 Time(s): ACPI: IRQ5 used by override.
>>> 1 Time(s): ACPI: IRQ9 used by override.
>>> 1 Time(s): ACPI: Interpreter enabled
>>> 1 Time(s): ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11
>>> 1 Time(s): ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
>>> 1 Time(s): ACPI: Power Button [PWRF]
>>> 1 Time(s): ACPI: Using IOAPIC for interrupt routing
>>> 1 Time(s): ACPI: bus type PCI registered
>>> 1 Time(s): ACPI: bus type USB registered
>>> 1 Time(s): AES CTR mode by8 optimization enabled
>>> 1 Time(s): AMD AuthenticAMD
>>> 1 Time(s): AVX version of gcm_enc/dec engaged.
>>> 1 Time(s): AppArmor: AppArmor Filesystem Enabled
>>> 1 Time(s): AppArmor: AppArmor initialized
>>> 1 Time(s): AppArmor: AppArmor sha1 policy hashing enabled
>>> 1 Time(s): Booting paravirtualized kernel on KVM
>>> 1 Time(s): Btrfs loaded, crc32c=crc32c-intel
>>> 1 Time(s): Build-time adjustment of leaf fanout to 64.
>>> 1 Time(s): Built 1 zonelists in Node order, mobility grouping on.
>>> Total pages: 4128613
>>> 1 Time(s): Calgary: Unable to locate Rio Grande table in EBDA -
>>> bailing!
>>> 1 Time(s): Calgary: detecting Calgary via BIOS EBDA area
>>> 1 Time(s): Calibrating delay loop (skipped) preset value.. 4199.99
>>> BogoMIPS (lpj=8399992)
>>> 1 Time(s): Centaur CentaurHauls
>>> 1 Time(s): DMA zone: 21 pages reserved
>>> 1 Time(s): DMA zone: 64 pages used for memmap
>>> 1 Time(s): DMA32 zone: 12224 pages used for memmap
>>> 1 Time(s): Device   empty
>>> 1 Time(s): EDD information not available.
>>> 1 Time(s): EXT4-fs (sda1): mounted filesystem with ordered data mode.
>>> Opts: (null)
>>> 1 Time(s): EXT4-fs (sda1): re-mounted. Opts: discard
>>> 1 Time(s): Early memory node ranges
>>> 1 Time(s): Freeing SMP alternatives memory: 32K
>>> 1 Time(s): Freeing unused kernel memory: 1156K
>>> 1 Time(s): Freeing unused kernel memory: 2228K
>>> 1 Time(s): Freeing unused kernel memory: 268K
>>> 1 Time(s): GHES: HEST is not enabled!
>>> 1 Time(s): Hierarchical RCU implementation.
>>> 1 Time(s): Hypervisor detected: KVM
>>> 1 Time(s): Initialise system trusted keyrings
>>> 1 Time(s): Intel GenuineIntel
>>> 1 Time(s): KERNEL supported cpus:
>>> 1 Time(s): KVM setup async PF for cpu 1
>>> 1 Time(s): KVM setup async PF for cpu 2
>>> 1 Time(s): KVM setup async PF for cpu 3
>>> 1 Time(s): Key type asymmetric registered
>>> 1 Time(s): Key type big_key registered
>>> 1 Time(s): Key type dns_resolver registered
>>> 1 Time(s): Key type encrypted registered
>>> 1 Time(s): Key type trusted registered
>>> 1 Time(s): MTRR default type: write-back
>>> 1 Time(s): MTRR fixed ranges enabled:
>>> 1 Time(s): MTRR variable ranges enabled:
>>> 1 Time(s): Magic number: 2:724:141
>>> 1 Time(s): Mount-cache hash table entries: 32768 (order: 6, 262144
>>> bytes)
>>> 1 Time(s): Mountpoint-cache hash table entries: 32768 (order: 6,
>>> 262144 bytes)
>>> 1 Time(s): Movable zone start for each node
>>> 1 Time(s): NET: Registered protocol family 1
>>> 1 Time(s): NET: Registered protocol family 16
>>> 1 Time(s): NET: Registered protocol family 17
>>> 1 Time(s): NET: Registered protocol family 2
>>> 1 Time(s): NR_IRQS:524544 nr_irqs:456 16
>>> 1 Time(s): NX (Execute Disable) protection: active
>>> 1 Time(s): NetLabel:  domain hash size = 128
>>> 1 Time(s): NetLabel:  protocols = UNLABELED CIPSOv4 CALIPSO
>>> 1 Time(s): NetLabel:  unlabeled traffic allowed by default
>>> 1 Time(s): NetLabel: Initializing
>>> 1 Time(s): No NUMA configuration found
>>> 1 Time(s): Normal zone: 53248 pages used for memmap
>>> 1 Time(s): PCCT header not found.
