LDAP server unavailable: SERVER_DOWN

Marcel Bischoff marcel at herrbischoff.com
Thu Jan 11 14:19:08 CET 2018


Hey Franz,

what do you know — tonight there wasn't a disorderly shutdown. The main
ingredient changed was a kernel update from 4.10.0-42-generic to
4.13.0-26-generic (a rather unusual jump), which was distributed through
the main package sources. So this supports your theory about something
amiss with the guest kernel.

I will monitor the situation carefully. Slowly I re-build some
confidence in this setup. Additionally, I will not touch Ubuntu again
for new deployments. Not with a stick. The AppArmor issue (everything
depends on it) broke the camels' back.

Best,
Marcel

On 18/01/11, Skale, Franz wrote:
>Hi Marcel,
>i now checked my ldap server and also found some messages regarding
>the ACL Plugin:
>Jan 10 22:32:54 localhost ns-slapd[98615]:
>[10/Jan/2018:22:32:54.579885565 +0100] connection - conn=2940 fd=284
>Attempt to release connection that is not acquire
>Jan 10 22:32:54 localhost ns-slapd[98615]:
>[10/Jan/2018:22:32:54.585434274 +0100] connection - conn=4470 fd=188
>Attempt to release connection that is not acquire
>Jan 10 23:50:07 localhost ns-slapd[98615]:
>[10/Jan/2018:23:50:07.863504579 +0100] NSACLPlugin -
>acl_access_allowed: Resetting aclpb_pblock 0x7fa3a3fe6a60 to pblo
>Jan 11 00:07:34 localhost ns-slapd[98615]:
>[11/Jan/2018:00:07:34.557315481 +0100] NSACLPlugin -
>acl_access_allowed: Resetting aclpb_pblock 0x7fa3a9ff2a60 to pblo
>Jan 11 03:12:32 localhost ns-slapd[98615]:
>[11/Jan/2018:03:12:32.383353274 +0100] NSACLPlugin -
>acl_access_allowed: Resetting aclpb_pblock 0x7fa3aeffca60 to pblo
>Jan 11 06:47:56 localhost ns-slapd[98615]:
>[11/Jan/2018:06:47:56.284946442 +0100] NSACLPlugin -
>acl_access_allowed: Resetting aclpb_pblock 0x7fa3a7feea60 to pblo
>Jan 11 06:48:00 localhost ns-slapd[98615]:
>[11/Jan/2018:06:48:00.364639406 +0100] NSACLPlugin -
>acl_access_allowed: Resetting aclpb_pblock 0x7fa3ae7fba60 to pblo
>Jan 11 07:53:34 localhost ns-slapd[98615]:
>[11/Jan/2018:07:53:34.001520691 +0100] NSACLPlugin -
>acl_access_allowed: Resetting aclpb_pblock 0x7fa3a17e1a60 to pblo
>Jan 11 07:58:34 localhost ns-slapd[98615]:
>[11/Jan/2018:07:58:34.641383768 +0100] connection - conn=3240 fd=278
>Attempt to release connection that is not acquire
>Jan 11 07:58:34 localhost ns-slapd[98615]:
>[11/Jan/2018:07:58:34.646688065 +0100] connection - conn=0 fd=0
>Attempt to release connection that is not acquired
>But i have no unordered shutdown mentioned anywhere in the logs.
>I also found out, that rasing the filelimit level doesn't work for the
>dirsrv service.
>Instead i raised it in the defaults config files:
>/etc/default/dirsrv:
>ulimit -n 65535
>/etc/default/dirsrv at mailserver:
>ulimit -n 65535
>/etc/default/dirsrv.systemd:
># uncomment this line to raise the file descriptor limit
>LimitNOFILE=65535
>If your dirsrv shutdown unordered i personall think you have a problem
>with either the host kernel or the guest kernel.
>dirsrv is multithreaded and creates a thread for every connection
>leaving alone filepointers it opens on demand.
>So even on my testserver with no user created it consumes 200
>filepointers after starting.
>
>Rgds.