>>> 1 Time(s): PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
>>> 1 Time(s): PCI: Using ACPI for IRQ routing
>>> 1 Time(s): PCI: Using configuration type 1 for base access
>>> 1 Time(s): PCI: Using host bridge windows from ACPI; if necessary, 
>>> use
>>> "pci=nocrs" and report a bug
>>> 1 Time(s): PCI: pci_cache_line_size set to 64 bytes
>>> 1 Time(s): PM: Hibernation image not present or could not be loaded.
>>> 1 Time(s): PPP generic driver version 2.4.2
>>> 1 Time(s): Performance Events: unsupported p6 CPU model 42 no PMU
>>> driver, software events only.
>>> 1 Time(s): Policy zone: Normal
>>> 2 Time(s): Process accounting resumed
>>> 1 Time(s): RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=4.
>>> 1 Time(s): RCU: Adjusting geometry for rcu_fanout_leaf=64, 
>>> nr_cpu_ids=4
>>> 1 Time(s): SCSI subsystem initialized
>>> 1 Time(s): SMBIOS 2.8 present.
>>> 1 Time(s): Scanning 1 areas for low memory corruption
>>> 1 Time(s): Security Framework initialized
>>> 1 Time(s): Segment Routing with IPv6
>>> 1 Time(s): Switched APIC routing to physical x2apic.
>>> 1 Time(s): TSC deadline timer enabled
>>> 1 Time(s): UDP hash table entries: 8192 (order: 6, 262144 bytes)
>>> 1 Time(s): UDP-Lite hash table entries: 8192 (order: 6, 262144 bytes)
>>> 1 Time(s): Unpacking initramfs...
>>> 1 Time(s): Using ACPI (MADT) for SMP configuration information
>>> 1 Time(s): Write protecting the kernel read-only data: 14336k
>>> 1 Time(s): Yama: becoming mindful.
>>> 1 Time(s): Zone ranges:
>>> 1 Time(s): acpi device:12: hash matches
>>> 1 Time(s): acpiphp: Slot [11] registered
>>> 1 Time(s): acpiphp: Slot [12] registered
>>> 1 Time(s): acpiphp: Slot [13] registered
>>> 1 Time(s): acpiphp: Slot [14] registered
>>> 1 Time(s): acpiphp: Slot [15] registered
>>> 1 Time(s): acpiphp: Slot [16] registered
>>> 1 Time(s): acpiphp: Slot [17] registered
>>> 1 Time(s): acpiphp: Slot [18] registered
>>> 1 Time(s): acpiphp: Slot [19] registered
>>> 1 Time(s): acpiphp: Slot [21] registered
>>> 1 Time(s): acpiphp: Slot [22] registered
>>> 1 Time(s): acpiphp: Slot [23] registered
>>> 1 Time(s): acpiphp: Slot [24] registered
>>> 1 Time(s): acpiphp: Slot [25] registered
>>> 1 Time(s): acpiphp: Slot [26] registered
>>> 1 Time(s): acpiphp: Slot [27] registered
>>> 1 Time(s): acpiphp: Slot [28] registered
>>> 1 Time(s): acpiphp: Slot [29] registered
>>> 1 Time(s): acpiphp: Slot [31] registered
>>> 1 Time(s): acpiphp: Slot [3] registered
>>> 1 Time(s): acpiphp: Slot [4] registered
>>> 1 Time(s): acpiphp: Slot [5] registered
>>> 1 Time(s): acpiphp: Slot [6] registered
>>> 1 Time(s): acpiphp: Slot [7] registered
>>> 1 Time(s): acpiphp: Slot [8] registered
>>> 1 Time(s): acpiphp: Slot [9] registered
>>> 1 Time(s): async_tx: api initialized (async)
>>> 1 Time(s): audit: initializing netlink subsys (disabled)
>>> 1 Time(s): clocksource: Switched to clocksource kvm-clock
>>> 1 Time(s): cpuidle: using governor ladder
>>> 1 Time(s): cpuidle: using governor menu
>>> 1 Time(s): devtmpfs: initialized
>>> 1 Time(s): ehci-pci: EHCI PCI platform driver
>>> 1 Time(s): ehci-platform: EHCI generic platform driver
>>> 1 Time(s): evm: security.SMACK64
>>> 1 Time(s): evm: security.SMACK64EXEC
>>> 1 Time(s): evm: security.SMACK64MMAP
>>> 1 Time(s): evm: security.SMACK64TRANSMUTE
>>> 1 Time(s): evm: security.capability
>>> 1 Time(s): evm: security.ima
>>> 1 Time(s): evm: security.selinux
>>> 1 Time(s): ftrace: allocating 34227 entries in 134 pages
>>> 1 Time(s): fuse init (API version 7.26)
>>> 1 Time(s): hidraw: raw HID events driver (C) Jiri Kosina
>>> 1 Time(s): hpet clockevent registered
>>> 1 Time(s): i2c /dev entries driver
>>> 1 Time(s): ima: No TPM chip found, activating TPM-bypass! (rc=-19)
>>> 1 Time(s): intel_idle: does not run on family 6 model 42
>>> 1 Time(s): io scheduler cfq registered
>>> 1 Time(s): io scheduler deadline registered
>>> 1 Time(s): io scheduler noop registered (default)
>>> 1 Time(s): ledtrig-cpu: registered to indicate activity on CPUs
>>> 1 Time(s): libphy: Fixed MDIO Bus: probed
>>> 1 Time(s): loop: module loaded
>>> 1 Time(s): mousedev: PS/2 mouse device common for all mice
>>> 1 Time(s): ohci-pci: OHCI PCI platform driver
>>> 1 Time(s): ohci-platform: OHCI generic platform driver
>>> 1 Time(s): ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
>>> 1 Time(s): pinctrl core: initialized pinctrl subsystem
>>> 1 Time(s): pnp: PnP ACPI init
>>> 1 Time(s): pnp: PnP ACPI: found 5 devices
>>> 1 Time(s): ppdev: user-space parallel port driver
>>> 1 Time(s): raid6: .... xor() 6424 MB/s, rmw enabled
>>> 1 Time(s): raid6: sse2x1   gen()  6723 MB/s
>>> 1 Time(s): raid6: sse2x1   xor()  5185 MB/s
>>> 1 Time(s): raid6: sse2x2   gen()  8399 MB/s
>>> 1 Time(s): raid6: sse2x2   xor()  5585 MB/s
>>> 1 Time(s): raid6: sse2x4   gen()  9942 MB/s
>>> 1 Time(s): raid6: sse2x4   xor()  6424 MB/s
>>> 1 Time(s): raid6: using algorithm sse2x4 gen() 9942 MB/s
>>> 1 Time(s): raid6: using ssse3x2 recovery algorithm
>>> 1 Time(s): random: crng init done
>>> 1 Time(s): random: fast init done
>>> 8 Time(s): random: systemd-udevd: uninitialized urandom read (16
>>> bytes read)
>>> 2 Time(s): random: udevadm: uninitialized urandom read (16 bytes 
>>> read)
>>> 1 Time(s): registered taskstats version 1
>>> 1 Time(s): scsi host1: ata_piix
>>> 1 Time(s): scsi host2: Virtio SCSI HBA
>>> 1 Time(s): sda: sda1
>>> 1 Time(s): setup_percpu: NR_CPUS:8192 nr_cpumask_bits:4 nr_cpu_ids:4
>>> nr_node_ids:1
>>> 1 Time(s): smp: Bringing up secondary CPUs ...