>Franz
>Am 2018-01-10 22:05, schrieb Marcel Bischoff:
>>Hi Franz,
>>
>>so much for trying to remove AppArmor:
>>
>>Reading package lists... Done
>>Building dependency tree
>>Reading state information... Done
>>The following packages were automatically installed and are no
>>longer required:
>> 389-admin 389-admin-console 389-console 389-ds 389-ds-base
>>389-ds-base-libs 389-ds-console 389-ds-console-doc 389-dsgw
>>amavisd-new aspell aspell-en augeas-lenses chwala
>> clamav clamav-base clamav-daemon clamav-freshclam clamdscan
>>cyrus-imapd dictionaries-common emacsen-common erlang-base
>>erlang-crypto erlang-eimap erlang-goldrush erlang-lager
>> erlang-lager-syslog erlang-syntax-tools fontconfig guam irony
>>kolab-cli kolab-conf kolab-freebusy kolab-imap kolab-ldap kolab-mta
>>kolab-saslauthd kolab-schema kolab-server
>> kolab-syncroton kolab-webadmin kolab-xml ldap-utils libadminutil-data
>>libadminutil0 libapache2-mod-nss libapache2-mod-php
>>libapache2-mod-php7.0 libapparmor-perl libaspell15
>> libaudio2 libaugeas0 libauthen-sasl-perl libavahi-client3
>>libavahi-common-data libavahi-common3 libberkeleydb-perl
>>libcalendaring libcgi-fast-perl libcgi-pm-perl libclamav7
>> libconvert-binhex-perl libconvert-tnef-perl libconvert-uulib-perl
>>libcrypt-openssl-bignum-perl libcrypt-openssl-rsa-perl libcups2
>>libdigest-hmac-perl libds-admin-serv0
>> libencode-locale-perl libevent-core-2.0-5 libfcgi-perl libgd3
>>libhtml-parser-perl libhtml-tagset-perl libhtml-template-perl
>>libhttp-date-perl libhttp-message-perl libical1a
>> libidm-console-framework-java libio-html-perl libio-multiplex-perl
>>libio-socket-inet6-perl libio-socket-ssl-perl libio-stringy-perl
>>libjansson4 libjbig0 libjpeg-turbo8
>> libjpeg8 libjss-java libkolab2 libkolabxml1v5 liblcms2-2 libldap-java
>>libllvm3.6v5 liblwp-mediatypes-perl libmail-dkim-perl libmail-spf-perl
>>libmailtools-perl libmcrypt4
>> libmime-tools-perl libmng2 libmozilla-ldap-perl libmozldap-0d
>>libnet-cidr-perl libnet-dns-perl libnet-ip-perl libnet-libidn-perl
>>libnet-server-perl libnet-smtp-ssl-perl
>> libnet-ssleay-perl libnetaddr-ip-perl libnss3-tools
>>libperl4-corelibs-perl libqt4-dbus libqt4-declarative libqt4-network
>>libqt4-script libqt4-sql libqt4-sql-mysql libqt4-xml
>> libqt4-xmlpatterns libqtcore4 libqtdbus4 libqtgui4 libsctp1
>>libsocket-getaddrinfo-perl libsocket6-perl libtiff5
>>libunix-syslog-perl liburi-perl libvpx3 libxerces-c3.1
>> libxslt1.1 libzend-framework-php libzephyr4 mozldap-tools
>>mysql-client mysql-client-5.7 mysql-client-core-5.7
>>mysql-server-core-5.7 pax php php-auth-sasl php-cli php-common
>> php-curl php-gd php-http-request2 php-intl php-kolab php-kolabformat
>>php-ldap php-mail php-mail-mime php-mail-mimedecode php-mbstring
>>php-mcrypt php-mdb2
>> php-mdb2-driver-mysql php-monolog php-mysql php-net-idna2
>>php-net-ldap2 php-net-ldap3 php-net-sieve php-net-smtp php-net-socket
>>php-net-url2 php-pear php-pspell php-psr-log
>> php-sabre-dav-2.1 php-sabre-event php-sabre-http-3
>>php-sabre-vobject-3 php-xml php7.0 php7.0-cli php7.0-common
>>php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-json
>> php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-opcache
>>php7.0-pspell php7.0-readline php7.0-xml pykolab python-augeas
>>python-cheetah python-dateutil
>> python-gnupg python-icalendar python-kolab python-kolabformat
>>python-ldap python-pkg-resources python-pyasn1 python-pyasn1-modules
>>python-pymysql python-six python-sqlalchemy
>> python-sqlalchemy-ext python-tz python-tzlocal qdbus qt-at-spi
>>qtchooser qtcore4-l10n re2c roundcubemail roundcubemail-core
>>roundcubemail-plugin-acl
>> roundcubemail-plugin-archive roundcubemail-plugin-calendar
>>roundcubemail-plugin-contextmenu
>>roundcubemail-plugin-filesystem-attachments
>>roundcubemail-plugin-jqueryui
>> roundcubemail-plugin-kolab-activesync
>>roundcubemail-plugin-kolab-addressbook roundcubemail-plugin-kolab-auth
>>roundcubemail-plugin-kolab-config
>> roundcubemail-plugin-kolab-delegation
>>roundcubemail-plugin-kolab-files roundcubemail-plugin-kolab-folders
>>roundcubemail-plugin-kolab-notes roundcubemail-plugin-kolab-tags
>> roundcubemail-plugin-libcalendaring roundcubemail-plugin-libkolab
>>roundcubemail-plugin-managesieve roundcubemail-plugin-newmail-notifier
>>roundcubemail-plugin-odfviewer
>> roundcubemail-plugin-password roundcubemail-plugin-pdfviewer
>>roundcubemail-plugin-redundant-attachments
>>roundcubemail-plugin-tasklist roundcubemail-plugin-zipdownload
>> roundcubemail-plugins-kolab roundcubemail-skin-chameleon sa-compile
>>smarty3 spamassassin spamc wallace zend-framework zend-framework-bin
>>Use 'apt autoremove' to remove them.