>>> 1 Time(s): smp: Brought up 1 node, 4 CPUs
>>> 1 Time(s): smpboot: Max logical packages: 1
>>> 1 Time(s): smpboot: Total of 4 processors activated (16799.98 
>>> BogoMIPS)
>>> 1 Time(s): tun: Universal TUN/TAP device driver, 1.6
>>> 1 Time(s): uhci_hcd: USB Universal Host Controller Interface driver
>>> 1 Time(s): usb 1-1: Manufacturer: QEMU
>>> 1 Time(s): usb 1-1: New USB device strings: Mfr=1, Product=3,
>>> SerialNumber=5
>>> 1 Time(s): usb 1-1: Product: QEMU USB Tablet
>>> 1 Time(s): usb 1-1: SerialNumber: 42
>>> 1 Time(s): usb 1-1: new full-speed USB device number 2 using uhci_hcd
>>> 1 Time(s): usb usb1: New USB device strings: Mfr=3, Product=2,
>>> SerialNumber=1
>>> 1 Time(s): usb usb1: Product: UHCI Host Controller
>>> 1 Time(s): usbcore: registered new device driver usb
>>> 1 Time(s): usbcore: registered new interface driver hub
>>> 1 Time(s): usbcore: registered new interface driver usbfs
>>> 1 Time(s): usbcore: registered new interface driver usbhid
>>> 1 Time(s): usbhid: USB HID core driver
>>> 1 Time(s): vgaarb: loaded
>>> 1 Time(s): x2apic enabled
>>> 1 Time(s): x86/fpu: xstate_offset[2]:  576, xstate_sizes[2]:  256
>>> 1 Time(s): x86/mm: Checked W+X mappings: passed, no W+X pages found.
>>> 1 Time(s): x86/mm: Memory block size: 128MB
>>> 1 Time(s): x86: Booting SMP configuration:
>>> 1 Time(s): xor: automatically using best checksumming function   avx
>>> 1 Time(s): zbud: loaded
>>> 1 Time(s): zswap: loaded using pool lzo/zbud
>>> 
>>> ---------------------- Kernel End -------------------------
>>> 
>>> On 18/01/10, Marcel Bischoff wrote:
>>>> On 18/01/10, Skale, Franz wrote:
>>>>> 06:21 is the lograotation, so no problem. Same by me.
>>>> 
>>>> A bit reassuring but still: shouldn't the service cleanly restart
>>>> instead of barfing "Disorderly Shutdown"?
>>>> 
>>>>> What strucks me is, that it seems that ns-slapd as to reallocate
>>>>> memory.
>>>>> How much memory does your server have ?
>>>>> send free -m
>>>> 
>>>> $ free -m
>>>>            total        used        free      shared  buff/cache
>>>> available
>>>> Mem:          16045        1304       13096          56
>>>> 1644       14371
>>>> Swap:             0           0           0
>>>> 
>>>> No problem I can see there.
>>>> 
>>>>> Do you have selinux enabled !
>>>>> If so, disable it by adding selinux=0 to /etc/default/grub and 
>>>>> rerun
>>>>> update-grub.
>>>> 
>>>> No, not enabled.