>>The following packages will be REMOVED:
>> apparmor kolab kolab-webclient mysql-server mysql-server-5.7
>>0 upgraded, 0 newly installed, 5 to remove and 0 not upgraded.
>>After this operation, 50.2 MB disk space will be freed.
>>Do you want to continue? [Y/n]
>>
>>Which amounts to basically... everything.
>>
>>At least apparmor_status lets me know:
>>
>>apparmor module is loaded.
>>0 profiles are loaded.
>>0 profiles are in enforce mode.
>>0 profiles are in complain mode.
>>0 processes have profiles defined.
>>0 processes are in enforce mode.
>>0 processes are in complain mode.
>>0 processes are unconfined but have a profile defined.
>>
>>So that should be alright I guess.
>>
>>I have raised the limits and will monitor the outcome. Hopefully things
>>will quiet down now.
>>
>>Best,
>>Marcel
>>
>>On 18/01/10, Skale, Franz wrote:
>>>Hi Marcel,
>>>I would deactivate apparmor.
>>>Also i find that your ulimit -a output is wrong.
>>>You should raise the open files to 65k depending how much users you
>>>have.
>>>1024 is too small i guess.
>>>Consider this as a starting point:
>>>http://directory.fedoraproject.org/docs/389ds/FAQ/performance-tuning.html#linux
>>>Since you've a KVM guest, do you use PV or HVM ?
>>>Did you install a PTI kernel on the host ?
>>>If so, you should use a PTI kernel in the guest too.
>>>Jan  7 18:10:46 localhost kernel: [    0.000000] Kernel/User page
>>>tables isolation: enabled e.g (using 4.9.75).
>>>Just a thought.
>>>
>>>
>>>Rgds.
>>>Franz
>>>
>>>
>>>Am 2018-01-10 16:50, schrieb Marcel Bischoff:
>>>>I have been able to pull the kernel messages from the logwatch
>>>>output,
>>>>didn't think of this before. Maybe it helps in homing in on the
>>>>cause. I
>>>>couldn't spot something obvious though. Maybe AppArmor does something
>>>>undesirable? I remember running into issues with it years ago in
>>>>another
>>>>context.
>>>>
>>>>I will uninstall it tonight, reboot the server and report on my
>>>>progress
>>>>(or lack thereof).
>>>>
>>>>Thanks again for bearing with me!
>>>>
>>>>--------------------- Kernel Begin ------------------------
>>>>
>>>>
>>>>1 Time(s): #2
>>>>1 Time(s): #3
>>>>1 Time(s): 1 disabled
>>>>1 Time(s): 2 disabled
>>>>1 Time(s): 3 disabled
>>>>1 Time(s): 4 disabled
>>>>1 Time(s): 5 disabled
>>>>1 Time(s): 6 disabled
>>>>1 Time(s): 7 disabled
>>>>1 Time(s): ACPI: 1 ACPI AML tables successfully acquired and loaded
>>>>1 Time(s): ACPI: Added _OSI(Module Device)
>>>>1 Time(s): ACPI: Added _OSI(Processor Aggregator Device)
>>>>1 Time(s): ACPI: Added _OSI(Processor Device)
>>>>1 Time(s): ACPI: Early table checksum verification disabled
>>>>1 Time(s): ACPI: IRQ11 used by override.
>>>>1 Time(s): ACPI: IRQ5 used by override.
>>>>1 Time(s): ACPI: IRQ9 used by override.
>>>>1 Time(s): ACPI: Interpreter enabled
>>>>1 Time(s): ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11
>>>>1 Time(s): ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
>>>>1 Time(s): ACPI: Power Button [PWRF]
>>>>1 Time(s): ACPI: Using IOAPIC for interrupt routing
>>>>1 Time(s): ACPI: bus type PCI registered
>>>>1 Time(s): ACPI: bus type USB registered
>>>>1 Time(s): AES CTR mode by8 optimization enabled
>>>>1 Time(s): AMD AuthenticAMD
>>>>1 Time(s): AVX version of gcm_enc/dec engaged.
>>>>1 Time(s): AppArmor: AppArmor Filesystem Enabled
>>>>1 Time(s): AppArmor: AppArmor initialized
>>>>1 Time(s): AppArmor: AppArmor sha1 policy hashing enabled
>>>>1 Time(s): Booting paravirtualized kernel on KVM
>>>>1 Time(s): Btrfs loaded, crc32c=crc32c-intel
>>>>1 Time(s): Build-time adjustment of leaf fanout to 64.
>>>>1 Time(s): Built 1 zonelists in Node order, mobility grouping on.
>>>>Total pages: 4128613
>>>>1 Time(s): Calgary: Unable to locate Rio Grande table in EBDA -
>>>>bailing!
>>>>1 Time(s): Calgary: detecting Calgary via BIOS EBDA area
>>>>1 Time(s): Calibrating delay loop (skipped) preset value.. 4199.99
>>>>BogoMIPS (lpj=8399992)
>>>>1 Time(s): Centaur CentaurHauls
>>>>1 Time(s): DMA zone: 21 pages reserved
>>>>1 Time(s): DMA zone: 64 pages used for memmap
>>>>1 Time(s): DMA32 zone: 12224 pages used for memmap
>>>>1 Time(s): Device   empty
>>>>1 Time(s): EDD information not available.
>>>>1 Time(s): EXT4-fs (sda1): mounted filesystem with ordered data mode.
>>>>Opts: (null)
>>>>1 Time(s): EXT4-fs (sda1): re-mounted. Opts: discard
>>>>1 Time(s): Early memory node ranges
>>>>1 Time(s): Freeing SMP alternatives memory: 32K
>>>>1 Time(s): Freeing unused kernel memory: 1156K
>>>>1 Time(s): Freeing unused kernel memory: 2228K
>>>>1 Time(s): Freeing unused kernel memory: 268K
>>>>1 Time(s): GHES: HEST is not enabled!
>>>>1 Time(s): Hierarchical RCU implementation.
>>>>1 Time(s): Hypervisor detected: KVM
>>>>1 Time(s): Initialise system trusted keyrings
>>>>1 Time(s): Intel GenuineIntel
>>>>1 Time(s): KERNEL supported cpus:
>>>>1 Time(s): KVM setup async PF for cpu 1
>>>>1 Time(s): KVM setup async PF for cpu 2
>>>>1 Time(s): KVM setup async PF for cpu 3
>>>>1 Time(s): Key type asymmetric registered
>>>>1 Time(s): Key type big_key registered
>>>>1 Time(s): Key type dns_resolver registered
>>>>1 Time(s): Key type encrypted registered
>>>>1 Time(s): Key type trusted registered
>>>>1 Time(s): MTRR default type: write-back
>>>>1 Time(s): MTRR fixed ranges enabled:
>>>>1 Time(s): MTRR variable ranges enabled:
>>>>1 Time(s): Magic number: 2:724:141
>>>>1 Time(s): Mount-cache hash table entries: 32768 (order: 6, 262144
>>>>bytes)
>>>>1 Time(s): Mountpoint-cache hash table entries: 32768 (order: 6,
>>>>262144 bytes)
>>>>1 Time(s): Movable zone start for each node
>>>>1 Time(s): NET: Registered protocol family 1
>>>>1 Time(s): NET: Registered protocol family 16
>>>>1 Time(s): NET: Registered protocol family 17
>>>>1 Time(s): NET: Registered protocol family 2
>>>>1 Time(s): NR_IRQS:524544 nr_irqs:456 16
>>>>1 Time(s): NX (Execute Disable) protection: active
>>>>1 Time(s): NetLabel:  domain hash size = 128
>>>>1 Time(s): NetLabel:  protocols = UNLABELED CIPSOv4 CALIPSO
>>>>1 Time(s): NetLabel:  unlabeled traffic allowed by default
>>>>1 Time(s): NetLabel: Initializing
>>>>1 Time(s): No NUMA configuration found
>>>>1 Time(s): Normal zone: 53248 pages used for memmap
>>>>1 Time(s): PCCT header not found.
>>>>1 Time(s): PCI-DMA: Using software bounce buffering for IO (SWIOTLB)
>>>>1 Time(s): PCI: Using ACPI for IRQ routing
>>>>1 Time(s): PCI: Using configuration type 1 for base access
>>>>1 Time(s): PCI: Using host bridge windows from ACPI; if
>>>>necessary, use
>>>>"pci=nocrs" and report a bug
>>>>1 Time(s): PCI: pci_cache_line_size set to 64 bytes
>>>>1 Time(s): PM: Hibernation image not present or could not be loaded.