>>>> 
>>>>> Send the kernel version: uname -a
>>>> 
>>>> Linux mx.example.com 4.10.0-42-generic #46~16.04.1-Ubuntu SMP Mon
>>>> Dec 4
>>>> 15:57:59 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
>>>> 
>>>>> How much open file handles to your system allow per process ?
>>>>> send: ulimit -a
>>>> 
>>>> $ ulimit -a
>>>> Maximum size of core files created                           (kB,
>>>> -c) 0
>>>> Maximum size of a process’s data segment                     (kB,
>>>> -d) unlimited
>>>> Maximum size of files created by the shell                   (kB,
>>>> -f) unlimited
>>>> Maximum size that may be locked into memory                  (kB,
>>>> -l) 64
>>>> Maximum resident set size                                    (kB,
>>>> -m) unlimited
>>>> Maximum number of open file descriptors
>>>> (-n) 1024
>>>> Maximum stack size                                           (kB,
>>>> -s) 8192
>>>> Maximum amount of cpu time in seconds                   (seconds,
>>>> -t) unlimited
>>>> Maximum number of processes available to a single user
>>>> (-u) 64015
>>>> Maximum amount of virtual memory available to the shell      (kB,
>>>> -v) unlimited
>>>> 
>>>>> send dmesg: (is there a segfault).
>>>> 
>>>> The whole dmesg output is spammed by ufw and contains no useful
>>>> information whatsoever.
>>>> 
>>>>> It really could be, that you have a failing memory module:
>>>>> send dmidecode
>>>> 
>>>> I don't think this is likely as this is a virtual server.
>>>> 
>>>> $ dmidecode
>>>> # dmidecode 3.0
>>>> Getting SMBIOS data from sysfs.
>>>> SMBIOS 2.8 present.
>>>> 10 structures occupying 408 bytes.
>>>> Table at 0x000F68A0.
>>>> 
>>>> Handle 0x0000, DMI type 0, 24 bytes
>>>> BIOS Information
>>>> 	Vendor: SeaBIOS
>>>> 	Version: 1.10.2
>>>> 	Release Date: 04/01/2014
>>>> 	Address: 0xE8000
>>>> 	Runtime Size: 96 kB
>>>> 	ROM Size: 64 kB
>>>> 	Characteristics:
>>>> 		BIOS characteristics not supported
>>>> 		Targeted content distribution is supported
>>>> 	BIOS Revision: 0.0
>>>> 
>>>> Handle 0x0100, DMI type 1, 27 bytes
>>>> System Information
>>>> 	Manufacturer: Hetzner
>>>> 	Product Name: vServer
>>>> 	Version: 2
>>>> 	Serial Number: Not Specified
>>>> 	UUID: A8236400-D36B-0135-FE8F-10BF48D7F2C6
>>>> 	Wake-up Type: Power Switch
>>>> 	SKU Number: a8236400-d36b-0135-fe8f-10bf48d7f2c6
>>>> 	Family: Not Specified
>>>> 
>>>> Handle 0x0300, DMI type 3, 21 bytes
>>>> Chassis Information
>>>> 	Manufacturer: QEMU
>>>> 	Type: Other
>>>> 	Lock: Not Present
>>>> 	Version: pc-i440fx-2.10
>>>> 	Serial Number: Not Specified
>>>> 	Asset Tag: Not Specified
>>>> 	Boot-up State: Safe
>>>> 	Power Supply State: Safe
>>>> 	Thermal State: Safe
>>>> 	Security Status: Unknown
>>>> 	OEM Information: 0x00000000
>>>> 	Height: Unspecified
>>>> 	Number Of Power Cords: Unspecified