>>>>1 Time(s): PPP generic driver version 2.4.2
>>>>1 Time(s): Performance Events: unsupported p6 CPU model 42 no PMU
>>>>driver, software events only.
>>>>1 Time(s): Policy zone: Normal
>>>>2 Time(s): Process accounting resumed
>>>>1 Time(s): RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=4.
>>>>1 Time(s): RCU: Adjusting geometry for rcu_fanout_leaf=64,
>>>>nr_cpu_ids=4
>>>>1 Time(s): SCSI subsystem initialized
>>>>1 Time(s): SMBIOS 2.8 present.
>>>>1 Time(s): Scanning 1 areas for low memory corruption
>>>>1 Time(s): Security Framework initialized
>>>>1 Time(s): Segment Routing with IPv6
>>>>1 Time(s): Switched APIC routing to physical x2apic.
>>>>1 Time(s): TSC deadline timer enabled
>>>>1 Time(s): UDP hash table entries: 8192 (order: 6, 262144 bytes)
>>>>1 Time(s): UDP-Lite hash table entries: 8192 (order: 6, 262144 bytes)
>>>>1 Time(s): Unpacking initramfs...
>>>>1 Time(s): Using ACPI (MADT) for SMP configuration information
>>>>1 Time(s): Write protecting the kernel read-only data: 14336k
>>>>1 Time(s): Yama: becoming mindful.
>>>>1 Time(s): Zone ranges:
>>>>1 Time(s): acpi device:12: hash matches
>>>>1 Time(s): acpiphp: Slot [11] registered
>>>>1 Time(s): acpiphp: Slot [12] registered
>>>>1 Time(s): acpiphp: Slot [13] registered
>>>>1 Time(s): acpiphp: Slot [14] registered
>>>>1 Time(s): acpiphp: Slot [15] registered
>>>>1 Time(s): acpiphp: Slot [16] registered
>>>>1 Time(s): acpiphp: Slot [17] registered
>>>>1 Time(s): acpiphp: Slot [18] registered
>>>>1 Time(s): acpiphp: Slot [19] registered
>>>>1 Time(s): acpiphp: Slot [21] registered
>>>>1 Time(s): acpiphp: Slot [22] registered
>>>>1 Time(s): acpiphp: Slot [23] registered
>>>>1 Time(s): acpiphp: Slot [24] registered
>>>>1 Time(s): acpiphp: Slot [25] registered
>>>>1 Time(s): acpiphp: Slot [26] registered
>>>>1 Time(s): acpiphp: Slot [27] registered
>>>>1 Time(s): acpiphp: Slot [28] registered
>>>>1 Time(s): acpiphp: Slot [29] registered
>>>>1 Time(s): acpiphp: Slot [31] registered
>>>>1 Time(s): acpiphp: Slot [3] registered
>>>>1 Time(s): acpiphp: Slot [4] registered
>>>>1 Time(s): acpiphp: Slot [5] registered
>>>>1 Time(s): acpiphp: Slot [6] registered
>>>>1 Time(s): acpiphp: Slot [7] registered
>>>>1 Time(s): acpiphp: Slot [8] registered
>>>>1 Time(s): acpiphp: Slot [9] registered
>>>>1 Time(s): async_tx: api initialized (async)
>>>>1 Time(s): audit: initializing netlink subsys (disabled)
>>>>1 Time(s): clocksource: Switched to clocksource kvm-clock
>>>>1 Time(s): cpuidle: using governor ladder
>>>>1 Time(s): cpuidle: using governor menu
>>>>1 Time(s): devtmpfs: initialized
>>>>1 Time(s): ehci-pci: EHCI PCI platform driver
>>>>1 Time(s): ehci-platform: EHCI generic platform driver
>>>>1 Time(s): evm: security.SMACK64
>>>>1 Time(s): evm: security.SMACK64EXEC
>>>>1 Time(s): evm: security.SMACK64MMAP
>>>>1 Time(s): evm: security.SMACK64TRANSMUTE
>>>>1 Time(s): evm: security.capability
>>>>1 Time(s): evm: security.ima
>>>>1 Time(s): evm: security.selinux
>>>>1 Time(s): ftrace: allocating 34227 entries in 134 pages
>>>>1 Time(s): fuse init (API version 7.26)
>>>>1 Time(s): hidraw: raw HID events driver (C) Jiri Kosina
>>>>1 Time(s): hpet clockevent registered
>>>>1 Time(s): i2c /dev entries driver
>>>>1 Time(s): ima: No TPM chip found, activating TPM-bypass! (rc=-19)
>>>>1 Time(s): intel_idle: does not run on family 6 model 42
>>>>1 Time(s): io scheduler cfq registered
>>>>1 Time(s): io scheduler deadline registered
>>>>1 Time(s): io scheduler noop registered (default)
>>>>1 Time(s): ledtrig-cpu: registered to indicate activity on CPUs
>>>>1 Time(s): libphy: Fixed MDIO Bus: probed
>>>>1 Time(s): loop: module loaded
>>>>1 Time(s): mousedev: PS/2 mouse device common for all mice
>>>>1 Time(s): ohci-pci: OHCI PCI platform driver
>>>>1 Time(s): ohci-platform: OHCI generic platform driver
>>>>1 Time(s): ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
>>>>1 Time(s): pinctrl core: initialized pinctrl subsystem
>>>>1 Time(s): pnp: PnP ACPI init
>>>>1 Time(s): pnp: PnP ACPI: found 5 devices
>>>>1 Time(s): ppdev: user-space parallel port driver
>>>>1 Time(s): raid6: .... xor() 6424 MB/s, rmw enabled
>>>>1 Time(s): raid6: sse2x1   gen()  6723 MB/s
>>>>1 Time(s): raid6: sse2x1   xor()  5185 MB/s
>>>>1 Time(s): raid6: sse2x2   gen()  8399 MB/s
>>>>1 Time(s): raid6: sse2x2   xor()  5585 MB/s
>>>>1 Time(s): raid6: sse2x4   gen()  9942 MB/s
>>>>1 Time(s): raid6: sse2x4   xor()  6424 MB/s
>>>>1 Time(s): raid6: using algorithm sse2x4 gen() 9942 MB/s
>>>>1 Time(s): raid6: using ssse3x2 recovery algorithm
>>>>1 Time(s): random: crng init done
>>>>1 Time(s): random: fast init done
>>>>8 Time(s): random: systemd-udevd: uninitialized urandom read (16
>>>>bytes read)
>>>>2 Time(s): random: udevadm: uninitialized urandom read (16 bytes
>>>>read)
>>>>1 Time(s): registered taskstats version 1
>>>>1 Time(s): scsi host1: ata_piix
>>>>1 Time(s): scsi host2: Virtio SCSI HBA
>>>>1 Time(s): sda: sda1
>>>>1 Time(s): setup_percpu: NR_CPUS:8192 nr_cpumask_bits:4 nr_cpu_ids:4
>>>>nr_node_ids:1
>>>>1 Time(s): smp: Bringing up secondary CPUs ...
>>>>1 Time(s): smp: Brought up 1 node, 4 CPUs
>>>>1 Time(s): smpboot: Max logical packages: 1
>>>>1 Time(s): smpboot: Total of 4 processors activated (16799.98
>>>>BogoMIPS)
>>>>1 Time(s): tun: Universal TUN/TAP device driver, 1.6
>>>>1 Time(s): uhci_hcd: USB Universal Host Controller Interface driver
>>>>1 Time(s): usb 1-1: Manufacturer: QEMU
>>>>1 Time(s): usb 1-1: New USB device strings: Mfr=1, Product=3,
>>>>SerialNumber=5
>>>>1 Time(s): usb 1-1: Product: QEMU USB Tablet
>>>>1 Time(s): usb 1-1: SerialNumber: 42
>>>>1 Time(s): usb 1-1: new full-speed USB device number 2 using uhci_hcd
>>>>1 Time(s): usb usb1: New USB device strings: Mfr=3, Product=2,
>>>>SerialNumber=1
>>>>1 Time(s): usb usb1: Product: UHCI Host Controller
>>>>1 Time(s): usbcore: registered new device driver usb
>>>>1 Time(s): usbcore: registered new interface driver hub
>>>>1 Time(s): usbcore: registered new interface driver usbfs
>>>>1 Time(s): usbcore: registered new interface driver usbhid
>>>>1 Time(s): usbhid: USB HID core driver
>>>>1 Time(s): vgaarb: loaded
>>>>1 Time(s): x2apic enabled
>>>>1 Time(s): x86/fpu: xstate_offset[2]:  576, xstate_sizes[2]:  256
>>>>1 Time(s): x86/mm: Checked W+X mappings: passed, no W+X pages found.