>>>> 	Contained Elements: 0
>>>> 
>>>> Handle 0x0400, DMI type 4, 42 bytes
>>>> Processor Information
>>>> 	Socket Designation: CPU 0
>>>> 	Type: Central Processor
>>>> 	Family: Other
>>>> 	Manufacturer: QEMU
>>>> 	ID: A1 06 02 00 FF FB 8B 07
>>>> 	Version: pc-i440fx-2.10
>>>> 	Voltage: Unknown
>>>> 	External Clock: Unknown
>>>> 	Max Speed: 2000 MHz
>>>> 	Current Speed: 2000 MHz
>>>> 	Status: Populated, Enabled
>>>> 	Upgrade: Other
>>>> 	L1 Cache Handle: Not Provided
>>>> 	L2 Cache Handle: Not Provided
>>>> 	L3 Cache Handle: Not Provided
>>>> 	Serial Number: Not Specified
>>>> 	Asset Tag: Not Specified
>>>> 	Part Number: Not Specified
>>>> 	Core Count: 4
>>>> 	Core Enabled: 4
>>>> 	Thread Count: 1
>>>> 	Characteristics: None
>>>> 
>>>> Handle 0x1000, DMI type 16, 23 bytes
>>>> Physical Memory Array
>>>> 	Location: Other
>>>> 	Use: System Memory
>>>> 	Error Correction Type: Multi-bit ECC
>>>> 	Maximum Capacity: 16 GB
>>>> 	Error Information Handle: Not Provided
>>>> 	Number Of Devices: 1
>>>> 
>>>> Handle 0x1100, DMI type 17, 40 bytes
>>>> Memory Device
>>>> 	Array Handle: 0x1000
>>>> 	Error Information Handle: Not Provided
>>>> 	Total Width: Unknown
>>>> 	Data Width: Unknown
>>>> 	Size: 16384 MB
>>>> 	Form Factor: DIMM
>>>> 	Set: None
>>>> 	Locator: DIMM 0
>>>> 	Bank Locator: Not Specified
>>>> 	Type: RAM
>>>> 	Type Detail: Other
>>>> 	Speed: Unknown
>>>> 	Manufacturer: QEMU
>>>> 	Serial Number: Not Specified
>>>> 	Asset Tag: Not Specified
>>>> 	Part Number: Not Specified
>>>> 	Rank: Unknown
>>>> 	Configured Clock Speed: Unknown
>>>> 	Minimum Voltage: Unknown
>>>> 	Maximum Voltage: Unknown
>>>> 	Configured Voltage: Unknown
>>>> 
>>>> Handle 0x1300, DMI type 19, 31 bytes
>>>> Memory Array Mapped Address
>>>> 	Starting Address: 0x00000000000
>>>> 	Ending Address: 0x000BFFFFFFF
>>>> 	Range Size: 3 GB
>>>> 	Physical Array Handle: 0x1000
>>>> 	Partition Width: 1
>>>> 
>>>> Handle 0x1301, DMI type 19, 31 bytes
>>>> Memory Array Mapped Address
>>>> 	Starting Address: 0x00100000000
>>>> 	Ending Address: 0x0043FFFFFFF
>>>> 	Range Size: 13 GB
>>>> 	Physical Array Handle: 0x1000
>>>> 	Partition Width: 1
>>>> 
>>>> Handle 0x2000, DMI type 32, 11 bytes
>>>> System Boot Information
>>>> 	Status: No errors detected
>>>> 
>>>> Handle 0x7F00, DMI type 127, 4 bytes
>>>> End Of Table
>>>> 
>>>>> Did you update your kernel days ago, if so, you sure ran into a 
>>>>> buggy
>>>>> kernel 4.9.65.
>>>>> I built a 4.9.75 PTI enabled kernel which i send you to test.
>>>> 
>>>> 4.10.0-42-generic
>>>> 
>>>>> Office 365 would be a bad and expensive choice.
>>>> 
>>>> I agree. I'd very much like to avoid it but when Kolab turn out to
>>>> have
>>>> issues with the current setup, I doubt I'll get another shot.
>>>> 
>>>> Best,
>>>> Marcel


More information about the users mailing list