>>>>1 Time(s): x86/mm: Memory block size: 128MB
>>>>1 Time(s): x86: Booting SMP configuration:
>>>>1 Time(s): xor: automatically using best checksumming function   avx
>>>>1 Time(s): zbud: loaded
>>>>1 Time(s): zswap: loaded using pool lzo/zbud
>>>>
>>>>---------------------- Kernel End -------------------------
>>>>
>>>>On 18/01/10, Marcel Bischoff wrote:
>>>>>On 18/01/10, Skale, Franz wrote:
>>>>>>06:21 is the lograotation, so no problem. Same by me.
>>>>>
>>>>>A bit reassuring but still: shouldn't the service cleanly restart
>>>>>instead of barfing "Disorderly Shutdown"?
>>>>>
>>>>>>What strucks me is, that it seems that ns-slapd as to reallocate
>>>>>>memory.
>>>>>>How much memory does your server have ?
>>>>>>send free -m
>>>>>
>>>>>$ free -m
>>>>>           total        used        free      shared  buff/cache
>>>>>available
>>>>>Mem:          16045        1304       13096          56
>>>>>1644       14371
>>>>>Swap:             0           0           0
>>>>>
>>>>>No problem I can see there.
>>>>>
>>>>>>Do you have selinux enabled !
>>>>>>If so, disable it by adding selinux=0 to /etc/default/grub
>>>>>>and rerun
>>>>>>update-grub.
>>>>>
>>>>>No, not enabled.
>>>>>
>>>>>>Send the kernel version: uname -a
>>>>>
>>>>>Linux mx.example.com 4.10.0-42-generic #46~16.04.1-Ubuntu SMP Mon
>>>>>Dec 4
>>>>>15:57:59 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
>>>>>
>>>>>>How much open file handles to your system allow per process ?
>>>>>>send: ulimit -a
>>>>>
>>>>>$ ulimit -a
>>>>>Maximum size of core files created                           (kB,
>>>>>-c) 0
>>>>>Maximum size of a process’s data segment                     (kB,
>>>>>-d) unlimited
>>>>>Maximum size of files created by the shell                   (kB,
>>>>>-f) unlimited
>>>>>Maximum size that may be locked into memory                  (kB,
>>>>>-l) 64
>>>>>Maximum resident set size                                    (kB,
>>>>>-m) unlimited
>>>>>Maximum number of open file descriptors
>>>>>(-n) 1024
>>>>>Maximum stack size                                           (kB,
>>>>>-s) 8192
>>>>>Maximum amount of cpu time in seconds                   (seconds,
>>>>>-t) unlimited
>>>>>Maximum number of processes available to a single user
>>>>>(-u) 64015
>>>>>Maximum amount of virtual memory available to the shell      (kB,
>>>>>-v) unlimited
>>>>>
>>>>>>send dmesg: (is there a segfault).
>>>>>
>>>>>The whole dmesg output is spammed by ufw and contains no useful
>>>>>information whatsoever.
>>>>>
>>>>>>It really could be, that you have a failing memory module:
>>>>>>send dmidecode
>>>>>
>>>>>I don't think this is likely as this is a virtual server.
>>>>>
>>>>>$ dmidecode
>>>>># dmidecode 3.0
>>>>>Getting SMBIOS data from sysfs.
>>>>>SMBIOS 2.8 present.
>>>>>10 structures occupying 408 bytes.
>>>>>Table at 0x000F68A0.
>>>>>
>>>>>Handle 0x0000, DMI type 0, 24 bytes
>>>>>BIOS Information
>>>>>	Vendor: SeaBIOS
>>>>>	Version: 1.10.2
>>>>>	Release Date: 04/01/2014
>>>>>	Address: 0xE8000
>>>>>	Runtime Size: 96 kB
>>>>>	ROM Size: 64 kB
>>>>>	Characteristics:
>>>>>		BIOS characteristics not supported
>>>>>		Targeted content distribution is supported
>>>>>	BIOS Revision: 0.0
>>>>>
>>>>>Handle 0x0100, DMI type 1, 27 bytes
>>>>>System Information
>>>>>	Manufacturer: Hetzner
>>>>>	Product Name: vServer
>>>>>	Version: 2
>>>>>	Serial Number: Not Specified
>>>>>	UUID: A8236400-D36B-0135-FE8F-10BF48D7F2C6
>>>>>	Wake-up Type: Power Switch
>>>>>	SKU Number: a8236400-d36b-0135-fe8f-10bf48d7f2c6
>>>>>	Family: Not Specified
>>>>>
>>>>>Handle 0x0300, DMI type 3, 21 bytes
>>>>>Chassis Information
>>>>>	Manufacturer: QEMU
>>>>>	Type: Other
>>>>>	Lock: Not Present
>>>>>	Version: pc-i440fx-2.10
>>>>>	Serial Number: Not Specified
>>>>>	Asset Tag: Not Specified
>>>>>	Boot-up State: Safe
>>>>>	Power Supply State: Safe
>>>>>	Thermal State: Safe
>>>>>	Security Status: Unknown
>>>>>	OEM Information: 0x00000000
>>>>>	Height: Unspecified
>>>>>	Number Of Power Cords: Unspecified
>>>>>	Contained Elements: 0
>>>>>
>>>>>Handle 0x0400, DMI type 4, 42 bytes
>>>>>Processor Information
>>>>>	Socket Designation: CPU 0
>>>>>	Type: Central Processor
>>>>>	Family: Other
>>>>>	Manufacturer: QEMU
>>>>>	ID: A1 06 02 00 FF FB 8B 07
>>>>>	Version: pc-i440fx-2.10
>>>>>	Voltage: Unknown
>>>>>	External Clock: Unknown
>>>>>	Max Speed: 2000 MHz
>>>>>	Current Speed: 2000 MHz
>>>>>	Status: Populated, Enabled
>>>>>	Upgrade: Other
>>>>>	L1 Cache Handle: Not Provided
>>>>>	L2 Cache Handle: Not Provided
>>>>>	L3 Cache Handle: Not Provided
>>>>>	Serial Number: Not Specified
>>>>>	Asset Tag: Not Specified
>>>>>	Part Number: Not Specified
>>>>>	Core Count: 4
>>>>>	Core Enabled: 4
>>>>>	Thread Count: 1
>>>>>	Characteristics: None
>>>>>
>>>>>Handle 0x1000, DMI type 16, 23 bytes
>>>>>Physical Memory Array
>>>>>	Location: Other
>>>>>	Use: System Memory
>>>>>	Error Correction Type: Multi-bit ECC
>>>>>	Maximum Capacity: 16 GB
>>>>>	Error Information Handle: Not Provided
>>>>>	Number Of Devices: 1
>>>>>
>>>>>Handle 0x1100, DMI type 17, 40 bytes
>>>>>Memory Device
>>>>>	Array Handle: 0x1000
>>>>>	Error Information Handle: Not Provided
>>>>>	Total Width: Unknown
>>>>>	Data Width: Unknown
>>>>>	Size: 16384 MB
>>>>>	Form Factor: DIMM
>>>>>	Set: None
>>>>>	Locator: DIMM 0
>>>>>	Bank Locator: Not Specified
>>>>>	Type: RAM
>>>>>	Type Detail: Other
>>>>>	Speed: Unknown
>>>>>	Manufacturer: QEMU
>>>>>	Serial Number: Not Specified
>>>>>	Asset Tag: Not Specified
>>>>>	Part Number: Not Specified
>>>>>	Rank: Unknown
>>>>>	Configured Clock Speed: Unknown
>>>>>	Minimum Voltage: Unknown
>>>>>	Maximum Voltage: Unknown
>>>>>	Configured Voltage: Unknown
>>>>>
>>>>>Handle 0x1300, DMI type 19, 31 bytes
>>>>>Memory Array Mapped Address
>>>>>	Starting Address: 0x00000000000
>>>>>	Ending Address: 0x000BFFFFFFF
>>>>>	Range Size: 3 GB
>>>>>	Physical Array Handle: 0x1000
>>>>>	Partition Width: 1
>>>>>
>>>>>Handle 0x1301, DMI type 19, 31 bytes
>>>>>Memory Array Mapped Address
>>>>>	Starting Address: 0x00100000000
>>>>>	Ending Address: 0x0043FFFFFFF
>>>>>	Range Size: 13 GB
>>>>>	Physical Array Handle: 0x1000
>>>>>	Partition Width: 1
>>>>>
>>>>>Handle 0x2000, DMI type 32, 11 bytes
>>>>>System Boot Information
>>>>>	Status: No errors detected
>>>>>
>>>>>Handle 0x7F00, DMI type 127, 4 bytes
>>>>>End Of Table
>>>>>
>>>>>>Did you update your kernel days ago, if so, you sure ran
>>>>>>into a buggy
>>>>>>kernel 4.9.65.
>>>>>>I built a 4.9.75 PTI enabled kernel which i send you to test.
>>>>>
>>>>>4.10.0-42-generic
>>>>>
>>>>>>Office 365 would be a bad and expensive choice.
>>>>>
>>>>>I agree. I'd very much like to avoid it but when Kolab turn out to
>>>>>have
>>>>>issues with the current setup, I doubt I'll get another shot.
>>>>>
>>>>>Best,
>>>>>Marcel


More information about the users mailing list